01:14:14 lgombos__ has joined #mediacap 01:40:11 lgombos__ has joined #mediacap 03:56:49 hta has joined #mediacap 13:43:35 RRSAgent has joined #mediacap 13:43:35 logging to http://www.w3.org/2013/02/06-mediacap-irc 13:43:37 RRSAgent, make logs public 13:43:37 Zakim has joined #mediacap 13:43:39 Zakim, this will be MCAP 13:43:39 I do not see a conference matching that name scheduled within the next hour, trackbot 13:43:40 Meeting: Media Capture Task Force Teleconference 13:43:40 Date: 06 February 2013 13:43:42 ScribeNick: gmandyam 13:43:56 Chair: hta, stefanh 13:43:58 fjh has joined #mediacap 13:44:08 s/Teleconference/F2F Meeting/ 13:44:08 HTA - going over conclusions from Feb. 5 13:44:21 burn has joined #mediacap 13:44:37 HTA - Device enumeration has been concluded to be necessary, but there are privacy issues. 13:44:40 stefanh has joined #mediacap 13:45:28 Martin - privacy issues were not in scope of current proposal, but for suggested expanded capabilities. Additional device info could potentially improve privacy. 13:45:34 HTA- Error handling will not change from current model. 13:46:05 dan_romascanu has joined #mediacap 13:46:19 Cullen - we should be consisten as to how we do error handling 13:46:50 HTA - "Immediate Stream" ,i.e. synchronous gUM. This belongs in a sense to PeerConnection. 13:47:08 wonsuk has joined #mediacap 13:47:12 jeromemarcon has joined #mediacap 13:48:48 Dan_Druta has joined #mediacap 13:48:49 s/ - /: / 13:49:54 -> http://www.w3.org/wiki/images/9/90/Gum-identity-interim-2013-01.pdf Media Streams and Identity slides 13:50:30 s/HTA -/hta:/g 13:50:32 s/HTA-/hta:/g 13:50:41 RRSAgent, draft minutes 13:50:41 I have made the request to generate http://www.w3.org/2013/02/06-mediacap-minutes.html timeless 13:50:54 RRSAgent, make logs pyublic 13:50:56 RRSAgent, make logs public 13:51:00 RRSAgent, draft minutes 13:51:00 I have made the request to generate http://www.w3.org/2013/02/06-mediacap-minutes.html timeless 13:51:13 s/HTA/hta/ 13:51:15 RRSAgent, draft minutes 13:51:15 I have made the request to generate http://www.w3.org/2013/02/06-mediacap-minutes.html timeless 13:51:22 s/Martin -/Martin:/g 13:51:29 s/Cullen -/Cullen:/g 13:51:36 [ General Idea: Grant Media Access to an Idenity ] 13:51:39 s/timeless/scribe/ 13:51:45 [ Topics ] 13:51:46 s/timeless/scribe/ 13:51:50 RRSAgent, draft minutes 13:51:50 I have made the request to generate http://www.w3.org/2013/02/06-mediacap-minutes.html timeless 13:52:04 [ Stream Isolation ] 13:52:05 s/timeless/scribe/ 13:53:23 Scribe: Josh_Soref 13:53:25 scribenick: timeless 13:53:28 [ History ] 13:53:36 ekr: we got three proposals 13:53:41 ... I presented a 1st draft in Lyon 13:53:49 ... i never got around to writing it up 13:53:55 ... this is a detailed description of my proposal 13:54:04 [ Three ways to call gUM (all constraints) ] 13:54:11 ekr: * Call gUM() 13:54:13 fluffy has joined #mediacap 13:54:19 ... Call gUM(noaccess=true) 13:54:24 s/Call/* Call/ 13:54:38 ... I won't touch the stream 13:54:50 ... * Call gUM(peerIdentity=bob@example.com) 13:54:55 gmandyam has joined #mediacap 13:55:04 ... This stream will only be sent to a certain identity 13:55:09 [ Call gUM() as normal ] 13:55:15 ekr: current behavior unchanged 13:55:15 Hey Josh, are you scribing? I'll quit if you are. - Giri 13:55:18 [ noaccess=true ] 13:55:19 fischman has joined #mediacap 13:55:30 ekr: Media permissions checks as usual 13:55:38 .. if site gets access, it gets permissions 13:55:39 OK - let me know when you need a break 13:55:47 ... stream is isolated 13:55:52 ... keying must be via DTLS 13:56:03 ekr: you [martin__] will say no to identity assertion 13:56:12 martin__: this will enable creation of identity assertion based on stream 13:56:19 ekr: once peer connection is established, 13:56:28 ... it either knows peer identity 13:56:36 ... browser displays identity and "no access" indicator 13:56:51 ekr: WebEx etc want to guarantee to others 13:56:56 ... and customers want to check 13:57:01 ... that the site didn't screw them over 13:57:06 [ Flow slide ] 13:57:19 ekr: indicator has an identity assertion 13:57:26 [ peerIdentity=bob@example.com ] 13:57:33 ekr: originally suggested by cullen? 13:57:39 ... more enhanced from user perspective 13:57:56 ... people seem to be concerned about allowing a site to have access for perpetuity 13:58:07 ... "i only want to allow site to call X and Y and no one else" 13:58:16 ... site indicates to user who the content will be sent to 13:58:24 ... either RFC822 style email address 13:58:37 ... or Browser if it has Contacts accesss, it could show name + icon 13:58:47 Ted: for Poker site example 13:58:58 ... would it be skiptracer@pokersite.example ? 13:59:03 ... but could you do player1@ ? 13:59:10 ... or would you need a different mechanism 13:59:17 ekr: i think you'd outsource identity assertion 13:59:38 adambe has joined #mediacap 13:59:40 martin__: to do a Player 1 13:59:47 ... you need player1@pokerstars.example 13:59:51 ... the name is in this form 14:00:00 ... and the domain for this domain can do the identity assertion 14:00:12 ekr: you need to be able to mechanically identify this person 14:00:19 s/Ted:/TedHardie:/ 14:00:35 TedHardie: this isn't valid for the poker table case without pokerstars preminting 14:00:41 martin__: just minting 14:00:57 Dan_Druta: there's a concern about information harvesting 14:01:05 gmandyam: what if you want to do a native media player 14:01:25 ... if i want to use the recording api 14:01:34 martin__: you'd use the gUM(noaccess=false) 14:01:38 ... you don't need to set the argument 14:01:46 gmandyam: what would this mean for access? 14:01:52 ekr: access will be on `origin` basis 14:02:09 gmandyam: for access to raw media? 14:02:13 ekr: you'll still have that 14:02:21 ... this is a new way to restrict access 14:02:30 gmandyam: what motivates a web site to do this? 14:02:44 cullen: sites like WebEx want to be able to assure customers that they *don't* have access to the media 14:02:51 ... they'll choose to use this mechanism 14:03:06 ... and users could verify this by something morally equivalent to the lock icon today 14:03:17 justin: what does it mean for WebEx to not have access to the media? 14:03:22 ... surely they'll have the data 14:03:33 cullen: WebEx won't have the keying material 14:03:40 ... for a Point to Point Call 14:03:48 ... it knows martin__ called ekr 14:03:54 ... and for a TURN server, it might all flow through 14:04:01 ... but it doesn't have the keying material 14:04:06 ... for a 10 person conference 14:04:16 ... you might know who is sending the content v. spreading 14:04:21 ... but you won't know what was sent 14:04:27 ... for WebEx or Google Hangouts 14:04:34 ... if Microsoft and Silverlake 14:04:43 ... are doing some deal about how Cisco would go out of business 14:04:48 ... they want assurance that we aren't listening 14:04:54 justin: but in a WebEx conference 14:05:02 ... the central node won't have any access to the media? 14:05:14 ... what assertion covers the end to end 14:05:22 ... that it won't have access to the media? 14:05:32 cullen: for 1-1 i'm saying we can do it 14:05:46 aroach: if identity asserter and site you're on 14:05:54 ... are the same or are in collusion, you're ... 14:05:56 ekr: you're hosed 14:06:06 ... this is about a site being able to provide you with evidence 14:06:14 ... but you have to trust the source of the communicating counterpart 14:06:23 XX: we're pushing trust from site hosting JS 14:06:28 ... to site hosting identification 14:06:39 ekr: or a site with extra ... 14:06:43 XX: are we confusing the user 14:06:50 ... about do you trust X v. Y.com ? 14:06:54 ekr: always some risk 14:07:04 ... people have some sense that domains control identities 14:07:15 ... some sense, 14:07:22 ... companies reassign email addresses 14:07:29 ... Gmail can redirect email somewhere else 14:07:42 ... 2. there's a lot of work in distributed identification systems 14:07:44 ... BrowserID 14:07:50 ... it's a lot more straightforward to do a calling site 14:07:54 ... than an identity provider 14:08:01 ... so your identity is likely to be by someone you trust 14:08:12 ... but the caller site something less trusted 14:08:18 ... 3. this is what we know how to do 14:08:30 s/XX:/PeterThatcher:/ 14:08:31 s/XX:/PeterThatcher:/ 14:09:00 ekr: MediaStream can only be connected to a PeerConnection with identity provided 14:09:00 mauro has joined #mediacap 14:09:16 ... completion would choke if call goes elsewhere 14:09:33 [ ekr explains call flow ] 14:09:49 ekr: that's the entirety of the mechanism 14:09:55 ... i can send to the list on the details 14:10:00 ... but it's simple 14:10:09 gmandyam: can you go back to the call flow slide? 14:10:14 ... this is entirely voluntary 14:10:22 ... the web site can contact the ID provider directly 14:10:29 ... the web site can put up its own dialog box 14:10:41 ... it can ask user "can i send to bob@example.com" 14:10:44 ... why add to gUM 14:10:52 ekr: this is for Identity where you don't trust calling site 14:11:01 ... this is about denying calling site access to media 14:11:17 gmandyam: the web site can get access to the media by not doing this 14:11:58 ekr: this is a way to build a site where the user can verify the site isn't sniffing 14:11:58 cullen: there's a reason the browser needs to show the Lock icon 14:11:58 ... instead of the web site showing "secured by Thawt" 14:12:02 ekr: they do that to though ;-) 14:12:21 cullen: this is about the chrome of the browser showing the assertion 14:12:33 ami: how does bob tell his PeerConnection that he's bob@example.com 14:12:39 ekr: that's defined in IETF drafts 14:12:52 jesup: in addition to who puts up the assertion 14:12:56 ... and whether they can access the media 14:13:03 ... even if you trust the site to not access the media 14:13:08 ... the site can always be hacked 14:13:14 ... so trusting them 14:13:18 ... if they're hacked 14:13:44 ... worse case they won't get the media 14:13:54 ekr: i'll send detailed text for the proposal 14:14:01 [ Recording Consent ] 14:14:20 ekr: W3C (will have?) published recording API as FPWD 14:14:29 ... do we need special recording consent? 14:14:34 s/[ Recording Consent ]/Topic: Recording Consent 14:14:35 [ Basic Recording Concept (review) ] 14:14:40 ekr: i think i'm summarizing correctly 14:14:46 ... MediaStream 14:14:53 .. feed it to MediaRecording() constructor 14:14:58 ... js gets direct access to media 14:15:06 s/.. feed/... feed/ 14:15:14 [ Why the special permissions? ] 14:15:22 ekr: quoting Ben Pedtick 14:15:34 ... there are regulatory requirements for such notifications 14:15:42 [ Not the only way to get direct access ] 14:15:49 ekr: people suggested building it into the browser interface 14:15:59 ... Pipe MediaStreeam to PeerConnection 14:16:02 ... record on server 14:16:06 ... loop back to client 14:16:11 ... video can be read to Canvas 14:16:27 ... no technical measure can distinguish recording from a webrtc call to an arbitrary location 14:16:54 ... no matter how many dialogs we pop up 14:17:03 ... there's a way to build something that avoids the dialogs 14:17:09 [ Proposed Resolution ] 14:17:24 ekr: what you want to do is often to have the recording on the remote side 14:17:36 ... I'd propose not having extra permissions 14:17:46 ... and say it's the application's job to deal w/ regulatory requirements 14:17:57 ... Chrome and Firefox already render indicators that the media is in use 14:18:19 ... we could add a UI for a tape drive 14:18:24 ... but i think that should be done in content 14:18:29 Josh_Soref: +1 14:18:34 martin__: +1 14:18:47 martin__: concern that we document this decision in Security and Privacy 14:19:04 JonLennox has joined #mediacap 14:19:11 PeterThatcher: when you're telling the user that media will be sent 14:19:22 ... would it be good for the browser to have fine detail that the media could be recorded 14:19:24 ACTION: ekr to draft text on no-permission-required for recording for inclusion in the mediastream-recording doc 14:19:24 Error finding 'ekr'. You can review and register nicknames at . 14:19:29 ACTION: eric to draft text on no-permission-required for recording for inclusion in the mediastream-recording doc 14:19:29 Created ACTION-16 - Draft text on no-permission-required for recording for inclusion in the mediastream-recording doc [on Eric Rescorla - due 2013-02-13]. 14:19:35 ... as part of the Chrome 14:20:08 Clarification: Permission check only on gUM, not for recording is current proposal. This is independent of ekr's proposal about a peerIdentity argument for gUM. 14:20:14 ekr: "maybe this is being recorded and sent to your mom" 14:20:19 PeterThatcher: if there isn't identity stuff 14:20:26 ... "maybe it could go anywhere" 14:20:41 cullen: when you turn on your computer, you may be recorde 14:20:46 s/recorde/recorded/ 14:21:12 ... and when the green light goes on, you *are* being recorded 14:21:21 ... i'm fine with "documenting that recording happens" 14:21:55 Topic: Settings and Constraints 14:21:57 and the only reason that I made the suggestion is so that we don't have to have these sorts of discussions ever again 14:22:49 [ Dynamic usable constraints ] 14:23:25 burn: for people who want to use media locally 14:23:34 ... the constraint mechanism didn't do well for what you had to do in the browser 14:23:45 ... Travis spent a lot of time thinking about how this would work 14:23:54 ... the original constraint proposal was for selecting a stream 14:24:01 ... but there was no ability to change constraints over time 14:24:03 ekr has joined #mediacap 14:24:05 -> http://www.w3.org/wiki/images/f/fd/Constraints20130406.pdf Constraints and settings 14:24:07 ... what if you want to change the settings of the camera 14:24:15 ... Travis came up with the proposal 14:24:24 ... he did most of the work, and gets credit for what's good 14:24:30 ... i get credit for what's confusing 14:24:35 [ Constraints mini-review ] 14:24:40 burn: a brief overview 14:24:42 Ted_Hardie has joined #mediacap 14:24:49 ... when requesting media, you can give a set of constraints 14:24:54 ... mandatory and optional 14:24:59 ... both sections are optional 14:25:07 ... mandatory section says 14:25:11 Ted_Hardie has left #mediacap 14:25:21 ... "if you can't give me a track that satisfies these constraints, then i want an error" 14:25:28 ... the optional section is ordered 14:25:39 ... these are constraints i'd like to be satisfied, but if you can't, that's ok 14:25:55 ... maybe you ask for Width, and aspect ration 14:25:59 s/ration/ratio/ 14:26:06 ... but maybe Width is more important 14:26:22 ekr: we still have audio:true/video:true? 14:26:24 burn: yes 14:26:33 ... i'm not even showing this is for video or for audio 14:26:40 ... you have separate constraints for audio and video 14:26:49 ... there were differing versions of for audio or video 14:26:50 ekr has joined #mediacap 14:27:07 cullen: can i have a width-min in one row 14:27:16 ... and below that a width-max below 14:27:18 burn: yes 14:27:25 ... i pulled this from an example 14:27:34 ... you can have constraints multiple times (e.g. width-min) 14:27:39 ... earlier ones are higher priority 14:28:04 [ Based on Travis's Settings v6 proposal ] 14:28:04 burn: there was a little email traffic, not a lot 14:28:12 Travis has joined #mediacap 14:28:12 ... when Travis and I discussed it last week, a few things required tweaking 14:28:17 Present+ Travis_Leithead 14:28:19 ... some things are slightly different from that proposal 14:29:13 [ The Problem ] 14:29:13 burn: it's called the Settings proposal 14:29:13 ... even though v6 removed "Settings" from the proposal 14:29:15 ... setting width to a number 14:29:18 ... say 650 14:30:09 ... is by setting the value, or using min+max to the same value 14:30:09 ... here is why we have this proposal 14:30:09 ... when you go to get video from the camera 14:30:09 ... you could display it in multiple