#228: Should WebRTC be [SecureContext]

Visit on Github.

Opened Jan 31, 2018

As noted here, we are wondering whether we should ask WebRTC spec to be in [SecureContext]. Here's our issue to discuss...

CC @annevk, @alvestrand

Discussions

Comment by @annevk Jan 31, 2018 (See Github)

Per https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts/features_restricted_to_secure_contexts it seems browsers are moving in that direction. I'm not sure if [SecureContext] will work (e.g., perhaps there are sites assuming that interfaces exist), but restricting it to secure contexts in prose should be doable at least.

Comment by @torgo Apr 5, 2018 (See Github)

@dontcallmedom your feedback is solicited on this topic. Yves will follow up with context.

Comment by @travisleithead Apr 5, 2018 (See Github)

TAG doesn't really have objections to asking WebRTC to make it [SecureContext]. Implementations have already started moving the feature to [SecureContext]… See https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts/features_restricted_to_secure_contexts. (Note Safari does restrict getUserMedia to [SecureContext].

Comment by @cynthia Apr 5, 2018 (See Github)

From my testing, at least getUserMedia() seems to be secure context in at least three implementations, but the spec seems to disagree.

Comment by @jan-ivar Jun 4, 2018 (See Github)

We should probably specify when we're talking about RTCPeerConnection vs. getUserMedia, vs. long tail of other mediacapture-* specs, as "WebRTC" is often an umbrella term for all of the above.

Comment by @ylafon Sep 13, 2018 (See Github)

See w3c/mediacapture-screen-share#77 and w3c/mediacapture-main#540

Comment by @jan-ivar Sep 28, 2018 (See Github)

And https://github.com/w3c/mediacapture-output/issues/78.

Discussed Dec 4, 2018 (See Github)

Sangwhan: This has been fixed on the wg side I have checked... "WebRTC is now secure

Comment by @cynthia Dec 4, 2018 (See Github)

Thanks a lot for following up on this. We have checked all the PRs on the spec side and yes, we are very happy to see this change.

Thank you for flying TAG! We are excited to see how the next generation comes out.