[AVTCORE] Scope of EKT

John Mattsson <john.mattsson@ericsson.com> Mon, 23 March 2015 13:20 UTC

From: John Mattsson <john.mattsson@ericsson.com>
To: IETF AVTCore WG <avt@ietf.org>
Thread-Topic: Scope of EKT
Thread-Index: AQHQZWwwuheBTu72ukik17vz7duwLw==
Date: Mon, 23 Mar 2015 13:20:53 +0000
Message-ID: <F919A74C-AE66-4EC6-9C5D-5575D49B1E3A@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1633960644471943AFF374F210642823@ericsson.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/avt/xQzAU7iJR4kZGSN4Y9CTikcr30A>
Subject: [AVTCORE] Scope of EKT
Precedence: list

Hi,

When the work on EKT started, e2e secure conferencing was not in scope. In draft-jones-avtcore-private-media-framework-01 Cisco (authors of the EKT draft) is proposing to use EKT for the e2e secure conferencing use case. Several changes to EKT is also proposed:

- The position of the EKT field is changed from last in packet to before the authentication tag.

- A change to EKT such that the ROC is transmitted in the clear.

- An extension of EKT in order to negotiate the SRTP Protection Profile used for end-to-end encryption and authentication.

- An extension of EKT in order to send the participant identifier.

Without commenting on the specific changes, I agree that EKT is a good match for the e2e secure conferencing case and I support widening the scope of EKT to include this.

What does the group think?

Cheers,
John

[AVTCORE] Scope of EKT John Mattsson
Re: [AVTCORE] Scope of EKT Paul E. Jones