Re: [rtcweb] Consensus call regarding media security

"Ravindran, Parthasarathi" <pravindran@sonusnet.com> Thu, 29 March 2012 17:01 UTC

Return-Path: <pravindran@sonusnet.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6D3721E80B2 for <rtcweb@ietfa.amsl.com>; Thu, 29 Mar 2012 10:01:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.221
X-Spam-Level:
X-Spam-Status: No, score=-5.221 tagged_above=-999 required=5 tests=[AWL=1.378, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MLFssQ2n2OPA for <rtcweb@ietfa.amsl.com>; Thu, 29 Mar 2012 10:01:54 -0700 (PDT)
Received: from na3sys010aog102.obsmtp.com (na3sys010aog102.obsmtp.com [74.125.245.72]) by ietfa.amsl.com (Postfix) with ESMTP id A2B8121E8053 for <rtcweb@ietf.org>; Thu, 29 Mar 2012 10:01:53 -0700 (PDT)
Received: from USMA-EX-HUB2.sonusnet.com ([69.147.176.212]) (using TLSv1) by na3sys010aob102.postini.com ([74.125.244.12]) with SMTP ID DSNKT3SVgbhtgvPhWfqCxiaRz0Bi5FZLI1+j@postini.com; Thu, 29 Mar 2012 10:01:53 PDT
Received: from INBA-HUB01.sonusnet.com (10.70.51.86) by USMA-EX-HUB2.sonusnet.com (66.203.90.17) with Microsoft SMTP Server (TLS) id 14.2.247.3; Thu, 29 Mar 2012 13:02:13 -0400
Received: from INBA-MAIL01.sonusnet.com ([fe80::8d0f:e4f9:a74f:3daf]) by inba-hub01.sonusnet.com ([fe80::5cbc:2823:f6cc:9ce7%11]) with mapi id 14.01.0355.002; Thu, 29 Mar 2012 22:31:47 +0530
From: "Ravindran, Parthasarathi" <pravindran@sonusnet.com>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>, "rtcweb@ietf.org" <rtcweb@ietf.org>
Thread-Topic: [rtcweb] Consensus call regarding media security
Thread-Index: AQHNDPJEz8d54ZuGqkmrgP2aJufnWZaBgBgw
Date: Thu, 29 Mar 2012 17:02:08 +0000
Message-ID: <387F9047F55E8C42850AD6B3A7A03C6C0E221877@inba-mail01.sonusnet.com>
References: <4F732531.2030208@ericsson.com>
In-Reply-To: <4F732531.2030208@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [121.242.142.186]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [rtcweb] Consensus call regarding media security
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Mar 2012 17:01:54 -0000

WebRTC trust model has to be considered as one of the main factor for deciding the key mechanism. AFAIK, SDES does not fit into WebRTC as Dr.Evil HTTPS RTCWeb server must be trusted in case of SDES. There is no means to track or analyze whether Dr.Evil involves in monitoring or recording or terminate the media traffic.  It will be good in case whoever advocate for SDES explain how SDES fits within WebRTC trust model.

Thanks
Partha

>-----Original Message-----
>From: rtcweb-bounces@ietf.org [mailto:rtcweb-bounces@ietf.org] On Behalf
>Of Magnus Westerlund
>Sent: Wednesday, March 28, 2012 8:20 PM
>To: rtcweb@ietf.org
>Subject: [rtcweb] Consensus call regarding media security
>
>WG,
>
>In todays RTCWEB WG meeting there was discussion around media security
>mechanism. In this meeting there was some clear consensus in the meeting
>which we would like to confirm on the list.
>
>The first was that there was overwhelming consensus that all RTP packets
>SHALL be protected by SRTP.
>
>Secondly that no one objected against making DTLS-SRTP a mandatory to
>implement and the default keying mechanism. Additional mechanisms are
>not precluded.
>
>WG participants may state their position regarding these consensus calls
>until 12th of April when the chairs will declare the final consensus. If
>you where present in the meeting room and comment on this, please
>indicate that.
>
>Best Regards
>
>Magnus Westerlund
>For the WG chairs
>
>_______________________________________________
>rtcweb mailing list
>rtcweb@ietf.org
>https://www.ietf.org/mailman/listinfo/rtcweb