[AVT] Re: TLS-SRTP internet draft as a WG item in AVT

David McGrew <mcgrew@cisco.com> Tue, 26 June 2007 23:35 UTC

Return-path: <avt-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I3KYu-0005LL-Fq; Tue, 26 Jun 2007 19:35:08 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I3KYt-0005LD-DG for avt@ietf.org; Tue, 26 Jun 2007 19:35:07 -0400
Received: from sj-iport-4.cisco.com ([171.68.10.86]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I3KYB-0007qN-Rn for avt@ietf.org; Tue, 26 Jun 2007 19:35:07 -0400
Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-4.cisco.com with ESMTP; 26 Jun 2007 16:34:23 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ao8CAM4+gUarR7O6/2dsb2JhbAA
X-IronPort-AV: i="4.16,465,1175497200"; d="scan'208"; a="5635634:sNHT15139506"
Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id l5QNYNAS000521; Tue, 26 Jun 2007 16:34:23 -0700
Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-5.cisco.com (8.12.10/8.12.6) with ESMTP id l5QNYKka014325; Tue, 26 Jun 2007 23:34:20 GMT
Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 26 Jun 2007 16:34:20 -0700
Received: from [10.32.254.213] ([10.32.254.213]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 26 Jun 2007 16:34:19 -0700
In-Reply-To: <DA7BAB1B-335A-4193-BE13-8EB565C7DD47@cisco.com>
References: <A5148FAE-9197-4824-87C4-EF54767552F3@cisco.com> <18CAE473-3A37-49E0-8F68-CC30629DB2EA@csperkins.org> <BC4EE9F5-5F44-4BCC-9CA2-4CB3E684DF71@cisco.com> <DA7BAB1B-335A-4193-BE13-8EB565C7DD47@cisco.com>
Mime-Version: 1.0 (Apple Message framework v752.2)
Content-Type: text/plain; charset="US-ASCII"; delsp="yes"; format="flowed"
Message-Id: <C2F65CF3-897D-49CC-B631-9B5EFD7A50B1@cisco.com>
Content-Transfer-Encoding: 7bit
From: David McGrew <mcgrew@cisco.com>
Date: Tue, 26 Jun 2007 16:34:34 -0700
To: Cullen Jennings <fluffy@cisco.com>
X-Mailer: Apple Mail (2.752.2)
X-OriginalArrivalTime: 26 Jun 2007 23:34:19.0681 (UTC) FILETIME=[84B3B910:01C7B84A]
DKIM-Signature: v=0.5; a=rsa-sha256; q=dns/txt; l=3202; t=1182900863; x=1183764863; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=mcgrew@cisco.com; z=From:=20David=20McGrew=20<mcgrew@cisco.com> |Subject:=20Re=3A=20TLS-SRTP=20internet=20draft=20as=20a=20WG=20item=20in =20AVT |Sender:=20; bh=eTlvV9i2J7eEBG2bEP22A1y3W0bonZmsilJuaK2YW3c=; b=P/rIfLjB+eq/9dzBd19rIqRJgKP+7QiV2on1iKMJmQ6SS3H5Oc8oO0AM+Q9oJcP6p+Z7L623 afJuhPEXAy4tcoHqqbbQiQyUl0mhCGh/c4JDIcBXx5n37KrCIyS8zUxm;
Authentication-Results: sj-dkim-2; header.From=mcgrew@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; );
X-Spam-Score: 0.0 (/)
X-Scan-Signature: a2c12dacc0736f14d6b540e805505a86
Cc: Roni Even <roni.even@polycom.co.il>, AVT <avt@ietf.org>, tom.taylor@rogers.com, "Dan Wing (dwing)" <dwing@cisco.com>, Colin Perkins <csp@csperkins.org>
Subject: [AVT] Re: TLS-SRTP internet draft as a WG item in AVT
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Audio/Video Transport Working Group <avt.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
Errors-To: avt-bounces@ietf.org

Hi Cullen,

On Jun 26, 2007, at 3:13 PM, Cullen Jennings wrote:

>
> I have no problem with that milestone if that is what you decide  
> on ...
>
> One question about it - would calling it "DTLS-SRTP" be better than  
> "TLS-SRTP"? I don't care but if we were going to change the name,  
> this would be the right time to do that.

I'm name agnostic.  Whatever Eric and/or the TLS folks say is the  
right TLS terminology.   I said TLS-SRTP here because that's the name  
of the current draft, though lots of people (including me) have used  
the other name.

David

>
> Cullen <with my AD hat on>
>
>
> On Jun 26, 2007, at 2:05 PM, David McGrew ((mcgrew)) wrote:
>
>> Hi Colin,
>>
>> how does this milestone sound?  "December 2007 Submit TLS-SRTP for
>> Proposed Standard"   Perhaps I'm aggressive in expecting us to have
>> the draft ready before the Vancouver meeting; we could push it back
>> to March 2008.
>>
>> David
>>
>> On Jun 26, 2007, at 4:00 AM, Colin Perkins wrote:
>>
>> > Hi David,
>> >
>> > What milestone(s) do you see this work adding to the AVT charter,
>> > if accepted?
>> >
>> > Colin
>> >
>> >
>> >
>> >
>> > On 20 Jun 2007, at 21:54, David McGrew wrote:
>> >> Hi Colin, Roni, and Tom,
>> >>
>> >> I would like to ask that draft-mcgrew-tls-srtp be taken up as a
>> >> working group action item in AVT, as part the plan for carrying
>> >> forward the RTPSEC work (as per Cullen's email of May 11 to the
>> >> rtpsec list).   I would like to continue on as an author of this
>> >> work, and Eric as agreed to do the same.  There are a small number
>> >> of minor open issues which I expect can be wrapped up quickly:
>> >>
>> >> 1.  The draft needs to be clarified so that, in the Symmetric RTP
>> >> case, only one handshake is needed.
>> >>
>> >> 2.  Section 3.6.2.1 needs to be resolved to either decide on a
>> >> "symmetry breaking" rule or not.  It may be desirable to have such
>> >> a rule to handle cases in which the signaling system can't tell a
>> >> device which should act as client and which should act as
>> >> server.   This would allow opportunistic probing, i.e. a TLS-SRTP
>> >> implementation could attempt to find out whether another RTP
>> >> implementation supports TLS-SRTP, absent any help from signaling.
>> >>
>> >> 3.  The "single DTLS session per SRTP session" issue needs to be
>> >> decided, and Appendix A should then be removed from the draft.
>> >>
>> >> 4.  It should be decided to use, or not to use the "TLS
>> >> Extractor", and Section 3.3 should be rewritten accordingly.
>> >>
>> >> 5.  The duplicate list of srtp profiles needs to be eliminated.
>> >>
>> >> Best regards,
>> >>
>> >> David
>> >>
>> >> --
>> >>
>> >> p.s. - here's the AVT-specific part of Cullen note, so that you
>> >> don't need to dig it out of your mailbox: "AVT - Describe how DTLS
>> >> is used to key SRTP and how SRTP is used in combination with DTLS.
>> >> This includes the issues of multiplexing DTLS and SRTP on one
>> >> port. draft-mcgrew-tls-srtp will be the starting draft for this."
>> >
>> >
>> >
>> > --
>> > Colin Perkins
>> > http://csperkins.org/
>>
>>

_______________________________________________
Audio/Video Transport Working Group
avt@ietf.org
https://www1.ietf.org/mailman/listinfo/avt