HTML5 video streaming and flash

The video element has been somewhat a prevailing success and I thank the
developers for allowing me to remove the half a page of code that I
used to need to support all browsers (with a fall back to mpeg2, haha)
and providing open video formats for all to use.

Some sites say that html5 video will not replace the security nightmare
of flash in many cases (still bundled and enabled by default with
Windows 10 and edge) as html5 does not have streaming support.

Considering most servers support byte range requests nowadays, should
truly native performant and trusted/audited streaming support be
considered. A built-in implementation would also mean developers could
know that users have a consistent experience and not have noscript page
reloads and other annoyances. If the site is javascriptless users also
may have greater confidence in a site behaving itself which is nice
where possible.

Personally I would and do rather waste bandwidth and trust a non
streamed browser implementation than audit and bundle javscript on an
otherwise javsacript free site. 

http://www.w3.org/TR/2014/CR-media-source-20140717/

MSE does not meet these desires and is not actually HTML5. I also
believe that video playing in browsers should be aiming to be as
performant as desktop video players like mplayer or atleast vlc. MSE
appears to be a step in the wrong direction in this regard or is it
simply a stepping stone into the right direction?



p.s. 
After writing this a though occurred, maybe a vlc plugin is actually
better than HTML5 after all; if it could become widely used? Obviously
vlc supports too many formats and would have too many exploits but a
limited codec version perhaps, but I guess it's streaming
implementation would have a hard time to make it into servers in any
case?

Thanks,
	Kc
-- 

KISSIS - Keep It Simple So It's Securable

-- 
You received this message because you are subscribed to the Google Groups "Security-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]