Arun Tagare <arun.taga...@gmail.com> writes:
> Since we have different types of SIP AUTHENTICATION procedures (MD5,
> AKAv1, AKAv2) suppose say network challenged to the UE REQUEST with
> either one of the AUTH in the 401 response.
>
> Now due to some reason response (to the challenge) got failed/not
> calculated.  Is there any provision to use other procedure to
> calculate the response (to the challenge).

No, that will not give any benefit.  The UAC cannot respond to a
challenge using any particular algorithm unless it has received a
WWW-Authenticate/Proxy-Authenticate header (challenge) for that
algorithm, because that header includes information (nonce, etc.) needed
to provide a valid Authorization header using that algorithm.

That is why the device challenging a request must provide
WWW-Authenticate/Proxy-Authenticate headers for all algorithms (and
domains) for which it will accept Authorization/Proxy-Authorization
headers.

Dale
_______________________________________________
Sip-implementors mailing list
Sip-implementors@lists.cs.columbia.edu
https://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to