Re: [secdir] [payload] sec-dir review of draft-ietf-payload-rtp-opus-08

["Ben Campbell" <[e-mail]>]

On 9 Apr 2015, at 4:58, Colin Perkins wrote:

> The work group did not put in a SHOULD. I think this is more of a 
> question of whether people are willing to hold there collective noses 
> about the lack of _normative_ privacy guidance for RTP in general, and 
> if they are willing to let payload formats continue to progress while 
> that is being worked out.
>
>
> One of the things RFC 7202 tries to convey is that "normative privacy 
> guidance for RTP in general" is not possible. The privacy 
> requirements, for example, of broadcast TV are different to those for 
> a phone call, but both can use RTP.
>
> A document giving normative security guidance for unicast SIP-based 
> telephony using RTP is something we need, I agree. I'm happy to help 
> reviewing such a thing, but it should be authored by someone more 
> familiar with the deployed security mechanisms.

Sorry, I mean for unicast. I just dropped the word when typing :-)