Re: [rtcweb] New use-case proposed

11 maj 2012 kl. 18:21 skrev "Harald Alvestrand" <harald@alvestrand.no>:

> I propose to reject this use case because it requires yet another 
> security redesign.
> The clue is here:
> 
>> 
>> - The keying solution must allow each participants to encrypt to
>> multiple receivers without any decryption+encryption in the middle node
>> 
> 
> This means that each participant must use the same encryption keys to 
> all other participants; this in turn means that when someone leaves the 
> group, all participants must change their encryption keys; it also means 
> that as long as shared keys are used for authentication, all 
> participants can impersonate all other participants.
> 
> In fact, this solution has most of the issues (except for the network 
> layer deployment issue) that leads me to strongly advocate leaving 
> multicast out of scope for this effort.

You mean for this phase of webrtc std efforts or for ever?

Regards
Göran

> 
>                Harald
> 
> 
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb