[webrtc-pc] Stats & isolated streams

dontcallmedom has just created a new issue for https://github.com/w3c/webrtc-pc:

== Stats & isolated streams ==
While doing a [first pass at a security review](https://github.com/w3c/webrtc-stats/issues/99#issuecomment-331979041) for WebRTC stats, I noticed the text on isolated media streams in WebRTC 1.0 leaves open the access to stats for them:

> In particular, the statistics that RTCPeerConnection records are not reduced in capability. New statistics that might compromise isolation MUST be avoided, or explicitly suppressed for isolated streams.

It sounds like stats might leak a lot about isolated streams to the JavaScript layer, so @aboba suggested I raise an issue so that we look more closely into this.

Please view or discuss this issue at https://github.com/w3c/webrtc-pc/issues/1613 using your GitHub account

Received on Tuesday, 26 September 2017 16:56:41 UTC