Recently I've been implementing WebRTC in my project and would like to add security and privacy to the couple. I then decided to search on and found something
if it is really necessary to impose security, it should be done at the application level.
I do not remember if I read this in the API or security sites ..
All right, I encrypt traffic (answer, offer, candidate..) with AES and RSA.
I noticed that the work of my system greatly reduced efficiency, it slowed the time to connect, which is kind of obvious because so many processes at once.
My questions taking into account all these are:
Am I doing right?
Is it really necessary encrypt all ?, may not just be the answer and offer?
Is there anything else I should know?