Re: [rtcweb] Requiring ICE for RTC calls

[Iñaki Baz Castillo <[e-mail]>]

2011/9/27 Roman Shpount <[e-mail]>:
> If we do decide that ICE is a requirement, we can also have a local policy,
> web site can be specified for which the calls are allowed without ICE.

I agree. Somebody would reply now that the provider could be
malicious, but nothing prevents a malicious provider to establish a
valid and secure SRTP+ICE video session with a web visitor and later
publish the video in Youtube.


> Independently from all of this, SRTP should be optional. It does present
> privacy concerns, but they are no different then privacy concerns over HTTP.

The privacy concerns of RTP are the same that those present in HTTP,
SMTP, FTP, SIP, XMPP or whatever application level protocol. But none
of those specifications require TLS. Of course a service provider
could decide to impose TLS, but the specification (rtcweb here) should
not mandate so much (IMHO).

-- 
Iñaki Baz Castillo
<[e-mail]>