Re: [w3ctag/design-reviews] Early TAG design review for captureTab (#609)

The WG settled on the safer of two options pitted against each other in the OP, so we don't need the TAG to pick for us.

But the request was to determine whether _either_ approach is safe, so half the request still seems valid.

I'm happy to give an update on [getViewportMedia](https://github.com/w3c/mediacapture-screen-share/issues/155) (a.k.a. "getTabMedia()" in the OP). The API is now secured by site-isolation, and target documents must additionally opt into capture using Document policy.

But even this API has privacy concerns like [non-script resources being unprotected](https://docs.google.com/presentation/d/1GaMOvxpi2wUI46dbEEqOQsSVDbga-Zj3jAUfLDntT8E/edit?ts=6086c498#slide=id.gc981f13c89_0_0), and [private information inherent in rendering is still leaked](https://docs.google.com/presentation/d/1CeNeno5XuDhm1mpnVyE9eT14YKZgZUtgQsJfC8uqEpA/edit?ts=5fc7fcd2#slide=id.gaef31c926d_1_86).

I'll work on an explainer and fill out the questionaire.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/609#issuecomment-843583251