Re: [rtcweb] Requiring ICE for RTC calls

[Tim Panton <[e-mail]>]

Sent from my iPhone

On 27 Sep 2011, at 13:27, Iñaki Baz Castillo <[e-mail]> wrote:

> 2011/9/27 Olle E. Johansson <[e-mail]>:
>> Sometimes we need to move forward. After many years of insecure calls having
>> issues with traversing NATs everywhere, I think enough is enough and it's
>> time to provide a better solution.
> 
> I also agree. The IETF has produced lot of security specifications for
> SIP but vendors have implemented nothing (or just a few of them).
> 
> SIP is mostly deployed in islands, and each island defines its own
> security constrains (usually no security at all as the island itself
> is a secure wallen garden). Rtcweb is like a new island (a very big
> island), and it will also become the island with major number of
> malicious users and site providers. So let's add all the security
> constrains we can in order to make it secure.
> 
> Legacy SIP vendors/providers/manufactures should react if they want to
> offer services on top of rtcweb.
> 
> -- 
> Iñaki Baz Castillo

But it is worth remembering that many of those SIP deployments have the phones on a separate (V)LAN from which the browsers would be firewalled. So it wouldn't be a simple drop in case even if the browser did have a 100% SIP deskphone emulation. 

Tim.