Subject: [cuss] Open Issue: REQ-13 and Integrity Protection

From: Alan Johnston <[email-masked]>
Date: Mon, 7 Feb 2011 09:24:34 -0600

Currently, the mechanism does not define a way to meet REQ-13 on
integrity protection of UUI.

One approach is to use S/MIME, although S/MIME is not deployed, and
this introduces another body.

Another approach would be to define an SDP attribute so that RFC 4474
could be used.  However, RFC 4474 is not deployed either.

Are there other approaches?  Do either of these approaches make sense
given real deployments?

- Alan -