Re: [secdir] Secdir review of draft-ietf-avtcore-idms-12

"Brandenburg, R. (Ray) van" <ray.vanbrandenburg@tno.nl> Wed, 14 August 2013 08:59 UTC

Return-Path: <ray.vanbrandenburg@tno.nl>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EC6F21F937E; Wed, 14 Aug 2013 01:59:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.504
X-Spam-Level:
X-Spam-Status: No, score=-0.504 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dXQqlxDYgbvY; Wed, 14 Aug 2013 01:59:34 -0700 (PDT)
Received: from fromintouta.tno.nl (fromintouta.tno.nl [134.221.1.26]) by ietfa.amsl.com (Postfix) with ESMTP id 925C321F9344; Wed, 14 Aug 2013 01:59:33 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.89,875,1367964000"; d="scan'208";a="12490454"
Received: from unknown (HELO mail.tno.nl) ([134.221.225.222]) by mailhost1a.tno.nl with ESMTP; 14 Aug 2013 10:59:32 +0200
Received: from EXC-MBX03.tsn.tno.nl ([169.254.3.163]) by EXC-CASHUB03.tsn.tno.nl ([134.221.225.222]) with mapi id 14.03.0123.003; Wed, 14 Aug 2013 10:59:32 +0200
From: "Brandenburg, R. (Ray) van" <ray.vanbrandenburg@tno.nl>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
Thread-Topic: Secdir review of draft-ietf-avtcore-idms-12
Thread-Index: AQHOj6Zfew5dacJNyUKMrFyD2GwMxZmMc9vggAaFjYCAAYB5uw==
Date: Wed, 14 Aug 2013 08:59:32 +0000
Message-ID: <EDC4CA32-7663-4F5B-BDEF-7CDD10B1ED41@tno.nl>
References: <F7B404A0-9D49-4BC7-A284-B0F0DC984DA8@inria.fr> <FCC100FC8D6B034CB88CD8173B2DA1581F439A1F@EXC-MBX03.tsn.tno.nl>, <520A208F.6050104@ericsson.com>
In-Reply-To: <520A208F.6050104@ericsson.com>
Accept-Language: en-US, nl-NL
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Cc: "secdir@ietf.org" <secdir@ietf.org>, IESG <iesg@ietf.org>, "draft-ietf-avtcore-idms.all@tools.ietf.org" <draft-ietf-avtcore-idms.all@tools.ietf.org>
Subject: Re: [secdir] Secdir review of draft-ietf-avtcore-idms-12
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Aug 2013 08:59:38 -0000

Hi Magnus,

Thanks for the heads-up. I think the document you mentioned is exactly what we're looking for. 

I will include a reference in the next iteration, which I will post after the 2nd WGLC has concluded. 

Ray

On 13 aug. 2013, at 14:02, "Magnus Westerlund" <magnus.westerlund@ericsson.com> wrote:

> Vincent and Ray,
> 
> 
>>> 
>>> A reference to SRTP is missing. Please add.>
>> 
>> Thanks. Will do.
> 
> I think referencing SRTP here is to narrow. I think the appropriate
> thing to point out is the need for source authentication and message
> integrity and then point to the need for a security solution that
> provide this. SRTP is a transport security solution, without
> key-management. So pointing at this to resolve this issue is
> insufficient and also not deployable. I think a better reference now
> that it exist and is getting closer to publication might be:
> 
> https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-security-options/
> 
> Cheers
> 
> Magnus Westerlund
> 
> ----------------------------------------------------------------------
> Multimedia Technologies, Ericsson Research EAB/TVM
> ----------------------------------------------------------------------
> Ericsson AB                | Phone  +46 10 7148287
> Färögatan 6                | Mobile +46 73 0949079
> SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com
> ----------------------------------------------------------------------
> 
This e-mail and its contents are subject to the DISCLAIMER at http://www.tno.nl/emaildisclaimer