Re: [rtcweb] Requiring ICE for RTC calls

On Tue, Sep 27, 2011 at 11:55 AM, Ravindran Parthasarathi <
pravindran@sonusnet.com> wrote:

>  Hi Roman,****
>
> ** **
>
> RTCWeb application within Enterprise looks the reasonable argument for not
> mandating ICE & SRTP in RTCWeb browser  because Enterprise shall be
> visualized as single reachable private network with no NAT & SRTP
> requirement. ICE & SRTP are overhead within Enterprise.****
>
>
Setting aside the question of whether SRTP is useful within an enterprise,
remember that ICE is being used here for consent verification as well
as NAT traversal. Consent verification is more important, not less,
when the user's machine is in an enterprise environment, because
failure to verify consent can result in firewall traversal by the attacker.

-Ekr


>
In case I understand you correctly, RTCWeb API should provide the mechanism
> to include ICE & SRTP on the need basis.****
>
> ** **
>
> Thanks****
>
> Partha****
>
> ** **
>
>  ****
>
> ** **
>
> *From:* rtcweb-bounces@ietf.org [mailto:rtcweb-bounces@ietf.org] *On
> Behalf Of *Roman Shpount
> *Sent:* Wednesday, September 28, 2011 12:08 AM
> *To:* Matthew Kaufman
> *Cc:* rtcweb@ietf.org
>
> *Subject:* Re: [rtcweb] Requiring ICE for RTC calls****
>
>  ** **
>
> What about intranet applications that would want to locally call existing
> IP phones within the same enterprise? Should we force them to go through a
> media gateway as well or should we allow to overwrite this using a policy?
>
>
> As far as SRTP is concerned, once again we should at least provide a local
> policy. Otherwise it would be a real problem to test and debug this.
> _____________
> Roman Shpount
>
> ****
>
>  On Tue, Sep 27, 2011 at 1:30 PM, Matthew Kaufman <
> matthew.kaufman@skype.net> wrote:****
>
> On 9/27/11 10:01 AM, Justin Uberti wrote:****
>
> Neither Google Voice nor Skype (both fairly popular services) send raw RTP
> directly from the client to a PSTN terminator. ****
>
> ** **
>
> True.****
>
> ** **
>
> I can't speak for Skype, but Google Voice uses a media gateway for the
> quality-related reasons I mentioned earlier.****
>
> ** **
>
> I can't speak for Skype either, but this is a good guess.****
>
> ** **
>
>
> Since these large-scale services can deploy media gateways, it's clear that
> this is not a significant impediment.****
>
> ** **
>
> Agree. I'm not at all sure what the argument is that we need
> existing-PSTN-gateway-compatible RTP (without SRTP or ICE). If there is
> demand, these gateways will be upgraded to support RTCWeb. If there is not,
> service providers can run intermediate gateways.
>
> Matthew Kaufman****
>
> ** **
>
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb
>
>