Re: [mediacapture-record] Add 'privacy and security' section

Sure. The section seems especially brief. Have the editors or the group gone through the security questionnaire as described in #122?

* Are there no privacy or security implications beyond use of resources? 
* Any fingerprinting considerations? 
* What scripts have access to the MediaRecorder API? (Parents of an iframe? Child frames? Analytics scripts embedded in the origin?) 
* How are isolation properties of streams handled? 
* Are users provided indication that a stream is being recorded? Could those recordings be communicated to a server or to another origin? How does that compare to a getUserMedia stream where the MediaRecorder API isn't in use?

-- 
GitHub Notification of comment by npdoty
Please view or discuss this issue at https://github.com/w3c/mediacapture-record/issues/141#issuecomment-378735165 using your GitHub account

Received on Wednesday, 4 April 2018 20:31:17 UTC