Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Henri Sivonen
On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan wrote: > On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen wrote: >> Is current gUM restricted to authenticated origins? If it isn't, is it >> realistic to restrict it to authenticated origins? > > That's a good idea but it's a separate issue. Is it

Re: Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Robert O'Callahan
On Fri, Sep 5, 2014 at 10:34 PM, Henri Sivonen wrote: > On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan > wrote: > > On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen > wrote: > >> Is current gUM restricted to authenticated origins? If it isn't, is it > >> realistic to restrict it to authenticat

Re: Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Henri Sivonen
On Fri, Sep 5, 2014 at 1:47 PM, Robert O'Callahan wrote: > On Fri, Sep 5, 2014 at 10:34 PM, Henri Sivonen wrote: >> >> On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan >> wrote: >> > On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen >> > wrote: >> >> Is current gUM restricted to authenticated ori

Re: Restricting gUM to authenticated origins only (was: Re: Intent to implement and ship: ImageCapture)

2014-09-05 Thread Eric Rescorla
On Fri, Sep 5, 2014 at 3:34 AM, Henri Sivonen wrote: > On Fri, Sep 5, 2014 at 1:25 PM, Robert O'Callahan > wrote: > > On Fri, Sep 5, 2014 at 10:19 PM, Henri Sivonen > wrote: > >> Is current gUM restricted to authenticated origins? If it isn't, is it > >> realistic to restrict it to authenticate