Issue 213: Privacy issues

>From Philipp Hancke's review comments:

18) page 12, section 3.11

DOMString relatedAddress = "";
unsigned short relatedPort;
I don't think those attributes are useful,
just a potential leak of ip addresses when forcing turn-only relays. So I would not expose them.

32) page 20, section 5.8

can be used to reduce leakage of IP addresses in certain use cases.
add a note about setting rel-addr to 0.0.0.0 then
Comment by Martin Thomson:

Yes, this is a privacy issue, but those values are used to handle some corner cases in the deduplication algorithm. I'd be OK with them being replaced with (salted) hashes or something like that, but then you wouldn't be able to use SDP.

Received on Friday, 12 June 2015 22:00:16 UTC