Re: Plan for moving forward

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

At Sat, 02 Jun 2007 15:57:11 -0700,
Lakshminath Dondeti wrote:
> 
> 
> 
> On 6/2/2007 10:36 AM, Eric Rescorla wrote:
> > At Sat, 2 Jun 2007 10:29:56 -0700,
> 
> > Totally agree. I'm just saying that we ought to think of the 
> > authentication as happening in the signalling and being transferred
> > into the media. We should try to avoid having authentication 
> > mechanisms which authenticate only the media and not the signalling.
> 
> Why?  If we apply this to other use cases, this is akin to saying that 
> we ought to tie access authentication to end-to-end secure communication.

What other uses cases?

This group is about keying secure RTP sessions that are set up 
via SIP. In that context, SIP is the layer at which identities
are meaningful and end-to-end secure communication is about
leveraging those identities into the provision of secure media.


> I can see the point that in case of SIP, communicating parties may 
> choose to use identities asserted in the signaling path.

I'm not sure what you mean by "asserted". The identities or 
only relevant in the signalling path. What's needed here is that
the media path setup makes sure you're talking to the same entities.

-Ekr