Re: [mediacapture-region] Should we support strings in addition or in lieu of opaque identifiers? (#46)

> CropTarget UUIDs are lightweight and offer apparent user benefits. My point is that you can get all the user benefit without the risks by keeping it as an opaque token.

The UUID is still opaque if it observes [these guidelines]( I believe the crux of your concern is not opaqueness, but rather transmissibility to remote servers. I believe transmissibility to be desirable, because it allows cross-origin collaboration that would easily hook up to existing infrastructure. You have brought up a possible [abuse scenario]( I don't personally see it as credible, but we can have different opinions, that's fine. I have [shown]( that technically, the same concern exists already; however, now you believe my scenario is not credible. (That's also fine.) How do we resolve this? Do you have a suggestion for determining which concerns are credible and which are not?

GitHub Notification of comment by eladalon1983
Please view or discuss this issue at using your GitHub account

Sent via github-notify-ml as configured in

Received on Saturday, 25 June 2022 19:29:47 UTC