I would like to see this note removed from the createSession() method --
"Note: cdm must not use any data, including media data, not provided via initData."
This is too restrictive, since the CDM may do things like signing the key request with an embedded key, which would add data not provided by initData.
This was intended to refer to media data or any other media/stream-specific values. The intent is that all media-identifying values used to create a license should be available in the needkey event and could be constructed by the application without relying on the stream.
This intent seems independent of your use case. I think s/data/media data/ would address both concerns. What do you think?
Oops, that replacement doesn't make sense. How about this?
"Note: cdm must not use any stream-specific data, including media data, not provided via initData."
That text is much better. Now I understand the intent.
Will update in a future edit.
Fixed -> https://dvcs.w3.org/hg/html-media/rev/70e0d6713156