SIP in higher education

[Steve Blair <>]

Kerberos is dead. Give it a rest :-)

Shumon Huque wrote:

> On Mon, Apr 03, 2006 at 08:59:51AM -0700, Prashant Kumar wrote:
>  
>
> > Sip identity draft is a very good option. However, using the 
> > Identity draft will not allow the use of Kerboros and will not 
> > help the existing  Kerboros deployments.
> >    
>
> Right, that was my point. SIP Identity helps in the general
> interdomain authentication case.
>
> I'm in favor of developing a Kerberos based authentication
> mechanism that allows SIP user agents to authenticate themselves
> to their *local* SIP registrar/proxy servers.
>
> For end2end, Kerberos isn't enough. You additionally need to use 
> something like SIP identity or some other federated authentication 
> approach. Or PKI certificates at UAs with a globally trusted CA,
> ugh! :-)
>
> --Shumon.
>