Re: [Rum] [EXT] RUM security model

[Eugene Christensen <[e-mail]>]

There has to be some amount of trust between the providers so I think we should consider the use of an API key for access to the provider's configuration service.  If an API key is given and another provider abuses that, it obviously could result in something bad but it could quickly be revoked by the provider; right?  And the company that has abused it will likely not be trusted in the future (motivation for maintaining trust).

Would it also be wise to use a client certificate for SIP communications once the RUE has the necessary info from the configuration service?  The client certificate could be embedded into the application.

Is there any reason we cannot use language that makes the use of the API key and client certificate optional, at the discretion of the provider?  (e.g. The providers MAY require an API key for their configuration service and/or a client certificate for SIP communications).

Thanks,

Eugene.

CONFIDENTIALITY NOTICE. This e-mail transmission, and any documents, files or previous e-mail messages attached to it, may contain confidential and proprietary information. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this message is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately notify me by reply e-mail at [e-mail] or by telephone at [phone], and destroy the original transmission and its attachments without reading them or saving them to disk.

-----Original Message-----
From: Paul Kyzivat <[e-mail]> 
Sent: Thursday, October 22, 2020 9:34 AM
To: Olle E. Johansson <[e-mail]>; Brian Rosen <[e-mail]>
Cc: Eugene Christensen <[e-mail]>; [e-mail]
Subject: Re: [Rum] [EXT] RUM security model

[EXTERNAL] 

On 10/22/20 2:29 AM, Olle E. Johansson wrote:

[snip]

>> Brute force and DDoS attacks can’t be addressed by this document except in the Security Consideration section.  They are implementation issues.
> If there are specific attack vectors to RUM that doesn’t apply to SIP implementations in general, yes.

AFAIK there should be nothing special about VRS that makes it any more vulnerable to attack than any other sip service accessed over the public internet.

I'd like to hear from the providers if I am wrong about this.

	Thanks,
	Paul