This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.
The WebRTC draft does not provide, or reference, an explanation of how media is secured. DTLS-SRTP is mentioned once, two lines above the change log without citation. References to 'SDP' are also inadequate to explain how to secure media using the API.
Closing as "this is the IETF's problem". We do have a normative dependency on rtcweb-security-arch.