On 10/23/23 1:13 PM, Dale Curtis wrote:
On Mon, Oct 23, 2023 at 10:02 AM Mike Taylor <miketa...@chromium.org> wrote:On 10/23/23 11:54 AM, Dale Curtis wrote:Hmm, not sure why the description got reflowed, here's the formatted version: Chrome will deprecate and remove support for the Theora video codec in desktop Chrome due to emerging security risks. Theora's low (and now often incorrect) usage no longer justifies support for most users. Notes: - Zero day attacks against media codecs have spiked. - Usage has fallen below measurable levels in UKM. - The sites we manually inspected before levels dropped off were incorrectly preferring Theora over more modern codecs like VP9.Meaning, once Theora support is gone, video playback continues to work for all sites you inspected because media source selection found something else playable?Correct, if Theora support was missing users would have a higher quality experience due to a more modern codec being selected.- It's never been supported by Safari or Chrome on Android. - An ogv.js polyfill exists for the sites that still need Theora support. - We are not removing support for ogg containers. Our plan is to begin escalating experiments turning down Theora support in M120. During this time users can reactivate Theora support via chrome://flags/#theora-video-codec if needed. The tentative timeline for this is (assuming everything goes smoothly): - ~Oct 23, 2023: begin 50/50 canary dev experiments. - ~Nov 1-6, 2023: begin 50/50 beta experiments. - ~Dec 6, 2023: begin 1% stable experiments.Even though UKM appears to be exceedingly low, if you're not 100% confident this will be a no-op, you might consider beginning the stable experiment after the new year (and many production freezes).I did consider this and ran this plan by Finch team ahead of time, however given the low usage, long dev/beta experiments, that these sites would already be broken on Android/Safari, and that we'd still have time to turn down the 1% stable experiment before Finch freeze, leaving at 1% until after holiday freezes should be safe.
OK, that sounds reasonable. Can you also request the rest of the review bits in the chromestatus entry?
-- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscr...@chromium.org. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/a1b0f103-4b07-46cd-89cb-7eead509b380%40chromium.org.
