Re: [rtcweb] Unique credentials for non-bundled m-lines

[Christer Holmberg <[e-mail]>]

Hi,

>> https://github.com/rtcweb-wg/jsep/issues/17
>> 
>> JSEP S 5.2.1 reads:
>> 
>> Each m= section, provided it is not being bundled into another m= 
>> section, MUST generate a unique set of ICE credentials and gather its 
>> own unique set of ICE candidates. Otherwise, it MUST use the same ICE 
>> credentials and candidates that were used in the m= section that it is 
>> being bundled into.
>> 
>> But Section 15.4 of ICE explicitly permits m-lines to share 
>> credentials, and of course ICE knows nothing of BUNDLE:
>> 
>> The "ice-pwd" and "ice-ufrag" attributes can appear at either the 
>> session-level or media-level. When present in both, the value in the 
>> media-level takes precedence. Thus, the value at the session-level is 
>> effectively a default that applies to all media streams, unless 
>> overridden by a media-level value. Whether present at the session or 
>> media-level, there MUST be an ice-pwd and ice-ufrag attribute for each 
>> media stream. If two media streams have identical ice-ufrag's, they 
>> MUST have identical ice-pwd's.
>> 
>> Is there a reason for requiring unique credentials? If not I suggest 
>> we remove this requirement.
>
> When not doing bundle, is there any problems in the consent security with shared credential? If 
> not, seems like we should remove this.

I guess that would mean that different BUNDLE groups could share the same credentials also?

Regards,

Christer