Re: [rtcweb] SDP Security Descriptions (RFC 4568) and RTCWeb

Tim Panton <tim@phonefromhere.com> Fri, 26 April 2013 13:47 UTC

Return-Path: <tim@phonefromhere.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA73321F93D8 for <rtcweb@ietfa.amsl.com>; Fri, 26 Apr 2013 06:47:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.561
X-Spam-Level:
X-Spam-Status: No, score=-2.561 tagged_above=-999 required=5 tests=[AWL=0.037, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RKmqzn1Zs6xL for <rtcweb@ietfa.amsl.com>; Fri, 26 Apr 2013 06:47:57 -0700 (PDT)
Received: from smtp003.apm-internet.net (smtp003.apm-internet.net [85.119.248.52]) by ietfa.amsl.com (Postfix) with ESMTP id 9745B21F990C for <rtcweb@ietf.org>; Fri, 26 Apr 2013 06:47:56 -0700 (PDT)
Received: (qmail 82092 invoked from network); 26 Apr 2013 13:47:55 -0000
X-AV-Scan: clean
Received: from unknown (HELO zimbra003.verygoodemail.com) (85.119.248.218) by smtp003.apm-internet.net with SMTP; 26 Apr 2013 13:47:55 -0000
Received: from zimbra003.verygoodemail.com (localhost [127.0.0.1]) by zimbra003.verygoodemail.com (Postfix) with ESMTP id 93CCA18A04CE; Fri, 26 Apr 2013 14:47:55 +0100 (BST)
Received: from [192.67.4.33] (unknown [192.67.4.33]) by zimbra003.verygoodemail.com (Postfix) with ESMTPSA id 6E2A218A034F; Fri, 26 Apr 2013 14:47:55 +0100 (BST)
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: multipart/alternative; boundary="Apple-Mail=_9DAD43A1-4F0C-4AB4-A395-4D2277F27D58"
From: Tim Panton <tim@phonefromhere.com>
In-Reply-To: <517A8248.4020604@matthew.at>
Date: Fri, 26 Apr 2013 14:47:55 +0100
Message-Id: <1BF967D4-2EEA-489D-977E-E5D711966753@phonefromhere.com>
References: <3FA2E46D-C98E-4FC0-9F1D-AD595A861CE1@iii.ca> <20130425202238.74EF321F96A5@ietfa.amsl.com> <AE1A6B5FD507DC4FB3C5166F3A05A48416281FDB@tk5ex14mbxc272.redmond.corp.microsoft.com> <5179BEEF.4000600@jesup.org> <517A0237.9030008@matthew.at> <CA+9kkMAd6LxPTsA+3LfXFkoZQN-D4pwsAG9Oa9axiFt-QPOSOw@mail.gmail.com> <517A8248.4020604@matthew.at>
To: Matthew Kaufman <matthew@matthew.at>
X-Mailer: Apple Mail (2.1283)
Cc: rtcweb@ietf.org
Subject: Re: [rtcweb] SDP Security Descriptions (RFC 4568) and RTCWeb
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Apr 2013 13:47:57 -0000

On 26 Apr 2013, at 14:34, Matthew Kaufman wrote:

> On 4/25/2013 10:55 PM, Ted Hardie wrote:
>> On Thu, Apr 25, 2013 at 9:27 PM, Matthew Kaufman <matthew@matthew.at> wrote:
>> O
>> Yes, some gateway scenarios might be cheaper/easier with SDES, but I see the primary use-cases for WebRTC to be browser-to-browser, not browser-legacy.
>> 
>> Just because the charter was mistakenly written that way doesn't mean it is true.
>> 
>> I remind you that the actual title of the group is:
>> 
>> "Real-Time Communication in WEB-browsers (rtcweb)".  While you may disagree with the charter, please remember that it's not fundamentally a prediction about what the eventual balance of flows will be.  It's a statement about where the balance of effort in the group should go.   To me as an individual, it implies that we should not make trade-offs that optimize a non-browser use case at the expense of the browser use case except in pretty extraordinary circumstances.
>> 
> 
> Adding SDES helps a non-browser use case with no expense to the browser use cases except for the small amount of additional code.

I don't agree, it further complicates the existing hideous mess that is the SDP in the browser. Given where we are, we should be looking for ways to simplify that, not complicate it.

If anyone still thinks that SDP is just a blob not an API surface, take a look at the 'reference implementation' of browser to browser interop.
https://code.google.com/p/webrtc-samples/source/browse/trunk/apprtc/index.html

I count around 100 lines of javascript munging the SDP.

T.