Require user activation to use API

[w3cbot]

This is a tracker issue. Only discuss things here if they are privacy group internal meta-discussions about the issue. Contribute to the actual discussion at the following link:

§ w3c/geolocation#48

[marcoscaceres]

This issue has two parts. The "user visible" part was addressed by:
w3c/geolocation#90

And shipping across all browsers now.

For the second part, "user-activation-received frames": There is general agreement to make The API reliant on transient activation, but that will break potentially thousands and thousands(!) of websites, so a multi-year transitional strategy is be needed. We have a pull request up for discussion:

w3c/geolocation#94

It won't be in scope of the current REC cycle.

This issue can probably closed (or not?) - but the discussion is going to take a very long time.