Subject: Re: [AVT] draft-ietf-avt-ports-for-ucast-mcast-rtp-04

From: "Ali C. Begen (abegen)" <[email-masked]>
Date: Wed, 1 Dec 2010 06:55:07 -0800

Keith,

I will let others say their own opinions but see the message from Magnus about the topic you are inquiring about:
http://www.ietf.org/mail-archive/web/avt/current/msg13774.html

The -04 version addressed this. 

Magnus also provided a review for -04 for the whole text (including the security section) and we are trying to close those comments/issues as well.

Thanks.
-acbegen

> -----Original Message-----
> From: [email-masked] [mailto:[email-masked]] On Behalf Of DRAGE, Keith (Keith)
> Sent: Wednesday, December 01, 2010 9:47 AM
> To: 'IETF AVT WG'
> Subject: [AVT] draft-ietf-avt-ports-for-ucast-mcast-rtp-04
> 
> (As WG chair)
> 
> At the AVT face to face meeting in Beijing, there was considerable discussion on the security issues regarding token versus
> cookie.
> 
> My only conclusion from that discussion was that the text needs to be improved, and shortening the timer may provide the
> only real solution to such attacks.
> 
> Has this issue been nailed down and closed in the -04 version of the document, or is more work still required?
> 
> In particular I'd like to see responses from EKR, Magnus and Colin, who all indicated more work was required in Beijing.
> 
> regards
> 
> Keith
> _______________________________________________
> Audio/Video Transport Working Group
> [email-masked]
> https://www.ietf.org/mailman/listinfo/avt