[AVTCORE] AD Review: draft-ietf-avtcore-srtp-encrypted-header-ext-03

Robert Sparks <rjsparks@nostrum.com> Thu, 03 January 2013 19:18 UTC

Return-Path: <rjsparks@nostrum.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DC0521F8CDD for <avt@ietfa.amsl.com>; Thu, 3 Jan 2013 11:18:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J376Eret-3G8 for <avt@ietfa.amsl.com>; Thu, 3 Jan 2013 11:18:49 -0800 (PST)
Received: from shaman.nostrum.com (nostrum-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:267::2]) by ietfa.amsl.com (Postfix) with ESMTP id AF6D321F8A67 for <avt@ietf.org>; Thu, 3 Jan 2013 11:18:49 -0800 (PST)
Received: from unnumerable.local (pool-173-57-99-236.dllstx.fios.verizon.net [173.57.99.236]) (authenticated bits=0) by shaman.nostrum.com (8.14.3/8.14.3) with ESMTP id r03JIjGh024868 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Thu, 3 Jan 2013 13:18:46 -0600 (CST) (envelope-from rjsparks@nostrum.com)
Message-ID: <50E5D995.3020808@nostrum.com>
Date: Thu, 03 Jan 2013 13:18:45 -0600
From: Robert Sparks <rjsparks@nostrum.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:16.0) Gecko/20121026 Thunderbird/16.0.2
MIME-Version: 1.0
To: avt@ietf.org, draft-ietf-avtcore-srtp-encrypted-header-ext@tools.ietf.org, avtcore-chairs@ietf.org, Gonzalo Camarillo <Gonzalo.Camarillo@ericsson.com>
Content-Type: multipart/alternative; boundary="------------030904060105010601040502"
Received-SPF: pass (nostrum.com: 173.57.99.236 is authenticated by a trusted mechanism)
Subject: [AVTCORE] AD Review: draft-ietf-avtcore-srtp-encrypted-header-ext-03
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Jan 2013 19:18:50 -0000

Summary: There is one issue to adjust with a revised ID before 
proceeding to IETF LC.

(Based on a brief voice conversation with Jonathan Lennox)

The ABNF in Figure 3 is recursive as written. It allows productions like

a=extmap:1 urn:ietf:params:rtp-hdrext:encrypt 
urn:ietf:params:rtp-hdrext:toffset 
urn:ietf:params:rtp-hdrext:ssrc-audio-level
and worse
a=extmap:1 urn:ietf:params:rtp-hdrext:encrypt 
urn:ietf:params:rtp-hdrext:toffset token1 token 2 
urn:ietf:params:rtp-hdrext:ssrc-audio-level

etc.

I suggest to avoid this instead extend the rule for extmap in RFC5285 
(please explicitly call out that's where to look for the base
definition of extmap, extensionname, and extensionattributes) as follows:

extmap /= mapentry SP "urn:ietf:params:rtp-hdrext:encrypt" extensionname 
[SP extensionattributes]

Jonathan notes that RFC5234's quoted-strings are by definition case 
insensitive. If extensionnames are intended to be case-sensitive
(RFC5285 is silent on that point), the quoted string above would need to 
be replaced with hex expansions for the individual characters:

 >>> [hex(ord(ch)) for ch in list('urn:ietf:params:rtp-hdrext:encrypt')]
['0x75', '0x72', '0x6e', '0x3a', '0x69', '0x65', '0x74', '0x66', '0x3a', 
'0x70', '0x61', '0x72', '0x61', '0x6d', '0x73', '0x3a', '0x72', '0x74', 
'0x70', '0x2d', '0x68', '0x64', '0x72', '0x65', '0x78', '0x74', '0x3a', 
'0x65', '0x6e', '0x63', '0x72', '0x79', '0x70', '0x74']


Nits:

In the abstract, I suggest s/require that all SRTP/require that all 
future SRTP/

Introduction, 1st paragraph, s/using of the Real-Time/using the Real-Time/