2010/3/21 Paul Kyzivat <pkyzi...@cisco.com>: > Iñaki, > > This is probably far from obvious. > > The reason for creating new ones was because for anonymization purposes you > probably don't want to keep using the same one. It would have been better to > have an explicit mechanism to request when you want a new one, but that > didn't fit into the model well. (There were a lot of needs to balance in > doing this. The result is not very pretty.)
Ok, good reason. > If you think about it for awhile, you will find that it is possible to come > up with an algorithm for constructing temp gruus that doesn't require the > registrar to keep permanent state for each one created. (Or course its also > possible to create algorithms that *do* require state, but that is for you > to decide.) But if the algorithm for constructing temp gruus would be known then it would become a vulnerability :( Thanks a lot. -- Iñaki Baz Castillo <i...@aliax.net> _______________________________________________ Sip-implementors mailing list Sip-implementors@lists.cs.columbia.edu https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
