Re: [webrtc-pc] Clarify reasoning behind and mitigation of privacy issues (PING review)

Under same-origin policy, it should probably read "an origin cannot 
obtain data from another origin using the datachannel API without its 
cooperation".

This is so that we don't get hammered for inaccuracy - it's easy to 
set up a datachannel between two tabs in the same browser where the 
two tabs have different origins, but it requires the active 
cooperation of both origins.


-- 
GitHub Notification of comment by alvestrand
Please view or discuss this issue at 
https://github.com/w3c/webrtc-pc/issues/687#issuecomment-277947553 
using your GitHub account

Received on Tuesday, 7 February 2017 09:39:37 UTC