Paulius.Meskauskas | 1 Mar 2004 13:33
Picon

RE: draft-khartabil-sip-auth-analysis-00.txt

Hi,

I should be an implementation specific decision
to prompt the user for new credentials or not 
if pre-configured credentials are stale.

regards,
	paulius

> -----Original Message-----
> From: sip-admin <at> ietf.org [mailto:sip-admin <at> ietf.org]On Behalf Of ext
> Cullen Jennings
> Sent: Saturday, February 28, 2004 10:45 PM
> To: Khartabil Hisham (Nokia-TP-MSW/Helsinki); slawrence <at> pingtel.com
> Cc: sip <at> ietf.org
> Subject: Re: [Sip] draft-khartabil-sip-auth-analysis-00.txt
> 
> 
> On 2/19/04 2:28 AM, "hisham.khartabil <at> nokia.com"
> <hisham.khartabil <at> nokia.com> wrote:
> 
> > At this stage, the user should be prompted to enter new 
> username/password. My
> > objection is to the text quoted below from RFC3261:
> > 
> > "  A service provider that pre-configures UAs with 
> credentials for its
> >  realm should be aware that users will not have the opportunity to
> >  present their own credentials for this realm when challenged at a
> >  pre-configured device".
> > 
> > I think the users should have the opportunity.
> 
> Just for arguments sake, let's say I agreed that users should have the
> opportunity. I really don't know what needs to change in the 
> SIP stuff.
> Users are welcome to buy UA that give them this opportunity.
> 
> Cullen
> 
> 
> _______________________________________________
> Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
> This list is for NEW development of the core SIP Protocol
> Use sip-implementors <at> cs.columbia.edu for questions on current sip
> Use sipping <at> ietf.org for new developments on the application of sip
> 

_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors <at> cs.columbia.edu for questions on current sip
Use sipping <at> ietf.org for new developments on the application of sip


Gmane