IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [webrtc]

Web Real-Time Communication is an API definition drafted by the World Wide Web Consortium (W3C) created for browser-to-browser communication enabling audio, video and filesharing built directly into the browser.

36 questions
0
votes
0 answers

Why does my IP being leaked with system-wide proxy through webTRC, but it doesn't happen when I use system-wide VPN

WebRTC manages to leak my IP when I use proxy, but when I use VPN it only shows VPN server's IP (both proxy and VPN were system-wide). What's the key difference? Google Chrome was used in both tests (webRTC leak test). https://browserleask.com —…
infinitieunique
  • 17
  • 3
0
votes
2 answers

Is the video/audio traffic from WebRTC TURN relay servers encrypted end-to-end? As with the applications Signal and Jitsi Meet

Today I found a video on YouTube that surprised me (https://www.youtube.com/watch?v=Pkc3sE6iKV4). It is by Rob Braxman, a privacy advocate with a lot of expertise. He talks about all kinds of video conferencing situations. Like one-to-one,…
user244515
0
votes
2 answers

Can Ed25519 be used to mitigate MITM attack on WebRTC with an untrusted signaling channel?

Based on this question, I've discovered that the signaling channel for WebRTC must be trusted in order to prevent MITM attacks. This is unfortunate for a P2P use-cases where the signaling channel is some 3rd party device. One idea I had is to…
Chet
  • 101
  • 2
0
votes
2 answers

Fortigate "WebRTC.Local.IP.Addresses.Disclosure" Event

We have a Fortigate perimeter firewall, and today I detected this event. What should I do to improve protection? How can someone obtain local IP address through a firewall? The following alert was observed:…
Infra
  • 650
  • 1
  • 6
  • 19
0
votes
1 answer

What could an attacker do with informations about devices in my local network?

If a malicious website would scan my local network (via WebRTC) for devices, what could the attacker do it with it? Does it need to be in the same WIFI-Network in order to login to a service? (for example a web based interface to configure your IP…
Eric
  • 1
0
votes
2 answers

Is there any security implication of using WebRTC over unencrypted channel for streaming?

I've spend a few hours reading about WebRTC and everywhere it's recommended to use a secure connection for contacting with the signal server, so no MitM attacks could be possible. However, my project is aimed at video streaming (public), so I really…
The Illusive Man
  • 10,487
  • 16
  • 56
  • 88
1 2
3