From: Adam Roach <[EMAIL PROTECTED]> During today's meeting, a point was raised surrounding whether the max-breadth approach should limit the total number of requests or merely the number of requests in flight at once. The statement is that limiting only the ones in flight simultaneously ultimately results in the same number of messages as would result without the extension.
While there has been a token mention of Timer C, I think we're underestimating the mitigating effect of Timer C. As an additional point, I think it's worth pointing out that the victim, if they recognize they are being subjected to this style of attack, can tear the entire tree down fairly rapidly by throwing a 600-class response. Also, the UAC, if it is not perverse, will ultimately cancel the request. Dale _______________________________________________ Sip mailing list https://www1.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use [EMAIL PROTECTED] for questions on current sip Use [EMAIL PROTECTED] for new developments on the application of sip
