[webkit-dev] Proposed feature: Network Service Discovery

[Oliver Hunt]

On Aug 30, 2013, at 9:15 AM, Brendan Long <self at brendanlong.com> wrote:

> On 08/29/2013 05:45 PM, Benjamin Poulain wrote:
>> Can you explain a bit what it is for? What are the common use cases?
> This would be useful for certain kinds of web apps. For example,a music website like Pandora or Spotify could allow users to include music on their local network. Or a service like Netflix could include local network movies (on networked hard drives, or DVR's) in their search results, and play them from the same interface.
Here's my concern - if you say "a service like <x>" might want to search for something, that is better described as "a random website".  That may be something the user wants, alternatively it could be something evil.  It could also be something evil embedded in an ad on the site a user "trusts".

My concern here is that as a web spec this essentially acts as a way for arbitrary web content from any source to perform a network scan of your local machine and get data about your internal network topology and services from inside your firewall.  That's a really scary concept to me.

--Oliver