Re: [Sip] cnonce in RFC 3261

IÃ±aki Baz Castillo

FWIW -- the only one being rude in this discussion is you.

You could have used a better tone when telling 
Mousavi that the sip-implementers list is where 
these questions should be asked.

James

At 11:52 AM 6/3/2010, IÃ±aki Baz Castillo wrote:
>2010/6/3 Moloud Mousavi 
><moloud@blueslice.com>e.com>: > Hello IÃ±aki, > > This 
>is the explanation of cnonce in RFC 2617: > > 
>cnonce > This MUST be specified if a qop 
>directive is sent (see above), and > MUST NOT be 
>specified if the server did not send a qop 
>directive in > the WWW-Authenticate header 
>field. The cnonce-value is an opaque > quoted 
>string value provided by the client and used by 
>both client > and server to avoid chosen 
>plaintext attacks, to provide mutual > 
>authentication, and to provide some message 
>integrity protection. > See the descriptions 
>below of the calculation of the responsedigest > 
>and request-digest values. > > > It seems that 
>cnonce existence is optional, but then If you 
>want to calculate the responseDigest, you have 
>to consider that again. > > Assuming both the 
>same: in fact I tried putting the same value for 
>nonce and cnonce, and it didn't work. Where did 
>you read that nonce and cnonce have to be 
>equal? > If my question is trivial, why do "YOU" 
>bother to put time to answer me back, leave it 
>to someone else. First of all, this maillist is 
>not the place to ask trivial or non trivial 
>questions about already approved specifications 
>for SIP protocol, use sip-implementors instead. 
>Second: you should be not so rude with people 
>trying to help you. -- IÃ±aki Baz Castillo 
><ibc@aliax.net> 
>_______________________________________________ 
>Sip mailing 
>list  https://www.ietf.org/mailman/listinfo/sip 
>This list is essentially closed and only used 
>for finishing old business. Use 
>sip-implementors@cs.columbia.edu for questions 
>on how to develop a SIP implementation. Use 
>dispatch@ietf.org for new developments on the 
>application of sip. Use sipcore@ietf.org for 
>issues related to maintenance of the core SIP specifications.