Re: B2BUA's changing call-id's: draft-kaplan-sip-secure-call-id-00.txt

Theo Zourzouvillys <[email protected]>
Newsgroups gmane.ietf.sip
Message-ID <[email protected]>
On Sat, Mar 28, 2009 at 6:25 AM, Hadriel Kaplan <[email protected]> wrote:

> Would people prefer that?

yup.

Also:

   [OPEN ISSUE: should we make this a fixed format, defined
   randomization mechanism to avoid detecting the vendor type from the
   Call-ID format?]

How about defining it to be a v5 uuid (rfc4122), which:

 - is well defined (including generating) in RFC 4122
 - has many libraries for generating and parsing
 - a v5 uuid can be detected (by looking at bits 4-7 == 0101) and thus
knows if it's secure
 - is "almost" unique across a four dimensional space-time continuum -
certainly a _very_ low chance of any collision, even when we're
communicating with alpha centauri over SIP/2.0.

 ~ Theo

Sent from: Bicester Oxfordshire United Kingdom.
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email protected] for questions on current sip
Use [email protected] for new developments on the application of sip
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.