- From: Jan-Ivar Bruaroey via GitHub <sysbot+gh@w3.org>
- Date: Wed, 24 Mar 2021 01:07:18 +0000
- To: public-webrtc-logs@w3.org
> ... For example, in Google Slides, editing slide decks, reading decks written by others, commenting on decks, etc., are much more common use cases than sharing using gCBCM. It would be preferrable to keep these flows intact 100% of the time, at the cost of (rarely) breaking off a gCBCM-initiated capture. ... Common maybe, but != important. Having just spent days prepping a presentation, I can confidently say the time most important to me to _not_ break would be during the final presentation in front of an online audience. 🙂 I think I'd much prefer it break during preview, when there is still time to fix things. At the risk of sounding presumptuous, if this feature works out, it might quickly become the most important target for Google Slides, at least during this pandemic. But behavior seems orthogonal to the shape of headers to me. E.g. I don't see why we couldn't treat `Cross-Origin-Embedder-Policy: require-corp; html-capture` as `Cross-Origin-Embedder-Policy: require-corp` and simply update some `window.isCapturable` accordingly and terminate captures if that's what we decide is best (though as I said above, I personally doubt it is). > ... [Feature-policies](https://developer.mozilla.org/en-US/docs/Web/HTTP/Feature_Policy), I think, could be bent to work here. ... It's "Permissions policy" now, and the [Mozilla position](https://mozilla.github.io/standards-positions/#feature-policy) on the HTTP headers part is still lukewarm. We only implement the iframe part FWIW. > it only goes "up" the tree. It will allow a document to opt into being embedded by specific embedders. Is this a requirement? Wouldn't you use `Content-Security-Policy: frame-ancestors uri` instead? In any case, going "up" the tree would go against every other permissions policy, and there would be no analogous `allow=` version. Why do we need to fit in here? Why not `Cross-Origin-Embedder-Policy: require-corp; html-capture` or just make up a header? -- GitHub Notification of comment by jan-ivar Please view or discuss this issue at https://github.com/w3c/mediacapture-screen-share/issues/155#issuecomment-805394607 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 24 March 2021 01:07:20 UTC