Confirmed users
282
edits
| Line 82: | Line 82: | ||
== Other Requirements == | == Other Requirements == | ||
"I want to give my phone to my kid/friend/frenemy and not have them screw with my FxA stuff." | |||
Solutions: | |||
* Maybe app specific, e.g., put marketplace into "always require my password for purchases" | |||
* Maybe high level "profile" switching support (i.e., guest mode) | |||
* IMO, we are failing if users resort to logging out of their phone for this use case. IMO, logout is "disconnect, get my shit out of this damn phone". It's the nuclear option. This is mobile and we probably need to cache user data locally for stuff to work well. "FxA logout" is signal that we should delete this cached data, so logging out for a use case whose time length is limited will suck overall. Something not as extreme (e.g., keeps the logged in state in the background, but may require a force auth to resume) would probably suffice for this use case. | |||
"I leave my phone laying around, and I don't want randos picking it up and messing with my stuff." | |||
Solutions: | |||
* local PIN/gesture screen lock, independent of FxA | |||
= Questions = | = Questions = | ||