Re: SIP amplification vulnerability -01 (draft-zourzouvillys-sip-via-cookie-01)

Hadriel Kaplan <[email protected]>
Newsgroups gmane.ietf.sip
Message-ID <E6C2E8958BA59A4FB960963D475F7AC313FD84FC30@mail>

> -----Original Message-----
> From: Dale Worley [mailto:[email protected]]
> Sent: Monday, February 23, 2009 4:18 PM
>
> On Mon, 2009-02-23 at 10:49 +0000, Theo Zourzouvillys wrote:
> > On Sun, Feb 22, 2009 at 11:55 PM, Hadriel Kaplan
> <[email protected]> wrote:
> >
> > > Yup, these are essentially the same as IP-PBX trunks.  I don't know
> > of many that allow requests in from truly unknown sources, though -
> > they usually know the remote devices in advance, even when ENUM is
> > used - so if they wanted to they could use IPSec or TLS if this became
> > a problem. (some do today, but many don't - it seems many peer over
> > private connections anyway)
> >
> > I believe (hope!) that these are going to get more common!
>
> Yes, Hadriel, you're thinking in a rather PSTN way.

No I'm not.  I'm merely indicating what I believe the common scenarios are as I see them today.  It has no relation to how my neurons interact.

-hadriel
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email protected] for questions on current sip
Use [email protected] for new developments on the application of sip
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.