Re: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples

Christer Holmberg <christer.holmberg@ericsson.com> Wed, 11 March 2015 13:56 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC1511A886E for <rtcweb@ietfa.amsl.com>; Wed, 11 Mar 2015 06:56:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.901
X-Spam-Level:
X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZQuLBOMkHUxx for <rtcweb@ietfa.amsl.com>; Wed, 11 Mar 2015 06:56:11 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AF781ACCE6 for <rtcweb@ietf.org>; Wed, 11 Mar 2015 06:55:59 -0700 (PDT)
X-AuditID: c1b4fb30-f79c86d000000fc0-f9-5500496d1652
Received: from ESESSHC024.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 67.03.04032.D6940055; Wed, 11 Mar 2015 14:55:57 +0100 (CET)
Received: from ESESSMB209.ericsson.se ([169.254.9.214]) by ESESSHC024.ericsson.se ([153.88.183.90]) with mapi id 14.03.0210.002; Wed, 11 Mar 2015 14:55:57 +0100
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Iñaki Baz Castillo <ibc@aliax.net>
Thread-Topic: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples
Thread-Index: AQHQVqbHfYSbCv5RRE+VguSZdJaU4Z0MmygAgAACNQCAAB9EuP//8M8AgAASNNj//+/xAIAADFaAgAAlg8SAABtygIAAeWFLgAAf7wCAAAYfgIAAVgeAgAZK9ICAAInMAIACfsqQ///+kYAAAkFGAA==
Date: Wed, 11 Mar 2015 13:55:56 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B1D7369C9@ESESSMB209.ericsson.se>
References: <54F74B02.1070902@jive.com> <CAD5OKxs8JYG3-Vvndi59ZrdPE7UTj22ozD4tcWTHgzWrHv=q7Q@mail.gmail.com> <54F756B2.60408@jive.com> <7594FB04B1934943A5C02806D1A2204B1D726AD8@ESESSMB209.ericsson.se> <CAD5OKxu7py3HbrFjxTDZS5ECFzx7vd=wpjve-gT6gWwksjEu+g@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D726B71@ESESSMB209.ericsson.se> <CABcZeBO1O6sA8MqvWkCDu3RPLz5-P2G65Us28i0baOavDnRT7Q@mail.gmail.com> <CAD5OKxuWCdgMR5Kxjv9BSwZ3Jm9kGXx9Pi-9FrfsnuQZ_91jAA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D726DC1@ESESSMB209.ericsson.se> <CALiegfkipJhsy7-40+=d9xMUf4RJGdn3_fABL3NN2KuFNvS2BA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D727570@ESESSMB209.ericsson.se> <CALiegfmfvz3NWSjcovGBytiOTbR6kFfyh0vx5cXoMJtytfGzRA@mail.gmail.com> <CAD5OKxsu3D0xHY-zYbDu1hyH_+4=3mWDvW2i98WCVZ+29BpKCw@mail.gmail.com> <CA5E97EE-99F8-44D8-B05B-C9EFDED1A9BB@vidyo.com> <2F467A7E-7A6C-4B1B-985A-0D9C089BE973@cisco.com> <CAOJ7v-1TjZOZ5G31vy_Gt73ADGLRay1RHVeMi=H6Q4=N1b6HLA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D7367A0@ESESSMB209.ericsson.se> <CALiegfmyp=v6thk4eLz7nL1BHh2Qj7jmC84tdG7ufg8HPXsVKA@mail.gmail.com>
In-Reply-To: <CALiegfmyp=v6thk4eLz7nL1BHh2Qj7jmC84tdG7ufg8HPXsVKA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.154]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpjkeLIzCtJLcpLzFFi42KZGfG3RjfXkyHU4P4PU4uOyWwW0/fZWOxf fJ7ZYutUIYu1/9rZHVg9zjW8Z/eY8nsjq8eCTaUeS5b8ZPJoe3aHPYA1issmJTUnsyy1SN8u gSvj5ZFPzAUHOCt2f9jF1MC4gLOLkZNDQsBE4sfuFawQtpjEhXvr2UBsIYEjjBKte2O7GLmA 7CWMEg1dSxi7GDk42AQsJLr/aYPUiAjYSPy7cIEdpIZZYDqjxJL5bewgCWEBY4lvM58wQhSZ SGx8/pwJpEhEYBmjxOmfP5lBEiwCqhIN3yeBNfAK+Er8XDSTHWLzHw6JS61gF3EKBEp097aB XcQIdN33U2uYQGxmAXGJW0/mM0FcLSCxZM95ZghbVOLl439Q3yhJLLr9mQnkaGYBTYn1u/Qh WhUlpnQ/hForKHFy5hOWCYxis5BMnYXQMQtJxywkHQsYWVYxihanFiflphsZ6aUWZSYXF+fn 6eWllmxiBEbcwS2/DXYwvnzueIhRgINRiYd3w/r/IUKsiWXFlbmHGKU5WJTEee2MD4UICaQn lqRmp6YWpBbFF5XmpBYfYmTi4JRqYMyIZt1+s9tuz4TKU0us7JnP34o48qJzS1TgpV98a6Vu BG468+uma/SK1cmr1mjeCOh0FAjL+5ibu/zUYnbew+J//zMfX+G0w9X8lsvrrQtuf10qv9fP tct3+TevK+5/+IzXLTLyFLaPv2n2IzBr24UTW5/sldhno3jlWmiAy/zQORvvPVo2NXC+Ektx RqKhFnNRcSIAC6RQZJkCAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/rtcweb/GgNU1BLH-y4sjdyHHwM15_Mc-7Y>
Cc: Cullen Jennings <fluffy@cisco.com>, Jonathan Lennox <jonathan@vidyo.com>, "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Mar 2015 13:56:17 -0000

Hi,

>>>To handle the issue raised by the OP, I think we should either
>>
>>>1) Fix the DTLS draft (and any others) to not be bound to a 5-tuple 
>>>when  ICE is used
>>
>>>2) Update ICE-bis to say that any language about 5-tuples is 
>>>invalidated by  ICE, and should be treated as a >virtual transport.
>>
>>
>> When you say “any language”, do you refer specifically to DTLS, or to 
>> whatever protocol is used together with ICE?
>
> Clearly he means "whatever protocol is used together with ICE".

So, we assume that whatever protocol, existing and future, will work with a "virtual connection"?

E.g. in case of TCP, you WILL have separate connections for each TCP candidate - each using a single 5-tuple. We can't say that, with ICE, a single TCP connection can suddenly span multiple 5-tuples (one for each candidate pair), can we?

Regards,

Christer