Skip to content

Add Extra End-to-End Encryption Layer (beyond WebRTC) #75

@SloMR

Description

@SloMR

Is your feature request related to a problem? Please describe.
While WebRTC already provides built-in encryption, we want to add an extra layer of end-to-end encryption (E2EE) for data shared within the project. This added security will help protect sensitive information even if the standard transport encryption is compromised.

Describe the solution you'd like
Implement an additional end-to-end encryption layer for all data shared through the platform, beyond the default WebRTC encryption. This could involve encrypting data before it is sent and decrypting it only after receipt, using user-controlled keys or session-based encryption. Ideally, this should be transparent to users but configurable for advanced use cases.

Describe alternatives you've considered

  • Relying solely on WebRTC's built-in encryption (not sufficient for certain threat models)
  • Using application-layer encryption libraries or protocols (e.g., NaCl, libsodium)
  • Providing optional E2EE toggle for users

Additional context
Consider compatibility with current WebRTC flows and make sure the implementation does not degrade performance or user experience. Provide clear documentation for users on how additional E2EE works and its benefits.

Metadata

Metadata

Assignees

No one assigned

    Labels

    clientChanges made for the Client sidedependenciesPull requests that update a dependency filedocumentationImprovements or additions to documentationenhancementNew feature or requestfeatureCreating a new featurejavascriptPull requests that update javascript codetypescriptPull requests that update TypeScript code

    Projects

    Status

    backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions