Subject: [MMUSIC] BUNDLE: Security Considerations TODO

From: Christer Holmberg <[email-masked]>
Date: Tue, 2 Sep 2014 11:58:17 +0000

Hi,

In BUNDLE, we have the following TODO in the security considerations:

  "TODO: Think carefully about security analysis of reuse of same SDES
   key on multiple "m=" lines when the far end does not use BUNDLE and
   warn developers of any risks."

Isn't this solved by including unique keys in the initial offer, and then use the same keys IF the other endpoint use BUNDLE - similar to ICE candidates etc?

I would be thankful for any input text in order to address this :)

Regards,

Christer