WebWormhole creates ephemeral pipes between computers to send files or other data.

WebWormhole is inspired by and uses a model very similar to that of Magic Wormhole. It differs in that it uses WebRTC to make its connections. This allows us to make use of WebRTC's NAT traversal tricks, as well as the fact that it can be used in browsers.

The exchange of session descriptions (offers and answers) is protected by PAKE (we use CPace) and a generated random password, similar to Magic Wormhole. The session descriptions include the fingerprints of the DTLS certificates that WebRTC uses to secure its communications. The protocol does not need to trust the signalling server to maintain the confidentiality of the files transferred.