On Wed, 2009-07-29 at 16:52 +0200, Iñaki Baz Castillo wrote:
> 2009/7/29 Scott Lawrence <scott.lawre...@nortel.com>:
> 
> > Not with our system (sipXecs).
> >
> > In order to make replay attacks more difficult, the nonce that sipXecs
> > returns is cryptographically bound to the call-id and the from tag; if
> > you change those for the next try, you'll get another 401.
> 
> Does it mean that you system doesn't allow nonce reuse?

No... but only reuse within a single dialog.



_______________________________________________
Sip-implementors mailing list
Sip-implementors@lists.cs.columbia.edu
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors

Reply via email to