Sunday, October 30, 2011

The Priority of Constituencies

Lawrence Lessig wrote in Code is Law that the choices we make in writing code embody our values.  This observation is especially true when building a browser because the browser mediates interactions between many distinct entities.  Because the browser's security policy is at the heart of mediating those interactions, we should ask ourselves what values the browser's security policy embodies.

One key value is the priority of constituencies, which is enshrined in the HTML Design Principles:
In case of conflict, consider users over authors over implementors over specifiers over theoretical purity.
To better understand this principle, let's consider a specific example: whether the browser's password manager should be enabled for a given web site.

The password manager is a source of conflict for these competing interests.  Implementors (myself included) believe that password managers improve security by reducing the costs of using a large number of more complex passwords.  Many banks, however, disagree.  They believe that password managers reduce security because passwords stored in password managers can be stolen by miscreants.

How do browser vendors resolve this conflict?  By default, we enable the password manager.  Because users have a higher priority than implementors (i.e., browser vendors), browsers let users turn the password manager off.  Because authors (i.e., site operators) also have a higher priority than browser vendors, browsers let authors disable the password manager on their own web sites by setting autocomplete=off.

The careful reader will have noticed that the scheme above violates the priority of constituencies in one case.  What if the user wants to use the password manager on a web site sets autocomplete=off?  Because users have a higher priority than authors, the browser should resolve this conflict in favor of the user.  Typically, browsers handle this case via their extension system.  For example, the autocomplete=on extension lets users override authors who want to disable the password manager.

How, then, should we respond to web site operators who wish to block or override these sorts of extensions?  As long as we believe that these extensions faithfully enact the user's will, we're hard-pressed to let authors block these extensions because that would violate the priority of constituencies.  Instead, we ask authors to be humble and accept the user as sovereign.

726 comments:

  1. As the author of that extension, let me also note that for a long time I've wanted to change Chrome so that its built-in UI lets users override site authors here.

    There is a difficulty, though, in that "autocomplete=off" is used in many types of data fields -- passwords, credit card numbers, and "fields it wouldn't be very useful for the browser to provide completions for later" are three distinct cases -- and while the right behavior may differ from case to case it's often hard for the browser to know which case a particular field represents.

    ReplyDelete
  2. Some users belong to an organization, which may have its own policies. Where do they fit in?

    ReplyDelete
  3. And today is your day, Peter.
    "As we’ve previously discussed, Chrome will now offer to remember and fill password fields in the presence of autocomplete=off. This gives more power to users in spirit of the priority of constituencies, and it encourages the use of the Chrome password manager so users can have more complex passwords. This change does not affect non-password fields." -Daniel Xie, Google Chrome, Chrome release blog

    ReplyDelete
  4. To see latest Tamil movie updates and reviews visit
    Latest Tamil Movie Reviews

    ReplyDelete
  5. This is a great post ! it was very informative. I look forward in reading more of your work. Also, I made sure to bookmark your website so I can come back later. I enjoyed every moment of reading it.
    baju batik modern baju batik baju batik wanita batik pekalongan batik couple batik online batik modern gamis batik

    ReplyDelete
  6. Thanks for Nice and Informative Post. This article is really contains lot more information about This Topic.
    world famous astrologer

    ReplyDelete
  7. Thanks for providing such a great info, you can see Easter Greetings Sayings plz like and share this post. Thanks Regards

    ReplyDelete
  8. It is the best time to make plans for the future and it's time to be happy. I have read this post and if I could I wish to suggest you few interesting things or advice.
    Maybe you could write next articles referring to this article. I want to read even more things about it. Great blog. Thanks!
    http://www.juegosfrivol.com/
    http://www.juegoskizi20.com/
    http://www.frivallgames.com/

    ReplyDelete
  9. Hi Admin,

    Great post indeed!
    ACtually I visit your blog first time through someone blog. So I bookmakred this page for further usage.
    Thanks for sharing such great content with us.

    Happy Mothers Day 2016 | Happy Mothers Day Wishes | Happy Mothers Day Messages | Happy Mothers Day Quotes | Happy Mothers Day Sms | Happy Mothers Day Images


    Regards:
    Hafiz Junaid

    ReplyDelete
  10. Thanks for the great post. Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts.
    impossible quiz
    learn to fly
    minecraft unblocked
    plazma burst 2
    qwop
    superfighters
    raze

    ReplyDelete
  11. Good blog post. I want to thank you for interesting and helpful information and I like your point of view. Thank you!
    - Mortal Kombat XL
    - Atari Breakout
    - Dragon Ball Z Games

    ReplyDelete
  12. This comment has been removed by the author.

    ReplyDelete
  13. Diep.io is a new addition in which you control a tank and shoot down both obstacles and opponents.Diep.io, which is quickly becoming the next Agar.io style game sensation. Diep.io game is a funny muliplayer tanks shooting game. Control a tank, shoot opponents and obstacles, upgrade your tank while trying to keep alive.

    ReplyDelete
  14. Movesure has a fine team of highly skilled and well-trained staff. The Packers and Movers in Faridabad has a staff that work with utmost care and dedication to provide the best service according to your budget.

    ReplyDelete
  15. The packers and movers in Delhi understand care of the troublesome and stressful job of varying from one desired location to substitute without your effect. The relocation foster from movesure is over and finished along together amid in view of that without any defer.

    ReplyDelete
  16. solidworks crack
    solidworks download
    solidworks tutorial
    learn solidworks online
    http://solidworkscrack.blogspot.com/
    http://solidworkscrack.blogspot.com/2016/06/solidworks-free-download-full-version.html
    http://solidworkscrack.blogspot.com/2016/06/learn-solidworks-tutorials-online.html http://solidworkscrack.blogspot.com/2016/06/learn-solidworks-tutorials-online.html

    ReplyDelete
  17. Thank you for sharing valuable information. Nice post. I enjoyed reading this post.Can you play more games at :
    red ball 4 | ninjago games | red ball 3 | ninjago games

    ReplyDelete
  18. Thank you for sharing valuable information. Nice post. I enjoyed reading this post.Can you play more games at :
    red ball 4 | ninjago games | red ball 3 | ninjago games

    ReplyDelete
  19. Great post,Thanks for providing us this great knowledge,Keep it up.
    red ball 4 | ninjago games | red ball 3 | ninjago games

    ReplyDelete
  20. You topic is very great and useful for us…Thank you for that information you article.
    Signature:
    Money Lender

    ReplyDelete
  21. Always so interesting to visit your site.What a great info, thank you for sharing. this will help me so much in my learning

    Digibrand
    ClarifyCredit

    ReplyDelete
  22. One of the best trending punjabi status WhatsApp statuses online is the Hindi whatsapp dp.
    For those who like to put their status in Hindi, a lot of WhatsApp status in Hindi is available for them to use and post in their attitude status
    whatsapp profile pic.and dp for whatsapp
    These people can have the best and most interesting Hindi whatsapp status through our wide range of collection
    of whatsapp status in hindi updated daily.
    You can check out cool best whatsapp status,
    status, funny, interesting and all sorts of Hindi status and descriptions for your profile.
    Here you can find a collection of heartfelt descriptions and Hindi
    status for whatsapp.
    It will be a great way for you to share sad status your feelings
    and mindset creatively good morning image.

    ReplyDelete
  23. Posts shared useful information and meaningful life, I'm glad to be reading this article and hope to soon learn the next article. thank you

    monkey go happy | mahjong| superfighters 2 |yahtzee with buddies

    ReplyDelete
  24. Some users belong to an organization, which may have its own policies
    Potty Racers 2 | baixar whatsapp plus

    ReplyDelete
  25. This is really great work. Thank you for sharing such a good and useful information here in the blog for students.
    Computer Networking Project Help

    ReplyDelete
  26. Hi, I liked you blog and wanted to give you some thing about madden mobile for obtaining all madden mobile tips assets in the games ligally mobile, madden mobile guide can be utilized, I wanted to use madden mobile in my own gaming also and am looking for the madden mobile review. if you locate madden mobile tips somewhere pls discuss madden mobile 17 with me. even though, your information was extremely great thanks. and pls dont forget about madden mobile 17 guide yo. thanks again.

    ReplyDelete
  27. Hi, I liked you blog and wanted to give you some thing about madden mobile for obtaining all madden mobile tips assets in the games ligally mobile, madden mobile guide can be utilized, I wanted to use madden mobile in my own gaming also and am looking for the madden mobile review. if you locate madden mobile tips somewhere pls discuss madden mobile 17 with me. even though, your information was extremely great thanks. and pls dont forget about madden mobile 17 guide yo. thanks again.

    ReplyDelete
  28. Hi, I actually adored your opinion with this subject. I needed to discuss something about pixel gun 3d game game with you. Really I desired to know the methods to get pixel gun 3d coins. Is it possible to clarify any way for pixel gun 3d tips which I can get easily over the internet? actually pixel gun 3d guide is the best game and I just wanted to play pixel gun 3d
    at its complete rate. thanks ahead of time.

    ReplyDelete
  29. hello. i just enjoyed your post and wanted to share with you the ways to get free simcash in simcity buildit game. please visit the
    best guide website and have it for free. thanks

    ReplyDelete
  30. Thanks for sharing the information. It is very useful for my future. keep sharing
    whatsapp baixar | Facebook Lite

    ReplyDelete
  31. employee provident fund
    epf login
    ============================================================================
    epf balance
    pf claim status
    ============================================================================

    ReplyDelete
  32. you are the best mate. you just made my day. i am also a blogger and wanted you to know about this that you can now read the gaming news here and it is awesome for new gamers becuase its a game guide
    . please do share it with your friends.

    ReplyDelete
  33. you are the best mate. you just made my day. i am also a blogger and wanted you to know about this that you can now read the gaming news here and it is awesome for new gamers becuase its a game guide
    . please do share it with your friends.

    ReplyDelete
  34. hello there, i read your blog and i was amazed that you have mentioned your point very well. thanks for this wonderful blog. i used to play mobile game like simcity buildit game. i just like this game and would like to give your simcity buildit simoleons for free if you too like this game. visit blog
    if you really want free resources. thanks.

    ReplyDelete
  35. call girls in Ludhiana Ludhiana escort services. It offers educated, disciplined, well-cultured and high class escorts to the customers. The escorts working under these services hail from various zones of India. If ever you come to this city and wish to hire an escort for any occasions such as clubs, business party, dinner etc., then you can easily avail these services

    ReplyDelete
  36. hello there, I study your site and I was surprised that you've mentioned your purpose perfectly. thanks with this excellent site. I used to play mobile game like pixel gun 3d. I simply enjoy this game and want to give your pixel gun coins for free if you also enjoy this game. visit website should you really need free resources. thanks.

    ReplyDelete
  37. hi there, you just made me amaze by quoating your point here, you are the best. i was looking for coins for madden mobile which is my favorite game and its the best game which is being played by every american. you may know how to get free coins in madden mobile
    and make gaming free.

    ReplyDelete
  38. your blog is very good to read, i also found one blog similar to your interest. you may like to know that now you can get free nba coins for your game. i also love nba live game and am a big fan of its mobile version too. lets have fun with it.

    ReplyDelete
  39. The Haryana 12th 2017 will be declared on the month of May 2017 At 10 AM Haryana 12th Result 2017 Check Haryana 12th Exam Result 2017 Haryana 12th Result 2017 form here given link

    ReplyDelete

  40. PSEB Board 12th Result will Declare soon Check < a href="http://punjabresult2017.in/punjab-12th-class-exam-result/" > Punjab 12th Result

    ReplyDelete
  41. best site for getting various informative stuff over the net. pls do visit if you love strange things over the net.

    ReplyDelete
  42. Hello author i really want to thank you for your kindness to give us some of the precious time to write this article for us. I would like to say that keep up this hard work and one day you will also become a great blogger.
    Bollywood 2017 Movies Download
    Republic Day Speech Bhashan In English Hindi

    ReplyDelete
  43. It's actually a great and helpful piece of information. I am satisfied that you just shared this useful information for us.
    Thanks for sharing.
    Modern toilet

    ReplyDelete
  44. We're totally considerate of clients that are different rude. If you should be discover of the good looking Chandigarh Escorts that are independent next, we're regarding anniversary total to provide the greatest services according to your wishes. Regarding extra information you can travel to with our site.

    ReplyDelete
  45. The independent Chandigarh call girls aren't any more the types that are old fashioned, instead a great deal have transformed and frequently promote themselves decked out within design claims and the newest trendy gowns. Most of the girls that are escort are appealing and tremendous beautiful slam models as-well.

    ReplyDelete
  46. Dehradun Escorts are sophisticated, skilled and they come from good backgrounds. The Dehradun Call Girls aren’t just beautiful and sexy; they’re also trained to keep their clients entertained and to give you exceptional Dehradun Escorts Servicecustomer satisfaction. http://www.nadya.in

    ReplyDelete
  47. my opinion for this review
    I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well.

    ReplyDelete
  48. Maahikapoor gorgeous Jalandhar Escorts girl offer high profile Erotic Independent Escorts service in Jalandhar at cheap rates with 24/7 incall and outcall facility. Call Girls Jalandhar

    ReplyDelete
  49. Chandigarh town is identified because of its sparkling lamps, amusing celebrations, sex adoring night life, clubbing displays that were wonderful and intimate night-outs having somebody. Chandigarh metropolis are around the look-out outside for some adult-entertainment that is bodily. Such services of top quality Chandigarh escorts service, where highly proficient, tasteful, expert female evening awe-inspiring and escorts earn you evening can be obtained in the agency that is escort.

    ReplyDelete
  50. Russian escorts for you personally in Chandigarh, russian escorts in Chandigarh. Several individuals like brunette dance that are bright regarding them-so below we're to accomplish your wish. Greatest Russian Companions are provided by us in Chandigarh you'll appreciate together. Begin to see the webpage to find out more about these.

    ReplyDelete
  51. At Fanni, we assist you to select the right call girls in Chandigarh and are able to create all of your desires become a reality. We've fashionable, well-educated and pleasant girls who understand how to attract a guy and provide the very best enjoyment which any guy might anticipate to them. A good thing about
    Fanni is we're excessively happy with providing the very best escorts services in Chandigarh and the fact that we're the only real escort agency in Chandigarh using the greatest girls who're not just elegant but additionally originates from great history. You are able to benefit from the organization of those fantastic girls anytime celebration, company assembly, and convention or anyplace where you'll need the organization of the enchanting individual who provides you with perhaps a great organization or the very best enjoyment in just about any bar of Chandigarh.

    ReplyDelete
  52. Your girls will be attracted to recognition, appeal and the money of the company. That is one of the primary reasons why every one of these supreme quality call girls in Chandigarh chose this profession. We are exceptionally pleased to display the account of call girls that are appealing in Chandigarh who're in a position to aid you to truly have a good time in Chandigarh for you. Should you be trying to find Chandigarh call girl Here’s a perfect area to suit your needs.

    ReplyDelete
  53. Jntuk.net provides all the details include notifications,time tables or exam schedules,
    exam hall tickets, exam results, rank cards and many more of all the State Boards in India. The boards will release all
    the results soon after the exams are wrapped up. Students are already very eager about the exams. The anxiousness about
    the results release will be very high in the students. We suggest all the students to keep in touch with the official
    sites of all the boards or to know the amends from the boards. Jntuk.net also provides various job details belongs to
    private and public sector companies like job notifications, time tables, exam dates,application forms and links,
    syllabus and many more like railway jobs, bank jobs,defense jobs, army jobs, navy jobs and many.

    AP SSC Results 2017 :Andhra Pradesh Board of Secondary Education will lead the 10th public exams in March/April this
    year. The board is in readiness to lead 10th exams soon in the near future. The board is now busy scheduling the exam timetable for the public exams. All the
    students must get ready to take the exams. The board will soon seek enrollment from the students who are pursuing 10th class in the schools that are affiliated to
    the board. TS SSC Results 2017 :Telangana Secondary School Exam Board is sewed-up to pull 10th annual exams for the students of the
    state. Students who have been studying 10th standard in the schools united schools of the board can get everything set to take the exam that will be most likely
    held in March this year. The board is right now preparing for the exam scheduled and date sheets. As soon as it completes it, it will announce it officially to get
    ready for the exam via its official site. All the affiliated schools of the board and students studying in the schools need to set stage for preparation.

    ap ssc results 2017
    telangana 10th results 2017
    assam hslc results
    bihar 10th class results
    chhattisgarh 10th class results
    haryana state 10th results
    hp 10th class results 2017
    AP 2nd Year Inter Results
    TS 2nd Year Inter Results
    EAMCET Results
    ECET Results
    ICET Results
    Ed.CET Results

    ReplyDelete
  54. India results provides all the details include notifications,time tables or exam schedules,
    exam hall tickets, exam results, rank cards and many more of all the State Boards in India. The boards will release all
    the results soon after the exams are wrapped up. Students are already very eager about the exams. The anxiousness about
    the results release will be very high in the students. We suggest all the students to keep in touch with the official
    sites of all the boards or to know the amends from the boards. Jntuk.net also provides various job details belongs to
    private and public sector companies like job notifications, time tables, exam dates,application forms and links,
    syllabus and many more like railway jobs, bank jobs,defense jobs, army jobs, navy jobs and many.

    AP SSC Results 2017 :Andhra Pradesh Board of Secondary Education will lead the 10th public exams in March/April this
    year. The board is in readiness to lead 10th exams soon in the near future. The board is now busy scheduling the exam timetable for the public exams. All the
    students must get ready to take the exams. The board will soon seek enrollment from the students who are pursuing 10th class in the schools that are affiliated to
    the board. TS SSC Results 2017 :Telangana Secondary School Exam Board is sewed-up to pull 10th annual exams for the students of the
    state. Students who have been studying 10th standard in the schools united schools of the board can get everything set to take the exam that will be most likely
    held in March this year. The board is right now preparing for the exam scheduled and date sheets. As soon as it completes it, it will announce it officially to get
    ready for the exam via its official site. All the affiliated schools of the board and students studying in the schools need to set stage for preparation.
    ap 10th class results
    telangana ssc results
    assam 10th results
    bihar 10th class results 2017
    chhattisgarh 10th class results 2017
    goa 10th class results 2017
    haryana 10th results
    hp 10th results 2017
    AP 1st Year Inter Results
    TS 1st Year Inter Results
    AP EAMCET Results 2017
    TS EAMCET Results 2017
    AP ECET Results 2017
    TS ECET Results 2017
    TS ICET Results 2017
    AP ICET Results 2017
    AP Ed.CET Results 2017
    TS Ed.CET Results 2017

    ReplyDelete
  55. I enjoyed over read your blog post. Your blog have nice information, I got good ideas from this amazing blog. I am always searching like this type blog post. I hope I will see again..
    Buy Wine Online Singapore

    ReplyDelete
  56. NAGMA encouraged anyone among each our sensation in the event that you region device today individual a friendless and qualified man hoping to find the best Zirakpur escorts to please your near wishes inside the primarily enchanting style We region device between your many course inclined goal satisfaction provider. We shall supply you by services that are last that you just can't dismiss in your being that is undamaged.
    Zirakpur escorts
    escort service in Zirakpur
    Vip escort service in zirakpur
    zirkpur vip escort service
    Zirakpur female escort
    Zirakpur female escorts
    female escorts in Zirakpur

    ReplyDelete
  57. Thanks for giving the good informative tutorial
    Download Apk mod

    ReplyDelete
  58. Visit us now to know about Easter Sunday
    easter sunday

    ReplyDelete

  59. Happy Good Friday 2017
    here you can find latest type of good friday images & quotes..

    ReplyDelete