[natethomas]

Thanks jjd-uk.

Imho, using the same aproach as Firefox should be fine.

That's pretty much what we already do where the addon Inputstream Adaptive is the sandbox that hooks into the installed CDM which at the moment comes via Chrome Widevine.

Can Inputstream Adaptive really act as the sandbox which protects us from tracking, etc. from CDM side? Don't we need to make some sort of such sandbox additionally?

If you use an addon like Netflix, I'm fairly certain Netflix is going to track your usage of their content. No sandboxing will stop that. Or are you asking something different?