Re: [rtcweb] JSEP fingerprint hash requirements
Justin Uberti <juberti@google.com> Mon, 21 October 2013 23:57 UTC
Return-Path: <juberti@google.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 848E911E82C5 for <rtcweb@ietfa.amsl.com>; Mon, 21 Oct 2013 16:57:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.934
X-Spam-Level:
X-Spam-Status: No, score=-1.934 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zThglP3-ZPpZ for <rtcweb@ietfa.amsl.com>; Mon, 21 Oct 2013 16:57:50 -0700 (PDT)
Received: from mail-vb0-x22b.google.com (mail-vb0-x22b.google.com [IPv6:2607:f8b0:400c:c02::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 2A26821F9EAF for <rtcweb@ietf.org>; Mon, 21 Oct 2013 16:57:44 -0700 (PDT)
Received: by mail-vb0-f43.google.com with SMTP id g10so2219767vbg.16 for <rtcweb@ietf.org>; Mon, 21 Oct 2013 16:57:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=yPNiY4QQ/42EBNuw7ntZViQM7foelHOpkNVPvVUmuvs=; b=SRD2o5WXjk+/QZ+pDzC5EIyYjKnImNC7nkuLc7OPjn5sn44mnrFHgZV4Z9Jg28XwLR 1KY7NzXoqG1cqabEgnbyUVGZCVrbHYlfx/VR6N3xlDLUwjjVex+LO00yF+uFr2ygCUfO lTG+qBhK9ndUSzszKLXV6FZxs8PcJT9tS8TDHDRSNKpE2mLdl1AAJiteue2v9IK1bueC WpkxVQ1B7l7AcU8cY9GEYHoYgFX1qC03iufJQXROphCl9s5SeSRdvuZIznbM+r5sV/5K Y9xKx5Dv5uUZpv4zS36jkrIbIHF3EOLc9jMmcjMXAtBcNYGkPR1eG6skPHvL3Ch5yYLA QbXA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=yPNiY4QQ/42EBNuw7ntZViQM7foelHOpkNVPvVUmuvs=; b=Bs916cqVr+alHjydFeQQUFPPuavYcWpkpweDOaeGc1oaOtmbKJnV0hnX07LfmVNzQu FrBEshBXuI8/ATE/JcZe5Y2BtqgdgPnc3hWnK7V9OxOLzOqC8QfiUKd284EGsiko6Uhw Xw4aI67ZRMNc/v/utRbjqLei7b4YhbIxvL/Bw9ZJOvvPCURr4DaYVKZDbBWnc1WMYJtD HOCWwfWS3X0d69k5QiiXhmNSE0XP9UjIE4rWAwcP6BElRdtRE2rARy62yUlZP8DfSDOd InVbDPCY1i6DIpynmqAb5jtyAfhGNazFQGWmwQmfJCNcHH3UM5888dtf74ipeWq+ueWQ xKTQ==
X-Gm-Message-State: ALoCoQmkmLCL2Lu9tfYM9rOEhNw3ORMzoVAXgibbjbysW1iLIXSz84e2/QxJBUVXq5XgslO1sC6vJXhdF4Yfv8vqCk1xRbULTdE1OHTD9DtYvEwh13dhTo/sh8niaWIJhigN18xONfEpyVVAWe8+xzrKmm6pf2CQaZQq6zXxVcR0R3odNLQ8cFNgdyzwrgo+AgsrCwNvtKzJ
X-Received: by 10.52.170.111 with SMTP id al15mr45827vdc.43.1382399861569; Mon, 21 Oct 2013 16:57:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.52.110.101 with HTTP; Mon, 21 Oct 2013 16:57:21 -0700 (PDT)
In-Reply-To: <CABkgnnUchE1PS+sy0U1zd8qrq5y9vqVc+4r8bZowY34Yr=6sWg@mail.gmail.com>
References: <CAMvTgcfvaUMWJaD5zX2rt6DWOWBgHEA-SqNtOqxs_bOqw_Ygbg@mail.gmail.com> <CABkgnnXBdQOgs9OKYRrU4wYRghj3WH30=vo-q7iSVjUub1SKow@mail.gmail.com> <CABcZeBOGjsOTXPtAFh+KR9SDQv8tEtUDE3gLvSN+f5dZ2R2R1Q@mail.gmail.com> <CABkgnnVTv4jVZkCDHWKk_X8yb3VEGBLXh+sW00OCG6RXMNkpgA@mail.gmail.com> <C5E08FE080ACFD4DAE31E4BDBF944EB123CBCA44@xmb-aln-x02.cisco.com> <CABkgnnUchE1PS+sy0U1zd8qrq5y9vqVc+4r8bZowY34Yr=6sWg@mail.gmail.com>
From: Justin Uberti <juberti@google.com>
Date: Mon, 21 Oct 2013 16:57:21 -0700
Message-ID: <CAOJ7v-2EhkfQz-R73mosqDNppe_1-ChmYOzuqdNeZaLbi3dYUw@mail.gmail.com>
To: Martin Thomson <martin.thomson@gmail.com>
Content-Type: multipart/alternative; boundary="047d7b86f11eafd71a04e9490cc3"
Cc: "Cullen Jennings (fluffy)" <fluffy@cisco.com>, "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] JSEP fingerprint hash requirements
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Oct 2013 23:57:52 -0000
Lacking anything else to point at, I changed the text in jsep-05 to just reiterate the policy from 4572. However, it does raise the larger question of what digest (and perhaps key length) should be used when generating certificates in WebRTC, and where that should be specified. On Mon, Oct 21, 2013 at 4:40 PM, Martin Thomson <martin.thomson@gmail.com>wrote: > On 18 October 2013 12:34, Cullen Jennings (fluffy) <fluffy@cisco.com> > wrote: > >> > >> I have a few hours, maybe I can write down an update to 4572 that fixes > this. > > > > that would be excellent if you could do that > > Done. > > http://tools.ietf.org/html/draft-thomson-mmusic-fingerprint-00 > > I wasn't able to pass this under any noses before pushing the button, > so this is probably way off base or duplicative of Justin's promised > efforts. We can discuss in MMUSIC. >
- [rtcweb] JSEP fingerprint hash requirements Kevin Dempsey
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson
- Re: [rtcweb] JSEP fingerprint hash requirements Eric Rescorla
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson
- Re: [rtcweb] JSEP fingerprint hash requirements Cullen Jennings (fluffy)
- Re: [rtcweb] JSEP fingerprint hash requirements Justin Uberti
- Re: [rtcweb] JSEP fingerprint hash requirements Harald Alvestrand
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson
- Re: [rtcweb] JSEP fingerprint hash requirements Harald Alvestrand
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson
- Re: [rtcweb] JSEP fingerprint hash requirements Justin Uberti
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson
- Re: [rtcweb] JSEP fingerprint hash requirements Harald Alvestrand
- Re: [rtcweb] JSEP fingerprint hash requirements Eric Rescorla
- Re: [rtcweb] JSEP fingerprint hash requirements Martin Thomson