[serge2k]

This isn't security through obscurity, unless the DRM implementation being a secret actually does provide security. I doubt it does, beyond the fact that an audit of the source could probably find a load of security issues.

Of course an audit of OpenSSL would do the same.

[dec0dedab0de]

* unless the DRM implementation being a secret actually does provide security.*

It Does, because it is illegal(at least in the US) to reverse engineer it.

[jarrettc]

> This isn't security through obscurity

I don't necessarily disagree. But how, other than through obscurity, does HTML5 DRM inhibit copying, given that the client possesses the decryption key? (Let's assume the would-be attackers aren't dissuaded by any laws that might apply.)