Re: [rtcweb] A compromise for SDES

[Salvatore Loreto <[e-mail]>]

On 7/16/13 3:22 PM, Hutton, Andrew wrote:
>> The Compromise:
>> >So given that background, I was planning to propose that the security
>> >doc keep DTLS-SRTP as the only MTI mechanism for browsers, BUT to add a
>> >statement that web-based application frameworks SHOULD also support
>> >SDES. (with text about why and how, etc.)
> I don't think we can or should say that SDES SHOULD be implemented by one type of framework but not another we just need to say something consistent for all. I agree with most of what is stated in the reasoning above and given that there is a strong commercial incentive for SDES support I think keeping DTLS-SRTP as the MTI and making SDES a SHOULD would be a good compromise.
>
I also agree with most of what Hadriel stated in his long mail;
however I don't like the idea we start to make difference between what 
kind of webrtc you can do
with a browser and what you can do on a web-based application framework
(btw I also share the Andrew concern about the fact that we can/should 
say what to do or not to do
in each type of framework)

/Salvatore