Re: [rtcweb] [BEHAVE] URI schemes for TURN and STUN

Harald Alvestrand <harald@alvestrand.no> Sun, 06 November 2011 16:37 UTC

Return-Path: <harald@alvestrand.no>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29CBA21F84ED; Sun, 6 Nov 2011 08:37:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.399
X-Spam-Level:
X-Spam-Status: No, score=-110.399 tagged_above=-999 required=5 tests=[AWL=0.200, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qCheTUJ8ZiSH; Sun, 6 Nov 2011 08:37:55 -0800 (PST)
Received: from eikenes.alvestrand.no (eikenes.alvestrand.no [158.38.152.233]) by ietfa.amsl.com (Postfix) with ESMTP id 9163821F84DC; Sun, 6 Nov 2011 08:37:55 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by eikenes.alvestrand.no (Postfix) with ESMTP id E2D3639E0A3; Sun, 6 Nov 2011 17:37:54 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at eikenes.alvestrand.no
Received: from eikenes.alvestrand.no ([127.0.0.1]) by localhost (eikenes.alvestrand.no [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c3ejcrwS9F7S; Sun, 6 Nov 2011 17:37:54 +0100 (CET)
Received: from [10.154.240.196] (unknown [62.206.113.61]) by eikenes.alvestrand.no (Postfix) with ESMTPS id D904539E074; Sun, 6 Nov 2011 17:37:53 +0100 (CET)
Message-ID: <4EB6B7F0.4040001@alvestrand.no>
Date: Sun, 06 Nov 2011 17:38:08 +0100
From: Harald Alvestrand <harald@alvestrand.no>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20110921 Thunderbird/3.1.15
MIME-Version: 1.0
To: Marc Petit-Huguenin <petithug@acm.org>
References: <4EAC6BF4.2000604@alvestrand.no> <CALiegf=f4kFzyDLWK+Y5vbuCEJFXX590+VuZ4bbnHZnvX0CoBA@mail.gmail.com> <4EAC8AE0.3020307@acm.org> <4EACD558.1050003@alvestrand.no> <4EAE157F.5020901@it.aoyama.ac.jp> <4EAEB76B.9090304@acm.org> <8B0C4061-D362-4DFE-9677-7E64515A6E1C@network-heretics.com> <4EAF9391.5040209@it.aoyama.ac.jp> <4EB05A23.3060101@alvestrand.no> <01O80L7NM7N000RCTX@mauve.mrochek.com> <CABcZeBPCGcUcEDNJ5T3+LowrdTz-NAka3Q33CA8mvdwb0=+aZg@mail.gmail.com> <4EB480E7.1010200@alvestrand.no> <CABcZeBPba+PU5234jpHRYa0sfiwKVVFg6C-oGXBUEehvjrmpmw@mail.gmail.com> <48690B43-422C-4B65-8A70-B01F01F8FD97@cisco.com> <4EB552F0.6050800@acm.org>
In-Reply-To: <4EB552F0.6050800@acm.org>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: Ned Freed <ned.freed@mrochek.com>, Keith Moore <moore@network-heretics.com>, Keith Moore <moore@cs.utk.edu>, Behave WG <behave@ietf.org>, rtcweb@ietf.org
Subject: Re: [rtcweb] [BEHAVE] URI schemes for TURN and STUN
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 06 Nov 2011 16:37:56 -0000

On 11/05/2011 04:14 PM, Marc Petit-Huguenin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 11/05/2011 08:04 AM, Gonzalo Salgueiro wrote:
>> On Nov 5, 2011, at 10:30 AM, Eric Rescorla wrote:
>>
>>> On Fri, Nov 4, 2011 at 5:18 PM, Harald Alvestrand<harald@alvestrand.no
>>> <mailto:harald@alvestrand.no>>  wrote:
>>>> On 11/04/2011 04:56 PM, Eric Rescorla wrote:
>>>>> I don't have any commitment to the scheme. What's the best place?
>>>> I like parameters, like this:
>>>>
>>>> turn://user@host?proto=tcp
>>>>
>>>> Quite hard to misunderstand, and quite easy to extend.
>>>>
>>>> (Note: // is only allowed if what follows is [user[:pass]@]host - I don't
>>>> recommend using the password, for the obvious reasons, but the syntax will
>>>> allow it.)
>>> I don't see any security problem with that. The "break old
>>> implementations" rationale
>>> doesn't apply when we are defining a new URI scheme.
>> I agree with this as well.  If we can get some consensus with this, I will
>> update the next version of both the STUN and TURN URI Scheme drafts to include
>> this format.
> Or you can look at draft-petithuguenin-behave-turn-uri-bis, which is already
> doing it right (and had a lot of reviews back in 2008, before I split the
> resolution mechanism and the syntax in two separate documents).
>
> I know my email address does not contain the magical "cisco.com", but this is
> getting ridiculous.
Second opinion: draft-petithuguenin uses TURN and TURNS as scheme names.
I still think this is doing it wrong.

                   Harald