&gt; Is it really true that CDMs are actually browser-specific or are able to enforce a browser whitelist?<p>The EME standard only covers the DOM APIs and the interactions between the video player JavaScript and the CDM. There is no standard browser API or ABI for CDMs like there is for NPAPI.