Spoofing DTLS-SRTP key exchange

Hello everyone,

I was having a read about how DTLS-SRTP key exchange can be tapped/mimt since certificates cannot be authenticated.

I came across this article:

https://www.gremwell.com/blog/dtls-srtp#terminating-dtls-with-srtp-extension

Does this mean that Wire, Threema and similar apps that end to end encrypt SDP messages containing the thumbprint of the certificate used to secure the RTP stream can be man in the middle attacked?

Thank you.

dtls exchange key privacy spoofing