Subject: [Sipping] Config framework security considerations comments

From: EKR <[email-masked]>
Date: Wed, 21 Mar 2007 16:30:38 -0700

So, this seems kind of incomplete. In particular, the introduction
is fine, but it's hard to map it to the specific requirements in,
e.g., S 8.1. In particular, I'm not sure it really makes sense
to require X.509 certs for the PNC and/or PCC, given that when
you roam to some network you find out which server you should be 
connecting to via some untrusted mechanism like DHCP... More
interesting, I suppose, would be to have the DHCP server
give you the server fingerprint, thus eliminating the
X.509 stage.

-Ekr

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use [email-masked] for questions on current sip
Use [email-masked] for new developments of core SIP