Hi, As far as I can tell from what has been said so far on the subject, we may be opting to download the CDM blob unconditionally, and run it after user interaction.
As I understand it, the CDM blob is going to be hosted by Adobe. I can see a privacy issue here. Or at least, I can see that people can be unconfortable with this, and/or with the unconditional download of proprietary code (however irrational that is, knowing how many non-free blobs a browser downloads every day). I trust that we're going to do something sensible for our users, BUT, I would like that if we're going forward with download first, ask later, that we incorporate an optional alternative workflow that only downloads the CDM after the user opts-in, such that redistributors can switch to that workflow by default if they want. While I can understand that redistributors could do that themselves on their end, that usually means no localization, and that saddens me everytime. I'd suggest using stronger wording in that optional workflow, like "Viewing this content requires downloading a proprietary content decryption module. [See license*] [Download from adobe.com] [Don't view content]" (with the latter highlighted by default) * I haven't seen that mentioned, BTW. There should be an EULA of some sort for the user to agree with at some point, right? In other words, there are usually two ways to be pragmatic. One that is user-friendly, and one that is friendlier to the people concerned with free software and related matters. I think we should do both, for a change. My ¢2 Mike _______________________________________________ dev-media mailing list [email protected] https://lists.mozilla.org/listinfo/dev-media

