Re: Draft text for authenticated origins

> When on an insecure origin, user agents are encouraged wish to warn
> about usage of MediaDevices.getUserMedia, navigator.getUserMedia, and any
> prefixed variants in their developer tools, error logs, etc. It is
> explicitly
> permitted for user agents to remove these APIs entirely when on an
> insecure origin, as long as they remove all of them at once (e.g.,
> they should not leave just the prefixed version available on insecure
> origins).

I like it; I've prepared a pull request with the text:
https://github.com/w3c/mediacapture-main/pull/104

When preparing it, I wasn't sure where such text would appear; right now,
I've put it in the introductory part of the "obtaining  local multimedia
content" section.

Another candidate would be the "security & privacy" section, but that one
is supposed to gather rules that are set elsewhere, not set new ones: “it
specifies no new behaviour, but instead summarizes information already
present in other parts of the specification.”

Dom

Received on Wednesday, 3 December 2014 21:19:41 UTC