Re: [mediacapture-record] Improvements to Privacy & Security Considerations (#196)

The `MediaRecorder.isTypeSupported()` example described at https://github.com/w3c/mediacapture-record/issues/142 is negligible, if impactful at all. There are far simpler ways to "fingerprint" the user-agent, at least to determine if the user is operating a Chromium or Chrome browser or a Mozilla browser, or a Linux or other OS, which is all that vector exposes. Unless there are considerations other than exposing the encoding capabilities in this or #142 which are privacy and security related?

To determine if a user is at Chrome all they have to do is type `chrome` in the console. To determine if at Mozilla just check `!!HTMLMediaElement.prototype.mozCaptureStream`. 

What is the privacy concern with `isTypeSupported()`?

-- 
GitHub Notification of comment by guest271314
Please view or discuss this issue at https://github.com/w3c/mediacapture-record/issues/196#issuecomment-650779612 using your GitHub account

Received on Sunday, 28 June 2020 15:22:52 UTC