Re: [secdir] review of draft-ietf-mmusic-connectivity-precon-06

Sam Hartman <hartmans-ietf@mit.edu> Mon, 19 October 2009 16:06 UTC

Return-Path: <hartmans@mit.edu>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A0173A681E for <secdir@core3.amsl.com>; Mon, 19 Oct 2009 09:06:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.588
X-Spam-Level:
X-Spam-Status: No, score=-1.588 tagged_above=-999 required=5 tests=[AWL=0.677, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OjqXb1Oy+3nx for <secdir@core3.amsl.com>; Mon, 19 Oct 2009 09:06:25 -0700 (PDT)
Received: from mail.suchdamage.org (permutation-city.suchdamage.org [69.25.196.28]) by core3.amsl.com (Postfix) with ESMTP id 50B883A6778 for <secdir@ietf.org>; Mon, 19 Oct 2009 09:06:21 -0700 (PDT)
Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 4AED42003E; Mon, 19 Oct 2009 12:06:28 -0400 (EDT)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id A1891446F; Mon, 19 Oct 2009 12:06:26 -0400 (EDT)
To: Gonzalo Camarillo <Gonzalo.Camarillo@ericsson.com>
References: <p06240808c6f371223391@[193.0.26.228]> <4AD85644.5020904@ericsson.com>
From: Sam Hartman <hartmans-ietf@mit.edu>
Date: Mon, 19 Oct 2009 12:06:26 -0400
In-Reply-To: <4AD85644.5020904@ericsson.com> (Gonzalo Camarillo's message of "Fri\, 16 Oct 2009 14\:17\:24 +0300")
Message-ID: <tsliqebxta5.fsf@mit.edu>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: fluffy@cisco.com, secdir@ietf.org, oran@cisco.com, fandreas@cisco.com, dwing@cisco.com, rjsparks@nostrum.com
Subject: Re: [secdir] review of draft-ietf-mmusic-connectivity-precon-06
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Oct 2009 16:06:26 -0000

>>>>> "Gonzalo" == Gonzalo Camarillo <Gonzalo.Camarillo@ericsson.com> writes:

    Gonzalo> [RFC4032], it is strongly RECOMMENDED that integrity
    Gonzalo> protection be applied to the SDP session descriptions.
    Gonzalo> S/MIME [RFC3853] provides such end- to-end integrity
    Gonzalo> protection, as described in [RFC3261]. Additionally, the


I'm surprised you're referencing S/MIME here rather than something
like identity.
I understand none of the above  have huge deployment, but I thought we had a fairly strong understanding that S/MIME was not the direction we were moving towards.