Re: [mediacapture-screen-share] Add getCurrentBrowsingContextMedia (#148)

In the scenario described, the service provider trusts the (specific)
third-party enough to (1) embed it and (2) provide its iframe with
allow=display-capture. The service provider should not, IMHO, be forced to
the decision of either not trusting the (specific) third-party it at all,
or trusting it enough to allow it to run same-origin.

On Wed, Dec 2, 2020 at 4:31 PM Jan-Ivar Bruaroey <notifications@github.com>
wrote:

> I don't think we should introduce artificial reasons to crop, nor assume
> cropping will ever be added as a feature since it's a slippery slope to
> image processing, something this WG appears to be leaning more toward raw
> media access to solve.
>
> Shelving it for the time being, let's please examine the scenario of a
> game running in the browser, and wanting to stream itself to a service like
> Twitch. The streaming service could "publish" an iframe or a script that
> can be embedded in a game, implementing that functionality. The
> alternatives I can think of are less preferable. They
> include:
>
> (a) Each game re-implementing the streaming capability, probably by
> importing the streaming service's code into their own codebase. I don't
> think that's a reasonable alternative, as the copied code would be running
> *same-origin*, and would have to be scrutinized before being imported;
>
> Exactly. To protect users from dubious information-harvesting JS
> libraries, I think I'd prefer this to receive the same level of scrutiny
> that a service provider performs to protect itself.
>
> I don't think we should make it easier to export user trust to entities
> the service provider itself doesn't trust, because if a service provider
> doesn't trust a library then users probably shouldn't either.
>
> —
> You are receiving this because you were mentioned.
> Reply to this email directly, view it on GitHub
> <https://github.com/w3c/mediacapture-screen-share/pull/148#issuecomment-737305409>,
> or unsubscribe
> <https://github.com/notifications/unsubscribe-auth/AFIX22C4Z5WCG2YBNPMNCG3SSZMWVANCNFSM4SHNXW3A>
> .
>


-- 
GitHub Notification of comment by eladalon1983
Please view or discuss this issue at https://github.com/w3c/mediacapture-screen-share/pull/148#issuecomment-737317273 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 2 December 2020 15:50:14 UTC