[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Sip] Use of AIB in referredby



Several weeks ago, Pekka made a suggestion that I would like to
follow up on now (sorry for the very long delay Pekka). His 
suggestion was to use a different Content-Disposition
disposition-type for referredby-tokens.

This draws attention to what the "aib" value means. 

Is it merely a synonym for "signed message/sipfrag"? If so, the
authid-body draft defines the value _and_ specifies one particular
use of a body with that disposition type (providing integrity and
authentication of sender for a single message). Other uses are valid,
so we should reuse it and not add noise to the IANA registry.

If, instead, "aib" means "signed message/sipfrag with these
particular security implications", then our referredby token
is _not_ an aib. It's something _like_ an aib, but with 
slightly different requirements, and artifacts in the protocol
(like the disposition-type) should probably reflect that. If this
is the case, referredby could register something like "RBIB"
(ReferredBy Identity Body), or, treading much more dangerous ground,
"TPIB" (Third Party Identity Body).

So, which of the above meanings for AIB is auth-id body establishing?

RjS


_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip