My understanding is that with the WebRTC peer-to-peer data API, communications between peers are encrypted via a modified form of SSL. Where are the keys for the peer-to-peer SSL connection generated, though? On the original web server that unites the peers, or on the peers' computers?

**Update:**

Specifically, I'd like to know if it's possible for the original uniting web server to eavesdrop on the united peers, assuming that the JavaScript delivered to their browsers is not already siphoning off their data.