Re: [rtcweb] Reminder: Working group last call for draft-ietf-rtcweb-security-arch

I haven't had a chance to write up detailed comments, but my high-level
comment is that it goes into a bit too much detail on how the security
goals are accomplished.

The main thing this document needs to do is lay out the high-level roles in
the process (IdPs, calling sites, UAs) and what security guarantees they
each provide.  It does a good job of that Section 4 and the beginning of
Section 5.

Beginning around Section 5.6, it starts to veer off into technical details.
 Section 5.6 and Section 5.7.4 (and possibly others) should probably be
moved to a separate document, not because I think they're wrong, but
because there are some alternative models to be considered for how to meet
the goals of the security architecture.

--Richard

On Mon, Feb 25, 2013 at 6:27 PM, Ted Hardie <ted.ietf@gmail.com> wrote:

> This is a reminder that there is an ongoing last call for
> draft-ietf-rtcweb-security-arch-06.  Please send comments, including
> those of the "reviewed and no issues" ilk, by March 9th, 2012.
>
> regards,
>
> Ted Hardie
>
> On Thu, Feb 14, 2013 at 8:35 AM, Ted Hardie <ted.ietf@gmail.com> wrote:
> > This begins a working group last call for
> > draft-ietf-rtcweb-security-arch.  Please send comments to the list by
> > March 9, 2013.
> >
> > regards,
> >
> > Ted, Cullen, Magnus
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb
>