Browser-to-browser authentication and trust relationships for WebRTC
Résumé
WebRTC enables browsers to communicate in a Peer to Peer fashion without the use of any plug-ins. This technology is expected to lead a wave of disruptive yet innovative new communication services over the web however it also brings significant security and privacy concerns for the users. In WebRTC authentication is decoupled from the website allowing users to validate each other directly using third party identity providers. User's privacy and security highly depends upon the mechanism used for end-to-end authentication. To achieve security and enhance user privacy it is also essential to define trust between various entities involved in WebRTC security architecture. Therefore in this paper we analyze the identity architecture in detail to provide a comparison of suitable authentication protocols. A clear definition of trust is presented by defining various trust relationship that exist in WebRTC identity architecture