Re: [bfcpbis] WGLC for draft-ietf-bfcpbis-rfc4583bis

Roman Shpount <rshpount@turbobridge.com> Tue, 18 July 2017 23:37 UTC

Return-Path: <rshpount@turbobridge.com>
X-Original-To: bfcpbis@ietfa.amsl.com
Delivered-To: bfcpbis@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B08D1317A1 for <bfcpbis@ietfa.amsl.com>; Tue, 18 Jul 2017 16:37:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=turbobridge.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SJXqFzIjhd52 for <bfcpbis@ietfa.amsl.com>; Tue, 18 Jul 2017 16:37:30 -0700 (PDT)
Received: from mail-pg0-x22a.google.com (mail-pg0-x22a.google.com [IPv6:2607:f8b0:400e:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F921129432 for <bfcpbis@ietf.org>; Tue, 18 Jul 2017 16:37:30 -0700 (PDT)
Received: by mail-pg0-x22a.google.com with SMTP id 123so20711805pgj.1 for <bfcpbis@ietf.org>; Tue, 18 Jul 2017 16:37:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=turbobridge.com; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ONAW+L4QnYI9ehFmopcxKxiKRki+CIRI+iw6ArWnwos=; b=OkcurMIGjOpiPfrR+4asYQd0NdgAjzKIxyQ3qnOMviior6U14itFfEtOFzlcMY4/VU nEdGeFsU+FVLSgOgwZmGnT6GzXSF93Gi8JGSvNuwJ301LF0lOy2wQIrQ90SDhFWLTyaz OWpZnKt6OMr6VnphlvAEMQW1/9Tlpf9GomiNI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ONAW+L4QnYI9ehFmopcxKxiKRki+CIRI+iw6ArWnwos=; b=hpblk/7rRoYg+ntDErqhLY4ldjTpE6R7WEwi1AAijU+MdRfqeaVC8V20dzOtEItupK fBVD5nOq6Gp0qBnKIy3uzjQoSYKcNxCIf40GACISOEUhqVhMgVKZ+4P1ewoFlgCG6mO5 TLmuOFXhqDqxh4HBUf+MxqbIpwKR+Fs6zasCKXixmozEVDU8G8gBNk27ivrbp5eM0R8H PbOapsV/S2qgtKOsEjSIJ41OcuuYebYA3T343fQZY2a9BXj5QQGJNbmq5Q+KzJMadoOc LnnMdUSgGWheazdxvvmiJ+3isfgxUPR9J5GMLxfWaEKjtSW8nbcRA7s1IKEpCqpblMI8 4qHw==
X-Gm-Message-State: AIVw1100XErNGMSVSO5WDnebwv8OhBu5/G8HrS3ReSN8h+r42AZq4zba cuXDVVpb1yV5kMXJDz8=
X-Received: by 10.84.215.130 with SMTP id l2mr111468pli.116.1500421049673; Tue, 18 Jul 2017 16:37:29 -0700 (PDT)
Received: from mail-pf0-f172.google.com (mail-pf0-f172.google.com. [209.85.192.172]) by smtp.gmail.com with ESMTPSA id p11sm8443754pfk.128.2017.07.18.16.37.28 for <bfcpbis@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 18 Jul 2017 16:37:28 -0700 (PDT)
Received: by mail-pf0-f172.google.com with SMTP id s70so9307973pfs.0 for <bfcpbis@ietf.org>; Tue, 18 Jul 2017 16:37:28 -0700 (PDT)
X-Received: by 10.84.232.8 with SMTP id h8mr80795plk.252.1500421048584; Tue, 18 Jul 2017 16:37:28 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.100.146.23 with HTTP; Tue, 18 Jul 2017 16:37:27 -0700 (PDT)
In-Reply-To: <33AC90F8-1963-4F79-ACB2-0DB2873D5E34@cisco.com>
References: <33AC90F8-1963-4F79-ACB2-0DB2873D5E34@cisco.com>
From: Roman Shpount <rshpount@turbobridge.com>
Date: Tue, 18 Jul 2017 19:37:27 -0400
X-Gmail-Original-Message-ID: <CAD5OKxswNRuYFt_XQZ=caDB5WQDXS27KbH3M-AxhKL9Pq0WwPA@mail.gmail.com>
Message-ID: <CAD5OKxswNRuYFt_XQZ=caDB5WQDXS27KbH3M-AxhKL9Pq0WwPA@mail.gmail.com>
To: "Charles Eckel (eckelcu)" <eckelcu@cisco.com>
Cc: "bfcpbis@ietf.org" <bfcpbis@ietf.org>, Christer Holmberg <christer.holmberg@ericsson.com>, Alan Ford <alan.ford@gmail.com>, "Tom Kristensen (tomkrist)" <tomkrist@cisco.com>, Gonzalo Camarillo <Gonzalo.Camarillo@ericsson.com>
Content-Type: multipart/alternative; boundary="94eb2c19f8689d52a605549fff16"
Archived-At: <https://mailarchive.ietf.org/arch/msg/bfcpbis/gwbm1mG6wkoGiVCq8b1LaWN7y8E>
Subject: Re: [bfcpbis] WGLC for draft-ietf-bfcpbis-rfc4583bis
X-BeenThere: bfcpbis@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: BFCPBIS working group discussion list <bfcpbis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bfcpbis>, <mailto:bfcpbis-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bfcpbis/>
List-Post: <mailto:bfcpbis@ietf.org>
List-Help: <mailto:bfcpbis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bfcpbis>, <mailto:bfcpbis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jul 2017 23:37:32 -0000

Hi All,

I have reviewed the document and have the following comments:

Section 8 BFCP Connection Management:

It specifies that BFCP can use TCP or UDP as underlying transport. It does
not specify what happens when ICE, TCP/DTLS/BFCP, TCP/TLS/BFCP, or
UDP/TLS/BFCP are used. I suggest to explicitly specify that ICE,
TCP/DTLS/BFCP, and UDP/TLS/BFCP follow the same procedures for connection
management as UDP/BFCP. TCP/TLS/BFCP follows the same procedures as TCP/BFCP

Section 9 Authentication:

Not sure why we are talking about SIP here. I think we should restate

When SDP is used to perform an offer/answer exchange, the initial mutual
authentication takes place at the SIP level. Additionally, SIP uses S/MIME
[6] to provide an integrity-protected channel with optional confidentiality
for the offer/answer exchange.

as

When SDP is used to perform an offer/answer exchange, the initial mutual
authentication SHOULD take place at the signaling level. Additionally,
signaling can use S/MIME [6] to provide an integrity-protected channel with
optional confidentiality for the offer/answer exchange.

This section specifies that "This implies that unless a 'fingerprint'
attribute is included in the session description, the certificate provided
at the TLS-/DTLS-level MUST either be directly signed by one of the other
party's trust anchors or be validated using a certification path that
terminates at one of the other party's trust anchors [5]". I thought
"fingerprint" attribute are required and certificate signature by trust
anchor is irrelevant.

Not sure what "When using UDP, the procedure above was preferred since it
adheres to [16] as used for DTLS-SRTP" means, especially since [16} is not
specific to SRTP-DTLS, but specifies generic rules for all DTLS based
protocols. The whole logic is circular since it proposes to follow
procedures from [16] since they are compliant with procedures from [16].

Section 10. ICE Considerations

Please synchronize text with text in
https://tools.ietf.org/html/draft-ietf-mmusic-sctp-sdp-26#section-12.2 .
This section was updated during WGLC for draft-ietf-mmusic-sctp-sdp, so it
would make sense to synchronize those changes here. Let me know if you need
help with this.

Regards,

_____________
Roman Shpount

On Mon, Jul 17, 2017 at 4:10 AM, Charles Eckel (eckelcu) <eckelcu@cisco.com>
wrote:

> (As WG co-chair)
>
> This is a reminder that WGLC ends tomorrow. I realize the time to review
> overlaps with IETF prep and meeting times. If you require more time to
> review the draft, please let me know. Otherwise, please share your review
> comments by the end of tomorrow.
>
> Thanks,
> Charles
>
> -----Original Message-----
> From: bfcpbis <bfcpbis-bounces@ietf.org> on behalf of Charles Eckel <
> eckelcu@cisco.com>
> Date: Wednesday, July 5, 2017 at 5:59 PM
> To: "bfcpbis@ietf.org" <bfcpbis@ietf.org>
> Subject: [bfcpbis] WGLC for draft-ietf-bfcpbis-rfc4583bis
>
>     (As WG co-chair)
>
>     This is to announce an additional working group last call for
> draft-ietf-bfcpbis-rfc4583bis, "Session Description Protocol (SDP) Format
> for Binary Floor Control Protocol (BFCP) Streams".
>     http://datatracker.ietf.org/doc/draft-ietf-bfcpbis-rfc4583bis/
>
>     This is intended as a Standards Track RFC, obsoleting RFC 4583.
>     Please respond to the list by July 18th (i.e. 2 weeks) with any
> comments.
>
>     We had a working group last call previous, but a significant amount of
> time and some substantial changes and additions have occurred to justify
> another review of the draft in its entirely. It is helpful to attempt to
> categorize your comment (e.g. technical issue vs. editorial), and also to
> provide any replacement text you feel is necessary.
>     If you review the document and have no comments, please tell the
> chairs that you have reviewed it. This is always useful information in
> assessing the degree of WG review and consensus behind the document.
>     Note, we have not scheduled a working group session for IETF 99 in
> Prague. This WGLC will close during IETF 99. If helpful, we can arrange a
> side meeting to discuss any significant issues, or with any luck, gather at
> a bar to celebrate the draft being ready to advance to the next step toward
> RFC.
>
>     Cheers,
>     Charles
>
>
>     _______________________________________________
>     bfcpbis mailing list
>     bfcpbis@ietf.org
>     https://www.ietf.org/mailman/listinfo/bfcpbis
>
>
>