[rtcweb] SDES-SRTP as a platform for multiple key management

["Fabio Pietrosanti (naif)" <[e-mail]>]

Hi all,

i've been thinking that one of the very interesting elements about the
support of SDES-SRTP, is that, other than providing compatibility with
existing telephony ecosystem, it may allow the implementation of custom
key managegement systems.

Basically if WebRTC would introduce support for SDES-SRTP and w3c would
define API to handle SDES SDP call keys, it would become possible to
further implement in Javascript additional key management systems.

For example someone may implement a javascript application to be
provided from an https source or browser extension additional to
implement OpenPGPJS based identity verification (http://openpgpjs.org/)
or integration with DH based key exchange
(https://github.com/kaepora/cryptocat/).

So basically a side-effect of introducing SDES-SRTP, could be to let
HTML5 application developers, to effectively be able to implement custom
security mechanisms for voice applications.

-- 
Fabio Pietrosanti
Founder, CTO

Tel: [phone] (direct)
Mobile: [phone]
E-mail: [e-mail]
Skype: fpietrosanti
Linkedin: http://linkedin.com/in/secret

PrivateWave Italia S.p.A.
Via Gaetano Giardino 1 - 20123 Milano - Italy
www.privatewave.com