Re: Handling of unverified data and media

On 11 March 2017 at 11:01, Eric Rescorla <[email protected]> wrote:
> I haven't spent too much time on it, but it seems like it ought to be safe
> to hold
> anything you receive prior to getting the fingerprint. It might be better,
> as MT
> suggests, to discard the datachannel data, but I'm not sure why it would be
> necessary.


I didn't consider holding data, which should be fine.  If the
fingerprint later turns out to be bad, then it's easy to pretend you
were hit by a spate of packet loss than hold arbitrary amounts of
(potential) junk.