Re: Evaluation: draft-ietf-mmusic-sdp-new-13

["Steven M. Bellovin" <smb@research.att.com>]

In message <0449D80A0E9B614A83FA9031B07E8D3B257BE1@stntexch2.va.neustar.com>, "
Peterson, Jon" writes:
>
>Hi Russ,
>
>Thanks for these helpful notes! A few comments below.
>
>> SDP: Session Description Protocol (Proposed Standard)
>> <draft-ietf-mmusic-sdp-new-13.txt>
>> 
>>    Russ Housley        [   ]     [   ]       [ X ]      [   ]
>> 
>>    Section 4.3 talks about private sessions.  It says:
>> 
>>       "The details of how encryption is performed are dependent on the
>>       mechanism used to convey SDP - e.g. mechanisms are defined for SDP
>>       transported using SAP [RFC2974] and SIP [RFC3261]."
>> 
>>    Why aren't S/MIME for email and TLS for WWW included here?
>> 
>
>
>As far as I know, no one has proposed using email to carry SDP, but I
>suppose this could be included. I agree that TLS for WWW deserves a mention.

Email is mentioned in section 3.4 of this draft....



		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com (2nd edition of "Firewalls" book)