Skip to content
All fingerprint checksNetwork & WebRTC

WebRTC header extensions match the claimed engine family

Check id webrtc-extmap-engine-family

What an ordinary browser yields

Under a Chrome UA, the SDP carries libwebrtc-shaped extensions including a webrtc.org experiment URI, and no Gecko-only csrc-audio-level.

What a detector infers

This check generates an SDP offer and collects its a=extmap RTP header-extension URIs. Those URIs are compiled into the WebRTC stack itself: libwebrtc (Chromium) ships webrtc.org/experiments/rtp-hdrext experiment URIs that Gecko never carries, and Gecko ships csrc-audio-level. Unlike codec lists, this set does not vary with the GPU or the host, which is what makes it a stable engine-family signal. Scoring applies only when the UA matches Chrome/<digits> and the runtime is Blink; under that claim, two conditions are flagged — the presence of Gecko-only csrc-audio-level, and the absence of any libwebrtc experiment extension. Either indicates a Chrome UA presented over a WebRTC stack from a different engine family. The comparison is family-level only; no per-milestone extension set is asserted, because Finch gating makes two identical stock Chromes differ. Severity is warn. A non-Chrome UA, or WebRTC being unavailable or disabled, yields N/A — the code notes that this is an environment fact, not a finding.

How to resolve it

Present a UA that matches the WebRTC stack you actually run. Don't put a Chrome UA over Gecko's WebRTC — the RTP header-extension set is compiled into the WebRTC stack, so unlike codec lists it doesn't vary with the GPU or the host. Only the engine family is asserted here: the exact per-milestone set does move with Finch gating, so two stock Chromes of the same version can legitimately differ.

What is a WebRTC IP leak?

Nearby checks in Network & WebRTC

See all 11 checks in Network & WebRTC
Who builds this test

Clearcote is a browser built for fingerprint coherence

It is a Chromium fork, maintained by the same people who wrote this reference. It ships as a compiled browser rather than as a stealth script injected into someone else's — which is a description of how it is built, and is not an argument about how it behaves on this check.

This audit takes no position on how Clearcote scores on Network & WebRTC checks, on this one, or anywhere else. It has no baseline corpus of other people's fingerprints to rank you against and no vendor scoreboard — nearly every check is self-referential, asking one browser the same question through two independent APIs and reporting whether both answers can be true at once. It runs identically on any browser, including ours. Run it on yours and read the result yourself.

See the other checks in Network & WebRTC — the family webrtc-extmap-engine-family belongs to.