From 71ae4906f32869ee9c796c523cb04c683a8b17cb Mon Sep 17 00:00:00 2001
From: James Nurthen <jnurthen@users.noreply.github.com>
Date: Fri, 5 Jan 2024 14:11:48 -0800
Subject: [PATCH] editorial: split out security and privacy sections Fixes
 #2098

---
 index.html | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/index.html b/index.html
index e4697ce4b..390c759c5 100644
--- a/index.html
+++ b/index.html
@@ -13741,8 +13741,11 @@ <h2>Example IDL Attribute Usage</h2>
 
 </section>
 <section class="informative">
-	<h2>Privacy and Security Considerations</h2>
+	<h2>Security Considerations</h2>
 	<p>This specification introduces no new security considerations.</p>
+</section>
+<section>
+	<h2>Privacy Considerations</h2>
 	<p>In accordance with <a data-cite="design-principles#do-not-expose-use-of-assistive-tech">Web Platform Design Principles</a>, this specification provides no programmatic interface to determine if information is being used by Assistive Technologies. However, this specification does allow an author to present different information to users of Assistive Technologies from the information available to users who do not use Assistive Technologies. This is possible using many features of the ARIA specification, just as this is possible using many other parts of the web technology stack. This content disparity could be abused to perform <a data-cite="fingerprinting-guidance#active-0">active fingerprinting</a> of users of Assistive Technologies.</p>
 </section>
 <section class="informative appendix" id="typemapping">