Re: [Sframe] SFrame signatures

I for one disagree with just dropping the only mechanism that can provide sender authentication without further discussion or an adequate substitute. I’d also be interested to learn more about the specifics here.

I am well aware of the complexity of the topic, given that a) signatures and verifications are somewhat expensive and b) packets might get dropped. Nevertheless — like Cullen said — there are scenarios where signatures are important.

Raphael

> On 19. Mar 2021, at 04:28, Cullen Jennings <fluffy@iii.ca> wrote:
> 
> 
> Could you say a bit more about the issue is with signing?  I wonder how much the issue is the complexity of trying to get teh bandwidth savings of signing across multiple frames vs just doing a single frame. 
> 
> There are a few uses  that is think is fairly common which drive the need for something like signing. Imagine you have a bot listening to the call to do real time transcription and translation of the call. It would be nice to give that bot read access to the media but not write access to contribute media. If the media is signed, this is fairly easy to do by blocking the bots ability to contribute to the mix but it is not clear how to do this without something like signing. 
> 
> 
>> On Mar 18, 2021, at 4:15 PM, Justin Uberti <juberti=40google.com@dmarc.ietf.org> wrote:
>> 
>> In recent discussions regarding signatures for SFrame we have questioned the usefulness of this feature and considered removing it. Upon looking closer into the details here, we have also determined more work would be required to properly specify it.
>> 
>> Given this, the authoring team would like to officially propose removing the signature feature from the specification. If you are using SFrame signatures in your application and disagree with this direction, please let us know by the end of next week (Friday, March 26).
>> 
>> Justin
>> -- 
>> Sframe mailing list
>> Sframe@ietf.org
>> https://www.ietf.org/mailman/listinfo/sframe
> 
> -- 
> Sframe mailing list
> Sframe@ietf.org
> https://www.ietf.org/mailman/listinfo/sframe