2017-04-27, 19:34
Imho, using the same aproach as Firefox should be fine.
Firefox is also GPL and they are interfacing with the CDM just fine, and they do it through an "open source sandbox". They don't even need to distribute the closed source software, it's downloaded separatelly from Adobe. Kodi could do exactly the same.
Firefox is also GPL and they are interfacing with the CDM just fine, and they do it through an "open source sandbox". They don't even need to distribute the closed source software, it's downloaded separatelly from Adobe. Kodi could do exactly the same.
https://andreasgal.com/2014/05/14/eme/ Wrote:
By contrast, in Firefox the sandbox prohibits the CDM from fingerprinting the user’s device. Instead, the CDM asks the sandbox to supply a per-device unique identifier. This sandbox-generated unique identifier allows the CDM to bind content to a single device as the content industry insists on, but it does so without revealing additional information about the user or the user’s device. In addition, we vary this unique identifier per site (each site is presented a different device identifier) to make it more difficult to track users across sites with this identifier.
Adobe and the content industry can audit our sandbox (as it is open source) to assure themselves that we respect the restrictions they are imposing on us and users, which includes the handling of unique identifiers, limiting the output to streaming and preventing users from saving the content. Mozilla will distribute the sandbox alongside Firefox, and we are working on deterministic builds that will allow developers to use a sandbox compiled on their own machine with the CDM as an alternative. As plugins today, the CDM itself will be distributed by Adobe and will not be included in Firefox. The browser will download the CDM from Adobe and activate it based on user consent.
