Preliminary research
Analyzing the WebRTC Ecosystem and Breaking Authentication in DTLS-SRTP
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
DTLS-SRTP secures media in Zoom, Teams and Google Meet and underpins WebRTC, whose stack spans HTTP, TLS, SDP, ICE, STUN, TURN, DTLS, SRTP and SCTP - too much to audit systematically by hand, so deployments went unexamined. An automated man-in-the-middle framework, DMS, drives the DTLS channel of real deployments and breaks authentication across the ecosystem it surveys.
Record
- Researcher
- Martin Bach, Vukašin Karadžić, Lukas Knittel, Robert Merget and Jean Paul Degabriele
- Published by
- usenix.org
- Topic
- Identity
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Martin Bach, Vukašin Karadžić, Lukas Knittel, Robert Merget and Jean Paul Degabriele, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .