Re: Plan for moving forward

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

At Thu, 07 Jun 2007 11:26:44 -0700,
Lakshminath Dondeti wrote:
> 
> 
> Thanks Matt.  I know of cases where skipping the self-signed cert on the 
> UAC side would be considered necessary.  Broadly speaking whereas 
> verifying server-side certs as in case of https is alright, client-side 
> certs, self-signed or not, are not really viable at the moment.

Can you provide more support for this claim?

The problems with client auth in HTTPS are almost entirely due
to user interface, but in the of DTLS-SRTP, they client auth
is hidden under the covers of the implementation and so this
is not an issue.

-Ekr