[rtcweb] #11: Security vs. Security-Arch

"rtcweb issue tracker" <trac+rtcweb@trac.tools.ietf.org> Sun, 17 February 2013 00:03 UTC

Return-Path: <trac+rtcweb@trac.tools.ietf.org>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id E1D7621F8A6F for <rtcweb@ietfa.amsl.com>; Sat, 16 Feb 2013 16:03:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id gpwCmcHvp5c8 for <rtcweb@ietfa.amsl.com>; Sat, 16 Feb 2013 16:03:58 -0800 (PST)
Received: from grenache.tools.ietf.org (grenache.tools.ietf.org [IPv6:2a01:3f0:1:2::30]) by ietfa.amsl.com (Postfix) with ESMTP id 6A19221F8A6E for <rtcweb@ietf.org>; Sat, 16 Feb 2013 16:03:58 -0800 (PST)
Received: from localhost ([]:37425 helo=grenache.tools.ietf.org ident=www-data) by grenache.tools.ietf.org with esmtp (Exim 4.80) (envelope-from <trac+rtcweb@trac.tools.ietf.org>) id 1U6rjW-0001AI-KN; Sun, 17 Feb 2013 01:03:54 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: rtcweb issue tracker <trac+rtcweb@trac.tools.ietf.org>
X-Trac-Version: 0.12.3
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.3, by Edgewall Software
To: draft-ietf-rtcweb-security-arch@tools.ietf.org, bernard_aboba@hotmail.com
X-Trac-Project: rtcweb
Date: Sun, 17 Feb 2013 00:03:54 -0000
X-URL: http://tools.ietf.org/rtcweb/
X-Trac-Ticket-URL: http://wiki.tools.ietf.org/wg/rtcweb/trac/ticket/11
Message-ID: <066.ab39612adab30e971099ee5bb9a96316@trac.tools.ietf.org>
X-Trac-Ticket-ID: 11
X-SA-Exim-Rcpt-To: draft-ietf-rtcweb-security-arch@tools.ietf.org, bernard_aboba@hotmail.com, rtcweb@ietf.org
X-SA-Exim-Mail-From: trac+rtcweb@trac.tools.ietf.org
X-SA-Exim-Scanned: No (on grenache.tools.ietf.org); SAEximRunCond expanded to false
Resent-To: ekr@rtfm.com
Resent-Message-Id: <20130217000358.6A19221F8A6E@ietfa.amsl.com>
Resent-Date: Sat, 16 Feb 2013 16:03:58 -0800
Resent-From: trac+rtcweb@trac.tools.ietf.org
Cc: rtcweb@ietf.org
Subject: [rtcweb] #11: Security vs. Security-Arch
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Feb 2013 00:04:00 -0000

#11: Security vs. Security-Arch

 At various points within the Security Architecture document, I had a
 feeling of deju vu, encountering material that was also in the Security
 doc.  The overlap made me wonder if we should either move some material
 from Arch to Security, or whether we couldn't live with a single doc
 instead of two.


 All but the last sentence of the abstract is identical to that of the
 Security document.  Would it make some sense to shorten the abstract?
 Also, references aren't allowed in abstracts.

 Section 1

 The first paragraph duplicates material from the abstract as well as
 Section 1 of the Security doc, and figure 1 is also included in both docs.
 However, the security doc doesn't discuss the multidomain case.  Would it
 make sense to move material from Section 1 of this document to the
 security doc?  If this were done, would we still need Section 1 in this

 Section 5.2

 This section, with its requirements on APIs, seemed similar in spirit to
 Section 4.1 of the Security doc.

 Section 5.4

 Material in this section (such as the discussion of ToR) seems like it
 might better belong in Section 4.2.4 of the Security doc.

 Reporter:                           |      Owner:  draft-ietf-rtcweb-
  bernard_aboba@hotmail.com          |  security-arch@tools.ietf.org
     Type:  defect                   |     Status:  new
 Priority:  major                    |  Milestone:  milestone1
Component:  security-arch            |    Version:  1.0
 Severity:  In WG Last Call          |   Keywords:

Ticket URL: <http://wiki.tools.ietf.org/wg/rtcweb/trac/ticket/11>
rtcweb <http://tools.ietf.org/rtcweb/>