Principles: Reference "Privacy Anti-Patterns in Standards"

[AmeliaBR]

The recently-published Privacy Anti-Patterns in Standards report from W3C PING should be added to the list of references for the privacy & security part of the Guiding Principles.

I can add the reference, but I'm filing this as an issue to remind other people to read the report! We may want to use its recommendations for additional "tags" for summarizing conclusions on individual capabilities.

[AmeliaBR]

Another interesting reference: Report from W3C Workshop on Permissions and User Consent (Sept 2018)

[AmeliaBR]

Another reference from the W3 blog, about permission prompts: https://www.w3.org/blog/2019/07/adding-another-permission/

Especially noteworthy is a mention of something that Peter and I have discussed: many uses of geolocation could be better served by a more shielded location feature.

For example, we could design a "location picker" rather than a geolocation permission. User agents could implement an input type where the user selects either her current location or a named location that she has saved and often wants to search about.

[Malvoz]

Another reference, about mitigating fingerprinting: https://www.w3.org/TR/fingerprinting-guidance/