Re: [webrtc-pc] `getCapabilities` seems to leak hardware capabilities w/o a permission (#2460)

> browsers can consider mitigations such as reporting only a common subset of the capabilities

While this allows browsers to solve the issue, I do not think this resolves this issue to a satisfactory extent, because...
- It makes caring about the privacy concern completely optional. Today's browsers seem to ignore this optional comment.
- If a browser does care about the privacy concern, it robs that browser of the full feature set. I.e. it does not provide a way to obtain the relevant permissions such that getCapabilities() is usable to the same extent that it is in a browser that doesn't care.

-- 
GitHub Notification of comment by henbos
Please view or discuss this issue at https://github.com/w3c/webrtc-pc/issues/2460#issuecomment-582323389 using your GitHub account

Received on Wednesday, 5 February 2020 09:43:25 UTC