GNOME Bugzilla – Bug 731714
gstsrtpenc: add allow-repeat-tx property
Last modified: 2014-06-18 13:40:08 UTC
This patch allows retransmitting RTP package using rtprtxqueue
Created attachment 278526 [details] [review] The patch
You shouldn't do that. You should use rtxsend and rtxreceive which implement RFC 4588 retransmissions. Re-sending the exact same SRTP packet will triggered replay-attack prevent mechanisms, etc.
I partly agree with you. I know rtxsend and rtxrecevie, but RFC 4588 is not implemented in some systems and rtprtxqueue is useful for these cases. I agree with you that allow-repeat-tx can provoque the type of issues that you say, but the developer should know them if he sets this property to TRUE (by default is FALSE). In other words, if libsrtp offers this option, why not the gstsrtpenc element?
I guess we could add it with a big warning.
From my point of view, the most important thing is having a good doc about this feature. It can be based on the libsrtp one (http://srtp.sourcearchive.com/documentation/1.4.4plus-p20100615~dfsg-1build1/structsrtp__policy__t_ae94fa8f82655478e64281692e2fc5213.html)
commit 52d4b7de076f5b964ca5dfb904b9bf8408781f29 Author: Wim Taymans <wtaymans@redhat.com> Date: Wed Jun 18 15:36:09 2014 +0200 srtpenc: improve property comments Add a Note to the allow-repeat-tx property because it is potentially insecure when used incorrectly. Fixes https://bugzilla.gnome.org/show_bug.cgi?id=731714