On 7/11/08 1:48 PM, Michael Thomas wrote:
An alternate approach is "you break it, you own it". That is, if you must
break the signature, all you can do is resign it and hope that your own
reputation is enough to convince the called party to accept the call.

Yes! I was trying to put together something explaining this, but never could make it concise enough. Your explanation is perfect.

The way to get identity through B2BUAs is to have them *be* back-to-back USER AGENTS. They demonstrate to a 4474 signer (which may be colocated with the B2BUA) that they are authentic agents of the signer's domain, authorized to assert the identity in the "From" header field, and all the 4474 goo can be added just fine.

/a
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [EMAIL PROTECTED] for questions on current sip
Use [EMAIL PROTECTED] for new developments on the application of sip

Reply via email to