[rtcweb] URI schemes for TURN and STUN

Harald Alvestrand <harald@alvestrand.no> Sat, 29 October 2011 21:11 UTC

Return-Path: <harald@alvestrand.no>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B3EE21F84D5 for <rtcweb@ietfa.amsl.com>; Sat, 29 Oct 2011 14:11:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.472
X-Spam-Level:
X-Spam-Status: No, score=-110.472 tagged_above=-999 required=5 tests=[AWL=0.127, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W-8e1itwNdwC for <rtcweb@ietfa.amsl.com>; Sat, 29 Oct 2011 14:11:19 -0700 (PDT)
Received: from eikenes.alvestrand.no (eikenes.alvestrand.no [158.38.152.233]) by ietfa.amsl.com (Postfix) with ESMTP id BF70421F84BC for <rtcweb@ietf.org>; Sat, 29 Oct 2011 14:11:19 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by eikenes.alvestrand.no (Postfix) with ESMTP id 16BD239E162 for <rtcweb@ietf.org>; Sat, 29 Oct 2011 23:11:19 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at eikenes.alvestrand.no
Received: from eikenes.alvestrand.no ([127.0.0.1]) by localhost (eikenes.alvestrand.no [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pVa41wJyhLUc for <rtcweb@ietf.org>; Sat, 29 Oct 2011 23:11:18 +0200 (CEST)
Received: from [172.19.29.10] (216-239-45-4.google.com [216.239.45.4]) by eikenes.alvestrand.no (Postfix) with ESMTPS id 5BC4539E088 for <rtcweb@ietf.org>; Sat, 29 Oct 2011 23:11:18 +0200 (CEST)
Message-ID: <4EAC6BF4.2000604@alvestrand.no>
Date: Sat, 29 Oct 2011 14:11:16 -0700
From: Harald Alvestrand <harald@alvestrand.no>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20110921 Thunderbird/3.1.15
MIME-Version: 1.0
To: "rtcweb@ietf.org" <rtcweb@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [rtcweb] URI schemes for TURN and STUN
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Oct 2011 21:11:20 -0000

Hi,
being in the process of scanning all the drafts with -rtcweb- in them, I 
came across these two:

draft-nandakumar-rtcweb-stun-uri-00.txt
draft-nandakumar-rtcweb-turn-uri-00.txt

Just three comments:

- I think it's not RTCWEB business. They should be pointed at the home 
group for STUN/ICE.
- I do not think it's appropriate to use "turn" and "turns" for 
indicating transport. Polluting the URI namespace with more 
configuration parameters in the form of trailing "s" is a Bad Thing.
- Passing passwords in URIs is generally a Bad Practice. If you really 
want this in this case, please explore the implications thereof fully in 
the Security Considerations section.

Good luck with the discussion (elsewhere)!

                  Harald