Sponsored Links
-->

Friday, August 3, 2018

What is WebRTC and why it's dangerous?
src: www.vpnhook.com

WebRTC (Web Real-Time Communication) is a free, open-source project that provides web browsers and mobile applications with real-time communication (RTC) via simple application programming interfaces (APIs). It allows audio and video communication to work inside web pages by allowing direct peer-to-peer communication, eliminating the need to install plugins or download native apps. Supported by Google, Microsoft, Mozilla, and Opera, WebRTC is being standardized through the World Wide Web Consortium (W3C) and the Internet Engineering Task Force (IETF).

Its mission is to "enable rich, high-quality RTP applications to be developed for the browser, mobile platforms, and IoT devices, and allow them all to communicate via a common set of protocols". The reference implementation is released as free software under the terms of a BSD license. OpenWebRTC provides another free implementation based on the multimedia framework GStreamer. JavaScript inventor Brendan Eich called it a "new front in the long war for an open and unencumbered web".


Video WebRTC



History

In May 2010, Google bought Global IP Solutions or GIPS, a VoIP and videoconferencing software company that had developed many components required for RTC, such as codecs and echo cancellation techniques. Google open-sourced the GIPS technology and engaged with relevant standards bodies at the IETF and W3C to ensure industry consensus. In May 2011, Google released an open-source project for browser-based real-time communication known as WebRTC. This has been followed by ongoing work to standardize the relevant protocols in the IETF and browser APIs in the W3C.

In May 2011, Ericsson Labs built the first implementation of WebRTC using a modified WebKit library. In October 2011, the W3C published its first draft for the spec. WebRTC milestones include the first cross-browser video call (February 2013), first cross-browser data transfers (February 2014), and as of July 2014 Google Hangouts was "kind of" using WebRTC.

The W3C draft of WebRTC is a work in progress with advanced implementations in the Chrome and Firefox browsers. The API is based on preliminary work done in the WHATWG. It was referred to as the ConnectionPeer API, and a pre-standards concept implementation was created at Ericsson Labs. The WebRTC Working Group expects this specification to evolve significantly based on:

  • Outcomes of ongoing exchanges in the companion RTCWEB group at IETF to define the set of protocols that, together with this document, define real-time communications in web browsers. While no one signaling protocol is mandated, SIP over Websockets (RFC 7118) is often used partially due to the applicability of SIP to most of the envisaged communication scenarios as well as the availability of open-source software such as JsSIP.
  • Privacy issues that arise when exposing local capabilities and local streams
  • Technical discussions within the group, on implementing data channels in particular
  • Experience gained through early experimentation
  • Feedback from other groups and individuals

Maps WebRTC



Overview

Design

Major components of WebRTC include several JavaScript APIs:

  • getUserMedia acquires the audio and video media (e.g., by accessing a device's camera and microphone).
  • RTCPeerConnection enables audio and video communication between peers. It performs signal processing, codec handling, peer-to-peer communication, security, and bandwidth management.
  • RTCDataChannel allows bidirectional communication of arbitrary data between peers. It uses the same API as WebSockets and has very low latency.

The WebRTC API also includes a statistics function:

  • getStats allows the web application to retrieve a set of statistics about WebRTC sessions. These statistics data are being described in a separate W3C document.

RFC 7874 requires implementations to provide PCMA/PCMU (RFC 3551), Telephone Event as DTMF (RFC 4733), and Opus (RFC 6716) audio codecs as minimum capabilities. The PeerConnection, data channel and media capture browser APIs are detailed in the W3C.

W3C is developing ORTC (Object Real-Time Communications) for WebRTC. This is commonly referred to as WebRTC 1.1.

Examples

Although initially developed for web browsers, WebRTC has applications for non-browser devices, including mobile platforms and IoT devices. Examples include browser-based VoIP telephony, also called cloud phones or web phones, which allow calls to be made and received from within a web browser, replacing the requirement to download and install a softphone.

Support

WebRTC is supported by the following browsers:

  • Desktop PC
    • Microsoft Edge 12+
    • Google Chrome 28+
    • Mozilla Firefox 22+
    • Safari 11+
    • Opera 18+
    • Vivaldi 1.9+
  • Android
    • Google Chrome 28+ (enabled by default since 29)
    • Mozilla Firefox 24+
    • Opera Mobile 12+
  • Chrome OS
  • Firefox OS
  • Blackberry 10
  • iOS 11
    • MobileSafari/WebKit
  • Tizen 3.0

Support was not included in Internet Explorer prior to its final feature release in October 2013, but 3rd party plugins are available to add the support of WebRTC to IE and Safari for MacOS. At WWDC 2017, Apple announced Safari would get WebRTC support in Safari 11, and it was made available in release 32 of the Safari Technology Preview.


Kaazing.com - Kaazing WebSocket Gateway 5 Docs
src: kaazing.com


Concerns

In January 2015, TorrentFreak reported a serious security flaw in browsers that support WebRTC, saying that it compromised the security of VPN tunnels, by exposing the true IP address of a user. The IP address read requests are not visible in the browser's developer console, and they are not blocked by most ad blocking/privacy/security add-ons, enabling online tracking by advertisers and other entities despite precautions (however the uBlock Origin add-on can fix this problem).


webrtc Archives - Influxis
src: influxis.com


See also

  • Global IP Solutions (GIPS)
  • Real-time Transport Protocol (RTP)
  • Session Description Protocol (SDP)
  • WebRTC Gateway

NextCloud Part 2 - Installing Spreed webRTC - YouTube
src: i.ytimg.com


References


E-commerceland under the spell of WebRTC - Belco
src: blog.belco.io


Further reading

  • Proust, S., ed. (May 2016). Additional WebRTC Audio Codecs for Interoperability. IETF. doi:10.17487/RFC7875. RFC 7875. https://tools.ietf.org/html/rfc7875. Retrieved 2016-10-12. 
  • Valin, J. M.; Bran, C. (May 2016). WebRTC Audio Codec and Processing Requirements. IETF. doi:10.17487/RFC7874. RFC 7874. https://tools.ietf.org/html/rfc7874. Retrieved 2016-10-12. 
  • Roach, A. B. (March 2016). WebRTC Video Processing and Codec Requirements. IETF. doi:10.17487/RFC7742. RFC 7742. https://tools.ietf.org/html/rfc7742. Retrieved 2016-10-12. 
  • Perumal, M.; Wing, D.; Ravindranath, R.; Reddy, T.; Thomson, M. (October 2015). Session Traversal Utilities for NAT (STUN) Usage for Consent Freshness. IETF. doi:10.17487/RFC7675. RFC 7675. https://tools.ietf.org/html/rfc7675. Retrieved 2016-10-12. 
  • Holmberg, C.; Hakansson, S.; Eriksson, G. (March 2015). Web Real-Time Communication Use Cases and Requirements. IETF. doi:10.17487/RFC7478. RFC 7478. https://tools.ietf.org/html/rfc7478. Retrieved 2016-10-12. 

The Big Churn - learning from real usage stats (Lasse Lumiaho and ...
src: webrtchacks.com


External links

  • Official website
  • W3C Web Real-Time Communications Working Group
  • IETF Real-Time Communication in WEB-browsers (rtcweb) Working Group
  • Getting Started With WebRTC
  • WebRTC Interest and History
  • WebRTC:How and Why?
  • WebRTC: IP Address Exposure Demo

Source of article : Wikipedia