Re: [Perc] Drop support for E2E RTP header extensions

"Paul E. Jones" <paulej@packetizer.com> Fri, 12 May 2017 06:15 UTC

Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DADF129C66 for <perc@ietfa.amsl.com>; Thu, 11 May 2017 23:15:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.991
X-Spam-Level:
X-Spam-Status: No, score=-0.991 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=packetizer.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0o8jOVnnlajd for <perc@ietfa.amsl.com>; Thu, 11 May 2017 23:15:48 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D7F4128990 for <perc@ietf.org>; Thu, 11 May 2017 23:10:39 -0700 (PDT)
Received: from dyn-167.arid.us (cpe-098-122-167-029.nc.res.rr.com [98.122.167.29] (may be forged)) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id v4C6AZBh002331 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 12 May 2017 02:10:36 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1494569437; bh=h8pv3dhzqAs6kLUdPAStmTZXk1TNs5jllFWTLLTmWyc=; h=Date:In-Reply-To:References:Subject:To:CC:From; b=Fg/rlWKvDL6dhbN7/7Gh22gXVDR7HBvaE/ol69z1oMJz/E44vlwGDC/YkhC1Y/CeP eQB/7qZB+xxf5DkGxwzACjcEhi/c6r5SVaILghmn5Gt8fp8lIYsnDJzflBmURWQEl5 BrGq4X17mA2/4IqM7zZk5h/3aHqDAXqC2ESiYihU=
Date: Fri, 12 May 2017 02:10:34 -0400
User-Agent: K-9 Mail for Android
In-Reply-To: <74BE8407-9AC0-45D3-9476-5C109A7B7A3C@iii.ca>
References: <49c7de34-8bc6-bb7d-4524-0af26089eecb@gmail.com> <1CF6F66C-939F-484D-8C53-46ACB8CA69BE@vidyo.com> <27ca2993-5c66-8388-7187-b47ed8ae1340@gmail.com> <CAL02cgRDaz7BT+GzxWJ0cM7rebhd2cu2WbPy+Mwjkk0wJK=6mw@mail.gmail.com> <aef9a32f-f761-c9e8-de99-57c4acfd5088@gmail.com> <8FD07F5D-CD52-445B-AF75-BA1696F3A151@mozilla.com> <aff1a9bf-7dcb-71e6-3d01-afe5cac87ca5@gmail.com> <E234DDC1-9AB5-4C64-91C0-A8FCB58DA351@iii.ca> <8ddbf495-ac23-8529-aa0b-a233a0b336c0@gmail.com> <74BE8407-9AC0-45D3-9476-5C109A7B7A3C@iii.ca>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----8H4I3SYY6P076WOLYNSAOHR2K0ZEYW"
Content-Transfer-Encoding: 7bit
To: perc@ietf.org, Cullen Jennings <fluffy@iii.ca>, Sergio Garcia Murillo <sergio.garcia.murillo@gmail.com>
CC: Richard Barnes <rlb@ipv.sx>, Nils Ohlmeier <nohlmeier@mozilla.com>, "perc@ietf.org" <perc@ietf.org>, Jonathan Lennox <jonathan@vidyo.com>
From: "Paul E. Jones" <paulej@packetizer.com>
Message-ID: <286A6294-EC1E-49D3-88BB-023178DB07BD@packetizer.com>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.1 (dublin.packetizer.com [10.165.122.250]); Fri, 12 May 2017 02:10:37 -0400 (EDT)
Archived-At: <https://mailarchive.ietf.org/arch/msg/perc/O68RqF1Rnd4WNeng14GcRcKDY0Q>
Subject: Re: [Perc] Drop support for E2E RTP header extensions
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 May 2017 06:15:50 -0000

I don't see how we can support any E2E extension given the offerer specifies the ID mapping. Multiple endpoints in a conference might indicate any number of didn't ID values for the same extension.

I think we should remove support for E2E extensions.  We could leave it open for future support, but I think we should require insertion of the OHB before any other extensions to force HBH use only.

Paul


-------- Original Message --------
From: Cullen Jennings <fluffy@iii.ca>
Sent: May 11, 2017 8:05:58 PM EDT
To: Sergio Garcia Murillo <sergio.garcia.murillo@gmail.com>
Cc: Richard Barnes <rlb@ipv.sx>, Nils Ohlmeier <nohlmeier@mozilla.com>, "perc@ietf.org" <perc@ietf.org>, Jonathan Lennox <jonathan@vidyo.com>
Subject: Re: [Perc] Drop support for E2E RTP header extensions


OK, I think I see what is causing the confusion...

For a given header extension like say "urn:3gpp:video-orientation:6" you are thinking that there needs to be a way for the conference system to tell the endpoint if that given header is E2E encrypted or only HBH. That is not how PERC is working, PERC has the specification on header extensions when used in a PERC context tell the thing sending the RTP what it needs to do or leaving it as an implementation choice. The endpoint or browser is compiling that decisions in to the code. 

Of course the SDP can be used to decide if "urn:3gpp:video-orientation:6" is in use or not but not how it is encrypted. 



> On May 9, 2017, at 9:15 AM, Sergio Garcia Murillo <sergio.garcia.murillo@gmail.com> wrote:
> 
> On 09/05/2017 18:07, Cullen Jennings wrote:
>>> 
>>> Let me recap:
>>> We don't have an use case for E2E rtp header extensions
>> I don't think that is the case. There have been uses discussed that need integrity today and people want to make sure the framework does not limit what can be done in the future. Keep in mind their are lots of header extensions for RTP that are not defined by the IETF. 
> One thing is integrity and another is E2E. Could you name some of those use cases?

Uh, not getting what you mean by E2E here ? An example of something that in some case might want end to end integrity is urn:3gpp:roi-sent

> 
>>> We don't provide a solution for signaling E2E rtp header extensions vs HBH ones
>> Sure we do - it's SDP. In some case, the MD might have to do a re-offer to bring things into line with what it needs. 
> No, the SDP only negotiates HBH extensions. You can't negotiate that some will be HBH and some E2E, it is up to the endpoints to decide when they create the RTP packet, and it won't be known by the MD before hand just by the SDP.
> 
>>> 
>>> We don't provide a solution on how to successfully signal/handling different subsets of rtp header extensions and unify the negotiated ids
>> I think we do 
> Where?
> 
> 
>>> 
>>> We introduce a new concept of rtp header ordering that is not defined anywhere and is not supported by anyone currently making implementation much more difficult
>> When we introduced a way to have HBH and E2E, we provided a provided a way to say which way a header was handled by putting it before or after the OBH. I don't find that very hard to implement. For people that have only HBH headers, it is really easy. 
> Well, I have modified libwertc and jitsi code, and I can tell you it is not the case. Neither on my own MCU/SFU.
> 
> Best regards
> Sergio