Introduction

At the time of writing this book, the WebRTC standard was not complete and the technology and its standard were both under active development. Nevertheless, security and safety are very important and mandatory functional requirements that lie at the basis of the WebRTC standard. Basically, your WebRTC application should use only encrypted channels.

In this chapter, we will cover security-related questions. We will talk about security, third-party components, and software you will probably use when developing your WebRTC service. We will talk about configuring secured channels (HTTPS) on web browsers. We will cover the process of creating secure certificates and using them in web servers as well as the TURN service. We will also learn how to implement authentication on a TURN server using the TURN REST API.

We will talk about how WebRTC can work through firewalls and NAT, and learn how to configure a firewall on our server that is serving auxiliary services such as TURN or STUN...