Security Assessment of WebRTC (used by some web browsers) (report)

MrBrian · Nov 29, 2014

From http://www.strews.eu/results/91-d12:

Abstract:

Built-in handling of Real Time Media (audio, video) on the web promises potentially significant change in telephony and in conference calling. The W3C WebRTC and IETF rtcweb working groups are developing the set of specifications that will allow browsers and web sites to support such calling and other functions. This is clearly a potentially security sensitive extension to the web, so STREWS has devoted effort on this topic as a case study to both attempt to improve the overall security of the result and to see if this approach holds promise as a way to improve interactions between researchers and standards makers and hence the overall security of the web. In this deliverable, we show some possibly new issues with WebRTC security discovered by researchers (from SAP) that the standards makers may not have considered. However, while this deliverable is, as a deliverable, final, the work itself goes on, partly involving discussions between the STREWS project and participants in the IETF and W3C so in technical terms this remains a work-in-progress.
Click to expand...

Hat tip: Google and Mozilla told to limit browser's ability to watch users.

142395 · Dec 3, 2014

I always disable WebRTC because I don't need it.
But thanks for the info.

Minimalist · Dec 3, 2014

142395 said: ↑

I always disable WebRTC because I don't need it.
But thanks for the info.
Click to expand...

Is this possible in Chrome without additional extension?

142395 · Dec 3, 2014

Simplicity said: ↑

Is this possible in Chrome without additional extension?
Click to expand...

Sorry, it seems the option in chrome://flags or command switch are removed from desktop version of Chrome long before, I didn't know nor notice that.
Rather, it seems disabling WebRTC is impossible in Chrome from the beginning.
Sorry it was my misunderstanding.
http://www.ghacks.net/2014/08/04/deal-webrtc-spying-chrome/
So currently only way is use extension mentioned in the link.

Log in or Sign up

Security Assessment of WebRTC (used by some web browsers) (report)

MrBrian Registered Member

142395 Guest

Minimalist Registered Member

142395 Guest

Log in or Sign up

Security Assessment of WebRTC (used by some web browsers) (report)

MrBrian Registered Member

142395 Guest

Minimalist Registered Member

142395 Guest

Useful Searches