Being able to easily federate SIP systems and subscribe to presence can both be a security problem or a feature. I am looking for an explanation on how this is supposed to work in a practical sense:
a) What credentials are required if a user of a sipXecs system wants to subscribe to the presence of another user of a different sipXecs system on a different domain? Who provides these credentials and where are they entered and by whom (admin or user)? b) Same scenario if I want to create a speed dial entry on my phone connected to sipXecs for another SIP contact registered with a different system. Where and how would I enter the credentials As we resolve XECS-1606 should it be configurable whether we require authentication or not? How should this work eventually? It seems to me that somehow there is a need for a policy that says that certain domains can be federated and others cannot, maybe even on a per user basis. Can someone explain how this is intended to work or what the SIP standards community thinks how this should be done? --martin
_______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
