1. Home
  2. Connections
  3. Understanding WebRTC’s End-to-End Encryption
  1. Home
  2. SIP Over WebRTC
  3. Understanding WebRTC’s End-to-End Encryption
  1. Home
  2. Under the Hood
  3. Understanding WebRTC’s End-to-End Encryption
Searching...

Understanding WebRTC’s End-to-End Encryption

Contents

WebRTC (Web Real-Time Communication) is an innovative technology that enables direct communication between browsers and devices. SIPERB utilizes this technology to facilitate secure, real-time communication solutions. A pivotal feature of WebRTC within SIPERB is its support for end-to-end encryption (E2E), ensuring that media streams remain private and secure as they travel across the internet.

For those with modern systems that can create a DTLS stream, but lack active WebSocket configurations, SIPERB offers a Proxy Relay method using UDP. This method allows the relay of signaling to your server while ensuring that the media is end-to-end encrypted and does not pass through SIPERB’s servers, significantly reducing costs and potentially lowering latency.

Note: To make use of End-to-end Encryption, simply DO NOT select Transcoding when making a Connection

Proxy Relay Method

The Proxy Relay method in SIPERB provides a streamlined approach to securing media streams while leveraging the existing capabilities of your infrastructure. Here’s a detailed look at how this works:

Key Features of Proxy Relay:

  • Security and Privacy: The media, utilizing DTLS for encryption, flows directly from the client endpoint (User Agent Client or UAC) to your server (User Agent Server or UAS), bypassing any intermediary handling by SIPERB. This setup secures the media from eavesdropping and tampering.
  • Reduced Costs and Latency: By not routing media through SIPERB, both operational costs and transmission latency are reduced.
  • Network Configuration: Media transmission directly between endpoints may require adjustments to firewall settings to allow efficient data flow. SIPERB attempts to utilize the same port for sending and receiving data to simplify network configurations, although this may not always be feasible depending on the network setup.

Implementation Considerations:

  • Network Adjustments: You may need to modify firewall rules to allow media streams to pass directly between the client and the server.
  • Fallback Options: If direct streaming presents challenges due to network constraints, SIPERB can revert to a full media relay approach where both signaling and media are relayed through our servers.

Steps to Implement Proxy Relay in SIPERB

  1. Enable DTLS on Your Server: Ensure your server is capable of handling DTLS streams, which are essential for encrypting the media.
  2. Disable Transcoding: Set up the Connection by specifying Transcoding Disabled in the settings. Ensure your network is prepared to handle the direct flow of media.
  3. Test the Connection: Before full deployment, conduct comprehensive testing to verify that the media and signaling are correctly relayed and that the end-to-end encryption is functioning as expected.

Conclusion

The Proxy Relay method using end-to-end encryption ensures that SIPERB can offer secure, efficient, and cost-effective communication solutions. By leveraging modern WebRTC capabilities and direct media streaming, SIPERB helps maintain the integrity and privacy of your communications while adapting to the specific requirements of your network infrastructure. This approach not only enhances security but also optimizes the performance of your real-time communication setup.

Related Articles