[AVT] Re: TLS-SRTP internet draft as a WG item in AVT

David McGrew <mcgrew@cisco.com> Tue, 26 June 2007 21:05 UTC

Return-path: <avt-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I3IE9-000358-WC; Tue, 26 Jun 2007 17:05:34 -0400
Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I3IE8-000351-Mh for avt@ietf.org; Tue, 26 Jun 2007 17:05:32 -0400
Received: from sj-iport-1-in.cisco.com ([171.71.176.70] helo=sj-iport-1.cisco.com) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I3IE8-0004KL-DC for avt@ietf.org; Tue, 26 Jun 2007 17:05:32 -0400
Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-1.cisco.com with ESMTP; 26 Jun 2007 14:05:31 -0700
X-IronPort-AV: i="4.16,464,1175497200"; d="scan'208"; a="5041296:sNHT206054280"
Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id l5QL5VCB020366; Tue, 26 Jun 2007 14:05:31 -0700
Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.12.10/8.12.6) with ESMTP id l5QL5QlA003941; Tue, 26 Jun 2007 21:05:28 GMT
Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 26 Jun 2007 14:05:14 -0700
Received: from [10.32.254.213] ([10.32.254.213]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 26 Jun 2007 14:05:14 -0700
In-Reply-To: <18CAE473-3A37-49E0-8F68-CC30629DB2EA@csperkins.org>
References: <A5148FAE-9197-4824-87C4-EF54767552F3@cisco.com> <18CAE473-3A37-49E0-8F68-CC30629DB2EA@csperkins.org>
Mime-Version: 1.0 (Apple Message framework v752.2)
Content-Type: text/plain; charset="US-ASCII"; delsp="yes"; format="flowed"
Message-Id: <BC4EE9F5-5F44-4BCC-9CA2-4CB3E684DF71@cisco.com>
Content-Transfer-Encoding: 7bit
From: David McGrew <mcgrew@cisco.com>
Date: Tue, 26 Jun 2007 14:05:27 -0700
To: Colin Perkins <csp@csperkins.org>
X-Mailer: Apple Mail (2.752.2)
X-OriginalArrivalTime: 26 Jun 2007 21:05:14.0185 (UTC) FILETIME=[B0C55B90:01C7B835]
DKIM-Signature: v=0.5; a=rsa-sha256; q=dns/txt; l=2350; t=1182891931; x=1183755931; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=mcgrew@cisco.com; z=From:=20David=20McGrew=20<mcgrew@cisco.com> |Subject:=20Re=3A=20TLS-SRTP=20internet=20draft=20as=20a=20WG=20item=20in =20AVT |Sender:=20; bh=pgU55tS+0Lkyu5PCsAH/J3KA17kxdjTxkbwWYsJpRsc=; b=gmLnRrqpfJ0IsDJflKivY4fquIO88J9wtg3NkvlWz85g8PtyRr4KF3GCcOuycdDl18WHjDDf QNUVS2EkezACyADiA8vvMzFIy59S15jV1h2nmUHd66fvkBhnDprARApB;
Authentication-Results: sj-dkim-2; header.From=mcgrew@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; );
X-Spam-Score: 0.0 (/)
X-Scan-Signature: c0bedb65cce30976f0bf60a0a39edea4
Cc: Cullen Jennings <fluffy@cisco.com>, Roni Even <roni.even@polycom.co.il>, tom.taylor@rogers.com, AVT <avt@ietf.org>, Dan Wing <dwing@cisco.com>
Subject: [AVT] Re: TLS-SRTP internet draft as a WG item in AVT
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Audio/Video Transport Working Group <avt.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
Errors-To: avt-bounces@ietf.org

Hi Colin,

how does this milestone sound?  "December 2007 Submit TLS-SRTP for  
Proposed Standard"   Perhaps I'm aggressive in expecting us to have  
the draft ready before the Vancouver meeting; we could push it back  
to March 2008.

David

On Jun 26, 2007, at 4:00 AM, Colin Perkins wrote:

> Hi David,
>
> What milestone(s) do you see this work adding to the AVT charter,  
> if accepted?
>
> Colin
>
>
>
>
> On 20 Jun 2007, at 21:54, David McGrew wrote:
>> Hi Colin, Roni, and Tom,
>>
>> I would like to ask that draft-mcgrew-tls-srtp be taken up as a  
>> working group action item in AVT, as part the plan for carrying  
>> forward the RTPSEC work (as per Cullen's email of May 11 to the  
>> rtpsec list).   I would like to continue on as an author of this  
>> work, and Eric as agreed to do the same.  There are a small number  
>> of minor open issues which I expect can be wrapped up quickly:
>>
>> 1.  The draft needs to be clarified so that, in the Symmetric RTP  
>> case, only one handshake is needed.
>>
>> 2.  Section 3.6.2.1 needs to be resolved to either decide on a  
>> "symmetry breaking" rule or not.  It may be desirable to have such  
>> a rule to handle cases in which the signaling system can't tell a  
>> device which should act as client and which should act as  
>> server.   This would allow opportunistic probing, i.e. a TLS-SRTP  
>> implementation could attempt to find out whether another RTP  
>> implementation supports TLS-SRTP, absent any help from signaling.
>>
>> 3.  The "single DTLS session per SRTP session" issue needs to be  
>> decided, and Appendix A should then be removed from the draft.
>>
>> 4.  It should be decided to use, or not to use the "TLS  
>> Extractor", and Section 3.3 should be rewritten accordingly.
>>
>> 5.  The duplicate list of srtp profiles needs to be eliminated.
>>
>> Best regards,
>>
>> David
>>
>> --
>>
>> p.s. - here's the AVT-specific part of Cullen note, so that you  
>> don't need to dig it out of your mailbox: "AVT - Describe how DTLS  
>> is used to key SRTP and how SRTP is used in combination with DTLS.  
>> This includes the issues of multiplexing DTLS and SRTP on one  
>> port. draft-mcgrew-tls-srtp will be the starting draft for this."
>
>
>
> -- 
> Colin Perkins
> http://csperkins.org/

_______________________________________________
Audio/Video Transport Working Group
avt@ietf.org
https://www1.ietf.org/mailman/listinfo/avt