What error should be returned when trying to access position from insecure origin?

[yell0wd0g]

Chromium issue 702244 says Chromium returns a PERMISSION_DENIED, which sounds legit, but Safari might be returning a POSITION_UNAVAILABLE. I think Chromium response is OK and the alleged Safari response might be incorrect, but just in case it'd be great to clarify what's the expected error code when accessing from an insecure origin.

[yell0wd0g]

+@jyasskin

[mkruisselbrink]

FWIW the example in the Secure Contexts spec says to return PERMISSION_DENIED, but of course that's not normative.

[yell0wd0g]

I think the WebKit line where the error is produced is https://github.com/WebKit/webkit/blob/master/Source/WebCore/Modules/geolocation/Geolocation.cpp#L366 :

    if (shouldBlockGeolocationRequests()) {
        notifier->setFatalError(PositionError::create(PositionError::POSITION_UNAVAILABLE, ASCIILiteral(originCannotRequestGeolocationErrorMessage)));
        return;
    }

[reillyeon]

This was resolved by #34.