W3C home > Mailing lists > Public > public-media-capture@w3.org > January 2016

Re: [mediacapture-screen-share] limiting browser sharing to a list of domain/urls

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 15 Jan 2016 13:59:04 +1100
Message-ID: <CABkgnnWd3hN217CLd7KiDRoQwS=FTMFTqAb_C7fAxhCjPPXNMg@mail.gmail.com>
To: ikasantsev via GitHub <sysbot+gh@w3.org>
Cc: "public-media-capture@w3.org" <public-media-capture@w3.org>
While this sort of capability might be used for good, it can also be
used for evil.  Say I wanted to capture from your bank, I can provide
a whitelist that only included banks.  A blacklist is only marginally
harder to target in this fashion.

Note that the most pernicious use of browser sharing is one where you
request a tab that the sharing site controls somehow, this would
enable that.

On 15 January 2016 at 09:56, ikasantsev via GitHub <sysbot+gh@w3.org> wrote:
> ikasantsev has just created a new issue for
> https://github.com/w3c/mediacapture-screen-share:
> == limiting browser sharing to a list of domain/urls ==
> Please consider adding another constraint which will be relevant for
> OutputCaptureSurfaceType="browser". A commercial product may (and
> will) need to limit screen sharing to only those tabs which were open
> from a white-list of domains or even urls. And vice versa - it will be
>  very useful to support a black list of domains/urls (never share
> contents if a tab is navigated to this address).
> Please view or discuss this issue at
> https://github.com/w3c/mediacapture-screen-share/issues/37 using your
> GitHub account
Received on Friday, 15 January 2016 02:59:41 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 16:26:35 UTC