Re: [Simple] ACM SBC TLS issue [was RE: MSRP-ACM compatibility]

["Christer Holmberg" <christer.holmberg at ericsson.com>]

Hi, 

>>>>>If I want to establish an MSRP session with you, I probably 
>>>>>wouldn't care whether you are behind a relay or not. I would trust 
>>>>>that the operator(s) make sure my stuff doesn't end up in the wrong
hands.
>>>>Right!
>>>>They have such a good track record of keeping stuff private.
>> 
>>But still we keep using them.
>
>We are stuck using whatever it takes to talk to who we want to talk to.
>We don't have the level of open interop and competition we do with web
apps.

Maybe not, but I am not really sure how that relates to MSRP ACM.

>>>>And, if I have something very very very sensitive to send you, I may

>>>>encrypt the payload myself, and not rely on the MSRP provided 
>>>>encryption - because even if I start looking at the path attributes
etc I can 
>>>>still not be 100% that there is no intermediate somewhere.
>>>>
>>>How would you do that in a way that is usable by anyone except a
programmer? Most users are dependent on the available tools.
>> 
>>My MSRP client may have a built-in option which allows me to encrypt
the data.
>
>That of course assumes that the person on the other end has the same.

Sure, but that is true for whatever security mechanism, on whatever
level.

Regards,

Christer