I'm pentesting a web-application that uses peer-to-peer WebRTC for video chatting. I haven't come across this yet, so I'm a tad lost as of how to tackle this.

How can I verify the WebRTC communication is encrypted.

What other attack vectors do I have with WebRTC?

  • 1
    According to webrtc-security.github.io: Encryption is a mandatory feature of WebRTC, and is enforced on all components, including signaling mechanisms. – ThoriumBR Oct 31 '18 at 14:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.