Communication Dans Un Congrès Année : 2025

Preventing WebRTC IP Address Leaks

Résumé

The WebRTC API enables real-time communication of text, video, and audio media streams through a web browser without requiring third-party extensions. However, it was not designed with privacy in mind. We conduct an experiment to analyse privacy leaks associated with WebRTC on Linux, macOS and Windows. Our findings show that despite recent updates to its specification and implementations, sensitive public IP addresses can still leak during audio/video communication, particularly in large non-NAT corporate networks, even when using a VPN, SOCKS or HTTP/S proxy. To address the observed leaks, we develop a simple, easily maintainable, cross-platform, open-source solution that confines the Mozilla Firefox web browser in a docker container. Our tests show that our containerised solution is effective in all situations even with a compromised browser without restricting applications.

Fichier principal
Vignette du fichier
Preventing WebRTC IP Address Leaks.pdf (590.74 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence
HAL

A comme partie hal-05089680 Logiciel Guillaume Nibert, Sébastien Tixeuil, Baptiste Polvé, Nana Bakalafoua M'Boussi, Xuan Son Nguyen. Preventing WebRTC IP Address Leaks. 2024, ⟨swh:1:dir:13dd58fbbff37434ad0432da7ca69c84ea4eb9a4;origin=https://github.com/snowpackvipn/preventing-webrtc-ip-address-leaks;visit=swh:1:snp:a102d1323a02b689ac4e21ad2a4e430da387da05;anchor=swh:1:rev:1aad9413b6809dae5d84f62ad6e8b905565e6a4d⟩. ⟨hal-05089680⟩

Dates et versions

hal-05048077 , version 1 (16-05-2025)

Licence

Identifiants

Citer

Guillaume Nibert, Sébastien Tixeuil, Baptiste Polvé, Nana J. Bakalafoua M'Boussi, Xuan Son Nguyen. Preventing WebRTC IP Address Leaks. 19th International Conference on Risks and Security of Internet and Systems, Nov 2024, Aix-en-Provence, France. pp.365-381, ⟨10.1007/978-3-031-89350-6_22⟩. ⟨hal-05048077⟩
564 Consultations
122 Téléchargements

Altmetric

Partager

  • More