[Bug 26332] Applications should only use EME APIs on secure origins (e.g. HTTPS)

https://www.w3.org/Bugs/Public/show_bug.cgi?id=26332

--- Comment #37 from Glenn Adams <glenn@skynav.com> ---
(In reply to David Dorwin from comment #35)
> (In reply to Glenn Adams from comment #31)
> > Sure it does. And that is by design. CDMs are explicitly out of scope of EME.
> 
> > That is a consequence of ruling that CDM details are out of scope of EME.
> > That can't be helped.
> 
> I think it is incorrect to say that all CDM details are out of scope.

The kinds of details being discussed here are out of scope, i.e., sufficient
details to perform a full security/privacy analysis.

> > No and No. It will not improve the spec (and in fact will damage it). And No
> > the WG will not revisit the decision that CDMs are out of scope.
> 
> These are opinions It's not possible to make such absolute statements about
> what the HTML WG might do.

I just did (make such a statement). I predict it is true and will remain true.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Tuesday, 19 August 2014 21:43:54 UTC