Re: [AVT] Fwd: [Tsvwg] Looking for feedback on DTLS

[Lee Dilkie <dilkiel at dilkie.com>]

Mark Baugher wrote:

> I don't think avt needs to be concerned with yet another way to 
> authenticate/encrypt RTP packets in addition to SRTP and IPsec.  I 
> don't know what the advantages are of using TLS over IPsec.  If 
> security at the internetwork layer is not the right place, then we 
> have SRTP.  The only Datagram TLS application that is mentioned is 
> SIP.  I don't know why since DTLS does nothing to address SIP's real 
> security problems, which are middle-to-middle as much as end-to-end.  
> But this can be properly deferred to one of the SIP WGs IMHO.

Perhaps this isn't the right place for this discussion but I for one was 
pleased to read the paper. And seeing that SRTP requires external 
mechanism's for key exchange, this solution seems to be somewhat 
relevant to the participants of this forum. IPsec has deployment 
difficulities, TLS is dependant on TCP. This proposal seems to me to 
address the problem space (secure UDP-based transport)  nicely.

Not all of us are using SIP for session establishment of RTP streams.

regards,

Lee Dilkie

Mitel

_______________________________________________
Audio/Video Transport Working Group
avt at ietf.org
https://www1.ietf.org/mailman/listinfo/avt