@techreport{wang-mmusic-encrypted-ice-candidates-00, number = {draft-wang-mmusic-encrypted-ice-candidates-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-wang-mmusic-encrypted-ice-candidates/00/}, author = {Alex Drake and Justin Uberti and Qingsi Wang}, title = {{Encrypting ICE candidates to improve privacy and connectivity}}, pagetotal = 7, year = 2019, month = nov, day = 1, abstract = {WebRTC applications collect ICE candidates as part of the process of creating peer-to-peer connections. To maximize the probability of a direct peer-to-peer connection, client private IP addresses can be included in this candidate collection, but this has privacy implications. This document describes a way to share local IP addresses with local peers without compromising client privacy. During the ICE process, local IP addresses are encrypted and authenticated using a pre-shared key and cipher suite before being put into ICE candidates as hostnames with an ".encrypted" pseudo-top- level domain. Other peers who also have the PSK are able to decrypt these addresses and use them normally in ICE processing.}, }