{"action":"created","issue":{"url":"https://api.github.com/repos/openpeer/ortc/issues/200","repository_url":"https://api.github.com/repos/openpeer/ortc","labels_url":"https://api.github.com/repos/openpeer/ortc/issues/200/labels{/name}","comments_url":"https://api.github.com/repos/openpeer/ortc/issues/200/comments","events_url":"https://api.github.com/repos/openpeer/ortc/issues/200/events","html_url":"https://github.com/openpeer/ortc/issues/200","id":77097742,"number":200,"title":"Incoming media prior to Remote Fingerprint Verification","user":{"login":"aboba","id":808811,"avatar_url":"https://avatars.githubusercontent.com/u/808811?v=3","gravatar_id":"","url":"https://api.github.com/users/aboba","html_url":"https://github.com/aboba","followers_url":"https://api.github.com/users/aboba/followers","following_url":"https://api.github.com/users/aboba/following{/other_user}","gists_url":"https://api.github.com/users/aboba/gists{/gist_id}","starred_url":"https://api.github.com/users/aboba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aboba/subscriptions","organizations_url":"https://api.github.com/users/aboba/orgs","repos_url":"https://api.github.com/users/aboba/repos","events_url":"https://api.github.com/users/aboba/events{/privacy}","received_events_url":"https://api.github.com/users/aboba/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openpeer/ortc/labels/1.1","name":"1.1","color":"0052cc"},{"url":"https://api.github.com/repos/openpeer/ortc/labels/PR%20exists","name":"PR exists","color":"bfe5bf"},{"url":"https://api.github.com/repos/openpeer/ortc/labels/to-do-next-draft","name":"to-do-next-draft","color":"C5925E"}],"state":"open","locked":false,"assignee":{"login":"aboba","id":808811,"avatar_url":"https://avatars.githubusercontent.com/u/808811?v=3","gravatar_id":"","url":"https://api.github.com/users/aboba","html_url":"https://github.com/aboba","followers_url":"https://api.github.com/users/aboba/followers","following_url":"https://api.github.com/users/aboba/following{/other_user}","gists_url":"https://api.github.com/users/aboba/gists{/gist_id}","starred_url":"https://api.github.com/users/aboba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aboba/subscriptions","organizations_url":"https://api.github.com/users/aboba/orgs","repos_url":"https://api.github.com/users/aboba/repos","events_url":"https://api.github.com/users/aboba/events{/privacy}","received_events_url":"https://api.github.com/users/aboba/received_events","type":"User","site_admin":false},"assignees":[{"login":"aboba","id":808811,"avatar_url":"https://avatars.githubusercontent.com/u/808811?v=3","gravatar_id":"","url":"https://api.github.com/users/aboba","html_url":"https://github.com/aboba","followers_url":"https://api.github.com/users/aboba/followers","following_url":"https://api.github.com/users/aboba/following{/other_user}","gists_url":"https://api.github.com/users/aboba/gists{/gist_id}","starred_url":"https://api.github.com/users/aboba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aboba/subscriptions","organizations_url":"https://api.github.com/users/aboba/orgs","repos_url":"https://api.github.com/users/aboba/repos","events_url":"https://api.github.com/users/aboba/events{/privacy}","received_events_url":"https://api.github.com/users/aboba/received_events","type":"User","site_admin":false}],"milestone":null,"comments":16,"created_at":"2015-05-16T18:23:28Z","updated_at":"2016-07-21T17:00:12Z","closed_at":null,"body":"At the ORTC CG meeting on May 13, Justin pointed out that passing incoming media to an RtpReceiver prior to verification of the remote fingerprint could permit a DTLS man-in-the-middle attack.  So while we recognize the potential for incoming media in the DTLS \"connecting\" state, there probably should be a prohibition on passing decrypted media to an attacked RtpReceiver until the \"connected\" state is reached. "},"comment":{"url":"https://api.github.com/repos/openpeer/ortc/issues/comments/234316888","html_url":"https://github.com/openpeer/ortc/issues/200#issuecomment-234316888","issue_url":"https://api.github.com/repos/openpeer/ortc/issues/200","id":234316888,"user":{"login":"aboba","id":808811,"avatar_url":"https://avatars.githubusercontent.com/u/808811?v=3","gravatar_id":"","url":"https://api.github.com/users/aboba","html_url":"https://github.com/aboba","followers_url":"https://api.github.com/users/aboba/followers","following_url":"https://api.github.com/users/aboba/following{/other_user}","gists_url":"https://api.github.com/users/aboba/gists{/gist_id}","starred_url":"https://api.github.com/users/aboba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aboba/subscriptions","organizations_url":"https://api.github.com/users/aboba/orgs","repos_url":"https://api.github.com/users/aboba/repos","events_url":"https://api.github.com/users/aboba/events{/privacy}","received_events_url":"https://api.github.com/users/aboba/received_events","type":"User","site_admin":false},"created_at":"2016-07-21T17:00:12Z","updated_at":"2016-07-21T17:00:12Z","body":"Peter:  say that implementations must not drop the I-frame (to a degree). "}}
{"actor":{"display_login":"aboba"}}