Re: [rtcweb] Remote recording - RTC-Web client acting as SIPREC session recording client

["Robert O'Callahan" <[e-mail]>]

On Fri, Aug 26, 2011 at 9:19 AM, Matthew Kaufman
<[e-mail]>wrote:

> On 8/25/2011 11:50 AM, Timothy B. Terriberry wrote:
>
>> Matthew Kaufman wrote:
>>
>>> But this is a bad idea. Providing APIs that let a browser send audio
>>> that is being received from the other end to a third party open several
>>> different cans of worms simultaneously. One is that there's now another
>>>
>>
>> The currently proposed MediaStream Processing API (
>> http://hg.mozilla.org/users/**rocallahan_mozilla.com/specs/**
>> raw-file/tip/StreamProcessing/**StreamProcessing.html<http://hg.mozilla.org/users/rocallahan_mozilla.com/specs/raw-file/tip/StreamProcessing/StreamProcessing.html>)
>> essentially allows exactly this (including mixing). It doesn't make any
>> distinction about whether the source of a MediaStream is a local camera, a
>> <video> tag, or a remote stream from a PeerConnection object. So if you want
>> to prevent this kind of thing, you need to have an active method of doing
>> so, because by default the API will allow it.
>>
>
> I think you need to seriously consider the security implications here. Any
> media that originates from somewhere other than a local camera that has
> given permission or a local microphone that has given permission needs to be
> marked as not sendable elsewhere.


We could do that on top of the above API, e.g. by having a PeerConnection
examine the stream graph to determine whether a MediaStream comes directly
from a local sensor.

However, such a restriction would prevent many useful applications and does
not solve the security problems that arise from a malicious Web app setting
up a connection between you and the PSTN. If that can happen, you're in all
kinds of trouble whether the app can control the contents of your outgoing
stream or not.

Rob
-- 
"If we claim to be without sin, we deceive ourselves and the truth is not in
us. If we confess our sins, he is faithful and just and will forgive us our
sins and purify us from all unrighteousness. If we claim we have not sinned,
we make him out to be a liar and his word is not in us." [1 John 1:8-10]