After landing bug 984207. NFC is always in listening mode, but we should not listen to p2p connection when screen is off. And we need to define if we allowed listening to p2p when screen is on and locked. If yes, we will require a new API(maybe just an additional config value ) for nfcd to distinguish screen off & locked and screen on & locked

Hi Wesley, Could you help confirm this ?

What I understand is p2p sharing wouldn't be trigger while screen is off. Juwei may be the right person to re-confirm.

I think off-screen p2p has grate opportunities. However, if the restriction is mandatory, nfcd should not take care screen-state directory. how about providing API to filter techtype?

(In reply to Wesley Huang [:wesley_huang] from comment #2) > What I understand is p2p sharing wouldn't be trigger while screen is off. > Juwei may be the right person to re-confirm. The question also includes the behavior when - "Screen ON and Locked"

NFC isn't allowed to p2p as well when screen is on and locked.

Yes. P2P sharing only available when screen in on.

For security reasons, P2P sharing shouldn't be available when the lockscreen is on, whatever the state of the screen. E.g.: - the phone is in your pocket or in your bag in the locked mode and the screen inadvertently turned on. Whoever comes closer to you can potentially upload some data. - your phone is locked on the side of your desk (at the office, on a coffee shop...), you don't pay attention thinking nobody will be able to access the content of your phone, but somebody taps his phone on yours and upload a malicious link. The issue there is that the link will automatically be displayed on the browser without the user being prompted. This means a malicious script could execute in the browser for instance. The only way we can ensure the user is (probably) aware of the transaction is having him/her unlocking the phone.

(and the screen is on)

Update Summary, should we allow P2P listening when screen is off (and not locked) is TBD.

Modify bug description.

It works in flame. Mark checkin-needed

merge in v2.0 branch https://github.com/mozilla-b2g/platform_system_nfcd/commit/6632331bba90fae08af0baba884527027f6589cd