WebRTC + Persona

Authenticating WebRTC with Mozilla Persona, I presented this talk as an overview of work I completed during my internship at Mozilla during in the summer of 2013.

Transcript

1. PERSONA + WEBRTC = <3 RYAN SEYS
2. WHAT IS PERSONA?
3. PERSONA
4. RYAN (THAT’S ME!) LOGIN.PERSONA.ORG EXAMPLE.COM
5. RYAN (THAT’S ME!) LOGIN.PERSONA.ORG EXAMPLE.COM YO, PERSONA.ORG, CAN YOU VERIFY THIS GUY IS RYAN@RYANSEYS.COM
6. RYAN (THAT’S ME!) LOGIN.PERSONA.ORG EXAMPLE.COM LOL OK YO, PERSONA.ORG, CAN YOU VERIFY THIS GUY IS RYAN@RYANSEYS.COM
7. RYAN (THAT’S ME!) LOGIN.PERSONA.ORG EXAMPLE.COM LOL OK HEY, PROVE YOU ARE RYAN@RYANSEYS.COM WHAT IS HIS FAVOURITE COLOUR? YO, PERSONA.ORG, CAN YOU VERIFY THIS GUY IS RYAN@RYANSEYS.COM
8. RYAN (THAT’S ME!) HERE’S MY ANSWER FOR PROOF LOGIN.PERSONA.ORG EXAMPLE.COM LOL OK HEY, PROVE YOU ARE RYAN@RYANSEYS.COM WHAT IS HIS FAVOURITE COLOUR? ORANGE! YO, PERSONA.ORG, CAN YOU VERIFY THIS GUY IS RYAN@RYANSEYS.COM
9. RYAN (THAT’S ME!) HERE’S MY ANSWER FOR PROOF LOGIN.PERSONA.ORG EXAMPLE.COM *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE LOL OK HEY, PROVE YOU ARE RYAN@RYANSEYS.COM WHAT IS HIS FAVOURITE COLOUR? ORANGE! YO EXAMPLE.COM, HERE’S PROOF YO, PERSONA.ORG, CAN YOU VERIFY THIS GUY IS RYAN@RYANSEYS.COM
10. RYAN (THAT’S ME!) HERE’S MY ANSWER FOR PROOF LOGIN.PERSONA.ORG EXAMPLE.COM *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE LOL OK HEY, PROVE YOU ARE RYAN@RYANSEYS.COM WHAT IS HIS FAVOURITE COLOUR? ORANGE! YO EXAMPLE.COM, HERE’S PROOF ASSERTION = PROOF OF IDENTITY YO, PERSONA.ORG, CAN YOU VERIFY THIS GUY IS RYAN@RYANSEYS.COM
11. WHAT IS WEBRTC?
12. EXAMPLE.COM EXAMPLES: VIDYO, SKYPE, GOOGLE HANGOUTS, FACETIME TRADITIONAL VIDEO CALLS ALICE BOB
13. EXAMPLE.COM EXAMPLES: VIDYO, SKYPE, GOOGLE HANGOUTS, FACETIME TRADITIONAL VIDEO CALLS YOUR DATA ALICE BOB
14. EXAMPLE.COM EXAMPLES: VIDYO, SKYPE, GOOGLE HANGOUTS, FACETIME TRADITIONAL VIDEO CALLS YOUR DATA YOUR FRIEND’S DATA ALICE BOB
15. EXAMPLE.COM EXAMPLES: VIDYO, SKYPE, GOOGLE HANGOUTS, FACETIME TRADITIONAL VIDEO CALLS ALL THE DATA BELONG TO US! NSA YOUR DATA YOUR FRIEND’S DATA ??? :( ALICE BOB
16. The interwebz ALL YOUR VIDEO/ AUDIO DATA! (ARE BELONG TO YOU) WEBRTC IT IS DIFFERENT ALICE BOB
17. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM
18. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM CREATE_OFFER() ==> OFFER TO BOB
19. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = CREATE_OFFER() ==> OFFER TO BOB
20. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = CREATE_OFFER() ==> OFFER TO BOB
21. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB OFFER TO BOB OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = CREATE_OFFER() ==> OFFER TO BOB
22. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB OFFER TO BOB OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = CREATE_OFFER() ==> OFFER TO BOB CREATE_ANSWER(OFFER) ==> ANSWE R TO
23. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB OFFER TO BOB OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = TELLS ALICE HOW TO TALK TO BOB = ANSWER TO ALICE CREATE_OFFER() ==> OFFER TO BOB CREATE_ANSWER(OFFER) ==> ANSWE R TO
24. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB OFFER TO BOB ANSWER TO ALICE OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = TELLS ALICE HOW TO TALK TO BOB = ANSWER TO ALICE CREATE_OFFER() ==> OFFER TO BOB CREATE_ANSWER(OFFER) ==> ANSWE R TO
25. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB ANSWER TO ALICE OFFER TO BOB ANSWER TO ALICE OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = TELLS ALICE HOW TO TALK TO BOB = ANSWER TO ALICE CREATE_OFFER() ==> OFFER TO BOB CREATE_ANSWER(OFFER) ==> ANSWE R TO
26. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB ANSWER TO ALICE OFFER TO BOB ANSWER TO ALICE OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = TELLS ALICE HOW TO TALK TO BOB = ANSWER TO ALICE + BOB & ALICE TALK DIRECTLY TO EACH OTHER = CREATE_OFFER() ==> OFFER TO BOB CREATE_ANSWER(OFFER) ==> ANSWE R TO
27. MAKING A WEBRTC CALL BOB ALICE EXAMPLE.COM OFFER TO BOB ANSWER TO ALICE OFFER TO BOB ANSWER TO ALICE ALL VIDEO & AUDIO SUPER SECURE CHANNEL OFFER TO BOB TELLS BOB HOW TO TALK DIRECTLY TO ALICE = TELLS ALICE HOW TO TALK TO BOB = ANSWER TO ALICE + BOB & ALICE TALK DIRECTLY TO EACH OTHER = CREATE_OFFER() ==> OFFER TO BOB CREATE_ANSWER(OFFER) ==> ANSWE R TO
28. EVIL-EXAMPLE.COM ALICE BOB WHAT’S WRONG WITH THAT?
29. EVIL-EXAMPLE.COM ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT!
30. EVIL-EXAMPLE.COM ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER()
31. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER()
32. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER()
33. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() CREATE_OFFER()
34. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() CREATE_OFFER() EVIL OFFER TO BOB
35. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB
36. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB ANSWER TO CAROL
37. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB ANSWER TO CAROL
38. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() CREATE_ANSWER(OFFER) CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB ANSWER TO CAROL
39. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() EVIL ANSWER TO ALICE CREATE_ANSWER(OFFER) CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB ANSWER TO CAROL
40. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() EVIL ANSWER TO ALICE CREATE_ANSWER(OFFER) ALL TH E DATA ALL THE DATA CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB ANSWER TO CAROL
41. EVIL-EXAMPLE.COM OFFER TO BOB ALICE BOB WHAT’S WRONG WITH THAT? CREEPY CAROL! THAT’S WHAT! CREATE_OFFER() EVIL ANSWER TO ALICE CREATE_ANSWER(OFFER) ALL TH E DATA ALL THE DATA NO DATA HERE!! :( CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) EVIL OFFER TO BOB ANSWER TO CAROL
42. OMG WHAT CAN WE DO!?!
43. ENTER PERSONA + WEBRTC! OMG WHAT CAN WE DO!?!
44. OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET ANSWER TO ALICE IPADDR: 321:654.87.09 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AL:SO:AW:SO:ME OFFERS & ANSWERS “HERE IS HOW YOU CAN TALK DIRECTLY TO ME”
45. OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET ANSWER TO ALICE IPADDR: 321:654.87.09 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AL:SO:AW:SO:ME FINGERPRINTS ARE UNIQUE TO THE USER THAT CREATED THE OFFER OR ANSWER UNIQUE! UNIQUE! OFFERS & ANSWERS “HERE IS HOW YOU CAN TALK DIRECTLY TO ME”
46. *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE REMEMBER THIS? OFFER TO BOB ANSWER TO ALICE AND THESE BAD BOYS? + ( ) OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET ASSERTION: PROOF OF IDENTITY
47. *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE REMEMBER THIS? OFFER TO BOB ANSWER TO ALICE AND THESE BAD BOYS? + ( ) OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET + ASSERTION: PROOF OF IDENTITY
48. *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE REMEMBER THIS? OFFER TO BOB ANSWER TO ALICE AND THESE BAD BOYS? + ( ) *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET + ASSERTION: PROOF OF IDENTITY
49. *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE REMEMBER THIS? OFFER TO BOB ANSWER TO ALICE AND THESE BAD BOYS? + ( ) *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET + ASSERTION: PROOF OF IDENTITY
50. *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE REMEMBER THIS? OFFER TO BOB ANSWER TO ALICE AND THESE BAD BOYS? + ( ) *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE NOT A REAL WEBSITE! BROWSER HAS TO MAKE IT OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET + ASSERTION: PROOF OF IDENTITY
51. *ASSERTION* EMAIL: RYAN@RYANSEYS.COM ORIGIN: EXAMPLE.COM CRYPTOSTUFF: SUPERCRYPTOSAUCE REMEMBER THIS? OFFER TO BOB ANSWER TO ALICE AND THESE BAD BOYS? + ( ) *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE NOT A REAL WEBSITE! BROWSER HAS TO MAKE IT OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET *SUPER ASSERTION* TO ADD: + ASSERTION: PROOF OF IDENTITY *SUPER
52. WARNING: TECHNICAL SLIDE NEXT
53. PERSONA.ORG ALICE TECHNICAL MUMBO JUMBO
54. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB ALICE TECHNICAL MUMBO JUMBO
55. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE TECHNICAL MUMBO JUMBO
56. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX BROWSER HOSTS INVISIBLE SANDBOX TECHNICAL MUMBO JUMBO
57. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX TECHNICAL MUMBO JUMBO
58. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
59. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
60. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
61. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: GET ASSERTION WITH: AUDIENCE: RTCWEB://... FINGERPRINT: AW:ES:UM IFRAME.SEND( ) /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
62. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: GET ASSERTION WITH: AUDIENCE: RTCWEB://... FINGERPRINT: AW:ES:UM /COMMUNICATION_IFRAME IFRAME.SEND( ) /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
63. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: GET ASSERTION WITH: AUDIENCE: RTCWEB://... FINGERPRINT: AW:ES:UM /COMMUNICATION_IFRAME IFRAME.SEND( ) ARE YO U SIGN ED IN ? /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
64. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: GET ASSERTION WITH: AUDIENCE: RTCWEB://... FINGERPRINT: AW:ES:UM /COMMUNICATION_IFRAME IFRAME.SEND( ) ARE YO U SIGN ED IN ? YEP! W ITH ALICE@ EXAM PLE.CO M /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
65. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: GET ASSERTION WITH: AUDIENCE: RTCWEB://... FINGERPRINT: AW:ES:UM /COMMUNICATION_IFRAME IFRAME.SEND( ) ARE YO U SIGN ED IN ? YEP! W ITH ALICE@ EXAM PLE.CO M *SUPER ASSERTION* FINGERPRINT: AW:ES:UM /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO
66. PERSONA.ORG CREATE_OFFER() ==> OFFER TO BOB FINGERPRINT: AW:ES:UM ALICE SANDBOX /.WELL-KNOWN/IDP- PROXY/BROWSERID SERVIN’ UP BROWSER HOSTS INVISIBLE SANDBOX <IFRAME SRC={ } > IFRAME.DISPATCHEVENT( ) IFRAME.ADDEVENTLISTENER( ) SEND: RECEIVE: GET ASSERTION WITH: AUDIENCE: RTCWEB://... FINGERPRINT: AW:ES:UM /COMMUNICATION_IFRAME IFRAME.SEND( ) ARE YO U SIGN ED IN ? YEP! W ITH ALICE@ EXAM PLE.CO M *SUPER ASSERTION* FINGERPRINT: AW:ES:UM /.WELL-KNOWN/IDP-PROXY/BROWSERID addEventListener(‘rtcmessage’, function(e) { var message = e.data; if(message.type === ‘SIGN’) { postMessage(getSuperAssertion()); } else if(message.type === ‘VERIFY’) { postMessage(verifySuperAssertion()); } }, false); TECHNICAL MUMBO JUMBO *SUPER ASSERTION* FINGERPRINT: AW:ES:UM
67. WHAT?? ALICE PERSONA
68. WHAT?? ALICE PERSONA
69. WHAT?? YO, PERSONA! MAKE SUPER ASSERTION FOR: OFFER TO BOB ALICE PERSONA
70. WHAT?? LOL OK YO, PERSONA! MAKE SUPER ASSERTION FOR: OFFER TO BOB ALICE PERSONA
71. WHAT?? LOL OK YO, PERSONA! MAKE SUPER ASSERTION FOR: OFFER TO BOB ALICE HERE YA GO *SUPER ASSERTION* PERSONA
72. WHAT?? LOL OK YO, PERSONA! MAKE SUPER ASSERTION FOR: OFFER TO BOB ALICE HERE YA GO *SUPER ASSERTION* PERSONA CREEPY CAROL CAN’T DO THIS BECAUSE SHE ISN’T LOGGED IN AS ALICE
73. WHAT?? LOL OK YO, PERSONA! MAKE SUPER ASSERTION FOR: OFFER TO BOB ALICE HERE YA GO *SUPER ASSERTION* PERSONA CREEPY CAROL CAN’T DO THIS BECAUSE SHE ISN’T LOGGED IN AS ALICE WEBSITES CAN’T DO THIS BECAUSE THEY CANNOT SOURCE THE IFRAME DUE TO SAME-SITE ORIGIN POLICY
74. *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE SO WE HAVE ONE OF THESE GUYS... OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET ...AND ONE OF THESE
75. *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE SO WE HAVE ONE OF THESE GUYS... OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET NOW WHAT? ...AND ONE OF THESE
76. *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE SO WE HAVE ONE OF THESE GUYS... OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET *SUPER ASSERTION* PUT IT IN THE OFFER!! NOW WHAT? ...AND ONE OF THESE IDENTITY:
77. *SUPER ASSERTION* FINGERPRINT: AW:SO:ME:SE:CR:ET EMAIL: RYAN@RYANSEYS.COM ORIGIN: RTCWEB://PEERCONNECTION AUDIENCE: EXAMPLE.COM CRYPTOSTUFF: NEWSUPERCRYPTOSAUCE SO WE HAVE ONE OF THESE GUYS... OFFER TO BOB IPADDR: 123.456.78.90 CODEC: BLAHNOTIMPORTANT FINGERPRINT: AW:SO:ME:SE:CR:ET *SUPER ASSERTION* PUT IT IN THE OFFER!! NOW WHAT? ...AND ONE OF THESE IDENTITY: *SUPER OFFER TO BOB!* *SUPER ANSWER TO ALICE!* ...AND BOB CAN MAKE SUPER ANSWERS TOO
78. BOB ALICE EXAMPLE.COM PERSONA.ORG
79. BOB ALICE EXAMPLE.COM PERSONA.ORG CREATE_OFFER() ==> *SUPER* OFFER TO BOB
80. BOB ALICE EXAMPLE.COM PERSONA.ORG *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB
81. BOB ALICE EXAMPLE.COM PERSONA.ORG *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB
82. BOB ALICE EXAMPLE.COM PERSONA.ORG *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE
83. BOB ALICE EXAMPLE.COM PERSONA.ORG *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE
84. BOB ALICE EXAMPLE.COM PERSONA.ORG *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE
85. BOB ALICE EXAMPLE.COM PERSONA.ORG VERIFY PLZ *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE
86. BOB ALICE EXAMPLE.COM PERSONA.ORG VERIFY PLZ VERIFY PLZ *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB CREATE_OFFER() ==> *SUPER* OFFER TO BOB CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE
87. BOB ALICE EXAMPLE.COM PERSONA.ORG VERIFY PLZ VERIFY PLZ *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB VERIFIED: BOB@EXAMPLE.COM CREATE_OFFER() ==> *SUPER* OFFER TO BOB VERIFIED: BOB@EXAMPLE.COM CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE
88. BOB ALICE EXAMPLE.COM PERSONA.ORG VERIFY PLZ VERIFY PLZ *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB VERIFIED: ALICE@EXAMPLE.COM VERIFIED: BOB@EXAMPLE.COM CREATE_OFFER() ==> *SUPER* OFFER TO BOB VERIFIED: BOB@EXAMPLE.COM CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE VERIFIED: ALICE@EXAMPLE.COM
89. BOB ALICE EXAMPLE.COM PERSONA.ORG VERIFY PLZ VERIFY PLZ *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB VERIFIED: ALICE@EXAMPLE.COM VERIFIED: BOB@EXAMPLE.COM SUPER POPUP! CREATE_OFFER() ==> *SUPER* OFFER TO BOB VERIFIED: BOB@EXAMPLE.COM CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE VERIFIED: ALICE@EXAMPLE.COM
90. BOB ALICE EXAMPLE.COM ALL VIDEO & AUDIO SUPER SECURE CHANNEL PERSONA.ORG VERIFY PLZ VERIFY PLZ *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* ANSWER TO ALICE *SUPER* OFFER TO BOB *SUPER* OFFER TO BOB VERIFIED: ALICE@EXAMPLE.COM VERIFIED: BOB@EXAMPLE.COM SUPER POPUP! CREATE_OFFER() ==> *SUPER* OFFER TO BOB VERIFIED: BOB@EXAMPLE.COM CREATE_ANSWER(OFFER) ==> *SUPER* ANSWER TO ALICE VERIFIED: ALICE@EXAMPLE.COM
91. EVIL-EXAMPLE.COM ALICE BOB CREEPY CAROL PERSONA.ORG PERSONA.ORG CREATE_OFFER()
92. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB ALICE BOB CREEPY CAROL PERSONA.ORG PERSONA.ORG CREATE_OFFER()
93. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB ALICE BOB CREEPY CAROL PERSONA.ORG PERSONA.ORG CREATE_OFFER()
94. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB ALICE BOB CREATE_OFFER() EVIL OFFER TO BOB CREEPY CAROL PERSONA.ORG PERSONA.ORG CREATE_OFFER()
95. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB ALICE BOB CREATE_OFFER() EVIL OFFER TO BOB CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB PERSONA.ORG CREATE_OFFER()
96. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB ALICE BOB CREATE_OFFER() EVIL OFFER TO BOB CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB PERSONA.ORG CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER)
97. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL OFFER TO BOB CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB PERSONA.ORG CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER)
98. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL OFFER TO BOB CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB PERSONA.ORG CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER)
99. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL ANSWER TO ALICE EVIL OFFER TO BOB CREATE_ANSWER(OFFER) CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB PERSONA.ORG CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER)
100. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL ANSWER TO ALICE EVIL OFFER TO BOB CREATE_ANSWER(OFFER) CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB PERSONA.ORG VERIFY PLZ EVIL ANSWER TO ALICE CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER)
101. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL ANSWER TO ALICE EVIL OFFER TO BOB CREATE_ANSWER(OFFER) CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB VERIFICATION FAILED! PERSONA.ORG VERIFY PLZ VERIFICATION FAILED! EVIL ANSWER TO ALICE CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER)
102. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL ANSWER TO ALICE EVIL OFFER TO BOB CREATE_ANSWER(OFFER) CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB VERIFICATION FAILED! PERSONA.ORG VERIFY PLZ VERIFICATION FAILED! EVIL ANSWER TO ALICE CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) WARNING: NOT VERIFIED!!! WARNING: NOT VERIFIED!!!
103. EVIL-EXAMPLE.COM *SUPER* OFFER TO BOB *SUPER* ANSWER TO ALICE ALICE BOB CREATE_OFFER() EVIL ANSWER TO ALICE EVIL OFFER TO BOB CREATE_ANSWER(OFFER) NO DATA HERE!! :( CREEPY CAROL PERSONA.ORG VERIFY PLZ EVIL OFFER TO BOB VERIFICATION FAILED! PERSONA.ORG VERIFY PLZ VERIFICATION FAILED! EVIL ANSWER TO ALICE CREATE_OFFER() CREATE_ANSWER(EVIL_OFFER) WARNING: NOT VERIFIED!!! WARNING: NOT VERIFIED!!!
104. I NEED THIS RIGHT NOW! TIN CAN + TIN CAN AUTH ADD-ON
105. NOTES: NO HTTPS YET... FAIL! WEBRTC.PERSONATEST.ORG NOT LOGIN.PERSONA.ORG NEED TIN CAN AUTH ADD-ON INSTALLED TO GET SUPER OFFERS/ANSWERS OR BUILD PATCHES 884573 & 878941 TINCAN: HTTP://TINCAN.IM https://addons.mozilla.org/en-US/firefox/addon/tin-can-auth/ TIN-CAN-AUTH ADDON:
106. QUESTIONS? RYAN@RYANSEYS.COM EMAIL: