The iframe below is in other domain. If you give it permission to access the camera or the mic it has that permission forever without having to ask again even when used from another domain. At least in Chrome as of Chrome 59