Subject: RE: [Sip] transport=tls

From: "Peterson, Jon" <[email-masked]>
Date: Thu, 14 Mar 2002 14:16:36 -0600

I was just referring to the fact that the specification (bis09 26.2.2) says
that you SHOULD use TLS_RSA_WITH_AES_128_CBC_SHA and mutual authentication
for SIPS requests.

Jon Peterson
NeuStar, Inc.

> -----Original Message-----
> From: Michael Thomas [mailto:[email-masked]]
> Sent: Thursday, March 14, 2002 11:14 AM
> To: Peterson, Jon
> Cc: 'Michael Thomas'; 'Dean Willis'; Sean Olson; [email-masked]
> Subject: RE: [Sip] transport=tls
>
[snip] 
>  ... it also entails the use of a particular ciphersuite to secure the
traffic.
> 
>    Um, no it doesn't. All it says is that you must
>    use TLS between each hop. There is nothing that
>    says that if you use AES-256 and SHA2 on your
>    first hop that you're going to get it on each
>    subsequent hop. Indeed, since TLS allows
>    anonymous clients, you're not even assured
>    mutual authentication on each hop.

_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email-masked] for questions on current sip
Use [email-masked] for new developments on the application of sip