Visual RFC.
ALL RFCs / RFC 8445
Read the RFC ↗
RFC 8445 / MECHANISMS

Traversal is not media encryption

05

A selected transport path does not itself encrypt or authenticate the media payload.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

DIAGRAM§ 12 ↗
RFC 8445 · § 12EXAMPLE
3 / 3
Traversal is not media encryptionA selected transport path does not itself encrypt or authenticate the media payload. Current state: Protect the payload.Traversal is not media encryptionPeer APeer Bselected ICE pathmedia follows this pathMedia protection is a separate layer
03
Protect the payload

Use the media protocol’s required security, separately from candidate selection.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
KEY POINT

ICE establishes connectivity for a usage.

  • ICE establishes connectivity for a usage.
  • The usage must specify its own security and data-handling rules.
  • Relays can help connectivity but do not replace end-to-end media protection.
DETAILS

The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. Gather possible addresses
  2. Check candidate pairs
  3. Nominate a selected path
  4. Restart changes the credentials
  5. Traversal is not media encryption
RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗