Adam Roach wrote:
Dan Wing wrote:
Other methods, which do not establish media -- BYE, MESSAGE,
etc. -- would receive signatures very similar to what RFC4474
does. Namely, some certain SIP headers are signed and, if
present, the body is signed.
You're proposing signing the entire body of MESSAGE requests?
But what if some intermediary, for policy reasons, wants to change the
contents of a MESSAGE -- say, by redacting selected words the service
provider feels are inappropriate -- without the consent of either party?
Surely nobody would want to do *that*! :-)
Actually it is very believable.
And of course the same would apply to content of an MSRP media stream.
While the technology might not yet be there to do it well, I can imagine
somebody wanting to impose screening on the content of audio and video
media streams.
Paul
_______________________________________________
Sip mailing list https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email protected] for questions on current sip
Use [email protected] for new developments on the application of sip
