[moved to sip-implementers] At 03:39 PM 7/25/2002, Shan Lu wrote: >I don't think hop by hop is a problem.
I do not think it is a big problem either, as ACKs for negative replies server primarily a transport role (stop reply retransmissions). Not so bad, if someone else makes them stop. 200-ACKs are presumably worse, as they can carry more sensitive information, SDP particularly. [...] >I agree it is subject to replay attack. But isn't it better than blindly >proxy each and every ACK that is received at stateless server ? If you are interested in security, you better go for secure transport. I do not see any great security benefit in copy'n'paste of INVITE's credentials. Note that none of these issues is related to whether a server is stateful or stateless. -Jiri _______________________________________________ Sip-implementors mailing list [EMAIL PROTECTED] http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
