Re: [rtcweb] Consensus call regarding media security

[Roman Shpount <[e-mail]>]

As I have mentioned before on this list I am strongly against making SRTP
protection for RTP a requirement. I think this is an unnecessary
requirement that serves little real purpose except feeding into some
marketing message that most of the WebRTC users would not care about.
Unless use of identity is also a requirement, requiring SRTP will provide
security only in a very narrow sense of the word. At the same time I do
believe that extra standard requirements will stifle innovation and  will
complicate new service or application creation.

I have no objection to making DTLS-SRTP a required to implement protocol.
_____________
Roman Shpount


On Wed, Mar 28, 2012 at 10:50 AM, Magnus Westerlund <
[e-mail]> wrote:

> WG,
>
> In todays RTCWEB WG meeting there was discussion around media security
> mechanism. In this meeting there was some clear consensus in the
> meeting which we would like to confirm on the list.
>
> The first was that there was overwhelming consensus that all RTP
> packets SHALL be protected by SRTP.
>
> Secondly that no one objected against making DTLS-SRTP a mandatory to
> implement and the default keying mechanism. Additional mechanisms are
> not precluded.
>
> WG participants may state their position regarding these consensus calls
> until 12th of April when the chairs will declare the final consensus. If
> you where present in the meeting room and comment on this, please
> indicate that.
>
> Best Regards
>
> Magnus Westerlund
> For the WG chairs
>
> _______________________________________________
> rtcweb mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/rtcweb
>