RE: [MMUSIC] Question to MIKEY embedding with kmgmt-ext.

Fries Steffen <steffen.fries@siemens.com> Thu, 14 April 2005 06:30 UTC

Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA06840 for <mmusic-web-archive@ietf.org>; Thu, 14 Apr 2005 02:30:58 -0400 (EDT)
Received: from megatron.ietf.org ([132.151.6.71]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DLy2N-0001hE-IL for mmusic-web-archive@ietf.org; Thu, 14 Apr 2005 02:41:15 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DLxnp-0002Mh-W3; Thu, 14 Apr 2005 02:26:14 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DLxnm-0002Kr-O4 for mmusic@megatron.ietf.org; Thu, 14 Apr 2005 02:26:10 -0400
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA06468 for <mmusic@ietf.org>; Thu, 14 Apr 2005 02:26:01 -0400 (EDT)
Received: from david.siemens.de ([192.35.17.14]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DLxxa-0001YY-Pi for mmusic@ietf.org; Thu, 14 Apr 2005 02:36:19 -0400
Received: from mail2.siemens.de (mail2.siemens.de [139.25.208.11]) by david.siemens.de (8.12.6/8.12.6) with ESMTP id j3E6Pt3D009268; Thu, 14 Apr 2005 08:25:55 +0200
Received: from mchp9daa.mch.sbs.de (mchp9daa.mch.sbs.de [139.25.137.99]) by mail2.siemens.de (8.12.6/8.12.6) with ESMTP id j3E6PsUk005272; Thu, 14 Apr 2005 08:25:54 +0200
Received: by mchp9daa.mch.sbs.de with Internet Mail Service (5.5.2657.72) id <2SQ5JZT4>; Thu, 14 Apr 2005 08:25:54 +0200
Message-ID: <AFE91B59A185A5439840B43AB791904701744D4A@mchp997a.mch.sbs.de>
From: Fries Steffen <steffen.fries@siemens.com>
To: "Karl Norrman (KI/EAB)" <karl.norrman@ericsson.com>
Subject: RE: [MMUSIC] Question to MIKEY embedding with kmgmt-ext.
Date: Thu, 14 Apr 2005 08:25:53 +0200
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2657.72)
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Scan-Signature: b5d20af10c334b36874c0264b10f59f1
Cc: "Elisabetta Carrara (AL/EAB)" <elisabetta.carrara@ericsson.com>, mmusic@ietf.org
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
Sender: mmusic-bounces@ietf.org
Errors-To: mmusic-bounces@ietf.org
X-Spam-Score: 0.0 (/)
X-Scan-Signature: cf3becbbd6d1a45acbe2ffd4ab88bdc2

Hi Karl,

by thinking about your anwer, there are still open questions for me. 

> As we understand the offer/answer model (rfc3264), you should 
> keep the parameters that you do not wish to change constant 
> in the re-INVITE. So we also assume that if you try to comply 
> to the offer/answer model, you will include the MIKEY 
> parameter, but "ignore" it at the receiver during the SDP 
> processing as it has not been changed.

[stf] At the first glimpse this would mean that a sender of a MIKEY message
should store the MIKEY container in some place for later reuse, but this is
not really possible as parameter like timestamp and maybe RAND. Those may
need to change (otherwise, how could you detect replay?). From that point of
view the receiver of the MIKEY message needs to process the MIKEY container
in any case. 
Would'nt it be more efficient to not sent the MIKEY container if non of the
cryptographic context parameter has changed? This would save the processing
at sender and receiver and also bandwidth.

Regards
	Steffen




> 
> Regarding your question in your previous mail, the answer is no.
> 
> Regards,
> MIKEY-people
> 
> > ---------------------------- Original Message
> > ----------------------------
> > Subject: [MMUSIC] Question to MIKEY embedding with kmgmt-ext.
> > From:    "Fries Steffen" <steffen.fries@siemens.com>
> > Date:    Mon, April 11, 2005 8:55 am
> > To:      elisabetta.carrara@ericsson.com
> > Cc:      mmusic@ietf.org
> > --------------------------------------------------------------
> > ------------
> > 
> > Hi Elisabetta,
> > 
> > recently a question came up in the usage of the key management 
> > extentions for SIP to use MIKEY:
> > 
> > Section 3.1.2 of draft-ietf-mmusic-kmgmt-ext-14 contains 
> the following
> > statement:
> > 
> > "If the key management rejects the offer and the session 
> needs to be 
> > aborted, the answerer SHOULD return a "488 Not Acceptable Here" 
> > message, optionally also including one or more Warning 
> headers (a 306 
> > "Attribute not understood" when one of the parameters is not 
> > supported, and a 399 "Miscellaneous warning" with arbitrary 
> > information to be presented to a human user or logged, see Section 
> > 20.43 in [SIP]). Further details about the cause of failure MAY be 
> > described in an included message from the key management 
> protocol. The 
> > session is then aborted (and it is up to local policy or 
> end user to 
> > decide how to continue)."
> > 
> > Concerning the sentence in bold (The sentence before the 
> last sentence 
> > in quotes), how does it do that in the following scenario?:
> > A UA receives an INVITE request containing an SDP offer 
> with a MIKEY 
> > I_MESSAGE that is for some reason unacceptable. The 
> receiving UA will 
> > return a 488 response, which does not contain an SDP 
> answer. Therefore 
> > there is no way of embedding a MIKEY R_MESSAGE to indicate 
> the error. 
> > Is there any way to signla the MIKEY error in this case?
> > 
> > Regards
> > 	Steffen
> > 
> > 
> > _______________________________________________
> > mmusic mailing list
> > mmusic@ietf.org
> > https://www1.ietf.org/mailman/listinfo/mmusic
> > 
> > 
> > 
> > 
> 

_______________________________________________
mmusic mailing list
mmusic@ietf.org
https://www1.ietf.org/mailman/listinfo/mmusic