Need to reconsider scores and assumptions

[reivilibre]

• Should lack of unencrypted STUN/TURN really be penalised? Perhaps not.
• In my tests on Firefox, only unencrypted TURN over UDP seems to support STUN candidates on both servers I've tried; is STUN not defined on any other services, or is this a Firefox issue? Either way, need to figure out what it is and explain it and tweak the scores to not show 'Poor' when the setup is not wrong.

[reivilibre]

I asked someone who knows what they are talking about (thanks Dave!) and arrived at the following:

• definitely don't penalise for lack of turns/udp: it's barely a thing
• it might depend one what your score is trying to represent: if it's just about likelihood of a successful connection then turn/udp probably doesn't matter
• the other important thing is that an A* score should require a turns/tcp URI on port 443
• the browser always gets a UDP candidate to hand out, because the TURN server is able to talk UDP on your behalf, even if your client has to use not-really-fit-for-purpose-but-it'll-do-I-guess TCP to the TURN server
• TURN creds being encrypted on the wire is also quite important — turns/tcp needed for Great+?