[tram] Chrome STUN Origin proof-of-concept...

"Yoakum, John H (John)" <yoakum@avaya.com> Thu, 26 June 2014 01:11 UTC

Return-Path: <yoakum@avaya.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B74D1B2E9D for <tram@ietfa.amsl.com>; Wed, 25 Jun 2014 18:11:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.351
X-Spam-Level:
X-Spam-Status: No, score=-1.351 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.651] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6L78MM0zMF2v for <tram@ietfa.amsl.com>; Wed, 25 Jun 2014 18:11:10 -0700 (PDT)
Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F8431B2E96 for <tram@ietf.org>; Wed, 25 Jun 2014 18:11:09 -0700 (PDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: An4FAD9yq1OHCzIm/2dsb2JhbABVA4JGIyQfM1q6SoE3HgGHPwGBCBZ1hAUBAQMSG14BFRVWJgEEGxMHiCABDJYUhFyodBeOSyEogiUPRCSBFgWcF4VhjESDQoIw
X-IronPort-AV: E=Sophos; i="5.01,548,1400040000"; d="scan'208,217"; a="62152613"
Received: from unknown (HELO p-us1-erheast-smtpauth.us1.avaya.com) ([135.11.50.38]) by de307622-de-outbound.net.avaya.com with ESMTP; 25 Jun 2014 21:11:07 -0400
X-OutboundMail_SMTP: 1
Received: from unknown (HELO AZ-US1EXHC01.global.avaya.com) ([135.11.85.12]) by p-us1-erheast-out.us1.avaya.com with ESMTP/TLS/AES128-SHA; 25 Jun 2014 21:08:14 -0400
Received: from AZ-US1EXMB06.global.avaya.com ([fe80::38da:dafb:7358:e6f5]) by AZ-US1EXHC01.global.avaya.com ([135.11.85.12]) with mapi id 14.03.0174.001; Wed, 25 Jun 2014 21:11:06 -0400
From: "Yoakum, John H (John)" <yoakum@avaya.com>
To: "tram@ietf.org" <tram@ietf.org>
Thread-Topic: Chrome STUN Origin proof-of-concept...
Thread-Index: Ac+Q2Bm/29VW8CF3RTKIGa2IcrvGcQ==
Date: Thu, 26 Jun 2014 01:11:05 +0000
Message-ID: <93BEDDC39A54294B9E78C7860516FA474396523F@AZ-US1EXMB06.global.avaya.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [135.11.85.50]
Content-Type: multipart/alternative; boundary="_000_93BEDDC39A54294B9E78C7860516FA474396523FAZUS1EXMB06glob_"
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/tram/aX3LSmBXvEWWmIGgegztni9DG94
Subject: [tram] Chrome STUN Origin proof-of-concept...
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jun 2014 01:11:34 -0000

We now have a proof-of-concept version of the Chrome browser (nicknamed 'Chromeo') that sends Origin insight in STUN and TURN messages (hopefully in full compliance with the proposed standards draft).  It uses a new STUN attribute with a value of 0x802F as initially proposed.  It has been implemented with a Chrome flag to enable and disable this unique feature (and is by default disabled to prevent any non-intentional use of this feature until the standard is finalized).

We have built 'Chromeo' for Linux and have verified with WireShark that proper STUN Origin attributes are being included in STUN/TURN messages sent by the browser to servers (screen captures of STUN messages illustrating the Origin attribute and content are available however I was not sure if it is considered appropriate to attach any images to a post of this nature).

Coordinated changes to both the WebRTC and Chromium open source projects have been submitted for consideration.  The two submitted change lists together implement a proof-of-concept of the browser portion of the STUN Origin draft: http://tools.ietf.org/html/draft-johnston-tram-stun-origin-02 and Oleg has previously posted that he has provided a proof-of-concept for the TURN sever end of the solution.

Hopefully these two proof-of-concept efforts will help us quickly drive the STUN Origin standard effort to fruition and help browsers quickly implement STUN Origin enhancements.


Cheers,
John

AVAYA
1.919.425.8446