{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/wcag/issues/407","repository_url":"https://api.github.com/repos/w3c/wcag","labels_url":"https://api.github.com/repos/w3c/wcag/issues/407/labels{/name}","comments_url":"https://api.github.com/repos/w3c/wcag/issues/407/comments","events_url":"https://api.github.com/repos/w3c/wcag/issues/407/events","html_url":"https://github.com/w3c/wcag/issues/407","id":337074387,"node_id":"MDU6SXNzdWUzMzcwNzQzODc=","number":407,"title":"SC 1.3.5 Identify Input Purpose - autocomplete technique VS Privacy/Security","user":{"login":"michael-n-cooper","id":1991467,"node_id":"MDQ6VXNlcjE5OTE0Njc=","avatar_url":"https://avatars2.githubusercontent.com/u/1991467?v=4","gravatar_id":"","url":"https://api.github.com/users/michael-n-cooper","html_url":"https://github.com/michael-n-cooper","followers_url":"https://api.github.com/users/michael-n-cooper/followers","following_url":"https://api.github.com/users/michael-n-cooper/following{/other_user}","gists_url":"https://api.github.com/users/michael-n-cooper/gists{/gist_id}","starred_url":"https://api.github.com/users/michael-n-cooper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michael-n-cooper/subscriptions","organizations_url":"https://api.github.com/users/michael-n-cooper/orgs","repos_url":"https://api.github.com/users/michael-n-cooper/repos","events_url":"https://api.github.com/users/michael-n-cooper/events{/privacy}","received_events_url":"https://api.github.com/users/michael-n-cooper/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-06-29T17:15:17Z","updated_at":"2018-06-29T17:15:21Z","closed_at":null,"author_association":"MEMBER","body":"_From @goetsu on June 2, 2018 8:43_\n\nAs the Working group considered an exception to this SC in a context where it may be problematic for security or privacy.\r\n\r\nFor example imagine a shared device showing (or a lost device by its owner) a website using autocomplete to comply with this SC. If user input personal data and save them by mistake or just because he doesn't know or understand that they will be saved in the browser once for good. It mean that the next people that will use the device will have access to the personal data of the previous user.\r\n\r\nThis may be a serious issue  to consider and I don't think autocomplete must be showed in the understanding as the best and technique to use. This leave use to some aria techniques but that are still fare from being standardized and implemented in tools\n\n_Copied from original issue: w3c/wcag21#948_"},"comment":{"url":"https://api.github.com/repos/w3c/wcag/issues/comments/401418096","html_url":"https://github.com/w3c/wcag/issues/407#issuecomment-401418096","issue_url":"https://api.github.com/repos/w3c/wcag/issues/407","id":401418096,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMTQxODA5Ng==","user":{"login":"michael-n-cooper","id":1991467,"node_id":"MDQ6VXNlcjE5OTE0Njc=","avatar_url":"https://avatars2.githubusercontent.com/u/1991467?v=4","gravatar_id":"","url":"https://api.github.com/users/michael-n-cooper","html_url":"https://github.com/michael-n-cooper","followers_url":"https://api.github.com/users/michael-n-cooper/followers","following_url":"https://api.github.com/users/michael-n-cooper/following{/other_user}","gists_url":"https://api.github.com/users/michael-n-cooper/gists{/gist_id}","starred_url":"https://api.github.com/users/michael-n-cooper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michael-n-cooper/subscriptions","organizations_url":"https://api.github.com/users/michael-n-cooper/orgs","repos_url":"https://api.github.com/users/michael-n-cooper/repos","events_url":"https://api.github.com/users/michael-n-cooper/events{/privacy}","received_events_url":"https://api.github.com/users/michael-n-cooper/received_events","type":"User","site_admin":false},"created_at":"2018-06-29T17:15:20Z","updated_at":"2018-06-29T17:15:20Z","author_association":"MEMBER","body":"_From @alastc on June 6, 2018 14:20_\n\nI've talked this through with a public org who had set autocomplete to \"off\" due to how they thought browser entry happens, and it was especially complex because they are in the process of getting organizations off shared-logins and on to unique logins.\r\n\r\nThe key factors for them were:\r\n- It is dependent on the browser's profile, so doesn't get used by other logins on the same computer.\r\n- Regardless of their markup, it was already being filled in by some of the more 'aggressive' plugins (e.g. my lastpass pluggin).\r\n- The user could review the information (in the text fields) before it was submitted, there was no auto-submit. (This was perhaps the key misunderstanding for the lawyer.)\r\n\r\nI'm struggling to see a scenario where autofill causes an issue, given that:\r\n\r\n- It must be on the same computer, login and browser to work.\r\n- It is opt-in by the user, usually at the point of saving any data in the first place.\r\n- The browser history provides far more detail about what people have done.\r\n- It is easy to wipe both history and form data.\r\n- It is easy to engage a privacy mode, such as private browsing.\r\n\r\nCan you see a specific scenario where it could be a problem, or is a general feeling that there must be a problem?"}}
{"actor":{"display_login":"michael-n-cooper"}}