Re: Another possible limitation of DERIVE
Hadriel Kaplan <[email protected]>
| Newsgroups | gmane.ietf.sip |
|---|---|
| Message-ID | <E6C2E8958BA59A4FB960963D475F7AC31374153D4E@mail> |
> -----Original Message----- > From: [email protected] [mailto:[email protected]] On Behalf Of Dean > Willis > Sent: Friday, November 21, 2008 10:56 AM > > I crate a CA cert claiming to be for "elwell.org" and use it to sign a > cert for "sip.elwell.org". > I then generate INVITE requests for everybody on the SIP mailing list, > with RFC 4474 Identity headers signed by "sip.elwell.org" and send > them off UDP. Not from a real SIP UP, but from a simple harassment > program. > > How do existing identity mechanisms protect against this? The answer to that is simple: will you pay for the calls? -hadriel _______________________________________________ Sip mailing list https://www.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use [email protected] for questions on current sip Use [email protected] for new developments on the application of sip