Preventing WebRTC IP Address Leaks
Résumé
The WebRTC API enables real-time communication of text, video, and audio media streams through a web browser without requiring third-party extensions. However, it was not designed with privacy in mind. We conduct an experiment to analyse privacy leaks associated with WebRTC on Linux, macOS and Windows. Our findings show that despite recent updates to its specification and implementations, sensitive public IP addresses can still leak during audio/video communication, particularly in large non-NAT corporate networks, even when using a VPN, SOCKS or HTTP/S proxy. To address the observed leaks, we develop a simple, easily maintainable, cross-platform, open-source solution that confines the Mozilla Firefox web browser in a docker container. Our tests show that our containerised solution is effective in all situations even with a compromised browser without restricting applications.
| Origine | Fichiers produits par l'(les) auteur(s) |
|---|---|
| Licence |
![]()
A comme partie hal-05089680 Logiciel Guillaume Nibert, Sébastien Tixeuil, Baptiste Polvé, Nana Bakalafoua M'Boussi, Xuan Son Nguyen. Preventing WebRTC IP Address Leaks. 2024, ⟨swh:1:dir:13dd58fbbff37434ad0432da7ca69c84ea4eb9a4;origin=https://github.com/snowpackvipn/preventing-webrtc-ip-address-leaks;visit=swh:1:snp:a102d1323a02b689ac4e21ad2a4e430da387da05;anchor=swh:1:rev:1aad9413b6809dae5d84f62ad6e8b905565e6a4d⟩. ⟨hal-05089680⟩