PeerTube embed
Hello fellow hubzillians!
Following on https://github.com/Chocobozzz/PeerTube/issues/643 and the discourse here, I suggest continuing the discussion here, as it might effectively be a common platform.
So far I think you have made it clear the main concern was that of untrusted javascript and the implications it can have for one's privacy and security.
However before resorting to direct access to the file through the embed, I'd like to explore with you the different options available to still use javascript for P2P video exchange. You might consider this a small feat, and it certainly is for small instances/unpopular videos. However it proves very important as a video gains popularity. If everyone purifies the embed, it's no more a choice by the user, but a systematic kill switch to PeerTube's scalability.
We could provide an HMAC of the embed JS along each release, to provide a way to check both integrity and signature by the development team. That would require you to keep track of them, but this way the JS chain of trust goes back to the origin.
What do you think?