Issue 3: Big GRUU Suggested algorithm for stateless GRUU requires AES encrypting a concatenation of AOR, instance ID, salt This can result in really long GRUUs One experiment yielded ones 129 bytes long These would be carried in each and every request sent by UA! They are sigcomp compressible Do we care? Alternate suggestions? |