Re: [dispatch] SASL Authentication for SIP

[Rick van Rein <[e-mail]>]

Hello,

> I'm not really following this. Users authenticate to domains with passwords
> (at least sometimes) but I would expect inter-domain authentication to be
> done with TLS mutual auth.

Ah, yes.  TLS is transport protection, usually between the proxies of
a domain.  It does not allow end-to-end authentication between the
parties.  Also, any encryption or key derivation that might be based on
the end-to-end assurance is lost for the end points.  (The proxy may be
operated by an external party.)

> Also, my sense is that authentication is not the primary barrier to
> inter-domain calling.

Of course there are more issues; IPv4/IPv6, MTU, and probably more.

> More or less. It's hard to see the IETF doing successful work in this space
> if providers aren't interested.

This is reasonable, but it does yield a catch-22 situation.  Can you
explain how this is commonly resolved?

I can see how a very large vendor would simply push their ideas out,
and not all technical ideas should be standardised.  OTOH, there is a
need to have standards before adoption can occur.

Since I have no implementation, I pull back the proposal, but please
give some guidance what to do before filing with Dispatch again.

-Rick