Thanks. I did want to poke under the hood, and the news looks pretty good.
Upon visiting your link, no YT cookie was set, as promised.
Even after temp-allowing youtube-nocookie.com, no cookie was set.
On Fx. 3.6.24, I can play vids directly at YT with *no* scripting allowed, as well as no cookies. Per
another thread, Fx 8.x may require allowing youtube.com and ytimg.com, even directly at YT.
However, using your embedded video, the two scripts above must be allowed or temp-allowed even on Fx 3.x, or the video won't load. They're already in the default whitelist, which means most users won't notice, and also that Giorgio considers them reasonably "safe", as much as such things can ever be.
No change for 8.x users.
Anyway, the video plays, still no cookies from YT, or Google for that matter. And the no-cookie script looks innocuous to me, though I'll throw it up here for anyone who can put a magnifying glass and find any evil that might have been missed. Please don't trouble yourself with it,
welly, unless you're into such things.
Bottom line, unless someone finds something different (and I'll recheck with Fx 8.01): It's a good feature from Google/YouTube - who knew they were capable of it?
Props to them for providing it, and to you for your efforts to protect privacy.
For the tinfoil-hat crowd
, one can obtain the URL of the video, then go to YT directly. But I don't see much of a reason to do that.
Youtube-nocookie.com script for the video linked in the "experiment", in the above post: (some line breaks removed to save space):
Code: Select all
<!DOCTYPE html>
<html lang="en" dir="ltr" >
<head>
<title>Funny Cats - YouTube</title>
<link rel="stylesheet" href="http://s.ytimg.com/yt/cssbin/www-embed-refresh-vflCCinZA.css">
<link rel="canonical" href="/watch?v=IytNBm8WA1c">
</head>
<body id="" class="date-20111213 en_US ltr" dir="ltr">
<div id="watch-longform-ad" class="hid">
<div id="watch-longform-text">
Advertisement
</div>
<div id="watch-longform-ad-placeholder"><img src="//s.ytimg.com/yt/img/pixel-vfl3z5WfW.gif" height="60" width="300"></div>
</div>
<div id="player" class="full-frame"></div>
<script src="//s.ytimg.com/yt/jsbin/www-embed_core_module-vfl5vmUXz.js"></script>
<script>
yt.setConfig({
'EMBED_BINARY_URL': '//s.ytimg.com/yt/jsbin/www-embed_core_module-vfl5vmUXz.js',
'ORIGIN': "*",
'IS_OPERA_MINI': false
});
yt.setMsg({
'FLASH_UPGRADE': '<div class=\"yt-alert yt-alert-error yt-alert-player yt-rounded \"><span class=\"yt-alert-icon\"><img src=\"\/\/s.ytimg.com\/yt\/img\/pixel-vfl3z5WfW.gif\" class=\"icon master-sprite\" alt=\"Alert icon\"><\/span><div class=\"yt-alert-content\"> You need to upgrade your Adobe Flash Player to watch this video. <br> <a href=\"http:\/\/get.adobe.com\/flashplayer\/\">Download it from Adobe.<\/a>\n<\/div><\/div>'
});
yt.setConfig({
'PLAYER_CONFIG': {"assets": {"html": "\/html5_player_template", "css": "http:\/\/s.ytimg.com\/yt\/cssbin\/www-player-vfl1bxWVE.css"}, "url": "http:\/\/s.ytimg.com\/yt\/swfbin\/watch_as3-vflPZYogr.swf", "min_version": "8.0.0", "args": {"el": "embedded", "fexp": "903309,914022,902400,911614,916201", "is_html5_mobile_device": false, "allow_embed": 1, "allow_ratings": 1, "hl": "en_US", "use_tablet_controls": "0", "eurl": "http:\/\/www.youtube-nocookie.com\/", "iurl": "http:\/\/i2.ytimg.com\/vi\/IytNBm8WA1c\/hqdefault.jpg", "view_count": 32256636, "title": "Funny Cats", "avg_rating": 4.92024212891, "video_id": "IytNBm8WA1c", "length_seconds": 470, "sendtmp": "1", "enablejsapi": "0", "sk": "A0xv5TtUVR8rzYPkunY2zfR7pxRh4VptC", "use_native_controls": false, "rel": "0", "playlist_module": "http:\/\/s.ytimg.com\/yt\/swfbin\/playlist_module-vfl0B63K3.swf"}, "url_v9as2": "http:\/\/s.ytimg.com\/yt\/swfbin\/cps-vfleSxV5Q.swf", "params": {"allowscriptaccess": "always", "allowfullscreen": "true", "bgcolor": "#000000"}, "attrs": {"width": "100%", "id": "video-player", "height": "100%"}, "url_v8": "http:\/\/s.ytimg.com\/yt\/swfbin\/cps-vfleSxV5Q.swf", "html5": false},
'EMBED_HTML_TEMPLATE': "\u003ciframe width=\"__width__\" height=\"__height__\" src=\"__url__\" frameborder=\"0\" allowfullscreen\u003e\u003c\/iframe\u003e",
'EMBED_HTML_URL': "http:\/\/www.youtube.com\/embed\/__videoid__"
});
yt.net.ajax.setToken('html5_ajax', "lTmUoGubjI9Ql-DEaP9Y4IulQV98MEAxMzIzNzY4MDUy");
yt.setMsg('HTML5_DEFAULT_FALLBACK', "Your browser does not currently recognize any of the video formats available.\u003cbr\u003e\u003ca href=\"\/html5\"\u003eClick here to visit our frequently asked questions about HTML5 video.\u003c\/a\u003e");
yt.setMsg('PLAYER_FALLBACK', "\u003cdiv class=\"yt-alert yt-alert-error yt-alert-player yt-rounded \"\u003e\u003cspan class=\"yt-alert-icon\"\u003e\u003cimg s\u0072c=\"\/\/s.ytimg.com\/yt\/img\/pixel-vfl3z5WfW.gif\" class=\"icon master-sprite\" alt=\"Alert icon\"\u003e\u003c\/span\u003e\u003cdiv class=\"yt-alert-content\"\u003e The Adobe Flash Player or an HTML5 supported browser is required for video playback. \u003cbr\u003e \u003ca href=\"http:\/\/get.adobe.com\/flashplayer\/\"\u003eGet the latest Flash Player\u003c\/a\u003e \u003cbr\u003e \u003ca href=\"\/html5\"\u003eLearn more about upgrading to an HTML5 browser\u003c\/a\u003e\n\u003c\/div\u003e\u003c\/div\u003e");
yt.setMsg('HTML5_QUALITY_SETTING', "quality");
yt.setMsg('HTML5_SPEED_SETTING', "speed");
yt.setMsg('HTML5_SPEED_NORMAL', "normal");
yt.setMsg('HTML5_VOLUME_SETTING', "volume");
yt.setMsg('HTML5_VOLUME_MUTED', "muted");
yt.setMsg('HTML5_VOLUME_MUTE', "mute");
yt.setMsg('HTML5_VOLUME_UNMUTE', "unmute");
yt.setMsg('HTML5_CONTROL_TOGGLE', "toggle");
yt.setMsg('HTML5_SUBS_TRANSCRIBED', "transcribed");
yt.embed.writeEmbed();
</script>
</body>
</html>
I assume the setting of the HTML5 token
Code: Select all
yt.net.ajax.setToken('html5_ajax', "lTmUoGubjI9Ql-DEaP9Y4IulQV98MEAxMzIzNzY4MDUy");
is a substitute for a cookie, but with F3 (presumably) not supporting HTML5, there does appear to be a graceful fallback to Flash player vs. H5 video, as
therube and I speculated at the thread linked, about "
Problem with YouTube videos if cookies are disabled"?
And said token would persist ... how long? Sorry, but with the personal preference for F3.x, I'm not fully up to speed on HTML5. (and may stay that way, LOL.) TIA.
... if PM'd, all will remain in confidence, rest assured.
