Re: [MMUSIC] draft-uberti-mmusic-nombis and (D)TLS

Roman Shpount <roman@telurix.com> Mon, 23 March 2015 22:04 UTC

Return-Path: <roman@telurix.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 596EE1A1B92 for <mmusic@ietfa.amsl.com>; Mon, 23 Mar 2015 15:04:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.778
X-Spam-Level:
X-Spam-Status: No, score=-0.778 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, J_CHICKENPOX_110=0.6, J_CHICKENPOX_14=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BRm62d-9nzN9 for <mmusic@ietfa.amsl.com>; Mon, 23 Mar 2015 15:04:22 -0700 (PDT)
Received: from mail-ig0-f178.google.com (mail-ig0-f178.google.com [209.85.213.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13F9E1A1BA4 for <mmusic@ietf.org>; Mon, 23 Mar 2015 15:04:22 -0700 (PDT)
Received: by igbqf9 with SMTP id qf9so51445378igb.1 for <mmusic@ietf.org>; Mon, 23 Mar 2015 15:04:21 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=t28d30TjJ4q1lIxAhCE0aV3XblEpB1fbpSGpNzvBEtA=; b=gI3FUte2s0/MYUbRm++WpH2K0Ts/SHowFmhvzav+wcfZPxo/GhbAtZEKrrsd+T46pz wlba5lb/bazRqU1EIR6vpQmd1Xn2JDvpHuAyiCH4CG7wW0E7jy1MvtOZenP3abU614q0 89TIOjXU85D59pqiNXAtWvL5gt5PTpW6LmLCrf1iFCcRc2l71vUqavrXC6Oei/8D+NzM 4qzis2q3oggVearCiAW9fds1cjEPSuIvTNU5piO4rOztw5ZnH81yWWQE0tPs1kSu+mbv ohT2g/zJUGZXV7Sv9axHNDRZ4sA69+SYVSrf2iua0DgI7pDF1bMC483oT+l3sybm9rOb riIA==
X-Gm-Message-State: ALoCoQmykD36xRr+rud4jXBFMJVK+vBr8saesfx6CQr6hDUWXpVSiEnzd3HIJJ+tP19avVPJuHJe
X-Received: by 10.50.143.36 with SMTP id sb4mr17709905igb.0.1427148261516; Mon, 23 Mar 2015 15:04:21 -0700 (PDT)
Received: from mail-ig0-f177.google.com (mail-ig0-f177.google.com. [209.85.213.177]) by mx.google.com with ESMTPSA id z7sm1449837iod.12.2015.03.23.15.04.19 for <mmusic@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 23 Mar 2015 15:04:20 -0700 (PDT)
Received: by igbud6 with SMTP id ud6so55770913igb.1 for <mmusic@ietf.org>; Mon, 23 Mar 2015 15:04:19 -0700 (PDT)
MIME-Version: 1.0
X-Received: by 10.42.247.68 with SMTP id mb4mr22254580icb.2.1427148259198; Mon, 23 Mar 2015 15:04:19 -0700 (PDT)
Received: by 10.36.20.10 with HTTP; Mon, 23 Mar 2015 15:04:19 -0700 (PDT)
In-Reply-To: <CAOJ7v-3NWNu8SLzv1VMuvj-FoAmUCfZ=f+Pa7ggLjPRctnhQhw@mail.gmail.com>
References: <550E0F1A.2090303@ericsson.com> <BLU406-EAS2095DB481DB8142DA8BC0BB930C0@phx.gbl> <7594FB04B1934943A5C02806D1A2204B1D7729E2@ESESSMB209.ericsson.se> <CAD5OKxtB5qWQ1yYdGEOdKD55y0HPTGkY_hP0uV=PXEkRnZfcBg@mail.gmail.com> <CAOJ7v-0pQ=smq1EzpMrQBULm+mjscDXf=fpapdvMWtVX4FkWVw@mail.gmail.com> <CAD5OKxu5LVFGqyixLzG4W-FBYRa9VFm6NmAdCmD0_ccDrOJo2A@mail.gmail.com> <CAOJ7v-3NWNu8SLzv1VMuvj-FoAmUCfZ=f+Pa7ggLjPRctnhQhw@mail.gmail.com>
Date: Mon, 23 Mar 2015 18:04:19 -0400
Message-ID: <CAD5OKxva22u=wxUrxKyUJ86On=bOw0o7170suVXk4QngoFdz-Q@mail.gmail.com>
From: Roman Shpount <roman@telurix.com>
To: Justin Uberti <juberti@google.com>
Content-Type: multipart/alternative; boundary="90e6ba1ef2ea0812770511fbd90b"
Archived-At: <http://mailarchive.ietf.org/arch/msg/mmusic/31XCfZwrrB0-kmWaOFmGIflDNXE>
Cc: mmusic <mmusic@ietf.org>, Ari Keränen <ari.keranen@ericsson.com>, "draft-uberti-mmusic-nombis@tools.ietf.org" <draft-uberti-mmusic-nombis@tools.ietf.org>, Christer Holmberg <christer.holmberg@ericsson.com>
Subject: Re: [MMUSIC] draft-uberti-mmusic-nombis and (D)TLS
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2015 22:04:26 -0000

On Mon, Mar 23, 2015 at 5:54 PM, Justin Uberti <juberti@google.com> wrote:

>
> No, ICE restart does not rehandshake (it's orthogonal). There is currently
> no SDP parameter defined that allows for a rehandshake, except for offering
> a new fingerprint; use of the a=connection attribute is explicitly
> forbidden by 5763.
>

I think this was changed in the latest data channel draft, where it is
specified that fingerprint must not change unless the underlying transport
changes as well. The problem is that you cannot start a new DTLS session
unless it can be de-muxed from the previous sessions based on the transport
parameters. This means a new "virtual" channel for each new DTLS setup.
Which in turn means that there should be a way to identify which "virtual"
channel each packet belongs to based on the 5-tuple, with information
received during ICE handshake used to associate each 5-tuple with the
specific "virtual" channel. More then one 5-tuple can form a single virtual
channels but each 5-tuple can belong to one "virtual" channel at any given
time.


>
>> When you say m= line, how would the end point associate received packets
>> with the specific m= line? To handle forks this has to be local m= line and
>> remote m=line pair, but what does this translate into on the RTP/DTLS
>> transport layer? Do you propose to associate based on remote ufrag, local
>> ufrag and the set of local candidates associated with this m= line? Would
>> it not be simpler to prohibit ufrag reuse?
>>
>
> For unbundled cases this is non-ambiguous. For bundled cases, there is the
> mid header extension.
>
>>
>>
How does the mid header extension helps with DTLS packet de-multiplexing in
cases of DTLS-SRTP handshake or data channel?
_____________
Roman Shpount