Re: [MMUSIC] Roman Danyliw's Discuss on draft-ietf-mmusic-ice-sip-sdp-37: (with DISCUSS and COMMENT)

Christer Holmberg <christer.holmberg@ericsson.com> Tue, 13 August 2019 04:19 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2696C12006F; Mon, 12 Aug 2019 21:19:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E4TBGfgO6lK8; Mon, 12 Aug 2019 21:19:08 -0700 (PDT)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150078.outbound.protection.outlook.com [40.107.15.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53BCA12006B; Mon, 12 Aug 2019 21:19:08 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FZxPWwjQZu8hq23qVZ16XTm2yzjwU7GDZeQoSNoZa1eJi7CVBZSq+3ggaIrxi2b1H9xJQS5DaqWxkwqNENKVvG+ugR02zQom+AuSgrCc2SQkL4P/U+wSxZn1ugcQX8YdhZ6rkpeWGGT43fmn3MnWD2iSFYIDLJBseBpdDXWJE1QUkrRf7DIH6jS2Pn70MUVxprVIMBab35s3P5JNJcWo9uGy77H5q9FnNHqlYWSvNIxCWcnwXYIO35jN+jGfgXoi+yui+71wfvyua4OomxnvXdoy8D0s17RIF6XpffivAgaDAzpLTMJz9Qm+O/hR+DouzWFnmsPrgHUll/wW3wYK3A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=brSKrjbRQAWfwrjOqFutTrfNt/9AM/XgPdwPoF0Xom4=; b=LabnlvoPxKwEeHcEsytK+d+ZaRS/X7ECAKabNrIvnbrnx+hU4QtyTLajwi1DiFwRFJWWAXv37JC3Nsg/sPqr05OVMZbMuQ4QuaDKWWJGWRE8izWxx0QsGo9WrGJCJ7HNgIt9tIM+OH5g6xK1et0dpjsmloMjjiNOECfR0fXeFw0juFKIFnyE8jqvNX525R1ans/G/tyxuzzdv6uwlYJ685eyIwm6q2iW4mauoMw8HKKNEaREBmLy+FceqBgeAMI2ExHRO/raNgWpAN1SLjJZ21naOxiFzeWWYmoQGtdFG1vVxc8Lj4PonDpl9Ibk8JPYi83zNllGoAHtZvVgOX+Zrw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=brSKrjbRQAWfwrjOqFutTrfNt/9AM/XgPdwPoF0Xom4=; b=J0n4A6pLwc/j/ZjZXiK3LFnJLBaN1z/3nv25jEjq4tfDVTTFYT3YFVL8/nPYYNRI+v9D0i873J2IoZpWAz1d6xDpc+w1SHjzToqlM3B1pBxAfm7k4MROPr4Uw5o1BuqHxtNbx56fgBUPjcZCfXQY+uiCKx3vCNKj7ySlkQUufkk=
Received: from HE1PR07MB3161.eurprd07.prod.outlook.com (10.170.245.23) by HE1PR07MB3259.eurprd07.prod.outlook.com (10.170.246.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.13; Tue, 13 Aug 2019 04:19:05 +0000
Received: from HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::ec0d:f9d3:7159:ba7]) by HE1PR07MB3161.eurprd07.prod.outlook.com ([fe80::ec0d:f9d3:7159:ba7%6]) with mapi id 15.20.2178.013; Tue, 13 Aug 2019 04:19:05 +0000
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Roman Danyliw <rdd@cert.org>, Adam Roach <adam@nostrum.com>, The IESG <iesg@ietf.org>
CC: "fandreas@cisco.com" <fandreas@cisco.com>, "mmusic-chairs@ietf.org" <mmusic-chairs@ietf.org>, "mmusic@ietf.org" <mmusic@ietf.org>, "draft-ietf-mmusic-ice-sip-sdp@ietf.org" <draft-ietf-mmusic-ice-sip-sdp@ietf.org>
Thread-Topic: Roman Danyliw's Discuss on draft-ietf-mmusic-ice-sip-sdp-37: (with DISCUSS and COMMENT)
Thread-Index: AQHVS/6ufVUUgufL4kCmQpKJywP7DqbwFEiAgAGIEwCAACUnAIAASXeAgAYkdYCAAFPvcA==
Date: Tue, 13 Aug 2019 04:19:05 +0000
Message-ID: <HE1PR07MB316110A259D61D3C2492BCE793D20@HE1PR07MB3161.eurprd07.prod.outlook.com>
References: <156505852285.2142.10774832459273251927.idtracker@ietfa.amsl.com> <d9877c1a-e36e-7e53-ce72-433f23090687@nostrum.com> <83DA6259-42DE-4A2F-94AB-DE2735FAE743@ericsson.com> <F196E71C-5D41-40CC-9615-D88A0DD8E991@ericsson.com> <359EC4B99E040048A7131E0F4E113AFC01B3403075@marchand> <359EC4B99E040048A7131E0F4E113AFC01B34054A4@marchand>
In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01B34054A4@marchand>
Accept-Language: en-US
Content-Language: fi-FI
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=christer.holmberg@ericsson.com;
x-originating-ip: [79.134.118.162]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c3e426f3-89f8-44f4-6af1-08d71fa56144
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:HE1PR07MB3259;
x-ms-traffictypediagnostic: HE1PR07MB3259:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <HE1PR07MB3259C70F27ADFF77D1D4925C93D20@HE1PR07MB3259.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 01283822F8
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(376002)(39860400002)(396003)(136003)(366004)(189003)(199004)(66066001)(316002)(4326008)(66446008)(14444005)(52536014)(66556008)(66476007)(64756008)(186003)(66946007)(76116006)(33656002)(256004)(6506007)(71200400001)(110136005)(71190400001)(26005)(7736002)(305945005)(53936002)(7696005)(54906003)(486006)(478600001)(25786009)(3846002)(6116002)(9686003)(102836004)(86362001)(14454004)(6306002)(81156014)(966005)(44832011)(55016002)(81166006)(446003)(11346002)(76176011)(74316002)(8936002)(99286004)(2906002)(6436002)(476003)(8676002)(5660300002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3259; H:HE1PR07MB3161.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: Vp8W2UHIRinGevrZgdijirf2tFqujCTERYUV+jwUTCbsd5rIug5L09UWW6TEEwk470BGC+Ch6VT3+MDhITOYBR33Qvef6ia3e9Tzo9K7l8LO72tx2Tus3cK34JC56otUclvsQC1NBCA9ymb50JCbGY2KzYgz8vSMR0DZMrpt0nnKDGZYrEbj7has3HSqDdWxdsIBNslaIDKjzqGV3atMsFzk0pMqeET3hA8L9tIidWrgNy1xUN35FeN/Uxi11wMVPtNy1mBO8P/F0uWh1WH0tk6eeXzzEO1WOCjwDVjMzZmnPK/lQduwW1E32d/nYcA4n0fzY3yYvBxx73Ppt92xbLM5+T8fHM5+0dPFeZ6Xk6eLwhlAWL6zie3gMurTIsXD5qCrz0UdOcueH0ELzbLkX/xp7kVYo9Sw0KgeZz3EXpU=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c3e426f3-89f8-44f4-6af1-08d71fa56144
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2019 04:19:05.5234 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: g0zm7eahcZ+j9Bysf096oFlhwTEg3idQSDss0gQc/GsiM8dr3fXF3U3lDxOxjMaKcGkVtefUHOR0ZpacxdaZqt6FwrK27CPG47wxtkZo0GQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3259
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/HI-alA8HEJE5GYcXpKRAVys19QU>
Subject: Re: [MMUSIC] Roman Danyliw's Discuss on draft-ietf-mmusic-ice-sip-sdp-37: (with DISCUSS and COMMENT)
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Aug 2019 04:19:11 -0000

Hi Roman,



>>> (4) Section 8.  Is there a reason why the security considerations from
>>> RFC8445 are not noted as also applying (e.g., Section 19.1 - .4.
>>>
>>> Would the addition of text at the top of section 8 that says "Please
>>> note that the security considerations from sections 19.1 through 19.4 of
>>> [RFC8445] also apply to this document." address your concern?
>>>
...
>
> This pull request:
>
> https://protect2.fireeye.com/url?k=493cd979-15b60db8-493c99e2-863d9bcb726f-ec503dd28b20c537&q=1&u=https%3A%2F%2Fgithub.com%2FsuhasHere%2Fice-sip-sdp%2Fpull%2F18%2Ffiles
>
> appears to have the following addition to address this issue but it didn't make it to -38:
>
> <snip>
>      <t>
>        The generic ICE security considierations are defined in <xref target="RFC8445"/>, and the 
>        generic SDP offer/answer security considerations are defined in <xref target="RFC3264"/>. The 
>        security considerations also apply to implementations of this document.
>      </t>
> </snip>
>
> Also, s/considierations/considerations/
>
> Can you please add in this text.

Correct. Suhas had to do some "manual" work when merging the pull requests, and the changes to the Security Considerations got lost for some reason.

There is now a new pull request, more or less a copy of the previous one, but also with some privacy text (requested by Benjamin), that will be used for the next version:

https://github.com/suhasHere/ice-sip-sdp/pull/21

Sorry for the confusion.

Regards,

Christer