Re:FSF condemns partnership between Mozilla and Adobe to sup...
by stinkytaco on Thursday May 15, 2014 @09:07PM
(#7753230)
>If Adobe's CDM can run while completely sandboxed from network and file access
I'll admit this isn't my area of expertise, but how would this be possible?
Re:FSF condemns partnership between Mozilla and Adobe to sup...
by chx on Thursday May 15, 2014 @10:39PM
(#7753450)
The CDM and the server runs some sort of secure key exchange with the browser doing the actual network traffic. The browser is eavesdropping on the communication but that's what Diffie-Hellman, STS etc are solving. Then the browser gets the encrypted stream, hands it to the CDM which has some ties to the OS to be able to draw on the screen. Only tie to the OS is required, no files, no network. The browser can handle those.
Re:FSF condemns partnership between Mozilla and Adobe to sup...
by bzbarsky on Friday May 16, 2014 @11:43AM
(#7756058)
The EME spec is designed to make this feasible at least in principle: the browser hands the encrypted video bits to the CDM.
In the case of Adobe's CDM and Mozilla, this is one of the points that was explicitly negotiated: the CDM will be running in a sandbox.
If Adobe's CDM can run while completely sandboxed from network and file access, then what if it was implemented in asm.js? Then "CDM.js" could be portable across all browser platforms and architectures. I'm not sure how well Firefox's JIT would optimize obfuscated asm.js code generated from obfuscated C++ code. :)
Disclosure: I used to work on Adobe's Flash Player team and I now work at Mozilla, so I have many conflicting personal and professional biases. :)