<?xml version="1.0" encoding="us-ascii"?>

<!-- [rfced] updated by Chris /07/26/19 -->

<!DOCTYPE rfc SYSTEM "rfc2629.dtd">
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<?rfc toc="yes" ?>
<?rfc symrefs="yes" ?>
<?rfc iprnotified="no" ?>
<?rfc strict="yes" ?>
<?rfc compact="yes" ?>
<?rfc sortrefs="yes" ?>
<?rfc colonspace="yes" ?>
<?rfc tocdepth="4"?>
<?rfc subcompact="no"?> version='1.0' encoding='utf-8'?>
<rfc submissionType="IETF" xmlns:xi="http://www.w3.org/2001/XInclude" version="3" category="std" consensus="yes" number="XXXX" ipr="trust200902"> consensus="true" docName="draft-ietf-rtcweb-ip-handling-12" indexInclude="true" ipr="trust200902" number="8828" prepTime="2021-01-14T14:32:29" scripts="Common,Latin" sortRefs="true" submissionType="IETF" symRefs="true" tocDepth="3" tocInclude="true" xml:lang="en">
  <link href="https://datatracker.ietf.org/doc/draft-ietf-rtcweb-ip-handling-12" rel="prev"/>
  <link href="https://dx.doi.org/10.17487/rfc8828" rel="alternate"/>
  <link href="urn:issn:2070-1721" rel="alternate"/>
  <front>
    <title abbrev="WebRTC IP Handling">WebRTC IP Address Handling Requirements</title>
    <seriesInfo name="RFC" value="8828" stream="IETF"/>
    <author fullname="Justin Uberti" initials="J." surname="Uberti">
      <organization>Google</organization>
      <organization showOnFrontPage="true">Google</organization>
      <address>
        <postal>
          <street>747 6th St S</street>
          <city>Kirkland</city>
          <region>WA</region>
          <code>98033</code>
          <country>USA</country>
          <country>United States of America</country>
        </postal>
        <email>justin@uberti.name</email>
      </address>
    </author>
    <author fullname="Guo-wei Shieh" initials="G." surname="Shieh">
      <organization showOnFrontPage="true"/>
      <address>
        <postal>
          <street>333 Elliott Ave W #500</street>
          <city>Seattle</city>
          <region>WA</region>
          <code>98119</code>
          <country>United States of America</country>
        </postal>
        <email>guoweis@gmail.com</email>
      </address>
    </author>
    <date year="2019" month="July" /> month="01" year="2021"/>
    <area>RAI</area>

<!-- [rfced] Please insert any keywords (beyond those that appear in
the title) for use on https://www.rfc-editor.org/search. -->

<keyword>example</keyword>

    <abstract>

      <t>This
    <abstract pn="section-abstract">
      <t indent="0" pn="section-abstract-1">This document provides information and requirements for how IP
      addresses should be handled by WebRTC Web Real-Time Communication (WebRTC) implementations.</t>
    </abstract>
    <boilerplate>
      <section anchor="status-of-memo" numbered="false" removeInRFC="false" toc="exclude" pn="section-boilerplate.1">
        <name slugifiedName="name-status-of-this-memo">Status of This Memo</name>
        <t indent="0" pn="section-boilerplate.1-1">
            This is an Internet Standards Track document.
        </t>
        <t indent="0" pn="section-boilerplate.1-2">
            This document is a product of the Internet Engineering Task Force
            (IETF).  It represents the consensus of the IETF community.  It has
            received public review and has been approved for publication by
            the Internet Engineering Steering Group (IESG).  Further
            information on Internet Standards is available in Section 2 of
            RFC 7841.
        </t>
        <t indent="0" pn="section-boilerplate.1-3">
            Information about the current status of this document, any
            errata, and how to provide feedback on it may be obtained at
            <eref target="https://www.rfc-editor.org/info/rfc8828" brackets="none"/>.
        </t>
      </section>
      <section anchor="copyright" numbered="false" removeInRFC="false" toc="exclude" pn="section-boilerplate.2">
        <name slugifiedName="name-copyright-notice">Copyright Notice</name>
        <t indent="0" pn="section-boilerplate.2-1">
            Copyright (c) 2021 IETF Trust and the persons identified as the
            document authors. All rights reserved.
        </t>
        <t indent="0" pn="section-boilerplate.2-2">
            This document is subject to BCP 78 and the IETF Trust's Legal
            Provisions Relating to IETF Documents
            (<eref target="https://trustee.ietf.org/license-info" brackets="none"/>) in effect on the date of
            publication of this document. Please review these documents
            carefully, as they describe your rights and restrictions with
            respect to this document. Code Components extracted from this
            document must include Simplified BSD License text as described in
            Section 4.e of the Trust Legal Provisions and are provided without
            warranty as described in the Simplified BSD License.
        </t>
      </section>
    </boilerplate>
    <toc>
      <section anchor="toc" numbered="false" removeInRFC="false" toc="exclude" pn="section-toc.1">
        <name slugifiedName="name-table-of-contents">Table of Contents</name>
        <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1">
          <li pn="section-toc.1-1.1">
            <t indent="0" keepWithNext="true" pn="section-toc.1-1.1.1"><xref derivedContent="1" format="counter" sectionFormat="of" target="section-1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-introduction">Introduction</xref></t>
          </li>
          <li pn="section-toc.1-1.2">
            <t indent="0" keepWithNext="true" pn="section-toc.1-1.2.1"><xref derivedContent="2" format="counter" sectionFormat="of" target="section-2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-terminology">Terminology</xref></t>
          </li>
          <li pn="section-toc.1-1.3">
            <t indent="0" keepWithNext="true" pn="section-toc.1-1.3.1"><xref derivedContent="3" format="counter" sectionFormat="of" target="section-3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-problem-statement">Problem Statement</xref></t>
          </li>
          <li pn="section-toc.1-1.4">
            <t indent="0" pn="section-toc.1-1.4.1"><xref derivedContent="4" format="counter" sectionFormat="of" target="section-4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-goals">Goals</xref></t>
          </li>
          <li pn="section-toc.1-1.5">
            <t indent="0" pn="section-toc.1-1.5.1"><xref derivedContent="5" format="counter" sectionFormat="of" target="section-5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-detailed-design">Detailed Design</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.5.2">
              <li pn="section-toc.1-1.5.2.1">
                <t indent="0" pn="section-toc.1-1.5.2.1.1"><xref derivedContent="5.1" format="counter" sectionFormat="of" target="section-5.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-principles">Principles</xref></t>
              </li>
              <li pn="section-toc.1-1.5.2.2">
                <t indent="0" pn="section-toc.1-1.5.2.2.1"><xref derivedContent="5.2" format="counter" sectionFormat="of" target="section-5.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-modes-and-recommendations">Modes and Recommendations</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.6">
            <t indent="0" pn="section-toc.1-1.6.1"><xref derivedContent="6" format="counter" sectionFormat="of" target="section-6"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-implementation-guidance">Implementation Guidance</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.6.2">
              <li pn="section-toc.1-1.6.2.1">
                <t indent="0" pn="section-toc.1-1.6.2.1.1"><xref derivedContent="6.1" format="counter" sectionFormat="of" target="section-6.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-ensuring-normal-routing">Ensuring Normal Routing</xref></t>
              </li>
              <li pn="section-toc.1-1.6.2.2">
                <t indent="0" pn="section-toc.1-1.6.2.2.1"><xref derivedContent="6.2" format="counter" sectionFormat="of" target="section-6.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-determining-associated-loca">Determining Associated Local Addresses</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.7">
            <t indent="0" pn="section-toc.1-1.7.1"><xref derivedContent="7" format="counter" sectionFormat="of" target="section-7"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-application-guidance">Application Guidance</xref></t>
          </li>
          <li pn="section-toc.1-1.8">
            <t indent="0" pn="section-toc.1-1.8.1"><xref derivedContent="8" format="counter" sectionFormat="of" target="section-8"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-security-considerations">Security Considerations</xref></t>
          </li>
          <li pn="section-toc.1-1.9">
            <t indent="0" pn="section-toc.1-1.9.1"><xref derivedContent="9" format="counter" sectionFormat="of" target="section-9"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-iana-considerations">IANA Considerations</xref></t>
          </li>
          <li pn="section-toc.1-1.10">
            <t indent="0" pn="section-toc.1-1.10.1"><xref derivedContent="10" format="counter" sectionFormat="of" target="section-10"/>. <xref derivedContent="" format="title" sectionFormat="of" target="name-references">References</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.10.2">
              <li pn="section-toc.1-1.10.2.1">
                <t indent="0" pn="section-toc.1-1.10.2.1.1"><xref derivedContent="10.1" format="counter" sectionFormat="of" target="section-10.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-normative-references">Normative References</xref></t>
              </li>
              <li pn="section-toc.1-1.10.2.2">
                <t indent="0" pn="section-toc.1-1.10.2.2.1"><xref derivedContent="10.2" format="counter" sectionFormat="of" target="section-10.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-informative-references">Informative References</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.11">
            <t indent="0" pn="section-toc.1-1.11.1"><xref derivedContent="" format="none" sectionFormat="of" target="section-appendix.a"/><xref derivedContent="" format="title" sectionFormat="of" target="name-acknowledgements">Acknowledgements</xref></t>
          </li>
          <li pn="section-toc.1-1.12">
            <t indent="0" pn="section-toc.1-1.12.1"><xref derivedContent="" format="none" sectionFormat="of" target="section-appendix.b"/><xref derivedContent="" format="title" sectionFormat="of" target="name-authors-addresses">Authors' Addresses</xref></t>
          </li>
        </ul>
      </section>
    </toc>
  </front>
  <middle>
    <section title="Introduction">

      <t>One numbered="true" toc="include" removeInRFC="false" pn="section-1">
      <name slugifiedName="name-introduction">Introduction</name>
      <t indent="0" pn="section-1-1">One of WebRTC's key features is its support of peer-to-peer
      connections. However, when establishing such a connection, which involves
       connection attempts from various IP addresses, WebRTC may allow a web
       application to learn additional information about the user compared to an
       application that only uses the Hypertext Transfer Protocol (HTTP)
       <xref target="RFC7230" />. format="default" sectionFormat="of" derivedContent="RFC7230"/>. This may be problematic in
       certain cases. This
       document summarizes the concerns, concerns and makes recommendations on how WebRTC
       implementations should best handle the tradeoff trade-off between privacy and media
       performance.</t>
    </section>
    <section title="Terminology">

      <t>The numbered="true" toc="include" removeInRFC="false" pn="section-2">
      <name slugifiedName="name-terminology">Terminology</name>
      <t indent="0" pn="section-2-1">
    The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
      "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>",
    "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL NOT</bcp14>",
    "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>",
    "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
    "<bcp14>MAY</bcp14>", and
      "OPTIONAL" "<bcp14>OPTIONAL</bcp14>" in this document are to be
    interpreted as described in BCP 14 <xref target="RFC2119"></xref><xref target="RFC8174"></xref> target="RFC2119" format="default" sectionFormat="of" derivedContent="RFC2119"/> <xref target="RFC8174" format="default" sectionFormat="of" derivedContent="RFC8174"/> when, and only when, they appear in all capitals, as
    shown here.</t> here.
      </t>
    </section>
    <section title="Problem Statement">

      <t>In numbered="true" toc="include" removeInRFC="false" pn="section-3">
      <name slugifiedName="name-problem-statement">Problem Statement</name>
      <t indent="0" pn="section-3-1">In order to establish a peer-to-peer connection, WebRTC
      implementations use Interactive Connectivity Establishment (ICE)
      <xref target="RFC8445" />, which format="default" sectionFormat="of" derivedContent="RFC8445"/>. ICE attempts to discover multiple IP
      addresses using techniques such as Session Traversal Utilities for NAT
      (STUN)
      <xref target="RFC5389" /> format="default" sectionFormat="of" derivedContent="RFC5389"/> and Traversal Using Relays
      around NAT (TURN)
      <xref target="RFC5766" />, format="default" sectionFormat="of" derivedContent="RFC5766"/> and then checks the
      connectivity of each
      local-address-remote-address pair in order to select the best one. The
      addresses that are collected usually consist of an endpoint's private
      physical or virtual addresses and its public Internet addresses.</t>

      <t>These
      <t indent="0" pn="section-3-2">These addresses are provided to the web application so that
      they can be communicated to the remote endpoint for its checks. This
      allows the application to learn more about the local network
      configuration than it would from a typical HTTP scenario, in which the
      web server would only see a single public Internet address, i.e., the
      address from which the HTTP request was sent.</t>

      <t>The
      <t indent="0" pn="section-3-3">The additional information revealed falls into three categories:
      <list style="numbers">

        <t>If
      </t>
      <ol spacing="normal" type="1" indent="adaptive" start="1" pn="section-3-4">
        <li pn="section-3-4.1" derivedCounter="1.">If the client is multihomed, additional public IP addresses for the
        client can be learned. In particular, if the client tries to hide its
        physical location through a Virtual Private Network (VPN), and the VPN
        and local OS support routing over multiple interfaces (a "split-tunnel"
        VPN), WebRTC can discover not only the public address for the VPN, but
        also the ISP public address over which the VPN is running.</t>

        <t>If running.</li>
        <li pn="section-3-4.2" derivedCounter="2.">If the client is behind a Network Address Translator (NAT), the
        client's private IP addresses, often
        <xref target="RFC1918" /> format="default" sectionFormat="of" derivedContent="RFC1918"/> addresses, can be learned.</t>

        <t>If learned.</li>
        <li pn="section-3-4.3" derivedCounter="3.">If the client is behind a proxy (a client-configured "classical
        application proxy", as defined in
        <xref target="RFC1919" />, Section 3), format="default" sectionFormat="comma" section="3" derivedLink="https://rfc-editor.org/rfc/rfc1919#section-3" derivedContent="RFC1919"/>), but direct access to the
        Internet is permitted, WebRTC's STUN checks will bypass the proxy and
        reveal the public IP address of the client. This concern also applies
        to the "enterprise TURN server" scenario described in
        <xref target="RFC7478" />, Section 2.3.5.1, format="default" sectionFormat="comma" section="2.3.5.1" derivedLink="https://rfc-editor.org/rfc/rfc7478#section-2.3.5.1" derivedContent="RFC7478"/> if, as above, direct
        Internet access is permitted. However, when the term "proxy" is used in
        this document, it is always in reference to an
        <xref target="RFC1919" /> format="default" sectionFormat="of" derivedContent="RFC1919"/> proxy server.</t>
      </list></t>

      <t>Of server.</li>
      </ol>
      <t indent="0" pn="section-3-5">Of these three concerns, the first is the most significant, because for some
      users, the purpose of using a VPN is for anonymity. However, different
      VPN users will have different needs, and some VPN users (e.g., corporate
      VPN users) may in fact prefer WebRTC to send media traffic directly, directly --
      i.e., not through the VPN.</t>

      <t>The
      <t indent="0" pn="section-3-6">The second concern is less significant but valid nonetheless. The core
      issue is that web applications can learn about addresses that are not
      exposed to the internet; typically Internet; typically, these address are IPv4, but they can
      also be IPv6, as in the case of NAT64 <xref target="RFC6146" />. format="default" sectionFormat="of" derivedContent="RFC6146"/>.
      While disclosure of the <xref target="RFC4941" /> format="default" sectionFormat="of" derivedContent="RFC4941"/> IPv6 addresses
      recommended by <xref target="WEBRTC-TRANSPORTS" /> target="RFC8835" format="default" sectionFormat="of" derivedContent="RFC8835"/> is fairly
      benign due to their intentionally short lifetimes, IPv4 addresses present
      some challenges. Although private IPv4 addresses often contain minimal
      entropy (e.g., 192.168.0.2, a fairly common address), in the worst case,
      they can contain 24 bits of entropy with an indefinite lifetime. As such,
      they can be a fairly significant fingerprinting surface. In addition,
      intranet web sites can be attacked more easily when their IPv4 address
      range is externally known.</t>

      <t>Private
      <t indent="0" pn="section-3-7">Private IP addresses can also act as an identifier that allows
      web applications running in isolated browsing contexts (e.g., normal and
      private browsing) to learn that they are running on the same device. This
      could allow the application sessions to be correlated, defeating some of
      the privacy protections provided by isolation. It should be noted that
      private addresses are just one potential mechanism for this correlation
      and this is an area for further study.</t>

      <t>The
      <t indent="0" pn="section-3-8">The third concern is the least common, as proxy administrators can already
      control this behavior through organizational firewall policy, and
      generally, forcing WebRTC traffic through a proxy server will have
      negative effects on both the proxy and on media quality.</t>

      <t>Note
      <t indent="0" pn="section-3-9">Note also that these concerns predate WebRTC; Adobe Flash Player has
      provided similar functionality since the introduction of Real-Time
      Media Flow Protocol (RTMFP) support
      <xref target="RFC7016" /> format="default" sectionFormat="of" derivedContent="RFC7016"/> in 2008.</t>
    </section>
    <section title="Goals">

      <t>WebRTC's numbered="true" toc="include" removeInRFC="false" pn="section-4">
      <name slugifiedName="name-goals">Goals</name>
      <t indent="0" pn="section-4-1">WebRTC's support of secure peer-to-peer connections facilitates
      deployment of decentralized systems, which can have privacy benefits. As
      a result, blunt solutions that disable WebRTC or make it significantly
      harder to use are undesirable. This document takes a more nuanced
      approach, with the following goals:
      <list style="symbols">

        <t>Provide
      </t>
      <ul spacing="normal" bare="false" empty="false" indent="3" pn="section-4-2">
        <li pn="section-4-2.1">Provide a framework for understanding the problem so that controls
        might be provided to make different tradeoffs trade-offs regarding performance and
        privacy concerns with WebRTC.</t>

        <t>Using WebRTC.</li>
        <li pn="section-4-2.2">Using that framework, define settings that enable peer-to-peer
        communications, each with a different balance between performance and
        privacy.</t>

        <t>Finally,
        privacy.</li>
        <li pn="section-4-2.3">Finally, provide recommendations for default settings that provide
        reasonable performance without also exposing addressing information in
        a way that might violate user expectations.</t>
      </list></t> expectations.</li>
      </ul>
    </section>
    <section title="Detailed Design"> numbered="true" toc="include" removeInRFC="false" pn="section-5">
      <name slugifiedName="name-detailed-design">Detailed Design</name>
      <section title="Principles">

        <t>The numbered="true" toc="include" removeInRFC="false" pn="section-5.1">
        <name slugifiedName="name-principles">Principles</name>
        <t indent="0" pn="section-5.1-1">The key principles for our framework are stated below:
        <list style="numbers">

          <t>By
        </t>
        <ol spacing="normal" type="1" indent="adaptive" start="1" pn="section-5.1-2">
          <li pn="section-5.1-2.1" derivedCounter="1.">By default, WebRTC traffic should follow typical IP routing, i.e., routing (i.e.,
          WebRTC should use the same interface used for HTTP traffic, traffic) and only
          the system's 'typical' public addresses (or those of an enterprise
          TURN server, if present) should be visible to the application.
          However, in the interest of optimal media quality, it should be
          possible to enable WebRTC to make use of all network interfaces to
          determine the ideal route.</t>

          <t>By route.</li>
          <li pn="section-5.1-2.2" derivedCounter="2.">By default, WebRTC should be able to negotiate direct peer-to-peer
          connections between endpoints (i.e., without traversing a NAT or
          relay server) when such connections are possible. This ensures that
          applications that need true peer-to-peer routing for bandwidth or
          latency reasons can operate successfully.</t>

          <t>It successfully.</li>
          <li pn="section-5.1-2.3" derivedCounter="3.">It should be possible to configure WebRTC to not disclose private
          local IP addresses, to avoid the issues associated with web
          applications learning such addresses. This document does not require
          this to be the default state, as there is no currently defined
          mechanism that can satisfy this requirement as well as the
          aforementioned requirement to allow direct peer-to-peer
          connections.</t>

          <t>By
          connections.</li>
          <li pn="section-5.1-2.4" derivedCounter="4.">By default, WebRTC traffic should not be sent through proxy
          servers, due to the media quality media-quality problems associated with sending
          WebRTC traffic over TCP, which is almost always used when
          communicating with such proxies, as well as proxy performance issues
          that may result from proxying WebRTC's long-lived, high-bandwidth
          connections. However, it should be possible to force WebRTC to send
          its traffic through a configured proxy if desired.</t>
        </list></t> desired.</li>
        </ol>
      </section>
      <section title="Modes and Recommendations">

        <t>Based numbered="true" toc="include" removeInRFC="false" pn="section-5.2">
        <name slugifiedName="name-modes-and-recommendations">Modes and Recommendations</name>
        <t indent="0" pn="section-5.2-1">Based on these ideas, we define four specific modes of WebRTC
        behavior, reflecting different media quality/privacy tradeoffs:
        <list style="format Mode %d:">

          <t>Enumerate trade-offs:
        </t>
        <dl newline="true" indent="3" spacing="normal" pn="section-5.2-2">
          <dt pn="section-5.2-2.1">Mode 1 - Enumerate all addresses: WebRTC MUST addresses:</dt>
          <dd pn="section-5.2-2.2">WebRTC <bcp14>MUST</bcp14> use all network interfaces to
          attempt communication with STUN servers, TURN servers, or peers. This
          will converge on the best media path, path and is ideal when media
          performance is the highest priority, but it discloses the most
          information.</t>

          <t>Default
          information.</dd>
          <dt pn="section-5.2-2.3">Mode 2 - Default route + associated local addresses: WebRTC MUST addresses:</dt>
          <dd pn="section-5.2-2.4">WebRTC
	    <bcp14>MUST</bcp14> follow the
          kernel routing table rules, which will typically cause media packets
          to take the same route as the application's HTTP traffic. If an
          enterprise TURN server is present, the preferred route MUST <bcp14>MUST</bcp14> be
          through this TURN server. Once an interface has been chosen, the
          private IPv4 and IPv6 addresses associated with this interface MUST <bcp14>MUST</bcp14>
          be discovered and provided to the application as host candidates.
          This ensures that direct connections can still be established in this
          mode.</t>

          <t>Default
          mode.</dd>
          <dt pn="section-5.2-2.5">Mode 3 - Default route only: This </dt>
          <dd pn="section-5.2-2.6">This is the the same as Mode 2, except that
          the associated private addresses MUST NOT <bcp14>MUST NOT</bcp14> be provided; the only IP
          addresses gathered are those discovered via mechanisms like STUN and
          TURN (on the default route). This may cause traffic to hairpin
          through a NAT, fall back to an application TURN server, or fail
          altogether, with resulting quality implications.</t>

          <t>Force proxy: This implications.</dd>
          <dt pn="section-5.2-2.7">Mode 4 - Force proxy:</dt>
          <dd pn="section-5.2-2.8">This is the same as Mode 3, but when the
          application's HTTP traffic is sent through a proxy, WebRTC media
          traffic MUST <bcp14>MUST</bcp14> also be proxied. If the proxy does not support UDP (as
          is the case for all HTTP and most SOCKS
          <xref target="RFC1928" /> format="default" sectionFormat="of" derivedContent="RFC1928"/> proxies), or the WebRTC implementation does
          not support UDP proxying, the use of UDP will be disabled, and TCP
          will be used to send and receive media through the proxy. Use of TCP
          will result in reduced media quality, in addition to any performance
          considerations associated with sending all WebRTC media through the
          proxy server.</t>
        </list></t>

        <t>Mode server.</dd>
        </dl>
        <t indent="0" pn="section-5.2-3">Mode 1 MUST NOT <bcp14>MUST NOT</bcp14> be used unless user consent has been provided. The
        details of this consent are left to the implementation; one potential
        mechanism is to tie this consent to getUserMedia (device permissions)
        consent, described in <xref target="WEBRTC-SECURITY" />,
        Section 6.2. target="RFC8827" format="default" sectionFormat="comma" section="6.2" derivedLink="https://rfc-editor.org/rfc/rfc8827#section-6.2" derivedContent="RFC8827"/>.
        Alternatively, implementations can provide a specific
        mechanism to obtain user consent.</t>

        <t>In
        <t indent="0" pn="section-5.2-4">In cases where user consent has not been obtained, Mode 2 SHOULD <bcp14>SHOULD</bcp14> be
        used.</t>

        <t>These
        <t indent="0" pn="section-5.2-5">These defaults provide a reasonable tradeoff trade-off that permits trusted
        WebRTC applications to achieve optimal network performance, performance but gives
        applications without consent (e.g., 1-way streaming or data channel data-channel
        applications) only the minimum information needed to achieve direct
        connections, as defined in Mode 2. However, implementations MAY <bcp14>MAY</bcp14> choose
        stricter modes if desired, e.g., if a user indicates they want all
        WebRTC traffic to follow the default route.</t>

        <t>Future
        <t indent="0" pn="section-5.2-6">Future documents may define additional modes and/or update the
        recommended default modes.</t>

        <t>Note
        <t indent="0" pn="section-5.2-7">Note that the suggested defaults can still be used even for
        organizations that want all external WebRTC traffic to traverse a proxy
        or enterprise TURN server, simply by setting an organizational firewall
        policy that allows WebRTC traffic to only leave through the proxy or
        TURN server. This provides a way to ensure the proxy or TURN server is
        used for any external traffic, traffic but still allows direct connections
        (and, in the proxy case, avoids the performance issues associated with
        forcing media through said proxy) for intra-organization traffic.</t>
      </section>
    </section>
    <section title="Implementation Guidance">

      <t>This numbered="true" toc="include" removeInRFC="false" pn="section-6">
      <name slugifiedName="name-implementation-guidance">Implementation Guidance</name>
      <t indent="0" pn="section-6-1">This section provides guidance to WebRTC implementations on how to
      implement the policies described above.</t>
      <section title="Ensuring numbered="true" toc="include" removeInRFC="false" pn="section-6.1">
        <name slugifiedName="name-ensuring-normal-routing">Ensuring Normal Routing">

        <t>When Routing</name>
        <t indent="0" pn="section-6.1-1">When trying to follow typical IP routing, as required by Modes 2
        and 3, the simplest approach is
        to bind() the sockets used for peer-to-peer connections to the wildcard
        addresses (0.0.0.0 for IPv4, :: for IPv6), which allows the OS to route
        WebRTC traffic the same way as it would HTTP traffic. STUN and TURN
        will work as usual, and host candidates can still be determined as
        mentioned below.</t>
      </section>
      <section title="Determining numbered="true" toc="include" removeInRFC="false" pn="section-6.2">
        <name slugifiedName="name-determining-associated-loca">Determining Associated Local Addresses">

        <t>When Addresses</name>
        <t indent="0" pn="section-6.2-1">When binding to a wildcard address, some extra work is needed to
        determine the associated local address required by Mode 2, which we
        define as the source
        address that would be used for any packets sent to the web application
        host (assuming that UDP and TCP get the same routing treatment). Use of
        the web application web-application host as a destination ensures the right source
        address is selected, regardless of where the application resides (e.g.,
        on an intranet).</t>

        <t>First,
        <t indent="0" pn="section-6.2-2">First, the appropriate remote IPv4/IPv6 address is obtained by
        resolving the host component of the web application URI
        <xref target="RFC3986" />. format="default" sectionFormat="of" derivedContent="RFC3986"/>. If the client is behind a proxy and cannot
        resolve these IPs via DNS, the address of the proxy can be used
        instead. Or, if the web application was loaded from a file:// URI
        <xref target="RFC8089" />, format="default" sectionFormat="of" derivedContent="RFC8089"/> rather than over the network, the
        implementation can fall back to a well-known DNS name or IP
        address.</t>

        <t>Once
        <t indent="0" pn="section-6.2-3">Once a suitable remote IP has been determined, the implementation
        can create a UDP socket, bind() it to the appropriate wildcard address,
        and then connect() to the remote IP. Generally, this results in
        the socket being assigned a local address based on the kernel routing
        table, without sending any packets over the network.</t>

        <t>Finally,
        <t indent="0" pn="section-6.2-4">Finally, the socket can be queried using getsockname() or the
        equivalent to determine the appropriate local address.</t>
      </section>
    </section>
    <section title="Application Guidance">

      <t>The numbered="true" toc="include" removeInRFC="false" pn="section-7">
      <name slugifiedName="name-application-guidance">Application Guidance</name>
      <t indent="0" pn="section-7-1">The recommendations mentioned in this document may cause certain
      WebRTC applications to malfunction. In order to be robust in all
      scenarios, the following guidelines are provided for applications:
      <list style="symbols">

        <t>Applications SHOULD
      </t>
      <ul spacing="normal" bare="false" empty="false" indent="3" pn="section-7-2">
        <li pn="section-7-2.1">Applications <bcp14>SHOULD</bcp14> deploy a TURN server with support for both UDP
        and TCP connections to the server. This ensures that connectivity can
        still be established, even when Mode 3 or 4 are is in use, assuming the
        TURN server can be reached.</t>

        <t>Applications SHOULD reached.</li>
        <li pn="section-7-2.2">Applications <bcp14>SHOULD</bcp14> detect when they don't have access to the full
        set of ICE candidates by checking for the presence of host candidates.
        If no host candidates are present, Mode 3 or 4 above is in use; this
        knowledge can be useful for diagnostic purposes.</t>
      </list></t> purposes.</li>
      </ul>
    </section>
    <section title="Security Considerations">

      <t>This numbered="true" toc="include" removeInRFC="false" pn="section-8">
      <name slugifiedName="name-security-considerations">Security Considerations</name>
      <t indent="0" pn="section-8-1">This document describes several potential privacy and security concerns
      associated with WebRTC peer-to-peer connections, connections and provides mechanisms
      and recommendations for WebRTC implementations to address these concerns.
      </t>
    </section>
    <section title="IANA Considerations">

      <t>This numbered="true" toc="include" removeInRFC="false" pn="section-9">
      <name slugifiedName="name-iana-considerations">IANA Considerations</name>
      <t indent="0" pn="section-9-1">This document requires has no actions from IANA.</t>
    </section>
    <section title="Acknowledgements">

      <t>Several people provided input into this document, including Bernard
      Aboba, Harald Alvestrand, Youenn Fablet, Ted Hardie, Matthew Kaufmann,
      Eric Rescorla, Adam Roach, and Martin Thomson.</t> IANA actions.</t>
    </section>
  </middle>
  <back>
    <references title="Normative References">
      <?rfc include='reference.RFC.2119.xml'?>
      <?rfc include='reference.RFC.3986.xml'?>
      <?rfc include='reference.RFC.5389.xml'?>
      <?rfc include='reference.RFC.5766.xml'?>
      <?rfc include='reference.RFC.8089.xml'?>
      <?rfc include='reference.RFC.8174.xml'?>
      <?rfc include='reference.RFC.8445.xml'?>
      </references> pn="section-10">
      <name slugifiedName="name-references">References</name>
      <references title="Informative References">
      <?rfc include='reference.RFC.1918.xml'?>
      <?rfc include='reference.RFC.1919.xml'?>
      <?rfc include='reference.RFC.1928.xml'?>
      <?rfc include='reference.RFC.4941.xml'?>
      <?rfc include='reference.RFC.6146.xml'?>
      <?rfc include='reference.RFC.7016.xml'?>
      <?rfc include='reference.RFC.7230.xml'?>
      <?rfc include='reference.RFC.7478.xml'?>

<!-- <?rfc include='reference.I-D.ietf-rtcweb-security-arch'?>; In MISSREF as of 7/26/19 --> pn="section-10.1">
        <name slugifiedName="name-normative-references">Normative References</name>
        <reference anchor='WEBRTC-SECURITY'> anchor="RFC2119" target="https://www.rfc-editor.org/info/rfc2119" quoteTitle="true" derivedAnchor="RFC2119">
          <front>
<title>WebRTC Security Architecture</title>
            <title>Key words for use in RFCs to Indicate Requirement Levels</title>
            <author initials='E' surname='Rescorla' fullname='Eric Rescorla'> initials="S." surname="Bradner" fullname="S. Bradner">
              <organization /> showOnFrontPage="true"/>
            </author>
            <date month='July' day='22' year='2019' />

<abstract><t>This year="1997" month="March"/>
            <abstract>
              <t indent="0">In many standards track documents several words are used to signify the requirements in the specification.  These words are often capitalized. This document defines the security architecture for WebRTC, a protocol suite intended for use with real-time applications that can these words as they should be deployed interpreted in browsers - "real time communication on IETF documents.  This document specifies an Internet Best Current Practices for the Web".</t></abstract> Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name='Work in Progress,' value='draft-ietf-rtcweb-security-arch-20' /> name="BCP" value="14"/>
          <seriesInfo name="RFC" value="2119"/>
          <seriesInfo name="DOI" value="10.17487/RFC2119"/>
        </reference>

<!-- <?rfc include='reference.I-D.ietf-rtcweb-transports'?>; In MISSREF as of 7/26/19 -->
        <reference anchor='WEBRTC-TRANSPORTS'> anchor="RFC3986" target="https://www.rfc-editor.org/info/rfc3986" quoteTitle="true" derivedAnchor="RFC3986">
          <front>
<title>Transports for WebRTC</title>
            <title>Uniform Resource Identifier (URI): Generic Syntax</title>
            <author initials="T." surname="Berners-Lee" fullname="T. Berners-Lee">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials='H' surname='Alvestrand' fullname='Harald Alvestrand'> initials="R." surname="Fielding" fullname="R. Fielding">
              <organization /> showOnFrontPage="true"/>
            </author>
            <author initials="L." surname="Masinter" fullname="L. Masinter">
              <organization showOnFrontPage="true"/>
            </author>
            <date month='October' day='26' year='2016' />

<abstract><t>This document describes the data transport protocols used by WebRTC, including year="2005" month="January"/>
            <abstract>
              <t indent="0">A Uniform Resource Identifier (URI) is a compact sequence of characters that identifies an abstract or physical resource.  This specification defines the protocols used generic URI syntax and a process for interaction resolving URI references that might be in relative form, along with intermediate boxes such as firewalls, relays guidelines and NAT boxes.</t></abstract>

</front>

<seriesInfo name='Work in Progress,' value='draft-ietf-rtcweb-transports-17' />
</reference>

      </references>
    <section title="Change log">
      <t>Changes in draft -12:
      <list style="symbols">

        <t>Editorial updates from IETF LC review.</t>
      </list></t>

      <t>Changes in draft -11:
      <list style="symbols">

        <t>Editorial updates from AD review.</t>
      </list></t>

      <t>Changes in draft -10:
      <list style="symbols">

        <t>Incorporate feedback from IETF 102 security considerations for the use of URIs on the problem space.</t>

        <t>Note Internet.  The URI syntax defines a grammar that future versions is a superset of all valid URIs, allowing an implementation to parse the document may common components of a URI reference without knowing the scheme-specific requirements of every possible identifier.  This specification does not define new modes.</t>
      </list></t>

      <t>Changes a generative grammar for URIs; that task is performed by the individual specifications of each URI scheme.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="STD" value="66"/>
          <seriesInfo name="RFC" value="3986"/>
          <seriesInfo name="DOI" value="10.17487/RFC3986"/>
        </reference>
        <reference anchor="RFC5389" target="https://www.rfc-editor.org/info/rfc5389" quoteTitle="true" derivedAnchor="RFC5389">
          <front>
            <title>Session Traversal Utilities for NAT (STUN)</title>
            <author initials="J." surname="Rosenberg" fullname="J. Rosenberg">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="R." surname="Mahy" fullname="R. Mahy">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="P." surname="Matthews" fullname="P. Matthews">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="D." surname="Wing" fullname="D. Wing">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2008" month="October"/>
            <abstract>
              <t indent="0">Session Traversal Utilities for NAT (STUN) is a protocol that serves as a tool for other protocols in draft -09:
      <list style="symbols">

        <t>Fixed confusing text regarding enterprise TURN servers.</t>
      </list></t>

      <t>Changes in draft -08:
      <list style="symbols">

        <t>Discuss how enterprise TURN servers should dealing with Network Address Translator (NAT) traversal.  It can be handled.</t>
      </list></t>

      <t>Changes in draft -07:
      <list style="symbols">

        <t>Clarify consent guidance.</t>
      </list></t>

      <t>Changes in draft -06:
      <list style="symbols">

        <t>Clarify recommendations.</t>

        <t>Split implementation guidance into used by an endpoint to determine the IP address and port allocated to it by a NAT.  It can also be used to check connectivity between two sections.</t>
      </list></t>

      <t>Changes in draft -05:
      <list style="symbols">

        <t>Separated framework definition from implementation techniques.</t>

        <t>Removed RETURN references.</t>

        <t>Use origin when determining local IPs, rather than endpoints, and as a well-known
        IP.</t>
      </list></t>

      <t>Changes in draft -04:
      <list style="symbols">

        <t>Rewording keep-alive protocol to maintain NAT bindings.  STUN works with many existing NATs, and cleanup does not require any special behavior from them.</t>
              <t indent="0">STUN is not a NAT traversal solution by itself.  Rather, it is a tool to be used in abstract, intro, and problem statement.</t>

        <t>Added 2119 boilerplate.</t>

        <t>Fixed weird reference spacing.</t>

        <t>Expanded acronyms on first use.</t>

        <t>Removed 8.8.8.8 mention.</t>

        <t>Removed mention the context of future browser considerations.</t>
      </list></t>

      <t>Changes in draft -03:
      <list style="symbols">

        <t>Clarified when to use a NAT traversal solution.  This is an important change from the previous version of this specification (RFC 3489), which modes.</t>

        <t>Added 2119 qualifiers to make normative statements.</t>

        <t>Defined 'proxy'.</t>

        <t>Mentioned split tunnels presented STUN as a complete solution.</t>
              <t indent="0">This document obsoletes RFC 3489.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5389"/>
          <seriesInfo name="DOI" value="10.17487/RFC5389"/>
        </reference>
        <reference anchor="RFC5766" target="https://www.rfc-editor.org/info/rfc5766" quoteTitle="true" derivedAnchor="RFC5766">
          <front>
            <title>Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN)</title>
            <author initials="R." surname="Mahy" fullname="R. Mahy">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="P." surname="Matthews" fullname="P. Matthews">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="J." surname="Rosenberg" fullname="J. Rosenberg">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2010" month="April"/>
            <abstract>
              <t indent="0">If a host is located behind a NAT, then in certain situations it can be impossible for that host to communicate directly with other hosts (peers).  In these situations, it is necessary for the host to use the services of an intermediate node that acts as a communication relay.  This specification defines a protocol, called TURN (Traversal Using Relays around NAT), that allows the host to control the operation of the relay and to exchange packets with its peers using the relay.  TURN differs from some other relay control protocols in that it allows a client to communicate with multiple peers using a single relay address.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5766"/>
          <seriesInfo name="DOI" value="10.17487/RFC5766"/>
        </reference>
        <reference anchor="RFC8089" target="https://www.rfc-editor.org/info/rfc8089" quoteTitle="true" derivedAnchor="RFC8089">
          <front>
            <title>The "file" URI Scheme</title>
            <author initials="M." surname="Kerwin" fullname="M. Kerwin">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2017" month="February"/>
            <abstract>
              <t indent="0">This document provides a more complete specification of the "file" Uniform Resource Identifier (URI) scheme and replaces the very brief definition in Section 3.10 of RFC 1738.</t>
              <t indent="0">It defines a common syntax that is intended to interoperate across the broad spectrum of existing usages.  At the same time, it notes some other current practices around the use of file URIs.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8089"/>
          <seriesInfo name="DOI" value="10.17487/RFC8089"/>
        </reference>
        <reference anchor="RFC8174" target="https://www.rfc-editor.org/info/rfc8174" quoteTitle="true" derivedAnchor="RFC8174">
          <front>
            <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
            <author initials="B." surname="Leiba" fullname="B. Leiba">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2017" month="May"/>
            <abstract>
              <t indent="0">RFC 2119 specifies common key words that may be used in protocol  specifications.  This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the  defined special meanings.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="8174"/>
          <seriesInfo name="DOI" value="10.17487/RFC8174"/>
        </reference>
        <reference anchor="RFC8445" target="https://www.rfc-editor.org/info/rfc8445" quoteTitle="true" derivedAnchor="RFC8445">
          <front>
            <title>Interactive Connectivity Establishment (ICE): A Protocol for Network Address Translator (NAT) Traversal</title>
            <author initials="A." surname="Keranen" fullname="A. Keranen">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="C." surname="Holmberg" fullname="C. Holmberg">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="J." surname="Rosenberg" fullname="J. Rosenberg">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2018" month="July"/>
            <abstract>
              <t indent="0">This document describes a protocol for Network Address Translator (NAT) traversal for UDP-based communication.  This protocol is called Interactive Connectivity Establishment (ICE).  ICE makes use of the Session Traversal Utilities for NAT (STUN) protocol and its extension, Traversal Using Relay NAT (TURN).</t>
              <t indent="0">This document obsoletes RFC 5245.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8445"/>
          <seriesInfo name="DOI" value="10.17487/RFC8445"/>
        </reference>
      </references>
      <references pn="section-10.2">
        <name slugifiedName="name-informative-references">Informative References</name>
        <reference anchor="RFC1918" target="https://www.rfc-editor.org/info/rfc1918" quoteTitle="true" derivedAnchor="RFC1918">
          <front>
            <title>Address Allocation for Private Internets</title>
            <author initials="Y." surname="Rekhter" fullname="Y. Rekhter">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="B." surname="Moskowitz" fullname="B. Moskowitz">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="D." surname="Karrenberg" fullname="D. Karrenberg">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="G. J." surname="de Groot" fullname="G. J. de Groot">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="E." surname="Lear" fullname="E. Lear">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="1996" month="February"/>
            <abstract>
              <t indent="0">This document describes address allocation for private internets.  This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="5"/>
          <seriesInfo name="RFC" value="1918"/>
          <seriesInfo name="DOI" value="10.17487/RFC1918"/>
        </reference>
        <reference anchor="RFC1919" target="https://www.rfc-editor.org/info/rfc1919" quoteTitle="true" derivedAnchor="RFC1919">
          <front>
            <title>Classical versus Transparent IP Proxies</title>
            <author initials="M." surname="Chatel" fullname="M. Chatel">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="1996" month="March"/>
            <abstract>
              <t indent="0">This document explains "classical" and "transparent" proxy techniques and attempts to provide rules to help determine when each proxy system may be used without causing problems.  This memo provides information for the Internet community.  This memo does not specify an Internet standard of any kind.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="1919"/>
          <seriesInfo name="DOI" value="10.17487/RFC1919"/>
        </reference>
        <reference anchor="RFC1928" target="https://www.rfc-editor.org/info/rfc1928" quoteTitle="true" derivedAnchor="RFC1928">
          <front>
            <title>SOCKS Protocol Version 5</title>
            <author initials="M." surname="Leech" fullname="M. Leech">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="M." surname="Ganis" fullname="M. Ganis">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="Y." surname="Lee" fullname="Y. Lee">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="R." surname="Kuris" fullname="R. Kuris">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="D." surname="Koblas" fullname="D. Koblas">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="L." surname="Jones" fullname="L. Jones">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="1996" month="March"/>
            <abstract>
              <t indent="0">This memo describes a protocol that is an evolution of the previous version of the protocol, version 4 [1]. This new protocol stems from active discussions and prototype implementations.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="1928"/>
          <seriesInfo name="DOI" value="10.17487/RFC1928"/>
        </reference>
        <reference anchor="RFC4941" target="https://www.rfc-editor.org/info/rfc4941" quoteTitle="true" derivedAnchor="RFC4941">
          <front>
            <title>Privacy Extensions for Stateless Address Autoconfiguration in problem statement.</t>
      </list></t>

      <t>Changes in draft -02:
      <list style="symbols">

        <t>Recommendations -&gt; Requirements</t>

        <t>Updated text regarding consent.</t>
      </list></t>

      <t>Changes IPv6</title>
            <author initials="T." surname="Narten" fullname="T. Narten">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="R." surname="Draves" fullname="R. Draves">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Krishnan" fullname="S. Krishnan">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2007" month="September"/>
            <abstract>
              <t indent="0">Nodes use IPv6 stateless address autoconfiguration to generate addresses using a combination of locally available information and information advertised by routers.  Addresses are formed by combining network prefixes with an interface identifier.  On an interface that contains an embedded IEEE Identifier, the interface identifier is typically derived from it.  On other interface types, the interface identifier is generated through other means, for example, via random number generation.  This document describes an extension to IPv6 stateless address autoconfiguration for interfaces whose interface identifier is derived from an IEEE identifier.  Use of the extension causes nodes to generate global scope addresses from interface identifiers that change over time, even in draft -01:
      <list style="symbols">

        <t>Incorporated feedback cases where the interface contains an embedded IEEE identifier.  Changing the interface identifier (and the global scope addresses generated from it) over time makes it more difficult for eavesdroppers and other information collectors to identify when different addresses used in different transactions actually correspond to the same node.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="4941"/>
          <seriesInfo name="DOI" value="10.17487/RFC4941"/>
        </reference>
        <reference anchor="RFC6146" target="https://www.rfc-editor.org/info/rfc6146" quoteTitle="true" derivedAnchor="RFC6146">
          <front>
            <title>Stateful NAT64: Network Address and Protocol Translation from Adam Roach; changes IPv6 Clients to IPv4 Servers</title>
            <author initials="M." surname="Bagnulo" fullname="M. Bagnulo">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="P." surname="Matthews" fullname="P. Matthews">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="I." surname="van Beijnum" fullname="I. van Beijnum">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2011" month="April"/>
          </front>
          <seriesInfo name="RFC" value="6146"/>
          <seriesInfo name="DOI" value="10.17487/RFC6146"/>
        </reference>
        <reference anchor="RFC7016" target="https://www.rfc-editor.org/info/rfc7016" quoteTitle="true" derivedAnchor="RFC7016">
          <front>
            <title>Adobe's Secure Real-Time Media Flow Protocol</title>
            <author initials="M." surname="Thornburgh" fullname="M. Thornburgh">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2013" month="November"/>
            <abstract>
              <t indent="0">This memo describes Adobe's Secure Real-Time Media Flow Protocol (RTMFP), an endpoint-to-endpoint communication protocol designed to discussion securely transport parallel flows of
        cam/mic permission, real-time video, audio, and data messages, as well as bulk data, over IP networks.  RTMFP has features that make it effective for peer-to-peer (P2P) as well as client-server communications, even when Network Address Translators (NATs) are used.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7016"/>
          <seriesInfo name="DOI" value="10.17487/RFC7016"/>
        </reference>
        <reference anchor="RFC7230" target="https://www.rfc-editor.org/info/rfc7230" quoteTitle="true" derivedAnchor="RFC7230">
          <front>
            <title>Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing</title>
            <author initials="R." surname="Fielding" fullname="R. Fielding" role="editor">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="J." surname="Reschke" fullname="J. Reschke" role="editor">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2014" month="June"/>
            <abstract>
              <t indent="0">The Hypertext Transfer Protocol (HTTP) is a stateless application-level protocol for distributed, collaborative, hypertext information systems.  This document provides an overview of HTTP architecture and its associated terminology, defines the "http" and "https" Uniform Resource Identifier (URI) schemes, defines the HTTP/1.1 message syntax and parsing requirements, and describes related security concerns for implementations.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7230"/>
          <seriesInfo name="DOI" value="10.17487/RFC7230"/>
        </reference>
        <reference anchor="RFC7478" target="https://www.rfc-editor.org/info/rfc7478" quoteTitle="true" derivedAnchor="RFC7478">
          <front>
            <title>Web Real-Time Communication Use Cases and Requirements</title>
            <author initials="C." surname="Holmberg" fullname="C. Holmberg">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Hakansson" fullname="S. Hakansson">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="G." surname="Eriksson" fullname="G. Eriksson">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2015" month="March"/>
            <abstract>
              <t indent="0">This document describes web-based real-time communication use cases. Requirements on the browser functionality are derived from the use cases.</t>
              <t indent="0">This document was developed in an initial phase of proxies, the work with rather minor updates at later stages.  It has not really served as a tool in deciding features or scope for the WG's efforts so far.  It is being published to record the early conclusions of the WG.  It will not be used as a set of rigid guidelines that specifications and various editorial
        changes.</t>

        <t>Added several more references.</t>
      </list></t>

      <t>Changes in draft -00:
      <list style="symbols">

        <t>Published as WG draft.</t>
      </list></t> implementations will be held to in the future.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7478"/>
          <seriesInfo name="DOI" value="10.17487/RFC7478"/>
        </reference>
        <reference anchor="RFC8827" target="https://www.rfc-editor.org/info/rfc8827" quoteTitle="true" derivedAnchor="RFC8827">
          <front>
            <title>WebRTC Security Architecture</title>
            <author initials="E." surname="Rescorla" fullname="Eric Rescorla">
              <organization showOnFrontPage="true"/>
            </author>
            <date month="January" year="2021"/>
          </front>
          <seriesInfo name="RFC" value="8827"/>
          <seriesInfo name="DOI" value="10.17487/RFC8827"/>
        </reference>
        <reference anchor="RFC8835" target="https://www.rfc-editor.org/info/rfc8835" quoteTitle="true" derivedAnchor="RFC8835">
          <front>
            <title>Transports for WebRTC</title>
            <author initials="H." surname="Alvestrand" fullname="Harald Alvestrand">
              <organization showOnFrontPage="true"/>
            </author>
            <date month="January" year="2021"/>
          </front>
          <seriesInfo name="RFC" value="8835"/>
          <seriesInfo name="DOI" value="10.17487/RFC8835"/>
        </reference>
      </references>
    </references>
    <section numbered="false" toc="include" removeInRFC="false" pn="section-appendix.a">
      <name slugifiedName="name-acknowledgements">Acknowledgements</name>
      <t indent="0" pn="section-appendix.a-1">Several people provided input into this document, including <contact fullname="Bernard       Aboba"/>, <contact fullname="Harald Alvestrand"/>, <contact fullname="Youenn       Fablet"/>, <contact fullname="Ted Hardie"/>, <contact fullname="Matthew Kaufmann"/>,
      <contact fullname="Eric Rescorla"/>, <contact fullname="Adam Roach"/>, and
	<contact fullname="Martin Thomson"/>.</t>
    </section>
    <section anchor="authors-addresses" numbered="false" removeInRFC="false" toc="include" pn="section-appendix.b">
      <name slugifiedName="name-authors-addresses">Authors' Addresses</name>
      <author fullname="Justin Uberti" initials="J." surname="Uberti">
        <organization showOnFrontPage="true">Google</organization>
        <address>
          <postal>
            <street>747 6th St S</street>
            <city>Kirkland</city>
            <region>WA</region>
            <code>98033</code>
            <country>United States of America</country>
          </postal>
          <email>justin@uberti.name</email>
        </address>
      </author>
      <author fullname="Guo-wei Shieh" initials="G." surname="Shieh">
        <organization showOnFrontPage="true"/>
        <address>
          <postal>
            <street>333 Elliott Ave W #500</street>
            <city>Seattle</city>
            <region>WA</region>
            <code>98119</code>
            <country>United States of America</country>
          </postal>
          <email>guoweis@gmail.com</email>
        </address>
      </author>
    </section>
  </back>
</rfc>