Re: [rtcweb] IP handling and mDNS: The issue with obtaining consent

Justin Uberti <juberti@google.com> Fri, 09 November 2018 23:22 UTC

Return-Path: <juberti@google.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEB6E1277CC for <rtcweb@ietfa.amsl.com>; Fri, 9 Nov 2018 15:22:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.501
X-Spam-Level:
X-Spam-Status: No, score=-17.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iGZ67Ex6CQXv for <rtcweb@ietfa.amsl.com>; Fri, 9 Nov 2018 15:22:40 -0800 (PST)
Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 873A91274D0 for <rtcweb@ietf.org>; Fri, 9 Nov 2018 15:22:40 -0800 (PST)
Received: by mail-io1-xd2e.google.com with SMTP id r7-v6so2345300iog.7 for <rtcweb@ietf.org>; Fri, 09 Nov 2018 15:22:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ySn776mEUoy4xUU+yfxY+AbGmaV3m5XxrE/Trt3Bwhk=; b=kntFsEMjTP6m/PrRVRBSsqzuvf1PS1PH7T26iCaCyWh4K2FQFI7/buLWqNF6Fenj+5 WBTteEwG8xXi4GwUxM2mzPhNBiXESZ3VpglMEA7qJGy4nRqHpzqXDXlKfu5p4oDqAtot 8JHmVDHHhPDRHP5aCgrcBKNNYbGQ+HYKDHwoRJgAsv+f9gBjuNDXoNZNTBGfOAV8TcDO J2HSbpdUilu49X+tlyKkJIg4lpSkv5Th66HBuJ4HtTQnVEB2YfjMi1yKEgX23QOCq+hH ACtIV+R6M8+DZ4zu07OhlHqTVY1z5rFnoq0Ow1hB/IwOwbSAZMA42sWXqeMRT6djLvT8 0m8A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ySn776mEUoy4xUU+yfxY+AbGmaV3m5XxrE/Trt3Bwhk=; b=a8KE3tOfJ9riQJRnLE12o/y7yHpNkh/FjtBEW2bU0vKnqyftj09r8JvTngiMHID43a v07TQb/FPz9x2Q+r/Z712lBReARTE8ucyGoC2da0yubcYXIss6qRKH/YYEy32myia28F wQT7k65StkNCAo5VtUpxfr3Nxfyj3nWMvM6hCoEix1RThA6ealUltiqelozgOCFfy4Th Q8B/WOyiQr+DKsLsEhMTi1Ic0sQGY/5JLoyVbuL5r39KfX07S8mCPAOTUFr8xpHlCecx RQQc47djpfVYpWyUpqpxvF/LTMbv8BcvPXj60CG4w8tivqsjxx1Zv8sNGxK3nukW5YNS FU5g==
X-Gm-Message-State: AGRZ1gL/BuDzc4lNv1ZEXGBa4McDh8t9jontp3Zs6yPC8O7tjS7McA3A Ij9UBW0A+UIhdpK0Y8Y7uN+AQkGghgXhKg8JcY1Aug==
X-Google-Smtp-Source: AJdET5f68B+zRq0+QMz/fHB1YTS4YvtIQ9YXT6lBXl0UlEkCuAmQclSsmValNUQTfne0ZOaB9g15srJg3l9legSnR7o=
X-Received: by 2002:a5e:980f:: with SMTP id s15-v6mr8449064ioj.87.1541805759388; Fri, 09 Nov 2018 15:22:39 -0800 (PST)
MIME-Version: 1.0
References: <f4786770-e4f4-f7d2-8dbf-f389ca6b0b7d@nostrum.com> <996451f7-a863-14cd-6899-45e1c9bb9e2b@gmail.com>
In-Reply-To: <996451f7-a863-14cd-6899-45e1c9bb9e2b@gmail.com>
From: Justin Uberti <juberti@google.com>
Date: Fri, 09 Nov 2018 15:22:28 -0800
Message-ID: <CAOJ7v-0exuw6pTvikWnwNGKUOkviNtVSEfM331W6Uq_N_43D6g@mail.gmail.com>
To: Lennart Grahl <lennart.grahl@gmail.com>
Cc: RTCWeb IETF <rtcweb@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000009a66c3057a43a0d0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtcweb/3nhuGYfLcEFCq8fBET2M_QYrN1M>
Subject: Re: [rtcweb] IP handling and mDNS: The issue with obtaining consent
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Nov 2018 23:22:43 -0000

I understand the sentiment here, but we're a standards body that designs
protocols, and our ability to impose vague requirements on implementation
user interfaces is limited at best.

I prefer to maintain the current text in the document regarding consent,
which was the result of extensive WG discussions.

On Thu, Nov 8, 2018 at 3:42 AM Lennart Grahl <lennart.grahl@gmail.com>
wrote:

> Hi everyone,
>
> since we were running out of time in the meeting, a supplement comment
> regarding the rtcweb-mdns-ice-candidates draft and the plans for IP
> handling in general:
>
> I want to endorse the mDNS extension draft as I believe it is a
> significant step towards getting WebRTC out of the blocklist of all
> those privacy plugins for browsers.
>
> The draft states that the IP hiding technique should be applied to use
> cases where no consent has been requested and that obviously affects
> those use cases in a negative way. This is the first extension to the IP
> handling draft but it shows a direction which makes it reasonable to
> assume that "consent" vs. "no consent" will diverge further for privacy
> reasons. And that is something I *would* generally encourage...
>
> However, it's only fair to take a step back to ensure that all use cases
> can request user consent appropriately in order to escape those
> restrictions. I don't think we can ignore that this hasn't happened so
> far in browsers which all rely on the use of getUserMedia. That is not
> appropriate for media receive only or pure data use cases. Thus, I would
> like the IP handling document (or the extension draft) to require
> implementations to allow for consent requests in a neutral way.
>
> Cheers
> Lennart
>
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb
>