[encrypted-media] Distinctive Identifier association mediated by CDM server

lxgr has just created a new issue for https://github.com/w3c/encrypted-media:

== Distinctive Identifier association mediated by CDM server ==
It seems that while the spec does not allow a CDM to share origin names (or associable equivalents) with its central server, and also prohibits Distinctive Identifiers that could be associated by colluding applications, the possibility of applications using the CDMs central server to associate Distinctive Identifiers is not explicitly mentioned.

Assuming that this is intentional, would it make sense to explicitly mention this in the section on privacy concerns, i.e. that the specification does not protect against associations by different applications, mediated by the CDM central server?

Please view or discuss this issue at https://github.com/w3c/encrypted-media/issues/390 using your GitHub account

Received on Wednesday, 19 April 2017 07:20:43 UTC