[tram] Errata 4826 on RFC 7635

Magnus Westerlund <magnus.westerlund@ericsson.com> Wed, 23 September 2020 14:29 UTC

From: Magnus Westerlund <magnus.westerlund@ericsson.com>
To: "tram@ietf.org" <tram@ietf.org>
Thread-Topic: Errata 4826 on RFC 7635
Thread-Index: AQHWkbX4ZUzscKJ4OECwqW+0Y36GFA==
Date: Wed, 23 Sep 2020 14:29:39 +0000
Message-ID: <fca0a26d208b6f4b0739ba3517c78665faa9b724.camel@ericsson.com>
Accept-Language: sv-SE, en-US
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
Content-ID: <27D002F2A83EF546B43BDB7477A752FB@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 786901f3-1bd4-47df-1595-08d85fcd1b18
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2020 14:29:39.9353 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 5+XZcOB9TZeedF9wGlYDd/YulXKxR0FiNXwBd/AaqOrNueb8aLcJRiB/Pyshsh55+BAgNHTWrtGyKoF6djv6v4f3zs4Rd9Uo6lkSFpF2kp0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3706
Archived-At: <https://mailarchive.ietf.org/arch/msg/tram/ZbT5Ia67pGCfD31Ha1oWh6IAzqQ>
Subject: [tram] Errata 4826 on RFC 7635
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Sep 2020 14:29:49 -0000

Hi,

I would like some feedback on what to do with this Errrata?

https://www.rfc-editor.org/errata/eid4826

Errata ID: 4826
Status: Reported
Type: Technical
Publication Format(s) : TEXT
Reported By: Mihály Mészáros
Date Reported: 2016-10-10

Section 8. says:

8.  STUN Client Behavior

   o  The client looks for the MESSAGE-INTEGRITY attribute in the
      response.  If MESSAGE-INTEGRITY is absent or the value computed
      for message integrity using mac_key does not match the contents of
      the MESSAGE-INTEGRITY attribute, then the response MUST be
      discarded.

   o  If the access token expires, then the client MUST obtain a new
      token from the authorization server and use it for new STUN
      requests.

It should say:

8.  STUN Client Behavior

   o  The client looks for the MESSAGE-INTEGRITY attribute in the
      response.  If MESSAGE-INTEGRITY is absent or the value computed
      for message integrity using mac_key does not match the contents of
      the MESSAGE-INTEGRITY attribute, then the response MUST be
      discarded.

9.  Application (OAuth Client) Behavior

   o  If the access token expires, then the Application (OAuth client) 
      MUST obtain a new token from the authorization server, and update
      STUN client to use it for new STUN requests.

   o  Application SHOULD pass only a subset of the received OAuth 
      parameters to the STUN client. Only parameters SHOULD be passed 
      that will be really needed and used by the STUN Client. 
      In this way, only the kid, the mac_key, and the access_token
      parameters SHOULD be passed to the STUN client.
      

...
Renumber the sections
...

Notes:

1. Remove from STUN client behaviour the access_token renewal function,
and move this function up to application level.
2. Pass to STUN only that subset of the OAuth parameters, that will be really
used by STUN Client. 

 
Cheers

Magnus Westerlund 


----------------------------------------------------------------------
Networks, Ericsson Research
----------------------------------------------------------------------
Ericsson AB                 | Mobile +46 73 0949079
Torshamnsgatan 23           |
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------

[tram] Errata 4826 on RFC 7635 Magnus Westerlund
Re: [tram] Errata 4826 on RFC 7635 Magnus Westerlund