Am 06.03.2009 23:29 Uhr, schrieb Theo Zourzouvillys:
On Fri, Mar 6, 2009 at 10:21 PM, Nils Ohlmeier<[email protected]>  wrote:

Except that a REFER is not relevant for this replay attack

an authenticated OOD REFER may be used to initiate a call with some SIP devices.

Sure, but that is totally different story (of another bad UA implementation) which is not related to this auth relay attack.

  Nils
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email protected] for questions on current sip
Use [email protected] for new developments on the application of sip

Reply via email to