Re: Using TLS in the first hop - Bug in RFC 5630

IƱaki Baz Castillo <[email protected]> Fri, 16 Sep 2011 13:08:10 +0200
Newsgroups gmane.ietf.sip
Message-ID <CALiegfnxSo3zvCHAUtFUU=2XODUJN3SNxhRgVZ+oF5tfsQFsFw@mail.gmail.com>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