Subject: [stir] draft-jennings-dispatch-rfc4474bis

From: Cullen Jennings <[email-masked]>
Date: Mon, 15 Jul 2013 14:56:48 -0700

We submitted an update of the 4474bis draft. 

This is just a preliminary sketch of what the changes to RFC4474 might look like if we were going to use a bis of RFC4474 as a basis going forward. This keeps a lot of the RFC4474 protocol machinery (headers, response codes, UAC behavior) but changes the semantics of the Identity header by reducing the scope of integrity protection, and the Identity-Info header to describe certs that cover telephone numbers instead of just domain names.

Cullen

Begin forwarded message:

> From: [email-masked]
> Subject: I-D Action: draft-jennings-dispatch-rfc4474bis-01.txt
> Date: July 15, 2013 1:20:02 PM PDT
> To: [email-masked]
> Reply-To: [email-masked]
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> 
> 
> 	Title           : Authenticated Identity Management in the Session Initiation Protocol (SIP)
> 	Author(s)       : Jon Peterson
>                          Cullen Jennings
>                          Eric Rescorla
> 	Filename        : draft-jennings-dispatch-rfc4474bis-01.txt
> 	Pages           : 44
> 	Date            : 2013-07-15
> 
> Abstract:
>   The baseline security mechanisms in the Session Initiation Protocol
>   (SIP) are inadequate for cryptographically assuring the identity of
>   the end users that originate SIP requests, especially in an
>   interdomain context.  This document defines a mechanism for securely
>   identifying originators of SIP requests.  It does so by defining new
>   SIP header fields for conveying a signature used for validating the
>   identity, and for conveying a reference to the credentials of the
>   signer.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-jennings-dispatch-rfc4474bis
> 
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-jennings-dispatch-rfc4474bis-01
> 
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=draft-jennings-dispatch-rfc4474bis-01
>