Re: [mediacapture-main] Disable user media by default in cross-origin iframes

I forgot to mention how we're thinking this will relate to 
allowusermedia (obviously this is up for discussion).

allowusermedia is in the spec, but AFAIK it isn't implemented anywhere
 yet. allowusermedia is coarse-grained in the sense that it gates the 
entire getUserMedia API. The direction that most browsers seem to be 
heading, (as well as the permissions API) is to have fine-grained 
permissions for camera/mic/speakers. It seems like it would be good to
 align the features that we add to Feature Policy with those 
permissions and have the failure modes be the same as if each of those
 features was denied.

So I'm proposing that we remove allowusermedia from the spec here and 
have 3 features added to Feature Policy instead for 
camera/mic/speakers. I think allowed-to-use will essentially still be 
the way to check if a feature is enabled but @clelland can verify 
that.

This is all still a bit up in the air but again just wanting to get 
the discussion going :)

-- 
GitHub Notification of comment by raymeskhoury
Please view or discuss this issue at 
https://github.com/w3c/mediacapture-main/issues/434#issuecomment-278499864
 using your GitHub account

Received on Wednesday, 8 February 2017 23:43:15 UTC