- From: Martin Thomson via GitHub <sysbot+gh@w3.org>
- Date: Wed, 15 Feb 2017 17:13:38 +0000
- To: public-webrtc-logs@w3.org
I was initially concerned that this could be incompatible with media isolation and could not be implemented in Firefox without also removing or significantly altering the semantics of identity. However, I think that it's OK from that angle - the requirement here is that the DTLS handshake is complete, which should make that available. That said, this definitely could be exploited by an attacker. This would end-run any protections we might gain through something like [draft-thomson-avtcore-sdp-uks](https://datatracker.ietf.org/doc/draft-thomson-avtcore-sdp-uks/). -- GitHub Notification of comment by martinthomson Please view or discuss this issue at https://github.com/w3c/webrtc-pc/pull/1026#issuecomment-280074310 using your GitHub account
Received on Wednesday, 15 February 2017 17:13:45 UTC