Re: CfC: only allow authenticated origins to call getUserMedia

On Thu, Oct 9, 2014 at 12:28 AM, Anne van Kesteren <annevk@annevk.nl> wrote:
> On Wed, Oct 8, 2014 at 2:32 PM, Silvia Pfeiffer
> <silviapfeiffer1@gmail.com> wrote:
>> Can you explain how localhost is an authenticated origin? Does it mean that
>> we will continue to be able to develop on http://localhost but any other
>> property on http will fail gum by default?
>
> To answer your latter question first, yes. For the former, please see
> its definition:
> https://w3c.github.io/webappsec/specs/mixedcontent/#is-origin-authenticated

Nice! Is that implemented in browsers yet? And how can you test? (I'm
curious because I wasn't able to deduce it from the spec - I'm not
implying anything of consequence to this discussion.)

Thanks,
Silvia.

Received on Thursday, 9 October 2014 08:30:12 UTC