Re: [secdir] secdir review of draft-ietf-avt-rtp-rfc3984bis-10

[Radia Perlman <[e-mail]>]

Sorry secdir and iesg for sending this twice...I've been trying to
figure out how to use the tools thing to get all the authors, and
apparently didn't do it right, so I'll manually put in the authors
names like I have done before, on previous secdir reviews.
(sending to [e-mail] bounced)



On Sun, Apr 25, 2010 at 10:14 PM, Radia Perlman <[e-mail]> wrote:
> This document just describes how to carry video in RTP. Apparently
> there is a standard in ISO and a standard in ITU (ITU-T Recommendation
> H.264 and ISO/IEC International Standard 14496 Part 10) that both
> specify nearly identical compression algorithms for video encoding.
> Given that this document is not describing the video encoding itself,
> but just how to carry it in RTP, it is a little surprising that this
> document is 104 pages, but it describes what to do about reordering,
> lost packets, fragmentation across packet boundaries, and so forth.
>
> There really are not any security considerations, and certainly not
> anything they missed in their security considerations section. One
> thing that might be nice to mention is that it is dangerous to do
> encryption without integrity protection because a single bit error in
> the ciphertext can cause a lot of errors in the plaintext.
>
> Radia
>