1705466 - Much less pronounced ⚠️ warning when user picks "scary" screen sharing sources (regression)

Status: NEW

(Firefox :: Site Permissions, defect, P3)

Description

[Jan-Ivar Bruaroey [:jib] (needinfo? me)]

Attachment: ScarySourcesDifferentiationAfter.png

Background

The Screen Capture specification says that "User Agents are encouraged to warn users against sharing browser display devices as well as monitor display devices where browser windows are visible, or otherwise try to discourage their selection on the basis that these represent a significantly higher risk when shared."

This protects against attacks on the same-origin policy — It even suggests elevated permissions (a secondary opt-in mechanism), so Firefox's existing solution of adding a ⚠️ message was already weak sauce (yet superior to Chrome which makes no distinction).

Issue

Firefox's screen-sharing picker lets users choose what to share, but not all choices are equally safe. Recent layout changes appear to weaken this distinction significantly:

1. The ⚠️ warning symbol has been removed
2. The high-contrast black text on yellow background has been replaced with muted colors
3. The warning is no longer on-top of the preview, disassociating it from the current choice

As a result, the concept that some choices are safer than others appears lost.

Comment 1

[Jan-Ivar Bruaroey [:jib] (needinfo? me)]

Attachment: ScarySourcesDifferentiationBefore.png

Comment 2

[Mike Conley (:mconley) (:⚙️)]

Redirecting to tduzan.

Comment 3

[Tyler Duzan]

I'm not yet prepared to weigh in on this, I will surface this with the UX team and then come back with a response on this. Thanks for bringing this up jib.

Comment 4

[Romain Testard [:RT]]

Is that something you managed to talk to UX about Tyler?
This feels like an area where UR could be valuable to better understand the balance of not scaring users off VS informing them of the implications of the choices.

Comment 5

[Tyler Duzan]

This was only briefly surfaced, I agree this probably needs a more focused UR ask. It wasn't clear from the one small discussion what direction should be taken here. Would you be able to take this since I'm shifting to MR2, Romain? Thanks.