{"action":"created","issue":{"url":"https://api.github.com/repos/google/physical-web/issues/300","labels_url":"https://api.github.com/repos/google/physical-web/issues/300/labels{/name}","comments_url":"https://api.github.com/repos/google/physical-web/issues/300/comments","events_url":"https://api.github.com/repos/google/physical-web/issues/300/events","html_url":"https://github.com/google/physical-web/issues/300","id":63322634,"number":300,"title":"Allow beacons to announce themselves as public","user":{"login":"cco3","id":236057,"avatar_url":"https://avatars.githubusercontent.com/u/236057?v=3","gravatar_id":"","url":"https://api.github.com/users/cco3","html_url":"https://github.com/cco3","followers_url":"https://api.github.com/users/cco3/followers","following_url":"https://api.github.com/users/cco3/following{/other_user}","gists_url":"https://api.github.com/users/cco3/gists{/gist_id}","starred_url":"https://api.github.com/users/cco3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cco3/subscriptions","organizations_url":"https://api.github.com/users/cco3/orgs","repos_url":"https://api.github.com/users/cco3/repos","events_url":"https://api.github.com/users/cco3/events{/privacy}","received_events_url":"https://api.github.com/users/cco3/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":14,"created_at":"2015-03-20T22:45:43Z","updated_at":"2015-03-25T13:39:51Z","closed_at":null,"body":"Given that most beacons are public, most notifications should be displayed on the lock screen as public when the user has \"hide sensitive information\" on.  Could metadata in the website or something in the beacon signal itself communicate this?\r\n\r\nSee also:\r\nhttps://github.com/google/physical-web/pull/299"},"comment":{"url":"https://api.github.com/repos/google/physical-web/issues/comments/86028578","html_url":"https://github.com/google/physical-web/issues/300#issuecomment-86028578","issue_url":"https://api.github.com/repos/google/physical-web/issues/300","id":86028578,"user":{"login":"scottjenson","id":1055674,"avatar_url":"https://avatars.githubusercontent.com/u/1055674?v=3","gravatar_id":"","url":"https://api.github.com/users/scottjenson","html_url":"https://github.com/scottjenson","followers_url":"https://api.github.com/users/scottjenson/followers","following_url":"https://api.github.com/users/scottjenson/following{/other_user}","gists_url":"https://api.github.com/users/scottjenson/gists{/gist_id}","starred_url":"https://api.github.com/users/scottjenson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/scottjenson/subscriptions","organizations_url":"https://api.github.com/users/scottjenson/orgs","repos_url":"https://api.github.com/users/scottjenson/repos","events_url":"https://api.github.com/users/scottjenson/events{/privacy}","received_events_url":"https://api.github.com/users/scottjenson/received_events","type":"User","site_admin":false},"created_at":"2015-03-25T13:39:51Z","updated_at":"2015-03-25T13:39:51Z","body":"There are a few points here and I'd like to make sure there is no misunderstandings:\r\n1) Beacons broadcast a URL publically\r\n2) The phone app harvests those URLs, and uses our metadata server to fetch title/description/favicon\r\n3) This is considered public information and displayed to any users nearby\r\n4) We are, in effect, simulating a web search, showing public web page info\r\n5) The user picks one from the list\r\n6) The web page is shown but as it's the web, auth can then take place (e.g. cookies) and sensitive info can be shown (but only then)\r\n\r\nEverything we show in the picker is considered public information and is under control of the phone all and the meta data server.\r\n\r\nNote that there is no 'announcing' or 'notifications' in this process, this list is only shown when the user asks to see the list. As this is public and can occur at any time, we strongly want to avoid your phone buzzing constantly when you enter a mall. However, by using service worker you can opt into notifications after you visit a website once."}}