Dean Willis wrote:
We have these two milestones in our charter, and neither Keith nor I
are exactly sure what they mean:
Mar 2007 Guidelines for use of SIP security to WGLC (Informational)
Jun 2007 Guidelines for use of SIP security to IESG (Informational)
Now we all know that there is a substantial need to better document
the usage of and relationships between the many SIP-related security
mechanisms, but I'm not aware of having seen a document posted that
is making any headway on this problem,
Well, way back at the 65th IETF in Dallas (March 2006), I had
presented some slides on draft-gurbani-sip-tls-use-00 (slides
archived at http://www3.ietf.org/proceedings/06mar/slides/sip-5.pdf).
Portions of that work got absorbed elsewhere -- for instance,
the URI promotion aspect was then further explored in sip-sips;
the test cases from tls-use-00 made it into sip-sec-flows;
the mutual authentication aspect made it to domain-certs, etc.
tls-use-00 subsequently expired and was not revised, having
served some purpose in life.
and I'm not even sure we have a consensus on exactly what needs to be
done
Wouldn't drafts like sec-flows, sip-certs, sip-sips, domain-certs
all lead towards providing guidelines for the use of SIP
security?
So I'd like to propose that we delete these milestones for now, and
bring them back only when we have a concrete proposal on the table
for what we think we can actually do (and should do) here.
It looks like the drafts and a substantive body of the work in
this area is out there; just needs to be organized for a more
amenable deadline. But, I may be mistaken...
Thanks,
- vijay
--
Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
2701 Lucent Lane, Rm. 9F-546, Lisle, Illinois 60532 (USA)
Email: [EMAIL PROTECTED],bell-labs.com,acm.org}
WWW: http://www.alcatel-lucent.com/bell-labs
_______________________________________________
Sip mailing list https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [EMAIL PROTECTED] for questions on current sip
Use [EMAIL PROTECTED] for new developments on the application of sip
