- From: Philipp Hancke via GitHub <noreply@w3.org>
- Date: Wed, 18 Jun 2025 16:25:45 +0000
- To: public-webrtc-logs@w3.org
Surprisingly stats show a *local* certificate but not the remote one after SRD.
Kinda makes sense since before the connection is up you do not have the DER to fill base64Certificate but it might expose the remote certificate with just the fingerprint and hash algorithm?
```const pc = new RTCPeerConnection();
pc.setRemoteDescription({type: 'offer', sdp: `v=0
o=- 3743209020491460218 2 IN IP4 127.0.0.1
s=-
t=0 0
a=group:BUNDLE 0
a=extmap-allow-mixed
a=msid-semantic: WMS
m=application 9 UDP/DTLS/SCTP webrtc-datachannel
c=IN IP4 172.20.46.182
a=ice-ufrag:3xyp
a=ice-pwd:1/N54FfnWEU/98JfdQ+hAVQA
a=ice-options:trickle
a=fingerprint:sha-256 97:B8:D5:E8:1D:FB:F6:34:E7:D7:1F:03:D9:5E:60:F9:95:4E:82:35:3B:96:33:A8:64:1F:78:42:5D:D6:C6:D6
a=setup:actpass
a=mid:0
a=sctp-port:5000
a=max-message-size:262144
`});
const stats = await pc.getStats();
console.log([...stats.values()].filter(({type}) => type === 'certificate')
```
--
GitHub Notification of comment by fippo
Please view or discuss this issue at https://github.com/w3c/webrtc-pc/issues/3055#issuecomment-2984918570 using your GitHub account
--
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 18 June 2025 16:25:46 UTC