Re: [rtcweb] Asking TLS for help with media isolation

Martin Thomson <martin.thomson@gmail.com> Thu, 10 April 2014 19:32 UTC

Return-Path: <martin.thomson@gmail.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6629A1A042D for <rtcweb@ietfa.amsl.com>; Thu, 10 Apr 2014 12:32:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dRhaWnia_CNx for <rtcweb@ietfa.amsl.com>; Thu, 10 Apr 2014 12:32:11 -0700 (PDT)
Received: from mail-wg0-x22e.google.com (mail-wg0-x22e.google.com [IPv6:2a00:1450:400c:c00::22e]) by ietfa.amsl.com (Postfix) with ESMTP id F41AF1A0545 for <rtcweb@ietf.org>; Thu, 10 Apr 2014 12:31:50 -0700 (PDT)
Received: by mail-wg0-f46.google.com with SMTP id b13so4456576wgh.29 for <rtcweb@ietf.org>; Thu, 10 Apr 2014 12:31:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=ZAamq0VfOcOzEmk11frUVK0rUVuJSNUyDqheYmSAagw=; b=unL8CqZs4qy3qTCEaqUWdOrunSuyuKA3sEM6h0TFuf5OgdXwIE882GhaCvJgu35rsZ R+jrKC7y+rHcwRgHJ9OIpBwVnnLKVlLUAdeN+w7P+itcmzyn/xO/hvsJg8GM9M48Rxol YEkk4mufNBdqzn68CnW8GiUCfL2tawk4/YIeiO6lXznPMuX9eJuAUbZ4sUs5+5Kgwn3Z 6uy30V7Xf2SQDiPizOwCFDNI2FBLb/1ZJ/syDODGRjTKOAqPtLa/LNKdk62eny49sKSN w6dK+8z7XQXtwk6k/85+wT4HXKO3PlMWWPlp6OHh0+6p6l5HpiJevo6q+8vj3u5VfaHl 9nRQ==
MIME-Version: 1.0
X-Received: by 10.180.92.196 with SMTP id co4mr16677245wib.50.1397158309444; Thu, 10 Apr 2014 12:31:49 -0700 (PDT)
Received: by 10.227.144.132 with HTTP; Thu, 10 Apr 2014 12:31:49 -0700 (PDT)
In-Reply-To: <53465CA2.4010607@alvestrand.no>
References: <CABkgnnWWuU63Vd=gw+wrh2ADgVYtQzhoRzRE1sv5azJE=MhWDg@mail.gmail.com> <533F191D.8050109@alum.mit.edu> <CABkgnnVht5EmJ7a2LDh50ivjUdoTpJ8GannQKReBSJbVGQGmgA@mail.gmail.com> <53419ED4.8020102@alum.mit.edu> <CABkgnnVjZ51bt5WQ1uvHHUz-4xFzpXQGhuMqxeMpOqJ1d+hQiA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D2B26CB@ESESSMB209.ericsson.se> <CAOW+2dsZrgQrOwJDu+bFE0U-dSUj5D--s_Dx1Nu9Ac60yuYCrA@mail.gmail.com> <CABkgnnUgiW7K7C9rTXGU6nAw2mO_5DPZU9ra64nRK=EVCENUzQ@mail.gmail.com> <53465CA2.4010607@alvestrand.no>
Date: Thu, 10 Apr 2014 12:31:49 -0700
Message-ID: <CABkgnnXya7Cyg5LFdO3r46knUrLk1DOe9emgTpO=yaYwmT5bJw@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Harald Alvestrand <harald@alvestrand.no>
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/rtcweb/UFzg3P9s38WWB_KKfZHanJ67wfw
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] Asking TLS for help with media isolation
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Apr 2014 19:32:16 -0000

On 10 April 2014 01:56, Harald Alvestrand <harald@alvestrand.no> wrote:
>> I think that for this, it's perfectly reasonable to use identity, but
>> not stream isolation.  With isolation, if the peer does not agree to
>> comply, then the session fails to complete.
>
> Actually I'd say it's "if the peer does not *agree to* comply".
> The protocol has no defense against liars, but that's a common issue.

That's precisely what I said, sans emphasis :)