[rtcweb] draft-schwartz-rtcweb-return

[Cullen Jennings <[e-mail]>]

I'd like to point out that the combination of ietf-tram-turn-server-discovery and draft-schwartz-rtcweb-return allow any network you are connected to more or less MITM your media and do things like rate limit it, generate analytics on who you are talking to, force your traffic through an intermediary that is in a  different legal jurisdiction and so on. 

They are also not clear on how the browser gets the credentials to use the discovered TURN server. This seems like a major lacking before we can significantly discuss this. 

As we have seen from the google proxy deployments, enough revenue can be generated from this relaying info to pay for the relay. I'm not keen on that happening automatically with no user consent or awareness. 

But I don't get how this will work for enterprise deployments - It's just very unclear how the JS would end with the appropriate set of TURN servers to use.