Re: [secdir] review of draft-ietf-mmusic-connectivity-precon-06

"Dan Wing" <dwing@cisco.com> Mon, 19 October 2009 16:11 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0FBCF3A68F9 for <secdir@core3.amsl.com>; Mon, 19 Oct 2009 09:11:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.984
X-Spam-Level:
X-Spam-Status: No, score=-5.984 tagged_above=-999 required=5 tests=[AWL=0.615, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4YRnDSMhSTT8 for <secdir@core3.amsl.com>; Mon, 19 Oct 2009 09:11:34 -0700 (PDT)
Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 2650B3A6899 for <secdir@ietf.org>; Mon, 19 Oct 2009 09:11:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=dwing@cisco.com; l=1163; q=dns/txt; s=sjiport05001; t=1255968701; x=1257178301; h=from:sender:reply-to:subject:date:message-id:to:cc: mime-version:content-transfer-encoding:content-id: content-description:resent-date:resent-from:resent-sender: resent-to:resent-cc:resent-message-id:in-reply-to: references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; z=From:=20"Dan=20Wing"=20<dwing@cisco.com>|Subject:=20RE: =20[secdir]=20review=20of=20draft-ietf-mmusic-connectivit y-precon-06|Date:=20Mon,=2019=20Oct=202009=2009:11:38=20- 0700|Message-ID:=20<003b01ca50d6$d6d2e7d0$c4f0200a@cisco. com>|To:=20"'Sam=20Hartman'"=20<hartmans-ietf@mit.edu>, =0D=0A=20=20=20=20=20=20=20=20"'Gonzalo=20Camarillo'"=20< Gonzalo.Camarillo@ericsson.com>|Cc:=20"'Stephen=20Kent'" =20<kent@bbn.com>,=20<fluffy@cisco.com>,=20<secdir@ietf.o rg>,=0D=0A=20=20=20=20=20=20=20=20<oran@cisco.com>,=20<fa ndreas@cisco.com>,=20<rjsparks@nostrum.com>|MIME-Version: =201.0|Content-Transfer-Encoding:=207bit|In-Reply-To:=20< tsliqebxta5.fsf@mit.edu>|References:=20<p06240808c6f37122 3391@[193.0.26.228]><4AD85644.5020904@ericsson.com>=20<ts liqebxta5.fsf@mit.edu>; bh=alINKYAvlM4m0eUk2j2LB57WbVWoj154fQEv+iOdAPw=; b=AtTfWxqTV0DeG06HDmrU9e3iRgzO8WBI70wbvPWxXvx3VdLCUnXUtlBt rJI5bi8HQ0e+g6EwxiRj5F08K8HCy1p5REuSyR6nsmJDusx2Qr/Opog8w iDuo0UGR2RJ1b0Oc8ZX74/SZsF77I1ff63ofUwBNwzJpdo/EudsY6ES0r 8=;
Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-AV: E=Sophos;i="4.44,586,1249257600"; d="scan'208";a="99596809"
Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-5.cisco.com with ESMTP; 19 Oct 2009 16:11:39 +0000
Received: from dwingwxp01 ([10.32.240.196]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id n9JGBcJu007366; Mon, 19 Oct 2009 16:11:38 GMT
From: Dan Wing <dwing@cisco.com>
To: 'Sam Hartman' <hartmans-ietf@mit.edu>, 'Gonzalo Camarillo' <Gonzalo.Camarillo@ericsson.com>
References: <p06240808c6f371223391@[193.0.26.228]><4AD85644.5020904@ericsson.com> <tsliqebxta5.fsf@mit.edu>
Date: Mon, 19 Oct 2009 09:11:38 -0700
Message-ID: <003b01ca50d6$d6d2e7d0$c4f0200a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <tsliqebxta5.fsf@mit.edu>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-Index: AcpQ1h6Ym/HgXZDQQrGzRQ1L6l6HqgAAIu7Q
X-Mailman-Approved-At: Mon, 19 Oct 2009 09:13:04 -0700
Cc: fluffy@cisco.com, secdir@ietf.org, oran@cisco.com, fandreas@cisco.com, rjsparks@nostrum.com
Subject: Re: [secdir] review of draft-ietf-mmusic-connectivity-precon-06
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Oct 2009 16:11:35 -0000

 

> -----Original Message-----
> From: Sam Hartman [mailto:hartmans-ietf@mit.edu] 
> Sent: Monday, October 19, 2009 9:06 AM
> To: Gonzalo Camarillo
> Cc: Stephen Kent; fluffy@cisco.com; secdir@ietf.org; 
> oran@cisco.com; fandreas@cisco.com; dwing@cisco.com; 
> rjsparks@nostrum.com
> Subject: Re: [secdir] review of 
> draft-ietf-mmusic-connectivity-precon-06
> 
> >>>>> "Gonzalo" == Gonzalo Camarillo 
> <Gonzalo.Camarillo@ericsson.com> writes:
> 
>     Gonzalo> [RFC4032], it is strongly RECOMMENDED that integrity
>     Gonzalo> protection be applied to the SDP session descriptions.
>     Gonzalo> S/MIME [RFC3853] provides such end- to-end integrity
>     Gonzalo> protection, as described in [RFC3261]. Additionally, the
> 
> 
> I'm surprised you're referencing S/MIME here rather than something
> like identity.
> I understand none of the above  have huge deployment, but I 
> thought we had a fairly strong understanding that S/MIME was 
> not the direction we were moving towards.

You're right.  S/MIME doesn't work and and isn't used.  The 
suggestion for integrity protection should be RFC4474 ("SIP 
Identity").

-d