Re: francois' comments and why RFC4474 not used in the field
Hadriel Kaplan <[email protected]>
| Newsgroups | gmane.ietf.sip |
|---|---|
| Message-ID | <E6C2E8958BA59A4FB960963D475F7AC31504EB0B83@mail> |
> -----Original Message----- > From: [email protected] [mailto:[email protected]] On Behalf Of Dean > Willis > Sent: Friday, April 03, 2009 12:02 AM > > If I understand the argument, extending the d-w-s-i-m approach to non- > DTLS media legitimizes the obfuscation of the one media identifier we > do have -- the IP address. Some people seem to find this unacceptable. If you're not using dtls-srtp, you don't have media identity - even with 4474. You're not losing it, because you didn't have it to begin with. That's the point I've been trying to make, anyway. An IP Address is not a media identifier. It can be easily/trivially spoofed, and it can be less-trivially intercepted. In that respect, sans dtls-srtp, 4474 is an Emperor with no clothes. (no knock on 4474, because it never claimed to provide media identity) For example, see: http://tools.ietf.org/html/draft-kaplan-sip-baiting-attack-02 -hadriel _______________________________________________ Sip mailing list https://www.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use [email protected] for questions on current sip Use [email protected] for new developments on the application of sip