[Ecrit] draft-stastny-ecrit-requirements-00 review

Richard

I have a few comments about certain requirements within your ID:

    M2.  The possibility to make contact to the proper ECC has to be
         verified and indicated to the user and/or the User Agent.

Any indication (tone, flashing light, display icon visible) will be 
gradually ignored by most humans soon after becoming available to them. 
Thus, this requirement doesn't really accomplish much.

Technically, how does the UA (the phone) know which PSAP/ECC is the "right" 
PSAP/ECC?

For example, I live outside of Fort Worth, Texas - when I power my phone 
back up when I land in a lovely place such as Minneapolis, how does my 
phone contact and then know it contacted the Minneapolis PSAP/ECC without a 
PSAP Certificate authority and my UA having access to verify the key sent 
back in the reply was the Minneapolis PSAP/ECC and not my home Fort Worth 
PSAP/ECC?

This seems like a great impersonation attack opportunity waiting to happen, 
while providing a true false sense of security to the UA owner.

    M3.  The communication may be established on user request or by
         external events.

External events.... smoke signals? seriously, what do you mean by "external 
events"?

    M4.  To achieve this, the device MUST be able to retrieve its current
         location from the access provider, from the infrastructure, via
         GPS, ...  or as last resort, from the user itself.

I think the user will have quite a say in whether they are indeed a "last 
resort". With residential services, it will be often that the user will 
type in their home address and have that be their PIDF-LO civic address 
used from any phone in that home.

    M5.  The capability to locate the responsible ECC must be available
         in the public Infrastructure without the additional need for a
         service provider.

this means the IP address of each and every PSAP/ECC in the world is public 
knowledge. Is this really desired?

    M6.  For a transient time the device and the UA may use the help of
         servers (e.g.  ESRP) to provide the connectivity to ECC,
         especially for ECC not yet connected to the Internet.

what's a transient time to you?

What's an ESRP? you didn't explode the acronym in a terms and definitions 
section.

Why would a UA care how its message got routed as long as it got routed to 
a PSAP/ECC?

    S1.  Transmission of the current location of the contacting device to
         the ECC

Why is this a SHOULD? Isn't this a MUST to do any routing? And if location 
from the INVITE is used to route the call, and Proxies are not don't delete 
message bodies, then why wouldn't it be logical to conclude that if the 
PSAP/ECC received the message, it also received the Location of the UA?

    S3.  Identification of the contacting person or device

If my AOR is jp3520@yahoo.com with no display name, then the PSAP/ECC isn't 
going to get any more than that. But I guess this is why it's a SHOULD...

    S4.  Safeguards to protect the emergency infrastructure and ECC
         facilities against malicious attacks, especially to prevent DoS
         attacks.

I don't believe this is in scope of the WG or the IETF, so this requirement 
should be removed

    S5.  Provide all possible means of communication, not only speech,
         but also text (IM), Video, etc., (for disabled persons and
         better display of the situation)

I don't believe this is in scope of the WG or the IETF, so this requirement 
should be removed

    S6.  Capabilities to contact ECC by automatic means and for the
         transfer of additional information (alarm equipment, cars,
         buses, trucks with dangerous loads, ...)

I don't believe this is in scope of the WG or the IETF, so this requirement 
should be removed

cheers,
James

                                *******************
                 Truth is not to be argued... it is to be presented

_______________________________________________
Ecrit mailing list
Ecrit@ietf.org
https://www1.ietf.org/mailman/listinfo/ecrit