Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue #176: Add comments to privacy section to address issue. #217

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Issue #176: Add comments to privacy section to address issue. #217

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 13 additions & 2 deletions index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1212,7 +1212,15 @@ spec: encrypted-media-draft; for: EME; urlPrefix: https://w3c.github.io/encrypte
categories, within which capabilities are similar thus minimizing
effective entropy.
</p>

<p>
An alternative design approach in which sites expose the available media
formats and browsers evaluate these against capabilities, returning only
the chosen format was considered. However, this would not in fact offer
a privacy benefit since sites could use the API repeatedly to obtain the
complete capability set. Stringent rate limiting of the API could interfere
with normal site behaviors such as speculative preparation across multiple
playback items.
</p>
<p>
If an implementation wishes to implement a fingerprint-proof version of
this specification, it would be recommended to fake a given set of
Expand All @@ -1221,8 +1229,11 @@ spec: encrypted-media-draft; for: EME; urlPrefix: https://w3c.github.io/encrypte
degrade the user's experience. Another mitigation could be to limit
these Web APIs to top-level browsing contexts. Yet another is to use a
privacy budget that throttles and/or blocks calls to the API above a
threshold.
threshold. Additionally, browsers may consider whether a site goes on
to make use of the capabilities it detects and apply more stringent
controls to sites that are observed not to do so.
</p>

</section>
</section>
</section>
Expand Down
Loading