Re: [rtcweb] Comments on draft-ietf-rtcweb-security-06

[Martin Thomson <[e-mail]>]

On 21 February 2014 17:02, Ted Hardie <[e-mail]> wrote:
> Sorry for my apparent failure to understand here, but we're still dealing
> with
> traffic to which the parties consent, right?  That is, you're thinking of
> malicious
> JS that sends channels worth of nonsense to blast the network while
> something
> the user cares about happens? (Two-player flappy bird but with a terrabit of
> nonsense
> screaming in the background?)


Maybe Magnus is looking for the mechanism described in
http://tools.ietf.org/html/draft-thomson-mmusic-rtcweb-bw-consent-00,
which might allow for control below the limit that the congestion
control permits.  I basically abandoned this, because it's small
potatoes. It's trivial to revoke consent if you notice a misbehaving
peer and then you only have to wait until the consent timer runs out
on the sender.  30s.