Re: [Simple] ACM SBC TLS issue [was RE: MSRP-ACM compatibility]

[Paul Kyzivat <pkyzivat at cisco.com>]

Christer Holmberg wrote:
> Hi, 
>
> > > > If I want to establish an MSRP session with you, I probably wouldn't 
> > > > care whether you are behind a relay or not. I would trust that the
> > > > operator(s) make sure my stuff doesn't end up in the wrong hands.
> > > Right!
> > > They have such a good track record of keeping stuff private.
>
> But still we keep using them.

We are stuck using whatever it takes to talk to who we want to talk to.
We don't have the level of open interop and competition we do with web apps.

> > > And, if I have something very very very sensitive to send you, I may 
> > > encrypt the payload myself, and not rely on the MSRP provided 
> > > encryption
> > > - because even if I start looking at the path attributes etc I can 
> > > still not be 100% that there is no intermediate somewhere.
> > How would you do that in a way that is usable by anyone except a
> programmer? Most users are dependent on the available tools.
>
> My MSRP client may have a built-in option which allows me to encrypt the
> data.

That of course assumes that the person on the other end has the same.

	Paul

> Regards,
>
> Christer