Re: [rtcweb] Review of draft-ietf-rtcweb-stun-consent-freshness-05

Martin Thomson <martin.thomson@gmail.com> Fri, 18 July 2014 02:19 UTC

Return-Path: <martin.thomson@gmail.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8054B1B27C9 for <rtcweb@ietfa.amsl.com>; Thu, 17 Jul 2014 19:19:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3CsaDD5DC9mJ for <rtcweb@ietfa.amsl.com>; Thu, 17 Jul 2014 19:19:46 -0700 (PDT)
Received: from mail-wg0-x22f.google.com (mail-wg0-x22f.google.com [IPv6:2a00:1450:400c:c00::22f]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6CC41A0117 for <rtcweb@ietf.org>; Thu, 17 Jul 2014 19:19:45 -0700 (PDT)
Received: by mail-wg0-f47.google.com with SMTP id b13so2767420wgh.18 for <rtcweb@ietf.org>; Thu, 17 Jul 2014 19:19:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=eAJTfZkYr4kJbtZzyAA2ClrnM0PLGX+W7R2Ux9PdxP4=; b=BQBvLqE8Q2igzwfyg5h2obyoIeNEZUo5IwcUKdzpNSkhhQoDEfT+KI4ruIaN4o942J Vus11JNR8Scwfsd+gKc0akC5wdiRShN/s9HbV+PnM5fPbhVUVvhSSqVtl6ROvidC3sji 8UYUhjmJdfa9X4mcOEL28YIOZfpfnb2+Tsq+HCEoqZCc+I5S0caHainKO8i05y502VIl rHc65eAnXY5ebuZDIkGAxnc4IOaab5ZNcaQl2xGkzm3ExJfAB4Kli/q+jQwpGE5VkU1r qDrPZpK+Bebfqph9v9ebJZuun+ooODUVPxcSKq3N7STT4afGSNwStzaxA/rdk0WTH/5y HxDw==
MIME-Version: 1.0
X-Received: by 10.180.228.104 with SMTP id sh8mr27906148wic.64.1405649984317; Thu, 17 Jul 2014 19:19:44 -0700 (PDT)
Received: by 10.194.110.6 with HTTP; Thu, 17 Jul 2014 19:19:44 -0700 (PDT)
In-Reply-To: <53C87F76.8070007@alum.mit.edu>
References: <53C87F76.8070007@alum.mit.edu>
Date: Thu, 17 Jul 2014 19:19:44 -0700
Message-ID: <CABkgnnXQp20Wuz5kXS05K7UL4ioH+fbDCmOsv6kMQTHD0cPhSg@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Paul Kyzivat <pkyzivat@alum.mit.edu>
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/rtcweb/NixUhEtGvgxhel2QqxCLLVaRa_k
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] Review of draft-ietf-rtcweb-stun-consent-freshness-05
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Jul 2014 02:19:47 -0000

On 17 July 2014 18:59, Paul Kyzivat <pkyzivat@alum.mit.edu> wrote:
>    WebRTC devices are required to support full ICE as specified in
>    section 3.4 of [I-D.ietf-rtcweb-transports].  However, when WebRTC
>    devices interwork with other endpoints that support only ICE-lite
>    (e.g. gateways) those endpoints will not generate consent checks, but
>    just respond to consent checks they receive.

Yes, this.

> Section 4.1:
>
>    ...  To prevent expiry of consent, a STUN binding
>    request is sent every N milliseconds, where N SHOULD be 5000
>    milliseconds and MUST be randomized at least 20% above and 20% below
>    that value (to prevent prevent network synchronization).  Using the
>    value 5000 milliseconds and that 20% randomization range, N would be
>    a value between 4000 and 6000.  ...

We've just discussed this particular point and concluded that the
randomization requirement isn't necessary, since there is no need for
any sort of lock step avoidance in a peer-to-peer system like this.