Re: [mediacapture-output] allow="microphone" should authorize setSinkId (#148)

This isn't about consent.

`"speaker-selection"` is a permission-*policy* which only affects iframes. Policies need to be discrete to let web developers delegate powerful features only to those iframes that should have them, because policies in allow-lists are _cumulative_:
```html
<iframe src="iframe1.html" allow="camera;microphone"></iframe>
<iframe src="iframe2.html" allow="camera;microphone;speaker-selection"></iframe>
```
Here, only `iframe2` can emit sound through non-default speakers. This discrete control seems valuable to web developers.

What's proposed here would remove web developers' ability to prevent `iframe1` from emitting sound through non-default speakers if `iframe1` needs the ability to ask for microphones. That seems bad for web developers.

Firefox already follows the spec here. I'd prefer if Chrome fixed [crbug 388544214](https://issues.chromium.org/issues/388544214) to do the same.

-- 
GitHub Notification of comment by jan-ivar
Please view or discuss this issue at https://github.com/w3c/mediacapture-output/issues/148#issuecomment-2593863386 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 15 January 2025 20:25:21 UTC