well ...
- martin from mozilla is working on the specs for the group.
- It s gonna be a separate document from the webrtc 1.0 spec.
- the committee agreed to keep going, but this part of the spec were not mature enough to take any other decision at this point.
- the API itself (GUM) will not really change
It seems that the decision about how to deal with security will be left to the browser vendor, and will not be specified in the spec. Practically you can already see the difference: chrome has one model (extension) and firefox (starting f33) another one (white listing, pre-populated, mutable, ...), temasys plugin has another one, and so on and so forth. The chrome extension actually only create the capturer (using the extension allow to differentiate between different levels of access inside the code), and make the corresponding stream/track available to a subsequent, normal, call to GUM.
I voiced my concerns, saying that the variation between the normal (for cam) GUM prompts between browsers or versions of browsers was already a huge problem for web devs, and that making the variations bigger for screen sharing would lead to a lot of problems. I'm not sure I have been heard. As long as the API itself does not change, the security behavior is the prerogative of the browser, and not of w3c WG. Harald stopped the discussion at that point.