bug#74218: [PATCH] Ask confirmation before sending region to search engine.

[Robert Pluim <rpluim@gmail.com>]

>>>>> On Thu, 07 Nov 2024 12:49:47 +0200, Eli Zaretskii <eliz@gnu.org> said:

    >> From: Robert Pluim <rpluim@gmail.com>
    >> Cc: Eshel Yaron <me@eshelyaron.com>,  74218@debbugs.gnu.org,
    >> stefankangas@gmail.com,  me@fabionatali.com
    >> Date: Thu, 07 Nov 2024 10:02:00 +0100
    >> 
    >> >>>>> On Thu, 07 Nov 2024 10:53:23 +0200, Eli Zaretskii <eliz@gnu.org> said:
    >> 
    Eli> Also, does anyone have an opinion about asking for confirmation only
    Eli> for regions that are large enough?  E.g., when the region is a single
    Eli> word, do we want to ask for confirmation anyway?
    >> 
    >> The default for sending stuff to remote servers should be not to do it
    >> unless explicitly authorized, even if the amount of data is small: the
    >> submission itself provides data about your machine, IP, location etc.

    Eli> We are talking about a command which is document as follows:

    Eli>   (eww-search-words)

    Eli>   Search the web for the text in the region.
    Eli>   If region is active (and not whitespace), search the web for
    Eli>   the text between region beginning and end.  Else, prompt the
    Eli>   user for a search string.  See the variable ‘eww-search-prefix’
    Eli>   for the search engine used.

    Eli> It should be clear from this that a Web search engine is used, and
    Eli> that the word or the region are sent to it.  Since the user invokes
    Eli> this command, how is it reasonable not to do what the user requested?
    Eli> If the user doesn't want to reveal details to the Internet, the user
    Eli> can avoid invoking the command in the first place.

    Eli> I feel that I'm missing something here.

And so am I. Why are we discussing adding a confirmation to an
explicit request from the user? Or is the intent to leave it as 'off',
but allow customizing it to 'ask'?

Robert
--