Re: [rtcweb] Unique credentials for non-bundled m-lines

[Cullen Jennings <[e-mail]>]

On May 11, 2014, at 7:55 PM, Eric Rescorla <[e-mail]> wrote:

> https://github.com/rtcweb-wg/jsep/issues/17
> 
> JSEP S 5.2.1 reads:
> 
> Each m= section, provided it is not being bundled into another m=
> section, MUST generate a unique set of ICE credentials and gather its
> own unique set of ICE candidates. Otherwise, it MUST use the same ICE
> credentials and candidates that were used in the m= section that it is
> being bundled into.
> 
> But Section 15.4 of ICE explicitly permits m-lines to share
> credentials, and of course ICE knows nothing of BUNDLE:
> 
> The "ice-pwd" and "ice-ufrag" attributes can appear at either the
> session-level or media-level. When present in both, the value in the
> media-level takes precedence. Thus, the value at the session-level is
> effectively a default that applies to all media streams, unless
> overridden by a media-level value. Whether present at the session or
> media-level, there MUST be an ice-pwd and ice-ufrag attribute for each
> media stream. If two media streams have identical ice-ufrag's, they
> MUST have identical ice-pwd's.
> 
> Is there a reason for requiring unique credentials? If not I suggest
> we remove this requirement.

When not doing bundle, is there any problems in the consent security with shared credential? If not, seems like we should remove this.