Subject: [secdir] secdir review of draft-ietf-avt-rtp-rfc3984bis-10
From: Radia Perlman <[email-masked]>
To: [email-masked], [email-masked], [email-masked]
Date: Sun, 25 Apr 2010 22:14:05 -0700
List-Id: Security Area Directorate <secdir.ietf.org>

This document just describes how to carry video in RTP. Apparently
there is a standard in ISO and a standard in ITU (ITU-T Recommendation
H.264 and ISO/IEC International Standard 14496 Part 10) that both
specify nearly identical compression algorithms for video encoding.
Given that this document is not describing the video encoding itself,
but just how to carry it in RTP, it is a little surprising that this
document is 104 pages, but it describes what to do about reordering,
lost packets, fragmentation across packet boundaries, and so forth.

There really are not any security considerations, and certainly not
anything they missed in their security considerations section. One
thing that might be nice to mention is that it is dangerous to do
encryption without integrity protection because a single bit error in
the ciphertext can cause a lot of errors in the plaintext.

Radia