From nobody Thu Feb 2 06:28:24 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57667129470; Thu, 2 Feb 2017 06:28:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TWyU8hn9dB2n; Thu, 2 Feb 2017 06:28:20 -0800 (PST) Received: from mail-yw0-x231.google.com (mail-yw0-x231.google.com [IPv6:2607:f8b0:4002:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC07F129430; Thu, 2 Feb 2017 06:28:19 -0800 (PST) Received: by mail-yw0-x231.google.com with SMTP id v200so11359540ywc.3; Thu, 02 Feb 2017 06:28:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=FeReLYHQH/m+QXqan9BHHtsuYXa2VYfAkDIlqF7hxbo=; b=By3JrtL5+7XqetUm5Gdfeqf/aSXIAITlwAAerKtHTlJdzbR0hOGh6tU2VdmVVTPlUa nmfwSF1W/uX6Sa/i/CbJzGLcdRivQgnoyDkB5zZNBBXWLq37byC55FAYk3Kx/aqRn4KH rmsVFsPkHAX0g5MdKdSNsUzj8aGqU2kIkNu0K7ql7X4lGXLELs5ru4A6DJ4tmVfyTvSV 1jgl8ouQfOg5madXD0RVlWe/MbUOfn7R+9ZpaCV/pXLJaq5dnsnrVRbo3r2TDipuPNHq 06SrV4/SVI7jz67yOx8gzptbNqHkhVRRPh7O3rw7kjhreNbC8c/RfEiIgcKUU4EIsyRg y0mg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=FeReLYHQH/m+QXqan9BHHtsuYXa2VYfAkDIlqF7hxbo=; b=pLI0bt2H2Vk0HOWQoO8lUbfDpXhIoBZdrd9Xnn6Y5djMXaypsI2mXoZdnCvz73EQ+h 2hrurC/kKoRHvU8d+ybQ9dy0Vri/ZJknkWxS006HfDldUhE0M3tUsrJiKzjM1ip17PyM lE/sf84vsfXeyH8Sge649yC5PNdOaTiWVZvE9gy2s0B59fFrqe6GTQCYAQi2ZrlDhTyb ZJT254r1U9r01MFVM/KdEKWobYqk6r3joYCNZTXBr/x/h25UXDcu6RdP4dW/mkY0H5M0 YF++fs8C6bZtmoSBbSc1vWMlwYFyFao+oRvT/t+qUgnrO5dcLfC4zEPFMaMPog4+d7wL p8WQ== X-Gm-Message-State: AIkVDXIlFH1f2hcFHhAVoGVpA5P/hpcEELruHi7i2LGJSloa7ivOQd2qFeZDCbRNh9B4Mm8/lj8GXj5HIgkeag== X-Received: by 10.129.137.6 with SMTP id z6mr5638991ywf.19.1486045698939; Thu, 02 Feb 2017 06:28:18 -0800 (PST) MIME-Version: 1.0 Received: by 10.37.221.132 with HTTP; Thu, 2 Feb 2017 06:28:18 -0800 (PST) In-Reply-To: <616B68FF-11A7-49D4-BB60-121A2A5C786A@cisco.com> References: <148466803770.32051.5938243863646069856.idtracker@ietfa.amsl.com> <616B68FF-11A7-49D4-BB60-121A2A5C786A@cisco.com> From: Spencer Dawkins at IETF Date: Thu, 2 Feb 2017 23:28:18 +0900 Message-ID: To: "Ram Mohan R (rmohanr)" Content-Type: multipart/alternative; boundary=94eb2c06a7ae01633905478cfae2 Archived-At: Cc: "bfcpbis@ietf.org" , "bfcpbis-chairs@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , The IESG , "Charles Eckel \(eckelcu\)" Subject: Re: [bfcpbis] Spencer Dawkins' Yes on draft-ietf-bfcpbis-bfcp-websocket-13: (with COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Feb 2017 14:28:22 -0000 --94eb2c06a7ae01633905478cfae2 Content-Type: text/plain; charset=UTF-8 Hi, Ram, On Mon, Jan 30, 2017 at 8:24 PM, Ram Mohan R (rmohanr) wrote: > Hi Spencer, > > Thanks for your feedback. Please see inline > > -----Original Message----- > From: Spencer Dawkins > Date: Tuesday, 17 January 2017 at 9:17 PM > To: The IESG > Cc: "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" websocket@ietf.org>, "Charles Eckel (eckelcu)" , " > bfcpbis-chairs@ietf.org" , "Charles Eckel > (eckelcu)" , "bfcpbis@ietf.org" > Subject: Spencer Dawkins' Yes on draft-ietf-bfcpbis-bfcp-websocket-13: > (with COMMENT) > Resent-From: > Resent-To: , , < > gsalguei@cisco.com>, , , > > Resent-Date: Tuesday, 17 January 2017 at 9:17 PM > > Spencer Dawkins has entered the following ballot position for > draft-ietf-bfcpbis-bfcp-websocket-13: Yes > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria. > html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-bfcp-websocket/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I have a couple of questions on authentication in this draft. > > Does this text, > > Since the WebSocket API does not distinguish between certificate > errors and other kinds of failure to establish a connection, it > is > expected that browser vendors will warn end users directly of any > kind of problem with the server certificate. > > apply to any WebSocket-based application? > > Yes. This is nothing specific to BFCP over webSocket. I think > perhaps this text is not a right fit for this document. I do see RFC6455 > (like in section 7.1.7) already talk about webSocket API and at certain > places on indicating failures to users. I will remove this text from this > spec. > > In this text, > > A floor control server that receives a message over TCP/WS can > request the use of TCP/WSS by generating an Error message, as > described in Section 13.8 of [I-D.ietf-bfcpbis-rfc4582bis], with an > Error code with a value of 9 (use TLS). > > is "request" the right word? Or is "require" more accurate, if the > server > isn't going to establish a TCP/WS connection? > > I think requires is appropriate here. I will re-word the text to: > > NEW: > A floor control server that receives a message over TCP/WS can > mandate the use of TCP/WSS by generating an Error message, as > described in Section 13.8 of [I-D.ietf-bfcpbis-rfc4582bis], with an > Error code with a value of 9 (use TLS). > > Is the above ok ? Both resolutions work for me (but do the right thing!). Spencer --94eb2c06a7ae01633905478cfae2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi, Ram,

On Mon, Jan 30, 2017 at 8:24 PM, Ram Mohan R (rmohanr) <rmohanr@ci= sco.com> wrote:
Hi Spencer,=

Thanks for your feedback. Please see inline <Ram>

-----Original Message-----
From: Spencer Dawkins <= spencerdawkins.ietf@gmail.com>
Date: Tuesday, 17 January 2017 at 9:17 PM
To: The IESG <iesg@ietf.org>
Cc: "dra= ft-ietf-bfcpbis-bfcp-websocket@ietf.org" <draft-ietf-bfcpbis-bfcp-= websocket@ietf.org>, "Charles Eckel (eckelcu)" <eckelcu@cisco.com>, "bfcpbis-chairs@ietf.org" <bfcpbis-chairs@ietf.org>, "= ;Charles Eckel (eckelcu)" <eck= elcu@cisco.com>, "bfcpbis@i= etf.org" <bfcpbis@ietf.org<= /a>>
Subject: Spencer Dawkins' Yes on draft-ietf-bfcpbis-bfcp-websocket= -13: (with COMMENT)
Resent-From: <alias-bounces@ie= tf.org>
Resent-To: <anton.roman@quobis= .com>, <stephane.c= azeaux@orange.com>, <gsalgu= ei@cisco.com>, <sergio.garcia.murillo@gmail.com>, <rmohanr@cisco.com>, <victor.pascual.avila@oracle.com>
Resent-Date: Tuesday, 17 January 2017 at 9:17 PM

=C2=A0 =C2=A0 Spencer Dawkins has entered the following ballot position for=
=C2=A0 =C2=A0 draft-ietf-bfcpbis-bfcp-websocket-13: Yes

=C2=A0 =C2=A0 When responding, please keep the subject line intact and repl= y to all
=C2=A0 =C2=A0 email addresses included in the To and CC lines. (Feel free t= o cut this
=C2=A0 =C2=A0 introductory paragraph, however.)


=C2=A0 =C2=A0 Please refer to https://www.i= etf.org/iesg/statement/discuss-criteria.html
=C2=A0 =C2=A0 for more information about IESG DISCUSS and COMMENT positions= .


=C2=A0 =C2=A0 The document, along with other ballot positions, can be found= here:
=C2=A0 =C2=A0 https://datatracker= .ietf.org/doc/draft-ietf-bfcpbis-bfcp-websocket/



=C2=A0 =C2=A0 --------------------------------------------------------= --------------
=C2=A0 =C2=A0 COMMENT:
=C2=A0 =C2=A0 --------------------------------------------------------= --------------

=C2=A0 =C2=A0 I have a couple of questions on authentication in this draft.=

=C2=A0 =C2=A0 Does this text,

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Since the WebSocket API does not disting= uish between certificate
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 errors and other kinds of failure to est= ablish a connection, it
=C2=A0 =C2=A0 is
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 expected that browser vendors will warn = end users directly of any
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 kind of problem with the server certific= ate.

=C2=A0 =C2=A0 apply to any WebSocket-based application?

<Ram> Yes. This is nothing specific to BFCP over webSocke= t. I think perhaps this text is not a right fit for this document. I do see= RFC6455 (like in section 7.1.7) already talk about webSocket API and at ce= rtain places on indicating failures to users. I will remove this text from = this spec.

=C2=A0 =C2=A0 In this text,

=C2=A0 =C2=A0 =C2=A0 =C2=A0A floor control server that receives a message o= ver TCP/WS can
=C2=A0 =C2=A0 =C2=A0 =C2=A0request the use of TCP/WSS by generating an Erro= r message, as
=C2=A0 =C2=A0 =C2=A0 =C2=A0described in Section 13.8 of [I-D.ietf-bfcpbis-r= fc4582bis], with an
=C2=A0 =C2=A0 =C2=A0 =C2=A0Error code with a value of 9 (use TLS).

=C2=A0 =C2=A0 is "request" the right word? Or is "require&qu= ot; more accurate, if the server
=C2=A0 =C2=A0 isn't going to establish a TCP/WS connection?

<Ram> I think requires is appropriate here. I will re-word the= text to:

NEW:
=C2=A0 =C2=A0 =C2=A0A floor control server that receives a= message over TCP/WS can
=C2=A0 =C2=A0 =C2=A0 mandate the use of TCP/WSS by generating an Err= or message, as
=C2=A0 =C2=A0 =C2=A0 =C2=A0described in Section 13.8 of [I= -D.ietf-bfcpbis-rfc4582bis], with an
=C2=A0 =C2=A0 =C2=A0 =C2=A0Error code with a value of 9 (use TLS).

=C2=A0 =C2=A0 Is the above ok ?

Both= resolutions work for me (but do the right thing!).

Spencer=C2=A0
--94eb2c06a7ae01633905478cfae2-- From nobody Thu Feb 2 06:45:45 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E555A129418; Thu, 2 Feb 2017 06:45:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=fiR9HT3A; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=ZjmIFWz0 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WKVmKkbfaObz; Thu, 2 Feb 2017 06:45:42 -0800 (PST) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D43A129416; Thu, 2 Feb 2017 06:45:42 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id E3C6C207CE; Thu, 2 Feb 2017 09:45:41 -0500 (EST) Received: from web5 ([10.202.2.215]) by compute7.internal (MEProxy); Thu, 02 Feb 2017 09:45:41 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=mesmtp; bh=l/JXfCUzoFChYIzHIorph5PM29 E=; b=fiR9HT3A/UFrCMZtGqiDOE45L1LLk13FAEEt5wmMCUy58yNvAShqNU/20A YLJ+64/lXrdOxuVvB/Iov7xr/orxwmmOB40xTjGVBURa2lJn7QlNp4iXecc17KNd 0beZczVZxk8DqLeniLRNC9WSL8sQxCrX52wSCpaDawpZGuvkI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=smtpout; bh=l/ JXfCUzoFChYIzHIorph5PM29E=; b=ZjmIFWz0A20+kd+Z4y3V+ZdnQHsLvIq2N5 XTmfDCVRUHVDhvzGMkabmQBnl7FQi0Mb9+x4EIIHqWbHOItymWNJfk3RxRA69iTk 8yRFY+M2pD2+CxfNBVUA9rDMxNQ+0ALYfQMB9KZtGv8jIQw/jYF/wwnaSf0Aovqh mOQh0L/lw= X-ME-Sender: Received: by mailuser.nyi.internal (Postfix, from userid 99) id C2ECB6ABF9; Thu, 2 Feb 2017 09:45:41 -0500 (EST) Message-Id: <1486046741.325454.868063856.1DE28627@webmail.messagingengine.com> From: Alexey Melnikov To: "Ram Mohan R (rmohanr)" , The IESG MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-e9b51b02 References: <148467088398.32098.5746976377858263906.idtracker@ietfa.amsl.com> In-Reply-To: Date: Thu, 02 Feb 2017 14:45:41 +0000 Archived-At: Cc: bfcpbis@ietf.org, draft-ietf-bfcpbis-bfcp-websocket@ietf.org, "Charles Eckel \(eckelcu\)" , bfcpbis-chairs@ietf.org Subject: Re: [bfcpbis] Alexey Melnikov's No Objection on draft-ietf-bfcpbis-bfcp-websocket-13: (with COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Feb 2017 14:45:44 -0000 Hi Ram, On Mon, Jan 30, 2017, at 03:11 PM, Ram Mohan R (rmohanr) wrote: > Hi Alexey, > > Please see inline for my responses > > -----Original Message----- > From: Alexey Melnikov > Date: Tuesday, 17 January 2017 at 10:04 PM > To: The IESG > Cc: "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" > , "Charles Eckel (eckelcu)" > , "bfcpbis-chairs@ietf.org" , > "Charles Eckel (eckelcu)" , "bfcpbis@ietf.org" > > Subject: Alexey Melnikov's No Objection on > draft-ietf-bfcpbis-bfcp-websocket-13: (with COMMENT) > Resent-From: > Resent-To: , , > , , > , > Resent-Date: Tuesday, 17 January 2017 at 10:04 PM > > Alexey Melnikov has entered the following ballot position for > draft-ietf-bfcpbis-bfcp-websocket-13: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut > this > introductory paragraph, however.) > > > Please refer to > https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-bfcp-websocket/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > > In 4.2, last sentence: wouldn't that require a new WebSocket > sub-protocol > identifier? > Yes section 10 of this draft defines the new sub-protocol > identifier. Do you see a need for anything else ? [Alexey]: The sentence in question was: While this specification assumes that BFCP encoding is only TLV binary, future documents may define other mechanisms like JSON serialization. I suggest you add some text saying that if the encoding changes new subprotocol identifier would need to be selected. Because otherwise old implementation (that use TLV binary) can't interop with new ones (that use JSON). > > In 6.2: some formatting errors in the PDF version. Also, I think you > meant Section 3.3 (not 3.2) when talking about WSS. > I have fixed this now in my local copy. Now we are having only one > attribute (a=websocket-uri) that will point to either ws-URI or wss-URI. Ok. > In 7.2: when referencing Section 3, you are missing the RFC number. > At > least section 3 of this draft is not relevant. > I fixed this now. I have pointed to the section of > ietf-bfcpbis-sdp-ws-uri where the new SDP attribute is defined. Ok. > In 8: HTTP authentication text is rather weak. > I will add the below text (considering the feedback from Kathleen > Moriarty and Stephen as well) > EXISTING: > If the status code received from the server is not 101, > the WebSocket client stack handles the response per HTTP > [RFC7230] procedures, in particular the > client might perform authentication if it receives 401 > status code. > NEW: > If the status code received from the server is not 101, > the WebSocket client stack handles the response per HTTP > [RFC7230] procedures, in particular the > client might perform authentication if it receives 401 > status code. The WebSocket clients are vulnerable to the > attacks > of basic authentication (mentioned in Section 4 of [RFC7617]) > and > digest authentication (mentioned in Section 5 of [RFC7616]). To > overcome > some of these weakness, the WebSocket clients can use HTTP > Origin-Bound Authentication (HOBA) > mechanism mentioned in [RFC7486]. > > Does this look ok ? New text is better. Thank you! > Regards, > Ram > > > From nobody Thu Feb 2 08:03:42 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 566891296A1; Thu, 2 Feb 2017 08:03:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.721 X-Spam-Level: X-Spam-Status: No, score=-17.721 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-3.199, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SUcm5frSavUi; Thu, 2 Feb 2017 08:03:38 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E5141296BD; Thu, 2 Feb 2017 08:03:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7624; q=dns/txt; s=iport; t=1486051418; x=1487261018; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=cTymhD6Jq88eGXNC/HcYvNqEUNy2BwhYXXMM2Gdtx0c=; b=ErnRF8kwkUdVenrqJ64U9y3J/n51PUDNDJ92CqDv2+flRbm88iM9CzBS KA+Wn8SMi6XOKF5jiqWunmLlIbtUFJlzGwr44UfGSKbgWxntlHa688ZCp 1X30+rCNOMxJbiwyXlEeYV/H773VKLHnu29jRkF1fsP3J9vriFSEIjz8I M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AfAQAOWJNY/5JdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1NhgQkHg1CKCJIKiAyLGoIPgg0qhXgCGoI6PxgBAgEBAQEBAQF?= =?us-ascii?q?iKIRpAQEBAwEjEUUMBAIBCA4DAwECAQICJgICAh8RFQgIAgQBDQWJWQMNCA6tT?= =?us-ascii?q?oIlhzwNg2UBAQEBAQEBAQEBAQEBAQEBAQEBAQEYBYELh0WCaoJRgU4RAQYWBzE?= =?us-ascii?q?CgkwugjEFiQWSIDgBhmeHCIQXgXuFF4lwiiyIWgEfOHZVFUwBhGiBSHUBhlWBI?= =?us-ascii?q?YEMAQEB?= X-IronPort-AV: E=Sophos;i="5.33,325,1477958400"; d="scan'208";a="206797392" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Feb 2017 16:03:14 +0000 Received: from XCH-RTP-016.cisco.com (xch-rtp-016.cisco.com [64.101.220.156]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v12G3DYU030828 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 2 Feb 2017 16:03:14 GMT Received: from xch-rtp-017.cisco.com (64.101.220.157) by XCH-RTP-016.cisco.com (64.101.220.156) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 2 Feb 2017 11:03:12 -0500 Received: from xch-rtp-017.cisco.com ([64.101.220.157]) by XCH-RTP-017.cisco.com ([64.101.220.157]) with mapi id 15.00.1210.000; Thu, 2 Feb 2017 11:03:12 -0500 From: "Ram Mohan R (rmohanr)" To: Alexey Melnikov , The IESG Thread-Topic: Alexey Melnikov's No Objection on draft-ietf-bfcpbis-bfcp-websocket-13: (with COMMENT) Thread-Index: AQHScN+m3ScWswMku0+y1F9K/iBRD6FR5HwAgARTo4CAAHHZAA== Date: Thu, 2 Feb 2017 16:03:12 +0000 Message-ID: References: <148467088398.32098.5746976377858263906.idtracker@ietfa.amsl.com> <1486046741.325454.868063856.1DE28627@webmail.messagingengine.com> In-Reply-To: <1486046741.325454.868063856.1DE28627@webmail.messagingengine.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.94.148] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , "Charles Eckel \(eckelcu\)" , "bfcpbis-chairs@ietf.org" Subject: Re: [bfcpbis] Alexey Melnikov's No Objection on draft-ietf-bfcpbis-bfcp-websocket-13: (with COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Feb 2017 16:03:40 -0000 SGkgQWxleGV5LA0KDQpUaGFua3MgZm9yIHlvdXIgZmVlZGJhY2suIFBsZWFzZSBzZWUgaW5saW5l DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbGV4ZXkgTWVsbmlrb3YgPGFh bWVsbmlrb3ZAZmFzdG1haWwuZm0+DQpEYXRlOiBUaHVyc2RheSwgMiBGZWJydWFyeSAyMDE3IGF0 IDg6MTUgUE0NClRvOiAiUmFtIE1vaGFuIFIgKHJtb2hhbnIpIiA8cm1vaGFuckBjaXNjby5jb20+ LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4NCkNjOiAiZHJhZnQtaWV0Zi1iZmNwYmlzLWJmY3At d2Vic29ja2V0QGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1iZmNwYmlzLWJmY3Atd2Vic29ja2V0QGll dGYub3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVja2VsY3UpIiA8ZWNrZWxjdUBjaXNjby5jb20+LCAi YmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmciIDxiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZz4sICJiZmNw YmlzQGlldGYub3JnIiA8YmZjcGJpc0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBBbGV4ZXkgTWVs bmlrb3YncyBObyBPYmplY3Rpb24gb24gZHJhZnQtaWV0Zi1iZmNwYmlzLWJmY3Atd2Vic29ja2V0 LTEzOiAod2l0aCBDT01NRU5UKQ0KDQogICAgSGkgUmFtLA0KICAgIA0KICAgIE9uIE1vbiwgSmFu IDMwLCAyMDE3LCBhdCAwMzoxMSBQTSwgUmFtIE1vaGFuIFIgKHJtb2hhbnIpIHdyb3RlOg0KICAg ID4gSGkgQWxleGV5LA0KICAgID4gDQogICAgPiBQbGVhc2Ugc2VlIGlubGluZSA8UmFtPiBmb3Ig bXkgcmVzcG9uc2VzDQogICAgPiANCiAgICA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQog ICAgPiBGcm9tOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+DQogICAg PiBEYXRlOiBUdWVzZGF5LCAxNyBKYW51YXJ5IDIwMTcgYXQgMTA6MDQgUE0NCiAgICA+IFRvOiBU aGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4NCiAgICA+IENjOiAiZHJhZnQtaWV0Zi1iZmNwYmlzLWJm Y3Atd2Vic29ja2V0QGlldGYub3JnIg0KICAgID4gPGRyYWZ0LWlldGYtYmZjcGJpcy1iZmNwLXdl YnNvY2tldEBpZXRmLm9yZz4sICJDaGFybGVzIEVja2VsIChlY2tlbGN1KSINCiAgICA+IDxlY2tl bGN1QGNpc2NvLmNvbT4sICJiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZyIgPGJmY3BiaXMtY2hhaXJz QGlldGYub3JnPiwNCiAgICA+ICJDaGFybGVzIEVja2VsIChlY2tlbGN1KSIgPGVja2VsY3VAY2lz Y28uY29tPiwgImJmY3BiaXNAaWV0Zi5vcmciDQogICAgPiA8YmZjcGJpc0BpZXRmLm9yZz4NCiAg ICA+IFN1YmplY3Q6IEFsZXhleSBNZWxuaWtvdidzIE5vIE9iamVjdGlvbiBvbg0KICAgID4gZHJh ZnQtaWV0Zi1iZmNwYmlzLWJmY3Atd2Vic29ja2V0LTEzOiAod2l0aCBDT01NRU5UKQ0KICAgID4g UmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2VzQGlldGYub3JnPg0KICAgID4gUmVzZW50LVRvOiA8 YW50b24ucm9tYW5AcXVvYmlzLmNvbT4sIDxzdGVwaGFuZS5jYXplYXV4QG9yYW5nZS5jb20+LA0K ICAgID4gPGdzYWxndWVpQGNpc2NvLmNvbT4sIDxzZXJnaW8uZ2FyY2lhLm11cmlsbG9AZ21haWwu Y29tPiwNCiAgICA+IDxybW9oYW5yQGNpc2NvLmNvbT4sIDx2aWN0b3IucGFzY3VhbC5hdmlsYUBv cmFjbGUuY29tPg0KICAgID4gUmVzZW50LURhdGU6IFR1ZXNkYXksIDE3IEphbnVhcnkgMjAxNyBh dCAxMDowNCBQTQ0KICAgID4gDQogICAgPiAgICAgQWxleGV5IE1lbG5pa292IGhhcyBlbnRlcmVk IHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KICAgID4gICAgIGRyYWZ0LWlldGYt YmZjcGJpcy1iZmNwLXdlYnNvY2tldC0xMzogTm8gT2JqZWN0aW9uDQogICAgPiAgICAgDQogICAg PiAgICAgV2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFj dCBhbmQgcmVwbHkgdG8gYWxsDQogICAgPiAgICAgZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGlu IHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0DQogICAgPiAgICAgdGhpcw0K ICAgID4gICAgIGludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KICAgID4gICAgIA0K ICAgID4gICAgIA0KICAgID4gICAgIFBsZWFzZSByZWZlciB0bw0KICAgID4gICAgIGh0dHBzOi8v d3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KICAgID4g ICAgIGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBw b3NpdGlvbnMuDQogICAgPiAgICAgDQogICAgPiAgICAgDQogICAgPiAgICAgVGhlIGRvY3VtZW50 LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0K ICAgID4gICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtYmZj cGJpcy1iZmNwLXdlYnNvY2tldC8NCiAgICA+ICAgICANCiAgICA+ICAgICANCiAgICA+ICAgICAN CiAgICA+ICAgICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICAgPiAgICAgQ09NTUVOVDoNCiAgICA+ICAgICAt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQogICAgPiAgICAgDQogICAgPiAgICAgDQogICAgPiAgICAgSW4gNC4yLCBs YXN0IHNlbnRlbmNlOiB3b3VsZG4ndCB0aGF0IHJlcXVpcmUgYSBuZXcgV2ViU29ja2V0DQogICAg PiAgICAgc3ViLXByb3RvY29sDQogICAgPiAgICAgaWRlbnRpZmllcj8NCiAgICA+IDxSYW0+IFll cyBzZWN0aW9uIDEwIG9mIHRoaXMgZHJhZnQgZGVmaW5lcyB0aGUgbmV3IHN1Yi1wcm90b2NvbA0K ICAgID4gaWRlbnRpZmllci4gRG8geW91IHNlZSBhIG5lZWQgZm9yIGFueXRoaW5nIGVsc2UgPw0K ICAgIA0KICAgIFtBbGV4ZXldOiBUaGUgc2VudGVuY2UgaW4gcXVlc3Rpb24gd2FzOg0KICAgIA0K ICAgICAgIFdoaWxlIHRoaXMgc3BlY2lmaWNhdGlvbiBhc3N1bWVzIHRoYXQgQkZDUCBlbmNvZGlu ZyBpcyBvbmx5IFRMVg0KICAgICAgIGJpbmFyeSwgZnV0dXJlIGRvY3VtZW50cyBtYXkgZGVmaW5l IG90aGVyIG1lY2hhbmlzbXMgbGlrZSBKU09ODQogICAgICAgc2VyaWFsaXphdGlvbi4NCiAgICAN CiAgICBJIHN1Z2dlc3QgeW91IGFkZCBzb21lIHRleHQgc2F5aW5nIHRoYXQgaWYgdGhlIGVuY29k aW5nIGNoYW5nZXMgbmV3DQogICAgc3VicHJvdG9jb2wgaWRlbnRpZmllciB3b3VsZCBuZWVkIHRv IGJlIHNlbGVjdGVkLiBCZWNhdXNlIG90aGVyd2lzZSBvbGQNCiAgICBpbXBsZW1lbnRhdGlvbiAo dGhhdCB1c2UgVExWIGJpbmFyeSkgY2FuJ3QgaW50ZXJvcCB3aXRoIG5ldyBvbmVzICh0aGF0DQog ICAgdXNlIEpTT04pLg0KDQo8UmFtPiBPayBJIHdpbGwgYSBsaW5lIGF0IHRoZSBlbmQgc2F5aW5n IGlmIGVuY29kaW5nIGNoYW5nZXMgbmV3IHN1YnByb3RvY29sIGlkZW50aWZpZXIgd291bGQgbmVl ZCB0byBiZSBzZWxlY3RlZA0KDQpSZWdhcmRzLA0KUmFtDQogICAgDQogICAgPiAgICAgDQogICAg PiAgICAgSW4gNi4yOiBzb21lIGZvcm1hdHRpbmcgZXJyb3JzIGluIHRoZSBQREYgdmVyc2lvbi4g QWxzbywgSSB0aGluayB5b3UNCiAgICA+ICAgICBtZWFudCBTZWN0aW9uIDMuMyAobm90IDMuMikg d2hlbiB0YWxraW5nIGFib3V0IFdTUy4NCiAgICA+IDxSYW0+IEkgaGF2ZSBmaXhlZCB0aGlzIG5v dyBpbiBteSBsb2NhbCBjb3B5LiBOb3cgd2UgYXJlIGhhdmluZyBvbmx5IG9uZQ0KICAgID4gYXR0 cmlidXRlIChhPXdlYnNvY2tldC11cmkpIHRoYXQgd2lsbCBwb2ludCB0byBlaXRoZXIgd3MtVVJJ IG9yIHdzcy1VUkkuIA0KICAgIA0KICAgIE9rLg0KICAgIA0KICAgID4gICAgIEluIDcuMjogd2hl biByZWZlcmVuY2luZyBTZWN0aW9uIDMsIHlvdSBhcmUgbWlzc2luZyB0aGUgUkZDIG51bWJlci4N CiAgICA+ICAgICBBdA0KICAgID4gICAgIGxlYXN0IHNlY3Rpb24gMyBvZiB0aGlzIGRyYWZ0IGlz IG5vdCByZWxldmFudC4NCiAgICA+IDxSYW0+IEkgZml4ZWQgdGhpcyBub3cuIEkgaGF2ZSBwb2lu dGVkIHRvIHRoZSBzZWN0aW9uIG9mDQogICAgPiBpZXRmLWJmY3BiaXMtc2RwLXdzLXVyaSB3aGVy ZSB0aGUgbmV3IFNEUCBhdHRyaWJ1dGUgaXMgZGVmaW5lZC4NCiAgICANCiAgICBPay4NCiAgICAN CiAgICA+ICAgICBJbiA4OiBIVFRQIGF1dGhlbnRpY2F0aW9uIHRleHQgaXMgcmF0aGVyIHdlYWsu DQogICAgPiA8UmFtPiBJIHdpbGwgYWRkIHRoZSBiZWxvdyB0ZXh0IChjb25zaWRlcmluZyB0aGUg ZmVlZGJhY2sgZnJvbSBLYXRobGVlbg0KICAgID4gTW9yaWFydHkgYW5kIFN0ZXBoZW4gYXMgd2Vs bCkNCiAgICA+IEVYSVNUSU5HOg0KICAgID4gICAgICAgICAgSWYgdGhlIHN0YXR1cyBjb2RlIHJl Y2VpdmVkIGZyb20gdGhlIHNlcnZlciBpcyBub3QgMTAxLA0KICAgID4gICAgICAgICAgIHRoZSBX ZWJTb2NrZXQgY2xpZW50IHN0YWNrIGhhbmRsZXMgdGhlIHJlc3BvbnNlIHBlciBIVFRQDQogICAg PiAgICAgICAgICAgW1JGQzcyMzBdIHByb2NlZHVyZXMsIGluIHBhcnRpY3VsYXIgdGhlDQogICAg PiAgICAgICAgICAgY2xpZW50IG1pZ2h0IHBlcmZvcm0gYXV0aGVudGljYXRpb24gaWYgaXQgcmVj ZWl2ZXMgNDAxDQogICAgPiAgICAgICAgICAgc3RhdHVzIGNvZGUuDQogICAgPiBORVc6DQogICAg PiAgICAgICAgIElmIHRoZSBzdGF0dXMgY29kZSByZWNlaXZlZCBmcm9tIHRoZSBzZXJ2ZXIgaXMg bm90IDEwMSwNCiAgICA+ICAgICAgICAgICB0aGUgV2ViU29ja2V0IGNsaWVudCBzdGFjayBoYW5k bGVzIHRoZSByZXNwb25zZSBwZXIgSFRUUA0KICAgID4gICAgICAgICAgIFtSRkM3MjMwXSBwcm9j ZWR1cmVzLCBpbiBwYXJ0aWN1bGFyIHRoZQ0KICAgID4gICAgICAgICAgIGNsaWVudCBtaWdodCBw ZXJmb3JtIGF1dGhlbnRpY2F0aW9uIGlmIGl0IHJlY2VpdmVzIDQwMQ0KICAgID4gICAgICAgICAg IHN0YXR1cyBjb2RlLiAgVGhlIFdlYlNvY2tldCBjbGllbnRzIGFyZSB2dWxuZXJhYmxlIHRvIHRo ZQ0KICAgID4gICAgICAgICAgIGF0dGFja3MNCiAgICA+ICAgICAgICAgIG9mIGJhc2ljIGF1dGhl bnRpY2F0aW9uIChtZW50aW9uZWQgaW4gU2VjdGlvbiA0IG9mIFtSRkM3NjE3XSkNCiAgICA+ICAg ICAgICAgIGFuZCANCiAgICA+ICAgICAgICAgZGlnZXN0IGF1dGhlbnRpY2F0aW9uIChtZW50aW9u ZWQgaW4gU2VjdGlvbiA1IG9mIFtSRkM3NjE2XSkuIFRvDQogICAgPiAgICAgICAgIG92ZXJjb21l DQogICAgPiAgICAgICAgIHNvbWUgb2YgdGhlc2Ugd2Vha25lc3MsIHRoZSBXZWJTb2NrZXQgY2xp ZW50cyBjYW4gdXNlIEhUVFANCiAgICA+ICAgICAgICAgT3JpZ2luLUJvdW5kIEF1dGhlbnRpY2F0 aW9uIChIT0JBKQ0KICAgID4gICAgICAgICBtZWNoYW5pc20gbWVudGlvbmVkIGluIFtSRkM3NDg2 XS4NCiAgICA+IA0KICAgID4gRG9lcyB0aGlzIGxvb2sgb2sgPw0KICAgIA0KICAgIE5ldyB0ZXh0 IGlzIGJldHRlci4gVGhhbmsgeW91IQ0KICAgIA0KICAgID4gUmVnYXJkcywNCiAgICA+IFJhbQ0K ICAgID4gICAgIA0KICAgID4gICAgIA0KICAgID4gDQogICAgDQoNCg== From nobody Fri Feb 3 05:56:44 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF2A41293DA for ; Fri, 3 Feb 2017 05:56:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.219 X-Spam-Level: X-Spam-Status: No, score=-4.219 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zFb3JJUtqyqo for ; Fri, 3 Feb 2017 05:56:42 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AF21129D0A for ; Fri, 3 Feb 2017 05:56:40 -0800 (PST) X-AuditID: c1b4fb25-1dfff700000036c9-99-58948c151b48 Received: from ESESSHC012.ericsson.se (Unknown_Domain [153.88.253.124]) by (Symantec Mail Security) with SMTP id C6.C3.14025.51C84985; Fri, 3 Feb 2017 14:56:38 +0100 (CET) Received: from ESESSMB209.ericsson.se ([169.254.9.76]) by ESESSHC012.ericsson.se ([153.88.183.54]) with mapi id 14.03.0319.002; Fri, 3 Feb 2017 14:56:36 +0100 From: Christer Holmberg To: "bfcpbis@ietf.org" Thread-Topic: BFCP with ICE: MIT transport? Thread-Index: AQHSfiVV0aSrIRIXRkiZpc7GuImHXw== Date: Fri, 3 Feb 2017 13:56:35 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.1.161129 x-originating-ip: [153.88.183.147] Content-Type: multipart/alternative; boundary="_000_D4BA592217639christerholmbergericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrNLMWRmVeSWpSXmKPExsUyM+Jvja5Yz5QIgz3dyhb/1h1lcmD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxspPJ5kKOgoqpi63bGDcmdDFyMkhIWAisevVGhYQW0hgPaPE lgsFXYxcQPYiRom3+5cxdzFycLAJWEh0/9MGqRER0JTYvP0uE4gtLKAm8XbKAxaIuLbE08kz mSFsPYkj1zeDxVkEVCRmL7jFBmLzClhL9J6dD9bLKCAm8f3UGjCbWUBc4tYTiLiEgIDEkj3n mSFsUYmXj/+xgtiiQDOXP18Ddo6EgJLEtK1pEK0JEvdermGFGC8ocXLmE5YJjEKzkEydhaRs FpIyiLiBxPtz85khbG2JZQtfQ9n6Ehu/nGWEsK0lXn7ZwIasZgEjxypG0eLU4qTcdCNjvdSi zOTi4vw8vbzUkk2MwCg5uOW36g7Gy28cDzEKcDAq8fBuaJwcIcSaWFZcmXuIUYKDWUmE16F7 SoQQb0piZVVqUX58UWlOavEhRmkOFiVxXrOV98OFBNITS1KzU1MLUotgskwcnFINjCYttSc+ xey4ESV5frXDu/Z/fA8C2b4ptm+9qtl44ubn3iNLH/7ZWjv7rXZof6r0m4q0PUkdLPwFFcvf vFoYkOz9S19ot6BneeeVgwfZ5n+6r5rFoW82s8ttkqvFe7X6HX7HJ75Q2vf0b3lz0Ls3Gfu3 7Vy+x9FdKt3gAT9TdWHIXnHn5fHPPyixFGckGmoxFxUnAgD6DaXZjgIAAA== Archived-At: Subject: [bfcpbis] BFCP with ICE: MIT transport? X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Feb 2017 13:56:44 -0000 --_000_D4BA592217639christerholmbergericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, During the MMUSIC session in Seoul we discussed a number of issues related = to ICE-SDP. We made some decisions, and I got action points to verify one o= f those on the list. One of those issues affect BFCP, when used with ICE. Example: BFCP client A supports both UDP and TCP, sends an SDP offer with UDP proto = in the SDP m- line. The TCP option is given as an ICE candidate. BFCP server B only supports TCP. The problem is that, according to RFC 3264, the m- line proto value in the = answer must match the value in the offer. But, server B does not support UD= P. Two alternatives were discussed: ALT #1: Every protocol that supports ICE must define a MIT transport. That = transport must always be reflected in the m- line proto (additional transpo= rts are provided as ICE candidates). ALT #2: Allow an m- line proto value in the answer even if the answerer doe= s not support the associated transport =96 as long as the answerer provides= a candidate with the supported transport. Based on the discussions, there was strong consensus to go for Alt#2, which= was allowing a transport in the m- line of the answer even if the answerer= doesn=92t support it, as ICE candidates will be used to determine the tran= sport. Having said that, that still does not prevent individual protocols to speci= fy a MIT transport. So, my QUESTION is: should we specify a MIT transport for BFCP? Again, this= only applies to usage with ICE. The associated slides from the meting can be found here: https://www.ietf.org/proceedings/97/slides/slides-97-mmusic-ice-sip-sdp-00.= pdf (See slides 4-6) Regards, Christer --_000_D4BA592217639christerholmbergericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: Content-Transfer-Encoding: quoted-printable

Hi,

 =

During= the MMUSIC session in Seoul we discussed a number of issues related to ICE= -SDP. We made some decisions, and I got action points to verify one of thos= e on the list.

 =

One of= those issues affect BFCP, when used with ICE.


Exampl= e:


BFCP c= lient A supports both UDP and TCP, sends an SDP offer with UDP proto in the= SDP m- line. The TCP option is given as an ICE candidate.


BFCP s= erver B only supports TCP.


The pr= oblem is that, according to RFC 3264, the m- line proto value in the answer= must match the value in the offer. But, server B does not support UDP.


Two al= ternatives were discussed:


ALT #1= : Every protocol that supports ICE must define a MIT transport. That transp= ort must always be reflected in the m- line proto (additional transports ar= e provided as ICE candidates).


ALT #2: Allow an m- line proto= value in the answer even if the answerer does not support the associated t= ransport =96 as long as the answerer provides a candidate with the supported transport.


Based = on the discussions, there was strong consensus to go for Alt#2, which was a= llowing a transport in the m- line of the answer even if the answerer doesn= =92t support it, as ICE candidates will be used to determine the transport.


Having said that= , that still does not prevent individual protocols to specify a MIT transpo= rt.


So, my QUESTION = is: should we specify a MIT transport for BFCP? Again, this only applies to= usage with ICE.


The as= sociated slides from the meting can be found here:

 =


(See s= lides 4-6)

 =  

Regard= s,

 =

Christ= er

 =

 =

 =

 =

--_000_D4BA592217639christerholmbergericssoncom_-- From nobody Fri Feb 3 08:56:14 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F673129486 for ; Fri, 3 Feb 2017 08:56:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.219 X-Spam-Level: X-Spam-Status: No, score=-4.219 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K5PDVdr6wFQ9 for ; Fri, 3 Feb 2017 08:56:11 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81E6112947A for ; Fri, 3 Feb 2017 08:56:10 -0800 (PST) X-AuditID: c1b4fb2d-a9bff70000007e3d-b2-5894b62897ce Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by (Symantec Mail Security) with SMTP id 7A.AC.32317.826B4985; Fri, 3 Feb 2017 17:56:08 +0100 (CET) Received: from ESESSMB209.ericsson.se ([169.254.9.76]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0319.002; Fri, 3 Feb 2017 17:55:07 +0100 From: Christer Holmberg To: "bfcpbis@ietf.org" Thread-Topic: [bfcpbis] BFCP with ICE: MIT transport? Thread-Index: AQHSfj5FpMxOHTWjiEyeIEeUYRqqQg== Date: Fri, 3 Feb 2017 16:55:06 +0000 Message-ID: <803C722A-F570-4298-8ABA-74EAC41BCF1E@ericsson.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_803C722AF57042988ABA74EAC41BCF1Eericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrALMWRmVeSWpSXmKPExsUyM2K7oq7GtikRBlf3mFr8W3eUyYHRY8mS n0wBjFFcNimpOZllqUX6dglcGa+nzmMsaC+veLiqqIHxeloXIyeHhICJxMrbrUxdjFwcQgLr GCWebZ8G5SxilHh+/Sl7FyMHB5uAhUT3P22QBhEBTYnN2+8ygdjCQM1XT/1iBCkRETCVWHje DqJET+LWoRlsIDaLgIrEgbc7wWxeAXuJ9j/nGUFsIQFriT2d85lBbE4BG4mZl7eBjWQUEJP4 fmoNmM0sIC5x68l8Jog7BSSW7DnPDGGLSrx8/I8VoiZZYuOfv6wQ8wUlTs58wjKBUWgWkvZZ SMpmISmDiBtIvD83nxnC1pZYtvA1lK0vsfHLWUZk8QWM7KsYRYtTi4tz042M9VKLMpOLi/Pz 9PJSSzYxAuPh4JbfujsYV792PMQowMGoxMO7oXFyhBBrYllxZe4hRgkOZiUR3t6tUyKEeFMS K6tSi/Lji0pzUosPMUpzsCiJ85qtvB8uJJCeWJKanZpakFoEk2Xi4JRqYOSZI+DdFidzdRL3 TRXhQn7dkwxda2uWLBY3F/jksHrOy4PyiZtv/1hVFuwuflpjU+TZrGzFPKeHT9/euNPYrb0n h5FjpkJeyw4rDYcFTxPPVvIddT/s1mIwaZvq2wb353ePzd7VF2OccuBvWbCWzZelP7U6O3UZ i1IWVGxu/zpztfq55kCFXCWW4oxEQy3mouJEAMRdoQODAgAA Archived-At: Subject: Re: [bfcpbis] BFCP with ICE: MIT transport? X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Feb 2017 16:56:12 -0000 --_000_803C722AF57042988ABA74EAC41BCF1Eericssoncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIT =3D MTI =3D Mandatory To Implement Sent from my iPhone On 3 Feb 2017, at 15.56, Christer Holmberg > wrote: Hi, During the MMUSIC session in Seoul we discussed a number of issues related = to ICE-SDP. We made some decisions, and I got action points to verify one o= f those on the list. One of those issues affect BFCP, when used with ICE. Example: BFCP client A supports both UDP and TCP, sends an SDP offer with UDP proto = in the SDP m- line. The TCP option is given as an ICE candidate. BFCP server B only supports TCP. The problem is that, according to RFC 3264, the m- line proto value in the = answer must match the value in the offer. But, server B does not support UD= P. Two alternatives were discussed: ALT #1: Every protocol that supports ICE must define a MIT transport. That = transport must always be reflected in the m- line proto (additional transpo= rts are provided as ICE candidates). ALT #2: Allow an m- line proto value in the answer even if the answerer doe= s not support the associated transport =96 as long as the answerer provides= a candidate with the supported transport. Based on the discussions, there was strong consensus to go for Alt#2, which= was allowing a transport in the m- line of the answer even if the answerer= doesn=92t support it, as ICE candidates will be used to determine the tran= sport. Having said that, that still does not prevent individual protocols to speci= fy a MIT transport. So, my QUESTION is: should we specify a MIT transport for BFCP? Again, this= only applies to usage with ICE. The associated slides from the meting can be found here: https://www.ietf.org/proceedings/97/slides/slides-97-mmusic-ice-sip-sdp-00.= pdf (See slides 4-6) Regards, Christer _______________________________________________ bfcpbis mailing list bfcpbis@ietf.org https://www.ietf.org/mailman/listinfo/bfcpbis --_000_803C722AF57042988ABA74EAC41BCF1Eericssoncom_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
MIT =3D MTI =3D Mandatory To Implement

Sent from my iPhone

On 3 Feb 2017, at 15.56, Christer Holmberg <christer.holmberg@ericsson.com> wrote:


Hi,

 =

During= the MMUSIC session in Seoul we discussed a number of issues related to ICE= -SDP. We made some decisions, and I got action points to verify one of thos= e on the list.

 =

One of= those issues affect BFCP, when used with ICE.


Exampl= e:


BFCP c= lient A supports both UDP and TCP, sends an SDP offer with UDP proto in the= SDP m- line. The TCP option is given as an ICE candidate.


BFCP s= erver B only supports TCP.


The pr= oblem is that, according to RFC 3264, the m- line proto value in the answer= must match the value in the offer. But, server B does not support UDP.


Two al= ternatives were discussed:


ALT #1= : Every protocol that supports ICE must define a MIT transport. That transp= ort must always be reflected in the m- line proto (additional transports ar= e provided as ICE candidates).


ALT #2: Allow an m- line proto= value in the answer even if the answerer does not support the associated t= ransport =96 as long as the answerer provides a candidate with the supported transport.


Based = on the discussions, there was strong consensus to go for Alt#2, which was a= llowing a transport in the m- line of the answer even if the answerer doesn= =92t support it, as ICE candidates will be used to determine the transport.


Having said that= , that still does not prevent individual protocols to specify a MIT transpo= rt.


So, my QUESTION = is: should we specify a MIT transport for BFCP? Again, this only applies to= usage with ICE.


The as= sociated slides from the meting can be found here:

 =


(See s= lides 4-6)

 =  

Regard= s,

 =

Christ= er

 =

 =

 =

 =

_______________________________________________
bfcpbis mailing list
bfcpbis@ietf.org
https://www= .ietf.org/mailman/listinfo/bfcpbis
--_000_803C722AF57042988ABA74EAC41BCF1Eericssoncom_-- From nobody Fri Feb 3 09:18:53 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12321129484 for ; Fri, 3 Feb 2017 09:18:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.898 X-Spam-Level: X-Spam-Status: No, score=-5.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-3.199, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=comcast.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 021WD1UfOZvV for ; Fri, 3 Feb 2017 09:18:50 -0800 (PST) Received: from resqmta-po-06v.sys.comcast.net (resqmta-po-06v.sys.comcast.net [IPv6:2001:558:fe16:19:96:114:154:165]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9781E12945D for ; Fri, 3 Feb 2017 09:18:50 -0800 (PST) Received: from resomta-po-15v.sys.comcast.net ([96.114.154.239]) by resqmta-po-06v.sys.comcast.net with SMTP id ZhTuccCFr1hmRZhVZc32cK; Fri, 03 Feb 2017 17:18:49 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20161114; t=1486142329; bh=v0N4w0zX01LlgeFeAikeyixC7ZmyasjVDMUnhEr4AbE=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=GPHv4MPJsHziClQ0KgdMiEuN7AlPWENy5/zwpUP1/BpPHNXhu+WdSEor0rCYwNjdn Fw5bS9Bq7/+XLMv90aTTfvtFBxeG4GHuFpOoqeQGVNotSntzpXhy7xOR8QvdOoyru2 BfP0tMFz28HGK9LtVuN8TJszjkRQTH/9j4/YfQngZWv0iMftMEOtlKKu+liIcB/XUT syM8FJy/2bSpTenGw1Y/DiGDT3YrxoZoz75Q937BxI18mQ4AMzWA/1vzv/4JOkE8V2 /1YLsp5gz7uA6UXwSbUmdfmK66oNamXjehKF8nrnNpR93ZKQCHLQx9Z3Lcjv1moSft /D9EGidGhJG9A== Received: from [192.168.1.110] ([73.186.127.100]) by resomta-po-15v.sys.comcast.net with SMTP id ZhVYc9HnI04HZZhVZcLiVI; Fri, 03 Feb 2017 17:18:49 +0000 To: bfcpbis@ietf.org References: From: Paul Kyzivat Message-ID: <496d6961-9762-e227-a66e-a34c27b9d307@comcast.net> Date: Fri, 3 Feb 2017 12:18:48 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4wfFB5MFCX7/3y3YOJQpXXLJjTeNpnbdUh2tvi611PHGtK2XbDLohgeK6ZqTqMYFoiUlMyPzSabsgWqD+Rem/hldletzPi8CBvk55S7uODSEEK3zhQB6nE NESA47qiMbk7YXwGlUgKCo40eHQPGm98Ew9p9i0PicgljOSpZqowXiIQ9/hvLTew4J/fVYTtI8y7tw== Archived-At: Subject: Re: [bfcpbis] BFCP with ICE: MIT transport? X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Feb 2017 17:18:52 -0000 On 2/3/17 8:56 AM, Christer Holmberg wrote: > > Hi, > > During the MMUSIC session in Seoul we discussed a number of issues > related to ICE-SDP. We made some decisions, and I got action points to > verify one of those on the list. > > One of those issues affect BFCP, when used with ICE. > > Example: > > BFCP client A supports both UDP and TCP, sends an SDP offer with UDP > proto in the SDP m- line. The TCP option is given as an ICE candidate. > > BFCP server B only supports TCP. When we talk about a BFCP implementation supporting TCP I think we mean the BFCP that runs directly over TCP. But when talk about ICE over TCP I think we are talking about UDP packets framed over TCP. That is really something different that the BFCP implementation may or may not support. Its important not to conflate these. But I think that is mostly distinct from the question below. Thanks, Paul > The problem is that, according to RFC 3264, the m- line proto value in > the answer must match the value in the offer. But, server B does not > support UDP. > > Two alternatives were discussed: > > ALT #1: Every protocol that supports ICE must define a MIT transport. > That transport must always be reflected in the m- line proto (additional > transports are provided as ICE candidates). > > ALT #2: Allow an m- line proto value in the answer even if the answerer > does not support the associated transport as long as the answerer > provides a candidate with the supported transport. > > > Based on the discussions, there was strong consensus to go for Alt#2, > which was allowing a transport in the m- line of the answer even if the > answerer doesnt support it, as ICE candidates will be used to determine > the transport. > > > Having said that, that still does not prevent individual protocols to > specify a MIT transport. > > > So, my QUESTION is: should we specify a MIT transport for BFCP? Again, > this only applies to usage with ICE. > > > The associated slides from the meting can be found here: > > > > https://www.ietf.org/proceedings/97/slides/slides-97-mmusic-ice-sip-sdp-00.pdf > > > (See slides 4-6) > > > > Regards, > > > > Christer > > > > > > > > > > > > _______________________________________________ > bfcpbis mailing list > bfcpbis@ietf.org > https://www.ietf.org/mailman/listinfo/bfcpbis > From nobody Sat Feb 4 09:02:49 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6910E1296A3; Sat, 4 Feb 2017 09:02:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.82 X-Spam-Level: X-Spam-Status: No, score=-0.82 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=OahHPEbo; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=dQ3DZ/zK Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mZIuwqhPAnrw; Sat, 4 Feb 2017 09:02:46 -0800 (PST) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CA41129699; Sat, 4 Feb 2017 09:02:46 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 6CA2F20585; Sat, 4 Feb 2017 12:02:45 -0500 (EST) Received: from frontend2 ([10.202.2.161]) by compute7.internal (MEProxy); Sat, 04 Feb 2017 12:02:45 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=mesmtp; bh=nhQejZsn/skGdvh 7WPymyh3qPqc=; b=OahHPEbo2St1TlT74Az+VRZsMdb4U0TkRi18Qi8fDPEqjmM rUHz2CgI2b1Wp1A7kV/+qX+WGbHIkb+UrVzV+RDl/4Wmqaf/mdWM+PVe6fvUxWeq IGfCnJTqW9zsibOE+SXFOPENfYKpkMJw3WMg66JGMROwz3KGMgbSaS3TFDMw= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= smtpout; bh=nhQejZsn/skGdvh7WPymyh3qPqc=; b=dQ3DZ/zKbI5mLXPwUANr j9gMxsMqB0eFhp7OcwYVy4/1eAmZGn0GKDAtrGaoyHcB2UsBg5woEjPGD5mNnd5i ZRt7OvxrRLUjeahROIjgzkmHY8D0K56CVVobswi42dlpbV/FX3KitO1yscnQ2M4r /+WvpPjLe8/2a2OTC3VCXc4= X-ME-Sender: X-Sasl-enc: Q7wtPn5OXUQrhCmdoPwe3E/MphZAwJwhAyIpYmIQKRB+ 1486227765 Received: from [192.168.0.6] (cpc5-nmal20-2-0-cust24.19-2.cable.virginm.net [92.234.84.25]) by mail.messagingengine.com (Postfix) with ESMTPA id F1A2924077; Sat, 4 Feb 2017 12:02:44 -0500 (EST) Content-Type: text/plain; charset=windows-1251 Mime-Version: 1.0 (1.0) From: Alexey Melnikov X-Mailer: iPad Mail (14A456) In-Reply-To: Date: Sat, 4 Feb 2017 17:21:02 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: References: <148434596441.9752.6696571117558965561.idtracker@ietfa.amsl.com> <1484576862.2842665.849203352.4F87F4EA@webmail.messagingengine.com> <30CC3092-0ED4-4983-8203-8394FD06D0A9@cisco.com> <1484578527.2848348.849241320.7317C68A@webmail.messagingengine.com> <3E8813A2-FC3D-433F-B51B-41380ABD3D95@cooperw.in> <60D33439-D03C-4E3D-A293-9DE608AC5DB4@cisco.com> <6E698BCA-2F14-4660-B053-BEDA42860B86@cooperw.in> <67E82966-54E2-403B-9684-2F8580B75A9E@cisco.com> To: "Ram Mohan R (rmohanr)" Archived-At: Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , Ben Campbell , "bfcpbis-chairs@ietf.org" , "bfcpbis@ietf.org" , Alissa Cooper , "Charles Eckel \(eckelcu\)" , The IESG Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Feb 2017 17:02:47 -0000 Hi Ram, > On 30 Jan 2017, at 05:30, Ram Mohan R (rmohanr) wrote:= >=20 > Hi Alexey/all, >=20 > Please find the diffs with the changes to use single attribute. This diff a= lso has other comments from Ben, Kathleen incorporated. This looks much better, thank you! You have introduced a typo in one place (search for "wwebsocket"). Best Regards, Alexey > Regards, > Ram >=20 > -----Original Message----- > From: "Ram Mohan R (rmohanr)" > Date: Thursday, 19 January 2017 at 9:30 AM > To: Alissa Cooper > Cc: Alexey Melnikov , The IESG , "d= raft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles Eckel (eckelcu)" , "bfcpbis-chairs@ietf.org" > Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp= -ws-uri-08: (with DISCUSS and COMMENT) >=20 > Hi Alissa, >=20 > I don=92t have a strong opinion on this. Either way (having a single at= tribute or two different SDP attributes) would work. >=20 > Implementations can still retrieve the value (URI) of that attribute an= d based on the proto line (TCP/WS/BFCP or TCP/WSS/BFCP) match the URI agains= t ws or wss schema defined in RFC6455. I would expect such a validation to h= appen across layers. > The SDP stack parser to look at the proto line transport value (TCP/WS/= BFCP or TCP/WSS/BFCP) and check for presence of a=3Dwebsocket-uri attribute.= The value of this attribute (ws or wss schema) can be passed *as is* to the= application (in this case BFCP client application) which will validate it a= gainst the schema in RFC 6455. >=20 > I am OK to incorporate this comment to have a single SDP attribute.=20 >=20 > Regards, > Ram >=20 > -----Original Message----- > From: Alissa Cooper > Date: Thursday, 19 January 2017 at 1:58 AM > To: "Ram Mohan R (rmohanr)" > Cc: Alexey Melnikov , The IESG ,= "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles Eckel (eckelcu)" , "bfcpbis-chairs@ietf.org" > Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-= sdp-ws-uri-08: (with DISCUSS and COMMENT) > Resent-From: > Resent-To: , > Resent-Date: Thursday, 19 January 2017 at 1:58 AM >=20 > Hi Ram, >=20 > I had some further conversation with Alexey on the side and wanted t= o come back to a question he posed: is there a reason why a=3Dws-uri and a=3D= wss-uri both need to be specified? Why can=92t a single label be specified, s= ay a=3Dwebsocket-uri, and then have normative language requiring the scheme i= n the URI itself to match what=92s in the associated m-line (ws:// for TCP/W= S/BFCP and wss:// for TCP/WSS/BFCP)? Won=92t it be more efficient for implem= entations to grab the URI itself anyway and check that the scheme matches th= e m-line? >=20 > Thanks, > Alissa >=20 >> On Jan 17, 2017, at 9:40 AM, Ram Mohan R (rmohanr) wr= ote: >>=20 >> Alissa, >>=20 >> I am fine with the proposed text. >>=20 >> Thanks, >> Ram >>=20 >> -----Original Message----- >> From: Alissa Cooper >> Date: Tuesday, 17 January 2017 at 8:07 PM >> To: Alexey Melnikov >> Cc: The IESG , "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles Eckel (eckelcu)" , "bfcpbis-chairs@ietf.org" <= bfcpbis-chairs@ietf.org>, "Ram Mohan R (rmohanr)" >> Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sd= p-ws-uri-08: (with DISCUSS and COMMENT) >>=20 >> Alexey, would the following changes clarify things? >>=20 >> Section 4.1 >> OLD >> the server side, which could be either >> the offerer or answerer, MUST add an "a=3Dws-uri" or "a=3Dwss-uri" >> attribute in the media section >> NEW >> the server side, which could be either >> the offerer or answerer, MUST add an "a=3Dws-uri" or "a=3Dwss-uri=94= >> attribute (but not both) in the media section >>=20 >> Section 4.3 >> OLD >> If the answers assigns SDP "setup" attribute with "passive", then it >> MUST have a URI in either "a=3Dws-uri" or "a=3Dwss-uri" attribute >> depending on whether the application uses WebSocket or >> secureWebSocket. >> NEW >> If the answers assigns SDP "setup" attribute with "passive", then it >> MUST have a URI in either "a=3Dws-uri" or "a=3Dwss-uri" attribute >> (but not both) in the media section, depending on whether the applic= ation uses WebSocket or >> secureWebSocket. >>=20 >> Ram, would you be okay with those clarifications? >>=20 >> Alissa >>=20 >>=20 >>> On Jan 16, 2017, at 10:09 AM, Ram Mohan R (rmohanr) w= rote: >>>=20 >>> Hi Alexey, >>>=20 >>> -----Original Message----- >>> From: Alexey Melnikov >>> Date: Monday, 16 January 2017 at 8:25 PM >>> To: "Ram Mohan R (rmohanr)" , The IESG >>> Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles Eckel (eckelc= u)" , "bfcpbis-chairs@ietf.org" = >>> Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-s= dp-ws-uri-08: (with DISCUSS and COMMENT) >>>=20 >>> Hi Ram, >>>=20 >>>> On Mon, Jan 16, 2017, at 02:49 PM, Ram Mohan R (rmohanr) wrote: >>>> Hi Alexey, >>>>=20 >>>> Please see inline >>>>=20 >>>> -----Original Message----- >>>> From: Alexey Melnikov >>>> Date: Monday, 16 January 2017 at 7:57 PM >>>> To: "Ram Mohan R (rmohanr)" , The IESG >>>> Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" >>>> , "bfcpbis@ietf.org" >>>> , "Charles Eckel (eckelcu)" , >>>> "bfcpbis-chairs@ietf.org" >>>> Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on >>>> draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) >>>>=20 >>>> Hi Ram, >>>>=20 >>>>> On Mon, Jan 16, 2017, at 06:09 AM, Ram Mohan R (rmohanr) wrote: >>>>> Hi Alexey, >>>>>=20 >>>>> Thanks for your feedback. Please see inline >>>>>=20 >>>>> -----Original Message----- >>>>> From: bfcpbis on behalf of Alexey Melnikov >>>>> >>>>> Date: Saturday, 14 January 2017 at 3:49 AM >>>>> To: The IESG >>>>> Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" >>>>> , "bfcpbis@ietf.org" >>>>> , "Charles Eckel (eckelcu)" , >>>>> "bfcpbis-chairs@ietf.org" >>>>> Subject: [bfcpbis] Alexey Melnikov's Discuss on >>>>> draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) >>>>>=20 >>>>> Alexey Melnikov has entered the following ballot position for >>>>> draft-ietf-bfcpbis-sdp-ws-uri-08: Discuss >>>>>=20 >>>>=20 >>>>> ---------------------------------------------------------------------= - >>>>> DISCUSS: >>>>> ---------------------------------------------------------------------= - >>>>>=20 >>>>> This is generally a well written document, but I have a small list of= >>>>> issues that I would like to discuss before recommending its approval:= >>>>>=20 >>>>> 1) Are a=3Dws-uri and a=3Dwss-uri mutually exclusive? (Section 4.3 is= a >>>>> good >>>>> place to mention what to do if both are specified). >>>>>=20 >>>>> Yes kind of. In a given media line (m=3D line) we will either ha= ve >>>>> a=3Dws-uri or a=3Dwss-uri. That said a response from a BFCP server usi= ng >>>>> webSocket as a transport can >>>>> have two media lines one with ws and other with wss. Something like: >>>>>=20 >>>>> Answer (server): >>>>> m=3Dapplication 50000 TCP/WSS/BFCP * >>>>> a=3Dsetup:passive >>>>> a=3Dconnection:new >>>>> a=3Dwss-uri:wss://bfcp-ws.example.com?token=3D3170449312 >>>>> m=3Dapplication 50000 TCP/WS/BFCP * >>>>> a=3Dsetup:passive >>>>> a=3Dconnection:new >>>>> a=3Dws-uri:ws://bfcp-ws.example.com?token=3D3170449312 >>>>=20 >>>> [Alexey]: This is exactly my problem, you should specify how a >>>> recipient >>>> should handle your example above. If you only have 1 attribute, the >>>> problem goes away entirely. >>>>=20 >>>> in the above case, they are still two different m=3D lines. The >>>> receiver (after offer/answer is done) of this SDP connects to the URI >>>> mentioned in that m=3D line.=20 >>>> Note I just re-used the same URL/port in the example above. If there ar= e >>>> multiple m=3Dapplication media lines (they will be for different >>>> applications) being negotiated in SDP, one application may use secure W= S >>>> and other application may use non-secure WS. The client after it receiv= es >>>> the answer SDP will just setup the connection to the URI specified in t= he >>>> attribute. =20 >>>=20 >>> Sorry, I was thinking about different example: >>>=20 >>> m=3Dapplication 50000 TCP/WSS/BFCP * >>> a=3Dsetup:passive >>> a=3Dconnection:new >>> a=3Dwss-uri:wss://bfcp-ws.example.com?token=3D3170449312 >>> a=3Dws-uri:ws://bfcp-ws.example.com?token=3D3170449312 >>>=20 >>> You have 2 conflicting URIs for the same m=3D line. Is this possible? >>>=20 >>> No this is not possible. If the transport is TCP/WSS/BFCP we shoul= d have only a=3Dwss-uri. If transport is TCP/WS/BFCP we should have only a=3D= ws-uri. >>>=20 >>> Regards, >>> Ram >>>=20 >>>> I don=92t see any problem in here. =20 >>>>=20 >>>> Regards, >>>> Ram >>>>=20 >>>>> Why not a single attribute, considering that both ws: and wss: URIs >>>>> are >>>>> possible? >>>>>=20 >>>>> I would still prefer two attributes. We just followed the >>>>> convention / approach that was used in [RFC6455]. =20 >>>>=20 >>>>=20 >>>=20 >>>=20 >>=20 >>=20 >>=20 >=20 >=20 >=20 >=20 >=20 > > From nobody Sun Feb 5 05:05:51 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4556C12956D; Sun, 5 Feb 2017 05:05:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UH2ghVD94AJL; Sun, 5 Feb 2017 05:05:46 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71A741294C4; Sun, 5 Feb 2017 05:05:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=16454; q=dns/txt; s=iport; t=1486299946; x=1487509546; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=xE+JQ0PHfPP2yCZT+R0GHfU3rGGSkqkOX2cMZGNa178=; b=QbICkg7S1JO9vux8RMdJmIBptY4+Wca4bzOnaE+X5o4M1Wuotm7XD80E p4dWmg+fAvxbpd4Ri6C/wiHRS5cXobpD8D5gv/2X7IMUNeNmKYgw11FNu C0nmqmprnOjzJiAThoZhzB3zn47vzaROpksA7wYarhy0chtXcRwlUUteJ w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B5AQDXIpdY/4ENJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1OBageDUYoIkguTKIIPggyGIgIagkY/GAECAQEBAQEBAWIohGk?= =?us-ascii?q?BAQEDASMRRQwEAgEIDgMDAQIBAgIfBwICAjAVCAgCBA4FH4lMCK54giWLMAEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAR2BC4dGgWGBCYQ+FgcQI4JMLoIxBYkHkl8Bkgi?= =?us-ascii?q?Be4UXiXCTCwEfOH5PFTwRAYQyHRmBSHWGSyuBA4EMAQEB?= X-IronPort-AV: E=Sophos;i="5.33,338,1477958400"; d="scan'208";a="380769428" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 05 Feb 2017 13:05:41 +0000 Received: from XCH-RTP-018.cisco.com (xch-rtp-018.cisco.com [64.101.220.158]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id v15D5fSC024053 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 5 Feb 2017 13:05:41 GMT Received: from xch-rtp-017.cisco.com (64.101.220.157) by XCH-RTP-018.cisco.com (64.101.220.158) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 5 Feb 2017 08:05:40 -0500 Received: from xch-rtp-017.cisco.com ([64.101.220.157]) by XCH-RTP-017.cisco.com ([64.101.220.157]) with mapi id 15.00.1210.000; Sun, 5 Feb 2017 08:05:40 -0500 From: "Ram Mohan R (rmohanr)" To: Alexey Melnikov Thread-Topic: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) Thread-Index: AQHSbeseZdw0JJoDs02EXfYysuX0qaE7UlwAgAAvAwCAAGIlAP//pZyAgABgG4CAAS0tAIAAXSIAgAGXSoCAANpmAIARYtkAgAhGBgCAAacwgA== Date: Sun, 5 Feb 2017 13:05:40 +0000 Message-ID: <3B129AC4-6AC6-463E-B8F6-C6CD261D795A@cisco.com> References: <148434596441.9752.6696571117558965561.idtracker@ietfa.amsl.com> <1484576862.2842665.849203352.4F87F4EA@webmail.messagingengine.com> <30CC3092-0ED4-4983-8203-8394FD06D0A9@cisco.com> <1484578527.2848348.849241320.7317C68A@webmail.messagingengine.com> <3E8813A2-FC3D-433F-B51B-41380ABD3D95@cooperw.in> <60D33439-D03C-4E3D-A293-9DE608AC5DB4@cisco.com> <6E698BCA-2F14-4660-B053-BEDA42860B86@cooperw.in> <67E82966-54E2-403B-9684-2F8580B75A9E@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.92.93] Content-Type: text/plain; charset="utf-8" Content-ID: <84CFA5830513744097B0BF7C07C78453@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , Ben Campbell , "bfcpbis-chairs@ietf.org" , "bfcpbis@ietf.org" , Alissa Cooper , "Charles Eckel \(eckelcu\)" , The IESG Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Feb 2017 13:05:48 -0000 VGhhbmtzIEFsZXhleSwNCkkgd2lsbCBwdWJsaXNoIHRoZSByZXZpc2lvbiBhZnRlciBmaXhpbmcg dGhlIG5pdHMgeW91IHBvaW50ZWQgYmVsb3cNCg0KUmFtDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQpGcm9tOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+DQpE YXRlOiBTYXR1cmRheSwgNCBGZWJydWFyeSAyMDE3IGF0IDEwOjUxIFBNDQpUbzogIlJhbSBNb2hh biBSIChybW9oYW5yKSIgPHJtb2hhbnJAY2lzY28uY29tPg0KQ2M6IEFsaXNzYSBDb29wZXIgPGFs aXNzYUBjb29wZXJ3LmluPiwgQmVuIENhbXBiZWxsIDxiZW5Abm9zdHJ1bS5jb20+LCBUaGUgSUVT RyA8aWVzZ0BpZXRmLm9yZz4sICJkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9y ZyIgPGRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0 Zi5vcmciIDxiZmNwYmlzQGlldGYub3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVja2VsY3UpIiA8ZWNr ZWxjdUBjaXNjby5jb20+LCAiYmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmciIDxiZmNwYmlzLWNoYWly c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbYmZjcGJpc10gQWxleGV5IE1lbG5pa292J3MgRGlz Y3VzcyBvbiBkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VTUyBh bmQgQ09NTUVOVCkNCg0KICAgIEhpIFJhbSwNCiAgICANCiAgICA+IE9uIDMwIEphbiAyMDE3LCBh dCAwNTozMCwgUmFtIE1vaGFuIFIgKHJtb2hhbnIpIDxybW9oYW5yQGNpc2NvLmNvbT4gd3JvdGU6 DQogICAgPiANCiAgICA+IEhpIEFsZXhleS9hbGwsDQogICAgPiANCiAgICA+IFBsZWFzZSBmaW5k IHRoZSBkaWZmcyB3aXRoIHRoZSBjaGFuZ2VzIHRvIHVzZSBzaW5nbGUgYXR0cmlidXRlLiBUaGlz IGRpZmYgYWxzbyBoYXMgb3RoZXIgY29tbWVudHMgZnJvbSBCZW4sIEthdGhsZWVuIGluY29ycG9y YXRlZC4NCiAgICANCiAgICBUaGlzIGxvb2tzIG11Y2ggYmV0dGVyLCB0aGFuayB5b3UhDQogICAg DQogICAgWW91IGhhdmUgaW50cm9kdWNlZCBhIHR5cG8gaW4gb25lIHBsYWNlIChzZWFyY2ggZm9y ICJ3d2Vic29ja2V0IikuDQogICAgDQogICAgQmVzdCBSZWdhcmRzLA0KICAgIEFsZXhleQ0KICAg IA0KICAgID4gUmVnYXJkcywNCiAgICA+IFJhbQ0KICAgID4gDQogICAgPiAtLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KICAgID4gRnJvbTogIlJhbSBNb2hhbiBSIChybW9oYW5yKSIgPHJtb2hh bnJAY2lzY28uY29tPg0KICAgID4gRGF0ZTogVGh1cnNkYXksIDE5IEphbnVhcnkgMjAxNyBhdCA5 OjMwIEFNDQogICAgPiBUbzogQWxpc3NhIENvb3BlciA8YWxpc3NhQGNvb3BlcncuaW4+DQogICAg PiBDYzogQWxleGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWlsLmZtPiwgVGhlIElFU0cg PGllc2dAaWV0Zi5vcmc+LCAiZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmlAaWV0Zi5vcmci IDxkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9yZz4sICJiZmNwYmlzQGlldGYu b3JnIiA8YmZjcGJpc0BpZXRmLm9yZz4sICJDaGFybGVzIEVja2VsIChlY2tlbGN1KSIgPGVja2Vs Y3VAY2lzY28uY29tPiwgImJmY3BiaXMtY2hhaXJzQGlldGYub3JnIiA8YmZjcGJpcy1jaGFpcnNA aWV0Zi5vcmc+DQogICAgPiBTdWJqZWN0OiBSZTogW2JmY3BiaXNdIEFsZXhleSBNZWxuaWtvdidz IERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmktMDg6ICh3aXRoIERJU0NV U1MgYW5kIENPTU1FTlQpDQogICAgPiANCiAgICA+ICAgIEhpIEFsaXNzYSwNCiAgICA+IA0KICAg ID4gICAgSSBkb27igJl0IGhhdmUgYSBzdHJvbmcgb3BpbmlvbiBvbiB0aGlzLiBFaXRoZXIgd2F5 IChoYXZpbmcgYSBzaW5nbGUgYXR0cmlidXRlIG9yIHR3byBkaWZmZXJlbnQgU0RQIGF0dHJpYnV0 ZXMpIHdvdWxkIHdvcmsuDQogICAgPiANCiAgICA+ICAgIEltcGxlbWVudGF0aW9ucyBjYW4gc3Rp bGwgcmV0cmlldmUgdGhlIHZhbHVlIChVUkkpIG9mIHRoYXQgYXR0cmlidXRlIGFuZCBiYXNlZCBv biB0aGUgcHJvdG8gbGluZSAoVENQL1dTL0JGQ1Agb3IgVENQL1dTUy9CRkNQKSBtYXRjaCB0aGUg VVJJIGFnYWluc3Qgd3Mgb3Igd3NzIHNjaGVtYSBkZWZpbmVkIGluIFJGQzY0NTUuICBJIHdvdWxk IGV4cGVjdCBzdWNoIGEgdmFsaWRhdGlvbiB0byBoYXBwZW4gYWNyb3NzIGxheWVycy4NCiAgICA+ ICAgIFRoZSBTRFAgc3RhY2sgcGFyc2VyIHRvIGxvb2sgYXQgdGhlIHByb3RvIGxpbmUgdHJhbnNw b3J0IHZhbHVlIChUQ1AvV1MvQkZDUCBvciBUQ1AvV1NTL0JGQ1ApIGFuZCBjaGVjayBmb3IgcHJl c2VuY2Ugb2YgYT13ZWJzb2NrZXQtdXJpIGF0dHJpYnV0ZS4gVGhlIHZhbHVlIG9mIHRoaXMgYXR0 cmlidXRlICh3cyBvciB3c3Mgc2NoZW1hKSBjYW4gYmUgcGFzc2VkICphcyBpcyogdG8gdGhlIGFw cGxpY2F0aW9uIChpbiB0aGlzIGNhc2UgQkZDUCBjbGllbnQgYXBwbGljYXRpb24pIHdoaWNoIHdp bGwgdmFsaWRhdGUgaXQgYWdhaW5zdCB0aGUgc2NoZW1hIGluIFJGQyA2NDU1Lg0KICAgID4gDQog ICAgPiAgICBJIGFtIE9LIHRvIGluY29ycG9yYXRlIHRoaXMgY29tbWVudCB0byBoYXZlIGEgc2lu Z2xlIFNEUCBhdHRyaWJ1dGUuIA0KICAgID4gDQogICAgPiAgICBSZWdhcmRzLA0KICAgID4gICAg UmFtDQogICAgPiANCiAgICA+ICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgPiAg ICBGcm9tOiBBbGlzc2EgQ29vcGVyIDxhbGlzc2FAY29vcGVydy5pbj4NCiAgICA+ICAgIERhdGU6 IFRodXJzZGF5LCAxOSBKYW51YXJ5IDIwMTcgYXQgMTo1OCBBTQ0KICAgID4gICAgVG86ICJSYW0g TW9oYW4gUiAocm1vaGFucikiIDxybW9oYW5yQGNpc2NvLmNvbT4NCiAgICA+ICAgIENjOiBBbGV4 ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+LCBUaGUgSUVTRyA8aWVzZ0BpZXRm Lm9yZz4sICJkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9yZyIgPGRyYWZ0LWll dGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0Zi5vcmciIDxiZmNw YmlzQGlldGYub3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVja2VsY3UpIiA8ZWNrZWxjdUBjaXNjby5j b20+LCAiYmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmciIDxiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZz4N CiAgICA+ICAgIFN1YmplY3Q6IFJlOiBbYmZjcGJpc10gQWxleGV5IE1lbG5pa292J3MgRGlzY3Vz cyBvbiBkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VTUyBhbmQg Q09NTUVOVCkNCiAgICA+ICAgIFJlc2VudC1Gcm9tOiA8YWxpYXMtYm91bmNlc0BpZXRmLm9yZz4N CiAgICA+ICAgIFJlc2VudC1UbzogPHJtb2hhbnJAY2lzY28uY29tPiwgPGdzYWxndWVpQGNpc2Nv LmNvbT4NCiAgICA+ICAgIFJlc2VudC1EYXRlOiBUaHVyc2RheSwgMTkgSmFudWFyeSAyMDE3IGF0 IDE6NTggQU0NCiAgICA+IA0KICAgID4gICAgICAgIEhpIFJhbSwNCiAgICA+IA0KICAgID4gICAg ICAgIEkgaGFkIHNvbWUgZnVydGhlciBjb252ZXJzYXRpb24gd2l0aCBBbGV4ZXkgb24gdGhlIHNp ZGUgYW5kIHdhbnRlZCB0byBjb21lIGJhY2sgdG8gYSBxdWVzdGlvbiBoZSBwb3NlZDogaXMgdGhl cmUgYSByZWFzb24gd2h5IGE9d3MtdXJpIGFuZCBhPXdzcy11cmkgYm90aCBuZWVkIHRvIGJlIHNw ZWNpZmllZD8gV2h5IGNhbuKAmXQgYSBzaW5nbGUgbGFiZWwgYmUgc3BlY2lmaWVkLCBzYXkgYT13 ZWJzb2NrZXQtdXJpLCBhbmQgdGhlbiBoYXZlIG5vcm1hdGl2ZSBsYW5ndWFnZSByZXF1aXJpbmcg dGhlIHNjaGVtZSBpbiB0aGUgVVJJIGl0c2VsZiB0byBtYXRjaCB3aGF04oCZcyBpbiB0aGUgYXNz b2NpYXRlZCBtLWxpbmUgKHdzOi8vIGZvciBUQ1AvV1MvQkZDUCBhbmQgd3NzOi8vIGZvciBUQ1Av V1NTL0JGQ1ApPyBXb27igJl0IGl0IGJlIG1vcmUgZWZmaWNpZW50IGZvciBpbXBsZW1lbnRhdGlv bnMgdG8gZ3JhYiB0aGUgVVJJIGl0c2VsZiBhbnl3YXkgYW5kIGNoZWNrIHRoYXQgdGhlIHNjaGVt ZSBtYXRjaGVzIHRoZSBtLWxpbmU/DQogICAgPiANCiAgICA+ICAgICAgICBUaGFua3MsDQogICAg PiAgICAgICAgQWxpc3NhDQogICAgPiANCiAgICA+PiBPbiBKYW4gMTcsIDIwMTcsIGF0IDk6NDAg QU0sIFJhbSBNb2hhbiBSIChybW9oYW5yKSA8cm1vaGFuckBjaXNjby5jb20+IHdyb3RlOg0KICAg ID4+IA0KICAgID4+IEFsaXNzYSwNCiAgICA+PiANCiAgICA+PiBJIGFtIGZpbmUgd2l0aCB0aGUg cHJvcG9zZWQgdGV4dC4NCiAgICA+PiANCiAgICA+PiBUaGFua3MsDQogICAgPj4gUmFtDQogICAg Pj4gDQogICAgPj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICA+PiBGcm9tOiBBbGlz c2EgQ29vcGVyIDxhbGlzc2FAY29vcGVydy5pbj4NCiAgICA+PiBEYXRlOiBUdWVzZGF5LCAxNyBK YW51YXJ5IDIwMTcgYXQgODowNyBQTQ0KICAgID4+IFRvOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVs bmlrb3ZAZmFzdG1haWwuZm0+DQogICAgPj4gQ2M6IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPiwg ImRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1iZmNw YmlzLXNkcC13cy11cmlAaWV0Zi5vcmc+LCAiYmZjcGJpc0BpZXRmLm9yZyIgPGJmY3BiaXNAaWV0 Zi5vcmc+LCAiQ2hhcmxlcyBFY2tlbCAoZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJi ZmNwYmlzLWNoYWlyc0BpZXRmLm9yZyIgPGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPiwgIlJhbSBN b2hhbiBSIChybW9oYW5yKSIgPHJtb2hhbnJAY2lzY28uY29tPg0KICAgID4+IFN1YmplY3Q6IFJl OiBbYmZjcGJpc10gQWxleGV5IE1lbG5pa292J3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmY3Bi aXMtc2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCiAgICA+PiANCiAg ICA+PiAgIEFsZXhleSwgd291bGQgdGhlIGZvbGxvd2luZyBjaGFuZ2VzIGNsYXJpZnkgdGhpbmdz Pw0KICAgID4+IA0KICAgID4+ICAgU2VjdGlvbiA0LjENCiAgICA+PiAgIE9MRA0KICAgID4+ICAg dGhlIHNlcnZlciBzaWRlLCB3aGljaCBjb3VsZCBiZSBlaXRoZXINCiAgICA+PiAgICAgIHRoZSBv ZmZlcmVyIG9yIGFuc3dlcmVyLCBNVVNUIGFkZCBhbiAiYT13cy11cmkiIG9yICJhPXdzcy11cmki DQogICAgPj4gICAgICBhdHRyaWJ1dGUgaW4gdGhlIG1lZGlhIHNlY3Rpb24NCiAgICA+PiAgIE5F Vw0KICAgID4+ICAgdGhlIHNlcnZlciBzaWRlLCB3aGljaCBjb3VsZCBiZSBlaXRoZXINCiAgICA+ PiAgICAgIHRoZSBvZmZlcmVyIG9yIGFuc3dlcmVyLCBNVVNUIGFkZCBhbiAiYT13cy11cmkiIG9y ICJhPXdzcy11cmnigJ0NCiAgICA+PiAgICAgIGF0dHJpYnV0ZSAoYnV0IG5vdCBib3RoKSBpbiB0 aGUgbWVkaWEgc2VjdGlvbg0KICAgID4+IA0KICAgID4+ICAgU2VjdGlvbiA0LjMNCiAgICA+PiAg IE9MRA0KICAgID4+ICAgSWYgdGhlIGFuc3dlcnMgYXNzaWducyBTRFAgInNldHVwIiBhdHRyaWJ1 dGUgd2l0aCAicGFzc2l2ZSIsIHRoZW4gaXQNCiAgICA+PiAgICAgIE1VU1QgaGF2ZSBhIFVSSSBp biBlaXRoZXIgImE9d3MtdXJpIiBvciAiYT13c3MtdXJpIiBhdHRyaWJ1dGUNCiAgICA+PiAgICAg IGRlcGVuZGluZyBvbiB3aGV0aGVyIHRoZSBhcHBsaWNhdGlvbiB1c2VzIFdlYlNvY2tldCBvcg0K ICAgID4+ICAgICAgc2VjdXJlV2ViU29ja2V0Lg0KICAgID4+ICAgTkVXDQogICAgPj4gICBJZiB0 aGUgYW5zd2VycyBhc3NpZ25zIFNEUCAic2V0dXAiIGF0dHJpYnV0ZSB3aXRoICJwYXNzaXZlIiwg dGhlbiBpdA0KICAgID4+ICAgICAgTVVTVCBoYXZlIGEgVVJJIGluIGVpdGhlciAiYT13cy11cmki IG9yICJhPXdzcy11cmkiIGF0dHJpYnV0ZQ0KICAgID4+ICAgICAgKGJ1dCBub3QgYm90aCkgaW4g dGhlIG1lZGlhIHNlY3Rpb24sIGRlcGVuZGluZyBvbiB3aGV0aGVyIHRoZSBhcHBsaWNhdGlvbiB1 c2VzIFdlYlNvY2tldCBvcg0KICAgID4+ICAgICAgc2VjdXJlV2ViU29ja2V0Lg0KICAgID4+IA0K ICAgID4+ICAgUmFtLCB3b3VsZCB5b3UgYmUgb2theSB3aXRoIHRob3NlIGNsYXJpZmljYXRpb25z Pw0KICAgID4+IA0KICAgID4+ICAgQWxpc3NhDQogICAgPj4gDQogICAgPj4gDQogICAgPj4+IE9u IEphbiAxNiwgMjAxNywgYXQgMTA6MDkgQU0sIFJhbSBNb2hhbiBSIChybW9oYW5yKSA8cm1vaGFu ckBjaXNjby5jb20+IHdyb3RlOg0KICAgID4+PiANCiAgICA+Pj4gSGkgQWxleGV5LA0KICAgID4+ PiANCiAgICA+Pj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICA+Pj4gRnJvbTogQWxl eGV5IE1lbG5pa292IDxhYW1lbG5pa292QGZhc3RtYWlsLmZtPg0KICAgID4+PiBEYXRlOiBNb25k YXksIDE2IEphbnVhcnkgMjAxNyBhdCA4OjI1IFBNDQogICAgPj4+IFRvOiAiUmFtIE1vaGFuIFIg KHJtb2hhbnIpIiA8cm1vaGFuckBjaXNjby5jb20+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4N CiAgICA+Pj4gQ2M6ICJkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9yZyIgPGRy YWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0Zi5vcmci IDxiZmNwYmlzQGlldGYub3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVja2VsY3UpIiA8ZWNrZWxjdUBj aXNjby5jb20+LCAiYmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmciIDxiZmNwYmlzLWNoYWlyc0BpZXRm Lm9yZz4NCiAgICA+Pj4gU3ViamVjdDogUmU6IFtiZmNwYmlzXSBBbGV4ZXkgTWVsbmlrb3YncyBE aXNjdXNzIG9uIGRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpLTA4OiAod2l0aCBESVNDVVNT IGFuZCBDT01NRU5UKQ0KICAgID4+PiANCiAgICA+Pj4gIEhpIFJhbSwNCiAgICA+Pj4gDQogICAg Pj4+PiAgT24gTW9uLCBKYW4gMTYsIDIwMTcsIGF0IDAyOjQ5IFBNLCBSYW0gTW9oYW4gUiAocm1v aGFucikgd3JvdGU6DQogICAgPj4+PiBIaSBBbGV4ZXksDQogICAgPj4+PiANCiAgICA+Pj4+IFBs ZWFzZSBzZWUgaW5saW5lIDxSYW0+DQogICAgPj4+PiANCiAgICA+Pj4+IC0tLS0tT3JpZ2luYWwg TWVzc2FnZS0tLS0tDQogICAgPj4+PiBGcm9tOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZA ZmFzdG1haWwuZm0+DQogICAgPj4+PiBEYXRlOiBNb25kYXksIDE2IEphbnVhcnkgMjAxNyBhdCA3 OjU3IFBNDQogICAgPj4+PiBUbzogIlJhbSBNb2hhbiBSIChybW9oYW5yKSIgPHJtb2hhbnJAY2lz Y28uY29tPiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQogICAgPj4+PiBDYzogImRyYWZ0LWll dGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnIg0KICAgID4+Pj4gPGRyYWZ0LWlldGYtYmZj cGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0Zi5vcmciDQogICAgPj4+PiA8 YmZjcGJpc0BpZXRmLm9yZz4sICJDaGFybGVzIEVja2VsIChlY2tlbGN1KSIgPGVja2VsY3VAY2lz Y28uY29tPiwNCiAgICA+Pj4+ICJiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZyIgPGJmY3BiaXMtY2hh aXJzQGlldGYub3JnPg0KICAgID4+Pj4gU3ViamVjdDogUmU6IFtiZmNwYmlzXSBBbGV4ZXkgTWVs bmlrb3YncyBEaXNjdXNzIG9uDQogICAgPj4+PiBkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVy aS0wODogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCiAgICA+Pj4+IA0KICAgID4+Pj4gIEhp IFJhbSwNCiAgICA+Pj4+IA0KICAgID4+Pj4+ICBPbiBNb24sIEphbiAxNiwgMjAxNywgYXQgMDY6 MDkgQU0sIFJhbSBNb2hhbiBSIChybW9oYW5yKSB3cm90ZToNCiAgICA+Pj4+PiBIaSBBbGV4ZXks DQogICAgPj4+Pj4gDQogICAgPj4+Pj4gVGhhbmtzIGZvciB5b3VyIGZlZWRiYWNrLiBQbGVhc2Ug c2VlIGlubGluZSA8UmFtPg0KICAgID4+Pj4+IA0KICAgID4+Pj4+IC0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQogICAgPj4+Pj4gRnJvbTogYmZjcGJpcyA8YmZjcGJpcy1ib3VuY2VzQGlldGYu b3JnPiBvbiBiZWhhbGYgb2YgQWxleGV5IE1lbG5pa292DQogICAgPj4+Pj4gPGFhbWVsbmlrb3ZA ZmFzdG1haWwuZm0+DQogICAgPj4+Pj4gRGF0ZTogU2F0dXJkYXksIDE0IEphbnVhcnkgMjAxNyBh dCAzOjQ5IEFNDQogICAgPj4+Pj4gVG86IFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPg0KICAgID4+ Pj4+IENjOiAiZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmlAaWV0Zi5vcmciDQogICAgPj4+ Pj4gPGRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0 Zi5vcmciDQogICAgPj4+Pj4gPGJmY3BiaXNAaWV0Zi5vcmc+LCAiQ2hhcmxlcyBFY2tlbCAoZWNr ZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sDQogICAgPj4+Pj4gImJmY3BiaXMtY2hhaXJzQGll dGYub3JnIiA8YmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmc+DQogICAgPj4+Pj4gU3ViamVjdDogW2Jm Y3BiaXNdIEFsZXhleSBNZWxuaWtvdidzIERpc2N1c3Mgb24NCiAgICA+Pj4+PiBkcmFmdC1pZXRm LWJmY3BiaXMtc2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCiAgICA+ Pj4+PiANCiAgICA+Pj4+PiAgQWxleGV5IE1lbG5pa292IGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dp bmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KICAgID4+Pj4+ICBkcmFmdC1pZXRmLWJmY3BiaXMtc2Rw LXdzLXVyaS0wODogRGlzY3Vzcw0KICAgID4+Pj4+IA0KICAgID4+Pj4gDQogICAgPj4+Pj4gIC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCiAgICA+Pj4+PiAgRElTQ1VTUzoNCiAgICA+Pj4+PiAgLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KICAgID4+Pj4+IA0KICAgID4+Pj4+ICBUaGlzIGlzIGdlbmVyYWxseSBhIHdlbGwgd3JpdHRl biBkb2N1bWVudCwgYnV0IEkgaGF2ZSBhIHNtYWxsIGxpc3Qgb2YNCiAgICA+Pj4+PiAgaXNzdWVz IHRoYXQgSSB3b3VsZCBsaWtlIHRvIGRpc2N1c3MgYmVmb3JlIHJlY29tbWVuZGluZyBpdHMgYXBw cm92YWw6DQogICAgPj4+Pj4gDQogICAgPj4+Pj4gIDEpIEFyZSBhPXdzLXVyaSBhbmQgYT13c3Mt dXJpIG11dHVhbGx5IGV4Y2x1c2l2ZT8gKFNlY3Rpb24gNC4zIGlzIGENCiAgICA+Pj4+PiAgZ29v ZA0KICAgID4+Pj4+ICBwbGFjZSB0byBtZW50aW9uIHdoYXQgdG8gZG8gaWYgYm90aCBhcmUgc3Bl Y2lmaWVkKS4NCiAgICA+Pj4+PiANCiAgICA+Pj4+PiA8UmFtPiBZZXMga2luZCBvZi4gSW4gYSBn aXZlbiBtZWRpYSBsaW5lIChtPSBsaW5lKSB3ZSB3aWxsIGVpdGhlciBoYXZlDQogICAgPj4+Pj4g YT13cy11cmkgb3IgYT13c3MtdXJpLiBUaGF0IHNhaWQgYSByZXNwb25zZSBmcm9tIGEgQkZDUCBz ZXJ2ZXIgdXNpbmcNCiAgICA+Pj4+PiB3ZWJTb2NrZXQgYXMgYSB0cmFuc3BvcnQgY2FuDQogICAg Pj4+Pj4gaGF2ZSB0d28gbWVkaWEgbGluZXMgb25lIHdpdGggd3MgYW5kIG90aGVyIHdpdGggd3Nz LiBTb21ldGhpbmcgbGlrZToNCiAgICA+Pj4+PiANCiAgICA+Pj4+PiBBbnN3ZXIgKHNlcnZlcik6 DQogICAgPj4+Pj4gbT1hcHBsaWNhdGlvbiA1MDAwMCBUQ1AvV1NTL0JGQ1AgKg0KICAgID4+Pj4+ IGE9c2V0dXA6cGFzc2l2ZQ0KICAgID4+Pj4+IGE9Y29ubmVjdGlvbjpuZXcNCiAgICA+Pj4+PiBh PXdzcy11cmk6d3NzOi8vYmZjcC13cy5leGFtcGxlLmNvbT90b2tlbj0zMTcwNDQ5MzEyDQogICAg Pj4+Pj4gbT1hcHBsaWNhdGlvbiA1MDAwMCBUQ1AvV1MvQkZDUCAqDQogICAgPj4+Pj4gYT1zZXR1 cDpwYXNzaXZlDQogICAgPj4+Pj4gYT1jb25uZWN0aW9uOm5ldw0KICAgID4+Pj4+IGE9d3MtdXJp OndzOi8vYmZjcC13cy5leGFtcGxlLmNvbT90b2tlbj0zMTcwNDQ5MzEyDQogICAgPj4+PiANCiAg ICA+Pj4+ICBbQWxleGV5XTogVGhpcyBpcyBleGFjdGx5IG15IHByb2JsZW0sIHlvdSBzaG91bGQg c3BlY2lmeSBob3cgYQ0KICAgID4+Pj4gIHJlY2lwaWVudA0KICAgID4+Pj4gIHNob3VsZCBoYW5k bGUgeW91ciBleGFtcGxlIGFib3ZlLiBJZiB5b3Ugb25seSBoYXZlIDEgYXR0cmlidXRlLCB0aGUN CiAgICA+Pj4+ICBwcm9ibGVtIGdvZXMgYXdheSBlbnRpcmVseS4NCiAgICA+Pj4+IA0KICAgID4+ Pj4gPFJhbT4gaW4gdGhlIGFib3ZlIGNhc2UsIHRoZXkgYXJlIHN0aWxsIHR3byBkaWZmZXJlbnQg bT0gbGluZXMuIFRoZQ0KICAgID4+Pj4gcmVjZWl2ZXIgKGFmdGVyIG9mZmVyL2Fuc3dlciBpcyBk b25lKSBvZiB0aGlzIFNEUCBjb25uZWN0cyB0byB0aGUgVVJJDQogICAgPj4+PiBtZW50aW9uZWQg aW4gdGhhdCBtPSBsaW5lLiANCiAgICA+Pj4+IE5vdGUgSSBqdXN0IHJlLXVzZWQgdGhlIHNhbWUg VVJML3BvcnQgaW4gdGhlIGV4YW1wbGUgYWJvdmUuIElmIHRoZXJlIGFyZQ0KICAgID4+Pj4gbXVs dGlwbGUgbT1hcHBsaWNhdGlvbiBtZWRpYSBsaW5lcyAodGhleSB3aWxsIGJlIGZvciBkaWZmZXJl bnQNCiAgICA+Pj4+IGFwcGxpY2F0aW9ucykgYmVpbmcgbmVnb3RpYXRlZCBpbiBTRFAsIG9uZSBh cHBsaWNhdGlvbiBtYXkgdXNlIHNlY3VyZSBXUw0KICAgID4+Pj4gYW5kIG90aGVyIGFwcGxpY2F0 aW9uIG1heSB1c2Ugbm9uLXNlY3VyZSBXUy4gVGhlIGNsaWVudCBhZnRlciBpdCByZWNlaXZlcw0K ICAgID4+Pj4gdGhlIGFuc3dlciBTRFAgd2lsbCBqdXN0IHNldHVwIHRoZSBjb25uZWN0aW9uIHRv IHRoZSBVUkkgc3BlY2lmaWVkIGluIHRoZQ0KICAgID4+Pj4gYXR0cmlidXRlLiAgDQogICAgPj4+ IA0KICAgID4+PiAgU29ycnksIEkgd2FzIHRoaW5raW5nIGFib3V0IGRpZmZlcmVudCBleGFtcGxl Og0KICAgID4+PiANCiAgICA+Pj4gIG09YXBwbGljYXRpb24gNTAwMDAgVENQL1dTUy9CRkNQICoN CiAgICA+Pj4gICAgIGE9c2V0dXA6cGFzc2l2ZQ0KICAgID4+PiAgICAgYT1jb25uZWN0aW9uOm5l dw0KICAgID4+PiAgICAgYT13c3MtdXJpOndzczovL2JmY3Atd3MuZXhhbXBsZS5jb20/dG9rZW49 MzE3MDQ0OTMxMg0KICAgID4+PiAgICAgYT13cy11cmk6d3M6Ly9iZmNwLXdzLmV4YW1wbGUuY29t P3Rva2VuPTMxNzA0NDkzMTINCiAgICA+Pj4gDQogICAgPj4+ICBZb3UgaGF2ZSAyIGNvbmZsaWN0 aW5nIFVSSXMgZm9yIHRoZSBzYW1lIG09IGxpbmUuIElzIHRoaXMgcG9zc2libGU/DQogICAgPj4+ IA0KICAgID4+PiA8UmFtPiBObyB0aGlzIGlzIG5vdCBwb3NzaWJsZS4gSWYgdGhlIHRyYW5zcG9y dCBpcyBUQ1AvV1NTL0JGQ1Agd2Ugc2hvdWxkIGhhdmUgb25seSBhPXdzcy11cmkuIElmIHRyYW5z cG9ydCBpcyBUQ1AvV1MvQkZDUCB3ZSBzaG91bGQgaGF2ZSBvbmx5IGE9d3MtdXJpLg0KICAgID4+ PiANCiAgICA+Pj4gUmVnYXJkcywNCiAgICA+Pj4gUmFtDQogICAgPj4+IA0KICAgID4+Pj4gSSBk b27igJl0IHNlZSBhbnkgcHJvYmxlbSBpbiBoZXJlLiAgDQogICAgPj4+PiANCiAgICA+Pj4+IFJl Z2FyZHMsDQogICAgPj4+PiBSYW0NCiAgICA+Pj4+IA0KICAgID4+Pj4+ICBXaHkgbm90IGEgc2lu Z2xlIGF0dHJpYnV0ZSwgY29uc2lkZXJpbmcgdGhhdCBib3RoIHdzOiBhbmQgd3NzOiBVUklzDQog ICAgPj4+Pj4gIGFyZQ0KICAgID4+Pj4+ICBwb3NzaWJsZT8NCiAgICA+Pj4+PiANCiAgICA+Pj4+ PiA8UmFtPiBJIHdvdWxkIHN0aWxsIHByZWZlciB0d28gYXR0cmlidXRlcy4gV2UganVzdCBmb2xs b3dlZCB0aGUNCiAgICA+Pj4+PiBjb252ZW50aW9uIC8gYXBwcm9hY2ggdGhhdCB3YXMgdXNlZCBp biBbUkZDNjQ1NV0uICANCiAgICA+Pj4+IA0KICAgID4+Pj4gDQogICAgPj4+IA0KICAgID4+PiAN CiAgICA+PiANCiAgICA+PiANCiAgICA+PiANCiAgICA+IA0KICAgID4gDQogICAgPiANCiAgICA+ IA0KICAgID4gDQogICAgPiA8RGlmZl8gZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmktMDgu dHh0IC0gZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmktMDkudHh0Lmh0bWw+DQogICAgPiA8 ZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmktMDkudHh0Pg0KICAgIA0KICAgIA0KDQo= From nobody Mon Feb 6 04:31:19 2017 Return-Path: X-Original-To: bfcpbis@ietf.org Delivered-To: bfcpbis@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C9352129D39; Mon, 6 Feb 2017 04:31:14 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.42.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148638427481.18967.9148401872182948747.idtracker@ietfa.amsl.com> Date: Mon, 06 Feb 2017 04:31:14 -0800 Archived-At: Cc: bfcpbis@ietf.org Subject: [bfcpbis] I-D Action: draft-ietf-bfcpbis-sdp-ws-uri-09.txt X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Feb 2017 12:31:15 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Binary Floor Control Protocol Bis of the IETF. Title : Session Description Protocol (SDP) WebSocket Connection URI Attribute Authors : Ram Mohan Ravindranath Gonzalo Salgueiro Filename : draft-ietf-bfcpbis-sdp-ws-uri-09.txt Pages : 11 Date : 2017-02-06 Abstract: The WebSocket protocol enables bidirectional real-time communication between clients and servers in web-based applications. This document specifies extensions to Session Description Protocol (SDP) for application protocols using WebSocket as a transport. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-sdp-ws-uri/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-bfcpbis-sdp-ws-uri-09 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-bfcpbis-sdp-ws-uri-09 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Feb 6 04:33:05 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B924C129D32; Mon, 6 Feb 2017 04:33:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.523 X-Spam-Level: X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DQb_Y1zW2ZM4; Mon, 6 Feb 2017 04:33:01 -0800 (PST) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44908129D31; Mon, 6 Feb 2017 04:33:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18984; q=dns/txt; s=iport; t=1486384381; x=1487593981; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=7wFMtpieHsqz6dBWkrT2gGvU+Hj3Y4GQLesAJZiPgTs=; b=CSMDpp2a/POFvua1vdkQrXdhMz5V4R7Uc1iL/opdxBPbEpiz0P3AlsTf x/R8DMoeckRFBBKa5taAsxaNkZ1WXQJOXUllKpv27QKyS4+t37I3C6VCe 4JeNLDZwIIuFmoGDidG4rC79eqfOrj4FoSe6ymCgyR23EXCwhcKFQIDeM o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BHAQDma5hY/4kNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1NhgQkHg1GKCJIMkyiCD4IMKoV4AhqCMD8YAQIBAQEBAQEBYii?= =?us-ascii?q?EaQEBAQMBIxFFDAQCAQgOAwMBAgECAh8HAgICMBUICAIEAQ0FH4lMCA6uUIIli?= =?us-ascii?q?zUBAQEBAQEBAQEBAQEBAQEBAQEBAQEYBYELh0aBYYEJgxeBJxYHECOCTC6CMQW?= =?us-ascii?q?JB5JfAYZniyGBe4UXiXCTCwEfOH5PFTwRAYQyHRmBSHWGWyuBAwGBCwEBAQ?= X-IronPort-AV: E=Sophos;i="5.33,342,1477958400"; d="scan'208";a="382022390" Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 06 Feb 2017 12:32:59 +0000 Received: from XCH-RTP-017.cisco.com (xch-rtp-017.cisco.com [64.101.220.157]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v16CWx5U032631 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 6 Feb 2017 12:32:59 GMT Received: from xch-rtp-017.cisco.com (64.101.220.157) by XCH-RTP-017.cisco.com (64.101.220.157) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 6 Feb 2017 07:32:58 -0500 Received: from xch-rtp-017.cisco.com ([64.101.220.157]) by XCH-RTP-017.cisco.com ([64.101.220.157]) with mapi id 15.00.1210.000; Mon, 6 Feb 2017 07:32:58 -0500 From: "Ram Mohan R (rmohanr)" To: Alexey Melnikov , Alissa Cooper , The IESG Thread-Topic: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) Thread-Index: AQHSbeseZdw0JJoDs02EXfYysuX0qaE7UlwAgAAvAwCAAGIlAP//pZyAgABgG4CAAS0tAIAAXSIAgAGXSoCAANpmAIARYtkAgAhGBgCAAacwgIABiTEA Date: Mon, 6 Feb 2017 12:32:58 +0000 Message-ID: <8577E5D1-1E3F-4B06-BDF2-832D8C16E4C5@cisco.com> References: <148434596441.9752.6696571117558965561.idtracker@ietfa.amsl.com> <1484576862.2842665.849203352.4F87F4EA@webmail.messagingengine.com> <30CC3092-0ED4-4983-8203-8394FD06D0A9@cisco.com> <1484578527.2848348.849241320.7317C68A@webmail.messagingengine.com> <3E8813A2-FC3D-433F-B51B-41380ABD3D95@cooperw.in> <60D33439-D03C-4E3D-A293-9DE608AC5DB4@cisco.com> <6E698BCA-2F14-4660-B053-BEDA42860B86@cooperw.in> <67E82966-54E2-403B-9684-2F8580B75A9E@cisco.com> <3B129AC4-6AC6-463E-B8F6-C6CD261D795A@cisco.com> In-Reply-To: <3B129AC4-6AC6-463E-B8F6-C6CD261D795A@cisco.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [72.163.175.95] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , Ben Campbell , "bfcpbis@ietf.org" , "Charles Eckel \(eckelcu\)" , "bfcpbis-chairs@ietf.org" Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Feb 2017 12:33:04 -0000 SSBoYXZlIHB1Ymxpc2hlZCBhIG5ldyByZXZpc2lvbiBhZGRyZXNzaW5nIGFsbCB0aGUgSUVTRyBm ZWVkYmFjayByZWNlaXZlZCBzbyBmYXIuDQoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wOQ0KRGlmZiBpcyBoZXJlIC0gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpLTA5 DQoNClJlZ2FyZHMsDQpSYW0NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206ICJS YW0gTW9oYW4gUiAocm1vaGFucikiIDxybW9oYW5yQGNpc2NvLmNvbT4NCkRhdGU6IFN1bmRheSwg NSBGZWJydWFyeSAyMDE3IGF0IDY6MzUgUE0NClRvOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlr b3ZAZmFzdG1haWwuZm0+DQpDYzogQWxpc3NhIENvb3BlciA8YWxpc3NhQGNvb3BlcncuaW4+LCBC ZW4gQ2FtcGJlbGwgPGJlbkBub3N0cnVtLmNvbT4sIFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPiwg ImRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1iZmNw YmlzLXNkcC13cy11cmlAaWV0Zi5vcmc+LCAiYmZjcGJpc0BpZXRmLm9yZyIgPGJmY3BiaXNAaWV0 Zi5vcmc+LCAiQ2hhcmxlcyBFY2tlbCAoZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJi ZmNwYmlzLWNoYWlyc0BpZXRmLm9yZyIgPGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPg0KU3ViamVj dDogUmU6IFtiZmNwYmlzXSBBbGV4ZXkgTWVsbmlrb3YncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYt YmZjcGJpcy1zZHAtd3MtdXJpLTA4OiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KDQogICAg VGhhbmtzIEFsZXhleSwNCiAgICBJIHdpbGwgcHVibGlzaCB0aGUgcmV2aXNpb24gYWZ0ZXIgZml4 aW5nIHRoZSBuaXRzIHlvdSBwb2ludGVkIGJlbG93DQogICAgDQogICAgUmFtDQogICAgDQogICAg LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICBGcm9tOiBBbGV4ZXkgTWVsbmlrb3YgPGFh bWVsbmlrb3ZAZmFzdG1haWwuZm0+DQogICAgRGF0ZTogU2F0dXJkYXksIDQgRmVicnVhcnkgMjAx NyBhdCAxMDo1MSBQTQ0KICAgIFRvOiAiUmFtIE1vaGFuIFIgKHJtb2hhbnIpIiA8cm1vaGFuckBj aXNjby5jb20+DQogICAgQ2M6IEFsaXNzYSBDb29wZXIgPGFsaXNzYUBjb29wZXJ3LmluPiwgQmVu IENhbXBiZWxsIDxiZW5Abm9zdHJ1bS5jb20+LCBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4sICJk cmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9yZyIgPGRyYWZ0LWlldGYtYmZjcGJp cy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0Zi5vcmciIDxiZmNwYmlzQGlldGYu b3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVja2VsY3UpIiA8ZWNrZWxjdUBjaXNjby5jb20+LCAiYmZj cGJpcy1jaGFpcnNAaWV0Zi5vcmciIDxiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZz4NCiAgICBTdWJq ZWN0OiBSZTogW2JmY3BiaXNdIEFsZXhleSBNZWxuaWtvdidzIERpc2N1c3Mgb24gZHJhZnQtaWV0 Zi1iZmNwYmlzLXNkcC13cy11cmktMDg6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQogICAg DQogICAgICAgIEhpIFJhbSwNCiAgICAgICAgDQogICAgICAgID4gT24gMzAgSmFuIDIwMTcsIGF0 IDA1OjMwLCBSYW0gTW9oYW4gUiAocm1vaGFucikgPHJtb2hhbnJAY2lzY28uY29tPiB3cm90ZToN CiAgICAgICAgPiANCiAgICAgICAgPiBIaSBBbGV4ZXkvYWxsLA0KICAgICAgICA+IA0KICAgICAg ICA+IFBsZWFzZSBmaW5kIHRoZSBkaWZmcyB3aXRoIHRoZSBjaGFuZ2VzIHRvIHVzZSBzaW5nbGUg YXR0cmlidXRlLiBUaGlzIGRpZmYgYWxzbyBoYXMgb3RoZXIgY29tbWVudHMgZnJvbSBCZW4sIEth dGhsZWVuIGluY29ycG9yYXRlZC4NCiAgICAgICAgDQogICAgICAgIFRoaXMgbG9va3MgbXVjaCBi ZXR0ZXIsIHRoYW5rIHlvdSENCiAgICAgICAgDQogICAgICAgIFlvdSBoYXZlIGludHJvZHVjZWQg YSB0eXBvIGluIG9uZSBwbGFjZSAoc2VhcmNoIGZvciAid3dlYnNvY2tldCIpLg0KICAgICAgICAN CiAgICAgICAgQmVzdCBSZWdhcmRzLA0KICAgICAgICBBbGV4ZXkNCiAgICAgICAgDQogICAgICAg ID4gUmVnYXJkcywNCiAgICAgICAgPiBSYW0NCiAgICAgICAgPiANCiAgICAgICAgPiAtLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KICAgICAgICA+IEZyb206ICJSYW0gTW9oYW4gUiAocm1vaGFu cikiIDxybW9oYW5yQGNpc2NvLmNvbT4NCiAgICAgICAgPiBEYXRlOiBUaHVyc2RheSwgMTkgSmFu dWFyeSAyMDE3IGF0IDk6MzAgQU0NCiAgICAgICAgPiBUbzogQWxpc3NhIENvb3BlciA8YWxpc3Nh QGNvb3BlcncuaW4+DQogICAgICAgID4gQ2M6IEFsZXhleSBNZWxuaWtvdiA8YWFtZWxuaWtvdkBm YXN0bWFpbC5mbT4sIFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPiwgImRyYWZ0LWlldGYtYmZjcGJp cy1zZHAtd3MtdXJpQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmlAaWV0 Zi5vcmc+LCAiYmZjcGJpc0BpZXRmLm9yZyIgPGJmY3BiaXNAaWV0Zi5vcmc+LCAiQ2hhcmxlcyBF Y2tlbCAoZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJiZmNwYmlzLWNoYWlyc0BpZXRm Lm9yZyIgPGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPg0KICAgICAgICA+IFN1YmplY3Q6IFJlOiBb YmZjcGJpc10gQWxleGV5IE1lbG5pa292J3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLWJmY3BiaXMt c2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCiAgICAgICAgPiANCiAg ICAgICAgPiAgICBIaSBBbGlzc2EsDQogICAgICAgID4gDQogICAgICAgID4gICAgSSBkb27igJl0 IGhhdmUgYSBzdHJvbmcgb3BpbmlvbiBvbiB0aGlzLiBFaXRoZXIgd2F5IChoYXZpbmcgYSBzaW5n bGUgYXR0cmlidXRlIG9yIHR3byBkaWZmZXJlbnQgU0RQIGF0dHJpYnV0ZXMpIHdvdWxkIHdvcmsu DQogICAgICAgID4gDQogICAgICAgID4gICAgSW1wbGVtZW50YXRpb25zIGNhbiBzdGlsbCByZXRy aWV2ZSB0aGUgdmFsdWUgKFVSSSkgb2YgdGhhdCBhdHRyaWJ1dGUgYW5kIGJhc2VkIG9uIHRoZSBw cm90byBsaW5lIChUQ1AvV1MvQkZDUCBvciBUQ1AvV1NTL0JGQ1ApIG1hdGNoIHRoZSBVUkkgYWdh aW5zdCB3cyBvciB3c3Mgc2NoZW1hIGRlZmluZWQgaW4gUkZDNjQ1NS4gIEkgd291bGQgZXhwZWN0 IHN1Y2ggYSB2YWxpZGF0aW9uIHRvIGhhcHBlbiBhY3Jvc3MgbGF5ZXJzLg0KICAgICAgICA+ICAg IFRoZSBTRFAgc3RhY2sgcGFyc2VyIHRvIGxvb2sgYXQgdGhlIHByb3RvIGxpbmUgdHJhbnNwb3J0 IHZhbHVlIChUQ1AvV1MvQkZDUCBvciBUQ1AvV1NTL0JGQ1ApIGFuZCBjaGVjayBmb3IgcHJlc2Vu Y2Ugb2YgYT13ZWJzb2NrZXQtdXJpIGF0dHJpYnV0ZS4gVGhlIHZhbHVlIG9mIHRoaXMgYXR0cmli dXRlICh3cyBvciB3c3Mgc2NoZW1hKSBjYW4gYmUgcGFzc2VkICphcyBpcyogdG8gdGhlIGFwcGxp Y2F0aW9uIChpbiB0aGlzIGNhc2UgQkZDUCBjbGllbnQgYXBwbGljYXRpb24pIHdoaWNoIHdpbGwg dmFsaWRhdGUgaXQgYWdhaW5zdCB0aGUgc2NoZW1hIGluIFJGQyA2NDU1Lg0KICAgICAgICA+IA0K ICAgICAgICA+ICAgIEkgYW0gT0sgdG8gaW5jb3Jwb3JhdGUgdGhpcyBjb21tZW50IHRvIGhhdmUg YSBzaW5nbGUgU0RQIGF0dHJpYnV0ZS4gDQogICAgICAgID4gDQogICAgICAgID4gICAgUmVnYXJk cywNCiAgICAgICAgPiAgICBSYW0NCiAgICAgICAgPiANCiAgICAgICAgPiAgICAtLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KICAgICAgICA+ICAgIEZyb206IEFsaXNzYSBDb29wZXIgPGFsaXNz YUBjb29wZXJ3LmluPg0KICAgICAgICA+ICAgIERhdGU6IFRodXJzZGF5LCAxOSBKYW51YXJ5IDIw MTcgYXQgMTo1OCBBTQ0KICAgICAgICA+ICAgIFRvOiAiUmFtIE1vaGFuIFIgKHJtb2hhbnIpIiA8 cm1vaGFuckBjaXNjby5jb20+DQogICAgICAgID4gICAgQ2M6IEFsZXhleSBNZWxuaWtvdiA8YWFt ZWxuaWtvdkBmYXN0bWFpbC5mbT4sIFRoZSBJRVNHIDxpZXNnQGlldGYub3JnPiwgImRyYWZ0LWll dGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13 cy11cmlAaWV0Zi5vcmc+LCAiYmZjcGJpc0BpZXRmLm9yZyIgPGJmY3BiaXNAaWV0Zi5vcmc+LCAi Q2hhcmxlcyBFY2tlbCAoZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJiZmNwYmlzLWNo YWlyc0BpZXRmLm9yZyIgPGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPg0KICAgICAgICA+ICAgIFN1 YmplY3Q6IFJlOiBbYmZjcGJpc10gQWxleGV5IE1lbG5pa292J3MgRGlzY3VzcyBvbiBkcmFmdC1p ZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCiAg ICAgICAgPiAgICBSZXNlbnQtRnJvbTogPGFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+DQogICAgICAg ID4gICAgUmVzZW50LVRvOiA8cm1vaGFuckBjaXNjby5jb20+LCA8Z3NhbGd1ZWlAY2lzY28uY29t Pg0KICAgICAgICA+ICAgIFJlc2VudC1EYXRlOiBUaHVyc2RheSwgMTkgSmFudWFyeSAyMDE3IGF0 IDE6NTggQU0NCiAgICAgICAgPiANCiAgICAgICAgPiAgICAgICAgSGkgUmFtLA0KICAgICAgICA+ IA0KICAgICAgICA+ICAgICAgICBJIGhhZCBzb21lIGZ1cnRoZXIgY29udmVyc2F0aW9uIHdpdGgg QWxleGV5IG9uIHRoZSBzaWRlIGFuZCB3YW50ZWQgdG8gY29tZSBiYWNrIHRvIGEgcXVlc3Rpb24g aGUgcG9zZWQ6IGlzIHRoZXJlIGEgcmVhc29uIHdoeSBhPXdzLXVyaSBhbmQgYT13c3MtdXJpIGJv dGggbmVlZCB0byBiZSBzcGVjaWZpZWQ/IFdoeSBjYW7igJl0IGEgc2luZ2xlIGxhYmVsIGJlIHNw ZWNpZmllZCwgc2F5IGE9d2Vic29ja2V0LXVyaSwgYW5kIHRoZW4gaGF2ZSBub3JtYXRpdmUgbGFu Z3VhZ2UgcmVxdWlyaW5nIHRoZSBzY2hlbWUgaW4gdGhlIFVSSSBpdHNlbGYgdG8gbWF0Y2ggd2hh dOKAmXMgaW4gdGhlIGFzc29jaWF0ZWQgbS1saW5lICh3czovLyBmb3IgVENQL1dTL0JGQ1AgYW5k IHdzczovLyBmb3IgVENQL1dTUy9CRkNQKT8gV29u4oCZdCBpdCBiZSBtb3JlIGVmZmljaWVudCBm b3IgaW1wbGVtZW50YXRpb25zIHRvIGdyYWIgdGhlIFVSSSBpdHNlbGYgYW55d2F5IGFuZCBjaGVj ayB0aGF0IHRoZSBzY2hlbWUgbWF0Y2hlcyB0aGUgbS1saW5lPw0KICAgICAgICA+IA0KICAgICAg ICA+ICAgICAgICBUaGFua3MsDQogICAgICAgID4gICAgICAgIEFsaXNzYQ0KICAgICAgICA+IA0K ICAgICAgICA+PiBPbiBKYW4gMTcsIDIwMTcsIGF0IDk6NDAgQU0sIFJhbSBNb2hhbiBSIChybW9o YW5yKSA8cm1vaGFuckBjaXNjby5jb20+IHdyb3RlOg0KICAgICAgICA+PiANCiAgICAgICAgPj4g QWxpc3NhLA0KICAgICAgICA+PiANCiAgICAgICAgPj4gSSBhbSBmaW5lIHdpdGggdGhlIHByb3Bv c2VkIHRleHQuDQogICAgICAgID4+IA0KICAgICAgICA+PiBUaGFua3MsDQogICAgICAgID4+IFJh bQ0KICAgICAgICA+PiANCiAgICAgICAgPj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAg ICAgICAgPj4gRnJvbTogQWxpc3NhIENvb3BlciA8YWxpc3NhQGNvb3BlcncuaW4+DQogICAgICAg ID4+IERhdGU6IFR1ZXNkYXksIDE3IEphbnVhcnkgMjAxNyBhdCA4OjA3IFBNDQogICAgICAgID4+ IFRvOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+DQogICAgICAgID4+ IENjOiBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4sICJkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdz LXVyaUBpZXRmLm9yZyIgPGRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwg ImJmY3BiaXNAaWV0Zi5vcmciIDxiZmNwYmlzQGlldGYub3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVj a2VsY3UpIiA8ZWNrZWxjdUBjaXNjby5jb20+LCAiYmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmciIDxi ZmNwYmlzLWNoYWlyc0BpZXRmLm9yZz4sICJSYW0gTW9oYW4gUiAocm1vaGFucikiIDxybW9oYW5y QGNpc2NvLmNvbT4NCiAgICAgICAgPj4gU3ViamVjdDogUmU6IFtiZmNwYmlzXSBBbGV4ZXkgTWVs bmlrb3YncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtYmZjcGJpcy1zZHAtd3MtdXJpLTA4OiAod2l0 aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KICAgICAgICA+PiANCiAgICAgICAgPj4gICBBbGV4ZXks IHdvdWxkIHRoZSBmb2xsb3dpbmcgY2hhbmdlcyBjbGFyaWZ5IHRoaW5ncz8NCiAgICAgICAgPj4g DQogICAgICAgID4+ICAgU2VjdGlvbiA0LjENCiAgICAgICAgPj4gICBPTEQNCiAgICAgICAgPj4g ICB0aGUgc2VydmVyIHNpZGUsIHdoaWNoIGNvdWxkIGJlIGVpdGhlcg0KICAgICAgICA+PiAgICAg IHRoZSBvZmZlcmVyIG9yIGFuc3dlcmVyLCBNVVNUIGFkZCBhbiAiYT13cy11cmkiIG9yICJhPXdz cy11cmkiDQogICAgICAgID4+ICAgICAgYXR0cmlidXRlIGluIHRoZSBtZWRpYSBzZWN0aW9uDQog ICAgICAgID4+ICAgTkVXDQogICAgICAgID4+ICAgdGhlIHNlcnZlciBzaWRlLCB3aGljaCBjb3Vs ZCBiZSBlaXRoZXINCiAgICAgICAgPj4gICAgICB0aGUgb2ZmZXJlciBvciBhbnN3ZXJlciwgTVVT VCBhZGQgYW4gImE9d3MtdXJpIiBvciAiYT13c3MtdXJp4oCdDQogICAgICAgID4+ICAgICAgYXR0 cmlidXRlIChidXQgbm90IGJvdGgpIGluIHRoZSBtZWRpYSBzZWN0aW9uDQogICAgICAgID4+IA0K ICAgICAgICA+PiAgIFNlY3Rpb24gNC4zDQogICAgICAgID4+ICAgT0xEDQogICAgICAgID4+ICAg SWYgdGhlIGFuc3dlcnMgYXNzaWducyBTRFAgInNldHVwIiBhdHRyaWJ1dGUgd2l0aCAicGFzc2l2 ZSIsIHRoZW4gaXQNCiAgICAgICAgPj4gICAgICBNVVNUIGhhdmUgYSBVUkkgaW4gZWl0aGVyICJh PXdzLXVyaSIgb3IgImE9d3NzLXVyaSIgYXR0cmlidXRlDQogICAgICAgID4+ICAgICAgZGVwZW5k aW5nIG9uIHdoZXRoZXIgdGhlIGFwcGxpY2F0aW9uIHVzZXMgV2ViU29ja2V0IG9yDQogICAgICAg ID4+ICAgICAgc2VjdXJlV2ViU29ja2V0Lg0KICAgICAgICA+PiAgIE5FVw0KICAgICAgICA+PiAg IElmIHRoZSBhbnN3ZXJzIGFzc2lnbnMgU0RQICJzZXR1cCIgYXR0cmlidXRlIHdpdGggInBhc3Np dmUiLCB0aGVuIGl0DQogICAgICAgID4+ICAgICAgTVVTVCBoYXZlIGEgVVJJIGluIGVpdGhlciAi YT13cy11cmkiIG9yICJhPXdzcy11cmkiIGF0dHJpYnV0ZQ0KICAgICAgICA+PiAgICAgIChidXQg bm90IGJvdGgpIGluIHRoZSBtZWRpYSBzZWN0aW9uLCBkZXBlbmRpbmcgb24gd2hldGhlciB0aGUg YXBwbGljYXRpb24gdXNlcyBXZWJTb2NrZXQgb3INCiAgICAgICAgPj4gICAgICBzZWN1cmVXZWJT b2NrZXQuDQogICAgICAgID4+IA0KICAgICAgICA+PiAgIFJhbSwgd291bGQgeW91IGJlIG9rYXkg d2l0aCB0aG9zZSBjbGFyaWZpY2F0aW9ucz8NCiAgICAgICAgPj4gDQogICAgICAgID4+ICAgQWxp c3NhDQogICAgICAgID4+IA0KICAgICAgICA+PiANCiAgICAgICAgPj4+IE9uIEphbiAxNiwgMjAx NywgYXQgMTA6MDkgQU0sIFJhbSBNb2hhbiBSIChybW9oYW5yKSA8cm1vaGFuckBjaXNjby5jb20+ IHdyb3RlOg0KICAgICAgICA+Pj4gDQogICAgICAgID4+PiBIaSBBbGV4ZXksDQogICAgICAgID4+ PiANCiAgICAgICAgPj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgICAgID4+PiBG cm9tOiBBbGV4ZXkgTWVsbmlrb3YgPGFhbWVsbmlrb3ZAZmFzdG1haWwuZm0+DQogICAgICAgID4+ PiBEYXRlOiBNb25kYXksIDE2IEphbnVhcnkgMjAxNyBhdCA4OjI1IFBNDQogICAgICAgID4+PiBU bzogIlJhbSBNb2hhbiBSIChybW9oYW5yKSIgPHJtb2hhbnJAY2lzY28uY29tPiwgVGhlIElFU0cg PGllc2dAaWV0Zi5vcmc+DQogICAgICAgID4+PiBDYzogImRyYWZ0LWlldGYtYmZjcGJpcy1zZHAt d3MtdXJpQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmlAaWV0Zi5vcmc+ LCAiYmZjcGJpc0BpZXRmLm9yZyIgPGJmY3BiaXNAaWV0Zi5vcmc+LCAiQ2hhcmxlcyBFY2tlbCAo ZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZyIg PGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPg0KICAgICAgICA+Pj4gU3ViamVjdDogUmU6IFtiZmNw YmlzXSBBbGV4ZXkgTWVsbmlrb3YncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtYmZjcGJpcy1zZHAt d3MtdXJpLTA4OiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KICAgICAgICA+Pj4gDQogICAg ICAgID4+PiAgSGkgUmFtLA0KICAgICAgICA+Pj4gDQogICAgICAgID4+Pj4gIE9uIE1vbiwgSmFu IDE2LCAyMDE3LCBhdCAwMjo0OSBQTSwgUmFtIE1vaGFuIFIgKHJtb2hhbnIpIHdyb3RlOg0KICAg ICAgICA+Pj4+IEhpIEFsZXhleSwNCiAgICAgICAgPj4+PiANCiAgICAgICAgPj4+PiBQbGVhc2Ug c2VlIGlubGluZSA8UmFtPg0KICAgICAgICA+Pj4+IA0KICAgICAgICA+Pj4+IC0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQogICAgICAgID4+Pj4gRnJvbTogQWxleGV5IE1lbG5pa292IDxhYW1l bG5pa292QGZhc3RtYWlsLmZtPg0KICAgICAgICA+Pj4+IERhdGU6IE1vbmRheSwgMTYgSmFudWFy eSAyMDE3IGF0IDc6NTcgUE0NCiAgICAgICAgPj4+PiBUbzogIlJhbSBNb2hhbiBSIChybW9oYW5y KSIgPHJtb2hhbnJAY2lzY28uY29tPiwgVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQogICAgICAg ID4+Pj4gQ2M6ICJkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9yZyINCiAgICAg ICAgPj4+PiA8ZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmlAaWV0Zi5vcmc+LCAiYmZjcGJp c0BpZXRmLm9yZyINCiAgICAgICAgPj4+PiA8YmZjcGJpc0BpZXRmLm9yZz4sICJDaGFybGVzIEVj a2VsIChlY2tlbGN1KSIgPGVja2VsY3VAY2lzY28uY29tPiwNCiAgICAgICAgPj4+PiAiYmZjcGJp cy1jaGFpcnNAaWV0Zi5vcmciIDxiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZz4NCiAgICAgICAgPj4+ PiBTdWJqZWN0OiBSZTogW2JmY3BiaXNdIEFsZXhleSBNZWxuaWtvdidzIERpc2N1c3Mgb24NCiAg ICAgICAgPj4+PiBkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wODogKHdpdGggRElTQ1VT UyBhbmQgQ09NTUVOVCkNCiAgICAgICAgPj4+PiANCiAgICAgICAgPj4+PiAgSGkgUmFtLA0KICAg ICAgICA+Pj4+IA0KICAgICAgICA+Pj4+PiAgT24gTW9uLCBKYW4gMTYsIDIwMTcsIGF0IDA2OjA5 IEFNLCBSYW0gTW9oYW4gUiAocm1vaGFucikgd3JvdGU6DQogICAgICAgID4+Pj4+IEhpIEFsZXhl eSwNCiAgICAgICAgPj4+Pj4gDQogICAgICAgID4+Pj4+IFRoYW5rcyBmb3IgeW91ciBmZWVkYmFj ay4gUGxlYXNlIHNlZSBpbmxpbmUgPFJhbT4NCiAgICAgICAgPj4+Pj4gDQogICAgICAgID4+Pj4+ IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgICAgID4+Pj4+IEZyb206IGJmY3BiaXMg PGJmY3BiaXMtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIEFsZXhleSBNZWxuaWtvdg0K ICAgICAgICA+Pj4+PiA8YWFtZWxuaWtvdkBmYXN0bWFpbC5mbT4NCiAgICAgICAgPj4+Pj4gRGF0 ZTogU2F0dXJkYXksIDE0IEphbnVhcnkgMjAxNyBhdCAzOjQ5IEFNDQogICAgICAgID4+Pj4+IFRv OiBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4NCiAgICAgICAgPj4+Pj4gQ2M6ICJkcmFmdC1pZXRm LWJmY3BiaXMtc2RwLXdzLXVyaUBpZXRmLm9yZyINCiAgICAgICAgPj4+Pj4gPGRyYWZ0LWlldGYt YmZjcGJpcy1zZHAtd3MtdXJpQGlldGYub3JnPiwgImJmY3BiaXNAaWV0Zi5vcmciDQogICAgICAg ID4+Pj4+IDxiZmNwYmlzQGlldGYub3JnPiwgIkNoYXJsZXMgRWNrZWwgKGVja2VsY3UpIiA8ZWNr ZWxjdUBjaXNjby5jb20+LA0KICAgICAgICA+Pj4+PiAiYmZjcGJpcy1jaGFpcnNAaWV0Zi5vcmci IDxiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZz4NCiAgICAgICAgPj4+Pj4gU3ViamVjdDogW2JmY3Bi aXNdIEFsZXhleSBNZWxuaWtvdidzIERpc2N1c3Mgb24NCiAgICAgICAgPj4+Pj4gZHJhZnQtaWV0 Zi1iZmNwYmlzLXNkcC13cy11cmktMDg6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQogICAg ICAgID4+Pj4+IA0KICAgICAgICA+Pj4+PiAgQWxleGV5IE1lbG5pa292IGhhcyBlbnRlcmVkIHRo ZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KICAgICAgICA+Pj4+PiAgZHJhZnQtaWV0 Zi1iZmNwYmlzLXNkcC13cy11cmktMDg6IERpc2N1c3MNCiAgICAgICAgPj4+Pj4gDQogICAgICAg ID4+Pj4gDQogICAgICAgID4+Pj4+ICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICAgICAgID4+Pj4+ICBESVND VVNTOg0KICAgICAgICA+Pj4+PiAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICA+Pj4+PiANCiAgICAg ICAgPj4+Pj4gIFRoaXMgaXMgZ2VuZXJhbGx5IGEgd2VsbCB3cml0dGVuIGRvY3VtZW50LCBidXQg SSBoYXZlIGEgc21hbGwgbGlzdCBvZg0KICAgICAgICA+Pj4+PiAgaXNzdWVzIHRoYXQgSSB3b3Vs ZCBsaWtlIHRvIGRpc2N1c3MgYmVmb3JlIHJlY29tbWVuZGluZyBpdHMgYXBwcm92YWw6DQogICAg ICAgID4+Pj4+IA0KICAgICAgICA+Pj4+PiAgMSkgQXJlIGE9d3MtdXJpIGFuZCBhPXdzcy11cmkg bXV0dWFsbHkgZXhjbHVzaXZlPyAoU2VjdGlvbiA0LjMgaXMgYQ0KICAgICAgICA+Pj4+PiAgZ29v ZA0KICAgICAgICA+Pj4+PiAgcGxhY2UgdG8gbWVudGlvbiB3aGF0IHRvIGRvIGlmIGJvdGggYXJl IHNwZWNpZmllZCkuDQogICAgICAgID4+Pj4+IA0KICAgICAgICA+Pj4+PiA8UmFtPiBZZXMga2lu ZCBvZi4gSW4gYSBnaXZlbiBtZWRpYSBsaW5lIChtPSBsaW5lKSB3ZSB3aWxsIGVpdGhlciBoYXZl DQogICAgICAgID4+Pj4+IGE9d3MtdXJpIG9yIGE9d3NzLXVyaS4gVGhhdCBzYWlkIGEgcmVzcG9u c2UgZnJvbSBhIEJGQ1Agc2VydmVyIHVzaW5nDQogICAgICAgID4+Pj4+IHdlYlNvY2tldCBhcyBh IHRyYW5zcG9ydCBjYW4NCiAgICAgICAgPj4+Pj4gaGF2ZSB0d28gbWVkaWEgbGluZXMgb25lIHdp dGggd3MgYW5kIG90aGVyIHdpdGggd3NzLiBTb21ldGhpbmcgbGlrZToNCiAgICAgICAgPj4+Pj4g DQogICAgICAgID4+Pj4+IEFuc3dlciAoc2VydmVyKToNCiAgICAgICAgPj4+Pj4gbT1hcHBsaWNh dGlvbiA1MDAwMCBUQ1AvV1NTL0JGQ1AgKg0KICAgICAgICA+Pj4+PiBhPXNldHVwOnBhc3NpdmUN CiAgICAgICAgPj4+Pj4gYT1jb25uZWN0aW9uOm5ldw0KICAgICAgICA+Pj4+PiBhPXdzcy11cmk6 d3NzOi8vYmZjcC13cy5leGFtcGxlLmNvbT90b2tlbj0zMTcwNDQ5MzEyDQogICAgICAgID4+Pj4+ IG09YXBwbGljYXRpb24gNTAwMDAgVENQL1dTL0JGQ1AgKg0KICAgICAgICA+Pj4+PiBhPXNldHVw OnBhc3NpdmUNCiAgICAgICAgPj4+Pj4gYT1jb25uZWN0aW9uOm5ldw0KICAgICAgICA+Pj4+PiBh PXdzLXVyaTp3czovL2JmY3Atd3MuZXhhbXBsZS5jb20/dG9rZW49MzE3MDQ0OTMxMg0KICAgICAg ICA+Pj4+IA0KICAgICAgICA+Pj4+ICBbQWxleGV5XTogVGhpcyBpcyBleGFjdGx5IG15IHByb2Js ZW0sIHlvdSBzaG91bGQgc3BlY2lmeSBob3cgYQ0KICAgICAgICA+Pj4+ICByZWNpcGllbnQNCiAg ICAgICAgPj4+PiAgc2hvdWxkIGhhbmRsZSB5b3VyIGV4YW1wbGUgYWJvdmUuIElmIHlvdSBvbmx5 IGhhdmUgMSBhdHRyaWJ1dGUsIHRoZQ0KICAgICAgICA+Pj4+ICBwcm9ibGVtIGdvZXMgYXdheSBl bnRpcmVseS4NCiAgICAgICAgPj4+PiANCiAgICAgICAgPj4+PiA8UmFtPiBpbiB0aGUgYWJvdmUg Y2FzZSwgdGhleSBhcmUgc3RpbGwgdHdvIGRpZmZlcmVudCBtPSBsaW5lcy4gVGhlDQogICAgICAg ID4+Pj4gcmVjZWl2ZXIgKGFmdGVyIG9mZmVyL2Fuc3dlciBpcyBkb25lKSBvZiB0aGlzIFNEUCBj b25uZWN0cyB0byB0aGUgVVJJDQogICAgICAgID4+Pj4gbWVudGlvbmVkIGluIHRoYXQgbT0gbGlu ZS4gDQogICAgICAgID4+Pj4gTm90ZSBJIGp1c3QgcmUtdXNlZCB0aGUgc2FtZSBVUkwvcG9ydCBp biB0aGUgZXhhbXBsZSBhYm92ZS4gSWYgdGhlcmUgYXJlDQogICAgICAgID4+Pj4gbXVsdGlwbGUg bT1hcHBsaWNhdGlvbiBtZWRpYSBsaW5lcyAodGhleSB3aWxsIGJlIGZvciBkaWZmZXJlbnQNCiAg ICAgICAgPj4+PiBhcHBsaWNhdGlvbnMpIGJlaW5nIG5lZ290aWF0ZWQgaW4gU0RQLCBvbmUgYXBw bGljYXRpb24gbWF5IHVzZSBzZWN1cmUgV1MNCiAgICAgICAgPj4+PiBhbmQgb3RoZXIgYXBwbGlj YXRpb24gbWF5IHVzZSBub24tc2VjdXJlIFdTLiBUaGUgY2xpZW50IGFmdGVyIGl0IHJlY2VpdmVz DQogICAgICAgID4+Pj4gdGhlIGFuc3dlciBTRFAgd2lsbCBqdXN0IHNldHVwIHRoZSBjb25uZWN0 aW9uIHRvIHRoZSBVUkkgc3BlY2lmaWVkIGluIHRoZQ0KICAgICAgICA+Pj4+IGF0dHJpYnV0ZS4g IA0KICAgICAgICA+Pj4gDQogICAgICAgID4+PiAgU29ycnksIEkgd2FzIHRoaW5raW5nIGFib3V0 IGRpZmZlcmVudCBleGFtcGxlOg0KICAgICAgICA+Pj4gDQogICAgICAgID4+PiAgbT1hcHBsaWNh dGlvbiA1MDAwMCBUQ1AvV1NTL0JGQ1AgKg0KICAgICAgICA+Pj4gICAgIGE9c2V0dXA6cGFzc2l2 ZQ0KICAgICAgICA+Pj4gICAgIGE9Y29ubmVjdGlvbjpuZXcNCiAgICAgICAgPj4+ICAgICBhPXdz cy11cmk6d3NzOi8vYmZjcC13cy5leGFtcGxlLmNvbT90b2tlbj0zMTcwNDQ5MzEyDQogICAgICAg ID4+PiAgICAgYT13cy11cmk6d3M6Ly9iZmNwLXdzLmV4YW1wbGUuY29tP3Rva2VuPTMxNzA0NDkz MTINCiAgICAgICAgPj4+IA0KICAgICAgICA+Pj4gIFlvdSBoYXZlIDIgY29uZmxpY3RpbmcgVVJJ cyBmb3IgdGhlIHNhbWUgbT0gbGluZS4gSXMgdGhpcyBwb3NzaWJsZT8NCiAgICAgICAgPj4+IA0K ICAgICAgICA+Pj4gPFJhbT4gTm8gdGhpcyBpcyBub3QgcG9zc2libGUuIElmIHRoZSB0cmFuc3Bv cnQgaXMgVENQL1dTUy9CRkNQIHdlIHNob3VsZCBoYXZlIG9ubHkgYT13c3MtdXJpLiBJZiB0cmFu c3BvcnQgaXMgVENQL1dTL0JGQ1Agd2Ugc2hvdWxkIGhhdmUgb25seSBhPXdzLXVyaS4NCiAgICAg ICAgPj4+IA0KICAgICAgICA+Pj4gUmVnYXJkcywNCiAgICAgICAgPj4+IFJhbQ0KICAgICAgICA+ Pj4gDQogICAgICAgID4+Pj4gSSBkb27igJl0IHNlZSBhbnkgcHJvYmxlbSBpbiBoZXJlLiAgDQog ICAgICAgID4+Pj4gDQogICAgICAgID4+Pj4gUmVnYXJkcywNCiAgICAgICAgPj4+PiBSYW0NCiAg ICAgICAgPj4+PiANCiAgICAgICAgPj4+Pj4gIFdoeSBub3QgYSBzaW5nbGUgYXR0cmlidXRlLCBj b25zaWRlcmluZyB0aGF0IGJvdGggd3M6IGFuZCB3c3M6IFVSSXMNCiAgICAgICAgPj4+Pj4gIGFy ZQ0KICAgICAgICA+Pj4+PiAgcG9zc2libGU/DQogICAgICAgID4+Pj4+IA0KICAgICAgICA+Pj4+ PiA8UmFtPiBJIHdvdWxkIHN0aWxsIHByZWZlciB0d28gYXR0cmlidXRlcy4gV2UganVzdCBmb2xs b3dlZCB0aGUNCiAgICAgICAgPj4+Pj4gY29udmVudGlvbiAvIGFwcHJvYWNoIHRoYXQgd2FzIHVz ZWQgaW4gW1JGQzY0NTVdLiAgDQogICAgICAgID4+Pj4gDQogICAgICAgID4+Pj4gDQogICAgICAg ID4+PiANCiAgICAgICAgPj4+IA0KICAgICAgICA+PiANCiAgICAgICAgPj4gDQogICAgICAgID4+ IA0KICAgICAgICA+IA0KICAgICAgICA+IA0KICAgICAgICA+IA0KICAgICAgICA+IA0KICAgICAg ICA+IA0KICAgICAgICA+IDxEaWZmXyBkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wOC50 eHQgLSBkcmFmdC1pZXRmLWJmY3BiaXMtc2RwLXdzLXVyaS0wOS50eHQuaHRtbD4NCiAgICAgICAg PiA8ZHJhZnQtaWV0Zi1iZmNwYmlzLXNkcC13cy11cmktMDkudHh0Pg0KICAgICAgICANCiAgICAg ICAgDQogICAgDQogICAgDQoNCg== From nobody Mon Feb 6 04:43:52 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F632129D4E; Mon, 6 Feb 2017 04:43:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fastmail.fm header.b=Z1AhjOMM; dkim=pass (1024-bit key) header.d=messagingengine.com header.b=RibjnS5U Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hargzJ-9xdaB; Mon, 6 Feb 2017 04:43:48 -0800 (PST) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7213F129D4C; Mon, 6 Feb 2017 04:43:48 -0800 (PST) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id DB45A20804; Mon, 6 Feb 2017 07:43:47 -0500 (EST) Received: from web5 ([10.202.2.215]) by compute7.internal (MEProxy); Mon, 06 Feb 2017 07:43:47 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.fm; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=mesmtp; bh=BDWHXswfWU486TUr80N5n6ekB4 c=; b=Z1AhjOMM5ilRdXGjWuy/yu1f203bqP+1F0DFoXo3JHo57bsUhktwVIUvJw Pb9/Cw42kax430pW/+1r+s5tuqz2/eIdZB6CqLbb42L5yOsTvJyHW4ws+wosoedV QWUWzQmXLwb/xcHNWbmegN+DVBycjQS5JUKMlPODJZimYkDvs= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=smtpout; bh=BD WHXswfWU486TUr80N5n6ekB4c=; b=RibjnS5U8HYxQDBFRZeX5LpvtzPQXdCU7q /Xfq0RaCBwy4C8nBTA6FC30Kw0xcAw5r7CLJOVlUfHx68EHH0L1hqAZrbIU8+pCm llp3ZrKsB1O4R5lVbu0uFpZikoKMAfNaJgwWba7eMJ8ywI011ba8b/M6fp/3NRoX HKmt4rrPY= X-ME-Sender: Received: by mailuser.nyi.internal (Postfix, from userid 99) id B9A276ABF9; Mon, 6 Feb 2017 07:43:47 -0500 (EST) Message-Id: <1486385027.2365794.871717008.171E8496@webmail.messagingengine.com> From: Alexey Melnikov To: "Ram Mohan R (rmohanr)" , Alissa Cooper , The IESG MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" X-Mailer: MessagingEngine.com Webmail Interface - ajax-4a450d19 References: <148434596441.9752.6696571117558965561.idtracker@ietfa.amsl.com> <1484576862.2842665.849203352.4F87F4EA@webmail.messagingengine.com> <30CC3092-0ED4-4983-8203-8394FD06D0A9@cisco.com> <1484578527.2848348.849241320.7317C68A@webmail.messagingengine.com> <3E8813A2-FC3D-433F-B51B-41380ABD3D95@cooperw.in> <60D33439-D03C-4E3D-A293-9DE608AC5DB4@cisco.com> <6E698BCA-2F14-4660-B053-BEDA42860B86@cooperw.in> <67E82966-54E2-403B-9684-2F8580B75A9E@cisco.com> <3B129AC4-6AC6-463E-B8F6-C6CD261D795A@cisco.com> <8577E5D1-1E3F-4B06-BDF2-832D8C16E4C5@cisco.com> Date: Mon, 06 Feb 2017 12:43:47 +0000 In-Reply-To: <8577E5D1-1E3F-4B06-BDF2-832D8C16E4C5@cisco.com> Archived-At: Cc: draft-ietf-bfcpbis-sdp-ws-uri@ietf.org, Ben Campbell , bfcpbis@ietf.org, "Charles Eckel \(eckelcu\)" , bfcpbis-chairs@ietf.org Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Feb 2017 12:43:50 -0000 On Mon, Feb 6, 2017, at 12:32 PM, Ram Mohan R (rmohanr) wrote: > I have published a new revision addressing all the IESG feedback received > so far. >=20 > https://tools.ietf.org/html/draft-ietf-bfcpbis-sdp-ws-uri-09 > Diff is here - > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-bfcpbis-sdp-ws-uri-09 I cleared my DISCUSS, thank you! > Regards, > Ram >=20 > -----Original Message----- > From: "Ram Mohan R (rmohanr)" > Date: Sunday, 5 February 2017 at 6:35 PM > To: Alexey Melnikov > Cc: Alissa Cooper , Ben Campbell , > The IESG , "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" > , "bfcpbis@ietf.org" > , "Charles Eckel (eckelcu)" , > "bfcpbis-chairs@ietf.org" > Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on > draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) >=20 > Thanks Alexey, > I will publish the revision after fixing the nits you pointed below >=20=20=20=20=20 > Ram >=20=20=20=20=20 > -----Original Message----- > From: Alexey Melnikov > Date: Saturday, 4 February 2017 at 10:51 PM > To: "Ram Mohan R (rmohanr)" > Cc: Alissa Cooper , Ben Campbell > , The IESG , > "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" > , "bfcpbis@ietf.org" > , "Charles Eckel (eckelcu)" , > "bfcpbis-chairs@ietf.org" > Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on > draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) >=20=20=20=20=20 > Hi Ram, >=20=20=20=20=20=20=20=20=20 > > On 30 Jan 2017, at 05:30, Ram Mohan R (rmohanr) wrote: > >=20 > > Hi Alexey/all, > >=20 > > Please find the diffs with the changes to use single attribute.= This diff also has other comments from Ben, Kathleen incorporated. >=20=20=20=20=20=20=20=20=20 > This looks much better, thank you! >=20=20=20=20=20=20=20=20=20 > You have introduced a typo in one place (search for > "wwebsocket"). >=20=20=20=20=20=20=20=20=20 > Best Regards, > Alexey >=20=20=20=20=20=20=20=20=20 > > Regards, > > Ram > >=20 > > -----Original Message----- > > From: "Ram Mohan R (rmohanr)" > > Date: Thursday, 19 January 2017 at 9:30 AM > > To: Alissa Cooper > > Cc: Alexey Melnikov , The IESG , "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles Eckel (eck= elcu)" , "bfcpbis-chairs@ietf.org" > > Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf-= bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) > >=20 > > Hi Alissa, > >=20 > > I don=E2=80=99t have a strong opinion on this. Either way (h= aving a single attribute or two different SDP attributes) would work. > >=20 > > Implementations can still retrieve the value (URI) of that a= ttribute and based on the proto line (TCP/WS/BFCP or TCP/WSS/BFCP) match th= e URI against ws or wss schema defined in RFC6455. I would expect such a v= alidation to happen across layers. > > The SDP stack parser to look at the proto line transport val= ue (TCP/WS/BFCP or TCP/WSS/BFCP) and check for presence of a=3Dwebsocket-ur= i attribute. The value of this attribute (ws or wss schema) can be passed *= as is* to the application (in this case BFCP client application) which will= validate it against the schema in RFC 6455. > >=20 > > I am OK to incorporate this comment to have a single SDP att= ribute.=20 > >=20 > > Regards, > > Ram > >=20 > > -----Original Message----- > > From: Alissa Cooper > > Date: Thursday, 19 January 2017 at 1:58 AM > > To: "Ram Mohan R (rmohanr)" > > Cc: Alexey Melnikov , The IESG , "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles Eckel (= eckelcu)" , "bfcpbis-chairs@ietf.org" > > Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ie= tf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) > > Resent-From: > > Resent-To: , > > Resent-Date: Thursday, 19 January 2017 at 1:58 AM > >=20 > > Hi Ram, > >=20 > > I had some further conversation with Alexey on the side = and wanted to come back to a question he posed: is there a reason why a=3Dw= s-uri and a=3Dwss-uri both need to be specified? Why can=E2=80=99t a single= label be specified, say a=3Dwebsocket-uri, and then have normative languag= e requiring the scheme in the URI itself to match what=E2=80=99s in the ass= ociated m-line (ws:// for TCP/WS/BFCP and wss:// for TCP/WSS/BFCP)? Won=E2= =80=99t it be more efficient for implementations to grab the URI itself any= way and check that the scheme matches the m-line? > >=20 > > Thanks, > > Alissa > >=20 > >> On Jan 17, 2017, at 9:40 AM, Ram Mohan R (rmohanr) wrote: > >>=20 > >> Alissa, > >>=20 > >> I am fine with the proposed text. > >>=20 > >> Thanks, > >> Ram > >>=20 > >> -----Original Message----- > >> From: Alissa Cooper > >> Date: Tuesday, 17 January 2017 at 8:07 PM > >> To: Alexey Melnikov > >> Cc: The IESG , "draft-ietf-bfcpbis-sdp-ws-uri@i= etf.org" , "bfcpbis@ietf.org" , "Charles Eckel (eckelcu)" , "bfcpbis-chai= rs@ietf.org" , "Ram Mohan R (rmohanr)" > >> Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-ietf= -bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) > >>=20 > >> Alexey, would the following changes clarify things? > >>=20 > >> Section 4.1 > >> OLD > >> the server side, which could be either > >> the offerer or answerer, MUST add an "a=3Dws-uri" or "a= =3Dwss-uri" > >> attribute in the media section > >> NEW > >> the server side, which could be either > >> the offerer or answerer, MUST add an "a=3Dws-uri" or "a= =3Dwss-uri=E2=80=9D > >> attribute (but not both) in the media section > >>=20 > >> Section 4.3 > >> OLD > >> If the answers assigns SDP "setup" attribute with "passive",= then it > >> MUST have a URI in either "a=3Dws-uri" or "a=3Dwss-uri" a= ttribute > >> depending on whether the application uses WebSocket or > >> secureWebSocket. > >> NEW > >> If the answers assigns SDP "setup" attribute with "passive",= then it > >> MUST have a URI in either "a=3Dws-uri" or "a=3Dwss-uri" a= ttribute > >> (but not both) in the media section, depending on whether= the application uses WebSocket or > >> secureWebSocket. > >>=20 > >> Ram, would you be okay with those clarifications? > >>=20 > >> Alissa > >>=20 > >>=20 > >>> On Jan 16, 2017, at 10:09 AM, Ram Mohan R (rmohanr) wrote: > >>>=20 > >>> Hi Alexey, > >>>=20 > >>> -----Original Message----- > >>> From: Alexey Melnikov > >>> Date: Monday, 16 January 2017 at 8:25 PM > >>> To: "Ram Mohan R (rmohanr)" , The IESG > >>> Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" , "bfcpbis@ietf.org" , "Charles E= ckel (eckelcu)" , "bfcpbis-chairs@ietf.org" > >>> Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on draft-iet= f-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) > >>>=20 > >>> Hi Ram, > >>>=20 > >>>> On Mon, Jan 16, 2017, at 02:49 PM, Ram Mohan R (rmohanr) wr= ote: > >>>> Hi Alexey, > >>>>=20 > >>>> Please see inline > >>>>=20 > >>>> -----Original Message----- > >>>> From: Alexey Melnikov > >>>> Date: Monday, 16 January 2017 at 7:57 PM > >>>> To: "Ram Mohan R (rmohanr)" , The IESG > >>>> Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" > >>>> , "bfcpbis@ietf.org" > >>>> , "Charles Eckel (eckelcu)" , > >>>> "bfcpbis-chairs@ietf.org" > >>>> Subject: Re: [bfcpbis] Alexey Melnikov's Discuss on > >>>> draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) > >>>>=20 > >>>> Hi Ram, > >>>>=20 > >>>>> On Mon, Jan 16, 2017, at 06:09 AM, Ram Mohan R (rmohanr) w= rote: > >>>>> Hi Alexey, > >>>>>=20 > >>>>> Thanks for your feedback. Please see inline > >>>>>=20 > >>>>> -----Original Message----- > >>>>> From: bfcpbis on behalf of Alexe= y Melnikov > >>>>> > >>>>> Date: Saturday, 14 January 2017 at 3:49 AM > >>>>> To: The IESG > >>>>> Cc: "draft-ietf-bfcpbis-sdp-ws-uri@ietf.org" > >>>>> , "bfcpbis@ietf.org" > >>>>> , "Charles Eckel (eckelcu)" , > >>>>> "bfcpbis-chairs@ietf.org" > >>>>> Subject: [bfcpbis] Alexey Melnikov's Discuss on > >>>>> draft-ietf-bfcpbis-sdp-ws-uri-08: (with DISCUSS and COMMENT) > >>>>>=20 > >>>>> Alexey Melnikov has entered the following ballot position = for > >>>>> draft-ietf-bfcpbis-sdp-ws-uri-08: Discuss > >>>>>=20 > >>>>=20 > >>>>> ----------------------------------------------------------= ------------ > >>>>> DISCUSS: > >>>>> ----------------------------------------------------------= ------------ > >>>>>=20 > >>>>> This is generally a well written document, but I have a sm= all list of > >>>>> issues that I would like to discuss before recommending it= s approval: > >>>>>=20 > >>>>> 1) Are a=3Dws-uri and a=3Dwss-uri mutually exclusive? (Sec= tion 4.3 is a > >>>>> good > >>>>> place to mention what to do if both are specified). > >>>>>=20 > >>>>> Yes kind of. In a given media line (m=3D line) we wil= l either have > >>>>> a=3Dws-uri or a=3Dwss-uri. That said a response from a BFCP= server using > >>>>> webSocket as a transport can > >>>>> have two media lines one with ws and other with wss. Someth= ing like: > >>>>>=20 > >>>>> Answer (server): > >>>>> m=3Dapplication 50000 TCP/WSS/BFCP * > >>>>> a=3Dsetup:passive > >>>>> a=3Dconnection:new > >>>>> a=3Dwss-uri:wss://bfcp-ws.example.com?token=3D3170449312 > >>>>> m=3Dapplication 50000 TCP/WS/BFCP * > >>>>> a=3Dsetup:passive > >>>>> a=3Dconnection:new > >>>>> a=3Dws-uri:ws://bfcp-ws.example.com?token=3D3170449312 > >>>>=20 > >>>> [Alexey]: This is exactly my problem, you should specify ho= w a > >>>> recipient > >>>> should handle your example above. If you only have 1 attrib= ute, the > >>>> problem goes away entirely. > >>>>=20 > >>>> in the above case, they are still two different m=3D l= ines. The > >>>> receiver (after offer/answer is done) of this SDP connects t= o the URI > >>>> mentioned in that m=3D line.=20 > >>>> Note I just re-used the same URL/port in the example above. = If there are > >>>> multiple m=3Dapplication media lines (they will be for diffe= rent > >>>> applications) being negotiated in SDP, one application may u= se secure WS > >>>> and other application may use non-secure WS. The client afte= r it receives > >>>> the answer SDP will just setup the connection to the URI spe= cified in the > >>>> attribute.=20=20 > >>>=20 > >>> Sorry, I was thinking about different example: > >>>=20 > >>> m=3Dapplication 50000 TCP/WSS/BFCP * > >>> a=3Dsetup:passive > >>> a=3Dconnection:new > >>> a=3Dwss-uri:wss://bfcp-ws.example.com?token=3D3170449312 > >>> a=3Dws-uri:ws://bfcp-ws.example.com?token=3D3170449312 > >>>=20 > >>> You have 2 conflicting URIs for the same m=3D line. Is this = possible? > >>>=20 > >>> No this is not possible. If the transport is TCP/WSS/BF= CP we should have only a=3Dwss-uri. If transport is TCP/WS/BFCP we should h= ave only a=3Dws-uri. > >>>=20 > >>> Regards, > >>> Ram > >>>=20 > >>>> I don=E2=80=99t see any problem in here.=20=20 > >>>>=20 > >>>> Regards, > >>>> Ram > >>>>=20 > >>>>> Why not a single attribute, considering that both ws: and = wss: URIs > >>>>> are > >>>>> possible? > >>>>>=20 > >>>>> I would still prefer two attributes. We just followed= the > >>>>> convention / approach that was used in [RFC6455].=20=20 > >>>>=20 > >>>>=20 > >>>=20 > >>>=20 > >>=20 > >>=20 > >>=20 > >=20 > >=20 > >=20 > >=20 > >=20 > > > > >=20=20=20=20=20=20=20=20=20 >=20=20=20=20=20=20=20=20=20 >=20=20=20=20=20 >=20=20=20=20=20 >=20 From nobody Tue Feb 7 08:20:42 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42DEB129D3B; Tue, 7 Feb 2017 08:20:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ju1LBPn7V8Jc; Tue, 7 Feb 2017 08:20:33 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16F3D129D2E; Tue, 7 Feb 2017 08:20:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11680; q=dns/txt; s=iport; t=1486484430; x=1487694030; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=DSlQT0oUCWNuB64x9CIPf+5RWF4T/55qpdQA+mEIUaU=; b=JMtEcxj4qbuLOBzSgmhBgdZEPS/bBUOhbPr9CAL1he6WvESibNBDUE1/ c4Ai/5qB6ocySUD1ltt/tekB13PS3lROvav3F/P9lebjzYojjK08JvHeV rGBFRACGOVSpXvVe9iNDIKa13QeTIt1xaybufN/w7h7SG9fo4ljxHm0Fa A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DsAQBR85lY/4sNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1FhgQkHg1GKCJFwH4gMixuCD4IMKoV4AhqCOD8YAQIBAQEBAQE?= =?us-ascii?q?BYiiEaQEBAQQjETkMDAQCAQgRAwECAwISFAICAh8RFQgIAgQBDQWJWwMVDq9zg?= =?us-ascii?q?iWHRQ2DcwEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQuHRgiCYoJRgVUKAQYBBh0?= =?us-ascii?q?xAg4MgjIugjEFiQAKh32KLDgBhmmDH4NshBmBe4UXiXGKMIheAR84dghPFU0Bh?= =?us-ascii?q?GiBSHUBhjcBDheBCoEMAQEB?= X-IronPort-AV: E=Sophos;i="5.33,346,1477958400"; d="scan'208";a="205778111" Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 07 Feb 2017 16:20:29 +0000 Received: from XCH-RTP-016.cisco.com (xch-rtp-016.cisco.com [64.101.220.156]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id v17GKSC3007208 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 7 Feb 2017 16:20:28 GMT Received: from xch-rtp-017.cisco.com (64.101.220.157) by XCH-RTP-016.cisco.com (64.101.220.156) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 7 Feb 2017 11:20:27 -0500 Received: from xch-rtp-017.cisco.com ([64.101.220.157]) by XCH-RTP-017.cisco.com ([64.101.220.157]) with mapi id 15.00.1210.000; Tue, 7 Feb 2017 11:20:27 -0500 From: "Ram Mohan R (rmohanr)" To: Ben Campbell , The IESG Thread-Topic: Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) Thread-Index: AQHSceRTe5LJyE53MkeeyUi4LMDL1KFeiFwA Date: Tue, 7 Feb 2017 16:20:27 +0000 Message-ID: References: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> In-Reply-To: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.93.82] Content-Type: text/plain; charset="utf-8" Content-ID: <4992EED157B50C41B6D793A513458638@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , "Charles Eckel \(eckelcu\)" , "bfcpbis-chairs@ietf.org" Subject: Re: [bfcpbis] Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Feb 2017 16:20:35 -0000 SGkgQmVuLA0KDQpTb3JyeSBmb3IgZGVsYXkuIFBsZWFzZSBzZWUgaW5saW5lIDxSYW0+IGZvciBt eSByZXNwb25zZXMNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbiBDYW1w YmVsbCA8YmVuQG5vc3RydW0uY29tPg0KRGF0ZTogVGh1cnNkYXksIDE5IEphbnVhcnkgMjAxNyBh dCA1OjEwIEFNDQpUbzogVGhlIElFU0cgPGllc2dAaWV0Zi5vcmc+DQpDYzogImRyYWZ0LWlldGYt YmZjcGJpcy1iZmNwLXdlYnNvY2tldEBpZXRmLm9yZyIgPGRyYWZ0LWlldGYtYmZjcGJpcy1iZmNw LXdlYnNvY2tldEBpZXRmLm9yZz4sICJDaGFybGVzIEVja2VsIChlY2tlbGN1KSIgPGVja2VsY3VA Y2lzY28uY29tPiwgImJmY3BiaXMtY2hhaXJzQGlldGYub3JnIiA8YmZjcGJpcy1jaGFpcnNAaWV0 Zi5vcmc+LCAiQ2hhcmxlcyBFY2tlbCAoZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJi ZmNwYmlzQGlldGYub3JnIiA8YmZjcGJpc0BpZXRmLm9yZz4NClN1YmplY3Q6IEJlbiBDYW1wYmVs bCdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmNwYmlzLWJmY3Atd2Vic29ja2V0LTE0OiAod2l0 aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2VzQGlldGYu b3JnPg0KUmVzZW50LVRvOiA8YW50b24ucm9tYW5AcXVvYmlzLmNvbT4sIDxzdGVwaGFuZS5jYXpl YXV4QG9yYW5nZS5jb20+LCA8Z3NhbGd1ZWlAY2lzY28uY29tPiwgPHNlcmdpby5nYXJjaWEubXVy aWxsb0BnbWFpbC5jb20+LCA8cm1vaGFuckBjaXNjby5jb20+LCA8dmljdG9yLnBhc2N1YWwuYXZp bGFAb3JhY2xlLmNvbT4NClJlc2VudC1EYXRlOiBUaHVyc2RheSwgMTkgSmFudWFyeSAyMDE3IGF0 IDU6MTAgQU0NCg0KICAgIEJlbiBDYW1wYmVsbCBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJh bGxvdCBwb3NpdGlvbiBmb3INCiAgICBkcmFmdC1pZXRmLWJmY3BiaXMtYmZjcC13ZWJzb2NrZXQt MTQ6IERpc2N1c3MNCiAgICANCiAgICBXaGVuIHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBz dWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwNCiAgICBlbWFpbCBhZGRyZXNzZXMg aW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcw0K ICAgIGludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KICAgIA0KICAgIA0KICAgIFBs ZWFzZSByZWZlciB0byBodHRwczovL3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNz LWNyaXRlcmlhLmh0bWwNCiAgICBmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJRVNHIERJU0NV U1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLg0KICAgIA0KICAgIA0KICAgIFRoZSBkb2N1bWVudCwg YWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToNCiAg ICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWJmY3BiaXMtYmZj cC13ZWJzb2NrZXQvDQogICAgDQogICAgDQogICAgDQogICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgIERJ U0NVU1M6DQogICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgIA0KICAgIEkgcGxhbiB0byBiYWxsb3QgInll cyIgZm9yIHRoaXMgZG9jdW1lbnQsIGJ1dCBJIGhhdmUgc29tZSBjb25jZXJucyBhYm91dA0KICAg IHRoZSBzZWN1cml0eSBwcm9wZXJ0aWVzIHRoYXQgSSB0aGluayBuZWVkIHRvIGJlIHJlc29sdmVk IGZpcnN0LiBJIGhhdmUNCiAgICBmb2xsb3dlZCB0aGUgZGlzY3Vzc2lvbiByZXN1bHRpbmcgZnJv bSBSb2JlcnQncyBHZW4tQVJUIHJldmlldyAoYW5kIHdpbGwNCiAgICBoYXZlIGNvbW1lbnRzIGFi b3V0IHRoYXQgaW4gdGhlICJDT01NRU5UUyBzZWN0aW9uIiwgYnV0IEkgdGhpbmsgSSBzZWUgYW4N CiAgICBhZGRpdGlvbmFsIGlzc3VlIHRoYXQgaGFzbid0IGJlZW4gY292ZXJlZCBpbiB0aGF0IGRp c2N1c3Npb24uDQogICAgDQogICAgZHJhZnQtaWV0Zi1iZmNwYmlzLXJmYzQ1ODJiaXMgKGN1cnJl bnRseSBpbiB0aGUgUkZDIEVkaXRvcnMgcXVldWUpDQogICAgZGVmaW5lcyBzb21lIHNpdHVhdGlv bnMgd2hlcmUgVExTIGFuZCBjbGllbnQgYXV0aGVudGljYXRpb24gYXJlDQogICAgbm9ybWF0aXZl bHkgcmVxdWlyZWQuIFNwZWNpZmljYWxseSwgc2VjdGlvbiA5IG9mIHRoYXQgZHJhZnQgc2F5cyB0 aGF0LCBpZg0KICAgIHRoZSBzaWduYWxpbmcgY2hhbm5lbCBpcyBhdXRoZW50aWNhdGVkIGFuZCBo YXMgY29uZmlkZW50aWFsaXR5IGFuZA0KICAgIGludGVncml0eSBwcm90ZWN0aW9uLCB0aGUgQkZD UCBjbGllbnQgTVVTVCBiZSBhdXRoZW50aWNhdGVkLiBTZWN0aW9uIDE0DQogICAgYWRkaXRpb25h bGx5IHNheXMgdGhhdCB1bmRlciB0aG9zZSBjaXJjdW1zdGFuY2VzLCBCRkNQIGlzIFJFUVVJUkVE IHRvIHVzZQ0KICAgIHRoZSBtYW5kYXRlZCBjcnlwdG9ncmFwaGljIGFsZ29yaXRobS4gQnV0IGJm Y3Atd2Vic29ja2V0IG9ubHkgc2F5cyB0aGF0DQogICAgV1NTIGFuZCBjbGllbnQgYXV0aGVudGlj YXRpb24gYXJlIFJFQ09NTUVOREVELg0KICAgIA0KPFJhbT4gQWdyZWUuIFRoYXTigJlzIGEgcmVh c29uYWJsZSBhc2suDQoNCiAgICBJIHRoaW5rIHRoaXMgY291bGQgYmUgZml4ZWQgYnkgcmVxdWly aW5nIFdTUywgYW5kIHRoZSB3ZWItYmFzZWQgY2xpZW50DQogICAgYXV0aGVudGljYXRpb24gdGVj aG5pcXVlcyBkZXNjcmliZWQgaW4gdGhpcyBkcmFmdCB3aGVuZXZlciB0aGUgc2lnbmFsaW5nDQog ICAgcHJvdG9jb2wgaXMgc2VjdXJlZC4gVGhlIHNpbXBsZXN0IHdheSB0byBkZXNjcmliZSB0aGF0 IG1pZ2h0IGJlIHRvIHNheQ0KICAgIHRoYXQgQkZDUC13ZWJzb2NrZXQgbXVzdCB1c2UgYXQgbGVh c3QgYXMgc3Ryb25nIHByb3RlY3Rpb25zIGFzIHRoZQ0KICAgIHNpZ25hbGluZyBjaGFubmVsLg0K ICA8UmFtPiBJIHdpbGwgYWRkIHRoZSBmb2xsb3dpbmcgbGluZSB0byB0aGUgc2VjdXJpdHkgY29u c2lkZXJhdGlvbiBzZWN0aW9uDQpORVc6DQrigJxTZWN1cmUgV2ViU29ja2V0IChXU1MpIE1VU1Qg YmUgdXNlZCBmb3IgQkNQIHdoZW4gdGhlIHNpZ25hbGxpbmcgY2hhbm5lbCB1c2VkIHRvIGV4Y2hh bmdlIHRoZSBCRkNQIHBhcmFtZXRlcnMgaXMgc2VjdXJlZC4g4oCcDQoNCklzIHRoaXMgb2sgPw0K ICAgIA0KICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICBDT01NRU5UOg0KICAgIC0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N CiAgICANCiAgICBJIGFwcHJlY2lhdGUgdGhlIGF1dGhvcidzIGVmZm9ydHMgaW4gcmVzb2x2aW5n IHRoZSBzZWN1cml0eQ0KICAgIGNvbnNpZGVyYXRpb25zIGlzc3VlcyBmcm9tIFJvYmVydCdzIEdl bi1BUlQgcmV2aWV3LCBidXQgSSBkb24ndCB0aGluayB0aGUNCiAgICBjdXJyZW50IHRleHQgaXMg cXVpdGUgdGhlcmUgeWV0LiBWZXJzaW9uIDE0IGFkZGVkIHRoZSB0ZXh0IHRvIHNheSB0aGF0LA0K ICAgIHdoZW4gdXNpbmcgd2Vic29ja2V0cywgdGhlIHdlYnNvY2tldCBzZWN1cml0eSBtZWNoYW5p c21zIGFyZSB1c2VkIGluc3RlYWQNCiAgICBvZiB0aG9zZSBmcm9tIGRyYWZ0LWlldGYtYmZjcGJp cy1yZmM0NTgyYmlzLiBCdXQgUm9iZXJ0IGFsc28gYXNrZWQgZm9yDQogICAgdGhlIGRyYWZ0IHRv IGRlc2NyaWJlIGhvdyB0aGF0IGNoYW5nZSBpbXBhY3RzIHRoZSBzZWN1cml0eSBhbmFseXNpcyBp bg0KICAgIGRyYWZ0LWlldGYtYmZjcGJpcy1yZmM0NTgyYmlzLiBJIGRvbid0IHNlZSB0ZXh0IHRo YXQgZG9lcyB0aGF0LiBJJ2QgbGlrZQ0KICAgIHRvIHNlZSwgZm9yIGVhY2ggb2YgdGhlIGF0dGFj a3MgZGVzY3JpYmVkIGluDQogICAgZHJhZnQtaWV0Zi1iZmNwYmlzLXJmYzQ1ODJiaXMsIHRleHQg dGhhdCBzYXlzIGRlc2NyaWJlcyBob3cgKG9yIGlmKSBhDQogICAgc2ltaWxhciBhdHRhY2sgd291 bGQgYmUgbWl0aWdhdGVkIHVzaW5nIHdlYnNvY2tldC4NCjxSYW0+IEhlcmUgaXMgdGhlIHRleHQg SSBwbGFuIHRvIGFkZCB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgYXMgYSBzZXBhcmF0ZSBw YXJhZ3JhcGgNCg0KRVhJU1RJTkc6DQpXaGVuIHVzaW5nIEJGQ1Agb3ZlciB3ZWJzb2NrZXRzLCB0 aGUgc2VjdXJpdHkgbWVjaGFuaXNtcyBkZWZpbmVkIGluDQogICAgW2RyYWZ0LWlldGYtYmZjcGJp cy1yZmM0NTkyYmlzXSBhcmUgKm5vdCB1c2VkKi4gSW5zdGVhZCwgdGhlIGFwcGxpY2F0aW9uDQog ICAgaXMgcmVxdWlyZWQgdG8gYnVpbGQgYW5kIHJlbHkgb24gdGhlIHNlY3VyaXR5IG1lY2hhbmlz bXMgaW4gW1JGQzY0NTVdDQoNCk5FVzoNCuKAnFdoZW4gdXNpbmcgQkZDUCBvdmVyIHdlYnNvY2tl dHMsIHRoZSBzZWN1cml0eSBtZWNoYW5pc21zIGRlZmluZWQgaW4NCiAgICBbZHJhZnQtaWV0Zi1i ZmNwYmlzLXJmYzQ1OTJiaXNdIGFyZSAqbm90IHVzZWQqLiBJbnN0ZWFkLCB0aGUgYXBwbGljYXRp b24NCiAgICBpcyByZXF1aXJlZCB0byBidWlsZCBhbmQgcmVseSBvbiB0aGUgc2VjdXJpdHkgbWVj aGFuaXNtcyBpbiBbUkZDNjQ1NV0NCg0KVGhpcyBzZWN0aW9uIGFuYWx5c2VzIHRoZSB0aHJlYXRz IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDE0IG9mIFtkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU4MmJp c10gd2hlbiBXZWJTb2NrZXQgaXMgDQp1c2VkIGFzIHRyYW5zcG9ydCBwcm90b2NvbCBmb3IgQkZD UC4NCg0KQW4gYXR0YWNrZXIgYXR0ZW1wdGluZyB0byBpbXBlcnNvbmF0ZSBhIGZsb29yIGNvbnRy b2wgc2VydmVyIGlzIGF2b2lkZWQgYnkgaGF2aW5nIHNlcnZlcnMgYWNjZXB0IEJGQ1AgbWVzc2Fn ZXMgb3ZlciANClNlY3VyZSBXZWJTb2NrZXQgKFdTUykgb25seS4gQXMgd2l0aCBhbnkgb3RoZXIg d2ViIGNvbm5lY3Rpb24sIHRoZSBjbGllbnRzIHdpbGwgdmVyaWZ5IHRoZSBzZXJ2ZXJzIGNlcnRp ZmljYXRlLiAgDQpUaGUgZmxvb3IgY29udHJvbCBXZWJTb2NrZXQgY2xpZW50IE1VU1QgZm9sbG93 IHRoZSBwcm9jZWR1cmVzIGluIFtSRkM3NTI1XSAoaW5jbHVkaW5nIGhvc3RuYW1lIHZlcmlmaWNh dGlvbiANCmFzIHBlciBzZWN0aW9uIDYuMSBpbiBbUkZDNzUyNV0pIHdoaWxlIHNldHRpbmcgdXAg VExTIGNvbm5lY3Rpb24gd2l0aCBmbG9vciBjb250cm9sIHdlYlNvY2tldCBzZXJ2ZXIuIA0KDQpB biBhdHRhY2tlciBhdHRlbXB0aW5nIHRvIGltcGVyc29uYXRlIGEgZmxvb3IgY29udHJvbCBjbGll bnQgaXMgYXZvaWRlZCBieSBoYXZpbmcgc2VydmVycyBhY2NlcHQgQkZDUCBtZXNzYWdlcyANCm92 ZXIgV1NTIG9ubHkuIEFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDEwLjUgb2YgW1JGQzY0NTVdIHRo ZSBmbG9vciBjb250cm9sIHNlcnZlciBjYW4gdXNlIGFueSBjbGllbnQgYXV0aGVudGljYXRpb24g DQptZWNoYW5pc20gYW5kIGZvbGxvdyB0aGUgc3RlcHMgaW4gU2VjdGlvbiA4IG9mIHRoaXMgZG9j dW1lbnQuDQoNCkF0dGFja2VycyBtYXkgYXR0ZW1wdCB0byBtb2RpZnkgbWVzc2FnZXMgZXhjaGFu Z2VkIGJ5IGEgY2xpZW50IGFuZCBhDQogICBmbG9vciBjb250cm9sIHNlcnZlci4gVGhpcyBjYW4g YmUgcHJldmVudGVkIGJ5IGhhdmluZyBXU1MgYmV0d2VlbiBjbGllbnQgYW5kIHNlcnZlci4NCg0K QW4gYXR0YWNrZXIgdHJ5aW5nIHRvIHJlcGxheSB0aGUgbWVzc2FnZXMgaXMgcHJldmVudGVkIGJ5 DQogICBoYXZpbmcgZmxvb3IgY29udHJvbCBzZXJ2ZXJzIGNoZWNrIHRoYXQgbWVzc2FnZXMgYXJy aXZpbmcgb3ZlciBhDQogICBnaXZlbiBXU1MgY29ubmVjdGlvbiB1c2UgYW4gYXV0aG9yaXplZCB1 c2VyIElELg0KDQpBdHRhY2tlcnMgbWF5IGF0dGVtcHQgdG8gcGljayBtZXNzYWdlcyBmcm9tIHRo ZSBuZXR3b3JrIHRvIGdldCBhY2Nlc3MNCiAgIHRvIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBi ZXR3ZWVuIHRoZSBmbG9vciBjb250cm9sIHNlcnZlciBhbmQgYQ0KICAgY2xpZW50IChlLmcuLCB3 aHkgYSBmbG9vciByZXF1ZXN0IHdhcyBkZW5pZWQpLiAgSW4gb3JkZXIgdG8gZW5zdXJlIHRoYXQg DQpCRkNQIHVzZXJzIGFyZSBnZXR0aW5nIHRoZSBsZXZlbCBvZiBwcm90ZWN0aW9uIHRoYXQgdGhl eSB3b3VsZCBnZXQgdXNpbmcgDQp0aGUgQkZDUCBwcm90b2NvbCBkaXJlY3RseSwgYXBwbGljYXRp b25zIG5lZWQgdG8gaGF2ZSBhIHdheSB0byANCmNvbnRyb2wgdGhlIHdlYnNvY2tldCBsaWJyYXJp ZXMgdG8gdXNlIGVuY3J5cHRpb24gYWxnb3JpdGhtcyBzcGVjaWZpZWQgaW4gU2VjdGlvbiA3DQpv ZiBbZHJhZnQtaWV0Zi1iZmNwYmlzLXJmYzQ1ODJiaXMuIFNpbmNlICB0aGUgV2ViU29ja2V0IEFQ SSBkb2VzIG5vdCBoYXZlIGEgd2F5IHRvDQphbGxvdyBhbiBhcHBsaWNhdGlvbiB0byBzZWxlY3Qg dGhlIGVuY3J5cHRpb24gYWxnb3JpdGhtIHRvIGJlIHVzZWQsIHRoZSBwcm90ZWN0aW9uIA0KbGV2 ZWwgcHJvdmlkZWQgd2hlbiBXU1MgaXMgdXNlZCBpcyBsaW1pdGVkIHRvIHRoZSB1bmRlcmx5aW5n IFRMUyBhbGdvcml0aG0gdXNlZCBieSBXZWJTb2NrZXQgbGlicmFyeS7igJ0NCg0KDQoNCiAgICAt NC4yLCBmaXJzdCBwYXJhZ3JhcGg6IFlvdSB0YWxrIGFib3V0IGhvdyB0aGUgcGF5bG9hZCBzaXpl IGxpbWl0IGlzDQogICAgc21hbGxlciB3aGVuIHVzaW5nIHdlYnNvY2tldC4gQ2FuIHlvdSBnaXZl IGd1aWRhbmNlIGZvciBhY3R1YWwgcmVhc29uYWJsZQ0KICAgIGxpbWl0cz8NCjxSYW0+IFRoZSBw YXJhIGFscmVhZHkgZ2l2ZXMgdGhlIG1heCBsaW1pdC4gSSBkb27igJl0IHNlZSBhIHJlYWwgbmVl ZCB0byBnaXZlIGFueSBvdGhlciBsaW1pdC4gVGhlIHJlYXNvbiBmb3IgYWRkaW5nIHRoaXMgc2Vj dGlvbiB0byBleHBsaWNpdGx5IG1lbnRpb24NCnRoYXQgd2hlbiBCRkNQIGlzIHNlbnQgb3ZlciBX Uy9XU1MgdGhlcmUgc2hvdWxkIGJlIG5vIGZyYWdtZW50YXRpb24gdW5saWtlIHdoYXQgaXMgbWVu dGlvbmVkIGluIFdTIFJGQyBbIHJmYzY0NTUgc2VjdGlvbiA1LjRdLg0KSSB0aGluayB0aGUgcHJv Y2VkdXJlcyAobGlrZSBsZWFybmluZyB0aGUgTVRVIG9mIGEgcGF0aCBhbmQgY29uc3RydWN0aW5n IEJGQ1AgbXNnIHN1Y2ggdGhhdCBpdCB3aWxsIG5vdCBiZSBmcmFnbWVudGVkXSANCm9mIFNlY3Rp b24gNi4yLjMgaW4gW2RyYWZ0LWlldGYtYmZjcGJpcy1yZmM0NTgyYmlzLTEzXSBhcmUgYXBwbGlj YWJsZSBoZXJlIGFzIHdlbGwuIA0KICAgIA0KICAgIC01LCAybmQgcGFyYWdyYXBoOiAiVGhlIEJG Q1Agc2VydmVyIGlzIGEgd2lsbCBoYXZlIGEgZ2xvYmFsbHkgcm91dGFibGUNCiAgICBhZGRyZXNz Ig0KICAgIElzIHRoZXJlIGFuIGltcGxpZWQgTVVTVCBoaWRpbmcgaW4gdGhlcmU/IEFsc28sIHRo ZXJlJ3MgYSB0eXBvIGFyb3VuZCAiaXMNCiAgICB3aWxsIGhhdmUiLg0KPFJhbT4gSSB3aWxsIGFk ZCBhIE1VU1QgaGVyZS4NCiAgICANCiAgICAtOCwgcGFyYWdyYXBoIDg6IElzIHRoZSBwb2ludCB0 aGF0IHlvdSBTSE9VTEQgYXV0aGVudGljYXRlIHRoZSBjbGllbnQsIG9yDQogICAgdGhhdCBpZiB5 b3Ugd2FudCB0byBhdXRoZW50aWNhdGUgdGhlIGNsaWVudCB5b3UgU0hPVUxEIGRvIGl0IHRoaXMg d2F5PyBJDQogICAgc3VzcGVjdCB0aGUgZm9ybWVyIGlzIGludGVuZGVkLCBidXQgdGhlIHRleHQg aW1wbGllcyB0aGUgbGF0dGVyLg0KPFJhbT4gWWVzIGl04oCZcyB0aGUgZm9ybWVyLiBJIGFtIHJl LXdvcmRpbmcgdGhlIGxhc3QgcGFyYSBvZiB0aGlzIHNlY3Rpb24gdG8gdGhpcyBhcyBwZXIgZGlz Y3Vzc2lvbiBpbiB0aGUgdGhyZWFkLiBJcyB0aGlzIG1ha2luZyBpdCBiZXR0ZXIgPw0KDQpORVc6 DQpJZiB0aGUgc3RhdHVzIGNvZGUgcmVjZWl2ZWQgZnJvbSB0aGUgc2VydmVyIGlzIG5vdCAxMDEs DQogdGhlIFdlYlNvY2tldCBjbGllbnQgc3RhY2sgaGFuZGxlcyB0aGUgcmVzcG9uc2UgcGVyIEhU VFANCiAgW1JGQzcyMzBdIHByb2NlZHVyZXMsIGluIHBhcnRpY3VsYXIgdGhlIGNsaWVudCBtaWdo dCBwZXJmb3JtIA0KYXV0aGVudGljYXRpb24gaWYgaXQgcmVjZWl2ZXMgNDAxIHN0YXR1cyBjb2Rl LiAgVGhlIFdlYlNvY2tldCBjbGllbnRzIGFyZSANCnZ1bG5lcmFibGUgdG8gdGhlIGF0dGFja3Mg b2YgYmFzaWMgYXV0aGVudGljYXRpb24gKG1lbnRpb25lZCBpbiBTZWN0aW9uIDQgb2YgW1JGQzc2 MTddKSBhbmQNCiBkaWdlc3QgYXV0aGVudGljYXRpb24gKG1lbnRpb25lZCBpbiBTZWN0aW9uIDUg b2YgW1JGQzc2MTZdKS4gVG8gb3ZlcmNvbWUgc29tZSBvZiB0aGVzZSB3ZWFrbmVzcywgDQp0aGUg V2ViU29ja2V0IGNsaWVudHMgZm9yIGV4YW1wbGUgY2FuIHVzZSBIVFRQIE9yaWdpbi1Cb3VuZCBB dXRoZW50aWNhdGlvbiAoSE9CQSkNCiBtZWNoYW5pc20gbWVudGlvbmVkIGluIFtSRkM3NDg2XS4N Cg0KUmVnYXJkcywNClJhbQ0KDQoNCiAgICANCiAgICANCiAgICANCg0K From nobody Tue Feb 7 09:19:43 2017 Return-Path: X-Original-To: bfcpbis@ietf.org Delivered-To: bfcpbis@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B7FA129DE9; Tue, 7 Feb 2017 09:19:35 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.42.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148648797517.3393.411528256416073527.idtracker@ietfa.amsl.com> Date: Tue, 07 Feb 2017 09:19:35 -0800 Archived-At: Cc: draft-ietf-bfcpbis-sdp-ws-uri@ietf.org, bfcpbis-chairs@ietf.org, bfcpbis@ietf.org, alissa@cooperw.in, eckelcu@cisco.com, The IESG , rfc-editor@rfc-editor.org Subject: [bfcpbis] Protocol Action: 'Session Description Protocol (SDP) WebSocket Connection URI Attribute' to Proposed Standard (draft-ietf-bfcpbis-sdp-ws-uri-09.txt) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Feb 2017 17:19:35 -0000 The IESG has approved the following document: - 'Session Description Protocol (SDP) WebSocket Connection URI Attribute' (draft-ietf-bfcpbis-sdp-ws-uri-09.txt) as Proposed Standard This document is the product of the Binary Floor Control Protocol Bis Working Group. The IESG contact persons are Alexey Melnikov, Ben Campbell and Alissa Cooper. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-sdp-ws-uri/ Technical Summary: The WebSocket [RFC6455] protocol enables two-way message exchange between clients and servers on top of a persistent TCP connection, optionally secured with Transport Layer Security (TLS) [RFC5246]. The WebSocket protocol was designed for, and is typically used in, web-based applications. This document specifies extensions to Session Description Protocol (SDP) for application protocols using WebSocket as a transport. Working Group Summary: This document was created as a result of agreement within the working group that the new SDP ws-uri attribute that was initially defined within [draft-ietf-bfcpbis-bfcp-websocket] was not BFCP specific and should therefore be defined within a separate draft. There were no competing documents and the draft was immediately adopted as a working group document based on content pulled out of [draft-ietf-bfcpbis-bfcp-websocket]. The draft proceeded without much contention. Reviews were mainly editorial in nature and dealt with the organization of the content and striking the right balance of information between the two drafts such that each stood on its own without unnecessary duplication. Working group last call resulted on only one substantial review, which clarified when within the SDP offer/answer the new attribute is to be included and how to deal with offerless INVITEs. Document Quality: Are there existing implementations of the protocol? Have a significant number of vendors indicated their plan to implement the specification? Are there any reviewers that merit special mention as having done a thorough review, e.g., one that resulted in important changes or a conclusion that the document had no substantive issues? If there was a MIB Doctor, Media Type or other expert review, what was its course (briefly)? In the case of a Media Type review, on what date was the request posted? The authors are aware of two server-side implementations and one client-side — none of them is open source. There are also partial client and server implementations that exercise what is covered in this draft. Other companies indicated plans to implement this in their WebRTC gateway. Personnel: Who is the Document Shepherd? Who is the Responsible Area Director? Charles Eckel is the document shepherd. Alissa Cooper is the responsible Area Director. From nobody Wed Feb 8 15:32:49 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CF9012A111; Wed, 8 Feb 2017 15:32:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8niZaczSBfwV; Wed, 8 Feb 2017 15:32:42 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0209712A112; Wed, 8 Feb 2017 15:32:41 -0800 (PST) Received: from [10.0.1.39] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id v18NWZFH071458 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 8 Feb 2017 17:32:36 -0600 (CST) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.39] From: "Ben Campbell" To: "Ram Mohan R" Date: Wed, 08 Feb 2017 17:32:35 -0600 Message-ID: <08C20901-35F0-4AC8-A0CE-1361E73D25FC@nostrum.com> In-Reply-To: References: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.6r5344) Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , The IESG , "bfcpbis-chairs@ietf.org" , Charles Eckel Subject: Re: [bfcpbis] Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Feb 2017 23:32:43 -0000 Thanks for the response. Please see comments inline. I will delete sections that seem to be resolved. (Consider my responses to them as "Okay"). Thanks! Ben. On 7 Feb 2017, at 10:20, Ram Mohan R (rmohanr) wrote: > Hi Ben, > > Sorry for delay. Please see inline for my responses > > -----Original Message----- > From: Ben Campbell [...] > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > I plan to ballot "yes" for this document, but I have some concerns > about > the security properties that I think need to be resolved first. I > have > followed the discussion resulting from Robert's Gen-ART review > (and will > have comments about that in the "COMMENTS section", but I think I > see an > additional issue that hasn't been covered in that discussion. > > draft-ietf-bfcpbis-rfc4582bis (currently in the RFC Editors queue) > defines some situations where TLS and client authentication are > normatively required. Specifically, section 9 of that draft says > that, if > the signaling channel is authenticated and has confidentiality and > integrity protection, the BFCP client MUST be authenticated. > Section 14 > additionally says that under those circumstances, BFCP is REQUIRED > to use > the mandated cryptographic algorithm. But bfcp-websocket only says > that > WSS and client authentication are RECOMMENDED. > > Agree. That’s a reasonable ask. > > I think this could be fixed by requiring WSS, and the web-based > client > authentication techniques described in this draft whenever the > signaling > protocol is secured. The simplest way to describe that might be to > say > that BFCP-websocket must use at least as strong protections as the > signaling channel. > I will add the following line to the security consideration > section > NEW: > “Secure WebSocket (WSS) MUST be used for BCP when the signalling > channel used to exchange the BFCP parameters is secured. “ > > Is this ok ? That's moving in the right direction. However, the second paragraph of section 9 of draft-ietf-bfcpbis-rfc4582bis offers a little more precision. Perhaps something like the following: "If the signaling or control protocol traffic used to set up the conference is authenticated and confidentiality and integrity protected, Secure WebSocket (WSS) MUST be used, and the floor control server MUST authenticate the client." > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I appreciate the author's efforts in resolving the security > considerations issues from Robert's Gen-ART review, but I don't > think the > current text is quite there yet. Version 14 added the text to say > that, > when using websockets, the websocket security mechanisms are used > instead > of those from draft-ietf-bfcpbis-rfc4582bis. But Robert also asked > for > the draft to describe how that change impacts the security > analysis in > draft-ietf-bfcpbis-rfc4582bis. I don't see text that does that. > I'd like > to see, for each of the attacks described in > draft-ietf-bfcpbis-rfc4582bis, text that says describes how (or > if) a > similar attack would be mitigated using websocket. > Here is the text I plan to add the security considerations as a > separate paragraph > > EXISTING: > When using BFCP over websockets, the security mechanisms defined in > [draft-ietf-bfcpbis-rfc4592bis] are *not used*. Instead, the > application > is required to build and rely on the security mechanisms in > [RFC6455] > > NEW: > “When using BFCP over websockets, the security mechanisms defined in > [draft-ietf-bfcpbis-rfc4592bis] are *not used*. Instead, the > application > is required to build and rely on the security mechanisms in > [RFC6455] > > This section analyses the threats described in Section 14 of > [draft-ietf-bfcpbis-rfc4582bis] when WebSocket is > used as transport protocol for BFCP. > > An attacker attempting to impersonate a floor control server is > avoided by having servers accept BFCP messages over > Secure WebSocket (WSS) only. As with any other web connection, the > clients will verify the servers certificate. > The floor control WebSocket client MUST follow the procedures in > [RFC7525] (including hostname verification > as per section 6.1 in [RFC7525]) while setting up TLS connection with > floor control webSocket server. > > An attacker attempting to impersonate a floor control client is > avoided by having servers accept BFCP messages > over WSS only. As described in Section 10.5 of [RFC6455] the floor > control server can use any client authentication > mechanism and follow the steps in Section 8 of this document. > > Attackers may attempt to modify messages exchanged by a client and a > floor control server. This can be prevented by having WSS between > client and server. > > An attacker trying to replay the messages is prevented by > having floor control servers check that messages arriving over a > given WSS connection use an authorized user ID. > > Attackers may attempt to pick messages from the network to get access I'm not sure what you mean by "pick messages". Are we talking about eavesdropping? > to confidential information between the floor control server and a > client (e.g., why a floor request was denied). In order to ensure > that > BFCP users are getting the level of protection that they would get > using > the BFCP protocol directly, applications need to have a way to > control the websocket libraries to use encryption algorithms specified > in Section 7 > of [draft-ietf-bfcpbis-rfc4582bis. Since the WebSocket API does not > have a way to > allow an application to select the encryption algorithm to be used, > the protection > level provided when WSS is used is limited to the underlying TLS > algorithm used by WebSocket library.” > > Other than the minor comment above, that looks good to me. [...] From nobody Wed Feb 8 17:55:32 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16F1412954A; Wed, 8 Feb 2017 17:55:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xgJhKJFK-lWS; Wed, 8 Feb 2017 17:55:28 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C51A12951D; Wed, 8 Feb 2017 17:55:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11254; q=dns/txt; s=iport; t=1486605328; x=1487814928; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=YNlL9tM/rtV7XZWl+1HjU/1r4VmUNF4uhvoMFOR25I8=; b=Uu/VHRwzVA4TkTqaRzDsOIP3E75kLiu/ssaetHLGnOhtKRbRkufHGlkT h4JFPqxvX4Slm8OIYcYdAafyCWUmj8K53OWVAU87xYBX81c8urAxNuHcY xVwu2Er0la7O7g0XWYRjb3NlWZ0ahNA9Wp4ZhNgkaUcNtOMtBKD9jHaAu s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A5AQBVy5tY/5JdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1GBageDUooIkgmIDIsbgg+CDIYiAhqCVT8YAQIBAQEBAQEBYii?= =?us-ascii?q?EaQEBAQMBIxE0EQwEAgEGAhEDAQIDAhIUAgICHxEVCAgCBA4FiVwDDQiSX51Og?= =?us-ascii?q?iWHOA2ECgEBAQEBAQEBAQEBAQEBAQEBAQEBAR2BC4dGgmqCUYFfDhYHMQIODII?= =?us-ascii?q?yLoIxAQSJAgqHfYRLhWQ4AYoMg2yEGYF7hReJc4o0iF4BHzh+TxVNAYRogUh1A?= =?us-ascii?q?YZBDxeBChN5AQEB?= X-IronPort-AV: E=Sophos;i="5.35,349,1484006400"; d="scan'208";a="206502437" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Feb 2017 01:55:27 +0000 Received: from XCH-RTP-016.cisco.com (xch-rtp-016.cisco.com [64.101.220.156]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v191tQbg023846 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 9 Feb 2017 01:55:27 GMT Received: from xch-rtp-017.cisco.com (64.101.220.157) by XCH-RTP-016.cisco.com (64.101.220.156) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 8 Feb 2017 20:55:25 -0500 Received: from xch-rtp-017.cisco.com ([64.101.220.157]) by XCH-RTP-017.cisco.com ([64.101.220.157]) with mapi id 15.00.1210.000; Wed, 8 Feb 2017 20:55:25 -0500 From: "Ram Mohan R (rmohanr)" To: Ben Campbell Thread-Topic: Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) Thread-Index: AQHSceRTe5LJyE53MkeeyUi4LMDL1KFeiFwAgAGu7YCAAIQbAA== Date: Thu, 9 Feb 2017 01:55:25 +0000 Message-ID: References: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> <08C20901-35F0-4AC8-A0CE-1361E73D25FC@nostrum.com> In-Reply-To: <08C20901-35F0-4AC8-A0CE-1361E73D25FC@nostrum.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.77.146] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , The IESG , "bfcpbis-chairs@ietf.org" , "Charles Eckel \(eckelcu\)" Subject: Re: [bfcpbis] Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2017 01:55:31 -0000 SGkgQmVuLA0KDQpUaGFua3MgZm9yIHlvdXIgZmVlZGJhY2suIFBsZWFzZSBzZWUgaW5saW5lIDxS YW0+DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW4gQ2FtcGJlbGwgPGJl bkBub3N0cnVtLmNvbT4NCkRhdGU6IFRodXJzZGF5LCA5IEZlYnJ1YXJ5IDIwMTcgYXQgNTowMiBB TQ0KVG86ICJSYW0gTW9oYW4gUiAocm1vaGFucikiIDxybW9oYW5yQGNpc2NvLmNvbT4NCkNjOiBU aGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz4sICJiZmNwYmlzQGlldGYub3JnIiA8YmZjcGJpc0BpZXRm Lm9yZz4sICJkcmFmdC1pZXRmLWJmY3BiaXMtYmZjcC13ZWJzb2NrZXRAaWV0Zi5vcmciIDxkcmFm dC1pZXRmLWJmY3BiaXMtYmZjcC13ZWJzb2NrZXRAaWV0Zi5vcmc+LCAiQ2hhcmxlcyBFY2tlbCAo ZWNrZWxjdSkiIDxlY2tlbGN1QGNpc2NvLmNvbT4sICJiZmNwYmlzLWNoYWlyc0BpZXRmLm9yZyIg PGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IEJlbiBDYW1wYmVsbCdzIERp c2N1c3Mgb24gZHJhZnQtaWV0Zi1iZmNwYmlzLWJmY3Atd2Vic29ja2V0LTE0OiAod2l0aCBESVND VVNTIGFuZCBDT01NRU5UKQ0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2VzQGlldGYub3JnPg0K UmVzZW50LVRvOiA8YW50b24ucm9tYW5AcXVvYmlzLmNvbT4sIDxzdGVwaGFuZS5jYXplYXV4QG9y YW5nZS5jb20+LCA8Z3NhbGd1ZWlAY2lzY28uY29tPiwgPHNlcmdpby5nYXJjaWEubXVyaWxsb0Bn bWFpbC5jb20+LCA8cm1vaGFuckBjaXNjby5jb20+LCA8dmljdG9yLnBhc2N1YWwuYXZpbGFAb3Jh Y2xlLmNvbT4NClJlc2VudC1EYXRlOiBUaHVyc2RheSwgOSBGZWJydWFyeSAyMDE3IGF0IDU6MDIg QU0NCg0KICAgIFRoYW5rcyBmb3IgdGhlIHJlc3BvbnNlLiBQbGVhc2Ugc2VlIGNvbW1lbnRzIGlu bGluZS4gSSB3aWxsIGRlbGV0ZSANCiAgICBzZWN0aW9ucyB0aGF0IHNlZW0gdG8gYmUgcmVzb2x2 ZWQuIChDb25zaWRlciBteSByZXNwb25zZXMgdG8gdGhlbSBhcyANCiAgICAiT2theSIpLg0KICAg IA0KICAgIFRoYW5rcyENCiAgICANCiAgICBCZW4uDQogICAgDQogICAgT24gNyBGZWIgMjAxNywg YXQgMTA6MjAsIFJhbSBNb2hhbiBSIChybW9oYW5yKSB3cm90ZToNCiAgICANCiAgICA+IEhpIEJl biwNCiAgICA+DQogICAgPiBTb3JyeSBmb3IgZGVsYXkuIFBsZWFzZSBzZWUgaW5saW5lIDxSYW0+ IGZvciBteSByZXNwb25zZXMNCiAgICA+DQogICAgPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0t LQ0KICAgID4gRnJvbTogQmVuIENhbXBiZWxsIDxiZW5Abm9zdHJ1bS5jb20+DQogICAgDQogICAg Wy4uLl0NCiAgICANCiAgICA+DQogICAgPg0KICAgID4gICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+ ICAgICBESVNDVVNTOg0KICAgID4gICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+DQogICAgPiAgICAg SSBwbGFuIHRvIGJhbGxvdCAieWVzIiBmb3IgdGhpcyBkb2N1bWVudCwgYnV0IEkgaGF2ZSBzb21l IGNvbmNlcm5zIA0KICAgID4gYWJvdXQNCiAgICA+ICAgICB0aGUgc2VjdXJpdHkgcHJvcGVydGll cyB0aGF0IEkgdGhpbmsgbmVlZCB0byBiZSByZXNvbHZlZCBmaXJzdC4gSSANCiAgICA+IGhhdmUN CiAgICA+ICAgICBmb2xsb3dlZCB0aGUgZGlzY3Vzc2lvbiByZXN1bHRpbmcgZnJvbSBSb2JlcnQn cyBHZW4tQVJUIHJldmlldyANCiAgICA+IChhbmQgd2lsbA0KICAgID4gICAgIGhhdmUgY29tbWVu dHMgYWJvdXQgdGhhdCBpbiB0aGUgIkNPTU1FTlRTIHNlY3Rpb24iLCBidXQgSSB0aGluayBJIA0K ICAgID4gc2VlIGFuDQogICAgPiAgICAgYWRkaXRpb25hbCBpc3N1ZSB0aGF0IGhhc24ndCBiZWVu IGNvdmVyZWQgaW4gdGhhdCBkaXNjdXNzaW9uLg0KICAgID4NCiAgICA+ICAgICBkcmFmdC1pZXRm LWJmY3BiaXMtcmZjNDU4MmJpcyAoY3VycmVudGx5IGluIHRoZSBSRkMgRWRpdG9ycyBxdWV1ZSkN CiAgICA+ICAgICBkZWZpbmVzIHNvbWUgc2l0dWF0aW9ucyB3aGVyZSBUTFMgYW5kIGNsaWVudCBh dXRoZW50aWNhdGlvbiBhcmUNCiAgICA+ICAgICBub3JtYXRpdmVseSByZXF1aXJlZC4gU3BlY2lm aWNhbGx5LCBzZWN0aW9uIDkgb2YgdGhhdCBkcmFmdCBzYXlzIA0KICAgID4gdGhhdCwgaWYNCiAg ICA+ICAgICB0aGUgc2lnbmFsaW5nIGNoYW5uZWwgaXMgYXV0aGVudGljYXRlZCBhbmQgaGFzIGNv bmZpZGVudGlhbGl0eSBhbmQNCiAgICA+ICAgICBpbnRlZ3JpdHkgcHJvdGVjdGlvbiwgdGhlIEJG Q1AgY2xpZW50IE1VU1QgYmUgYXV0aGVudGljYXRlZC4gDQogICAgPiBTZWN0aW9uIDE0DQogICAg PiAgICAgYWRkaXRpb25hbGx5IHNheXMgdGhhdCB1bmRlciB0aG9zZSBjaXJjdW1zdGFuY2VzLCBC RkNQIGlzIFJFUVVJUkVEIA0KICAgID4gdG8gdXNlDQogICAgPiAgICAgdGhlIG1hbmRhdGVkIGNy eXB0b2dyYXBoaWMgYWxnb3JpdGhtLiBCdXQgYmZjcC13ZWJzb2NrZXQgb25seSBzYXlzIA0KICAg ID4gdGhhdA0KICAgID4gICAgIFdTUyBhbmQgY2xpZW50IGF1dGhlbnRpY2F0aW9uIGFyZSBSRUNP TU1FTkRFRC4NCiAgICA+DQogICAgPiA8UmFtPiBBZ3JlZS4gVGhhdOKAmXMgYSByZWFzb25hYmxl IGFzay4NCiAgICA+DQogICAgPiAgICAgSSB0aGluayB0aGlzIGNvdWxkIGJlIGZpeGVkIGJ5IHJl cXVpcmluZyBXU1MsIGFuZCB0aGUgd2ViLWJhc2VkIA0KICAgID4gY2xpZW50DQogICAgPiAgICAg YXV0aGVudGljYXRpb24gdGVjaG5pcXVlcyBkZXNjcmliZWQgaW4gdGhpcyBkcmFmdCB3aGVuZXZl ciB0aGUgDQogICAgPiBzaWduYWxpbmcNCiAgICA+ICAgICBwcm90b2NvbCBpcyBzZWN1cmVkLiBU aGUgc2ltcGxlc3Qgd2F5IHRvIGRlc2NyaWJlIHRoYXQgbWlnaHQgYmUgdG8gDQogICAgPiBzYXkN CiAgICA+ICAgICB0aGF0IEJGQ1Atd2Vic29ja2V0IG11c3QgdXNlIGF0IGxlYXN0IGFzIHN0cm9u ZyBwcm90ZWN0aW9ucyBhcyB0aGUNCiAgICA+ICAgICBzaWduYWxpbmcgY2hhbm5lbC4NCiAgICA+ ICAgPFJhbT4gSSB3aWxsIGFkZCB0aGUgZm9sbG93aW5nIGxpbmUgdG8gdGhlIHNlY3VyaXR5IGNv bnNpZGVyYXRpb24gDQogICAgPiBzZWN0aW9uDQogICAgPiBORVc6DQogICAgPiDigJxTZWN1cmUg V2ViU29ja2V0IChXU1MpIE1VU1QgYmUgdXNlZCBmb3IgQkNQIHdoZW4gdGhlIHNpZ25hbGxpbmcg DQogICAgPiBjaGFubmVsIHVzZWQgdG8gZXhjaGFuZ2UgdGhlIEJGQ1AgcGFyYW1ldGVycyBpcyBz ZWN1cmVkLiDigJwNCiAgICA+DQogICAgPiBJcyB0aGlzIG9rID8NCiAgICANCiAgICBUaGF0J3Mg bW92aW5nIGluIHRoZSByaWdodCBkaXJlY3Rpb24uIEhvd2V2ZXIsIHRoZSBzZWNvbmQgcGFyYWdy YXBoIG9mIA0KICAgIHNlY3Rpb24gOSBvZiBkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU4MmJpcyBv ZmZlcnMgYSBsaXR0bGUgbW9yZSANCiAgICBwcmVjaXNpb24uIFBlcmhhcHMgc29tZXRoaW5nIGxp a2UgdGhlIGZvbGxvd2luZzoNCiAgICANCiAgICAiSWYgdGhlIHNpZ25hbGluZyBvciBjb250cm9s IHByb3RvY29sIHRyYWZmaWMgdXNlZCB0byBzZXQgdXAgdGhlIA0KICAgIGNvbmZlcmVuY2UgaXMg YXV0aGVudGljYXRlZCBhbmQgY29uZmlkZW50aWFsaXR5IGFuZCBpbnRlZ3JpdHkgcHJvdGVjdGVk LCANCiAgICBTZWN1cmUgV2ViU29ja2V0IChXU1MpIE1VU1QgYmUgdXNlZCwgYW5kIHRoZSBmbG9v ciBjb250cm9sIHNlcnZlciBNVVNUIA0KICAgIGF1dGhlbnRpY2F0ZSB0aGUgY2xpZW50LiINCg0K PFJhbT4gUHJvcG9zZWQgdGV4dCBsb29rcyBnb29kIHRvIG1lLiBJIHdpbGwgdXNlIHRoaXMuDQog ICAgDQogICAgPg0KICAgID4gICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+ICAgICBDT01NRU5UOg0K ICAgID4gICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+DQogICAgPiAgICAgSSBhcHByZWNpYXRlIHRo ZSBhdXRob3IncyBlZmZvcnRzIGluIHJlc29sdmluZyB0aGUgc2VjdXJpdHkNCiAgICA+ICAgICBj b25zaWRlcmF0aW9ucyBpc3N1ZXMgZnJvbSBSb2JlcnQncyBHZW4tQVJUIHJldmlldywgYnV0IEkg ZG9uJ3QgDQogICAgPiB0aGluayB0aGUNCiAgICA+ICAgICBjdXJyZW50IHRleHQgaXMgcXVpdGUg dGhlcmUgeWV0LiBWZXJzaW9uIDE0IGFkZGVkIHRoZSB0ZXh0IHRvIHNheSANCiAgICA+IHRoYXQs DQogICAgPiAgICAgd2hlbiB1c2luZyB3ZWJzb2NrZXRzLCB0aGUgd2Vic29ja2V0IHNlY3VyaXR5 IG1lY2hhbmlzbXMgYXJlIHVzZWQgDQogICAgPiBpbnN0ZWFkDQogICAgPiAgICAgb2YgdGhvc2Ug ZnJvbSBkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU4MmJpcy4gQnV0IFJvYmVydCBhbHNvIGFza2Vk IA0KICAgID4gZm9yDQogICAgPiAgICAgdGhlIGRyYWZ0IHRvIGRlc2NyaWJlIGhvdyB0aGF0IGNo YW5nZSBpbXBhY3RzIHRoZSBzZWN1cml0eSANCiAgICA+IGFuYWx5c2lzIGluDQogICAgPiAgICAg ZHJhZnQtaWV0Zi1iZmNwYmlzLXJmYzQ1ODJiaXMuIEkgZG9uJ3Qgc2VlIHRleHQgdGhhdCBkb2Vz IHRoYXQuIA0KICAgID4gSSdkIGxpa2UNCiAgICA+ICAgICB0byBzZWUsIGZvciBlYWNoIG9mIHRo ZSBhdHRhY2tzIGRlc2NyaWJlZCBpbg0KICAgID4gICAgIGRyYWZ0LWlldGYtYmZjcGJpcy1yZmM0 NTgyYmlzLCB0ZXh0IHRoYXQgc2F5cyBkZXNjcmliZXMgaG93IChvciANCiAgICA+IGlmKSBhDQog ICAgPiAgICAgc2ltaWxhciBhdHRhY2sgd291bGQgYmUgbWl0aWdhdGVkIHVzaW5nIHdlYnNvY2tl dC4NCiAgICA+IDxSYW0+IEhlcmUgaXMgdGhlIHRleHQgSSBwbGFuIHRvIGFkZCB0aGUgc2VjdXJp dHkgY29uc2lkZXJhdGlvbnMgYXMgYSANCiAgICA+IHNlcGFyYXRlIHBhcmFncmFwaA0KICAgID4N CiAgICA+IEVYSVNUSU5HOg0KICAgID4gV2hlbiB1c2luZyBCRkNQIG92ZXIgd2Vic29ja2V0cywg dGhlIHNlY3VyaXR5IG1lY2hhbmlzbXMgZGVmaW5lZCBpbg0KICAgID4gICAgIFtkcmFmdC1pZXRm LWJmY3BiaXMtcmZjNDU5MmJpc10gYXJlICpub3QgdXNlZCouIEluc3RlYWQsIHRoZSANCiAgICA+ IGFwcGxpY2F0aW9uDQogICAgPiAgICAgaXMgcmVxdWlyZWQgdG8gYnVpbGQgYW5kIHJlbHkgb24g dGhlIHNlY3VyaXR5IG1lY2hhbmlzbXMgaW4gDQogICAgPiBbUkZDNjQ1NV0NCiAgICA+DQogICAg PiBORVc6DQogICAgPiDigJxXaGVuIHVzaW5nIEJGQ1Agb3ZlciB3ZWJzb2NrZXRzLCB0aGUgc2Vj dXJpdHkgbWVjaGFuaXNtcyBkZWZpbmVkIGluDQogICAgPiAgICAgW2RyYWZ0LWlldGYtYmZjcGJp cy1yZmM0NTkyYmlzXSBhcmUgKm5vdCB1c2VkKi4gSW5zdGVhZCwgdGhlIA0KICAgID4gYXBwbGlj YXRpb24NCiAgICA+ICAgICBpcyByZXF1aXJlZCB0byBidWlsZCBhbmQgcmVseSBvbiB0aGUgc2Vj dXJpdHkgbWVjaGFuaXNtcyBpbiANCiAgICA+IFtSRkM2NDU1XQ0KICAgID4NCiAgICA+IFRoaXMg c2VjdGlvbiBhbmFseXNlcyB0aGUgdGhyZWF0cyBkZXNjcmliZWQgaW4gU2VjdGlvbiAxNCBvZiAN CiAgICA+IFtkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU4MmJpc10gd2hlbiBXZWJTb2NrZXQgaXMN CiAgICA+IHVzZWQgYXMgdHJhbnNwb3J0IHByb3RvY29sIGZvciBCRkNQLg0KICAgID4NCiAgICA+ IEFuIGF0dGFja2VyIGF0dGVtcHRpbmcgdG8gaW1wZXJzb25hdGUgYSBmbG9vciBjb250cm9sIHNl cnZlciBpcyANCiAgICA+IGF2b2lkZWQgYnkgaGF2aW5nIHNlcnZlcnMgYWNjZXB0IEJGQ1AgbWVz c2FnZXMgb3Zlcg0KICAgID4gU2VjdXJlIFdlYlNvY2tldCAoV1NTKSBvbmx5LiBBcyB3aXRoIGFu eSBvdGhlciB3ZWIgY29ubmVjdGlvbiwgdGhlIA0KICAgID4gY2xpZW50cyB3aWxsIHZlcmlmeSB0 aGUgc2VydmVycyBjZXJ0aWZpY2F0ZS4NCiAgICA+IFRoZSBmbG9vciBjb250cm9sIFdlYlNvY2tl dCBjbGllbnQgTVVTVCBmb2xsb3cgdGhlIHByb2NlZHVyZXMgaW4gDQogICAgPiBbUkZDNzUyNV0g KGluY2x1ZGluZyBob3N0bmFtZSB2ZXJpZmljYXRpb24NCiAgICA+IGFzIHBlciBzZWN0aW9uIDYu MSBpbiBbUkZDNzUyNV0pIHdoaWxlIHNldHRpbmcgdXAgVExTIGNvbm5lY3Rpb24gd2l0aCANCiAg ICA+IGZsb29yIGNvbnRyb2wgd2ViU29ja2V0IHNlcnZlci4NCiAgICA+DQogICAgPiBBbiBhdHRh Y2tlciBhdHRlbXB0aW5nIHRvIGltcGVyc29uYXRlIGEgZmxvb3IgY29udHJvbCBjbGllbnQgaXMg DQogICAgPiBhdm9pZGVkIGJ5IGhhdmluZyBzZXJ2ZXJzIGFjY2VwdCBCRkNQIG1lc3NhZ2VzDQog ICAgPiBvdmVyIFdTUyBvbmx5LiBBcyBkZXNjcmliZWQgaW4gU2VjdGlvbiAxMC41IG9mIFtSRkM2 NDU1XSB0aGUgZmxvb3IgDQogICAgPiBjb250cm9sIHNlcnZlciBjYW4gdXNlIGFueSBjbGllbnQg YXV0aGVudGljYXRpb24NCiAgICA+IG1lY2hhbmlzbSBhbmQgZm9sbG93IHRoZSBzdGVwcyBpbiBT ZWN0aW9uIDggb2YgdGhpcyBkb2N1bWVudC4NCiAgICA+DQogICAgPiBBdHRhY2tlcnMgbWF5IGF0 dGVtcHQgdG8gbW9kaWZ5IG1lc3NhZ2VzIGV4Y2hhbmdlZCBieSBhIGNsaWVudCBhbmQgYQ0KICAg ID4gICAgZmxvb3IgY29udHJvbCBzZXJ2ZXIuIFRoaXMgY2FuIGJlIHByZXZlbnRlZCBieSBoYXZp bmcgV1NTIGJldHdlZW4gDQogICAgPiBjbGllbnQgYW5kIHNlcnZlci4NCiAgICA+DQogICAgPiBB biBhdHRhY2tlciB0cnlpbmcgdG8gcmVwbGF5IHRoZSBtZXNzYWdlcyBpcyBwcmV2ZW50ZWQgYnkN CiAgICA+ICAgIGhhdmluZyBmbG9vciBjb250cm9sIHNlcnZlcnMgY2hlY2sgdGhhdCBtZXNzYWdl cyBhcnJpdmluZyBvdmVyIGENCiAgICA+ICAgIGdpdmVuIFdTUyBjb25uZWN0aW9uIHVzZSBhbiBh dXRob3JpemVkIHVzZXIgSUQuDQogICAgPg0KICAgID4gQXR0YWNrZXJzIG1heSBhdHRlbXB0IHRv IHBpY2sgbWVzc2FnZXMgZnJvbSB0aGUgbmV0d29yayB0byBnZXQgYWNjZXNzDQogICAgDQogICAg SSdtIG5vdCBzdXJlIHdoYXQgeW91IG1lYW4gYnkgInBpY2sgbWVzc2FnZXMiLiBBcmUgd2UgdGFs a2luZyBhYm91dCANCiAgICBlYXZlc2Ryb3BwaW5nPw0KWWVzLiAgSXQgaXMgZWF2ZXNkcm9wcGlu Zy4gSG93IGFib3V0IHRoaXM6DQoNCk5FVzoNCkF0dGFja2VycyBtYXkgZWF2ZXNkcm9wIG9uIHRo ZSBuZXR3b3JrIHRvIGdldCBhY2Nlc3MgdG8gY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGJldHdl ZW4gdGhlIGZsb29yIGNvbnRyb2wgc2VydmVyIGFuZCBhDQpb4oCm4oCm4oCmXQ0KDQpSZWdhcmRz LA0KUmFtDQogICAgDQogICAgPiAgICB0byBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gYmV0d2Vl biB0aGUgZmxvb3IgY29udHJvbCBzZXJ2ZXIgYW5kIGENCiAgICA+ICAgIGNsaWVudCAoZS5nLiwg d2h5IGEgZmxvb3IgcmVxdWVzdCB3YXMgZGVuaWVkKS4gIEluIG9yZGVyIHRvIGVuc3VyZSANCiAg ICA+IHRoYXQNCiAgICA+IEJGQ1AgdXNlcnMgYXJlIGdldHRpbmcgdGhlIGxldmVsIG9mIHByb3Rl Y3Rpb24gdGhhdCB0aGV5IHdvdWxkIGdldCANCiAgICA+IHVzaW5nDQogICAgPiB0aGUgQkZDUCBw cm90b2NvbCBkaXJlY3RseSwgYXBwbGljYXRpb25zIG5lZWQgdG8gaGF2ZSBhIHdheSB0bw0KICAg ID4gY29udHJvbCB0aGUgd2Vic29ja2V0IGxpYnJhcmllcyB0byB1c2UgZW5jcnlwdGlvbiBhbGdv cml0aG1zIHNwZWNpZmllZCANCiAgICA+IGluIFNlY3Rpb24gNw0KICAgID4gb2YgW2RyYWZ0LWll dGYtYmZjcGJpcy1yZmM0NTgyYmlzLiBTaW5jZSAgdGhlIFdlYlNvY2tldCBBUEkgZG9lcyBub3Qg DQogICAgPiBoYXZlIGEgd2F5IHRvDQogICAgPiBhbGxvdyBhbiBhcHBsaWNhdGlvbiB0byBzZWxl Y3QgdGhlIGVuY3J5cHRpb24gYWxnb3JpdGhtIHRvIGJlIHVzZWQsIA0KICAgID4gdGhlIHByb3Rl Y3Rpb24NCiAgICA+IGxldmVsIHByb3ZpZGVkIHdoZW4gV1NTIGlzIHVzZWQgaXMgbGltaXRlZCB0 byB0aGUgdW5kZXJseWluZyBUTFMgDQogICAgPiBhbGdvcml0aG0gdXNlZCBieSBXZWJTb2NrZXQg bGlicmFyeS7igJ0NCiAgICA+DQogICAgPg0KICAgIA0KICAgIE90aGVyIHRoYW4gdGhlIG1pbm9y IGNvbW1lbnQgYWJvdmUsIHRoYXQgbG9va3MgZ29vZCB0byBtZS4NCiAgICANCiAgICBbLi4uXQ0K ICAgIA0KICAgIA0KDQo= From nobody Wed Feb 8 18:23:08 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86448129525; Wed, 8 Feb 2017 18:23:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BDOXQmVyc7Sz; Wed, 8 Feb 2017 18:23:01 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA001129503; Wed, 8 Feb 2017 18:23:01 -0800 (PST) Received: from [10.0.1.39] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id v192Mvrm091851 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 8 Feb 2017 20:22:58 -0600 (CST) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.39] From: "Ben Campbell" To: "Ram Mohan R" Date: Wed, 08 Feb 2017 20:22:57 -0600 Message-ID: <18BB66FF-A435-4E69-9B9A-72F6AD2E8ABF@nostrum.com> In-Reply-To: References: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> <08C20901-35F0-4AC8-A0CE-1361E73D25FC@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.6r5344) Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , The IESG , "bfcpbis-chairs@ietf.org" , Charles Eckel Subject: Re: [bfcpbis] Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2017 02:23:03 -0000 This all looks good to me. I will release the DISCUSS when you submit the revision with the changes. Thanks! Ben. On 8 Feb 2017, at 19:55, Ram Mohan R (rmohanr) wrote: > Hi Ben, > > Thanks for your feedback. Please see inline > > -----Original Message----- > From: Ben Campbell > Date: Thursday, 9 February 2017 at 5:02 AM > To: "Ram Mohan R (rmohanr)" > Cc: The IESG , "bfcpbis@ietf.org" , > "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" > , "Charles Eckel > (eckelcu)" , "bfcpbis-chairs@ietf.org" > > Subject: Re: Ben Campbell's Discuss on > draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) > Resent-From: > Resent-To: , , > , , > , > Resent-Date: Thursday, 9 February 2017 at 5:02 AM > > Thanks for the response. Please see comments inline. I will delete > sections that seem to be resolved. (Consider my responses to them > as > "Okay"). > > Thanks! > > Ben. > > On 7 Feb 2017, at 10:20, Ram Mohan R (rmohanr) wrote: > > > Hi Ben, > > > > Sorry for delay. Please see inline for my responses > > > > -----Original Message----- > > From: Ben Campbell > > [...] > > > > > > > > ---------------------------------------------------------------------- > > DISCUSS: > > > ---------------------------------------------------------------------- > > > > I plan to ballot "yes" for this document, but I have some > concerns > > about > > the security properties that I think need to be resolved > first. I > > have > > followed the discussion resulting from Robert's Gen-ART > review > > (and will > > have comments about that in the "COMMENTS section", but I > think I > > see an > > additional issue that hasn't been covered in that > discussion. > > > > draft-ietf-bfcpbis-rfc4582bis (currently in the RFC Editors > queue) > > defines some situations where TLS and client authentication > are > > normatively required. Specifically, section 9 of that draft > says > > that, if > > the signaling channel is authenticated and has > confidentiality and > > integrity protection, the BFCP client MUST be authenticated. > > Section 14 > > additionally says that under those circumstances, BFCP is > REQUIRED > > to use > > the mandated cryptographic algorithm. But bfcp-websocket > only says > > that > > WSS and client authentication are RECOMMENDED. > > > > Agree. That’s a reasonable ask. > > > > I think this could be fixed by requiring WSS, and the > web-based > > client > > authentication techniques described in this draft whenever > the > > signaling > > protocol is secured. The simplest way to describe that might > be to > > say > > that BFCP-websocket must use at least as strong protections > as the > > signaling channel. > > I will add the following line to the security > consideration > > section > > NEW: > > “Secure WebSocket (WSS) MUST be used for BCP when the > signalling > > channel used to exchange the BFCP parameters is secured. “ > > > > Is this ok ? > > That's moving in the right direction. However, the second > paragraph of > section 9 of draft-ietf-bfcpbis-rfc4582bis offers a little more > precision. Perhaps something like the following: > > "If the signaling or control protocol traffic used to set up the > conference is authenticated and confidentiality and integrity > protected, > Secure WebSocket (WSS) MUST be used, and the floor control server > MUST > authenticate the client." > > Proposed text looks good to me. I will use this. > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > > ---------------------------------------------------------------------- > > > > I appreciate the author's efforts in resolving the security > > considerations issues from Robert's Gen-ART review, but I > don't > > think the > > current text is quite there yet. Version 14 added the text > to say > > that, > > when using websockets, the websocket security mechanisms are > used > > instead > > of those from draft-ietf-bfcpbis-rfc4582bis. But Robert also > asked > > for > > the draft to describe how that change impacts the security > > analysis in > > draft-ietf-bfcpbis-rfc4582bis. I don't see text that does > that. > > I'd like > > to see, for each of the attacks described in > > draft-ietf-bfcpbis-rfc4582bis, text that says describes how > (or > > if) a > > similar attack would be mitigated using websocket. > > Here is the text I plan to add the security considerations > as a > > separate paragraph > > > > EXISTING: > > When using BFCP over websockets, the security mechanisms defined > in > > [draft-ietf-bfcpbis-rfc4592bis] are *not used*. Instead, the > > application > > is required to build and rely on the security mechanisms in > > [RFC6455] > > > > NEW: > > “When using BFCP over websockets, the security mechanisms > defined in > > [draft-ietf-bfcpbis-rfc4592bis] are *not used*. Instead, the > > application > > is required to build and rely on the security mechanisms in > > [RFC6455] > > > > This section analyses the threats described in Section 14 of > > [draft-ietf-bfcpbis-rfc4582bis] when WebSocket is > > used as transport protocol for BFCP. > > > > An attacker attempting to impersonate a floor control server is > > avoided by having servers accept BFCP messages over > > Secure WebSocket (WSS) only. As with any other web connection, > the > > clients will verify the servers certificate. > > The floor control WebSocket client MUST follow the procedures in > > [RFC7525] (including hostname verification > > as per section 6.1 in [RFC7525]) while setting up TLS connection > with > > floor control webSocket server. > > > > An attacker attempting to impersonate a floor control client is > > avoided by having servers accept BFCP messages > > over WSS only. As described in Section 10.5 of [RFC6455] the > floor > > control server can use any client authentication > > mechanism and follow the steps in Section 8 of this document. > > > > Attackers may attempt to modify messages exchanged by a client > and a > > floor control server. This can be prevented by having WSS > between > > client and server. > > > > An attacker trying to replay the messages is prevented by > > having floor control servers check that messages arriving > over a > > given WSS connection use an authorized user ID. > > > > Attackers may attempt to pick messages from the network to get > access > > I'm not sure what you mean by "pick messages". Are we talking > about > eavesdropping? > Yes. It is eavesdropping. How about this: > > NEW: > Attackers may eavesdrop on the network to get access to confidential > information between the floor control server and a > [………] > > Regards, > Ram > > > to confidential information between the floor control server > and a > > client (e.g., why a floor request was denied). In order to > ensure > > that > > BFCP users are getting the level of protection that they would > get > > using > > the BFCP protocol directly, applications need to have a way to > > control the websocket libraries to use encryption algorithms > specified > > in Section 7 > > of [draft-ietf-bfcpbis-rfc4582bis. Since the WebSocket API does > not > > have a way to > > allow an application to select the encryption algorithm to be > used, > > the protection > > level provided when WSS is used is limited to the underlying TLS > > algorithm used by WebSocket library.” > > > > > > Other than the minor comment above, that looks good to me. > > [...] From nobody Wed Feb 8 19:13:22 2017 Return-Path: X-Original-To: bfcpbis@ietf.org Delivered-To: bfcpbis@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F086D129571; Wed, 8 Feb 2017 19:13:16 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.42.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148660999697.4244.9091660008155077354.idtracker@ietfa.amsl.com> Date: Wed, 08 Feb 2017 19:13:16 -0800 Archived-At: Cc: bfcpbis@ietf.org Subject: [bfcpbis] I-D Action: draft-ietf-bfcpbis-bfcp-websocket-15.txt X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2017 03:13:17 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Binary Floor Control Protocol Bis of the IETF. Title : The WebSocket Protocol as a Transport for the Binary Floor Control Protocol (BFCP) Authors : Victor Pascual Antón Román Stéphane Cazeaux Gonzalo Salgueiro Ram Mohan Ravindranath Filename : draft-ietf-bfcpbis-bfcp-websocket-15.txt Pages : 14 Date : 2017-02-08 Abstract: The WebSocket protocol enables two-way realtime communication between clients and servers. This document specifies the use of Binary Floor Control Protocol(BFCP) as a new WebSocket sub-protocol enabling a reliable transport mechanism between BFCP entities in new scenarios. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-bfcp-websocket/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-bfcpbis-bfcp-websocket-15 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-bfcpbis-bfcp-websocket-15 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Feb 8 19:15:16 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 504B3129713; Wed, 8 Feb 2017 19:15:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bsxr10vazL5A; Wed, 8 Feb 2017 19:15:09 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 486C912970F; Wed, 8 Feb 2017 19:15:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14578; q=dns/txt; s=iport; t=1486610109; x=1487819709; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=peAx9iuG4Rag0XKKvnf/Ce7pQfkgNo5u5PWzychUWJU=; b=FtR3eUX9wufK5Qz330nUQnzIkk9x1ncEFUd8LgmcUTk++5Yom6VXg9aA 1aS5b/wxo9Y7D8vfylzZRFiSeZLaPy9UMzGrhALzxWFbPoB0xG/3aNOl8 IxjqRNtY0vcjFLcyytbgsUlvF3OaFir+RsAlybvf18HNF40qeLeFF7hYn 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DkAQAR3ptY/4QNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1FhgQkHg1KKCJFqH4gMixuCD4IMKoV4AhqCVT8YAQIBAQEBAQE?= =?us-ascii?q?BYiiEaQEBAQMBIxE0EQwEAgEGAhEDAQIBAgISFAICAh8RFQgIAgQBDQWJXAMNC?= =?us-ascii?q?A6SXp1OgiWHNw2ECgEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQuHRgiCYoJRRoE?= =?us-ascii?q?ZDhYHMQIODIIyLoIxAQSJAgqHfYRLhWQ4AYZsgyCDbIQZgXuFF4lzijSIXgEfO?= =?us-ascii?q?H5PFU0BhGiBSHUBhkEPF4EKE3kBAQE?= X-IronPort-AV: E=Sophos;i="5.35,349,1484006400"; d="scan'208";a="381423962" Received: from alln-core-10.cisco.com ([173.36.13.132]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 09 Feb 2017 03:15:07 +0000 Received: from XCH-RTP-018.cisco.com (xch-rtp-018.cisco.com [64.101.220.158]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v193F7aE003829 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 9 Feb 2017 03:15:07 GMT Received: from xch-rtp-017.cisco.com (64.101.220.157) by XCH-RTP-018.cisco.com (64.101.220.158) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 8 Feb 2017 22:15:06 -0500 Received: from xch-rtp-017.cisco.com ([64.101.220.157]) by XCH-RTP-017.cisco.com ([64.101.220.157]) with mapi id 15.00.1210.000; Wed, 8 Feb 2017 22:15:06 -0500 From: "Ram Mohan R (rmohanr)" To: Ben Campbell , The IESG Thread-Topic: Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) Thread-Index: AQHSceRTe5LJyE53MkeeyUi4LMDL1KFeiFwAgAGu7YCAAIQbAP//q3+AgABqxQA= Date: Thu, 9 Feb 2017 03:15:06 +0000 Message-ID: References: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> <08C20901-35F0-4AC8-A0CE-1361E73D25FC@nostrum.com> <18BB66FF-A435-4E69-9B9A-72F6AD2E8ABF@nostrum.com> In-Reply-To: <18BB66FF-A435-4E69-9B9A-72F6AD2E8ABF@nostrum.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.196.92.123] Content-Type: text/plain; charset="utf-8" Content-ID: <3E13E31C56C6F047AC5CB24B491B6E9D@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , "Charles Eckel \(eckelcu\)" , "bfcpbis-chairs@ietf.org" Subject: Re: [bfcpbis] Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2017 03:15:11 -0000 VGhhbmtzIEJlbi4NCg0KSSBqdXN0IHN1Ym1pdHRlZCBhIG5ldyByZXZpc2lvbiAtIGh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWJmY3BiaXMtYmZjcC13ZWJzb2NrZXQtMTUN CkRpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQt aWV0Zi1iZmNwYmlzLWJmY3Atd2Vic29ja2V0LTE1DQoNClJlZ2FyZHMsDQpSYW0NCg0KLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJlbiBDYW1wYmVsbCA8YmVuQG5vc3RydW0uY29t Pg0KRGF0ZTogVGh1cnNkYXksIDkgRmVicnVhcnkgMjAxNyBhdCA3OjUyIEFNDQpUbzogIlJhbSBN b2hhbiBSIChybW9oYW5yKSIgPHJtb2hhbnJAY2lzY28uY29tPg0KQ2M6IFRoZSBJRVNHIDxpZXNn QGlldGYub3JnPiwgImJmY3BiaXNAaWV0Zi5vcmciIDxiZmNwYmlzQGlldGYub3JnPiwgImRyYWZ0 LWlldGYtYmZjcGJpcy1iZmNwLXdlYnNvY2tldEBpZXRmLm9yZyIgPGRyYWZ0LWlldGYtYmZjcGJp cy1iZmNwLXdlYnNvY2tldEBpZXRmLm9yZz4sICJDaGFybGVzIEVja2VsIChlY2tlbGN1KSIgPGVj a2VsY3VAY2lzY28uY29tPiwgImJmY3BiaXMtY2hhaXJzQGlldGYub3JnIiA8YmZjcGJpcy1jaGFp cnNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogQmVuIENhbXBiZWxsJ3MgRGlzY3VzcyBvbiBkcmFm dC1pZXRmLWJmY3BiaXMtYmZjcC13ZWJzb2NrZXQtMTQ6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1F TlQpDQoNCiAgICBUaGlzIGFsbCBsb29rcyBnb29kIHRvIG1lLiBJIHdpbGwgcmVsZWFzZSB0aGUg RElTQ1VTUyB3aGVuIHlvdSBzdWJtaXQgDQogICAgdGhlIHJldmlzaW9uIHdpdGggdGhlIGNoYW5n ZXMuDQogICAgDQogICAgVGhhbmtzIQ0KICAgIA0KICAgIEJlbi4NCiAgICANCiAgICBPbiA4IEZl YiAyMDE3LCBhdCAxOTo1NSwgUmFtIE1vaGFuIFIgKHJtb2hhbnIpIHdyb3RlOg0KICAgIA0KICAg ID4gSGkgQmVuLA0KICAgID4NCiAgICA+IFRoYW5rcyBmb3IgeW91ciBmZWVkYmFjay4gUGxlYXNl IHNlZSBpbmxpbmUgPFJhbT4NCiAgICA+DQogICAgPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0t LQ0KICAgID4gRnJvbTogQmVuIENhbXBiZWxsIDxiZW5Abm9zdHJ1bS5jb20+DQogICAgPiBEYXRl OiBUaHVyc2RheSwgOSBGZWJydWFyeSAyMDE3IGF0IDU6MDIgQU0NCiAgICA+IFRvOiAiUmFtIE1v aGFuIFIgKHJtb2hhbnIpIiA8cm1vaGFuckBjaXNjby5jb20+DQogICAgPiBDYzogVGhlIElFU0cg PGllc2dAaWV0Zi5vcmc+LCAiYmZjcGJpc0BpZXRmLm9yZyIgPGJmY3BiaXNAaWV0Zi5vcmc+LCAN CiAgICA+ICJkcmFmdC1pZXRmLWJmY3BiaXMtYmZjcC13ZWJzb2NrZXRAaWV0Zi5vcmciIA0KICAg ID4gPGRyYWZ0LWlldGYtYmZjcGJpcy1iZmNwLXdlYnNvY2tldEBpZXRmLm9yZz4sICJDaGFybGVz IEVja2VsIA0KICAgID4gKGVja2VsY3UpIiA8ZWNrZWxjdUBjaXNjby5jb20+LCAiYmZjcGJpcy1j aGFpcnNAaWV0Zi5vcmciIA0KICAgID4gPGJmY3BiaXMtY2hhaXJzQGlldGYub3JnPg0KICAgID4g U3ViamVjdDogUmU6IEJlbiBDYW1wYmVsbCdzIERpc2N1c3Mgb24gDQogICAgPiBkcmFmdC1pZXRm LWJmY3BiaXMtYmZjcC13ZWJzb2NrZXQtMTQ6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQog ICAgPiBSZXNlbnQtRnJvbTogPGFsaWFzLWJvdW5jZXNAaWV0Zi5vcmc+DQogICAgPiBSZXNlbnQt VG86IDxhbnRvbi5yb21hbkBxdW9iaXMuY29tPiwgPHN0ZXBoYW5lLmNhemVhdXhAb3JhbmdlLmNv bT4sIA0KICAgID4gPGdzYWxndWVpQGNpc2NvLmNvbT4sIDxzZXJnaW8uZ2FyY2lhLm11cmlsbG9A Z21haWwuY29tPiwgDQogICAgPiA8cm1vaGFuckBjaXNjby5jb20+LCA8dmljdG9yLnBhc2N1YWwu YXZpbGFAb3JhY2xlLmNvbT4NCiAgICA+IFJlc2VudC1EYXRlOiBUaHVyc2RheSwgOSBGZWJydWFy eSAyMDE3IGF0IDU6MDIgQU0NCiAgICA+DQogICAgPiAgICAgVGhhbmtzIGZvciB0aGUgcmVzcG9u c2UuIFBsZWFzZSBzZWUgY29tbWVudHMgaW5saW5lLiBJIHdpbGwgZGVsZXRlDQogICAgPiAgICAg c2VjdGlvbnMgdGhhdCBzZWVtIHRvIGJlIHJlc29sdmVkLiAoQ29uc2lkZXIgbXkgcmVzcG9uc2Vz IHRvIHRoZW0gDQogICAgPiBhcw0KICAgID4gICAgICJPa2F5IikuDQogICAgPg0KICAgID4gICAg IFRoYW5rcyENCiAgICA+DQogICAgPiAgICAgQmVuLg0KICAgID4NCiAgICA+ICAgICBPbiA3IEZl YiAyMDE3LCBhdCAxMDoyMCwgUmFtIE1vaGFuIFIgKHJtb2hhbnIpIHdyb3RlOg0KICAgID4NCiAg ICA+ICAgICA+IEhpIEJlbiwNCiAgICA+ICAgICA+DQogICAgPiAgICAgPiBTb3JyeSBmb3IgZGVs YXkuIFBsZWFzZSBzZWUgaW5saW5lIDxSYW0+IGZvciBteSByZXNwb25zZXMNCiAgICA+ICAgICA+ DQogICAgPiAgICAgPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KICAgID4gICAgID4gRnJv bTogQmVuIENhbXBiZWxsIDxiZW5Abm9zdHJ1bS5jb20+DQogICAgPg0KICAgID4gICAgIFsuLi5d DQogICAgPg0KICAgID4gICAgID4NCiAgICA+ICAgICA+DQogICAgPiAgICAgPiAgICAgDQogICAg PiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQogICAgPiAgICAgPiAgICAgRElTQ1VTUzoNCiAgICA+ICAgICA+ICAg ICANCiAgICA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+ICAgICA+DQogICAgPiAgICAgPiAgICAgSSBw bGFuIHRvIGJhbGxvdCAieWVzIiBmb3IgdGhpcyBkb2N1bWVudCwgYnV0IEkgaGF2ZSBzb21lIA0K ICAgID4gY29uY2VybnMNCiAgICA+ICAgICA+IGFib3V0DQogICAgPiAgICAgPiAgICAgdGhlIHNl Y3VyaXR5IHByb3BlcnRpZXMgdGhhdCBJIHRoaW5rIG5lZWQgdG8gYmUgcmVzb2x2ZWQgDQogICAg PiBmaXJzdC4gSQ0KICAgID4gICAgID4gaGF2ZQ0KICAgID4gICAgID4gICAgIGZvbGxvd2VkIHRo ZSBkaXNjdXNzaW9uIHJlc3VsdGluZyBmcm9tIFJvYmVydCdzIEdlbi1BUlQgDQogICAgPiByZXZp ZXcNCiAgICA+ICAgICA+IChhbmQgd2lsbA0KICAgID4gICAgID4gICAgIGhhdmUgY29tbWVudHMg YWJvdXQgdGhhdCBpbiB0aGUgIkNPTU1FTlRTIHNlY3Rpb24iLCBidXQgSSANCiAgICA+IHRoaW5r IEkNCiAgICA+ICAgICA+IHNlZSBhbg0KICAgID4gICAgID4gICAgIGFkZGl0aW9uYWwgaXNzdWUg dGhhdCBoYXNuJ3QgYmVlbiBjb3ZlcmVkIGluIHRoYXQgDQogICAgPiBkaXNjdXNzaW9uLg0KICAg ID4gICAgID4NCiAgICA+ICAgICA+ICAgICBkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU4MmJpcyAo Y3VycmVudGx5IGluIHRoZSBSRkMgRWRpdG9ycyANCiAgICA+IHF1ZXVlKQ0KICAgID4gICAgID4g ICAgIGRlZmluZXMgc29tZSBzaXR1YXRpb25zIHdoZXJlIFRMUyBhbmQgY2xpZW50IGF1dGhlbnRp Y2F0aW9uIA0KICAgID4gYXJlDQogICAgPiAgICAgPiAgICAgbm9ybWF0aXZlbHkgcmVxdWlyZWQu IFNwZWNpZmljYWxseSwgc2VjdGlvbiA5IG9mIHRoYXQgZHJhZnQgDQogICAgPiBzYXlzDQogICAg PiAgICAgPiB0aGF0LCBpZg0KICAgID4gICAgID4gICAgIHRoZSBzaWduYWxpbmcgY2hhbm5lbCBp cyBhdXRoZW50aWNhdGVkIGFuZCBoYXMgDQogICAgPiBjb25maWRlbnRpYWxpdHkgYW5kDQogICAg PiAgICAgPiAgICAgaW50ZWdyaXR5IHByb3RlY3Rpb24sIHRoZSBCRkNQIGNsaWVudCBNVVNUIGJl IGF1dGhlbnRpY2F0ZWQuDQogICAgPiAgICAgPiBTZWN0aW9uIDE0DQogICAgPiAgICAgPiAgICAg YWRkaXRpb25hbGx5IHNheXMgdGhhdCB1bmRlciB0aG9zZSBjaXJjdW1zdGFuY2VzLCBCRkNQIGlz IA0KICAgID4gUkVRVUlSRUQNCiAgICA+ICAgICA+IHRvIHVzZQ0KICAgID4gICAgID4gICAgIHRo ZSBtYW5kYXRlZCBjcnlwdG9ncmFwaGljIGFsZ29yaXRobS4gQnV0IGJmY3Atd2Vic29ja2V0IA0K ICAgID4gb25seSBzYXlzDQogICAgPiAgICAgPiB0aGF0DQogICAgPiAgICAgPiAgICAgV1NTIGFu ZCBjbGllbnQgYXV0aGVudGljYXRpb24gYXJlIFJFQ09NTUVOREVELg0KICAgID4gICAgID4NCiAg ICA+ICAgICA+IDxSYW0+IEFncmVlLiBUaGF04oCZcyBhIHJlYXNvbmFibGUgYXNrLg0KICAgID4g ICAgID4NCiAgICA+ICAgICA+ICAgICBJIHRoaW5rIHRoaXMgY291bGQgYmUgZml4ZWQgYnkgcmVx dWlyaW5nIFdTUywgYW5kIHRoZSANCiAgICA+IHdlYi1iYXNlZA0KICAgID4gICAgID4gY2xpZW50 DQogICAgPiAgICAgPiAgICAgYXV0aGVudGljYXRpb24gdGVjaG5pcXVlcyBkZXNjcmliZWQgaW4g dGhpcyBkcmFmdCB3aGVuZXZlciANCiAgICA+IHRoZQ0KICAgID4gICAgID4gc2lnbmFsaW5nDQog ICAgPiAgICAgPiAgICAgcHJvdG9jb2wgaXMgc2VjdXJlZC4gVGhlIHNpbXBsZXN0IHdheSB0byBk ZXNjcmliZSB0aGF0IG1pZ2h0IA0KICAgID4gYmUgdG8NCiAgICA+ICAgICA+IHNheQ0KICAgID4g ICAgID4gICAgIHRoYXQgQkZDUC13ZWJzb2NrZXQgbXVzdCB1c2UgYXQgbGVhc3QgYXMgc3Ryb25n IHByb3RlY3Rpb25zIA0KICAgID4gYXMgdGhlDQogICAgPiAgICAgPiAgICAgc2lnbmFsaW5nIGNo YW5uZWwuDQogICAgPiAgICAgPiAgIDxSYW0+IEkgd2lsbCBhZGQgdGhlIGZvbGxvd2luZyBsaW5l IHRvIHRoZSBzZWN1cml0eSANCiAgICA+IGNvbnNpZGVyYXRpb24NCiAgICA+ICAgICA+IHNlY3Rp b24NCiAgICA+ICAgICA+IE5FVzoNCiAgICA+ICAgICA+IOKAnFNlY3VyZSBXZWJTb2NrZXQgKFdT UykgTVVTVCBiZSB1c2VkIGZvciBCQ1Agd2hlbiB0aGUgDQogICAgPiBzaWduYWxsaW5nDQogICAg PiAgICAgPiBjaGFubmVsIHVzZWQgdG8gZXhjaGFuZ2UgdGhlIEJGQ1AgcGFyYW1ldGVycyBpcyBz ZWN1cmVkLiDigJwNCiAgICA+ICAgICA+DQogICAgPiAgICAgPiBJcyB0aGlzIG9rID8NCiAgICA+ DQogICAgPiAgICAgVGhhdCdzIG1vdmluZyBpbiB0aGUgcmlnaHQgZGlyZWN0aW9uLiBIb3dldmVy LCB0aGUgc2Vjb25kIA0KICAgID4gcGFyYWdyYXBoIG9mDQogICAgPiAgICAgc2VjdGlvbiA5IG9m IGRyYWZ0LWlldGYtYmZjcGJpcy1yZmM0NTgyYmlzIG9mZmVycyBhIGxpdHRsZSBtb3JlDQogICAg PiAgICAgcHJlY2lzaW9uLiBQZXJoYXBzIHNvbWV0aGluZyBsaWtlIHRoZSBmb2xsb3dpbmc6DQog ICAgPg0KICAgID4gICAgICJJZiB0aGUgc2lnbmFsaW5nIG9yIGNvbnRyb2wgcHJvdG9jb2wgdHJh ZmZpYyB1c2VkIHRvIHNldCB1cCB0aGUNCiAgICA+ICAgICBjb25mZXJlbmNlIGlzIGF1dGhlbnRp Y2F0ZWQgYW5kIGNvbmZpZGVudGlhbGl0eSBhbmQgaW50ZWdyaXR5IA0KICAgID4gcHJvdGVjdGVk LA0KICAgID4gICAgIFNlY3VyZSBXZWJTb2NrZXQgKFdTUykgTVVTVCBiZSB1c2VkLCBhbmQgdGhl IGZsb29yIGNvbnRyb2wgc2VydmVyIA0KICAgID4gTVVTVA0KICAgID4gICAgIGF1dGhlbnRpY2F0 ZSB0aGUgY2xpZW50LiINCiAgICA+DQogICAgPiA8UmFtPiBQcm9wb3NlZCB0ZXh0IGxvb2tzIGdv b2QgdG8gbWUuIEkgd2lsbCB1c2UgdGhpcy4NCiAgICA+DQogICAgPiAgICAgPg0KICAgID4gICAg ID4gICAgIA0KICAgID4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgID4gICAgID4gICAgIENPTU1FTlQ6DQog ICAgPiAgICAgPiAgICAgDQogICAgPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICAgPiAgICAgPg0KICAgID4g ICAgID4gICAgIEkgYXBwcmVjaWF0ZSB0aGUgYXV0aG9yJ3MgZWZmb3J0cyBpbiByZXNvbHZpbmcg dGhlIHNlY3VyaXR5DQogICAgPiAgICAgPiAgICAgY29uc2lkZXJhdGlvbnMgaXNzdWVzIGZyb20g Um9iZXJ0J3MgR2VuLUFSVCByZXZpZXcsIGJ1dCBJIA0KICAgID4gZG9uJ3QNCiAgICA+ICAgICA+ IHRoaW5rIHRoZQ0KICAgID4gICAgID4gICAgIGN1cnJlbnQgdGV4dCBpcyBxdWl0ZSB0aGVyZSB5 ZXQuIFZlcnNpb24gMTQgYWRkZWQgdGhlIHRleHQgDQogICAgPiB0byBzYXkNCiAgICA+ICAgICA+ IHRoYXQsDQogICAgPiAgICAgPiAgICAgd2hlbiB1c2luZyB3ZWJzb2NrZXRzLCB0aGUgd2Vic29j a2V0IHNlY3VyaXR5IG1lY2hhbmlzbXMgYXJlIA0KICAgID4gdXNlZA0KICAgID4gICAgID4gaW5z dGVhZA0KICAgID4gICAgID4gICAgIG9mIHRob3NlIGZyb20gZHJhZnQtaWV0Zi1iZmNwYmlzLXJm YzQ1ODJiaXMuIEJ1dCBSb2JlcnQgYWxzbyANCiAgICA+IGFza2VkDQogICAgPiAgICAgPiBmb3IN CiAgICA+ICAgICA+ICAgICB0aGUgZHJhZnQgdG8gZGVzY3JpYmUgaG93IHRoYXQgY2hhbmdlIGlt cGFjdHMgdGhlIHNlY3VyaXR5DQogICAgPiAgICAgPiBhbmFseXNpcyBpbg0KICAgID4gICAgID4g ICAgIGRyYWZ0LWlldGYtYmZjcGJpcy1yZmM0NTgyYmlzLiBJIGRvbid0IHNlZSB0ZXh0IHRoYXQg ZG9lcyANCiAgICA+IHRoYXQuDQogICAgPiAgICAgPiBJJ2QgbGlrZQ0KICAgID4gICAgID4gICAg IHRvIHNlZSwgZm9yIGVhY2ggb2YgdGhlIGF0dGFja3MgZGVzY3JpYmVkIGluDQogICAgPiAgICAg PiAgICAgZHJhZnQtaWV0Zi1iZmNwYmlzLXJmYzQ1ODJiaXMsIHRleHQgdGhhdCBzYXlzIGRlc2Ny aWJlcyBob3cgDQogICAgPiAob3INCiAgICA+ICAgICA+IGlmKSBhDQogICAgPiAgICAgPiAgICAg c2ltaWxhciBhdHRhY2sgd291bGQgYmUgbWl0aWdhdGVkIHVzaW5nIHdlYnNvY2tldC4NCiAgICA+ ICAgICA+IDxSYW0+IEhlcmUgaXMgdGhlIHRleHQgSSBwbGFuIHRvIGFkZCB0aGUgc2VjdXJpdHkg Y29uc2lkZXJhdGlvbnMgDQogICAgPiBhcyBhDQogICAgPiAgICAgPiBzZXBhcmF0ZSBwYXJhZ3Jh cGgNCiAgICA+ICAgICA+DQogICAgPiAgICAgPiBFWElTVElORzoNCiAgICA+ICAgICA+IFdoZW4g dXNpbmcgQkZDUCBvdmVyIHdlYnNvY2tldHMsIHRoZSBzZWN1cml0eSBtZWNoYW5pc21zIGRlZmlu ZWQgDQogICAgPiBpbg0KICAgID4gICAgID4gICAgIFtkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU5 MmJpc10gYXJlICpub3QgdXNlZCouIEluc3RlYWQsIHRoZQ0KICAgID4gICAgID4gYXBwbGljYXRp b24NCiAgICA+ICAgICA+ICAgICBpcyByZXF1aXJlZCB0byBidWlsZCBhbmQgcmVseSBvbiB0aGUg c2VjdXJpdHkgbWVjaGFuaXNtcyBpbg0KICAgID4gICAgID4gW1JGQzY0NTVdDQogICAgPiAgICAg Pg0KICAgID4gICAgID4gTkVXOg0KICAgID4gICAgID4g4oCcV2hlbiB1c2luZyBCRkNQIG92ZXIg d2Vic29ja2V0cywgdGhlIHNlY3VyaXR5IG1lY2hhbmlzbXMgDQogICAgPiBkZWZpbmVkIGluDQog ICAgPiAgICAgPiAgICAgW2RyYWZ0LWlldGYtYmZjcGJpcy1yZmM0NTkyYmlzXSBhcmUgKm5vdCB1 c2VkKi4gSW5zdGVhZCwgdGhlDQogICAgPiAgICAgPiBhcHBsaWNhdGlvbg0KICAgID4gICAgID4g ICAgIGlzIHJlcXVpcmVkIHRvIGJ1aWxkIGFuZCByZWx5IG9uIHRoZSBzZWN1cml0eSBtZWNoYW5p c21zIGluDQogICAgPiAgICAgPiBbUkZDNjQ1NV0NCiAgICA+ICAgICA+DQogICAgPiAgICAgPiBU aGlzIHNlY3Rpb24gYW5hbHlzZXMgdGhlIHRocmVhdHMgZGVzY3JpYmVkIGluIFNlY3Rpb24gMTQg b2YNCiAgICA+ICAgICA+IFtkcmFmdC1pZXRmLWJmY3BiaXMtcmZjNDU4MmJpc10gd2hlbiBXZWJT b2NrZXQgaXMNCiAgICA+ICAgICA+IHVzZWQgYXMgdHJhbnNwb3J0IHByb3RvY29sIGZvciBCRkNQ Lg0KICAgID4gICAgID4NCiAgICA+ICAgICA+IEFuIGF0dGFja2VyIGF0dGVtcHRpbmcgdG8gaW1w ZXJzb25hdGUgYSBmbG9vciBjb250cm9sIHNlcnZlciBpcw0KICAgID4gICAgID4gYXZvaWRlZCBi eSBoYXZpbmcgc2VydmVycyBhY2NlcHQgQkZDUCBtZXNzYWdlcyBvdmVyDQogICAgPiAgICAgPiBT ZWN1cmUgV2ViU29ja2V0IChXU1MpIG9ubHkuIEFzIHdpdGggYW55IG90aGVyIHdlYiBjb25uZWN0 aW9uLCANCiAgICA+IHRoZQ0KICAgID4gICAgID4gY2xpZW50cyB3aWxsIHZlcmlmeSB0aGUgc2Vy dmVycyBjZXJ0aWZpY2F0ZS4NCiAgICA+ICAgICA+IFRoZSBmbG9vciBjb250cm9sIFdlYlNvY2tl dCBjbGllbnQgTVVTVCBmb2xsb3cgdGhlIHByb2NlZHVyZXMgaW4NCiAgICA+ICAgICA+IFtSRkM3 NTI1XSAoaW5jbHVkaW5nIGhvc3RuYW1lIHZlcmlmaWNhdGlvbg0KICAgID4gICAgID4gYXMgcGVy IHNlY3Rpb24gNi4xIGluIFtSRkM3NTI1XSkgd2hpbGUgc2V0dGluZyB1cCBUTFMgY29ubmVjdGlv biANCiAgICA+IHdpdGgNCiAgICA+ICAgICA+IGZsb29yIGNvbnRyb2wgd2ViU29ja2V0IHNlcnZl ci4NCiAgICA+ICAgICA+DQogICAgPiAgICAgPiBBbiBhdHRhY2tlciBhdHRlbXB0aW5nIHRvIGlt cGVyc29uYXRlIGEgZmxvb3IgY29udHJvbCBjbGllbnQgaXMNCiAgICA+ICAgICA+IGF2b2lkZWQg YnkgaGF2aW5nIHNlcnZlcnMgYWNjZXB0IEJGQ1AgbWVzc2FnZXMNCiAgICA+ICAgICA+IG92ZXIg V1NTIG9ubHkuIEFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDEwLjUgb2YgW1JGQzY0NTVdIHRoZSAN CiAgICA+IGZsb29yDQogICAgPiAgICAgPiBjb250cm9sIHNlcnZlciBjYW4gdXNlIGFueSBjbGll bnQgYXV0aGVudGljYXRpb24NCiAgICA+ICAgICA+IG1lY2hhbmlzbSBhbmQgZm9sbG93IHRoZSBz dGVwcyBpbiBTZWN0aW9uIDggb2YgdGhpcyBkb2N1bWVudC4NCiAgICA+ICAgICA+DQogICAgPiAg ICAgPiBBdHRhY2tlcnMgbWF5IGF0dGVtcHQgdG8gbW9kaWZ5IG1lc3NhZ2VzIGV4Y2hhbmdlZCBi eSBhIGNsaWVudCANCiAgICA+IGFuZCBhDQogICAgPiAgICAgPiAgICBmbG9vciBjb250cm9sIHNl cnZlci4gVGhpcyBjYW4gYmUgcHJldmVudGVkIGJ5IGhhdmluZyBXU1MgDQogICAgPiBiZXR3ZWVu DQogICAgPiAgICAgPiBjbGllbnQgYW5kIHNlcnZlci4NCiAgICA+ICAgICA+DQogICAgPiAgICAg PiBBbiBhdHRhY2tlciB0cnlpbmcgdG8gcmVwbGF5IHRoZSBtZXNzYWdlcyBpcyBwcmV2ZW50ZWQg YnkNCiAgICA+ICAgICA+ICAgIGhhdmluZyBmbG9vciBjb250cm9sIHNlcnZlcnMgY2hlY2sgdGhh dCBtZXNzYWdlcyBhcnJpdmluZyANCiAgICA+IG92ZXIgYQ0KICAgID4gICAgID4gICAgZ2l2ZW4g V1NTIGNvbm5lY3Rpb24gdXNlIGFuIGF1dGhvcml6ZWQgdXNlciBJRC4NCiAgICA+ICAgICA+DQog ICAgPiAgICAgPiBBdHRhY2tlcnMgbWF5IGF0dGVtcHQgdG8gcGljayBtZXNzYWdlcyBmcm9tIHRo ZSBuZXR3b3JrIHRvIGdldCANCiAgICA+IGFjY2Vzcw0KICAgID4NCiAgICA+ICAgICBJJ20gbm90 IHN1cmUgd2hhdCB5b3UgbWVhbiBieSAicGljayBtZXNzYWdlcyIuIEFyZSB3ZSB0YWxraW5nIA0K ICAgID4gYWJvdXQNCiAgICA+ICAgICBlYXZlc2Ryb3BwaW5nPw0KICAgID4gWWVzLiAgSXQgaXMg ZWF2ZXNkcm9wcGluZy4gSG93IGFib3V0IHRoaXM6DQogICAgPg0KICAgID4gTkVXOg0KICAgID4g QXR0YWNrZXJzIG1heSBlYXZlc2Ryb3Agb24gdGhlIG5ldHdvcmsgdG8gZ2V0IGFjY2VzcyB0byBj b25maWRlbnRpYWwgDQogICAgPiBpbmZvcm1hdGlvbiBiZXR3ZWVuIHRoZSBmbG9vciBjb250cm9s IHNlcnZlciBhbmQgYQ0KICAgID4gW+KApuKApuKApl0NCiAgICA+DQogICAgPiBSZWdhcmRzLA0K ICAgID4gUmFtDQogICAgPg0KICAgID4gICAgID4gICAgdG8gY29uZmlkZW50aWFsIGluZm9ybWF0 aW9uIGJldHdlZW4gdGhlIGZsb29yIGNvbnRyb2wgc2VydmVyIA0KICAgID4gYW5kIGENCiAgICA+ ICAgICA+ICAgIGNsaWVudCAoZS5nLiwgd2h5IGEgZmxvb3IgcmVxdWVzdCB3YXMgZGVuaWVkKS4g IEluIG9yZGVyIHRvIA0KICAgID4gZW5zdXJlDQogICAgPiAgICAgPiB0aGF0DQogICAgPiAgICAg PiBCRkNQIHVzZXJzIGFyZSBnZXR0aW5nIHRoZSBsZXZlbCBvZiBwcm90ZWN0aW9uIHRoYXQgdGhl eSB3b3VsZCANCiAgICA+IGdldA0KICAgID4gICAgID4gdXNpbmcNCiAgICA+ICAgICA+IHRoZSBC RkNQIHByb3RvY29sIGRpcmVjdGx5LCBhcHBsaWNhdGlvbnMgbmVlZCB0byBoYXZlIGEgd2F5IHRv DQogICAgPiAgICAgPiBjb250cm9sIHRoZSB3ZWJzb2NrZXQgbGlicmFyaWVzIHRvIHVzZSBlbmNy eXB0aW9uIGFsZ29yaXRobXMgDQogICAgPiBzcGVjaWZpZWQNCiAgICA+ICAgICA+IGluIFNlY3Rp b24gNw0KICAgID4gICAgID4gb2YgW2RyYWZ0LWlldGYtYmZjcGJpcy1yZmM0NTgyYmlzLiBTaW5j ZSAgdGhlIFdlYlNvY2tldCBBUEkgZG9lcyANCiAgICA+IG5vdA0KICAgID4gICAgID4gaGF2ZSBh IHdheSB0bw0KICAgID4gICAgID4gYWxsb3cgYW4gYXBwbGljYXRpb24gdG8gc2VsZWN0IHRoZSBl bmNyeXB0aW9uIGFsZ29yaXRobSB0byBiZSANCiAgICA+IHVzZWQsDQogICAgPiAgICAgPiB0aGUg cHJvdGVjdGlvbg0KICAgID4gICAgID4gbGV2ZWwgcHJvdmlkZWQgd2hlbiBXU1MgaXMgdXNlZCBp cyBsaW1pdGVkIHRvIHRoZSB1bmRlcmx5aW5nIFRMUw0KICAgID4gICAgID4gYWxnb3JpdGhtIHVz ZWQgYnkgV2ViU29ja2V0IGxpYnJhcnku4oCdDQogICAgPiAgICAgPg0KICAgID4gICAgID4NCiAg ICA+DQogICAgPiAgICAgT3RoZXIgdGhhbiB0aGUgbWlub3IgY29tbWVudCBhYm92ZSwgdGhhdCBs b29rcyBnb29kIHRvIG1lLg0KICAgID4NCiAgICA+ICAgICBbLi4uXQ0KICAgIA0KDQo= From nobody Wed Feb 8 19:17:58 2017 Return-Path: X-Original-To: bfcpbis@ietf.org Delivered-To: bfcpbis@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 61AF5129A9C; Wed, 8 Feb 2017 19:17:56 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Ben Campbell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.42.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148661027637.4310.904760402138537564.idtracker@ietfa.amsl.com> Date: Wed, 08 Feb 2017 19:17:56 -0800 Archived-At: Cc: bfcpbis@ietf.org, draft-ietf-bfcpbis-bfcp-websocket@ietf.org, eckelcu@cisco.com, bfcpbis-chairs@ietf.org Subject: [bfcpbis] Ben Campbell's Yes on draft-ietf-bfcpbis-bfcp-websocket-15: (with COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2017 03:17:56 -0000 Ben Campbell has entered the following ballot position for draft-ietf-bfcpbis-bfcp-websocket-15: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-bfcp-websocket/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for addressing my DISCUSS points and other comments! From nobody Wed Feb 8 19:18:43 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AF44129E7E; Wed, 8 Feb 2017 19:18:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8ttzQqOhJ1N1; Wed, 8 Feb 2017 19:18:38 -0800 (PST) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CDAF129E6B; Wed, 8 Feb 2017 19:18:38 -0800 (PST) Received: from [10.0.1.39] (cpe-66-25-7-22.tx.res.rr.com [66.25.7.22]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id v193IZ0Z097049 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 8 Feb 2017 21:18:36 -0600 (CST) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-66-25-7-22.tx.res.rr.com [66.25.7.22] claimed to be [10.0.1.39] From: "Ben Campbell" To: "Ram Mohan R" Date: Wed, 08 Feb 2017 21:18:35 -0600 Message-ID: In-Reply-To: References: <148478285523.2190.2128906462944738445.idtracker@ietfa.amsl.com> <08C20901-35F0-4AC8-A0CE-1361E73D25FC@nostrum.com> <18BB66FF-A435-4E69-9B9A-72F6AD2E8ABF@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.6r5344) Archived-At: Cc: "bfcpbis@ietf.org" , "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" , The IESG , "bfcpbis-chairs@ietf.org" , Charles Eckel Subject: Re: [bfcpbis] Ben Campbell's Discuss on draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2017 03:18:40 -0000 Thanks! I just cleared the DISCUSS. Ben. On 8 Feb 2017, at 21:15, Ram Mohan R (rmohanr) wrote: > Thanks Ben. > > I just submitted a new revision - > https://tools.ietf.org/html/draft-ietf-bfcpbis-bfcp-websocket-15 > Diff: > https://www.ietf.org/rfcdiff?url2=draft-ietf-bfcpbis-bfcp-websocket-15 > > Regards, > Ram > > -----Original Message----- > From: Ben Campbell > Date: Thursday, 9 February 2017 at 7:52 AM > To: "Ram Mohan R (rmohanr)" > Cc: The IESG , "bfcpbis@ietf.org" , > "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" > , "Charles Eckel > (eckelcu)" , "bfcpbis-chairs@ietf.org" > > Subject: Re: Ben Campbell's Discuss on > draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) > > This all looks good to me. I will release the DISCUSS when you > submit > the revision with the changes. > > Thanks! > > Ben. > > On 8 Feb 2017, at 19:55, Ram Mohan R (rmohanr) wrote: > > > Hi Ben, > > > > Thanks for your feedback. Please see inline > > > > -----Original Message----- > > From: Ben Campbell > > Date: Thursday, 9 February 2017 at 5:02 AM > > To: "Ram Mohan R (rmohanr)" > > Cc: The IESG , "bfcpbis@ietf.org" > , > > "draft-ietf-bfcpbis-bfcp-websocket@ietf.org" > > , "Charles Eckel > > (eckelcu)" , "bfcpbis-chairs@ietf.org" > > > > Subject: Re: Ben Campbell's Discuss on > > draft-ietf-bfcpbis-bfcp-websocket-14: (with DISCUSS and COMMENT) > > Resent-From: > > Resent-To: , > , > > , , > > , > > Resent-Date: Thursday, 9 February 2017 at 5:02 AM > > > > Thanks for the response. Please see comments inline. I will > delete > > sections that seem to be resolved. (Consider my responses to > them > > as > > "Okay"). > > > > Thanks! > > > > Ben. > > > > On 7 Feb 2017, at 10:20, Ram Mohan R (rmohanr) wrote: > > > > > Hi Ben, > > > > > > Sorry for delay. Please see inline for my responses > > > > > > -----Original Message----- > > > From: Ben Campbell > > > > [...] > > > > > > > > > > > > > > ---------------------------------------------------------------------- > > > DISCUSS: > > > > > > ---------------------------------------------------------------------- > > > > > > I plan to ballot "yes" for this document, but I have > some > > concerns > > > about > > > the security properties that I think need to be > resolved > > first. I > > > have > > > followed the discussion resulting from Robert's > Gen-ART > > review > > > (and will > > > have comments about that in the "COMMENTS section", > but I > > think I > > > see an > > > additional issue that hasn't been covered in that > > discussion. > > > > > > draft-ietf-bfcpbis-rfc4582bis (currently in the RFC > Editors > > queue) > > > defines some situations where TLS and client > authentication > > are > > > normatively required. Specifically, section 9 of that > draft > > says > > > that, if > > > the signaling channel is authenticated and has > > confidentiality and > > > integrity protection, the BFCP client MUST be > authenticated. > > > Section 14 > > > additionally says that under those circumstances, BFCP > is > > REQUIRED > > > to use > > > the mandated cryptographic algorithm. But > bfcp-websocket > > only says > > > that > > > WSS and client authentication are RECOMMENDED. > > > > > > Agree. That’s a reasonable ask. > > > > > > I think this could be fixed by requiring WSS, and the > > web-based > > > client > > > authentication techniques described in this draft > whenever > > the > > > signaling > > > protocol is secured. The simplest way to describe that > might > > be to > > > say > > > that BFCP-websocket must use at least as strong > protections > > as the > > > signaling channel. > > > I will add the following line to the security > > consideration > > > section > > > NEW: > > > “Secure WebSocket (WSS) MUST be used for BCP when the > > signalling > > > channel used to exchange the BFCP parameters is secured. > “ > > > > > > Is this ok ? > > > > That's moving in the right direction. However, the second > > paragraph of > > section 9 of draft-ietf-bfcpbis-rfc4582bis offers a little > more > > precision. Perhaps something like the following: > > > > "If the signaling or control protocol traffic used to set up > the > > conference is authenticated and confidentiality and > integrity > > protected, > > Secure WebSocket (WSS) MUST be used, and the floor control > server > > MUST > > authenticate the client." > > > > Proposed text looks good to me. I will use this. > > > > > > > > > > > ---------------------------------------------------------------------- > > > COMMENT: > > > > > > ---------------------------------------------------------------------- > > > > > > I appreciate the author's efforts in resolving the > security > > > considerations issues from Robert's Gen-ART review, > but I > > don't > > > think the > > > current text is quite there yet. Version 14 added the > text > > to say > > > that, > > > when using websockets, the websocket security > mechanisms are > > used > > > instead > > > of those from draft-ietf-bfcpbis-rfc4582bis. But > Robert also > > asked > > > for > > > the draft to describe how that change impacts the > security > > > analysis in > > > draft-ietf-bfcpbis-rfc4582bis. I don't see text that > does > > that. > > > I'd like > > > to see, for each of the attacks described in > > > draft-ietf-bfcpbis-rfc4582bis, text that says > describes how > > (or > > > if) a > > > similar attack would be mitigated using websocket. > > > Here is the text I plan to add the security > considerations > > as a > > > separate paragraph > > > > > > EXISTING: > > > When using BFCP over websockets, the security mechanisms > defined > > in > > > [draft-ietf-bfcpbis-rfc4592bis] are *not used*. > Instead, the > > > application > > > is required to build and rely on the security > mechanisms in > > > [RFC6455] > > > > > > NEW: > > > “When using BFCP over websockets, the security > mechanisms > > defined in > > > [draft-ietf-bfcpbis-rfc4592bis] are *not used*. > Instead, the > > > application > > > is required to build and rely on the security > mechanisms in > > > [RFC6455] > > > > > > This section analyses the threats described in Section 14 > of > > > [draft-ietf-bfcpbis-rfc4582bis] when WebSocket is > > > used as transport protocol for BFCP. > > > > > > An attacker attempting to impersonate a floor control > server is > > > avoided by having servers accept BFCP messages over > > > Secure WebSocket (WSS) only. As with any other web > connection, > > the > > > clients will verify the servers certificate. > > > The floor control WebSocket client MUST follow the > procedures in > > > [RFC7525] (including hostname verification > > > as per section 6.1 in [RFC7525]) while setting up TLS > connection > > with > > > floor control webSocket server. > > > > > > An attacker attempting to impersonate a floor control > client is > > > avoided by having servers accept BFCP messages > > > over WSS only. As described in Section 10.5 of [RFC6455] > the > > floor > > > control server can use any client authentication > > > mechanism and follow the steps in Section 8 of this > document. > > > > > > Attackers may attempt to modify messages exchanged by a > client > > and a > > > floor control server. This can be prevented by having > WSS > > between > > > client and server. > > > > > > An attacker trying to replay the messages is prevented by > > > having floor control servers check that messages > arriving > > over a > > > given WSS connection use an authorized user ID. > > > > > > Attackers may attempt to pick messages from the network to > get > > access > > > > I'm not sure what you mean by "pick messages". Are we > talking > > about > > eavesdropping? > > Yes. It is eavesdropping. How about this: > > > > NEW: > > Attackers may eavesdrop on the network to get access to > confidential > > information between the floor control server and a > > [………] > > > > Regards, > > Ram > > > > > to confidential information between the floor control > server > > and a > > > client (e.g., why a floor request was denied). In > order to > > ensure > > > that > > > BFCP users are getting the level of protection that they > would > > get > > > using > > > the BFCP protocol directly, applications need to have a > way to > > > control the websocket libraries to use encryption > algorithms > > specified > > > in Section 7 > > > of [draft-ietf-bfcpbis-rfc4582bis. Since the WebSocket > API does > > not > > > have a way to > > > allow an application to select the encryption algorithm to > be > > used, > > > the protection > > > level provided when WSS is used is limited to the > underlying TLS > > > algorithm used by WebSocket library.” > > > > > > > > > > Other than the minor comment above, that looks good to me. > > > > [...] From nobody Fri Feb 10 14:18:43 2017 Return-Path: X-Original-To: bfcpbis@ietfa.amsl.com Delivered-To: bfcpbis@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A002A129BC4 for ; Fri, 10 Feb 2017 14:18:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.523 X-Spam-Level: X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id giMeHFJG8wqD for ; Fri, 10 Feb 2017 14:18:40 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 130221294A6 for ; Fri, 10 Feb 2017 14:18:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4608; q=dns/txt; s=iport; t=1486765119; x=1487974719; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=K6w1a57po7nNbwB/OVc6ndv1yig/yLzlhJcEbuIYOtM=; b=bEKkzNwywU3VsddcxVVEKqaxau9OLFsehJwWhqTESFqfEtCG7adIn3s6 WUy4gkHwOXMUlj3Cl5tYp85rezmwpY2KRfIY6cnJttN45GsJxh039y4ek l1OnlzrW1loPK9wgOjeBMLUi2CNgHHaYFL4G7uF+y0R9lmI1+12krQpjp c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CpAQAAO55Y/5BdJa1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1JhgQkHg1KKCJFvH5U2gg0fDYUsSgIagmE/GAECAQEBAQEBAWI?= =?us-ascii?q?ohGkBAQECAQEBASEROhcEAgEIEQMBAgECAiYCAgIlCxUICAIEARKJcAgOsB6CJ?= =?us-ascii?q?YtNAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWBC4dGCIJihD4WgwYugjEFm3IBiUe?= =?us-ascii?q?ITJEFkxQBHzh+TxU8EQGEMh2BYXUBiRGBDAEBAQ?= X-IronPort-AV: E=Sophos;i="5.35,142,1484006400"; d="scan'208";a="210965715" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 10 Feb 2017 22:18:39 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id v1AMIdEp015667 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 10 Feb 2017 22:18:39 GMT Received: from xch-aln-018.cisco.com (173.36.7.28) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 10 Feb 2017 16:18:38 -0600 Received: from xch-aln-018.cisco.com ([173.36.7.28]) by XCH-ALN-018.cisco.com ([173.36.7.28]) with mapi id 15.00.1210.000; Fri, 10 Feb 2017 16:18:38 -0600 From: "Charles Eckel (eckelcu)" To: Paul Kyzivat , "bfcpbis@ietf.org" Thread-Topic: [bfcpbis] BFCP with ICE: MIT transport? Thread-Index: AQHSfiVV0aSrIRIXRkiZpc7GuImHX6FX63MAgArN/AA= Date: Fri, 10 Feb 2017 22:18:38 +0000 Message-ID: <41AE491F-9718-4855-8253-107B2A12CBBD@cisco.com> References: <496d6961-9762-e227-a66e-a34c27b9d307@comcast.net> In-Reply-To: <496d6961-9762-e227-a66e-a34c27b9d307@comcast.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1e.0.170107 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.20.182.35] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [bfcpbis] BFCP with ICE: MIT transport? X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Feb 2017 22:18:41 -0000 QXMgYW4gaW5kaXZpZHVhbCwgSSB0aGluayBBbHQjMiBpcyBmaW5lIGZvciBCRkNQIGFuZCB3ZSBk byBub3QgbmVlZCB0byBkZWZpbmUgYSBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IHRyYW5zcG9ydCB3 aGVuIHVzaW5nIElDRS4NCg0KQ2hlZXJzLA0KQ2hhcmxlcyANCg0KLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCkZyb206IGJmY3BiaXMgPGJmY3BiaXMtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVo YWxmIG9mIFBhdWwgS3l6aXZhdCA8cGF1bC5reXppdmF0QGNvbWNhc3QubmV0Pg0KRGF0ZTogRnJp ZGF5LCBGZWJydWFyeSAzLCAyMDE3IGF0IDk6MTggQU0NClRvOiAiYmZjcGJpc0BpZXRmLm9yZyIg PGJmY3BiaXNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW2JmY3BiaXNdIEJGQ1Agd2l0aCBJQ0U6 IE1JVCB0cmFuc3BvcnQ/DQoNCiAgICBPbiAyLzMvMTcgODo1NiBBTSwgQ2hyaXN0ZXIgSG9sbWJl cmcgd3JvdGU6DQogICAgPg0KICAgID4gSGksDQogICAgPg0KICAgID4gRHVyaW5nIHRoZSBNTVVT SUMgc2Vzc2lvbiBpbiBTZW91bCB3ZSBkaXNjdXNzZWQgYSBudW1iZXIgb2YgaXNzdWVzDQogICAg PiByZWxhdGVkIHRvIElDRS1TRFAuIFdlIG1hZGUgc29tZSBkZWNpc2lvbnMsIGFuZCBJIGdvdCBh Y3Rpb24gcG9pbnRzIHRvDQogICAgPiB2ZXJpZnkgb25lIG9mIHRob3NlIG9uIHRoZSBsaXN0Lg0K ICAgID4NCiAgICA+IE9uZSBvZiB0aG9zZSBpc3N1ZXMgYWZmZWN0IEJGQ1AsIHdoZW4gdXNlZCB3 aXRoIElDRS4NCiAgICA+DQogICAgPiBFeGFtcGxlOg0KICAgID4NCiAgICA+IEJGQ1AgY2xpZW50 IEEgc3VwcG9ydHMgYm90aCBVRFAgYW5kIFRDUCwgc2VuZHMgYW4gU0RQIG9mZmVyIHdpdGggVURQ DQogICAgPiBwcm90byBpbiB0aGUgU0RQIG0tIGxpbmUuIFRoZSBUQ1Agb3B0aW9uIGlzIGdpdmVu IGFzIGFuIElDRSBjYW5kaWRhdGUuDQogICAgPg0KICAgID4gQkZDUCBzZXJ2ZXIgQiBvbmx5IHN1 cHBvcnRzIFRDUC4NCiAgICANCiAgICBXaGVuIHdlIHRhbGsgYWJvdXQgYSBCRkNQIGltcGxlbWVu dGF0aW9uIHN1cHBvcnRpbmcgVENQIEkgdGhpbmsgd2UgbWVhbiANCiAgICB0aGUgQkZDUCB0aGF0 IHJ1bnMgZGlyZWN0bHkgb3ZlciBUQ1AuDQogICAgDQogICAgQnV0IHdoZW4gdGFsayBhYm91dCBJ Q0Ugb3ZlciBUQ1AgSSB0aGluayB3ZSBhcmUgdGFsa2luZyBhYm91dCBVRFAgDQogICAgcGFja2V0 cyBmcmFtZWQgb3ZlciBUQ1AuIFRoYXQgaXMgcmVhbGx5IHNvbWV0aGluZyBkaWZmZXJlbnQgdGhh dCB0aGUgDQogICAgQkZDUCBpbXBsZW1lbnRhdGlvbiBtYXkgb3IgbWF5IG5vdCBzdXBwb3J0Lg0K ICAgIA0KICAgIEl0cyBpbXBvcnRhbnQgbm90IHRvIGNvbmZsYXRlIHRoZXNlLg0KICAgIA0KICAg IEJ1dCBJIHRoaW5rIHRoYXQgaXMgbW9zdGx5IGRpc3RpbmN0IGZyb20gdGhlIHF1ZXN0aW9uIGJl bG93Lg0KICAgIA0KICAgIAlUaGFua3MsDQogICAgCVBhdWwNCiAgICANCiAgICA+IFRoZSBwcm9i bGVtIGlzIHRoYXQsIGFjY29yZGluZyB0byBSRkMgMzI2NCwgdGhlIG0tIGxpbmUgcHJvdG8gdmFs dWUgaW4NCiAgICA+IHRoZSBhbnN3ZXIgbXVzdCBtYXRjaCB0aGUgdmFsdWUgaW4gdGhlIG9mZmVy LiBCdXQsIHNlcnZlciBCIGRvZXMgbm90DQogICAgPiBzdXBwb3J0IFVEUC4NCiAgICA+DQogICAg PiBUd28gYWx0ZXJuYXRpdmVzIHdlcmUgZGlzY3Vzc2VkOg0KICAgID4NCiAgICA+IEFMVCAjMTog RXZlcnkgcHJvdG9jb2wgdGhhdCBzdXBwb3J0cyBJQ0UgbXVzdCBkZWZpbmUgYSBNSVQgdHJhbnNw b3J0Lg0KICAgID4gVGhhdCB0cmFuc3BvcnQgbXVzdCBhbHdheXMgYmUgcmVmbGVjdGVkIGluIHRo ZSBtLSBsaW5lIHByb3RvIChhZGRpdGlvbmFsDQogICAgPiB0cmFuc3BvcnRzIGFyZSBwcm92aWRl ZCBhcyBJQ0UgY2FuZGlkYXRlcykuDQogICAgPg0KICAgID4gQUxUICMyOiBBbGxvdyBhbiBtLSBs aW5lIHByb3RvIHZhbHVlIGluIHRoZSBhbnN3ZXIgZXZlbiBpZiB0aGUgYW5zd2VyZXINCiAgICA+ IGRvZXMgbm90IHN1cHBvcnQgdGhlIGFzc29jaWF0ZWQgdHJhbnNwb3J0IOKAkyBhcyBsb25nIGFz IHRoZSBhbnN3ZXJlcg0KICAgID4gcHJvdmlkZXMgYSBjYW5kaWRhdGUgd2l0aCB0aGUgc3VwcG9y dGVkIHRyYW5zcG9ydC4NCiAgICA+DQogICAgPg0KICAgID4gQmFzZWQgb24gdGhlIGRpc2N1c3Np b25zLCB0aGVyZSB3YXMgc3Ryb25nIGNvbnNlbnN1cyB0byBnbyBmb3IgQWx0IzIsDQogICAgPiB3 aGljaCB3YXMgYWxsb3dpbmcgYSB0cmFuc3BvcnQgaW4gdGhlIG0tIGxpbmUgb2YgdGhlIGFuc3dl ciBldmVuIGlmIHRoZQ0KICAgID4gYW5zd2VyZXIgZG9lc27igJl0IHN1cHBvcnQgaXQsIGFzIElD RSBjYW5kaWRhdGVzIHdpbGwgYmUgdXNlZCB0byBkZXRlcm1pbmUNCiAgICA+IHRoZSB0cmFuc3Bv cnQuDQogICAgPg0KICAgID4NCiAgICA+IEhhdmluZyBzYWlkIHRoYXQsIHRoYXQgc3RpbGwgZG9l cyBub3QgcHJldmVudCBpbmRpdmlkdWFsIHByb3RvY29scyB0bw0KICAgID4gc3BlY2lmeSBhIE1J VCB0cmFuc3BvcnQuDQogICAgPg0KICAgID4NCiAgICA+IFNvLCBteSBRVUVTVElPTiBpczogc2hv dWxkIHdlIHNwZWNpZnkgYSBNSVQgdHJhbnNwb3J0IGZvciBCRkNQPyBBZ2FpbiwNCiAgICA+IHRo aXMgb25seSBhcHBsaWVzIHRvIHVzYWdlIHdpdGggSUNFLg0KICAgID4NCiAgICA+DQogICAgPiBU aGUgYXNzb2NpYXRlZCBzbGlkZXMgZnJvbSB0aGUgbWV0aW5nIGNhbiBiZSBmb3VuZCBoZXJlOg0K ICAgID4NCiAgICA+DQogICAgPg0KICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGlu Z3MvOTcvc2xpZGVzL3NsaWRlcy05Ny1tbXVzaWMtaWNlLXNpcC1zZHAtMDAucGRmDQogICAgPg0K ICAgID4NCiAgICA+IChTZWUgc2xpZGVzIDQtNikNCiAgICA+DQogICAgPg0KICAgID4NCiAgICA+ IFJlZ2FyZHMsDQogICAgPg0KICAgID4NCiAgICA+DQogICAgPiBDaHJpc3Rlcg0KICAgID4NCiAg ICA+DQogICAgPg0KICAgID4NCiAgICA+DQogICAgPg0KICAgID4NCiAgICA+DQogICAgPg0KICAg ID4NCiAgICA+DQogICAgPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KICAgID4gYmZjcGJpcyBtYWlsaW5nIGxpc3QNCiAgICA+IGJmY3BiaXNAaWV0Zi5v cmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYmZjcGJpcw0K ICAgID4NCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KICAgIGJmY3BiaXMgbWFpbGluZyBsaXN0DQogICAgYmZjcGJpc0BpZXRmLm9yZw0K ICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYmZjcGJpcw0KICAgIA0K DQo= From nobody Mon Feb 13 07:55:56 2017 Return-Path: X-Original-To: bfcpbis@ietf.org Delivered-To: bfcpbis@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 99885128B38; Mon, 13 Feb 2017 07:55:50 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.43.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148700135062.25055.8318971812868406134.idtracker@ietfa.amsl.com> Date: Mon, 13 Feb 2017 07:55:50 -0800 Archived-At: Cc: draft-ietf-bfcpbis-bfcp-websocket@ietf.org, bfcpbis-chairs@ietf.org, bfcpbis@ietf.org, alissa@cooperw.in, eckelcu@cisco.com, The IESG , rfc-editor@rfc-editor.org Subject: [bfcpbis] Protocol Action: 'The WebSocket Protocol as a Transport for the Binary Floor Control Protocol (BFCP)' to Proposed Standard (draft-ietf-bfcpbis-bfcp-websocket-15.txt) X-BeenThere: bfcpbis@ietf.org X-Mailman-Version: 2.1.17 List-Id: BFCPBIS working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Feb 2017 15:55:50 -0000 The IESG has approved the following document: - 'The WebSocket Protocol as a Transport for the Binary Floor Control Protocol (BFCP)' (draft-ietf-bfcpbis-bfcp-websocket-15.txt) as Proposed Standard This document is the product of the Binary Floor Control Protocol Bis Working Group. The IESG contact persons are Alexey Melnikov, Ben Campbell and Alissa Cooper. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-bfcpbis-bfcp-websocket/ Technical Summary: The WebSocket [RFC6455] protocol enables two-way message exchange between clients and servers on top of a persistent TCP connection, optionally secured with Transport Layer Security (TLS) [RFC5246]. This document specifies a new WebSocket sub-protocol as a reliable transport mechanism between Binary Floor Control Protocol (BFCP) entities to enable usage of BFCP in new scenarios. The initial protocol handshake makes use of Hypertext Transfer Protocol (HTTP) [RFC7230] semantics, allowing the WebSocket protocol to reuse existing HTTP infrastructure. Working Group Summary: The document was initially presented in DISPATCH where it was decided there was sufficient interest in the problem to extend the BFCPBIS charter and milestones to include it. There were no competing documents and the draft was quickly adopted as a working group document. Within the working group the scope was clarified to include BFCP over TCP only. It was challenging at times to find reviewers for the draft, so it progressed slowly despite there being few technical issues. The most significant discussions were around SDP procedures, including the decision to create another draft [draft-ietf-bfcpbis-sdp-ws-uri] covering the specification of the SDP ws-uri since this URI is not specific to BFCP. Document Quality: Are there existing implementations of the protocol? Have a significant number of vendors indicated their plan to implement the specification? Are there any reviewers that merit special mention as having done a thorough review, e.g., one that resulted in important changes or a conclusion that the document had no substantive issues? If there was a MIB Doctor, Media Type or other expert review, what was its course (briefly)? In the case of a Media Type review, on what date was the request posted? The authors are aware of two server-side implementations and one client-side — none of them is open source. There are also partial client and server implementations that exercise what is covered in this draft. Other companies indicated plans to implement this in their WebRTC gateway. Personnel: Who is the Document Shepherd? Who is the Responsible Area Director? Charles Eckel is the document shepherd. Alissa Cooper is the responsible Area Director. RFC Editor Note In Section 9, please make the following change: OLD: An attacker attempting to impersonate a floor control server is avoided by having servers accept BFCP messages over WSS only. As with any other web connection, the clients will verify the servers certificate. […] NEW: An attacker can attempt to impersonate a floor control server. Floor control server impersonation is avoided by having WSS between client and server. As with any other web connection, the clients will verify the servers certificate. […]