4 ms·
I have kept live audio and video out of my E2EE chat app because the price to support it would be too high for my poor users I will give your solution a try to
by collaborative 4y ago
I have kept live audio and video out of my E2EE chat app because the price to support it would be too high for my poor users
I will give your solution a try to see if it can solve my problem - at last! Thank you so much for this
- gfodor 4y agoSure, glad to hear it!
- atwood22 4y agoHmm not positive, but I don’t think you could use this while simultaneously guaranteeing communication was E2EE. If communication is mostly 1-1 you could directly connect peers without needing to send video / audio to a 3rd party.
- gfodor 4y agoYep the cloudflare worker is in the chain of trust for e2e. There’s an attack vector with signalling servers where you can alter the SDP. This won’t allow MITM but would cause you to connect to the attacker who could then pretend to be the person you were connecting to. That said, if your users can trust you’ve deployed this worker and that the worker doesn’t hijack the SDP, the e2e would be legit beyond that bit of trust. TURN doesn’t see the clear RTP payloads nor does the signalling server.