Re: [Ice] TLS Candidates

Ari Keränen <ari.keranen@ericsson.com> Wed, 22 March 2017 15:11 UTC

Return-Path: <ari.keranen@ericsson.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 090D3129464 for <ice@ietfa.amsl.com>; Wed, 22 Mar 2017 08:11:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level:
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pM9FhnR94bK6 for <ice@ietfa.amsl.com>; Wed, 22 Mar 2017 08:11:00 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC833126C25 for <ice@ietf.org>; Wed, 22 Mar 2017 08:10:59 -0700 (PDT)
X-AuditID: c1b4fb3a-0f3ff70000003958-5c-58d293feb294
Received: from ESESSHC008.ericsson.se (Unknown_Domain [153.88.183.42]) by (Symantec Mail Security) with SMTP id 6E.86.14680.EF392D85; Wed, 22 Mar 2017 16:10:57 +0100 (CET)
Received: from ESESSMB109.ericsson.se ([169.254.9.242]) by ESESSHC008.ericsson.se ([153.88.183.42]) with mapi id 14.03.0319.002; Wed, 22 Mar 2017 16:10:54 +0100
From: Ari Keränen <ari.keranen@ericsson.com>
To: "Pal Martinsen (palmarti)" <palmarti@cisco.com>
CC: "ice@ietf.org" <ice@ietf.org>
Thread-Topic: [Ice] TLS Candidates
Thread-Index: AQHSda7ktWsuPgxC8k2HyWHn5eDIT6Ft1QOAgBH+xgCAIW0UgA==
Date: Wed, 22 Mar 2017 15:10:53 +0000
Message-ID: <D1110CC0-8F14-43C6-97BB-D733C86B6A33@ericsson.com>
References: <148491768993.13355.16722423940569276403.idtracker@ietfa.amsl.com> <9731EE32-8E08-447A-B028-A9B57ADD1A99@cisco.com> <CAOW+2dvSrGmwf53M-7qUc_p-gxEVNApNxqOeVBJ+JMwPsXiM=g@mail.gmail.com> <BF168044-46C1-48C2-BC6C-6C606722CBAE@cisco.com>
In-Reply-To: <BF168044-46C1-48C2-BC6C-6C606722CBAE@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.150]
Content-Type: text/plain; charset="utf-8"
Content-ID: <470F357BB33FCA458CB5F220484866F7@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAIsWRmVeSWpSXmKPExsUyM2K7li7jlEsRBmfWGFt8u1Br8f76ShYH Jo8pvzeyeixZ8pMpgCmKyyYlNSezLLVI3y6BK2PPtyUsBT80KhrvzGBrYPyg3sXIySEhYCLx +s8+5i5GLg4hgXWMEmuv3WEHSQgJLGGUaL1iD2KzCdhKPGndxwpiiwgYSzQfOQpUw8HBLKAo 8XKvGkhYGMj8c3MXE0SJksT8Cxugyp0kpl9axApSziKgKtF5TBokzCtgL/HkSQM7xNrfjBLX n+xnBElwAq16vusrM4jNKCAm8f3UGrCZzALiEreezGeCuFlAYsme88wQtqjEy8f/WCFsJYkV 2y8xQpymKbF+lz5Eq7XE8pl3WCBsRYkp3Q/ZIW4QlDg58wnLBEaxWUg2zELonoWkexaS7llI uhcwsq5iFC1OLS7OTTcy0kstykwuLs7P08tLLdnECIyng1t+W+1gPPjc8RCjAAejEg9vwcRL EUKsiWXFlbmHGCU4mJVEeJ+BhHhTEiurUovy44tKc1KLDzFKc7AoifM67LsQISSQnliSmp2a WpBaBJNl4uCUamCsfbj++x1rQw/BuM3nFI+9VtP5fipz6cmq73F/fBY9Z37geD/WtG1/qeuF 23dSty47Gaz+q+PxHCvmyifKOx1Tp4fnGvYf2OPG67tvuvmbVXxZdc+mqufKHFpXVXtUy543 7dqtpTZVF2wSs+cqG3xuDFfgM77nEuz/qIBxy+wNfyK+Nwp/bbNTYinOSDTUYi4qTgQAQWut SKMCAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/KJeItTjRFJeEXc7DWjFko3faUn0>
Subject: Re: [Ice] TLS Candidates
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Mar 2017 15:11:02 -0000

Hi Pål-Erik et al,

Indeed there seems to be interest in this topic. In order to progress on this, while the topic is in our charter, we would eventually need a new milestone for it. Right now there has been few individuals who agree this is an interesting topic, but would be good to have more people voice out on the list that they consider this important.

Even though we don't have an ICE meeting at Chicago, you could consider having a side meeting to get more folks involved.


Cheers,
Ari

> On 01 Mar 2017, at 10:43, Pal Martinsen (palmarti) <palmarti@cisco.com> wrote:
> 
> Hi,
> 
> Seems like we have rough consensus that this is something that is useful.
> 
> 
> We currently have:
> - A problem that the WG is willing to work on and solve.
> - A draft that describes a possible solutions (Text and other drafts are of-course welcome).
> - A working implementation. (Library is open source, no open source client uses it yet..)
> - Discussion on list on whats working and whats not. 
> 
> Seems like a good recipe for a RFC.
> 
> What er our options to speed up the process since we are not meeting during the next IETF?
> There is no need to rush, but always good to get work done and finished. Especially since this touches on connectivity and not optimisation. 
> 
> .-.
> Pål-Erik
> 
>> On 17 Feb 2017, at 22:55, Bernard Aboba <bernard.aboba@gmail.com> wrote:
>> 
>> I have read this draft, and like it.  In practice there are enough customers restricting connectivity via UDP or TLS to make it worthwhile to implement TLS candidates.
>> 
>> My experience is that customers who only allow TLS to port 443 also tend to impose other restrictions, such as forcing connections through an HTTPS proxy of some kind.  So the considerations discussed in Section 6 are quite important. 
>> 
>> On Mon, Jan 23, 2017 at 11:28 AM, Pal Martinsen (palmarti) <palmarti@cisco.com> wrote:
>> Hi all,
>> 
>> There is a need for TLS candidates. We did an implementations, so we thought is was a good idea to write up a draft.
>> 
>> Is this something others are interested in as well?
>> (As there seems to be no ICE meeting next IETF it would be nice to get the discussion started on the list)
>> 
>> .-.
>> Pål-Erik
>> 
>>> Begin forwarded message:
>>> 
>>> From: <internet-drafts@ietf.org>
>>> Subject: New Version Notification for draft-martinsen-ice-tls-candidates-00.txt
>>> Date: 20 January 2017 at 14:08:09 GMT+1
>>> To: Nathan Buckles <nbuckles@cisco.com>, Paal-Erik Martinsen <palmarti@cisco.com>
>>> 
>>> 
>>> A new version of I-D, draft-martinsen-ice-tls-candidates-00.txt
>>> has been successfully submitted by Paal-Erik Martinsen and posted to the
>>> IETF repository.
>>> 
>>> Name:
>>> draft-martinsen-ice-tls-candidates
>>> Revision:
>>> 00
>>> Title:
>>> TLS Candidates for ICE
>>> Document date:
>>> 2017-01-20
>>> Group:
>>> Individual Submission
>>> Pages:
>>> 6
>>> URL:            https://www.ietf.org/internet-drafts/draft-martinsen-ice-tls-candidates-00.txt
>>> Status:         https://datatracker.ietf.org/doc/draft-martinsen-ice-tls-candidates/
>>> Htmlized:       https://tools.ietf.org/html/draft-martinsen-ice-tls-candidates-00
>>> 
>>> 
>>> Abstract:
>>>   This document introduces TLS candidates to ICE.
>>> 
>>> 
>>> 
>>> 
>>> Please note that it may take a couple of minutes from the time of submission
>>> until the htmlized version and diff are available at tools.ietf.org.
>>> 
>>> The IETF Secretariat
>>> 
>> 
>> 
>> _______________________________________________
>> Ice mailing list
>> Ice@ietf.org
>> https://www.ietf.org/mailman/listinfo/ice
>> 
>> 
> 
> _______________________________________________
> Ice mailing list
> Ice@ietf.org
> https://www.ietf.org/mailman/listinfo/ice