IETF Logo Mail Archive

Re: [MMUSIC] Draft new version: draft-ietf-mmusic-dtls-sdp-09

Roman Shpount <roman@telurix.com> Wed, 02 March 2016 16:26 UTC

Return-Path: <roman@telurix.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 310B81B2BF7 for <mmusic@ietfa.amsl.com>; Wed, 2 Mar 2016 08:26:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WV6pJBwtBq0r for <mmusic@ietfa.amsl.com>; Wed, 2 Mar 2016 08:26:51 -0800 (PST)
Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33B311B2BFD for <mmusic@ietf.org>; Wed, 2 Mar 2016 08:26:51 -0800 (PST)
Received: by mail-io0-x22a.google.com with SMTP id n190so61820697iof.0 for <mmusic@ietf.org>; Wed, 02 Mar 2016 08:26:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telurix-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=phiNwmP8tsoys2OmMw7mzVcrgHuGG58NJOMehVax04Y=; b=wECCuN3thjSWlMQa1lLi1kXYiu288XgwDufz//+Tga14PolFFROkL6g4bCWJsopsBK Z7qeuEnnU8nuaat+IK4uZmMxfE7QAgIlMxjNKokmbnAAxuZes+tNdj6zt7vLLhFmwy6o qPwPq3bVKgJV8PIQxABPSTfWRmuXWSgKnpYdHemRnOQunim+K1NQUZt7YItdMtVG1ajO xeBuWSY0RohfaNSu78u7GYg/fp+5JA9ZLAYf+uR6V5carEOqVmILOKKAMe4+JIE/BWuB nhN4SRMO+BxrDNKDqIxh4FoqTWVdAEPJQT4peDfTRcT6Gb4Fk7jJcNm2Fbq8od3MKkhS 1jUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=phiNwmP8tsoys2OmMw7mzVcrgHuGG58NJOMehVax04Y=; b=Kq0++PIUdMQWz4dSTTg2yZ/vsvjTLxBmdcGnf3p0GRNA4MJ4d/Sd+HQaAfHtKJojTq IqiVWgFR4mumZoG7HHZFdCSaRfxpaHHgskLUbG3JD3Q+mGL9+VO4RW0vxHi5VvND74ct rxsr6aaWlppxWwqQkKC4bpYnqWgakzwtO4UofmygVSJdDWQurtRZuWzGC2n5y7et4ZXu 9YGaqxIROIOzfNjY7EhKCXGqO7m/8+SPOlgLnTMDwe0CrvZSxfDB0uvmm4S+l/LCPdK6 puszTVB45XQ/R9B2g8+/tm/e44OBeBkd79ghlTTbWciNyO+2VTrlN0p35rbKghFbqAZx Nxdg==
X-Gm-Message-State: AG10YORx6L0mQKJttjVJyjv3TSbKj9lxeLCMdNiuerKvd2YPDEokwiNIBsFxARB8keyN3Q==
X-Received: by 10.107.14.66 with SMTP id 63mr32447768ioo.150.1456936010672; Wed, 02 Mar 2016 08:26:50 -0800 (PST)
Received: from mail-io0-f179.google.com (mail-io0-f179.google.com. [209.85.223.179]) by smtp.gmail.com with ESMTPSA id ie16sm1904103igb.11.2016.03.02.08.26.49 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 02 Mar 2016 08:26:49 -0800 (PST)
Received: by mail-io0-f179.google.com with SMTP id g203so264972557iof.2; Wed, 02 Mar 2016 08:26:49 -0800 (PST)
MIME-Version: 1.0
X-Received: by 10.107.132.12 with SMTP id g12mr31829119iod.145.1456936008623; Wed, 02 Mar 2016 08:26:48 -0800 (PST)
Received: by 10.36.105.77 with HTTP; Wed, 2 Mar 2016 08:26:48 -0800 (PST)
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B37E542C0@ESESSMB209.ericsson.se>
References: <7594FB04B1934943A5C02806D1A2204B37E45EA2@ESESSMB209.ericsson.se> <56D46C50.9060601@alum.mit.edu> <CABkgnnWxdbFmbeZaywyhrmXSkma1J0X1X+w-eDJRX5498_FYrw@mail.gmail.com> <56D6FDCA.5020802@alum.mit.edu> <7594FB04B1934943A5C02806D1A2204B37E542C0@ESESSMB209.ericsson.se>
Date: Wed, 02 Mar 2016 11:26:48 -0500
X-Gmail-Original-Message-ID: <CAD5OKxt4OhXaiNZxk-qC9Q9SMCZ+uzd-xdNs41T+i5kQ0iJYDw@mail.gmail.com>
Message-ID: <CAD5OKxt4OhXaiNZxk-qC9Q9SMCZ+uzd-xdNs41T+i5kQ0iJYDw@mail.gmail.com>
From: Roman Shpount <roman@telurix.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Content-Type: multipart/alternative; boundary="001a113ece604144f0052d135933"
Archived-At: <http://mailarchive.ietf.org/arch/msg/mmusic/p292_H5xwYLtMsb9p5pt0C-92rQ>
Cc: "mmusic-chairs@ietf.org" <mmusic-chairs@ietf.org>, "mmusic@ietf.org" <mmusic@ietf.org>, Paul Kyzivat <pkyzivat@alum.mit.edu>
Subject: Re: [MMUSIC] Draft new version: draft-ietf-mmusic-dtls-sdp-09
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Mar 2016 16:26:52 -0000

On Wed, Mar 2, 2016 at 11:25 AM, Christer Holmberg <
christer.holmberg@ericsson.com> wrote:

> Hi,
>
> >>>     One of the certificates received during the DTLS handshake MUST
> >>
> >> Note: While there are multiple certificates in a DTLS handshake, ONLY
> >> the end-entity certificate should be checked.  Checking against other
> >> certificates would be a serious bug and a huge security vulnerability.
> >
> > It would be good to say that somewhere.
>
> Should that be said in the 4572 update? Or, is it DTLS-specific?
>
>
This should be in 4572 update. This is not DTLS specific.
_____________
Roman Shpount

v2.23.0 | Report a Bug | By Email