RFC 8827: WebRTC Security Architecture

This document defines the security architecture for WebRTC, a protocol suite intended for use with real-time applications that can be deployed in browsers --…

Read RFC 8827 on the RFC Editor

Outgoing relationships (37 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 4566: SDP: Session Description Protocol
Normative reference — RFC 3264: An Offer/Answer Model with Session Description Protocol (SDP)
Normative reference — RFC 3711: The Secure Real-time Transport Protocol (SRTP)
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 2818: HTTP Over TLS
Normative reference — RFC 6347: Datagram Transport Layer Security Version 1.2
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 8259: The JavaScript Object Notation (JSON) Data Interchange Format
Normative reference — RFC 8445: Interactive Connectivity Establishment (ICE): A Protocol for Network Address Translator (NAT) Traversal
Normative reference — RFC 5764: Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP)
Normative reference — RFC 6454: The Web Origin Concept
Normative reference — RFC 4568: Session Description Protocol (SDP) Security Descriptions for Media Streams
Normative reference — RFC 5763: Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS)
Normative reference — RFC 8615: Well-Known Uniform Resource Identifiers (URIs)
Normative reference — RFC 7022: Guidelines for Choosing RTP Control Protocol (RTCP) Canonical Names (CNAMEs)
Normative reference — RFC 8122: Connection-Oriented Media Transport over the Transport Layer Security (TLS) Protocol in the Session Description Protocol (SDP)
Normative reference — RFC 8261: Datagram Transport Layer Security (DTLS) Encapsulation of SCTP Packets
Normative reference — RFC 8834: Media Transport and Use of RTP in WebRTC
Normative reference — RFC 8825: Overview: Real-Time Protocols for Browser-Based Applications
Normative reference — RFC 8826: Security Considerations for WebRTC
Normative reference — RFC 8829: JavaScript Session Establishment Protocol (JSEP)
Normative reference — RFC 7918: Transport Layer Security (TLS) False Start
Normative reference — RFC 7675: Session Traversal Utilities for NAT (STUN) Usage for Consent Freshness
Normative reference — RFC 8844: Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)
Informative reference — RFC 3261: SIP: Session Initiation Protocol
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 6265: HTTP State Management Mechanism
Informative reference — RFC 6455: The WebSocket Protocol
Informative reference — RFC 8224: Authenticated Identity Management in the Session Initiation Protocol (SIP)
Informative reference — RFC 5705: Keying Material Exporters for Transport Layer Security (TLS)
Informative reference — RFC 7617: The 'Basic' HTTP Authentication Scheme
Informative reference — RFC 6943: Issues in Identifier Comparison for Security Purposes
Informative reference — RFC 8828: WebRTC IP Address Handling Requirements

Incoming relationships (9 related RFCs)

Normatively referenced by — RFC 8825: Overview: Real-Time Protocols for Browser-Based Applications
Normatively referenced by — RFC 8829: JavaScript Session Establishment Protocol (JSEP)
Normatively referenced by — RFC 8835: Transports for WebRTC
Normatively referenced by — RFC 8844: Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)
Normatively referenced by — RFC 8865: T.140 Real-Time Text Conversation over WebRTC Data Channels
Normatively referenced by — RFC 9248: Interoperability Profile for Relay User Equipment
Informatively referenced by — RFC 8826: Security Considerations for WebRTC
Informatively referenced by — RFC 8828: WebRTC IP Address Handling Requirements
Informatively referenced by — RFC 8871: A Solution Framework for Private Media in Privacy-Enhanced RTP Conferencing (PERC)