Re: [AVTCORE] Scope of EKT

"Paul E. Jones" <paulej@packetizer.com> Mon, 23 March 2015 19:32 UTC

Return-Path: <paulej@packetizer.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D7521B29C6 for <avt@ietfa.amsl.com>; Mon, 23 Mar 2015 12:32:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.012
X-Spam-Level:
X-Spam-Status: No, score=-2.012 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1yp3tGVyTFZV for <avt@ietfa.amsl.com>; Mon, 23 Mar 2015 12:32:10 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E812C1A0104 for <avt@ietf.org>; Mon, 23 Mar 2015 12:32:09 -0700 (PDT)
Received: from [31.133.182.168] (dhcp-b6a8.meeting.ietf.org [31.133.182.168]) (authenticated bits=0) by dublin.packetizer.com (8.14.9/8.14.9) with ESMTP id t2NJW5tq020272 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 23 Mar 2015 15:32:06 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1427139126; bh=texA+t5BrApbLnjDWcQwIeNR/jhDiCY205vxtbpl+Gw=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=fqzQR8epQpQFFeuDp5sMZ0QeGgRjyjC9gJMG6pika4VcELxOG3nVgVOnApY+MQn9F ehoG1UbfkCZTaus99LtreeoHWhtTUBfLFQStFui82SprK9hAgFQU3/+dTsnQFNf0tm bFtuEM5qlb09gj2ZFGyr7yk/v03ua4mzmgCoFTnU=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "John Mattsson" <john.mattsson@ericsson.com>, "IETF AVTCore WG" <avt@ietf.org>
Date: Mon, 23 Mar 2015 19:32:06 +0000
Message-Id: <eme71ca617-68e7-48af-9200-22d33bba8462@helsinki>
In-Reply-To: <F919A74C-AE66-4EC6-9C5D-5575D49B1E3A@ericsson.com>
User-Agent: eM_Client/6.0.21372.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/avt/4hgW8vemJLXyNdUzHMXnL2G8Jm4>
Subject: Re: [AVTCORE] Scope of EKT
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2015 19:32:11 -0000

It probably goes without saying, but I supported that.  At the very 
least, I think we should keep this option available as we discuss the 
e2e security problem.

Paul

------ Original Message ------
From: "John Mattsson" <john.mattsson@ericsson.com>
To: "IETF AVTCore WG" <avt@ietf.org>
Sent: 3/23/2015 9:20:53 AM
Subject: [AVTCORE] Scope of EKT

>Hi,
>
>When the work on EKT started, e2e secure conferencing was not in scope. 
>In draft-jones-avtcore-private-media-framework-01 Cisco (authors of the 
>EKT draft) is proposing to use EKT for the e2e secure conferencing use 
>case. Several changes to EKT is also proposed:
>
>- The position of the EKT field is changed from last in packet to 
>before the authentication tag.
>
>- A change to EKT such that the ROC is transmitted in the clear.
>
>- An extension of EKT in order to negotiate the SRTP Protection Profile 
>used for end-to-end encryption and authentication.
>
>- An extension of EKT in order to send the participant identifier.
>
>Without commenting on the specific changes, I agree that EKT is a good 
>match for the e2e secure conferencing case and I support widening the 
>scope of EKT to include this.
>
>What does the group think?
>
>Cheers,
>John
>
>_______________________________________________
>Audio/Video Transport Core Maintenance
>avt@ietf.org
>https://www.ietf.org/mailman/listinfo/avt