Heres some information: https://rtcweb-wg.github.io/security-arch/#rfc.section.4.3 https://rtcweb-wg.github.io/security-arch/#rfc.section.4.3 I dont believe th

Heres some information: https://rtcweb-wg.github.io/security-arch/#rfc.section.4.3 https://rtcweb-wg.github.io/security-arch/#rfc.section.4.3 I dont believe there is a way to retrieve the keys via javascript, but you can get a fingerprint from the SessionDescription. These fingerprints are used to validate the certificates during the DTLS handshake, so displaying those should be sufficient for manual verification. Note that there may be multiple independently encrypted streams per peer, so you may have to display a few. Its not quite as simple as a single fingerprint, usually. I think this is probably an artifact of deriving the SRTP key from the DTLS key. I would much prefer the option to manage SRTP encryption keys independently, which would simplify this somewhat.