Re: [MMUSIC] [rtcweb] BUNDLE: Attempting to resolve security consideration

Christer Holmberg <christer.holmberg@ericsson.com> Tue, 28 March 2017 15:10 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84254128B88; Tue, 28 Mar 2017 08:10:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.22
X-Spam-Level:
X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FM80YjOarC-c; Tue, 28 Mar 2017 08:09:58 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C203A126DC2; Tue, 28 Mar 2017 08:09:57 -0700 (PDT)
X-AuditID: c1b4fb3a-4d72198000003958-73-58da7cc360cb
Received: from ESESSHC010.ericsson.se (Unknown_Domain [153.88.183.48]) by (Symantec Mail Security) with SMTP id 2C.B9.14680.3CC7AD85; Tue, 28 Mar 2017 17:09:56 +0200 (CEST)
Received: from ESESSMB109.ericsson.se ([169.254.9.242]) by ESESSHC010.ericsson.se ([153.88.183.48]) with mapi id 14.03.0339.000; Tue, 28 Mar 2017 17:09:54 +0200
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Eric Rescorla <ekr@rtfm.com>, Magnus Westerlund <magnus.westerlund@ericsson.com>
CC: "rtcweb@ietf.org" <rtcweb@ietf.org>, "mmusic (E-mail)" <mmusic@ietf.org>
Thread-Topic: [MMUSIC] [rtcweb] BUNDLE: Attempting to resolve security consideration
Thread-Index: AQHSnJ+WU4+3m4pcF0qxfvJ7Gpxl/aGnZncAgAFSZQCAAAfjgIAAC4yAgAGlD6A=
Date: Tue, 28 Mar 2017 15:09:54 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B4CB32788@ESESSMB109.ericsson.se>
References: <8b2b8754-b10c-6f8e-6262-95cd25374a18@ericsson.com> <CABcZeBMTW48fj=1EMJ3uJCdVqEiYuPk+rDy6h_7W=jh0fu7tNQ@mail.gmail.com> <0827af95-b755-9730-6605-5146967760e7@ericsson.com> <CABcZeBPcqz+NzKp=c5zZd_aDqYHjC6AhOyBMjsOdpKEjGF08qw@mail.gmail.com> <a7070e7a-81dc-ab68-c59b-d4df367029c2@ericsson.com> <CABcZeBM6LMJB2f10+F1jQNinKe4nkNGCRpT6VN1tZPXCLskxHQ@mail.gmail.com> <f390877e-d6be-11cd-8a35-f68546ae4115@ericsson.com> <CABcZeBNAU0eo+nP02LRjP3Cybtrm487wQMtq34zhmeaB+=uHiQ@mail.gmail.com> <29d1f31b-402c-5f31-8eee-f1f066ddce29@ericsson.com> <CABcZeBP_c90N+bWiQXTg8-VvwY4Vme1T0v88DQ4DSW_KnG_Cuw@mail.gmail.com> <314d5af9-018d-8d15-7629-dbcc62fe5a2e@ericsson.com> <8743844f-3294-ec11-47d5-d642adf5fffc@ericsson.com> <CABcZeBPiexFiho7A5pVDt4zu9n3K1sY9+HMCcqUd+FBgF8Hb=g@mail.gmail.com> <d7b1b008-70f8-9991-7e69-f7cc0496990f@ericsson.com> <CABcZeBNX+Ry7cARHCf5PD5VJ=UB9FBu-MvxUra2TBSTzO-FjGQ@mail.gmail.com>
In-Reply-To: <CABcZeBNX+Ry7cARHCf5PD5VJ=UB9FBu-MvxUra2TBSTzO-FjGQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.148]
Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B4CB32788ESESSMB109erics_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJIsWRmVeSWpSXmKPExsUyM2K7ge6RmlsRBkdW8lqseH2O3WLq8scs Fmv/tbM7MHssWfKTyWPy4zbmAKYoLpuU1JzMstQifbsErox5+1azFKxKrpg3fRJTA+OFhC5G Tg4JAROJY79esXUxcnEICaxnlFh85xwzhLOEUWLFhh1AGQ4ONgELie5/2iANIgJhEqtvnWEE sZkFfCSubFjFDmILC4RKPDt+lgWm5siNHUwQtp/E50+zwOpZBFQlzi/bBRbnFfCV6Nq3nBVi 1yp2ibtHWsGaOQUCJfb9OARWxCggJvH91BomiGXiEreezGeCuFpAYsme88wQtqjEy8f/WCFs JYnGJU9YIerzJU7v/McCsUxQ4uTMJywTGEVmIRk1C0nZLCRls4BeZhbQlFi/Sx+iRFFiSvdD dghbQ6J1zlx2ZPEFjOyrGEWLU4uLc9ONjPRSizKTi4vz8/TyUks2MQIj7OCW31Y7GA8+dzzE KMDBqMTD+0DqZoQQa2JZcWXuIUYJDmYlEd5v3EAh3pTEyqrUovz4otKc1OJDjNIcLErivA77 LkQICaQnlqRmp6YWpBbBZJk4OKUaGBX5rvUaaLzdsVqdbdXdQ8xPn7WlvPQ+Yt9RGa9uv+OB UGp4osf1xZXxGwVXs3cKn2gLCrfeGpfoX+/rbOH9JPZz3u3qvI+3OE/UfPt+IlelZLJiQH/d /tvVf5TeNN3LjJ1WviPonajJRzPGNecO7z320zUhcIKJbsjU27ruJ6qEg7d6Mv53VWIpzkg0 1GIuKk4EAMvMqPCsAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/A0m91DWxU8_LR-MgBB7DMYn1poU>
Subject: Re: [MMUSIC] [rtcweb] BUNDLE: Attempting to resolve security consideration
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Mar 2017 15:10:01 -0000

Hi Ekr,

Just to verify, are you now ok with the text in the PR?

Regards,

Christer

From: mmusic [mailto:mmusic-bounces@ietf.org] On Behalf Of Eric Rescorla
Sent: 27 March 2017 19:02
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
Cc: rtcweb@ietf.org; mmusic (E-mail) <mmusic@ietf.org>
Subject: Re: [MMUSIC] [rtcweb] BUNDLE: Attempting to resolve security consideration

LGTM

On Mon, Mar 27, 2017 at 10:21 AM, Magnus Westerlund <magnus.westerlund@ericsson.com<mailto:magnus.westerlund@ericsson.com>> wrote:
Den 2017-03-27 kl. 09:52, skrev Eric Rescorla:


On Sun, Mar 26, 2017 at 1:41 PM, Magnus Westerlund
<magnus.westerlund@ericsson.com<mailto:magnus.westerlund@ericsson.com> <mailto:magnus.westerlund@ericsson.com<mailto:magnus.westerlund@ericsson.com>>>
wrote:

    Hi,

    I have attempted to address the issue discussed below by
    reformulating that paragraph to read:

       When the BUNDLE extension is used, the set of configurations of the
       security mechanism used in all the bundled media descriptions will
       need to be compatible for simultaneously use, at least per direction
       or endpoint.


I'm not sure I understand what "compatible for simultaneously use" means.

That if one have multiple configurations they can co-exist in the same BUNDLED context beging used in parallel. Is this better?

   When the BUNDLE extension is used, the set of configurations of the
   security mechanism used in all the bundled media descriptions will
   need to be compatible so that they can simultaneously used in
   parallel, at least per direction or endpoint.



Cheers


Magnus Westerlund

----------------------------------------------------------------------
Media Technologies, Ericsson Research
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287<tel:%2B46%2010%207148287>
Färögatan 6                 | Mobile +46 73 0949079<tel:%2B46%2073%200949079>
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com<mailto:magnus.westerlund@ericsson.com>
----------------------------------------------------------------------