Re: [rtcweb] What is consent?

[Bernard Aboba <[e-mail]>]

Eric Rescorla said: 

"Responses from the server need to *contain* the MESSAGE-INTEGRITY field and
otherwise are not taken as evidence of consent. This field can only be
generated by a server that has the ICE credentials. So, obviously, a legacy
STUN server won't generate that."

[BA] While the presence of the MESSAGE-INTEGRITY field is a necessary
condition, is it sufficient to demonstrate consent? For example, does the
nominated flag need to be set to true?  RFC 5245 Section 7.1.3.2.4 says: 

7.1.3.2.4.  Updating the Nominated Flag

   If the agent was a controlling agent, and it had included a USE-
   CANDIDATE attribute in the Binding request, the valid pair generated
   from that check has its nominated flag set to true.  This flag
   indicates that this valid pair should be used for media if it is the
   highest-priority one amongst those whose nominated flag is set.  This
   may conclude ICE processing for this media stream or all media
   streams; see Section 8.

   If the agent is the controlled agent, the response may be the result
   of a triggered check that was sent in response to a request that
   itself had the USE-CANDIDATE attribute.  This case is described in
   Section 7.2.1.5, and may now result in setting the nominated flag for
   the pair learned from the original request.