Re: [rtcweb] Let's define the purpose of WebRTC

[Christer Holmberg <[e-mail]>]

Hi,

>> |That's *your* problem. But you want to translate
>> |*your* problem into WebRTC users by making their
>> |communications non secure.
>>
>> Well, most often you as a WebRTC user will be the one who would want to reach someone behind legacy systems
>
> You could consider that people in internet is not so excited with the
> possibility of making a legacy PSTN from the browser. In fact, calling
> a PSTN number from a web has no added value at all. Users already have
> their legacy PSTN phones.

I don't think we shall speculate in how people will use, and to whom the will call, using their browser apps.

AFAIK, most SIP calls today end up in PSTN, and the browser technology will allow people to access "SIP phones" from more or less any computer connected to the internet.


>>> |*My* security should NOT depend on the security
>>> |implemented in the peer (since I cannot trust the
>>> |peer, never).
>>>
>> Good luck. You peer could be a media gateway sitting somewhere in the Internet converting SRTP to RTP and sending to the other part of the world.
>
> Of course, but at least, I will know that the call is secure within my
> local network. Imagine I open my laptop in an airport, connect to a
> open WiFi (cautive portal) and make a call to another user via web,
> but the server must route it (via a SIP gateway) to a SIP softswitch,
> and that makes my call to use plain RTP. I'm in an airport, in an open
> WiFi network. Bad.
>
> But if my call uses SRTP until the SIP media gateway, then it could
> use plain RTP in the PSTN network. That's not so dangerous.

So, in your example you are basically talking about "access network security", because you don't really care what happens (with regards to media security) after the WiFi access leg?

Regards,

Christer