> Hi, which is a good time a Digest challenge sent in > a 401/407 should exist?
It can exist as long you want it to exist (especially while qop being used). RFC 3261 section 22 provides some guidance. The following are a few reasons to expire it: 1) based upon time, 2) number of times used (likely once unless qop used), 3) total number currently outstanding within your device, 4) dialog terminated (and not outbound device), and 5) authentication failed while trying to use it. _______________________________________________ Sip-implementors mailing list [email protected] https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
