Security Considerations for WebRTC

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 21
Abstract: WebRTC is a protocol suite for use with real-time applications that can be deployed in browsers -- "real-time communication on the Web". This document defines the WebRTC threat model and analyzes the security threats of WebRTC in that model.
Publication Date: 2021-01-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8826
Link: https://doi.org/10.17487/RFC8826
Author(s): Eric Rescorla

Latest version of IETF RFC 8826

Document Versions — IETF RFC 8826

▶ IETF RFC 8826 (2021-01-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

Whitten, A. and J.D. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0", Proceedings of the 8th USENIX Security Symposium, August 1999, <https://www.usenix.org/legacy/publications/library/proceedings/sec99/whitten.html>. EXTERNAL
"SWF File Format Specification Version 19", April 2013, <https://www.adobe.com/content/dam/acom/en/devnet/pdf/swf-file-format-spec.pdf>. EXTERNAL
Jackson, C. and A. Barth, "Beware of Finer-Grained Origins", Web 2.0 Security and Privacy (W2SP 2008), July 2008. EXTERNAL
Barth, A., "Prompting the user is security failure", RTC-Web Workshop, September 2010, <http://rtc-web.alvestrand.com/home/papers/barth-security-prompt.pdf?attredirects=0>. EXTERNAL
Lyons, K., "FTC says the tech behind audio deepfakes is getting better", January 2020, <https://www.theverge.com/2020/1/29/21080553/ftc-deepfakes-audio-cloning-joe-rogan-phone-scams>. EXTERNAL
Statt, N., "Thieves are now using AI deepfakes to trick companies into sending them money", September 2019, <https://www.theverge.com/2019/9/5/20851248/deepfakes-ai-fake-audio-phone-calls-thieves-trick-companies-stealing-money>. EXTERNAL
Sunshine, J., Egelman, S., Almuhimedi, H., Atri, N., and L. Cranor, "Crying Wolf: An Empirical Study of SSL Warning Effectiveness", Proceedings of the 18th USENIX Security Symposium, August 2009, <https://www.usenix.org/legacy/event/sec09/tech/full_papers/sunshine.pdf>. EXTERNAL
Huang, L-S., Chen, E.Y., Barth, A., Rescorla, E., and C. Jackson, "Talking to Yourself for Fun and Profit", Web 2.0 Security and Privacy (W2SP 2011), May 2011. EXTERNAL
Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and C. Mortimore, "OpenID Connect Core 1.0", November 2014, <https://openid.net/specs/openid-connect-core-1_0.html>. EXTERNAL
IETF RFC 2818 [Superseded*]
IETF RFC 3261 [Active*]
IETF RFC 3552 [Active*]
IETF RFC 3711 [Active*]
IETF RFC 3760 [Active*]
IETF RFC 4251 [Active*]
IETF RFC 4568 [Active*]
IETF RFC 5479 [Active*]
IETF RFC 5763 [Active*]
IETF RFC 6189 [Active*]
IETF RFC 6222 [Superseded*]
IETF RFC 6347 [Superseded*]
IETF RFC 6454 [Active*]
IETF RFC 6455 [Active*]
IETF RFC 6749 [Active*]
IETF RFC 7022 [Active*]
IETF RFC 7033 [Active*]
IETF RFC 7675 [Active*]
IETF RFC 8445 [Active*]
IETF RFC 8825 [Active*]
IETF RFC 8827 [Active*]
RFC8828 — RFC8828 EXTERNAL
W3C.fingerprinting-guidance — Fingerprinting EXTERNAL
WHATWG.FETCH — WHATWG, “Fetch,” Living Standard, Aug. 2023, Available: https://fetch.spec.whatwg.org/. EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8826.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8826, Security Considerations for WebRTC. Available at https://doi.org/10.17487/RFC8826

Snippet:

IETF RFC 8826, Security Considerations for WebRTC. Available at https://doi.org/10.17487/RFC8826

HTML (ISO 690 compliant)

Preview:

IETF RFC 8826, Security Considerations for WebRTC. Available at https://doi.org/10.17487/RFC8826

Snippet:

<span class="citation"><cite>IETF RFC 8826</cite>, Security Considerations for WebRTC. Available at <a href="https://doi.org/10.17487/RFC8826" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8826</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8826, Security Considerations for WebRTC
doi: 10.17487/RFC8826
url: https://doi.org/10.17487/RFC8826

Snippet:

<li>
<cite id="bib-rfc8826">IETF RFC 8826</cite>, Security Considerations for WebRTC
<span class="doi">10.17487/RFC8826</span>
</li>

Referenced By

IETF RFC 8825 [Active*]
IETF RFC 8827 [Active*]
IETF RFC 8829 [Superseded*]
IETF RFC 8831 [Active*]
IETF RFC 8865 [Active*]
IETF RFC 9429 [Active*]
IETF RFC 9725 [Active*]