Re: [rtcweb] URI schemes for TURN and STUN

Bernard Aboba <bernard_aboba@hotmail.com> Mon, 31 October 2011 05:26 UTC

Return-Path: <bernard_aboba@hotmail.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6728221F8C67 for <rtcweb@ietfa.amsl.com>; Sun, 30 Oct 2011 22:26:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.431
X-Spam-Level:
X-Spam-Status: No, score=-102.431 tagged_above=-999 required=5 tests=[AWL=0.167, BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZH+JnsWr31P7 for <rtcweb@ietfa.amsl.com>; Sun, 30 Oct 2011 22:26:36 -0700 (PDT)
Received: from blu0-omc1-s14.blu0.hotmail.com (blu0-omc1-s14.blu0.hotmail.com [65.55.116.25]) by ietfa.amsl.com (Postfix) with ESMTP id 6E32421F8C84 for <rtcweb@ietf.org>; Sun, 30 Oct 2011 22:26:36 -0700 (PDT)
Received: from BLU152-W48 ([65.55.116.8]) by blu0-omc1-s14.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sun, 30 Oct 2011 22:26:31 -0700
Message-ID: <BLU152-W48A525340135FEE625E6C693D60@phx.gbl>
Content-Type: multipart/alternative; boundary="_99b025ff-76a3-490d-bf1f-4e53728348cc_"
X-Originating-IP: [24.17.217.162]
From: Bernard Aboba <bernard_aboba@hotmail.com>
To: harald@alvestrand.no
Date: Sun, 30 Oct 2011 22:26:30 -0700
Importance: Normal
In-Reply-To: <4EAE163C.4070603@it.aoyama.ac.jp>
References: <4EAC6BF4.2000604@alvestrand.no>, <4EAE163C.4070603@it.aoyama.ac.jp>
MIME-Version: 1.0
X-OriginalArrivalTime: 31 Oct 2011 05:26:31.0740 (UTC) FILETIME=[A5F547C0:01CC978D]
Cc: rtcweb@ietf.org
Subject: Re: [rtcweb] URI schemes for TURN and STUN
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 31 Oct 2011 05:26:38 -0000

[BA] Agree with Harald here.   These items are (at best) tangential and better handled (or discarded) elsewhere. 

> - I do not think it's appropriate to use "turn" and "turns" for
> indicating transport. Polluting the URI namespace with more
> configuration parameters in the form of trailing "s" is a Bad Thing.
> - Passing passwords in URIs is generally a Bad Practice. If you really
> want this in this case, please explore the implications thereof fully in
> the Security Considerations section.
>
> Good luck with the discussion (elsewhere)!
>
> Harald