Right.

Downvote all you want (native app developers, is that you? <3), the web is here, has been here, and will continue to flourish.

> This specification takes several approaches to make such attacks more difficult:

> Pairing individual devices instead of device classes requires at least a user action before a device can be exploited.