Re: Intent to ship: media-capabilities

2018-08-11 Thread Jean-Yves Avenard
It appears that I hadn’t provided all the information earlier… So here it is again: Summary: Media Capabilities allow for web sites to better determine what content to serve to the end user. Currently a media element offers the canPlayType method (https://html.spec.whatwg.org/multipage/media.ht

Re: Intent to ship: media-capabilities

2018-08-09 Thread Jean-Yves Avenard
Hi There has been some concerns about some parts of the spec, in particular the one extending the Screen interface. The plan now is to keep the Screen extensions disabled by default and to enable the remaining parts, related purely to the playing and encoding capabilities on. This is tracked i

Re: Intent to ship: media-capabilities

2018-07-03 Thread Jean-Yves Avenard
Hi The code is now in central and in the last nightly. It's currently disabled by default behind the pref media.media-capabilities.enabled The bug tracking fingerprinting concerns is done in https://bugzilla.mozilla.org/show_bug.cgi?id=1461454 Feel free to enable it and watch videos in YouTube.

Re: Intent to ship: media-capabilities

2018-05-15 Thread Karl Tomlinson
Steven Englehardt writes: > While it may have been > theoretically possible for all trackers to gather statistics on video > playback for each configuration, the only scripts that could practically > carry out those attacks without degrading user experience would have been > video providers. This

Re: Intent to ship: media-capabilities

2018-05-15 Thread Randell Jesup
>If my understanding is correct, Media Capabilities does expose quite a >larger fingerprinting surface in practice. While it may have been >theoretically possible for all trackers to gather statistics on video >playback for each configuration, the only scripts that could practically >carry out thos

Re: Intent to ship: media-capabilities

2018-05-14 Thread Boris Zbarsky
On 5/14/18 3:18 PM, Jean-Yves Avenard wrote: The most obvious choice considered was to provide identical information to what the existing canPlayType information provide: that is not providing extra details. OK. All I'm saying is that this needs to be sorted out before we ship. I would inv

Re: Intent to ship: media-capabilities

2018-05-14 Thread Steven Englehardt
> > On 14 May 2018, at 6:47 pm, Tom Ritter wrote: > > > > It seems like this will reveal a lot of information about the user's > > hardware. Does the Resist Fingerprinting preference disable the API or > > report standardized results? If not, can we get that bug on file (and > > if it's easy, poin

Re: Intent to ship: media-capabilities

2018-05-14 Thread Tom Ritter
On Mon, May 14, 2018 at 1:57 PM, Jean-Yves Avenard wrote: > Hi > >> On 14 May 2018, at 6:47 pm, Tom Ritter wrote: >> >> It seems like this will reveal a lot of information about the user's >> hardware. Does the Resist Fingerprinting preference disable the API or >> report standardized results? If

Re: Intent to ship: media-capabilities

2018-05-14 Thread Jean-Yves Avenard
Hi > On 14 May 2018, at 6:53 pm, Boris Zbarsky wrote: > > On 5/14/18 11:19 AM, Jean-Yves Avenard wrote: >> The proposed spec is available at https://wicg.github.io/media-capabilities/ >> > > I have some questions about this spec and our implementati

Re: Intent to ship: media-capabilities

2018-05-14 Thread Jean-Yves Avenard
Hi > On 14 May 2018, at 6:47 pm, Tom Ritter wrote: > > It seems like this will reveal a lot of information about the user's > hardware. Does the Resist Fingerprinting preference disable the API or > report standardized results? If not, can we get that bug on file (and > if it's easy, point out e

Re: Intent to ship: media-capabilities

2018-05-14 Thread Boris Zbarsky
On 5/14/18 11:19 AM, Jean-Yves Avenard wrote: The proposed spec is available at https://wicg.github.io/media-capabilities/ I have some questions about this spec and our implementation: 1) What are the fingerprinting implications? What effect, if

Re: Intent to ship: media-capabilities

2018-05-14 Thread Tom Ritter
It seems like this will reveal a lot of information about the user's hardware. Does the Resist Fingerprinting preference disable the API or report standardized results? If not, can we get that bug on file (and if it's easy, point out exactly where we would want to add the 'if() return false'?) -to

Re: Intent to ship: media-capabilities

2018-05-14 Thread James Graham
On 14/05/2018 16:19, Jean-Yves Avenard wrote: Media Capabilities allow for web sites to better determine what content to serve to the end user. Currently a media element offers the canPlayType method (https://html.spec.whatwg.org/multipage/media.html#dom-navigator-canplaytype-dev

Intent to ship: media-capabilities

2018-05-14 Thread Jean-Yves Avenard
Media Capabilities allow for web sites to better determine what content to serve to the end user. Currently a media element offers the canPlayType method (https://html.spec.whatwg.org/multipage/media.html#dom-navigator-canplaytype-dev