Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Henri Sivonen
On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen hsivo...@hsivonen.fi wrote: Is current gUM restricted to authenticated origins? If it isn't, is it realistic to restrict it to authenticated origins? That's a good idea

Re: Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Robert O'Callahan
On Fri, Sep 5, 2014 at 10:34 PM, Henri Sivonen hsivo...@hsivonen.fi wrote: On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen hsivo...@hsivonen.fi wrote: Is current gUM restricted to authenticated origins? If it

Re: Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Eric Rescorla
On Fri, Sep 5, 2014 at 3:34 AM, Henri Sivonen hsivo...@hsivonen.fi wrote: On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan rob...@ocallahan.org wrote: On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen hsivo...@hsivonen.fi wrote: Is current gUM restricted to authenticated origins? If it