Hello,

On 05/11/07 13:27, Henning Westerholt wrote:
On Freitag, 11. Mai 2007, Juha Heinanen wrote:
Bogdan-Andrei Iancu writes:
 > it has nothing to do with restrictions. It is more simpler: it is an
 > external piece of code that nobody maintains so far.

perhaps the limitation i vaguely remember had to do with digest
calculation.  if the digest is calculated based on received body before
nathelper actions on the body, then i don't see how this module can be
used in read world.

Hello,

it seems you can't use this module if you want to use this module in scenarios where rewriting of the message body (or other parts which will be signed) is needed. This was the outcome of the thread on devel on 22. March.

Blocks this the inclusion of the module in the trunk?
no, that is the purpose for such authentication type, to avoid man-in-the-middle attacks. The applicability depends on deployment case, some does not need to deal with NAT (e.g., carriers).

Cheers,
Daniel

Cheers,

Henning

_______________________________________________
Devel mailing list
Devel@openser.org
http://openser.org/cgi-bin/mailman/listinfo/devel


_______________________________________________
Devel mailing list
Devel@openser.org
http://openser.org/cgi-bin/mailman/listinfo/devel

Reply via email to