Subject: [Speermint] New version of draft-ietf-speermint-voipthreats-02.txt submitted

From: "Jan Seedorf" <[email-masked]>
Date: Mon, 8 Mar 2010 11:09:45 +0100

Dear all,

We have submitted a new version of draft-ietf-speermint-voipthreats. Based on the lively discussion in Stockholm (IETF-75, we had not updated the draft since then), there is now a new section 3.2. "How to fulfill the security requirements for SPEERMINT" which discusses TLS vs. IPSec for addressing the SPEERMINT security requirements (which are stated in Jean-Francois' requirements draft), with a preference for TLS and saying why TLS is preferable.

We did not update the text on DNSSEC (another feedback from IETF-75). We are still waiting for feedback from DNSSEC experts (Peter: if you read this, you are one of them :)). Also, if ENUM is used for the LUF, DNSSEC is probably the best way to fulfill the security requirements in general, and now DNSSEC is listed as a subsection in section 4 "countermeasures". Thus, the text on DNSSEC should maybe be moved to the new section 3.2. (not sure about this).

Since this is a WG item, we are looking for feedback from the WG on the latest additions, and on DNSSEC and where to discuss it in the draft.

Best regards,
Jan

-----Original Message-----
From: [email-masked] [mailto:[email-masked]] On Behalf Of [email-masked]
Sent: Montag, 8. März 2010 11:00
To: [email-masked]
Cc: [email-masked]
Subject: [Speermint] I-D Action:draft-ietf-speermint-voipthreats-02.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Session PEERing for Multimedia INTerconnect Working Group of the IETF.

	Title           : SPEERMINT Security Threats and Suggested Countermeasures
	Author(s)       : J. Seedorf, et al.
	Filename        : draft-ietf-speermint-voipthreats-02.txt
	Pages           : 25
	Date            : 2010-03-08

This memo presents the different security threats related to SPEERMINT, classifying them into threats to the Lookup Function (LUF), Location Routing Function (LRF), to the Signaling Function
(SF) and to the Media Function (MF).  The different instances of the threats are briefly introduced inside the classification.  Finally, the existing security solutions for SIP and RTP/RTCP are presented to describe the countermeasures currently available for such threats.
Security requirements for SPEERMINT can be found in draft-ietf-speermint-requirements.  The objective of this document is to identify and enumerate SPEERMINT-specific threat vectors and to give guidance for implementers on selecting appropriate countermeasures.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-speermint-voipthreats-02.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft.