[rtcweb] Updated security documents

Eric Rescorla <ekr@rtfm.com> Mon, 12 March 2012 23:06 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D63321E81C2 for <rtcweb@ietfa.amsl.com>; Mon, 12 Mar 2012 16:06:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.054
X-Spam-Level:
X-Spam-Status: No, score=-103.054 tagged_above=-999 required=5 tests=[AWL=-0.077, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nq79yNd7wph7 for <rtcweb@ietfa.amsl.com>; Mon, 12 Mar 2012 16:06:44 -0700 (PDT)
Received: from mail-vx0-f172.google.com (mail-vx0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id E9AB621E81C0 for <rtcweb@ietf.org>; Mon, 12 Mar 2012 16:06:43 -0700 (PDT)
Received: by vcbfk13 with SMTP id fk13so5597176vcb.31 for <rtcweb@ietf.org>; Mon, 12 Mar 2012 16:06:43 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:from:date:message-id:subject:to :content-type:x-gm-message-state; bh=wdQRBv2zf0jLir1dKsPmOSBDvRLQJC1SFwSTJwUvl6U=; b=WiMQkeQqkYuTXHQCA81cAEooJzOuC+a0zUF1NfmtCYHyieD8uSB7y5F4JkD81SJciy /ftzfa9GwwbInB69C8gv2XWXfQrmYt9RXtZ3bWUYVUWtRsL8Xs8yF/Swu889Wp3sdTJK 9nkZmHC75XBRXvE6T9d+6esQaU3JHG/zqMlAzaR3hRrKiZAVYTzqc6McGVMLZBy+ltqa uJnsCblpwoJYBnrDsdRpqFFGAG8rLhckW+5a75/MtU0/63uzHtj6nmsRhCJoinb1LLDj hAQ+Rc8W26FnzbBhYqBHTrPE6ikDLme32+xasZnQmmaTmHAc/IwWUYV2LPcyiY7kJDZ0 Xmzg==
Received: by 10.52.27.69 with SMTP id r5mr15625190vdg.129.1331593603239; Mon, 12 Mar 2012 16:06:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.52.70.231 with HTTP; Mon, 12 Mar 2012 16:06:03 -0700 (PDT)
X-Originating-IP: [74.95.2.173]
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 12 Mar 2012 16:06:03 -0700
Message-ID: <CABcZeBMFx+qMCX-JXbTGVmj39CQZAx03h4zorku9CHSarO3Zfg@mail.gmail.com>
To: rtcweb@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
X-Gm-Message-State: ALoCoQn8mqlipJVjJ2AeMmoAiYoKBQds9Pnv0Isdklz99s5FYku/i5COVkn6W3RdrppfYaK6+l5a
Subject: [rtcweb] Updated security documents
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Mar 2012 23:06:44 -0000

I have submitted new versions of:

* Security Considerations for RTC-Web
  http://tools.ietf.org/html/draft-ietf-rtcweb-security-02

  Primary change was to remove Appendix A (now mostly
  draft-ietf-rtcweb-security-arch-01) and to harmonize
  with that document.


* RTCWEB Security Architecture
  http://tools.ietf.org/html/draft-ietf-rtcweb-security-arch-01

  Updated to reflect the decisions made in the interim. Note
  that I did not try to specify a new STUN consent check b/c
  Perumal, Kaplan, and Wing got there first. If we have
  comments about that mechanism we should probably work them
  into that draft.


* RTCWEB Generic Identity Provider Interface
  http://tools.ietf.org/html/draft-rescorla-rtcweb-generic-idp-00

  Minor editorial updates.

-Ekr