Hello list, I know that strategies differ according to security needs but...
Which SIP messages are typically challenged for authentication? Right now we're challenging INVITE, SUBSCRIBE, and NOTIFY, although it's not clear to me if challenging SUBSCRIBE or NOTIFY is useful. Of course ACK and BYE are not challenged, but then there are others like MESSAGE, INFO, OPTION... whatever. This falls in the gray zone as far as my understanding of SIP and security go. Regards, Brian _______________________________________________ Users mailing list [email protected] http://lists.opensips.org/cgi-bin/mailman/listinfo/users
