Subject: [siprec] Plea for more detail on security requirements

From: "Elwell, John" <[email-masked]>
Date: Thu, 30 Sep 2010 11:55:20 +0200

At the interim meeting this week, it was noted that we need a lot more detail on security requirements. This is likely to be the critical factor holding up completion of the requirements document. At present, we just have a very general security requirement:
"REQ-029 The mechanism MUST support a means of providing security
   (confidentiality, integrity and authentication) for the SIPREC."

We need more details on what these aspects mean and whether there are any other specific considerations - I think Cullen mentioned a couple on the call.

Please make proposals on what we might need to consider as specific security requirements.

John (as chair)