> the CDM vendors are Google, MSFT, and Apple Also Adobe, although I'm not sure if their CDM (Adobe Primetime) is still relevant. > which is why the CDM is a

> the CDM vendors are Google, MSFT, and Apple Also Adobe, although I'm not sure if their CDM (Adobe Primetime) is still relevant. > which is why the CDM is a contentious topic because you have no way to see what's inside it Related to this: Firefox takes steps to try to contain the CDM blob within a sandbox. [0] See also this old blog post from before Firefox switched from Adobe's CDM to Google's WideVine CDM. [1] [0] https://wiki.mozilla.org/Security/Sandbox/Architecture#GMP_process_.28Widevine.2C_Primetime.2C_OpenH264.29 https://wiki.mozilla.org/Security/Sandbox/Architecture#GMP_p... [1] https://hacks.mozilla.org/2014/05/reconciling-mozillas-mission-and-w3c-eme/ https://hacks.mozilla.org/2014/05/reconciling-mozillas-missi...