On Mon, 2009-03-09 at 23:08 -0700, cool goose wrote:
> Hi All,
> 
> In RFC 2617 in Section 1.2 Access Authentication Framework states the below
> mentioned:
> 
> 
> 
> "
> 
>  A user agent that wishes to authenticate itself with an origin
>    server--usually, but not necessarily, after receiving a 401
>    (Unauthorized)--MAY do so by including an Authorization header field
>    with the request.
> 
> "
> 
> Does this mean that a UAC can originate a REGISTER request with
> Authorization header before it receives 401 Un authorized? If so, what would
> be the contents of such REGISTER request? What would be the value of nonce
> field?
> 
> Since the nonce value is provided by UAC or registrar in 401 Un authorized,
> if UAC wishes to authenticate itself before receiving 401, what should it
> use for the nonce value for computing the digest response?

The only way to get the nonce value is from the UAS.


_______________________________________________
Sip-implementors mailing list
[email protected]
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors

Reply via email to