Re: [rtcweb] Why http://www.ietf.org/id/draft-miniero-rtcweb-http-fallback-00.txt ?

[Roman Shpount <[e-mail]>]

On Tue, Aug 7, 2012 at 2:18 PM, Iñaki Baz Castillo <[e-mail]> wrote:

> 2012/8/7 Marc Petit-Huguenin <[e-mail]>:
> > Or TURN over Websocket.
>
> Why do we need that? By using TURN over TLS we have all we need to
> avoid stupid hotel's firewalls (that provide "Internet free access"
> but just for HTTP port 80 and HTTPS port 443). It just about setting a
> TURN server listening TLS on port 443, am I right?
>
>
You still got the locations where the only way to connect to anything is
via the man-in-the-middle accept HTTP request and resend it proxies. Such
proxies will install their own certificate in the client certificate chain
and will decode every request. TURN over websocket will work over such
connection, but regular TURN will not. I am not sure how much effort we
want to spend supporting this, since we are talking about prisons,
military, and other similar nice places which will generally would try to
avoid supporting WebRTC due to its own security.
_____________
Roman Shpount