RE: [Sip] Strict, Semi-Strict and Loose mode in RPH - not a good fit for ets and wps

Janet P Gunn <jgunn6@csc.com> Mon, 08 November 2004 14:48 UTC

Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA14583 for <sip-web-archive@ietf.org>; Mon, 8 Nov 2004 09:48:28 -0500 (EST)
Received: from megatron.ietf.org ([132.151.6.71]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CRApK-0002uA-8y for sip-web-archive@ietf.org; Mon, 08 Nov 2004 09:49:05 -0500
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CRASU-0004TK-W3; Mon, 08 Nov 2004 09:25:26 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1CRAI8-0001ZC-3r for sip@megatron.ietf.org; Mon, 08 Nov 2004 09:14:44 -0500
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA10616 for <sip@ietf.org>; Mon, 8 Nov 2004 09:14:41 -0500 (EST)
Received: from amer-mta02.csc.com ([20.137.2.248]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1CRAIf-0001rw-UF for sip@ietf.org; Mon, 08 Nov 2004 09:15:18 -0500
Received: from csc.com (va-fch34.csc.com [20.6.39.227]) by amer-mta02.csc.com (Switch-3.1.6/Switch-3.1.0) with ESMTP id iA8EEYJL017946; Mon, 8 Nov 2004 09:14:34 -0500 (EST)
Subject: RE: [Sip] Strict, Semi-Strict and Loose mode in RPH - not a good fit for ets and wps
To: "James M. Polk" <jmpolk@cisco.com>
X-Mailer: Lotus Notes Release 5.0.11 July 24, 2002
Message-ID: <OF9688E974.D722A00B-ON85256F46.004DA718-85256F46.004E48F9@csc.com>
From: Janet P Gunn <jgunn6@csc.com>
Date: Mon, 08 Nov 2004 09:13:01 -0500
X-MIMETrack: Serialize by Router on VA-FCH34/SRV/CSC(Release 6.0.3|September 26, 2003) at 11/08/2004 09:15:24 AM
MIME-Version: 1.0
Content-type: text/plain; charset="US-ASCII"
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 8abaac9e10c826e8252866cbe6766464
Cc: fonashp@ncs.gov, Darren E Pado <dpado@csc.com>, Saud Negash <snegash@csc.com>, mosleyv@ncs.gov, Richard F Kaczmarek <rkaczmarek@csc.com>, sip@ietf.org, nyquetek@msn.com, a.ephrath@ieee.org, Ken Carlberg <carlberg@g11.org.uk>, KENNETH.R.ERNEY@saic.com, suracif@ncs.gov, Dennis Q Berg <dberg3@csc.com>
X-BeenThere: sip@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Session Initiation Protocol <sip.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/sip>, <mailto:sip-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:sip@ietf.org>
List-Help: <mailto:sip-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/sip>, <mailto:sip-request@ietf.org?subject=subscribe>
Sender: sip-bounces@ietf.org
Errors-To: sip-bounces@ietf.org
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 69a74e02bbee44ab4f8eafdbcedd94a1

James said,

>[JG]I am not as concerned about this case (valid namespace.valid value -
>just not authorized).

I would think this is of concern - as anyone (literally) can be in this
group.

I was thinking that it was of less concern because it is someone who
already knows the valid namespace and value.

But you are right, if it is someone who is randomly or systematically
trying namespace/value combinations, we just told them "you got a hit".
So I take it back about being less concerned.

Janet



----------------------------------------------------------------------------------------

This is a PRIVATE message. If you are not the intended recipient, please
delete without copying and kindly advise us by e-mail of the mistake in
delivery. NOTE: Regardless of content, this e-mail shall not operate to
bind CSC to any order or other contract unless pursuant to explicit written
agreement or government initiative expressly permitting the use of e-mail
for such purpose.
----------------------------------------------------------------------------------------




_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip