Name of API: Alarm API
Reference: https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion
Brief purpose of API: Let apps set timers to wake up at a specified time General Use Cases:
- Implement an alarm reminder app by setting an alarm intent for a future time
- Set an alarm to ping a server at a specific time or set interval
Inherent threats: Annoyance
Threat severity: Low
Regular web content (unauthenticated)
Use cases for unauthenticated code: Relaunch the app via an alarm intent at a future time
Authorization model for normal content: None
Authorization model for installed content: Implicit
Potential mitigations: Should be a way to disable alarm for a given app
Trusted (authenticated by publisher)
Same as for installed untrusted app
Certified (vouched for by trusted 3rd party)
Same as for installed untrusted app