Hi Roger,
Thank you for taking the time to look at our patches.
One of the reasons for introducing the address parameter on each of
the API calls was to prevent such accidental interference: the
application has to know the endpoint address before calling a DTMF API
This is of course no protection against actively malicious (or just
really dumb) apps, but those could do a lot of other things, like
dropping calls while you speak, dialing numbers you didn't want ...
etc.
On the other hand, it does prevent malicious apps from tricking you
into giving your telebank password to a phishing app, if they somehow
managed to place a call to a different number without you noticing.
We considered creating a session oriented Call API, where ẹ.g. an
application could be the owner of a Call, and only that app (and the
system phone app) could control it, like send dtmf, put it on hold, or
hang up. However, we thought that it would be simpler to first get
this stateless API into the platform, and if there is sufficient
interest (mostly from the Google side :) ), we could work on a
stateful Call API.
Of course we are open to any suggestion, so please feel free to point
out any issues with our approach.
Best Regards,
Gergely
2013/6/20 Roger Madsen <
roger....@sonymobile.com>: