W3C home > Mailing lists > Public > public-webrtc@w3.org > July 2017

[webrtc-pc] setRemoteDescription should fail if target peer identity is set but no a=identity in SDP

From: Soares Chen via GitHub <sysbot+gh@w3.org>
Date: Thu, 27 Jul 2017 07:03:23 +0000
To: public-webrtc@w3.org
Message-ID: <issues.opened-245944504-1501139001-sysbot+gh@w3.org> 
soareschen has just created a new issue for https://github.com/w3c/webrtc-pc:

== setRemoteDescription should fail if target peer identity is set but no a=identity in SDP ==
Currently the identity assertion validation is only done if an a=identity line is present. This means an impostor can simply not include any a=identity line and get connected to a victim.

Please view or discuss this issue at https://github.com/w3c/webrtc-pc/issues/1512 using your GitHub account
Received on Thursday, 27 July 2017 07:03:24 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:18:35 UTC