[lallysingh]

Well, it's a complicated answer, I think.

Generally, it's not an additional risk over how screwed you generally are. If you're taking precautions against existing attacks, then yeah.

Question is, can it be fixed? The WebRTC SDP's for getting a peer-to-peer connection, so the general case seems to need to share IP addresses..

But that's not really needed, if you're normally behind a NAT, you're going to be behind a NAT this time, and don't need to share your real IPs -- just STUN/ICE data. If you're not behind a NAT, they already have your IP address.

[computer]

It can be fixed for general cases (like advertisers or drive-by-exploits): make WebRTC click-to-play.

This also fixes the issue where any random site can use WebRTC to make your computer distribute peer to peer content of its choice (like bittorrent).