Re: Ban ICE-LITE? Re: webRTC and Content Security Policy connect-src

On 12 January 2018 at 14:19, Harald Alvestrand <harald@alvestrand.no> wrote:
> To me, it sounds like we should ban ICE-LITE altogether.
>
> We've got a lot of security story resting on the idea that the ICE
> request/response requires both ends to have seen the SDP.
> If that isn't true for ICE-LITE, then ICE-LITE is not safe for WebRTC.

That's right. However, did you read my proposal to fix that within
ICE/STUN itself?

-- 
Iñaki Baz Castillo
<ibc@aliax.net>

Received on Friday, 12 January 2018 13:21:34 UTC