Subject: [secdir] Secdir review of draft-ietf-avtext-rtp-grouping-taxonomy

From: Paul Hoffman <[email-masked]>
Date: Thu, 7 May 2015 12:21:03 -0700

Summary: great document, no new security issues introduced.

The title of the document is "A Taxonomy of Grouping Semantics and Mechanisms for Real-Time Transport Protocol (RTP) Sources", and that covers the content exactly. The Security Considerations section says:

5.  Security Considerations

   This document simply tries to clarify the confusion prevalent in RTP
   taxonomy because of inconsistent usage by multiple technologies and
   protocols making use of the RTP protocol.  It does not introduce any
   new security considerations beyond those already well documented in
   the RTP protocol [RFC3550] and each of the many respective
   specifications of the various protocols making use of it.

   Hopefully having a well-defined common terminology and understanding
   of the complexities of the RTP architecture will help lead us to
   better standards, avoiding security problems.

That covers it completely.

Unrelated: if you ever wanted a high-level overview of RTP, this document is a great place to start. Instead of introducing RTP as a technology, it introduces it in an "who says what to whom" fashion, which is enough to get a pretty clear picture.

--Paul Hoffman