[Commentor] LC-2636 Michael Cooper (archived comment) [Comment] The Protocols and Formats Working Group took a quick look at the HTML Media Capture specification http://www.w3.org/TR/2012/WD-html-media-capture-20120712/. In a teleconference discussion, minuted at https://www.w3.org/2012/07/18-pf-minutes.html, we had the following comments: * The specification should make explicit statements about security expectations, e.g., requesting permission before turning the microphone on in order to capture from it. [Commentor reply] yes [Working Group decision] 
Text added to to the Security and Privacy Considerations section "The user agent should not enable any device for media capture, such as a microphone or camera, until a user interaction giving implicit consent is completed. A user agent should also provide an indication when such an input device is enabled and make it possible to terminate such capture. Similarly, the user agent should allow the user: * to select the exact media capture device to be used if there exists multiple devices of the same type (e.g. a front-facing camera in addition to a primary camera). * to disable sound capture when in the video capture mode." see http://dev.w3.org/2009/dap/camera/#security diff http://dev.w3.org/cvsweb/2009/dap/camera/Overview.html.diff?r1=1.133;r2=1.134;f=h