Re: [rtcweb] H.261

Eric Rescorla <ekr@rtfm.com> Sat, 23 November 2013 04:24 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C57A1ADBD5 for <rtcweb@ietfa.amsl.com>; Fri, 22 Nov 2013 20:24:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level:
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QY1KB_zvNf93 for <rtcweb@ietfa.amsl.com>; Fri, 22 Nov 2013 20:24:20 -0800 (PST)
Received: from mail-wi0-f176.google.com (mail-wi0-f176.google.com [209.85.212.176]) by ietfa.amsl.com (Postfix) with ESMTP id 518B61ADBD3 for <rtcweb@ietf.org>; Fri, 22 Nov 2013 20:24:20 -0800 (PST)
Received: by mail-wi0-f176.google.com with SMTP id hq4so1580021wib.15 for <rtcweb@ietf.org>; Fri, 22 Nov 2013 20:24:12 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=XdMItdCaG4Ijriw24ON/EwD/nssVYhFDeIOFxn0/LPk=; b=B1MbpEcqmfzbZpYrGId75/tfcTE1J0eaQ8z3b2czfO5cY3soIr9+vM/M4kUL02fFmP TWoc9SsrRpP+2RKVoJb+C6nzxQb9tiULHQX5/+mMfw0Y+Rgx6GOAQCcNpZPPGoKUVZhG l7USxO2xrefkfQib55WQU01Fbmmz/QnLLlzyl9EDkxF84Gss5XQ7IekV/LHb+IKVPWUP G0+H3cssFffrHAvzdlj7yp58DC9Yw9DE6gFGccoEUaiSwTb31sZqm5YBn3DKUff5UR2K UJquIY4ikmSFGE3x/P9E338QuVkNZpuUnc17+4yHItIiw6KGN+hSc0Fp3o5GEHbipxY5 FWoA==
X-Gm-Message-State: ALoCoQlqigO/1v4oQwYhYpOrIv9Dwn8BZxeIuzQjx8EghBlkD77EklFEfkQe8cXIuchO0oDLT9Dj
X-Received: by 10.180.75.202 with SMTP id e10mr5261035wiw.8.1385180652546; Fri, 22 Nov 2013 20:24:12 -0800 (PST)
MIME-Version: 1.0
Received: by 10.216.152.137 with HTTP; Fri, 22 Nov 2013 20:23:32 -0800 (PST)
X-Originating-IP: [74.95.2.168]
In-Reply-To: <52902324.1050401@nostrum.com>
References: <528FAAA8.8060807@googlemail.com> <7949EED078736C4881C92F656DC6F6C130EA9E66FE@ausmsex00.austin.kmvtechnologies.com> <528FB79F.8090405@gmail.com> <7949EED078736C4881C92F656DC6F6C130EA9E670F@ausmsex00.austin.kmvtechnologies.com> <528FBD13.5040801@gmail.com> <528FD429.7090002@nostrum.com> <528FDE5E.5080301@librevideo.org> <CE523335-0146-4FA5-A735-1EB4A8B3F1EF@apple.com> <20131123003548.GD3245@audi.shelbyville.oz> <529006BB.609@nostrum.com> <20131123022750.GE3245@audi.shelbyville.oz> <52902324.1050401@nostrum.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Fri, 22 Nov 2013 20:23:32 -0800
Message-ID: <CABcZeBMNwGafKo9-WOjmWoJAyp+8K6Hu51Drp4ZU_SxPgCpx5w@mail.gmail.com>
To: Adam Roach <adam@nostrum.com>
Content-Type: multipart/alternative; boundary=f46d04389569bec14704ebd080e7
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] H.261
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Nov 2013 04:24:22 -0000

On Fri, Nov 22, 2013 at 7:38 PM, Adam Roach <adam@nostrum.com> wrote:

> On 11/22/13 20:27, Ron wrote:
>
>> So, now you want people to give Cisco not only the ability to
>> install binary blobs on their machine -- but a root shell to do
>> it as well?  What could possibly go wrong.
>>
>
> It's... uh... um... I'm a bit incredulous.
>
> Look, it's *Cisco*. If they *wanted* to attack you, this would be possibly
> the least worrisome vector.


And of course the binaries would be digitally signed and one could do
verifiable builds.

-Ekr