On 7/10/08 8:38 AM, Hadriel Kaplan wrote:
>
>> But this doesn't give any rationale for signing P-Asserted-Identity
>> (which will need to be stripped off as it leaves the enterprise,
>> rendering your use case pretty much moot).
>
> Huh? It doesn't need to be stripped on leaving nor entering the Enterprise. You lost me.
>

If that's not the intention, then I had mistaken the scope of applicability to imply that the asserter identity would be stripped upon leaving an administrative domain, unless the domain it was going to was part of a federation formed by specific business arrangements regarding identity.

Given that such isn't the case, the intention of the document is a bit clearer. I'm still queasy at adding additional ways to do the same thing, even if the properties are somewhat different. But if anyone else thinks that's important, I'll let them fight that battle.

/a

_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [EMAIL PROTECTED] for questions on current sip
Use [EMAIL PROTECTED] for new developments on the application of sip

Reply via email to