PSA: SDES key exchange is being deprecated and removed.

269 views
Skip to first unread message

Harald Alvestrand

unread,
Sep 7, 2021, 7:48:31 AM9/7/21
to discuss...@googlegroups.com

The SDES key exchange mechanism, a key exchange mechanism that does not provide adequate security for WebRTC sessions, will be removed from WebRTC and Chrome.


This mechanism has been declared a MUST NOT implement in the IETF standards for WebRTC (RFC 8827 section 6.5) since 2013 due to its security issues.


The current schedule calls for the API to be removed from Chrome in M97 (branch November 4 2021, stable release Jan 22 2022); Chrome M95 will print a deprecation notice if you try to use the feature.


Chromestatus entry: https://www.chromestatus.com/feature/5695324321480704


Harald

Harald Alvestrand

unread,
Oct 12, 2021, 5:03:12 AM10/12/21
to discuss...@googlegroups.com
This change has now landed in tip-of-tree (M97), and will roll out to Canary shortly.
Using the constraint will now print a deprecation notice, but otherwise have no effect.

Reply all
Reply to author
Forward
0 new messages