I wonder if this means they will reconsider their "Encrypted Media Extensions" spec. I lost all respect for the organization when that passed.
https://www.eff.org/deeplinks/2017/09/open-letter-w3c-direct...
https://www.eff.org/deeplinks/2017/09/open-letter-w3c-direct...
I would like to hear more from people connected with W3C over the years as to why it ran into the long grass. Some commentators have even described it as "irrelevant today". I'd like to think that's wrong and W3C has an important future keeping a public and accessible World Wide Web alive.
Among the many questions in my head:
What is the "Web" today, 30 years on?
What can the W3C realistically do to steward it?
Have principles of universality and accessibility been abandoned?
Can there be a WORLD WIDE Web in the age of state firewalls and the "splinternet"?
Does the W3C have overlays and censorship resistance on its roadmap?
Does the W3C recognise the need for Small Internet technologies, Gemini and suchlike as a reliable, accessible and simple information delivery network?
The end result may be comparable, but I think the principle of it is important.
“principles” is another word for being irrational and nonstrategic.
That's pretty much what we got with EME, since the technology relies on proprietary plugins. The only difference is that EME got a pointless stamp of approval from the W3C as supposedly a part of the "open" Web, even though there's nothing open about DRM-encumbered media.
I imagine that the w3c saw that large corporations had most of the attention of most netizens. Those large content producers/distributers want DRM. Did the w3c fear that if they hadn't accepted EME, most of those netizens would move off the web and onto the native apps which the video streaming companies would, inevitably, have produced?
I say "inevitably" because most of them stream to native and web anyway these days, and in many cases the native apps are wrappers around HTML5 players. In a way, the w3c's acceptance of EME allowed its reach to extend to more devices, where if they hadn't taken EME on the web may have shrunk.
(I'm kinda just thinking out loud here. Sorry for the rambling)
Streaming is a tiny portion of what the web is used for.
Even so, entertainment should be... entertaining. I got free Paramount Plus with my phone service. It has DRM, adblocker-detectors, and all sorts of other nonsense to where it usually doesn't play videos. I went with Youtube over Star Trek. That's not an ideological choice; it's just not entertaining to fight with computers to play a video or to talk to support.
I suspect the effect would have been the opposite: a more rapid decline of the major content producers. This stuff needs to be easy and to work. Netflix did that, before everyone started to jump ship. Napster did it well too.
At some point, there's a spiral, where:
- Declining usability / quality leads to declining viewership
- Declining viewership leads to declining budget
- Declining budget lead to declining usability / quality and more pressure on monetization
... and so on. That's the disruption S-curve. In retrospect, I'm guessing that would have happened if large content producers forced apps.
By bandwidth, streaming is what the majority of the web is used for. PDF warning: https://www.sandvine.com/hubfs/downloads/phenomena/2018-phen...
> Video is almost 58% of the total downstream volume of traffic on the internet
The real specs that all the browsers and media vendors used for DRM are vendor-specific closely guarded secrets, as they have always been.
The only purpose the spec ever had was laundering DRM with W3C's reputation.
Pretty much all streaming companies of DRM protected content use EME with Widevine as the CDM. How is it useless if everyone is using it?
The EME spec only documents how to use a "Clear Key" scheme that is a complete trash defeated in 1 line of code, and of course not allowed by any website with DRM.
The EME spec says nothing about Widevine or any real-world DRM API. The CDM side, that does 99.99% of the actual work, is not documented in the EME spec. It's only a hypothetical construct alluded to in the spec, but not an actual API. The actual browser implementations don't even use the architecture outlined in the EME spec. Almost all of the EME spec is non-normative, or for the decoy Clear Key non-DRM.
EME is like a spec that says Adobe Flash is <object type="application/vnd.adobe.flash" />. There, Adobe Flash is now an open web standard. You have everything you need to handle .swf files without plug-ins, except the content playback module, which is a detail left for each vendor to figure out.
The user-agent is still relying on the same interfaces and concepts (MediaKeySession, key id, same events, same methods, same way to persist licenses) and the application generally can work transparently without doing exceptions for each key system (well, in reality, there are a lot of compatibility bugs in a lot ot EME implementations, but those are not on purpose).
For example the server certificate concept generally does not apply to clear key implementations at all but is frequently used when using Widevine.
Clearkey is thoroughly documented because that is the only key system that SHOULD be implemented in all user agents with an EME implementation, though nobody, even the writers of that specification, think that it is a good idea for real production usage.
In my work we rely a lot on the EME specification, and refered to it many times in exchanges with our partners when we thought that their CDM implementations (e.g. on specific set-top boxes, smart tvs, game consoles etc.) lead to non-compliance to that spec (e.g. unusable keys not being properly announced etc.).
_PS: off-topic but I came across your projects and comments online many times, IIRC mostly about image encoders / decoders and on Rust (both subjects on which I love to read). That was always very interesting, thanks!_
So I am really thankful for EME for helping to support open standards in that regard.
When you say "released", do you mean they're pirated almost immediately? Or is there now a legit way to get non-pirated content that I'm not aware of?
To simplify, for music you just choose if you want the additional services offered by Spotify or Apple and not focusing on what catalogue it has (barring some obscure asterisks), while this is the polar opposite has happened on music industry and now you are either actively researching where goes what or just gave up and pirate. As Gabe Newell has said, give the consumers a better service and they'll use it. Record companies succumbed and quietly accept this, studios don't (and I'll wager that they will eventually accept to have a single service).
That situation truly opened my eyes to the fact that for most people, pragmatic arguments of the kind of “We cannot stop drugs anyway, so we better legalize it, so we can better regulate it.” really seem to only apply when they already agree and that the same people who say it in one case suddenly are staunchly against such pragmaticism when it no longer fly their way.
d.r.m. would be there regardless of what the W.3.C. would do and at the time the lesser of two evils was certainly the W.3.C. having control over the specification to some degree.
I didn't know actually the E.F.F. had such a position, I felt it was the last agent in internet transparency and freedom that hadn't gone insane. It's a sad thing to read but I won't be donating to it any more if such is it's modus operandī.