Skip to main content
Information Security

Return to Question

added 49 characters in body; edited title
Source Link
schroeder ♦
schroeder ♦
  • 132.2k
  • 55
  • 307
  • 348

how How can MITM be performed in webrtcWebRTC?

fromFrom what iI could tell, certificates are self signed-signed. whenWhen A wants to call B, after they finish relaying data to server, they initiate communication with each other. certificatesCertificates are self signed-signed, therefore there is no problem in switching them up. isIs there some mechanism to make sure that if C is on the same wifi as B, whay couldwhy he could not send to A and B the certificate of C and intercept A and B's certificate. then proxying the whole conversation.?

isIs there some hash that is sent from A to B and vice-versa via the authenticating server that can then be validated against the certificates?

WebRTC

how can MITM be performed in webrtc?

from what i could tell, certificates are self signed. when A wants to call B, after they finish relaying data to server they initiate communication with each other. certificates are self signed, therefore there is no problem in switching them up. is there some mechanism to make sure that if C is on the same wifi as B, whay could he not send to A and B the certificate of C and intercept A and B's certificate. then proxying the whole conversation.

is there some hash that is sent from A to B and vice-versa via the authenticating server that can then be validated against the certificates?

How can MITM be performed in WebRTC?

From what I could tell, certificates are self-signed. When A wants to call B, after they finish relaying data to server, they initiate communication with each other. Certificates are self-signed, therefore there is no problem in switching them up. Is there some mechanism to make sure that if C is on the same wifi as B, why he could not send to A and B the certificate of C and intercept A and B's certificate then proxying the whole conversation?

Is there some hash that is sent from A to B and vice-versa via the authenticating server that can then be validated against the certificates?

WebRTC

Source Link
ben f
ben f
  • 21
  • 2

how can MITM be performed in webrtc?

from what i could tell, certificates are self signed. when A wants to call B, after they finish relaying data to server they initiate communication with each other. certificates are self signed, therefore there is no problem in switching them up. is there some mechanism to make sure that if C is on the same wifi as B, whay could he not send to A and B the certificate of C and intercept A and B's certificate. then proxying the whole conversation.

is there some hash that is sent from A to B and vice-versa via the authenticating server that can then be validated against the certificates?