<story><title>Let&apos;s Reverse Engineer Discord</title><url>https://medium.com/tenable-techblog/lets-reverse-engineer-discord-1976773f4626</url></story><parent_chain></parent_chain><comment><author>gfodor</author><text>This is common and necessary for WebRTC SFUs, which perhaps is why Discord does it to support the least common denominator of their web browser based clients.&lt;p&gt;Edit: Yep, I thought I remembered reading this. Their voice servers are WebRTC SFUs. So this is basically state-of-the-art when it comes to voice over WebRTC. End to end encryption in WebRTC is not possible if you are using a SFU. &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;blog.discordapp.com&amp;#x2F;how-discord-handles-two-and-half-million-concurrent-voice-users-using-webrtc-ce01c3187429&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;blog.discordapp.com&amp;#x2F;how-discord-handles-two-and-half...&lt;/a&gt;</text></comment>
<story><title>Let&apos;s Reverse Engineer Discord</title><url>https://medium.com/tenable-techblog/lets-reverse-engineer-discord-1976773f4626</url></story><parent_chain></parent_chain><comment><author>coenhyde</author><text>I don&amp;#x27;t think Discord makes any claims that the audio is P2P encrypted. There are legitimate reasons why Discord might be dropping malformed packets, apart from an indication that they are spying on you (they may be doing that too).&lt;p&gt;1) to improve audio quality.&lt;p&gt;2) to help prevent RCE attacks on the destination client.&lt;p&gt;3) re-encoding at lower bitrates for low bandwidth clients.&lt;p&gt;I don&amp;#x27;t really see the issue here unless Discord claimed they do not decrypt the audio.</text></comment>