Re: [Simple] COMEDIA vs MSRP Relays: COMEDIA-TLS

[Hadriel Kaplan <HKaplan at acmepacket.com>]

Yup, I noted that issue in one of the earlier emails (long ago): that if we use the fingerprint with MSRP Relays, then we need a way for a UA to learn the fingerprint of its Relay(s). (presumably through the MSRP messaging it uses to get the use-path MSRP URI from such Relay(s)?)

-hadriel


> -----Original Message-----
> From: simple-bounces at ietf.org [mailto:simple-bounces at ietf.org] On Behalf
> Of Ben Campbell
>
> How does COMEDIA-TLS work with MSRP relays? (There has been some
> discussion on this one, but I don't recall any conclusions)
> 
> If I understand correctly, RFC 4572 is really only designed for the
> use of self-signed TLS certs. At least, it states parties to a TLS
> session MUST provide certificate fingerprints. This is an issue for
> MSRP relays, as relays are not involved in the SDP offer/answer, and
> the endpoints are not going to necessarily know the fingerprints of
> certificates used by a relay. Also, it's quite likely that an MSRP
> relay will use a cert signed by a well-known CA, where a fingerprint
> would not add much value.
> 
> _______________________________________________
> Simple mailing list
> Simple at ietf.org
> https://www.ietf.org/mailman/listinfo/simple