Add checksum / signature for content delivered from server to prevent fake nodes from sending fake content about viraljs

[tracker1]

Using a checksum/hash sent by the orchestrating server against the application content would go a long way... derived byte based on pbkdf2 would work. There's also HMAC...

https://github.com/diafygi/webcrypto-examples#pbkdf2---derivebits

http://caniuse.com/#feat=cryptography

[PixelsCommander]

Valid points, there is a huge place for improvement in terms of security. There should be a signature/checksum for content delivered.

HTTPS would not help since data transfer happens over WebRTC and it is secured pretty well on protocol level.

[qgustavor]

If you want to use WebCrypto (and get better crypto performance) then you will need HTTPS.