Encrypting without key negotiation?



http://www.whatwg.org/specs/web-apps/current-work/complete/video-
conferencing-and-peer-to-peer-communication.html#stream-api

Looking at Google's new WebRTC API I was pleased to see that they're
using AES to encrypt the data stream. However, I can't find any
references to either RSA, DH or ECC for the key negotiation. It looks
like they're sending the key in cleartext over the Internet.

I hope that I'm mistaken. Could someone confirm this?


.