Re: [AVTCORE] Last Call: <draft-ietf-avt-srtp-not-mandatory-14.txt> (Securing the RTP Protocol Framework: Why RTP Does Not Mandate a Single Media Security Solution) to Informational RFC

[Pete Resnick <[e-mail]>]

On 12/9/13 4:24 PM, Cullen Jennings (fluffy) wrote:
> My read of the consensus at last plenary was that the IETF had decided it was going to stop doing that.
> [...]
> All I am asking is the IESG be consistent about how they judge consensus on this and if they decide to publish it, provide some guidance on when they think it is fine to not have security and when they think it is not fine.

A poorly constructed hum taken by the IAB Chair at an IAB plenary 
meeting does not constitute IETF consensus. The IESG has not judged 
consensus on the topics brought up at that plenary.

You will note that there is an Internet Draft 
(draft-farrell-perpass-attack) currently in Last Call for Best Current 
Practice that is being discussed on the IETF list. Some of the 
discussion indicates that the IETF does not have consensus on all of the 
issues. That's being worked through now. The outcome of that Last Call 
*will* be a case of the IESG judging consensus on those topics.

If you have an opinion on the draft in Last Call, how it will affect the 
judgment on the AVT draft, and whether it needs clarification in order 
to be useful, I'm sure your input would be appreciated.

pr

-- 
Pete Resnick<http://www.qualcomm.com/~presnick/>
Qualcomm Technologies, Inc. - [phone]