We meticulously evaluate the proposed schemes in terms of performance and demonstrate that, even in the worst case, the latency introduced is tolerable.
![download hotspot shield free 1.56 download hotspot shield free 1.56](http://2.bp.blogspot.com/-Cv_-DgQafPI/UjSKLiZiFII/AAAAAAAAT8Y/SJueLdeE3cY/w1200-h630-p-k-no-nu/hotspot-shield-alternatives.jpg)
Both solutions detect any WebRTC API call before it happens and inform accordingly the end-user about the webpage’s intentions. To this end, and for the sake of detecting and preventing in real time the execution of STUN/TURN clandestine, privacy-invading requests, we introduce two different kinds of solutions: (a) a browser extension, and (b) an HTTP gateway, implemented in C++ as well as in Golang. Even though this problem is well-known in the related literature, no practical solution has been proposed so far. Furthermore, the application acquires more information about the local network architecture compared to what is exposed in usual HTTP interactions, where only the public IP is visible. While this is acceptable for a user that deliberately initiates a WebRTC connection, it becomes a worrisome privacy issue for those being unaware that such a connection is attempted. Nevertheless, these IP:port pieces of data can be easily captured by anyone who controls the corresponding STUN/TURN server, and even more become readily available to the JavaScript application running on the webpage. This typically involves Session Traversal Utilities for NAT (STUN)/Traversal using Relays around NAT (TURN) servers, which assist the peers with discovering each other’s private and public IP:port, and relay traffic if direct connection fails.
![download hotspot shield free 1.56 download hotspot shield free 1.56](https://images.sftcdn.net/t_optimized,f_auto/p/bd988caa-96d0-11e6-85bb-00163ed833e7/2898757378.png)
This means that users behind, say, Network Address Translation (NAT) or firewalls normally rely on the Interactive Connectivity Establishment (ICE) framework for the sake of negotiating information about the connection and media transferring. To establish peer-to-peer connections and achieve real-time web-based communication, the Web Real-Time Communication (WebRTC) framework requires address information of the communicating peers.