Re: Identity Checking in Application Protocols

["Vijay K. Gurbani" <vkg at alcatel-lucent.com>]

Peter Saint-Andre wrote:
> > A server may support more than one client and so may be configured
> > with more than one reference identity and use any or all of them in a 
> > comparison with what is received in an X.509 certificate eg with SIP, 
> > Netconf, syslog,
>
> That's an interesting perspective.

An approach that we took in SIP for the server to authenticate
clients is documented in Section 7.4 of ietf-sip-domain-certs
(http://tools.ietf.org/html/draft-ietf-sip-domain-certs-04#section-7.4).

Thanks,

- vijay
--
Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60566 (USA)
Email: vkg at {alcatel-lucent.com,bell-labs.com,acm.org}
Web:   http://ect.bell-labs.com/who/vkg/