Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Complete security considerations based on security questionnaire and IP address discussions #439

Merged
merged 8 commits into from Jan 7, 2016

Conversation

dontcallmedom
Copy link
Member

This pull request:

  • gives more structure to the security considerations section
  • adds privacy to its scope
  • documents fingerprinting surfaces
  • links to the IP address policy proposal
  • adds security and privacy impact in-line in the API where it matters

<p>When establishing DTLS connections, the WebRTC API can generate
certificates that can be persisted by the application (e.g. in
IndexedDB). These certificates are not shared across origins, and
gets cleared when persistent storage is cleared for the origin.</p>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: "These certificates" (plural) means that they get cleared, not "gets".

@aboba
Copy link
Contributor

aboba commented Jan 7, 2016

s/visibile/visible/

alvestrand added a commit that referenced this pull request Jan 7, 2016
Complete security considerations based on security questionnaire and IP address discussions
@alvestrand alvestrand merged commit 31acd96 into master Jan 7, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants