[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [MMUSIC] Re: [BEHAVE] Re: STUN/ICE: Username length inconstency
Jonathan Rosenberg skrev:
> To be specific, let me propose the following:
>
> rfc3489bis: says the username MUST be less than 513 bytes. It also says
> that the STUN message when sent over UDP MUST be less than the MTU.
>
> ICE: says that the username fragment MUST be less than 256 bytes.
>
>
> The desire for the ability to have larger usernames is not security
> (i.e., this doesn't mean endpoints compute username fragments with 256
> bytes of entropy), but that cases have been identified ala Dan's draft
> of stuffing useful identifiers in there. So we want to allow that to be
> possible in the future. Length limits always need to be carefully
> managed, since they are nice in terms of implementation but you can
> sometimes regret them in a really big way down the road (think SMS
> message sizes, 640k memory limit, etc.)
>
So do I interpret this correctly, in that STUN will have byte limit
which is lower than in the previous draft version, but if one uses
characters that has few bytes per character they will be allowed to be
longer than 128? And now ICE and STUN will be aligned.
Please comment on this! We need feedback to determine that there are
consensus on this change so that we can go. I do not plan to do another
WG last call on the complete document, more than give people a few days
to scream about the new update to resolve the issues as soon as there
are consensus on the solution.
Cheers
Magnus Westerlund
IETF Transport Area Director & TSVWG Chair
----------------------------------------------------------------------
Multimedia Technologies, Ericsson Research EAB/TVM/M
----------------------------------------------------------------------
Ericsson AB | Phone +46 8 4048287
Torshamsgatan 23 | Fax +46 8 7575550
S-164 80 Stockholm, Sweden | mailto: magnus.westerlund at ericsson.com
----------------------------------------------------------------------
_______________________________________________
mmusic mailing list
mmusic at ietf.org
https://www1.ietf.org/mailman/listinfo/mmusic