[prev in list] [next in list] [prev in thread] [next in thread] 

List:       asterisk-dev
Subject:    Re: [asterisk-dev] Asterisk pjsip support all media_encryption no/dtls/sdes for incoming request
From:       Henry Lin <zxcpoiu () gmail ! com>
Date:       2016-01-19 4:49:58
Message-ID: CAODuAgSA_=Ry8CDxmC=NQN83wdxJ7LL9EKgVq6LDKk6H2rSgyA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi Joshua,,

Thanks for all your advice!

We will try to do it as you said as we can!




-- Henry --

On Mon, Jan 18, 2016 at 7:46 PM, Joshua Colp <jcolp@digium.com> wrote:

> Henry Lin wrote:
>
>>
>> Hi Joshua,
>>
>> Thanks for your tips.
>>
>> For the OUTGOING part, there is no problem. we already did as you said (
>> use inherited endpoints).
>>
>> For INCOMING part, you said:
>>
>> 1.  media_encryption_optimistic is created for SDES, which can supports
>> both sdes and no-encryption in the same config endpoints.
>>      and our test for DTLS also works but is a side effect.
>>
>> 2. a new param of media_encryption = "optional" is possible to do in the
>> code, which can supports SDES/DTLS/NO-ENCRYPTION at the same config
>> endpoint for incoming ( ex: caller ).
>>
>>
>> So in your opinion:
>>
>> would it be better to integrate media_encryption = "optional" with
>> media_encryption_optimistic = true ? or just leave them separated?
>>
>
> I'd just leave them separated, I'm not a huge fan of repurposing
> optimistic away from its original purpose and changing the requirements of
> it.
>
>
>> since they are trying to solve the same problem --- support webrtc
>> clients but also have backward-compatibility to the huge amount of
>> old-school devices
>>
>> media_encryption = "optional" implies media_encryption_optimistic = true.
>>
>>
>> by the way,
>> Is there anyone already implement this, or opened an issue tracker that
>> can be patched ?
>>
>
> I know of noone who has done this or any patch.
>
> --
> Joshua Colp
> Digium, Inc. | Senior Software Developer
> 445 Jan Davis Drive NW - Huntsville, AL 35806 - US
> Check us out at: www.digium.com & www.asterisk.org
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-dev
>

[Attachment #5 (text/html)]

<div dir="ltr">Hi  <span style="font-size:12.8px">Joshua,,</span><div><span \
style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Thanks \
for all your advice!</span></div><div><span \
style="font-size:12.8px"><br></span></div><div><div><div class="gmail_signature"><div \
dir="ltr"><div>We will try to do it as you said as we \
can!</div><div><br></div><div><br></div><div><br></div><div><br></div>-- Henry \
--<br></div></div></div> <div class="gmail_extra"><br><div class="gmail_quote">On \
Mon, Jan 18, 2016 at 7:46 PM, Joshua Colp <span dir="ltr">&lt;<a \
href="mailto:jcolp@digium.com" target="_blank">jcolp@digium.com</a>&gt;</span> \
wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span \
class="">Henry Lin wrote:<br> <blockquote class="gmail_quote" style="margin:0px 0px \
0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
 <br>
Hi Joshua,<br>
<br>
Thanks for your tips.<br>
<br>
For the OUTGOING part, there is no problem. we already did as you said (<br>
use inherited endpoints).<br>
<br>
For INCOMING part, you said:<br>
<br>
1.   media_encryption_optimistic is created for SDES, which can supports<br>
both sdes and no-encryption in the same config endpoints.<br>
        and our test for DTLS also works but is a side effect.<br>
<br>
2. a new param of media_encryption = &quot;optional&quot; is possible to do in \
the<br> code, which can supports SDES/DTLS/NO-ENCRYPTION at the same config<br>
endpoint for incoming ( ex: caller ).<br>
<br>
<br>
So in your opinion:<br>
<br>
would it be better to integrate media_encryption = &quot;optional&quot; with<br>
media_encryption_optimistic = true ? or just leave them separated?<br>
</blockquote>
<br></span>
I&#39;d just leave them separated, I&#39;m not a huge fan of repurposing optimistic \
away from its original purpose and changing the requirements of it.<span \
class=""><br> <br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
 <br>
since they are trying to solve the same problem --- support webrtc<br>
clients but also have backward-compatibility to the huge amount of<br>
old-school devices<br>
<br>
media_encryption = &quot;optional&quot; implies media_encryption_optimistic = \
true.<br> <br>
<br>
by the way,<br>
Is there anyone already implement this, or opened an issue tracker that<br>
can be patched ?<br>
</blockquote>
<br></span>
I know of noone who has done this or any patch.<span class="im"><br>
<br>
-- <br>
Joshua Colp<br>
Digium, Inc. | Senior Software Developer<br>
445 Jan Davis Drive NW - Huntsville, AL 35806 - US<br>
Check us out at: <a href="http://www.digium.com" rel="noreferrer" \
target="_blank">www.digium.com</a> &amp; <a href="http://www.asterisk.org" \
rel="noreferrer" target="_blank">www.asterisk.org</a><br> <br>
<br></span><span class=""><font color="#888888">
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" \
rel="noreferrer" target="_blank">http://www.api-digital.com</a> --</font></span><div \
class=""><div class="h5"><br> <br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
   <a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" rel="noreferrer" \
target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-dev</a><br> \
</div></div></blockquote></div><br></div></div></div>



-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-dev mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-dev

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic