Re: [Sip] Question regarding draft-dotson-sip-mutual-auth-03

["Nils Ohlmeier" <lists at ohlmeier.org>]

> On Thu, Mar 12, 2009 at 9:24 PM, Sumanth Channabasappa
> <sumanth at cablelabs.com> wrote:
> (snip)
>> In any case, please refer to the following small thread (3 emails) for
>> the feedback I received during offline discussions at the last IETF:
>>
>> http://www.ietf.org/mail-archive/web/sip/current/msg25882.html
>
>>From [1]: "the UA trusts its connection with the next-hop and does not
> need to authenticate any elements beyond the next-hop"
>
> [1] http://www.ietf.org/mail-archive/web/sip/current/msg25890.html
>
> Could you please develop this assumption?

I also do not understand this sentense. It sounds like the IP connection
to the next hop is so trustworthy that we could use clear text passwords
instead of digest auth?!
But I think that such conditions would only be given when we use TLS or
IPSec, in which case digest mutual auth makes no real sense any more.

Regards
  Nils