Re: [Sframe] SFrame signatures

This was one of the issues that came up when we first met.

One virtue of the draft not being adopted is that the team working on it is free to make the choice without our permission.  It is just a proposal.

I read the charter here as being flexible on this point.  We can decide whether signing is in scope or not.  Clearly there are advantages to signing.  Would those who want signing be OK with the answer being that it can be added later?

On Sat, Mar 20, 2021, at 00:41, Raphael Robert wrote:
> I for one disagree with just dropping the only mechanism that can 
> provide sender authentication without further discussion or an adequate 
> substitute. I’d also be interested to learn more about the specifics 
> here.
> 
> I am well aware of the complexity of the topic, given that a) 
> signatures and verifications are somewhat expensive and b) packets 
> might get dropped. Nevertheless — like Cullen said — there are 
> scenarios where signatures are important.
> 
> Raphael
> 
> 
> > On 19. Mar 2021, at 04:28, Cullen Jennings <fluffy@iii.ca> wrote:
> > 
> > 
> > Could you say a bit more about the issue is with signing?  I wonder how much the issue is the complexity of trying to get teh bandwidth savings of signing across multiple frames vs just doing a single frame. 
> > 
> > There are a few uses  that is think is fairly common which drive the need for something like signing. Imagine you have a bot listening to the call to do real time transcription and translation of the call. It would be nice to give that bot read access to the media but not write access to contribute media. If the media is signed, this is fairly easy to do by blocking the bots ability to contribute to the mix but it is not clear how to do this without something like signing. 
> > 
> > 
> >> On Mar 18, 2021, at 4:15 PM, Justin Uberti <juberti=40google.com@dmarc.ietf.org> wrote:
> >> 
> >> In recent discussions regarding signatures for SFrame we have questioned the usefulness of this feature and considered removing it. Upon looking closer into the details here, we have also determined more work would be required to properly specify it.
> >> 
> >> Given this, the authoring team would like to officially propose removing the signature feature from the specification. If you are using SFrame signatures in your application and disagree with this direction, please let us know by the end of next week (Friday, March 26).
> >> 
> >> Justin
> >> -- 
> >> Sframe mailing list
> >> Sframe@ietf.org
> >> https://www.ietf.org/mailman/listinfo/sframe
> > 
> > -- 
> > Sframe mailing list
> > Sframe@ietf.org
> > https://www.ietf.org/mailman/listinfo/sframe
> 
> -- 
> Sframe mailing list
> Sframe@ietf.org
> https://www.ietf.org/mailman/listinfo/sframe
>