Couret Tabt | 3 Feb 2012 06:29
Picon

Verification of legitimate Authentication Service in SIP Identity

Dear lists,

I have a question about SIP Identity.

In SIP Identity, how is it verified whether or not the authentication
service(AS) who
is described in Identity-Info header is truly legitimate?

If it is NOT verified, spoofing of AS is possible, I think.

As far as I know, RFC DO NOT have any description about that.

If you know that, please let me know.

Thanks in advance.
Tabt.
Brett Tate | 3 Feb 2012 13:33
Favicon

Re: Verification of legitimate Authentication Service in SIP Identity

RFC 4474 sections 13.3 and 13.4 may be helpful.

> -----Original Message-----
> From: sip-implementors-bounces <at> lists.cs.columbia.edu [mailto:sip-
> implementors-bounces <at> lists.cs.columbia.edu] On Behalf Of Couret Tabt
> Sent: Friday, February 03, 2012 12:29 AM
> To: sip-implementors <at> lists.cs.columbia.edu
> Subject: [Sip-implementors] Verification of legitimate Authentication
> Service in SIP Identity
> 
> Dear lists,
> 
> I have a question about SIP Identity.
> 
> In SIP Identity, how is it verified whether or not the authentication
> service(AS) who
> is described in Identity-Info header is truly legitimate?
> 
> If it is NOT verified, spoofing of AS is possible, I think.
> 
> As far as I know, RFC DO NOT have any description about that.
> 
> If you know that, please let me know.
> 
> Thanks in advance.
> Tabt.

Vineet Menon | 6 Feb 2012 08:41
Picon
Gravatar

Custom Header fields

Hi All,

Can I add any custom headers to extend SIP, if it doesn't interfere with
the existing protocol? is there any protocol/procedure to do so?

Regards,

Vineet Menon
Mahudeswaran | 6 Feb 2012 09:41
Favicon

Re: Custom Header fields

Hi,

>>Can I add any custom headers to extend SIP, if it doesn't interfere with the existing protocol?
Some time back we heard & we do exchange custom information from end to other with the help of custom sip headers.
e.g. 'x-header1:value1'. the header that starts with 'x-' treated as custom sip headers.

27.3 Header Field Names
http://tools.ietf.org/html/rfc3261#page-253

http://www.iana.org/assignments/sip-parameters

Some proxy/gateway - allow/restrict custom sip headers & based on configuration.

Regards
Mahudeswaran
(Note: If the reply for your query is not matched then kindly leave it)
-----Original Message-----
From: sip-implementors-bounces <at> lists.cs.columbia.edu
[mailto:sip-implementors-bounces <at> lists.cs.columbia.edu] On Behalf Of Vineet Menon
Sent: Monday, February 06, 2012 1:12 PM
To: Sip-implementors <at> lists.cs.columbia.edu
Subject: [Sip-implementors] Custom Header fields

Hi All,

Can I add any custom headers to extend SIP, if it doesn't interfere with the existing protocol? is there any
protocol/procedure to do so?

Regards,

(Continue reading)

Brett Tate | 6 Feb 2012 13:31
Favicon

Re: Custom Header fields

See RFC 5727; it obsoletes or updates some of the related prior RFCs.

> -----Original Message-----
> From: sip-implementors-bounces <at> lists.cs.columbia.edu [mailto:sip-
> implementors-bounces <at> lists.cs.columbia.edu] On Behalf Of Vineet Menon
> Sent: Monday, February 06, 2012 2:42 AM
> To: Sip-implementors <at> lists.cs.columbia.edu
> Subject: [Sip-implementors] Custom Header fields
> 
> Hi All,
> 
> Can I add any custom headers to extend SIP, if it doesn't interfere
> with
> the existing protocol? is there any protocol/procedure to do so?
> 
> Regards,
> 
> Vineet Menon

Vineet Menon | 6 Feb 2012 16:01
Picon
Gravatar

Re: Custom Header fields

Hi Mahudeswaran,

Doesn't SIP recommends all proxies to make the custom headers pass i.e
headers which proxies cannot understand!! I have read it a couple of
reputed papers where the authors have implemented their custom enhancement
to SIP using custom headers.

Regards,

Vineet Menon

On 6 February 2012 18:01, Brett Tate <brett <at> broadsoft.com> wrote:

> See RFC 5727; it obsoletes or updates some of the related prior RFCs.
>
> > -----Original Message-----
> > From: sip-implementors-bounces <at> lists.cs.columbia.edu [mailto:sip-
> > implementors-bounces <at> lists.cs.columbia.edu] On Behalf Of Vineet Menon
> > Sent: Monday, February 06, 2012 2:42 AM
> > To: Sip-implementors <at> lists.cs.columbia.edu
> > Subject: [Sip-implementors] Custom Header fields
> >
> > Hi All,
> >
> > Can I add any custom headers to extend SIP, if it doesn't interfere
> > with
> > the existing protocol? is there any protocol/procedure to do so?
> >
> > Regards,
> >
(Continue reading)

Vineet Menon | 6 Feb 2012 17:50
Picon
Gravatar

Capability negotiation in SIP

Hi,

Can somebody tell me what is the scope of capability negotiation in SIP?
Take this scenario,
                               A --------------------Invite with H.264
codec------- >  B
                               A <------------------200 OK with H.261
codec-----   A

What will be the codec used in this case?

I believe I have assumes that SIP sends only one codec once rather than a
set of them! So I expect the call to get rejected!!!

Am I correct?? And waht kind of message is sent to indicate that capability
negotiation has failed?

Regards,

Vineet Menon
Vineet Menon | 6 Feb 2012 17:55
Picon
Gravatar

Significance of ACK in SIP

Hi,

I was wondering what is the significance of ACK in SIP?

I mean can't the caller UA just send the media instead of the ACK message?
This feature is present in H.323 too, so it might have some significance!
Its just that im not able to get it....

Regards,

Vineet Menon
Brett Tate | 6 Feb 2012 18:02
Favicon

Re: Capability negotiation in SIP

See RFC 3261, RFC 3264, and RFC 6337 concerning offer/answer model and failure responses such as 488.

> -----Original Message-----
> From: sip-implementors-bounces <at> lists.cs.columbia.edu [mailto:sip-
> implementors-bounces <at> lists.cs.columbia.edu] On Behalf Of Vineet Menon
> Sent: Monday, February 06, 2012 11:50 AM
> To: Sip-implementors <at> lists.cs.columbia.edu
> Subject: [Sip-implementors] Capability negotiation in SIP
> 
> Hi,
> 
> Can somebody tell me what is the scope of capability negotiation in
> SIP?
> Take this scenario,
>                                A --------------------Invite with H.264
> codec------- >  B
>                                A <------------------200 OK with H.261
> codec-----   A
> 
> What will be the codec used in this case?
> 
> I believe I have assumes that SIP sends only one codec once rather than
> a
> set of them! So I expect the call to get rejected!!!
> 
> Am I correct?? And waht kind of message is sent to indicate that
> capability
> negotiation has failed?
> 
> 
(Continue reading)

Neel Neelakantan | 6 Feb 2012 18:07

Re: Significance of ACK in SIP

Please read RFC 3261.  You should read section 4 Overview of Operation and other places where ACK usage is discussed.

For example, Offer/Answer exchanges can happen in 200 OK and ACK.

Thanks,
Neel.

> -----Original Message-----
> From: sip-implementors-bounces <at> lists.cs.columbia.edu [mailto:sip-
> implementors-bounces <at> lists.cs.columbia.edu] On Behalf Of Vineet Menon
> Sent: Monday, February 06, 2012 10:56 AM
> To: Sip-implementors <at> lists.cs.columbia.edu
> Subject: [Sip-implementors] Significance of ACK in SIP
> 
> Hi,
> 
> I was wondering what is the significance of ACK in SIP?
> 
> I mean can't the caller UA just send the media instead of the ACK
> message?
> This feature is present in H.323 too, so it might have some
> significance!
> Its just that im not able to get it....
> 
> 
> Regards,
> 
> Vineet Menon
> _______________________________________________
> Sip-implementors mailing list
(Continue reading)


Gmane