2009/7/29 Scott Lawrence <scott.lawre...@nortel.com>:

> Not with our system (sipXecs).
>
> In order to make replay attacks more difficult, the nonce that sipXecs
> returns is cryptographically bound to the call-id and the from tag; if
> you change those for the next try, you'll get another 401.

Does it mean that you system doesn't allow nonce reuse?


-- 
Iñaki Baz Castillo
<i...@aliax.net>

_______________________________________________
Sip-implementors mailing list
Sip-implementors@lists.cs.columbia.edu
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors

Reply via email to