3 ms·
isn’t webrtc by default off on all browsers? aren’t websites asking for permssion before the js is allowed access? and won’t it stay off when you deny the reque
by kmlx 8y ago
isn’t webrtc by default off on all browsers? aren’t websites asking for permssion before the js is allowed access? and won’t it stay off when you deny the request?
- nottorp 8y agoNo browser ever asked me if it can use it... and when I was using chrome, I looked for options to disable it and there were none.
- SahAssar 8y agoNope, the audio/video capture requires permission, but the rest should work without a permission prompt.
- kmlx 8y ago"but the rest should work without a permission prompt" what "rest" are you referring to?
- sempron64 8y agoConnections can be made to other computers without explicit permission.
- kmlx 8y agoah, i believe you are referring to the webrtc data channel. it leaks local IPs, but the severity depends on several factors, including whether you're running VPN and what you're using the VPN for, or just running behind a regular local network. if you're running behind a regular local network then I wouldn't consider the local IP leakage as a "privacy hazard". local IPs are compromised already. everywhere. they are easy to guess. they are easy to obtain in native apps. etc. there are issues when it comes to places where VPN access is crucial/vital. thankfully, very few VPN providers leak your IP nowadays, and with drafts such as what the poster above mentioned (https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-candidates/ https://datatracker.ietf.org/doc/draft-ietf-rtcweb-mdns-ice-...) this problem will be history soon enough.