I think the big piece is DTLS here. * OpenSSL was already in all the browsers, so you have a DTLS client. * Extracting the keys for SRTP gives you PFS, which

I think the big piece is DTLS here. * OpenSSL was already in all the browsers, so you have a DTLS client. * Extracting the keys for SRTP gives you PFS, which is really great! This came up a lot during the SDES conversations. * I have heard that most gateways only support UDP/TCP, and other protocols aren't going to happen. That is the argument for running QUIC over UDP (vs a layer lower)