Re: [rtcweb] No Interim on SDES at this juncture
Harald Alvestrand <harald@alvestrand.no> Thu, 13 June 2013 12:59 UTC
Return-Path: <harald@alvestrand.no>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0009421F9385 for <rtcweb@ietfa.amsl.com>; Thu, 13 Jun 2013 05:59:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.599
X-Spam-Level:
X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S4v+3htn6bmT for <rtcweb@ietfa.amsl.com>; Thu, 13 Jun 2013 05:59:52 -0700 (PDT)
Received: from eikenes.alvestrand.no (eikenes.alvestrand.no [158.38.152.233]) by ietfa.amsl.com (Postfix) with ESMTP id 03F8421F940D for <rtcweb@ietf.org>; Thu, 13 Jun 2013 05:59:52 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by eikenes.alvestrand.no (Postfix) with ESMTP id AE4E039E172 for <rtcweb@ietf.org>; Thu, 13 Jun 2013 14:59:49 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at eikenes.alvestrand.no
Received: from eikenes.alvestrand.no ([127.0.0.1]) by localhost (eikenes.alvestrand.no [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eWq8xihu-P0j for <rtcweb@ietf.org>; Thu, 13 Jun 2013 14:59:49 +0200 (CEST)
Received: from hta-dell.lul.corp.google.com (unknown [74.125.57.89]) by eikenes.alvestrand.no (Postfix) with ESMTPSA id E472E39E058 for <rtcweb@ietf.org>; Thu, 13 Jun 2013 14:59:48 +0200 (CEST)
Message-ID: <51B9C244.9050705@alvestrand.no>
Date: Thu, 13 Jun 2013 14:59:48 +0200
From: Harald Alvestrand <harald@alvestrand.no>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130510 Thunderbird/17.0.6
MIME-Version: 1.0
To: rtcweb@ietf.org
References: <CA+9kkMDnjCNXGV0GU7x6gbbZMf4WiEuVvCRY8_Fix5tmdOB-Kg@mail.gmail.com> <AD220324-EEE7-4800-8512-FD7BADA9EC34@oracle.com> <CA+9kkMDY2Z_5_1uYJ1K_ZmrJB2a1-RE7V3aPqNHQg82DyagjCg@mail.gmail.com> <2975A93F-44DA-4020-B4DE-42E7ED98C08F@oracle.com> <CABkgnnXr+zUW5mUn1nGwz9nxtY29JT5Cz=_84DB_ZxbZGa-kBA@mail.gmail.com> <9F33F40F6F2CD847824537F3C4E37DDF115C8A0F@MCHP04MSX.global-ad.net> <B7D2D5A3-586A-4846-904D-D2D3E6882500@phonefromhere.com>
In-Reply-To: <B7D2D5A3-586A-4846-904D-D2D3E6882500@phonefromhere.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [rtcweb] No Interim on SDES at this juncture
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Jun 2013 12:59:58 -0000
On 06/13/2013 01:07 PM, Tim Panton wrote: > I fear it just _looks_like_ the primary interop issue. > > As I recall when we last , the main reason that SDES is required is to facilitate sane multiuser conference video switching without > the hub box having to decrypt-encrypt every channel. (I vaguely remember Hadriel had a centerbox with flames coming out of it in his diagram in Paris) > Unfortunately the plan-a-plan-b-no-plan discussion shows that usecase isn't gonna work trivially even if we do have SDES. > > The other reason I can see is that there is an additional round-trip in the call setup, which does add some delay. > > I'm not convinced by the 'interop with older devices' argument. Anything that has been upgraded to deal with ICE and the fattened SDP can also have DTLS added at the same time. Anything that isn't upgraded isn't going to work anyway. > Based on my experience adding DTLS isn't a huge amount of work. ICE and SDP changes were much more time consuming. My impression from Paris was that if the WebRTC world supports EKT, then gatewaying into an SDES realm requires some fancy key-shuffling, nothing more. If the WebRTC world does not support EKT, then decrypt/encrypt will work in all cases. My impression from the performance numbers people have quoted is that the CPU cost of decrypt/encrypt doesn't cost enough to be the deal-breaker between "viable solution" and "not viable solution"; other things weigh far more on capex/opex. The architectural/non-cost argument I see against decrypt/encrypt is "the gateway wants to be able to disclaim the ability to look at the bits". Agree with Tim about the relative difficulty of adding the needed features.
- [rtcweb] No Interim on SDES at this juncture Ted Hardie
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Bernard Aboba
- Re: [rtcweb] No Interim on SDES at this juncture Cullen Jennings
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Ted Hardie
- Re: [rtcweb] No Interim on SDES at this juncture Vijaya Mandava (vimandav)
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Hutton, Andrew
- Re: [rtcweb] No Interim on SDES at this juncture Tim Panton
- Re: [rtcweb] No Interim on SDES at this juncture Harald Alvestrand
- Re: [rtcweb] No Interim on SDES at this juncture Tim Panton
- Re: [rtcweb] No Interim on SDES at this juncture Dan Wing
- Re: [rtcweb] No Interim on SDES at this juncture Dan Wing
- Re: [rtcweb] No Interim on SDES at this juncture Bernard Aboba
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Magnus Westerlund
- Re: [rtcweb] No Interim on SDES at this juncture Christer Holmberg
- Re: [rtcweb] No Interim on SDES at this juncture Tim Panton
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Iñaki Baz Castillo
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Christer Holmberg
- Re: [rtcweb] No Interim on SDES at this juncture Parthasarathi R
- Re: [rtcweb] No Interim on SDES at this juncture Harald Alvestrand
- Re: [rtcweb] No Interim on SDES at this juncture Magnus Westerlund
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Matthew Kaufman (SKYPE)
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Matthew Kaufman (SKYPE)
- Re: [rtcweb] No Interim on SDES at this juncture Matthew Kaufman (SKYPE)
- Re: [rtcweb] No Interim on SDES at this juncture Bernard Aboba
- Re: [rtcweb] No Interim on SDES at this juncture Michael Procter
- Re: [rtcweb] No Interim on SDES at this juncture Bernard Aboba
- Re: [rtcweb] No Interim on SDES at this juncture Michael Procter
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- [rtcweb] Agenda time request for IETF 87 Berlin Hadriel Kaplan
- Re: [rtcweb] Agenda time request for IETF 87 Berl… Ted Hardie
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Matthew Kaufman (SKYPE)
- Re: [rtcweb] No Interim on SDES at this juncture Dan Wing
- Re: [rtcweb] No Interim on SDES at this juncture Dan Wing
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Magnus Westerlund
- Re: [rtcweb] No Interim on SDES at this juncture Harald Alvestrand
- Re: [rtcweb] No Interim on SDES at this juncture Hutton, Andrew
- Re: [rtcweb] No Interim on SDES at this juncture Roman Shpount
- Re: [rtcweb] No Interim on SDES at this juncture Hutton, Andrew
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Roman Shpount
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Roman Shpount
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Richard Barnes
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Dan Wing
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Dan Wing
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Hadriel Kaplan
- Re: [rtcweb] No Interim on SDES at this juncture Martin Thomson
- Re: [rtcweb] No Interim on SDES at this juncture Max Jonas Werner
- Re: [rtcweb] No Interim on SDES at this juncture Parthasarathi R
- Re: [rtcweb] No Interim on SDES at this juncture Max Jonas Werner
- Re: [rtcweb] No Interim on SDES at this juncture Timothy B. Terriberry