Re: [Sip] Enrollment in SIP services (and should we undeprecatebasic auth)

[Michael Thomas <mat@cisco.com>]

One comment:

Robert Sparks writes:
 > I don't understand the last statement. A system that accepts digest
 > credentials is not required to keep its local knowledge of the password
 > in the hash recommended in 2617.

The problem is that AAA's expect either a CHAP or
PAP formated authenticator. Digest, while it
doesn't chip the cleartext password ain't the same
format so you have a problem. Basic allows you to
hack up an authenticator at the proxy. Maybe
EAP+digest is our friend. Or maybe not.

	Mike
_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip