Hi,

if the UAS accepted such a re-INVITE without authenticating it,
it would be quite broken from a security point of view.


Ettore Benedetti

THALES COMMUNICATIONS B.V.
Bestevaer 46, 1271 ZA  Huizen
The Netherlands

Unclassified


>>> Adarsh S G <[EMAIL PROTECTED]> 11/29/05 2:50:46 PM >>>


Hi,

UAC                           UAS

        INVITE
  ------------------------------>
        401 UnAuthorized
  <-------------------------------

        INVITE with Authorization
   ----------------------------->

        200 OK
  <-------------------------------

        RTP ( Session Establishment )
<----------------------------------->

        INVITE
  ------------------------------------>


After the Authorization is done for UAC and session established,
if  Re-Invite without Authorization message comes from UAC, then is it 
Authenticated or not ...???

Regards

Adarsh.

_______________________________________________
Sip-implementors mailing list
[email protected] 
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors


_______________________________________________
Sip-implementors mailing list
[email protected]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to