Subject: [clue] IETF#93: CLUE notes

From: Christer Holmberg <[email-masked]>
Date: Tue, 21 Jul 2015 09:08:13 +0000

Hi,

Below are my notes from the CLUE session.

Regards,

Christer

---------------------------

TOPIC:     Document status

General:

========

-   The chairs indicated that there is a need for volunteers to review the protocol, signalling and RTP mapping drafts.

-   We need to make sure that security text is consistent throughout all documents.

Framework:

==========

XML schema:

-   There is a remaining open issue whether an IANA registry is needed for the policy token.

SIP Security:

-   It was indicated that the document should reference RF 3261 for general SIP security considerations.

-   It was indicated that more text is needed regarding user authentication. SIP in general allows unauthenticated users to establish sessions, but CLUE sessions may reveal information that one may not want to share with unauthenticated users. It was suggested to mandate authentication for CLUE sessions. ACTION POINT: Roni Even will send an e-mail to the mailing list, verifying the approach together with suggested text.

Media Security:

-   There was discussions regarding the mandatory usage/support of DTLS-SRTP. It was suggested to say that SUPPORT of DTLS-SRTP is mandatory among all CLUE entities, and that USAGE of *some* media security mechanism (not necessarily DTLS-SRTP) is mandatory. ACTION POINT: Roni Even will send an e-mail to the list, verifying the approach such together with suggested text.

Data channel:

=============

-   We need to reference the correct document regarding how to secure a data channel. ACTION POINT: Christer Holmberg will take care of the issue.

CLUE Protocol:

==============

No remaining open issues.

RTP Usage In CLUE:

==================

No remaining open issues. ACTION POINT: Roni Even will finalize some editorial work that is still needed.