Re: [rtcweb] No a=ice-lite in JSEP-04

Martin Thomson <martin.thomson@gmail.com> Thu, 03 October 2013 20:19 UTC

Return-Path: <martin.thomson@gmail.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E01221F92B2 for <rtcweb@ietfa.amsl.com>; Thu, 3 Oct 2013 13:19:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dwj1-wTCtXcT for <rtcweb@ietfa.amsl.com>; Thu, 3 Oct 2013 13:19:24 -0700 (PDT)
Received: from mail-wi0-x22b.google.com (mail-wi0-x22b.google.com [IPv6:2a00:1450:400c:c05::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 9EA8121E8107 for <rtcweb@ietf.org>; Thu, 3 Oct 2013 13:04:33 -0700 (PDT)
Received: by mail-wi0-f171.google.com with SMTP id hm2so581413wib.10 for <rtcweb@ietf.org>; Thu, 03 Oct 2013 13:04:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Zp3VcRD7+2RHSw+F0JWnsKlN3j2eMuBiPMt+/8pZLXw=; b=K29OCCriI1MD0HWdjLLHbEwOgaxzIqkEq2hi6my6xWueY2bFqYdcpHowDJ3unbmeem T+jdUhHyHEKbzaj1Hbcz86k2UW7oGYyUk6cO3sGK+n0ceom1AEqzMwrT6w6BHh33Tq4J bMjEuz06ZS+bw4z+Q44fhPX6aDIoug/8gBt/0Di7ikAVk1wr+JiGd+UAh22kuYtkqJo7 B9gmmLfobbzCe7FB6yLAkxKNK0M6AUpNYr8uUwGgkHKBbN09RY8d8F51Sn0aMx34y2TH n35EO3gFcKHhlM4p3HTAH1U2wVbdpC8bMe4zS86wYIPJHc6DAZhL178YqLT6tyttQE3z XBtw==
MIME-Version: 1.0
X-Received: by 10.194.94.137 with SMTP id dc9mr9175965wjb.38.1380830672820; Thu, 03 Oct 2013 13:04:32 -0700 (PDT)
Received: by 10.227.202.194 with HTTP; Thu, 3 Oct 2013 13:04:32 -0700 (PDT)
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B1C4B4051@ESESSMB209.ericsson.se>
References: <56C2F665D49E0341B9DF5938005ACDF811144C@DEMUMBX005.nsn-intra.net> <CALiegfn+u-LD=W1S2te6UB1+u6yd7xAbpKO_U=qUEsD-aWv6cw@mail.gmail.com> <CAOJ7v-2UHjitspwzJ_nzdDXwN_ZoVAk=86O98khhhoOdAtVhiA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1C4B37B8@ESESSMB209.ericsson.se> <2F515906-BEC6-4ACA-BF2B-172E6ADBDAF1@phonefromhere.com> <CALiegf=EmbKX7KPffa79eDn4zFxuZBkNFNsh-aX-iTecob7v6Q@mail.gmail.com> <54B5DF36-6BEE-4FA4-ACA1-D4912F9A49AB@nostrum.com> <524D94E0.7020801@matthew.at> <7594FB04B1934943A5C02806D1A2204B1C4B3AEC@ESESSMB209.ericsson.se> <7594FB04B1934943A5C02806D1A2204B1C4B3C06@ESESSMB209.ericsson.se> <524DACC4.8060901@alvestrand.no> <CAOJ7v-1_HH3UScKoApow9xd8XBzckpDnCNBV1y=-CE6k+Qv1kA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1C4B4051@ESESSMB209.ericsson.se>
Date: Thu, 03 Oct 2013 13:04:32 -0700
Message-ID: <CABkgnnUaWgALttJUR6ynaga1SN8=rKmgKA25nMhL4kMnL7Q7vw@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Content-Type: text/plain; charset="UTF-8"
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] No a=ice-lite in JSEP-04
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Oct 2013 20:19:30 -0000

On 3 October 2013 12:08, Christer Holmberg
<christer.holmberg@ericsson.com> wrote:
> For example, assume I would implement a gateway using node.js and WebRTP
> API. The gateway platform isn't downloading the JavaScript code from a
> webserver - it is "manually" installed, which means it can be reviewed
> before it is executed.

In that case, given that node.js has a UDP API, there isn't a security
reason for preventing you from sending RTP.  You'd only need ICE-lite
to be compatible.  That said, if you want to use the WebRTC API,
wouldn't you want the same code (on both sides of the API)?

But that's not really the WebRTC API as specified, because the
specification has to assume the browser security model.