Re: [mediacapture-main] A privacy concern of "Media Capture and Streams" (#630)

> Is this double keyed? My understanding is yes, that the spec requires permissions to be double keyed.

I believe Chrome grants to top-level origin, which delegates permission through feature policy. This is what Firefox plans to implement as well.

The benefits are comparable to double-keying: no permissions are persisted to the iframe's origin, by itself or across different top-level origins.

-- 
GitHub Notification of comment by jan-ivar
Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/630#issuecomment-544302753 using your GitHub account

Received on Sunday, 20 October 2019 23:13:24 UTC