1. SECURITY: Coturn TURN Server Disables TLS, Exposing Credentials and Voice Traffic in Plaintext
A critical security misconfiguration in a Coturn TURN server deployment is actively transmitting user credentials and voice traffic in plaintext. The server, configured via a `docker-compose.yml` file, is running with the flags `--no-tls --no-tlsv1 --no-tlsv1_1`, which completely disables TLS and DTLS encryption. This ...