Slashdot Mirror


Microsoft Edge, HTML5, and DRM

An anonymous reader writes: Microsoft is building its new browser, Edge, with the intention of avoiding many of the flaws that plagued Internet Explorer over its long and tumultuous life. Part of this involves moving away from plug-ins, and Edge will not support ActiveX. Instead, they're focusing on interoperable media, and that means non-plug-in video players that meet HTML5 specs. Of course, not all video players want to disseminate their content for free, which means: DRM. Microsoft's Edge team has published a new post explaining how they'll be handling support for DRM and "premium media" in the new browser.

They say, "Windows 10 and Microsoft Edge support DASH, MSE, EME and CENC natively, and other major browsers ship implementations of MSE and CENC compliant EME. This support allows developers to build plug-in free web video apps that runs across a huge range of platforms and devices, with each MSE/EME implementation built on top of a different media pipeline and DRM provider. In the days when DRM systems used proprietary file formats and encryption methods, this variation in DRM providers by browser would have presented a significant issue. With the development and use of Common Encryption (CENC), the problem is substantially reduced because the files are compressed in standard formats and encrypted using global industry standards. The service provider issues the keys and licenses necessary to consume the content in a given browser, but the website code, content and encryption keys are common across all of them, regardless of which DRM is in use."

26 of 140 comments (clear)

  1. obligatory Good Luck With That by turkeydance · · Score: 3, Insightful

    DRM and all that.

    1. Re:obligatory Good Luck With That by ganjadude · · Score: 5, Insightful

      they spend all this time on writing DRM code... which will be blown out within a week anyway why not better spend that money and time working on actually making the browser better????

      --
      have you seen my sig? there are many others like it but none that are the same
    2. Re:obligatory Good Luck With That by lgw · · Score: 2

      they spend all this time on writing DRM code... which will be blown out within a week anyway why not better spend that money and time working on actually making the browser better????

      No one's going to bother breaking the DRM on a video stream. Why bother? If you want the content without paying, torrent it, rather than messing with streams with quality/bitrate that can change for reasons outside your control.

      Plus, since normal people don't care at all about DRM nerdwhining, they just want it to play when they click, arguably MS is improving the user experience here. Ideally, they'd include a native module letting you right-click on any DRMd stream and automatically torrent it while you watch, but I somehow doubt they're that forward thinking.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    3. Re:obligatory Good Luck With That by Bert64 · · Score: 4, Insightful

      People will crack streamed DRM if there is content that's either only available there, or is available there first... If you look at most torrent sites these days you will see all kinds of content that has been ripped from streaming media sites, all of which used DRM and yet still got cracked and made available in a more convenient form via torrents.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  2. No way in hell by stevez67 · · Score: 4, Insightful

    What they're glossing over with their review is that adblocker extensions, password managers, extensions that prevent video from autoplaying and etc. will not be available. And I won't use Edge because if I can't control the behavior of my web browser I won't use that web browser.

    1. Re:No way in hell by Lennie · · Score: 5, Insightful

      How do you mean no extensions ?

      Now I don't know what Edge will support or does support, but the first article I found looking on Google for Microsoft Edge extensions tells me they support:
      http://imacros.net/microsoft-e...

      "Edge will have extensions, “Javascript and HTML based” – essentially very much like Chrome. No C# support."

      This means, similar model to Firefox and Chrome. Actually, many extensions work in both.

      Maybe you are confusing plugins with extensions.

      Plugins are like Flash, Java applets, Acrobat Reader all that stuff.

      You know the stuff that is usually the least secure in most currently deployed browsers.

      --
      New things are always on the horizon
    2. Re:No way in hell by Anonymous Coward · · Score: 4, Interesting

      Posting AC as I'm not sure this is public, but MS has told their corporate partners that the plugin APIs will not be ready when Windows 10 releases, and they have given no date other than 'after release.'

    3. Re:No way in hell by mlts · · Score: 3, Interesting

      Here is the big question: How do the plugins (Flash, Shockwave, Java, Acrobat, DRM video players) run? Are they running in the same context as the browser (like current IE), run in a separate process (like Firefox), or run in a more isolated VM where each tab and window is in its memory space (Chrome)?

      The Web browser is the first source of attack, and one of the primary means for malware to get on a system. Even with the low security context that IE had starting in Vista, that wasn't sufficient for isolation. It almost takes running the browser in a sandbox (sandboxie) or a complete VM (with its own filesystem) to protect a machine against browser weaknesses, just because a browser is always in constant contact with untrusted code.

      I hope MS designs Edge with a lot more isolation (so a compromised add-on in one window can't attack another window or tab), because when designing a new browser is the only real time that they can do it right with security, as opposed to reactively fight fires, as with IE.

    4. Re:No way in hell by jonwil · · Score: 2

      What hasn't been said by Microsoft is whether or not all extensions need to go through the official Windows store (and be approved by Microsoft) or whether it will be possible to produce extensions that can be installed directly from non-MS websites and hence not need approval from MS.

    5. Re:No way in hell by bmo · · Score: 4, Insightful

      He didn't say "no extensions". He said,

      adblocker extensions, password managers, extensions that prevent video from autoplaying and etc. will not be available

      That may as well be "no extensions" for most people, because those are the most useful ones that get installed first with a new browser.

      So fuck him, and fuck his browser. And fuck his company. No, really, if he wants to be that user-hostile, he can take his stuff and shove it straight up his own arse.

      --
      BMO

    6. Re:No way in hell by PopeRatzo · · Score: 2

      So fuck him, and fuck his browser. And fuck his company.

      Oh, I'm with you. I learned long ago with Microsoft that you use what parts work, jettison the rest. It's actually taught me a good lesson about technology: Never fall in love with a company. Also, when it comes to technology, "ABS": Always Be Suspicious.

      --
      You are welcome on my lawn.
  3. Will it also support the NSA Protocol ? by Anonymous Coward · · Score: 2, Informative

    July 31, 2012

    Microsoft (MS) began encrypting web-based chat with the introduction of the new outlook.com service. This new Secure Socket Layer (SSL) encryption effectively cut off collection of the new service for FAA 702 and likely 12333 (to some degree) for the Intelligence Community (IC). MS, working with the FBI, developed a surveillance capability to deal with the new SSL. These solutions were successfully tested and went live 12 Dec 2012. The SSL solution was applied to all current FISA and 702/PRISM requirements - no changes to UTT tasking procedures were required. The SSL solution does not collect server-based voice/video or file transfers. The MS legacy collection system will remain in place to collect voice/video and file transfers. As a result there will be some duplicate collection of text-based chat from the new and legacy systems which will be addressed at a later date. An increase in collection volume as a result of this solution has already been noted by CES.

    March 15, 2013

    SSO's PRISM program began tasking all Microsoft PRISM selectors to Skype because Skype allows users to log in using account identifiers in addition to Skype usernames. Until now, PRISM would not collect any Skype data when a user logged in using anything other than the Skype username which resulted in missing collection; this action will mitigate that. In fact, a user can create a Skype account using any e-mail address with any domain in the world. UTT does not currently allow analysts to task these non-Microsoft e-mail addresses to PRISM, however, SSO intends to fix that this summer. In the meantime, NSA, FBI and Dept of Justice coordinated over the last six months to gain approval for PRINTAURA to send all current and future Microsoft PRISM selectors to Skype. This resulted in about 9800 selectors being sent to Skype and successful collection has been received which otherwise would have been missed.

    March 7, 2014

    PRISM now collects Microsoft Skydrive data as part of PRISM'S standard Stored Communications collection package for a tasked FISA Amendments Act Section 702 (FAA702) selector. This means that analysts will no longer have to make a special request to SSO for this - a process step that many analysts may not have known about. This new capability will result in a much more complete and timely collection response from SSO for our Enterprise customers. This success is the result of the FBI working for many months with Microsoft to get this tasking and collection solution established.

  4. Umm... their DRM code works quite well... by Anonymous Coward · · Score: 5, Insightful

    The XBox One has been out, nothing approaching a break, and the XBox 360 will get killed off XBL the second someone sticks a modded ROM on there.

    As for Windows, seen an activation crack for W2012 R2 or W2012, or even W8? Even fake KMS servers don't last long (a few hours at most).

    MS in the DRM department is doing quite well.

  5. Re:Why isn't Mozilla panicking? by ChunderDownunder · · Score: 3, Informative
    Dupe

    Copied and pasted from a comment yesterday.

    Please think before you moderate this FUD up. An article on Microsoft is no license to Mozilla-bash.

  6. "Edge" by PopeRatzo · · Score: 4, Funny

    Who comes up with these idiotic names? Why not "Microsoft Nail" or "Microsoft Lance" or "Microsoft Thing That Penetrates"?

    "Microsoft Edge" is a very '90s name to my ears, but maybe it's just the fact that I've been sitting on the porch drinking, eating barbecue and watching fireworks for the past several hours. But Microsoft was never really good at names, although I did once have a three-legged dog named "Clippy" (that's actually true).

    --
    You are welcome on my lawn.
    1. Re:"Edge" by neilo_1701D · · Score: 3, Informative

      They wanted a name starting with "E", to keep a stylized blue "e" as an icon. Given that Windows 10 windows are essentially frameless, the browser viewing area is edge-to-edge, hence "Edge".

      The idea was to keep the icon as familiar as possible.

  7. Re:But will content be HTML5? by Anonymous Coward · · Score: 3, Interesting

    Google's stewardship of web video has been the primary reason for these delays and frustrations. Not only have they been dicking around with HTML5 video, changing how it works every 6 months and screwing with YouTube in ways that make other browsers often look bad "just 'cause", they also paid Adobe to make a Chromium-specific version of Flash on their new plugin API, despite knowing full well that plugins were on the way out, and nobody in their right mind would adopt their plugin interface. So now most browsers have either a shit Flash version that Adobe doesn't care about anymore, or flaky HTML5 video support that requires implementing several immense new APIs like MSE, EME, and others. Google basically has a serious "not invented here" problem with web technology that leaves everyone that doesn't have a huge Google banner over their heads cold, and for every person believing they're making the web better, the actual developers in the trenches are increasingly frustrated with their efforts to rush features out in Chrome that no one else could sanely adopt for months or years - and trust me, others like the Webkit and Firefox team have been working closely to try to make heads or tails out of their specs and adopt them all along.

  8. One advantage of static typing by tepples · · Score: 3, Interesting

    .net is inferior to javascript

    In what way?

    One advantage of the .NET Framework is static typing. In a fully dynamic language such as PHP, Python, or JavaScript, you need to put unit tests into your program to make sure the correct types are getting passed in and out of functions. A language with static typing, such as C#, already ensures type safety. So it's like the compiler writes a lot of your unit tests for you.

    The .NET Framework used to have the disadvantage of being a non-free platform, which put .NET programs in what FSF calls a "Java trap". But nowadays, a lot of the interesting parts of the .NET Framework are released under a free software license.

  9. The name originates in IE 8 by tepples · · Score: 3, Interesting

    Who comes up with these idiotic names?

    I don't know who, but I do know when. IE 8 introduced the X-ua-compatible header. "Use the following value to display the webpage in edge mode, which is the highest standards mode supported by Internet Explorer."

  10. Re:Why isn't Mozilla panicking? by ArmoredDragon · · Score: 3, Insightful

    As distasteful as I find DRM, at least we see Microsoft trying to improve their web browser. With Edge they're actually succeeding in creating something that average users do want to use!

    Not exactly. Microsoft's Edge browser is still in fourth place in terms of being standards compliant, which is what I think average users want because it makes the browser actually compatible with modern content. Yes, it's a tad ahead of IE, but it's still quite behind Chrome, Firefox, and Opera.

    http://html5test.com/results/d...

    In fact most web browsers for mobile devices are doing better than Edge: It's behind Android WebView, BlackBerry's web browser, Chrome for Android, Firefox for Android, Safari for iOS, Opera Mobile, Tizen's web browser, Amazon Silk, Jolla Sailfish, and the now discontinued Nokia X browser.

    http://html5test.com/results/m...

  11. Re:But will content be HTML5? by MadMaverick9 · · Score: 2

    ... flaky HTML5 video support ...

    huh?

    <video width="512" height="297" controls autoplay style="outline: none;">
      <source src="video.webm" type="video/webm">
      <source src="movie.mp4" type="video/mp4" />
      <source src="movie.ogg" type="video/ogg" />
    </video>

    The above has worked for several years now.

    The default video tag supports full screen view.

    Youtube's thingy does not. Why not? What's the problem?

  12. Re:Why isn't Mozilla panicking? by KingMotley · · Score: 4, Interesting

    Not a real big fan of html5test.com. The weight they assign things are very chrome favored. Just as an example, they list stupid things like :read-only, :read-write twice, and 2d blend modes (7 points) which favor Chrome, but useful things like video track and audio track selection are weighted very little (4 points).

  13. Re:Why isn't Mozilla panicking? by ArmoredDragon · · Score: 2

    It's all of about 25 days from release. I doubt they are going to be adding features at this point, more likely they're just bug fixing.

  14. Re: But will content be HTML5? by cyber-vandal · · Score: 2

    You need to learn that a lot is two words.

  15. Re:Why isn't Mozilla panicking? by Daltorak · · Score: 4, Interesting

    As distasteful as I find DRM, at least we see Microsoft trying to improve their web browser. With Edge they're actually succeeding in creating something that average users do want to use!

    Not exactly. Microsoft's Edge browser is still in fourth place in terms of being standards compliant,

    Err.... standards? Look, HTML5Test leans heavily on W3C working drafts which are nowhere near finished. Edge doesn't implement Web Components, streams, service workers, web notifications, speech recognition and speech synthesis. These account for about 10% of the total HTML5Test score, but they're all drafts or proposals!

    The fact that some browsers are implementing these drafts without a prefix is a PROBLEM, not a good thing. Library & web site developers end up taking dependencies on things that may very well change over time.

    Meanwhile, if you want to stick to stable, published specifications, Edge is currently the leading browser for ES6 support in terms of percentage of features implemented. As for CSS, have a look at the list of CSS features Edge doesn't support and note that for most of them, at least one of Firefox and Chrome hasn't implemented them either..... and/or they're a working draft.... or other browsers have just implemented them in the last few months.

  16. Re:U2 reviews Edge by smittyoneeach · · Score: 2

    This is /.
    At least he didn't say: "I follow the link in Lynx, but it no worky-worky,"

    --
    Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear