Subject: [MMUSIC] Another minor update for ICE: rel-addr privacy in relay candidates

From: Jonathan Lennox <[email-masked]>
Date: Tue, 6 Nov 2012 11:12:21 -0500

Hi, All --

I wanted to mention another minor issue with ICE.  This was an issue Justin Uberti raised back in February.

Right now, relayed candidates must include the corresponding server-reflexive address in their rel-addr field.  I believe the motivation was so middleboxes could give any special network treatment they needed between the NAT and the TURN server.

In privacy cases, however, where an endpoint is deliberately sending only relayed candidates to conceal its location, this is clearly terrible.

The conclusion on the list at that time was to send 0.0.0.0:0, or equivalent, for the rel-addr in this case.  This should presumably be recommended in the ICE-bis draft.

An alternative might be to omit rel-addr entirely in these cases, but strict 5245 parsers might fail if you did that.

--
Jonathan Lennox
[email-masked]