RE: Media Security Requirements Draft: New Requirement

["Dan Wing" <dwing@xxxxxxxxx>]

> >I am not sure whether this requirement is directly related to 
> >media security (although it impacts it). Would ICE even work 
> >if you assume such restrictive middleboxes?
> 
> You MAY have some problems with ICE also, yes (possibly also with the
> protocols Dan listed, but I haven't worked with those, so I 
> can't tell).

Cullen mentioned any media arriving before 200 would fail -- 
including country-specific ringback tones, music played as the 
ringback tone, and IVRs ("1-800-Fedex", "Wecome to United 
Airlines, please select the following code describing the 
reason for your call").

Are those invalid use cases for RTP?  Or is IMS going to change
how SIP handles that stuff (forcing a 200?  Redefine the meaning
of 200?)

> >In some sense you seem to say that key management for media 
> >security has to be done along the signaling path and not 
> >along the media path. 
> 
> I think that option should be considered, yes.

They were considered, and found to be deficient.  

If there was an inaccuracy in the analysis 
(draft-wing-rtpsec-keying-eval-02.txt) please do point out
the inaccuracy.  To my knowledge that analysis is accurate
and reached the conclusion that no existing exclusive 
signaling-path SRTP keying mechanism met the requirements
stated at the time. 

-d