Re: [rtcweb] Requiring ICE for RTC calls

Justin Uberti <juberti@google.com> Tue, 27 September 2011 05:33 UTC

Return-Path: <juberti@google.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 583B521F8D41 for <rtcweb@ietfa.amsl.com>; Mon, 26 Sep 2011 22:33:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.539
X-Spam-Level:
X-Spam-Status: No, score=-105.539 tagged_above=-999 required=5 tests=[AWL=0.437, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A5lVDq3XMJEO for <rtcweb@ietfa.amsl.com>; Mon, 26 Sep 2011 22:33:47 -0700 (PDT)
Received: from smtp-out.google.com (smtp-out.google.com [74.125.121.67]) by ietfa.amsl.com (Postfix) with ESMTP id 75FC921F8CFB for <rtcweb@ietf.org>; Mon, 26 Sep 2011 22:33:40 -0700 (PDT)
Received: from wpaz13.hot.corp.google.com (wpaz13.hot.corp.google.com [172.24.198.77]) by smtp-out.google.com with ESMTP id p8R5aNpG022402 for <rtcweb@ietf.org>; Mon, 26 Sep 2011 22:36:24 -0700
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=google.com; s=beta; t=1317101784; bh=zktBaL9IUT7GySs866fpjcrD8PI=; h=MIME-Version:In-Reply-To:References:From:Date:Message-ID:Subject: To:Cc:Content-Type; b=U6bcW4nyqnIKKX6fHDbTqs/zYoV8ELNr+dkbO0hne+fcRblC44oyszgbQliBq5NbW zGqAEr/2FY2MdeykeK82g==
DomainKey-Signature: a=rsa-sha1; s=beta; d=google.com; c=nofws; q=dns; h=dkim-signature:mime-version:in-reply-to:references:from:date: message-id:subject:to:cc:content-type:x-system-of-record; b=oN2tsUsk8fv3WDTv6JcYNM28P8QT5/E4AE1rlGn5+To2PUzL68a01oxsp0dmAjGNp g4K5cB93E7TvjMNogPCrA==
Received: from iabz21 (iabz21.prod.google.com [10.12.102.21]) by wpaz13.hot.corp.google.com with ESMTP id p8R5aMDF015419 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT) for <rtcweb@ietf.org>; Mon, 26 Sep 2011 22:36:22 -0700
Received: by iabz21 with SMTP id z21so7746614iab.37 for <rtcweb@ietf.org>; Mon, 26 Sep 2011 22:36:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=beta; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=xyu35xLMWLnb8hyYUzZYhkvtPMcQCuilH0sjNeoLLlQ=; b=F0DAZwvbwIhAnaAWKRf0SXVuxpFqcgQcmBrULphormY2HEPTLrREPNuTE95ESKEp4R rwVWsc1EH7CLs0iCdIEA==
Received: by 10.42.139.137 with SMTP id g9mr8826526icu.75.1317101781981; Mon, 26 Sep 2011 22:36:21 -0700 (PDT)
Received: by 10.42.139.137 with SMTP id g9mr8826470icu.75.1317101780136; Mon, 26 Sep 2011 22:36:20 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.231.34.1 with HTTP; Mon, 26 Sep 2011 22:36:00 -0700 (PDT)
In-Reply-To: <C2DF2C51-B3F7-443D-A047-7E6FB03E6D20@phonefromhere.com>
References: <CAD5OKxtNjmWBz92bRuxka7e-BUpTPgVUvr3ahJGpmZ-U5nuPbQ@mail.gmail.com> <CAD6AjGSmz5T_F+SK2EoBQm6T-iRKp7dd4j8ZAF5JKdbbyomZQA@mail.gmail.com> <CALiegfmO54HC+g9L_DYn4jtXAAbLEvS++qxKa6TNrLDREs9SeA@mail.gmail.com> <4E80984A.903@skype.net> <CALiegfmyvTb57WVooKryS-ubfcg+w5gZ+zfO1zzBLn3609AzaA@mail.gmail.com> <4E809EE6.2050702@skype.net> <CAD5OKxvUOadaU0dnB7-Ho9cZ92VY+4Owuhj7oKPCx9Jy1iwT1Q@mail.gmail.com> <C2DF2C51-B3F7-443D-A047-7E6FB03E6D20@phonefromhere.com>
From: Justin Uberti <juberti@google.com>
Date: Tue, 27 Sep 2011 01:36:00 -0400
Message-ID: <CAOJ7v-3AJJcdrCKcH4AJmv_016sZtcOPOo8yCv3Va65eJogAkQ@mail.gmail.com>
To: Tim Panton <tim@phonefromhere.com>
Content-Type: multipart/alternative; boundary="90e6ba6e8a16bcf20d04ade5a70b"
X-System-Of-Record: true
Cc: Randell Jesup <randell-ietf@jesup.org>, rtcweb@ietf.org
Subject: Re: [rtcweb] Requiring ICE for RTC calls
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Sep 2011 05:33:48 -0000

Yes, most PSTN providers don't support ICE. They also often don't support
SRTP, RTCP, RTP over TCP, or even jitter buffers. To run a robust telephony
service, you will need to frontend that traffic with a media gateway of some
sort, and that gateway can easily support ICE.

On Tue, Sep 27, 2011 at 12:49 AM, Tim Panton <tim@phonefromhere.com> wrote:

>
> On 26 Sep 2011, at 09:26, Roman Shpount wrote:
>
>
> On Mon, Sep 26, 2011 at 11:48 AM, Matthew Kaufman <
> matthew.kaufman@skype.net> wrote:
>
>> And "interoperability with SIP-PSTN providers" is only relevant if you are
>> trying to turn the browser into another phone. We have enough phones. What
>> we don't have are new real-time communication experiences that can only be
>> created within this environment.
>>
>
> Are we deliberately creating an island? To be honest, I actually wanted to
> put RTC in the phone, instead of SIP. I think it would be a great idea to
> have desktop phone which runs a webkit browser with RTC and serves as an
> advanced display phone for a PBX. If RTC would not support no-ICE non-RTP
> calls, my only option would be to ignore the standard. So, in a sense we do
> not have enough phones.
>
>
> I am confused. Which phones today connect directly to a SIP to PSTN gateway
> ? I'd guess none.
> Almost all of them go through some registrar and/or proxy.
>
>
> I think you point in a lot of ways is similar to the argument that we
> should disable HTTP and leave only HTTPS since it is the only secure way to
> communicate and everything else would be an attack vector.
>
>
> No, HTTP today does not let me probe the innards of your network ( inside
> your firewall) just by sending
> a legal but evil payload. If you permit webRTC without ICE, then the
> browser can be told to fake up UDP packets
> and send them to anywhere on your inner LAN. DOS-city.
>
> Tim.
>
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb
>
>