Re: getUserMedia() and authenticated origins

On 10 September 2014 07:56, Jim Barnett <1jhbarnett@gmail.com> wrote:
> I share ekr's recollection.   This was discussed in a full room at a F2F
> meeting.  The consensus was that  ruling out http altogether was too
> restrictive.

Two other data points:

Restricting to HTTPS doesn't address the concerns that bz raised here:
https://www.w3.org/Bugs/Public/show_bug.cgi?id=25972#c9

And it's been an express goal to build something where the security of
the origin performing signaling doesn't necessarily rely on any trust
in that site.

Received on Wednesday, 10 September 2014 20:19:34 UTC