Re: [payload] Update of security template text in draft-ietf-payload-rtp-howto

Ross Finlayson <finlayson@live555.com> Fri, 10 April 2015 09:11 UTC

Return-Path: <finlayson@live555.com>
X-Original-To: payload@ietfa.amsl.com
Delivered-To: payload@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9EBF1ACED1; Fri, 10 Apr 2015 02:11:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.611
X-Spam-Level:
X-Spam-Status: No, score=-1.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, TVD_FROM_1=0.999, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PoXzio4chqgG; Fri, 10 Apr 2015 02:11:01 -0700 (PDT)
Received: from ns.live555.com (ns.live555.com [4.79.217.242]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB5CC1ACEC7; Fri, 10 Apr 2015 02:11:00 -0700 (PDT)
Received: from [127.0.0.1] (localhost.live555.com [127.0.0.1]) by ns.live555.com (8.14.9/8.14.9) with ESMTP id t3A9Ar3c034212; Fri, 10 Apr 2015 02:10:53 -0700 (PDT) (envelope-from finlayson@live555.com)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\))
From: Ross Finlayson <finlayson@live555.com>
In-Reply-To: <55277811.70905@ericsson.com>
Date: Fri, 10 Apr 2015 02:10:53 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <E3FFC107-6CCE-4A01-B86B-659431D5BD34@live555.com>
References: <55277811.70905@ericsson.com>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
X-Mailer: Apple Mail (2.2098)
Archived-At: <http://mailarchive.ietf.org/arch/msg/payload/RI8aNVEyY_xaoivu79Hm4DElMrQ>
Cc: IESG <iesg@ietf.org>, "payload@ietf.org" <payload@ietf.org>
Subject: Re: [payload] Update of security template text in draft-ietf-payload-rtp-howto
X-BeenThere: payload@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Payloads working group discussion list <payload.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/payload>, <mailto:payload-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/payload/>
List-Post: <mailto:payload@ietf.org>
List-Help: <mailto:payload-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/payload>, <mailto:payload-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Apr 2015 09:11:02 -0000

This looks good.  However, fixing some minor nits:

> NEW:
> 
>   RTP packets using the payload format defined in this specification
>   are subject to the security considerations discussed in the RTP
>   specification [RFC3550] , and in any applicable RTP profile such as
>   RTP/AVP [RFC3551], RTP/AVPF [RFC4585], RTP/SAVP [RFC3711] or RTP/
>   SAVPF [RFC5124].  However, as "Securing the RTP Protocol Framework:
>   Why RTP Does Not Mandate a Single Media Security Solution" [RFC7202]
>   discusses it is not an RTP payload formats responsibility to discuss

Add a comma after “discusses’.  Also: “formats” -> “format’s”

>   or mandate what solutions are used to meet the basic security goals
>   like confidentiality, integrity and source authenticity for RTP in
>   general.  This responsibility lays on anyone using RTP in an
>   application.  They can find guidance on available security mechanisms
>   and important considerations in Options for Securing RTP Sessions
>   [RFC7201].  Applications SHOULD use one or more appropriate strong
>   security mechanisms.  The rest of the this security consideration

Remove “the”.  Also, perhaps, add “section” before the following:

>   discusses the security impacting properties of the payload format
>   itself.


    Ross.