Re: [rtcweb] SDP_PRANSWER followed by SDP_OFFER scenario in JSEP

[Cullen Jennings <[e-mail]>]

On May 3, 2012, at 2:34 PM, Roman Shpount wrote:

> On Thu, May 3, 2012 at 4:29 PM, Christer Holmberg <[e-mail]> wrote:
> You could also choose not to alert the remote user until the ICE procedures have finished - more or less using ICE with preconditions.
> 
> Of course, that is going to trigger actions in STUN/TURN servers, even if the called party won't accept the call, but at least from a user experience perspective that is still better than lifting the hook, and having to wait for whatever-time-it-takes-for-ICE-to-finish seconds before one can start to talk.
> 
> 
> This also has a downside of disclosing user's IP to the caller without the user confirmation. For a lot of applications this can be serious security flaw. 
> _____________

The initial media flow could be forced to provide only relay ICE candidates to help mitigate this. (I think we decided awhile back that was one of the things we would provide support for in the API). Later with the user answers or consents in same way, the ICE can move the media to a non relay flow.