Re: [MMUSIC] draft-uberti-mmusic-nombis and (D)TLS

Justin Uberti <juberti@google.com> Mon, 23 March 2015 23:06 UTC

Return-Path: <juberti@google.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B24521A06FD for <mmusic@ietfa.amsl.com>; Mon, 23 Mar 2015 16:06:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.388
X-Spam-Level:
X-Spam-Status: No, score=-1.388 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id anIEOAYSR3X8 for <mmusic@ietfa.amsl.com>; Mon, 23 Mar 2015 16:06:55 -0700 (PDT)
Received: from mail-ig0-x22b.google.com (mail-ig0-x22b.google.com [IPv6:2607:f8b0:4001:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 636171A0218 for <mmusic@ietf.org>; Mon, 23 Mar 2015 16:06:55 -0700 (PDT)
Received: by igcqo1 with SMTP id qo1so52702626igc.0 for <mmusic@ietf.org>; Mon, 23 Mar 2015 16:06:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=WIULRfJf9llpKL/y1gvHkL9tuCbg2xe1sxsG/PKLAE0=; b=MCaWsM4qTvGnGFuA6uwtFVr2DURDiduSFcTBVkMbW72axIA26mxZFOsDl8Ehsp/sZk SyVLrr9pDslU13yOxpVlVVQnepLhSJyuTfE0wwUcWBUzvTFa3K8DTaEX62h/ZG0hsEK1 VxyIIfJs8iR8ppUuDZUKN6WaCbDYLsFrHwofdzaaV5mDuAm8puJ/J22PuzdMEEIBZ0Kz +YW0MyvMay0d6iWf1hdwvnfZZOJuxr9MdK/Zsar6w/wN7NSZtUbxQxkLldMV1GyyRXoI ah+MnjqT4LIVsaDQcafmjZURg5ITl2dPRSer4wwiffdG6U4rAzXPuTx039+yHNhmAtPN m0Iw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=WIULRfJf9llpKL/y1gvHkL9tuCbg2xe1sxsG/PKLAE0=; b=KlNH7rwAV2/dj9UJxlsBNY9DphsUDjCp9nMqTfsKkRSOAKuX/wA4VBzrmh8qQ+vGQG 4doydaw865rKVIWdnTijlH4jUTwIzH5reoFujxgjmNumhwXbbuGR8sw60vpx3cGSG69F u4gmZ/Ch+tCpQ/XkzqD81RWT8dSC63tPaLyTy3i/mX7rpOsiOfa9PXrgmS7hWrnsJeAA Di8eqrfRwQtL4g3i6Q/WgtwvtQG1bvYBgwMXBtBXtrznmMVbmZOCMu/VuFNAe+TPPvEF SqpYx/w1tZV5abVKucAW8Rq6yVQLjbRSE5nb1YvNHqrfdJAGeIWksz6ezEVGVz5d6qZ3 NBPA==
X-Gm-Message-State: ALoCoQnoYgKqdNXVMJ0TVhHlhmhgteO4rLlCfCtYT53gMiZleJxdCEiPQhy5QC9Vw3kVhB0uCi7C
X-Received: by 10.43.55.145 with SMTP id vy17mr22732541icb.60.1427152014714; Mon, 23 Mar 2015 16:06:54 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.64.42 with HTTP; Mon, 23 Mar 2015 16:06:34 -0700 (PDT)
In-Reply-To: <CAD5OKxt4pgOB9yUBWt-jJwo+u3veibkhxgz+KGx_A+xHZ8GFfg@mail.gmail.com>
References: <550E0F1A.2090303@ericsson.com> <BLU406-EAS2095DB481DB8142DA8BC0BB930C0@phx.gbl> <7594FB04B1934943A5C02806D1A2204B1D7729E2@ESESSMB209.ericsson.se> <CAD5OKxtB5qWQ1yYdGEOdKD55y0HPTGkY_hP0uV=PXEkRnZfcBg@mail.gmail.com> <CAOJ7v-0pQ=smq1EzpMrQBULm+mjscDXf=fpapdvMWtVX4FkWVw@mail.gmail.com> <CAD5OKxu5LVFGqyixLzG4W-FBYRa9VFm6NmAdCmD0_ccDrOJo2A@mail.gmail.com> <CAOJ7v-3NWNu8SLzv1VMuvj-FoAmUCfZ=f+Pa7ggLjPRctnhQhw@mail.gmail.com> <CAD5OKxva22u=wxUrxKyUJ86On=bOw0o7170suVXk4QngoFdz-Q@mail.gmail.com> <CAOJ7v-04VuYP7WYZFUf_M==gftEZAF2Vsyd4UReeYnUimzXysQ@mail.gmail.com> <CAD5OKxt4pgOB9yUBWt-jJwo+u3veibkhxgz+KGx_A+xHZ8GFfg@mail.gmail.com>
From: Justin Uberti <juberti@google.com>
Date: Mon, 23 Mar 2015 18:06:34 -0500
Message-ID: <CAOJ7v-1y_DUozCxpNxBt-iWYJ=jWFH_FAog9EiLvUZdsj1O5vw@mail.gmail.com>
To: Roman Shpount <roman@telurix.com>
Content-Type: multipart/alternative; boundary="bcaec51b1ea1e0d86a0511fcb8df"
Archived-At: <http://mailarchive.ietf.org/arch/msg/mmusic/pw6yoo9yhr2P1ZZRC-zTE3Mqr_I>
Cc: mmusic <mmusic@ietf.org>, Ari Keränen <ari.keranen@ericsson.com>, "draft-uberti-mmusic-nombis@tools.ietf.org" <draft-uberti-mmusic-nombis@tools.ietf.org>, Christer Holmberg <christer.holmberg@ericsson.com>
Subject: Re: [MMUSIC] draft-uberti-mmusic-nombis and (D)TLS
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2015 23:06:56 -0000

On Mon, Mar 23, 2015 at 5:32 PM, Roman Shpount <roman@telurix.com> wrote:

> On Mon, Mar 23, 2015 at 6:17 PM, Justin Uberti <juberti@google.com> wrote:
>
>>
>>
>> How does the mid header extension helps with DTLS packet de-multiplexing
>>> in cases of DTLS-SRTP handshake or data channel?
>>>
>>
>> This would only be an issue if multiple DTLS connections were multiplexed
>> over a single ICE transport. I'm not aware of any need for this, compared
>> to the clear need for muxing multiple RTP streams.
>>
>
> How would you deal with multiple DTLS handshakes for DTLS-SRTP?
>

Unclear; as you have pointed out, it's not clear whether a given DTLS
packet belongs to the old session or the new session.


>
> My understanding was that in case of bundled channels, all channels go
> over the same "virtual" ICE channel, get decoded by the single DTLS-SRTP
> session, and then get demuxed using mid header, payload type, SSRC, or some
> other RTP level field. In any case, all these bundled m= lines share the
> same "virtual" transport channel. There can be, one data channel which
> shares this single "virtual" transport with all those RTP streams. In any
> case, mid header extensions, SSRC, and payload are irrelevant to binding
> packets to the "virtual" transport, since in case of DTLS-SRTP encoded
> media, packets would need to be de-muxed before any of those fields can be
> determined.
>

This is true. But demux is not an issue; we know which 5-tuples are part of
the ICE channel. I think we are simply searching for a convenient handle
that we can apply for this virtual channel.



> _____________
> Roman Shpount
>
>