Re: [pntaw] New version of draft-hutton-rtcweb-nat-firewall-considerations

[Melinda Shore <[e-mail]>]

On 9/22/13 9:36 PM, Oleg Moskalenko wrote:
> Each large enterprise IT has a complex history and complex web of
> policies. If a new standard provides new capabilities and useful
> possible scenarios, without imposing strict rules on IT departments,
> then I guess that would be a right thing.

I think this is actually a pretty serious problem, but Elvis,
as they say, has left the building.  The IETF RAI area has
standardized protocols for avoiding the enforcement of local
access policies.  The earlier work on STUN and TURN was to
allow operation across NAT, which is (arguably) not a policy
mechanism, but you all seem to want to extend it to allow
operation across firewalls *which by policy do not permit
the traffic in question*.  It's probably too late to do much
about it but I hope that you're having lots of conversations
with lots of enterprises whose firewalls you're planning on
forcing your way through, to make sure that they're on board
with this.

Melinda