[AVT] draft-ietf-avt-ports-for-ucast-mcast-rtp-04

"DRAGE, Keith (Keith)" <keith.drage@alcatel-lucent.com> Wed, 01 December 2010 14:49 UTC

From: "DRAGE, Keith (Keith)" <keith.drage@alcatel-lucent.com>
To: 'IETF AVT WG' <avt@ietf.org>
Date: Wed, 01 Dec 2010 15:46:38 +0100
Thread-Topic: draft-ietf-avt-ports-for-ucast-mcast-rtp-04
Thread-Index: AcuRZo8n5SLP+sUjTTqvKtzeX69Kig==
Message-ID: <EDC0A1AE77C57744B664A310A0B23AE21E36365D@FRMRSSXCHMBSC3.dc-m.alcatel-lucent.com>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [AVT] draft-ietf-avt-ports-for-ucast-mcast-rtp-04
Precedence: list

(As WG chair)

At the AVT face to face meeting in Beijing, there was considerable discussion on the security issues regarding token versus cookie.

My only conclusion from that discussion was that the text needs to be improved, and shortening the timer may provide the only real solution to such attacks. 

Has this issue been nailed down and closed in the -04 version of the document, or is more work still required?

In particular I'd like to see responses from EKR, Magnus and Colin, who all indicated more work was required in Beijing.

regards

Keith

[AVT] draft-ietf-avt-ports-for-ucast-mcast-rtp-04 DRAGE, Keith (Keith)
Re: [AVT] draft-ietf-avt-ports-for-ucast-mcast-rt… Ali C. Begen (abegen)
Re: [AVT] draft-ietf-avt-ports-for-ucast-mcast-rt… Magnus Westerlund