[Bug 26332] Applications should only use EME APIs on secure origins (e.g. HTTPS)

https://www.w3.org/Bugs/Public/show_bug.cgi?id=26332

--- Comment #120 from Joe Steele <steele@adobe.com> ---
(In reply to David Dorwin from comment #117)
> (In reply to Ryan Sleevi from comment #112)
> > (In reply to Mark Watson from comment #111)
> One DRM vendor has said “I don’t believe you can have DRM without an
> exchange of PII. That is the nature of DRM.” [1] There is clearly a record
> of privacy issues that need to be addressed before DRM is exposed to the web
> without plugins.

Please give the full context:
"I don’t believe you can have DRM without an exchange of PII. That is the
nature of DRM. What you can do is regulate how that PII is exchanged (this is
somewhat within the scope of the spec) and how is it handled by the recipients
(completely outside the scope of this spec). "

Digital Identity is the bit of PII [1] that most often comes into play here and
I think the one most relevant for EME. Since you seem to disagree with the
quoted text - please give a counterexample of a DRM for protecting content
relevant to EME that does not require any PII.

[1] http://en.wikipedia.org/wiki/Personally_identifiable_information

(In reply to David Dorwin from comment #118)
> (In reply to Joe Steele from comment #116)
> > I don't believe it is useful to continue the conversation until this change
> > is reverted. It would be worth spending my time to come up with a better
> > solution only if there were some guarantee that that solution would at least
> > be be considered. By forcing controversial changes in without consensus, my
> > confidence that any proposals I might make will be considered has been
> > sorely shaken.
> 
> I'm not sure why you feel your solution would not be considered. I have been
> asking for proposals for months (i.e comment #63) and reiterated this when I
> made the change (comment #92). 

I _did_ feel like my proposals would be considered until this. 

If you had prefixed your request for proposals with -- "By the way I am going
to make whatever change I feel like if you don't respond within the next day or
so" -- I believe you would have gotten a much faster response. 

I agree that this proposal is moving slowly. I think that is a good thing. We
want to get it right.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Wednesday, 29 October 2014 01:27:57 UTC