Re: [rtcweb] WGLC for draft-ietf-rtcweb-ip-handling

[Justin Uberti <[e-mail]>]

This notion of sites asking for device access just to get a full set of IP
addresses has been discussed many times, but I am not aware of any cases of
this happening in the real world.

If the user is on a VPN and trying to contact a MCU that is on the VPN,
Mode 2 (no devices access needed) will do the right thing, assuming HTTP
traffic is being routed correctly.


On Thu, Mar 29, 2018 at 2:04 PM Iñaki Baz Castillo <[e-mail]> wrote:

> On 29 March 2018 at 17:34, Lorenzo Miniero <[e-mail]> wrote:
> > And let's not forget we're not just talking of discriminating data
> > channels, here. As someone else already pointed out, this would affect
> > recvonly audio/video PeerConnections as well. Requiring access to
> > a local device to implement those would be a very hacky solution (and
> > in fact Safari, which currently does something like this, is horrible
> > in that regard), especially considering that, just as for data channels,
> > there would be no need to require access to your webcam if you just
> > wanted to attend a webinar and never say anything yourself. It would
> > actually have the effect of looking even shadier to end users ("why
> > exactly do you want to access my webcam? I'm just trying to watch
> > something here!"), just as it would for datachannel-only PCs, and
> > further reduce the trust people would have in WebRTC as a technology.
> >
> > As Lennart said, a different popup that says something like "this page
> > wants to create <something>" would be a much better solution. Yes,
> > another UI knob or something like this, but still much better than
> > abusing the only consent request we currently expose simply because
> > it's, again, the only we have and we don't want to annoy users too much.
>
> Completely agreed with Lorenzo. Asking for "mic/webcam access" to get
> full IP access and then not using the mic/webcam (because the app just
> wants to receive media or run a datachannel) is a hacky and ugly
> solution.
>
> Please, just add a new prompt to ask for full IP access and save such
> a setting per origin (same as getUserMedia when HTTPS). That's all.
>
>
> --
> Iñaki Baz Castillo
> <[e-mail]>
>
> _______________________________________________
> rtcweb mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/rtcweb
>