Subject: [SIP] Usefulness of auth token

From: "Gross, Gerhard" <[email-masked]>
Date: Wed, 27 Sep 2000 14:27:04 -0700

I have some questions regarding authorization
tokens for QoS in
http://www.ietf.org/internet-drafts/draft-dcsgroup-sip-call-auth-02.txt.

1) Is the auth token just a base64 encoded number
   or does it contain authentication (key/hash)
   information or media/call information as well?

2) Assuming that the auth token is just a number,
   since each side (UAC and UAS) generates
   their own auth token (a token is not shared)
   why are they necessary at all? The PDP-o and
   PDP-t store the media/bandwidth info (which
   is done anyway) in an "authorized flow" list only
   if the session is granted. The PDPs then compare
   this info with the corresponding info in the
   RSVP msgs which is also done anyway. If there
   is a match, the session has been authorized.
   What is the necessity of the auth token?

3) There is no mention of a clearinghouse type
   of entity in your draft. Is it assumed that
   the PDPs contact a clearinghouse behind the
   scenes? Perhaps mention of a clearinghouse
   is out of the scope of the draft.

Thank you in advance for any thoughts/responses.
Gery

        XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
        X                                         X
        X    Gerhard W. Gross, Ph.D.              X
        X    Intel                                X
        X    2111 NE 25th Ave                     X
        X    Hillsboro, OR 97124-5961, USA        X
        X    Internet Infrastructure Group        X
        X      - Internet and Communication Lab   X
        X    phone:    (503) 264-6389             X
        X    fax:      (503) 264-3483             X
        X    email:    [email-masked]    X
        X                                         X
        XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

_______________________________________________
SIP mailing list
[email-masked]
http://lists.bell-labs.com/mailman/listinfo/sip