Re: [rtcweb] URI schemes for TURN and STUN

Eric Rescorla <ekr@rtfm.com> Sat, 05 November 2011 14:31 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D42C21F84C2; Sat, 5 Nov 2011 07:31:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.977
X-Spam-Level:
X-Spam-Status: No, score=-102.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l-NA+PJWrVjk; Sat, 5 Nov 2011 07:31:31 -0700 (PDT)
Received: from mail-vx0-f172.google.com (mail-vx0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 8520B21F84C1; Sat, 5 Nov 2011 07:31:31 -0700 (PDT)
Received: by vcbfl11 with SMTP id fl11so3351912vcb.31 for <multiple recipients>; Sat, 05 Nov 2011 07:31:31 -0700 (PDT)
Received: by 10.52.65.14 with SMTP id t14mr17367185vds.47.1320503491065; Sat, 05 Nov 2011 07:31:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.220.118.132 with HTTP; Sat, 5 Nov 2011 07:30:51 -0700 (PDT)
X-Originating-IP: [74.95.2.169]
In-Reply-To: <4EB480E7.1010200@alvestrand.no>
References: <4EAC6BF4.2000604@alvestrand.no> <CALiegf=f4kFzyDLWK+Y5vbuCEJFXX590+VuZ4bbnHZnvX0CoBA@mail.gmail.com> <4EAC8AE0.3020307@acm.org> <4EACD558.1050003@alvestrand.no> <4EAE157F.5020901@it.aoyama.ac.jp> <4EAEB76B.9090304@acm.org> <8B0C4061-D362-4DFE-9677-7E64515A6E1C@network-heretics.com> <4EAF9391.5040209@it.aoyama.ac.jp> <4EB05A23.3060101@alvestrand.no> <01O80L7NM7N000RCTX@mauve.mrochek.com> <CABcZeBPCGcUcEDNJ5T3+LowrdTz-NAka3Q33CA8mvdwb0=+aZg@mail.gmail.com> <4EB480E7.1010200@alvestrand.no>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sat, 05 Nov 2011 07:30:51 -0700
Message-ID: <CABcZeBPba+PU5234jpHRYa0sfiwKVVFg6C-oGXBUEehvjrmpmw@mail.gmail.com>
To: Harald Alvestrand <harald@alvestrand.no>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: Keith Moore <moore@cs.utk.edu>, Ned Freed <ned.freed@mrochek.com>, Keith Moore <moore@network-heretics.com>, Behave WG <behave@ietf.org>, "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] URI schemes for TURN and STUN
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Nov 2011 14:31:32 -0000

On Fri, Nov 4, 2011 at 5:18 PM, Harald Alvestrand <harald@alvestrand.no> wrote:
> On 11/04/2011 04:56 PM, Eric Rescorla wrote:

>> I don't have any commitment to the scheme. What's the best place?
>
> I like parameters, like this:
>
> turn://user@host?proto=tcp
>
> Quite hard to misunderstand, and quite easy to extend.
>
> (Note: // is only allowed if what follows is [user[:pass]@]host - I don't
> recommend using the password, for the obvious reasons, but the syntax will
> allow it.)

I don't see any security problem with that. The "break old
implementations" rationale
doesn't apply when we are defining a new URI scheme.

-Ekr