Martin Thomson

Browser-to-Browser Security Assurances for WebRTC

For several years, browsers have been able to assure users that they are talking to a specific, identified website, protected from network-based attackers. In email, messaging, and other applications where sites act as intermediaries, there is a need for additional protections to provide end-to-end security. This article describes the approach that WebRTC takes to providing end-to-end security, leveraging both the flexibility of JavaScript and the ability of browsers to create constraints through JavaScript APIs.