Re: [MMUSIC] Roman Danyliw's Discuss on draft-ietf-mmusic-ice-sip-sdp-37: (with DISCUSS and COMMENT)

Christer Holmberg <christer.holmberg@ericsson.com> Tue, 06 August 2019 13:02 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 582C812034A; Tue, 6 Aug 2019 06:02:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T4C9dDW61QDG; Tue, 6 Aug 2019 06:02:35 -0700 (PDT)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150078.outbound.protection.outlook.com [40.107.15.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55EF112018E; Tue, 6 Aug 2019 06:02:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nDrsAfBuV3kUvafcB8vB5oxv62Ge9yuLoTG0Qzffl1r672Gn+lAHv5B11mvlKTTyr1EvjUR6hKamjv28ukvUZ5nhcZVebtImfD0yh4BB2mVivn8e8eqMfHku0oqEk3qoiZtD92faCOIBYBwt60l7UOSMsleHTXVR4FLVkdl4Q4jBz8uPL9yIWXEyK8HUyZTdM+FRjuKe4cOfBEEYo+MYaCo2F83TNWGlzfUkbq8wHw4tcEylgz900/7iG2pU7hsBzh1TmPejcrUBa65a92PspQDCOxwq4elIDdE7T7txf0MRRSM/gS6A2xdlP4E1VmLTPzBF7PRfIDaUSIRSQjORFg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Wa77OoKpPYQYqGnSVF8fsoeONvQ2r1bpPu/j7iX/vgA=; b=UTeOW2S7aAAyPlWe2BReRliBB/APxOenM3hMZD//LTuXAwj2/DvbO3PxflV7Km5D/aMA84Rer9VjDgcfQeAYKxSEeCneok6PwPrRgAKajx6diyEXht2WpAQ3WiPcxXVz/m6Q26c+Es65ioXn+bZhg322uZv6blDO/S86UaP07MZfdOW+3A/UZtXeeoqF5H7AiYHzUsgvWdcWSptXEx6Fp/X8/KRfYgalV1+HpCOMW/u1izSnR6JgN36t+7mcoSml7Q7bvOiVEg0cFX24Dm3636C7JXopcKzfz1Rk5F4j4Scg7pfABW3UrL6/Qj8MJ0lUVZmUKop9nhW6KiSG+BWYxA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Wa77OoKpPYQYqGnSVF8fsoeONvQ2r1bpPu/j7iX/vgA=; b=BoHgy72r5wRkHqZHNzUsgNuRNp2I1huzwXl7se8N/lCdHPS6eyjbPE0g9hCdCxV8CM5KEC9H0KICuu0IqnHJf7ww9uC9YKSjhZ2fOydUwYMjbMnZUJVJIcDAyFJe37UlqFR/zvb3kD4qbmA0yX7xzWEceemJxRnVYUlC7YsMAPA=
Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3500.eurprd07.prod.outlook.com (10.170.247.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.11; Tue, 6 Aug 2019 13:02:33 +0000
Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::ec0d:f9d3:7159:ba7]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::ec0d:f9d3:7159:ba7%6]) with mapi id 15.20.2157.011; Tue, 6 Aug 2019 13:02:33 +0000
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Roman Danyliw <rdd@cert.org>, The IESG <iesg@ietf.org>
CC: "draft-ietf-mmusic-ice-sip-sdp@ietf.org" <draft-ietf-mmusic-ice-sip-sdp@ietf.org>, "mmusic-chairs@ietf.org" <mmusic-chairs@ietf.org>, "fandreas@cisco.com" <fandreas@cisco.com>, "mmusic@ietf.org" <mmusic@ietf.org>
Thread-Topic: Roman Danyliw's Discuss on draft-ietf-mmusic-ice-sip-sdp-37: (with DISCUSS and COMMENT)
Thread-Index: AQHVS/6ufVUUgufL4kCmQpKJywP7DqbuEVcw
Date: Tue, 06 Aug 2019 13:02:33 +0000
Message-ID: <HE1PR07MB3161315A543C3CBD5479C0CF93D50@HE1PR07MB3161.eurprd07.prod.outlook.com>
References: <156505852285.2142.10774832459273251927.idtracker@ietfa.amsl.com>
In-Reply-To: <156505852285.2142.10774832459273251927.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: fi-FI
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com;
x-originating-ip: [79.134.118.162]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c13f0cd4-b9ba-40b9-af37-08d71a6e589f
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:HE1PR07MB3500;
x-ms-traffictypediagnostic: HE1PR07MB3500:
x-microsoft-antispam-prvs: <HE1PR07MB3500CE7EF5EA185723E968D693D50@HE1PR07MB3500.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0121F24F22
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(376002)(346002)(39860400002)(136003)(396003)(199004)(189003)(186003)(8676002)(52536014)(81156014)(81166006)(25786009)(5660300002)(53936002)(99286004)(74316002)(305945005)(26005)(71190400001)(71200400001)(6436002)(54906003)(110136005)(256004)(316002)(7696005)(55016002)(14444005)(33656002)(76176011)(9686003)(2906002)(7736002)(6116002)(11346002)(486006)(446003)(14454004)(3846002)(76116006)(66066001)(44832011)(102836004)(478600001)(476003)(66556008)(64756008)(66446008)(66476007)(86362001)(6506007)(68736007)(8936002)(66946007)(4326008); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3500; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: zjb755kzrna2XPfIYzxlgaOpJC/DVPGV8vON2dNKpUnJutD1VFFMp/3XE+H+U5tXVIAxCllJ38Yvh5Xf8z53R45TEnM36VCiat/h8/nG4kNaETAIIsj+DZIrxTaO0sEPaE4kXj9KyuJI9sU7ClWFkTBvKDOaeA258J5w4BziFYqH1PxWkDYWy3Xjjpcx35pqdkIfEG8qELIeCgqvVYzGTZ/EwiNONSvB5UF9NSlKFVEpMcHrZ1SIP29yVBbfoA1WcjTGdZsNtSU1RIAwic9eaZJWIg7De681w5oRfD/LAlHVGoBktfaGmkH/1+4fUXhS6DXkNNyElFO6tHxYTciyahjMqytizIQ1E4x1Aj+yARVRSa7eK10LgvYXEqEn9fdutq649kVklXvKeMOOfgQ0Q9idddd/5P9oqmEPVJDUOtk=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c13f0cd4-b9ba-40b9-af37-08d71a6e589f
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Aug 2019 13:02:33.0940 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ihHEOu85qL+NPP2yPRe18Ep23fUhNSopxzNYH2axuLsIV2DVlfK1mUG09W7Mi3t1PNZqGQy4dSDZ90KijZdbEbthIZ+gFvdGHnfvAftQakA=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3500
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/-XCGnl2fdX54-a07y7ldmSAETHI>
Subject: Re: [MMUSIC] Roman Danyliw's Discuss on draft-ietf-mmusic-ice-sip-sdp-37: (with DISCUSS and COMMENT)
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Aug 2019 13:02:46 -0000

Hi Roman,

Thank You for the review! I will let someone that has more security expertise then I  have address your comments on section 8. For your other comments, please see inline.

----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

> (5) Section 3.2.6.  The example in this section is appreciated.  Additional text to explain what this example is showing would be helpful.

We will add text.

---

> (6) Section 3.4.1.2.1. Per “the offer MUST include the same set of ICE-related information that the offerer included in 
> the previous offer or answer”, what happens if the ICE information is different?

Depending on what is different the peer will either consider it a protocol error, or an ICE restart.

---

> (7) Section 3.4.1.2.2. Per “In addition, if the agent is controlling, it MUST include the ‘a=remote-candidates’ attribute for each data stream
> whose check list is in the completed state”, what is a ‘check list’ in this context?

There is a check list associated with each data stream (m= line). So, if the check list associated with a given data stream is in the completed state, the agent will include an a=remote-candidates attribute in the m= line associated with that check list/data stream.

The check list concept is described more in detail in RFC 8445 (it is not SDP specific).

---

>(8) Section 4.4. Per “If two data streams have identical ice-ufrag's, they MUST have identical ice-pwd's”, what happens if there are not identical?

It is a protocol error.

---

>(9) Section 4.4. Per “Its large upper limit allows for increased amounts of randomness to be added over time”, what is the time horizon being mentioned? 
>Is this saying that in the future, longer password and users could be adopted?

Yes.

>(10) Section 4.5.  Unlike the other sections in 4.*, this one doesn’t have an example.

Don't know what happened - it was supposed to have one 😊 I will add an example.

--

>(13) Appendix A.  (Just as Ben pointed out in his DISCUSS for the example in Section 4.6) Shouldn’t the examples in 
>this appendix include a “a=ice-options:ice2” per the guidance in Section 3.2.1.5?

Yes. We will add the attribute.

---

Regards,

Christer