From: Dean Willis <[EMAIL PROTECTED]>

   Sounds like you have reinvented identd, which has pretty much vanished  
   from the Internet because it was found to not really add any useful  
   authentication.

   See: http://en.wikipedia.org/wiki/Ident

Well, "Nonetheless Ident is widely used and considered useful by
some."

   So tell me, how is this operationally different from IDENT?

Ident is used to verify the other end of a TCP connection.  The
problem with Ident is that it doesn't reliably tell you more than the
identity of the host from which the connection comes from (because you
can't really trust identd at the far end), and you knew what the host
was already by looking at the packet addresses.

With SIP, you don't know that the originating UAS has the same name as
it is claiming to have, because you got the SIP message from some
nearby proxy.  DERIVE is more like doing a reverse DNS lookup to see
if the originating host has the name that it claims to have.

Dale
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [EMAIL PROTECTED] for questions on current sip
Use [EMAIL PROTECTED] for new developments on the application of sip

Reply via email to