Re: [rtcweb] WebRTC-SIP interop: and why SDES-SRTP is a need

"Ravindran, Parthasarathi" <pravindran@sonusnet.com> Thu, 05 April 2012 09:55 UTC

Return-Path: <pravindran@sonusnet.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5255C21F8709 for <rtcweb@ietfa.amsl.com>; Thu, 5 Apr 2012 02:55:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.299
X-Spam-Level:
X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s0WqWmwbpR+3 for <rtcweb@ietfa.amsl.com>; Thu, 5 Apr 2012 02:55:40 -0700 (PDT)
Received: from na3sys010aog102.obsmtp.com (na3sys010aog102.obsmtp.com [74.125.245.72]) by ietfa.amsl.com (Postfix) with ESMTP id E34E021F8701 for <rtcweb@ietf.org>; Thu, 5 Apr 2012 02:55:39 -0700 (PDT)
Received: from usma-ex-hub1.sonusnet.com ([69.147.176.212]) (using TLSv1) by na3sys010aob102.postini.com ([74.125.244.12]) with SMTP ID DSNKT31sG/sk3AHV2pGSSfO6SiWaKZzyGJOC@postini.com; Thu, 05 Apr 2012 02:55:40 PDT
Received: from INBA-HUB01.sonusnet.com (10.70.51.86) by usma-ex-hub1.sonusnet.com (66.203.90.16) with Microsoft SMTP Server (TLS) id 14.2.247.3; Thu, 5 Apr 2012 05:56:03 -0400
Received: from INBA-MAIL01.sonusnet.com ([fe80::8d0f:e4f9:a74f:3daf]) by inba-hub01.sonusnet.com ([fe80::5cbc:2823:f6cc:9ce7%11]) with mapi id 14.01.0355.002; Thu, 5 Apr 2012 15:25:33 +0530
From: "Ravindran, Parthasarathi" <pravindran@sonusnet.com>
To: Iñaki Baz Castillo <ibc@aliax.net>, Roman Shpount <roman@telurix.com>
Thread-Topic: [rtcweb] WebRTC-SIP interop: and why SDES-SRTP is a need
Thread-Index: AQHNEZuczUxvY8zq3kSCmeoWT7GsQ5aKhMuAgAALa4CAAHpmAIAAGYIAgAByn4CAAGfrAA==
Date: Thu, 05 Apr 2012 09:55:58 +0000
Message-ID: <387F9047F55E8C42850AD6B3A7A03C6C0E2251F8@inba-mail01.sonusnet.com>
References: <CALiegfmz6tgm9WF3KWEK5qwaBGADKFyit=egB36zkjZXNKdeHw@mail.gmail.com> <CALiegfnA8_ntYd5f935P_E6vvMwjrzt+j6UhB9vjmo6h-RzfPA@mail.gmail.com> <CAD5OKxsxrDdsoV18KB1gZSsUBPno-k2zs4E2FTUaoUBdXfh5yA@mail.gmail.com> <CAE6kErhTOFP1qna-OKRmJzM=Rssc0UEXTyDgSyKmh2AM+PuviA@mail.gmail.com> <CAD5OKxuuC1q9uCnREqi_-i0unT=6Uza+oYsCWtanbSjmSi5_DQ@mail.gmail.com> <CALiegf=qo4uWjSBx6F5PmN_vqtbqYzQ9e5igqe_YJPKj0BHQvg@mail.gmail.com>
In-Reply-To: <CALiegf=qo4uWjSBx6F5PmN_vqtbqYzQ9e5igqe_YJPKj0BHQvg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.70.54.83]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] WebRTC-SIP interop: and why SDES-SRTP is a need
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Apr 2012 09:55:41 -0000

IMHO, there is no need to tweak WebRTC recommendation for the sake of SIP proxy. I'm fine as long as there is a way in WebRTC to interop with SIP. For example, SIP proxy is not suitable for IETF SIPREC recording implementation itself!!!

But I'm also surprised to see that there is no response for Fabio Pietrosanti mail on DTLS-SRTP trust model mail thread.

Thanks
Partha 

>-----Original Message-----
>From: rtcweb-bounces@ietf.org [mailto:rtcweb-bounces@ietf.org] On Behalf
>Of Iñaki Baz Castillo
>Sent: Thursday, April 05, 2012 2:34 PM
>To: Roman Shpount
>Cc: rtcweb@ietf.org
>Subject: Re: [rtcweb] WebRTC-SIP interop: and why SDES-SRTP is a need
>
>2012/4/5 Roman Shpount <roman@telurix.com>:
>> On the more serious note, very few SIP end points offer working ICE
>support.
>> So, in a large sense, interop with them is not an option.
>
>For me there is a BIG difference when a kind of B2BUA is required (which
>involves signaling "transaction"). That's the barrier IMHO.
>
>ICE support can be implemented in a ICE-Lite RTP/SRTP proxy, see:
>
>  http://public.aliax.net/WebRTC/WebRTC_SIP_Interop_SDES-SRTP.png
>
>The problem arises when media encrypt/decrypt is required, and evenr
>more when a key update in RTP (like the DTLS EKT update) must be
>converted into a signaling re-INVITE by a super Signaling+Media B2BUA:
>
>  http://public.aliax.net/WebRTC/WebRTC_SIP_Interop_DTLS-EKT-SRTP.png
>
>
>
>> Out of the ones
>> that do support ICE and SRTP, very few are actually connected directly
>> to a public internet. Most of them are connected to some sort of PBX
>> or an IP PBX type service. So, in reality you do not need to bridge
>> every IP phone with WebRTC.
>
>That is a *very* limited scope of what WebRTC can provide. An IT
>department should be able to deploy its own WebRTC infrastructure (a
>Web+WebSocket server) within its "local" network, so browsers
>accessing to such a local website share the network with SIP/XMPP
>phones/devices/softphones.
>
>Please don't imagine WebRTC and SIP interop as the communication between
>two islands ;)
>
>
>
>> If a few PBX and hosted centrex vendors will add support for WebRTC
>> required features, we will get compatibility with existing end points.
>
>Pure SIP proxies do exist. A PBX is not always needed, so again, SIP
>world does not require to be "an island".
>
>
>> To support the rest you will need to deploy some sort of gateway.
>
>Not in the case SDES+SRTP is allowed in WebRTC (see Fabius's recent
>mails about SDES and DTLS).
>
>
>
>> hurdle (I am trying to be politically correct here). WebRTC enabled
>> end points, on the other hand, will offer significant benefits to
>> traditional SIP phones, since they will allow development of higher
>> quality integrated real time communications services. I hope this will
>> drive a much quicker standard adoption.
>
>The problem is that there is a *NEW* SRTP related spec for WebRTC:
>
>  http://tools.ietf.org/html/draft-ietf-avt-srtp-ekt-03
>
>Maybe it could also become a standard for SIP? I hope, but currently
>it's not, so by *mandating* DTLS-EKT-SRTP in WebRTC we are creating a
>island.
>
>
>Regards.
>
>
>--
>Iñaki Baz Castillo
><ibc@aliax.net>
>_______________________________________________
>rtcweb mailing list
>rtcweb@ietf.org
>https://www.ietf.org/mailman/listinfo/rtcweb