2 ms·

I asked for a license agreement to use the Castlabs fork of Electron, which supports Widevine. https://github.com/castlabs/electron-releases https://github.com/

I asked for a license agreement to use the Castlabs fork of Electron, which supports Widevine. https://github.com/castlabs/electron-releases https://github.com/castlabs/electron-releases

geofft 8y ago
Including the same signing model as castLabs suggests, where the default release is only for UAT and you need to sign production builds (which are only generated on your infra) to decrypt production content? Or did you want to allow downstream open-source users to decrypt production content? i.e., if they denied you, are there users of castLabs they would have allowed, and what's the distinction between you and them?
- smaddock 8y ago
  I'm not aware of Castlabs fork working without a production build [1]. I don't think there would be a way for open source users to be able to use a production signed release. Still waiting to hear back more from Widevine. [1] https://github.com/castlabs/electron-releases/issues/33#issuecomment-462252149 https://github.com/castlabs/electron-releases/issues/33#issu...
  - geofft 8y ago
    Right, I guess I'm asking what you mean by "open source users". As far as I know, if you download a Firefox binary from firefox.org, you can use Widevine, and there's no source in that binary that's not open source, but the binary is signed in such a way that you can download the component. If you build Firefox on your own, Widevine won't work. Can you do the same thing with Metastream? Allow users of the Metastream binary from you to get Widevine, but not allow people who build it on their own to get the production EME codec? (I realize this is more frustrating for Metastream dev than Firefox dev because Metastream is primarily about playing videos, but it should still work.) Or in other words, is Widevine permitting Firefox to do something they're not permitting you to do, or are you trying to be more open than Firefox? (... That said, apparently Widevine works fine in e.g. Debian's build of Firefox? So what's different?)

I asked for a license agreement to use the Castlabs fork of Electron, which supports Widevine. https://github.com/castlabs/electron-releases https://github.com/castlabs/electron-releases

geofft 8y ago

Including the same signing model as castLabs suggests, where the default release is only for UAT and you need to sign production builds (which are only generated on your infra) to decrypt production content? Or did you want to allow downstream open-source users to decrypt production content? i.e., if they denied you, are there users of castLabs they would have allowed, and what's the distinction between you and them?

smaddock 8y ago
I'm not aware of Castlabs fork working without a production build [1]. I don't think there would be a way for open source users to be able to use a production signed release. Still waiting to hear back more from Widevine. [1] https://github.com/castlabs/electron-releases/issues/33#issuecomment-462252149 https://github.com/castlabs/electron-releases/issues/33#issu...
- geofft 8y ago
  Right, I guess I'm asking what you mean by "open source users". As far as I know, if you download a Firefox binary from firefox.org, you can use Widevine, and there's no source in that binary that's not open source, but the binary is signed in such a way that you can download the component. If you build Firefox on your own, Widevine won't work. Can you do the same thing with Metastream? Allow users of the Metastream binary from you to get Widevine, but not allow people who build it on their own to get the production EME codec? (I realize this is more frustrating for Metastream dev than Firefox dev because Metastream is primarily about playing videos, but it should still work.) Or in other words, is Widevine permitting Firefox to do something they're not permitting you to do, or are you trying to be more open than Firefox? (... That said, apparently Widevine works fine in e.g. Debian's build of Firefox? So what's different?)