3 ms·
1) DRM doesnt improve appsec, it’s only about content security 2) Netflix runs a single application, whereas organizations maintain and provide hundreds 3) Ne
by djrogers 5y ago
1) DRM doesnt improve appsec, it’s only about content security
2) Netflix runs a single application, whereas organizations maintain and provide hundreds
3) Netflix doesn’t need to do any device assurance or inventory
4) Netflix has essentially one level of access to enforce, vs hundreds of roles across hundreds of applications.
- Spivak 5y ago1) DRM absolutely improves appsec, one of the main things it does it allows you to ensure that the client software is running your unmodified code and protected from the OS. 2) Okay but a web client will get you 80% the way there. 3) Yes/No. Netflix doesn’t but that’s because Google does it for them for Widevine deployments. 4) Widevine has three, pretty complex, policy levels. No reason there couldn’t be more. Plus device authentication is just a metric used in authorization decisions. Nothing is stopping you from having arbitrarily complex authz.