|
Hello all,
I want to make a supplement because I
think the new-introduced participant in the use case is a SEND-ONLY participant
(fetching ... to the participants), how about the solution in this
situation?
To Eric: the statement on
the authentication in RFC4483 is as follow, is it enough?
"For confidentiality,
integrity, and authentication, this content
indirection mechanism relies on the security mechanisms outlined in RFC 3261. In particular,
the usage of S/MIME as defined in section
23 of RFC 3261 provides the necessary mechanism to ensure integrity, protection, and confidentiality of the indirect content URI and associated parameters. Securing the transfer of the indirect content is the
responsibility
of the underlying protocol used for this transfer. If HTTP is used, applications implementing this content indirection method SHOULD support the HTTPS URI scheme for secure transfer of content and MUST support the upgrading of connections to TLS, by using starttls. Note that a failure to complete HTTPS or starttls (for example, due to certificate or encryption mismatch) after having accepted the indirect content in the SIP request is not the same as rejecting the SIP request, and it may require additional user-user communication for correction. Note that this document does not advocate the use of
transitive
trust. That is, just because the UAS receives a URI from a UAC that the UAS trusts, the UAS SHOULD NOT implicitly trust the object referred to by the URI without establishing its own trust relationship with the URI provider. Access control to the content referenced by the URI is not
defined by
this specification. Access control mechanisms may be defined by the protocol for the scheme of the indirect content URI." Thanks and Regards
Xiangsong
|
_______________________________________________ Sip mailing list https://www.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use sip-implementors at cs.columbia.edu for questions on current sip Use sipping at ietf.org for new developments on the application of sip