[rtcweb] usability of IdP concepts in draft-ietf-rtcweb-security-arch-07

[Wolfgang Beck <[e-mail]>]

What I am missing in this draft is the link between authentication towards
the web server and signing of DTLS info towards the remote party. To make a
call, a user will have to
1) log into the web server application
2) permit the browser to access camera/mic
3) log into the IdP to sign the DTLS info

To receive a call, I will have to
1) log into the web server application
2) permit the browser to access camera/mic when there is a call
3) log into the IdP to sign the DTLS info
..and hope the caller has not given up before I clicked all permission
boxes and entered all user credentials.

Can 1) and 3) be merged somehow? How would you explain 3) to a user?


Wolfgang Beck