Are my AVATOUR Sessions Secure?
Yes. Avatour uses industry-standard encryption for all visual and auditory content. See below for more information.
- Web connections are delivered over HTTPS.
- All data that is persisted (including email addresses, account information, and session logs) is encrypted in transit and at rest, using AES-256 / SHA-256.
- All real time video and voice is protected using the secure real-time transport protocol (SRTP) with datagram transport layer security (DTLS) version 1.2 and the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher suite.
- In some situations, some real time telemetry data is sent unencrypted over UDP. This information is not sensitive, is not personally identifiable, and is limited to the following:
- QoS of each participant (frame drops, buffer levels, delay) are shared unencrypted
- Viewport Orientation / participant or region of interest
- Synchronizing Avatars, Hands, Laser pointer
- Application defined command and control (for eg mode switch)
