Re: [tram] RFC 7635 on Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization

"Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com> Thu, 27 August 2015 12:13 UTC

Return-Path: <tireddy@cisco.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25BBB1B2BBA for <tram@ietfa.amsl.com>; Thu, 27 Aug 2015 05:13:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level:
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4MSila8WS7BE for <tram@ietfa.amsl.com>; Thu, 27 Aug 2015 05:13:14 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 327571A8AC4 for <tram@ietf.org>; Thu, 27 Aug 2015 05:13:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7250; q=dns/txt; s=iport; t=1440677594; x=1441887194; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=wGzjAAsyUaykKZCDHsBuG7wYTr80MoK0JUsWmqbpcNY=; b=PILty3+rO5gHsHXc0oqiXaDM+9LySH04wqzqwZwuM3lSiZe86qqjUUcU WAcWBCfcrErsuqGjGYgY/GhlMPEX1nnmjSuskYCXi7GEC3Lbndt+Qamtu JGLglXWq/ozeLjlJhybeVD4Wp9+BGEQ3di12SRwh6tvdekQE8YSbbGsUH 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DEAgC4/d5V/4ENJK1dgxtUaQaDHbpUAQmBbgqFewIcgRc4FAEBAQEBAQGBCoQjAQEBAwEBAQEgERogCwUHBAIBCA4DAwEBAQECAgYCFwQDAgICHwYKARQBCAgCBA4FCAwHAgSHeAMKCA2zGI9TDYUvAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4Eiij+BPYESgWgJBhQxBwaCYy+BFAWMbIhRAYUFhgCDN4QyjSmHOyaCQYE+cQGBBAIHFwQDHIEFAQEB
X-IronPort-AV: E=Sophos;i="5.17,422,1437436800"; d="scan'208";a="182433496"
Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-4.cisco.com with ESMTP; 27 Aug 2015 12:13:13 +0000
Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id t7RCDDFe023205 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 27 Aug 2015 12:13:13 GMT
Received: from xch-rcd-018.cisco.com (173.37.102.28) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 27 Aug 2015 07:13:12 -0500
Received: from xhc-aln-x07.cisco.com (173.36.12.81) by xch-rcd-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5 via Frontend Transport; Thu, 27 Aug 2015 07:13:12 -0500
Received: from xmb-rcd-x10.cisco.com ([169.254.15.53]) by xhc-aln-x07.cisco.com ([173.36.12.81]) with mapi id 14.03.0248.002; Thu, 27 Aug 2015 07:13:12 -0500
From: "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com>
To: Oleg Moskalenko <mom040267@gmail.com>
Thread-Topic: [tram] RFC 7635 on Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization
Thread-Index: AQHQ4HQDWZi7uzWPSki5TrhC6SIUVZ4fzPQA//+62ZCAAIz/AP//ragw
Date: Thu, 27 Aug 2015 12:13:11 +0000
Message-ID: <913383AAA69FF945B8F946018B75898A478C7C3E@xmb-rcd-x10.cisco.com>
References: <20150827025548.75926180476@rfc-editor.org> <CALDtMr+JCS5FW6PyEVepdHabM5jO96gkJ8FvToU_Hn-THLEzOQ@mail.gmail.com> <913383AAA69FF945B8F946018B75898A478C7AF6@xmb-rcd-x10.cisco.com> <CALDtMrKRKgMnxozKUcqBVA9aLFk+AFRmK1ABUy9AYYWy4LN+Qw@mail.gmail.com>
In-Reply-To: <CALDtMrKRKgMnxozKUcqBVA9aLFk+AFRmK1ABUy9AYYWy4LN+Qw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.65.60.108]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/tram/Eg8ry484Cp9Fu7mCD1r7Ls7RdZI>
Cc: "tram@ietf.org" <tram@ietf.org>
Subject: Re: [tram] RFC 7635 on Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2015 12:13:17 -0000

> -----Original Message-----
> From: Oleg Moskalenko [mailto:mom040267@gmail.com]
> Sent: Thursday, August 27, 2015 5:37 PM
> To: Tirumaleswar Reddy (tireddy)
> Cc: tram@ietf.org
> Subject: Re: [tram] RFC 7635 on Session Traversal Utilities for NAT (STUN)
> Extension for Third-Party Authorization
> 
> Tiru, thanks for the fix (I suppose that the new Mobility document, version 04
> to be published).
> 
> But in the coturn server, I still have a conflict problem. It is implementing the
> ORIGIN draft, too; and for the ORIGIN attribute, I currently have 0x802F
> tentatively assigned.
> 
> I understand that we do not know when and if IANA will ever assign real
> numbers for those attributes because I am not sure which one document will
> ever become an RFC.
> 
> I know that there are people who are using implementation of those drafts
> for experimental purposes. Can we avoid that new conflict ?
> Could you please assign a different number to MIBILITY-TICKET ? I suppose
> that any number is going to be temporary, anyway, and everything has to go
> through the normal IANA application etc. In coturn, I have 0x8030 available -
> can we use that for MIBILITY-TICKET ?

Yes, updated draft.

-Tiru

> 
> Thanks !
> Oleg
> 
> 
> On Thu, Aug 27, 2015 at 2:05 AM, Tirumaleswar Reddy (tireddy)
> <tireddy@cisco.com> wrote:
> >> -----Original Message-----
> >> From: tram [mailto:tram-bounces@ietf.org] On Behalf Of Oleg
> >> Moskalenko
> >> Sent: Thursday, August 27, 2015 1:20 PM
> >> To: tram@ietf.org
> >> Subject: Re: [tram] RFC 7635 on Session Traversal Utilities for NAT
> >> (STUN) Extension for Third-Party Authorization
> >>
> >> With this RFC 7635 issued, we now have a conflict with STUN
> >> attributes in different documents.
> >>
> >> RFC 7635 suggest 0x802E attribute for THIRD-PARTY-AUTHORIZATION.
> >>
> >> The same value is used for MOBILITY-TICKET in TURN-mobility draft:
> >>
> >> https://tools.ietf.org/html/draft-wing-tram-turn-mobility-03
> >>
> >> That has to be fixed.
> >
> > Yes, fixed in my local copy (assigned 0x802F).
> >
> > -Tiru
> >
> >>
> >> Thanks
> >> Oleg
> >>
> >>
> >> On Wed, Aug 26, 2015 at 7:55 PM,  <rfc-editor@rfc-editor.org> wrote:
> >> > A new Request for Comments is now available in online RFC libraries.
> >> >
> >> >
> >> >         RFC 7635
> >> >
> >> >         Title:      Session Traversal Utilities for NAT
> >> >                     (STUN) Extension for Third-Party Authorization
> >> >         Author:     T. Reddy, P. Patil,
> >> >                     R. Ravindranath, J. Uberti
> >> >         Status:     Standards Track
> >> >         Stream:     IETF
> >> >         Date:       August 2015
> >> >         Mailbox:    tireddy@cisco.com,
> >> >                     praspati@cisco.com,
> >> >                     rmohanr@cisco.com,
> >> >                     justin@uberti.name
> >> >         Pages:      24
> >> >         Characters: 51753
> >> >         Updates/Obsoletes/SeeAlso:   None
> >> >
> >> >         I-D Tag:    draft-ietf-tram-turn-third-party-authz-16.txt
> >> >
> >> >         URL:        https://www.rfc-editor.org/info/rfc7635
> >> >
> >> >         DOI:        http://dx.doi.org/10.17487/RFC7635
> >> >
> >> > This document proposes the use of OAuth 2.0 to obtain and validate
> >> > ephemeral tokens that can be used for Session Traversal Utilities
> >> > for NAT (STUN) authentication.  The usage of ephemeral tokens
> >> > ensures that access to a STUN server can be controlled even if the
> >> > tokens are compromised.
> >> >
> >> > This document is a product of the TURN Revised and Modernized
> >> > Working
> >> Group of the IETF.
> >> >
> >> > This is now a Proposed Standard.
> >> >
> >> > STANDARDS TRACK: This document specifies an Internet Standards
> >> > Track protocol for the Internet community, and requests discussion
> >> > and suggestions for improvements.  Please refer to the current
> >> > edition of the Official Internet Protocol Standards
> >> > (https://www.rfc-editor.org/standards) for the standardization
> >> > state and status of this protocol.  Distribution of this memo is unlimited.
> >> >
> >> > This announcement is sent to the IETF-Announce and rfc-dist lists.
> >> > To subscribe or unsubscribe, see
> >> >   https://www.ietf.org/mailman/listinfo/ietf-announce
> >> >   https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
> >> >
> >> > For searching the RFC series, see https://www.rfc-editor.org/search
> >> > For downloading RFCs, see https://www.rfc-editor.org/rfc.html
> >> >
> >> > Requests for special distribution should be addressed to either the
> >> > author of the RFC in question, or to rfc-editor@rfc-editor.org.
> >> > Unless specifically noted otherwise on the RFC itself, all RFCs are
> >> > for unlimited distribution.
> >> >
> >> >
> >> > The RFC Editor Team
> >> > Association Management Solutions, LLC
> >> >
> >> >
> >> > _______________________________________________
> >> > tram mailing list
> >> > tram@ietf.org
> >> > https://www.ietf.org/mailman/listinfo/tram
> >>
> >> _______________________________________________
> >> tram mailing list
> >> tram@ietf.org
> >> https://www.ietf.org/mailman/listinfo/tram