Briefing

I just wanted to say that this looks very nice indeed.

Looks useful thank you for sharing. The website that provides the web app and mediates the communication stores as (few -> little) data as possible

Thank you for making both the client and server sides of this video chat application open source. The only missing piece it seems is the STUN/TURN server. Would you have a plan…

I don't understand the anonymous claim. Since in WebRTC peers connect directly to each other they'll see the IP of the other peer and can determine their locations. Further there…

Thanks for the clarification, imo and as you already see in this discussion different people understand different meanings into the word. Maybe it's safer to use a clear…

> Anonymous end-to-end encrypted End to end encryption implies that you have established an encrypted connection with a known participant and secured it by verifying your keys…

In most e2ee threat models the biggest source of threat is the server that mediates the data exchange. Other threats are sufficiently thwarted with TLS, so ... ... these Briefing…

Looks really cool. One key element is that anyone can spy on your call if they guess the random name that you generate to create the link. I am curious what randomizations you…

So it's just javascript Math.random. https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/random > Math.random() does not provide…

"No camera or microphone has been found!" Using firefox 79, the usual prompts to allow permissions were not issued.

In this case authentication is provided through a shared secret (the room name). An arbitrary MitM wouldn't know the room name since the connection to the server is also…

Yes password protection would definitely make this more usable. Have you also seen apprtc [0]? Could you point out if there are any differences you see there to Briefing? [0]…

Thanks for the clarification, imo and as you already see in this discussion different people understand different meanings into the word. Maybe it's safer to use a clear…

How can we further decentralize this such that the entire app runs "without any servers"? Sadly it is so close but the realities of ipv4 and local subnets definitely makes this…

Not sure if this is possible with the current WebRTC api, but if you could expose the dtls public keys for the current and remote sessions somewhere, that would help to reduce…

How does the encryption work here? The home page says "end-to-end encrypted"; is there a key management concept and a key verification feature of some kind?

How do you do the background? Are you using the bodypix tensorflow library? Because in my tests it had been horrible slow and very inaccurate depending on lighting,

Do you maybe have instructions on how to set this up on my own server/domain? I've looked at the code but I'm not familiar with Vue. I have an online webgl multiplayer game where…

Yes password protection would definitely make this more usable. Have you also seen apprtc [0]? Could you point out if there are any differences you see there to Briefing? [0]…

Correct. Scroll up the page to learn about the details: https://brie.fi/ng#help Also see https://webrtc-security.github.io/ WebRTC is end-to-end encrypted by default. There is a…

I think you are very much misinformed on the subject. You're not sending unencrypted streams to Jitsi, as it uses hop-by-hop encryption, meaning you send an encrypted stream to…

Correct. Scroll up the page to learn about the details: https://brie.fi/ng#help Also see https://webrtc-security.github.io/ WebRTC is end-to-end encrypted by default. There is a…

Bootstrapping a distributed swarm is always a tricky proposition. Bittorrent clients use a few endpoints to bootstrap their dht, and then upgrade to p2p after that. I think…