5 ms·
Why would STUN compromise e2e? STUN just returns your IP
by server_man3000 2y ago
Why would STUN compromise e2e? STUN just returns your IP
- strbean 2y agoI just didn't want to speculate, as I'm not familiar with the security considerations here. But, thinking about it a bit, couldn't a compromised STUN server establish a MITM by lying to you about your IP, and then relaying to you? This old HN comment describes it: https://news.ycombinator.com/item?id=11192610 https://news.ycombinator.com/item?id=11192610 I don't know if this would break the E2EE here (although if it wouldn't, I'm not sure how a TURN server would either, as that's just a baked in MITM).