Re: [pntaw] FW: New Version Notification for draft-wing-pcp-third-party-authz-01.txt

Agree with Markus that this may be useful in the longer term but only for the more sophisticated enterprise deployments that are WebRTC aware.

So I see it as complementary to other solutions (E.g. Websockets, TURN/TLS etc.) not as an alternative.

Andy

> -----Original Message-----
> From: pntaw-bounces@ietf.org [mailto:pntaw-bounces@ietf.org] On Behalf
> Of Markus.Isomaki@nokia.com
> Sent: 26 September 2013 13:16
> To: tireddy@cisco.com; pntaw@ietf.org
> Subject: Re: [pntaw] FW: New Version Notification for draft-wing-pcp-
> third-party-authz-01.txt
> 
> Hi,
> 
> Tirumaleswar Reddy wrote:
> >
> > This draft http://tools.ietf.org/html/draft-wing-pcp-third-party-
> authz-01
> > describes the mechanism for firewalls to only permit UDP media
> session
> > associated with specific WebRTC servers. This addresses the firewall
> problem
> > in Enterprise network without having to do DPI on WebRTC signaling
> > protocol.
> >
> 
> While adding support for TURN over TLS (or TURN over Websockets) via
> proxy based connections is important to make WebRTC deployable in the
> near term, I also believe that this type of more explicit and dynamic
> firewall authorization solution is valuable in the long term.
> 
> Markus
> _______________________________________________
> pntaw mailing list
> pntaw@ietf.org
> https://www.ietf.org/mailman/listinfo/pntaw