Skip to Content.
Sympa Menu

sip.edu - thoughts on authentication

Subject: SIP in higher education

List archive

thoughts on authentication


Chronological Thread 
  • From: Yul Pyun <>
  • To:
  • Subject: thoughts on authentication
  • Date: Fri, 09 Jul 2004 16:42:47 -1000

I'm interested in finding out what other campuses are doing or what your thoughts are in regards to UA registration and authentication.
 
It seems to me that there are at least two distinct functions when it comes to authentication: 1) processing registration, and 2) processing INVITES.
 
My thoughts are that:
1) You want to authenticate those UAs that belong to your domain when they register, regardless of where they are registering from, and deny registration of all other UAs.  If you don't authenticate, then potentially anyone can register with your Registrar, and basically spoof the calls as if they are part of your organization.  I'd rather not be in the business of providing registration/proxy services to the entire net.
 
2) You want to be able to receive calls (INVITES) from anyone on the net, or perhaps narrow it down by use of ACL.  Analogy would be my pbx phone...anyone in the world can call me if they my number.
 
Thoughts/comments?
 
-Yul
----------------------------------------------------
Yul Pyun,
University of Hawaii



Archive powered by MHonArc 2.6.16.

Top of Page