> -----Original Message-----
> From: PD20 Frank Lin [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, March 06, 2001 6:35 PM
> To: '[EMAIL PROTECTED]'
> Subject: FW: [Sip-implementors] REGISTRATION with authorization.
> H(entity -body)?
>
>
> We were tackling the same question and I remember doing some
> searches on the
> web for discussions on authentication (not specifically for
> SIP). It appears
> that you just use NULL for the entity-body. Here's the URL to that
> discussion:
>
> http://www.hp.co.uk/people/ange/archives/http-wg-archive/0547.html
>
> Frank
Hmm. This list post says:
Dave Kristol wrote:
>>
>> On Thu, 9 Apr 1998, Dave Kristol wrote:
>> > [...]
>> > Now, for qop="auth-int", the client must include H(entity-body) in
>> > the calculation of A2. But there is no entity-body. Does the
>> > client use the null string when it calculates A2?
>>
>> It uses the hash of the null string, actually.
>
>I think it would be wise to add an explicit statement to that effect to
>the draft.
Hash of the null string? Isn't that what we call NullPointerException?
-Jonathan R.
---
Jonathan D. Rosenberg 72 Eagle Rock Ave.
Chief Scientist First Floor
dynamicsoft East Hanover, NJ 07936
[EMAIL PROTECTED] FAX: (973) 952-5050
http://www.cs.columbia.edu/~jdrosen PHONE: (973) 952-5000
http://www.dynamicsoft.com
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
