On Wed, 2005-10-12 at 18:55 -0400, Shikhar Sarkar wrote:
> Is there a way to authenticate a SIP user for incoming call scenario such
> as:
>        IAM                    Invite
> SS7----------->Softswitch------------->WiFi SIP device
> 
> The WiFi SIP device of course has already registered with Softswitch. But is
> that enough to assume that there is no clone/eavesdropper? I am wondering
> why I always see 401/407 challenges always opposite to the direction of
> Invite. Is there a way to include Authentication challenge in the Invite
> itself?

If you are worried about someone spoofing IP addresses, you should be
using TLS with mutual authentication.

Dale


_______________________________________________
Sip-implementors mailing list
[email protected]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to