Glossary

WebRTC

Web Real-Time Communication

Browser and native APIs and IETF protocols for audio, video and data between peers, using ICE, STUN and TURN for connectivity and DTLS-SRTP for encryption. ASVS 5.0 chapter V17 covers its TURN, media and signaling servers.

Defined in: W3C WebRTC: Real-Time Communication in Browsers

Covered in

Guide

Secure WebRTC signaling, TURN relays and media servers

WebRTC encrypts media, but signaling decides whose keys you trust and TURN relays wherever it is allowed. Authorize every signaling message, mint short-lived TURN credentials, deny internal addresses and harden media servers.