- From: Philipp Hancke via GitHub <sysbot+gh@w3.org>
- Date: Mon, 28 Oct 2024 08:37:24 +0000
- To: public-webrtc@w3.org
fippo has just created a new issue for https://github.com/w3c/webrtc-stats: == Do not expose unknown usernameFragment to stats == https://github.com/webtorrent/webtorrent/issues/288#issuecomment-2433534469 points out that the remote ICE usernameFragment (added in https://github.com/w3c/webrtc-stats/pull/611) can act as a sidechannel (and while it is authenticated, it lacks encryption). In theory one can skip signaling in one direction that way. We should only expose the remote usernameFragment on prflx candidates if it is known by signaling. Please view or discuss this issue at https://github.com/w3c/webrtc-stats/issues/789 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Monday, 28 October 2024 08:37:25 UTC