On Sun, Jan 14, 2018 at 10:33 PM, Martin Thomson <martin.thomson@gmail.com> wrote: > (Re: Roman's suggestion about identity. Though it would be nice if we > could do something to restrict communications based on identity, > identity can't help here. It takes effect too late in the process.) > > I agree identity happen too late in the process. What is needed here is ability to cryptographically sign ICE candidates, TURN and STUN servers. Signing with certificate of some well known domain listed in CSP seems like a good option. This, of cause, will require API extensions to provide these signatures. Ability to disable webrtc from CSP is great, but we need ability to restrict web page communications even when WebRTC is used. For instance, as a real time communication provider user, I do not want rogue javascript sharing all my communications with third parties. Regards, _____________ Roman Shpount
Received on Monday, 15 January 2018 18:19:24 UTC