[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sip] INFO considered harmful



Hi,

> >Now, does this mean that we also need to restrict what kind of message
> >body types we allow in INVITE, re-INVITE and UPDATE?
>
> Not really. INVITE means something: it means "I'm trying to set up a
> session, and here's a description of that session." The first half ("I'm
> trying to set up a session") has specific semantics associated with it. The
> second half ("here's a description of that session") tells you exactly what
> goes in the body.
>
> INFO just says "Here's a framed chunk of data."
>
> There is no valid comparison between the two.

I agree that the semantics of the commands are different. However, one IS
allowed to include any kind of message body in the INVITE request, to provide
whatever "extra information" about the session (text, HTML, whatever...), so
someone could argue that whatever stuff they put into the INVITE does provide
"extra information" about the session...

And, since it IS allowed to send re-INVITE, or UPDATE, without actually
updating the session description (the SDP message body) someone could include
that whatever stuff also in those messages...

I am not saying that anyone is doing that TODAY, though...

Regards,

Christer Holmberg
Ericsson Finland


_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip