> Is there any circumstance at all where it makes sense > to challenge an INVITE which is putting a call on hold?
Anytime a device desires better validation that the request was actually sent by device/user which has the credentials to successfully generate the correct Authorization or Proxy-Authorization. <snip> > The only authentication Phone B has had prior to this > interaction is the implicit REGISTER challenge response > that may have been several minutes ago. > > Is that good enough? Maybe; see above. _______________________________________________ Sip-implementors mailing list [email protected] https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
