- From: Elad Alon via GitHub <sysbot+gh@w3.org>
- Date: Wed, 02 Dec 2020 15:50:12 +0000
- To: public-webrtc-logs@w3.org
In the scenario described, the service provider trusts the (specific) third-party enough to (1) embed it and (2) provide its iframe with allow=display-capture. The service provider should not, IMHO, be forced to the decision of either not trusting the (specific) third-party it at all, or trusting it enough to allow it to run same-origin. On Wed, Dec 2, 2020 at 4:31 PM Jan-Ivar Bruaroey <notifications@github.com> wrote: > I don't think we should introduce artificial reasons to crop, nor assume > cropping will ever be added as a feature since it's a slippery slope to > image processing, something this WG appears to be leaning more toward raw > media access to solve. > > Shelving it for the time being, let's please examine the scenario of a > game running in the browser, and wanting to stream itself to a service like > Twitch. The streaming service could "publish" an iframe or a script that > can be embedded in a game, implementing that functionality. The > alternatives I can think of are less preferable. They > include: > > (a) Each game re-implementing the streaming capability, probably by > importing the streaming service's code into their own codebase. I don't > think that's a reasonable alternative, as the copied code would be running > *same-origin*, and would have to be scrutinized before being imported; > > Exactly. To protect users from dubious information-harvesting JS > libraries, I think I'd prefer this to receive the same level of scrutiny > that a service provider performs to protect itself. > > I don't think we should make it easier to export user trust to entities > the service provider itself doesn't trust, because if a service provider > doesn't trust a library then users probably shouldn't either. > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <https://github.com/w3c/mediacapture-screen-share/pull/148#issuecomment-737305409>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AFIX22C4Z5WCG2YBNPMNCG3SSZMWVANCNFSM4SHNXW3A> > . > -- GitHub Notification of comment by eladalon1983 Please view or discuss this issue at https://github.com/w3c/mediacapture-screen-share/pull/148#issuecomment-737317273 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 2 December 2020 15:50:14 UTC