Hi John, Security Warning for using NOTIFY without subscription:
http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt Regards, Peggy Stumer -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peili Xu Sent: Thursday, July 14, 2005 7:34 AM To: Wainwright, John; [email protected] Subject: RE: [Sip-implementors] MWI Hi John: Rfc3265 indicate the meaning of allow-events: -- The "Allow-Events" header, if present, includes a list of tokens -- which indicates the event packages supported by the client (if sent -- in a request) or server (if sent in a response). In other words, a -- node sending an "Allow-Events" header is advertising that it can -- process SUBSCRIBE requests and generate NOTIFY requests for all of -- the event packages listed in that header. The method you mention is enough. There is no need for the UA which subscribes the MWI event to carry Allow-Events: Messages-summary" be cause it will not provide notification of MWI Best reguards! Peili Xu __________________________________________________________________ Peili Xu System Engineer Core Network Research & Standard Department Huawei Technologies Co., Ltd Email: [EMAIL PROTECTED] Phone: +86-755-28780808 Website: www.huawei.com __________________________________________________________________ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wainwright, John Sent: Thursday, July 14, 2005 5:43 AM To: [email protected] Subject: [Sip-implementors] MWI To support Message Waiting Indication is it enough to Subscribe with header field "Events: message-summary" and process the NOTIFY responses with the Messages-Waiting field or do I also need to REGISTER/send out INVITEs with the "Allow-Events: message-summary" field set ? Thanks John _______________________________________________ Sip-implementors mailing list [email protected] http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors _______________________________________________ Sip-implementors mailing list [email protected] http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors _______________________________________________ Sip-implementors mailing list [email protected] http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
