News for hackers. Stuff that matters.

A comment on Firefox Hello. Parent comment

Re:Firefox Hello by aroch on Wednesday January 28, 2015 @06:29PM (#8963236)
https://blog.mozilla.org/blog/2014/10/16/mozilla-and-telefon...

Presumably offering routing servers and transit. Plus Telefonica bought TokBox[1], whose tech powers the backend

[1] https://tokbox.com/

[ Parent | on HN ]
Re:Firefox Hello by higherpurpose on Wednesday January 28, 2015 @06:34PM (#8963266)
Does this affect the end to end encryption mechanism of WebRTC (at least for Internet users)?

In other words, can Telefonica make it easy to spy on all Firefox Hello talks, or only on the browser-to-phone ones? (which is to be expected, I guess).

[ Parent | on HN ]
Re:Firefox Hello by aroch on Wednesday January 28, 2015 @07:05PM (#8963461)
From my understanding of the WebRTC spec, as long as your TURN/STUN server is trusted (which it is, the CA and relay are both run by Mozilla) it doesn't matter if the network is untrustworthy.

WebRTC by itsself is not MITM resistant

[ Parent | on HN ]