Re: [Sip] Event Lists: Back-End Credentials

Adam Roach wrote:

>    * Add new SIP header field (or maybe method) for credential upload
> 
>    One very simple solution would be to add a new header which contains
>    a triple of [realm,userid,password]. We would specify that this
>    header is disallowed except over SIPS connections. The client would
>    include one or more such headers in its SUBSCRIBE request, and the
>    RLS would use them to obtain information on the user's behalf.

Dave then espressed reservations over this because it grants too much 
capability to the RLS.

I agree with Dave's concern over this, and think his suggestion to 
tackle the problem of delegation head on is the right solution in the 
long term. OTOH, it doesn't seem like we can wait that long to get 
something going for RLS.

To pursue Adam's suggestion without giving away the ranch, maybe 
presence servers could have one set of credentials that grant only 
limited access (subscription by buddies), and another for full 
permissions. This is really just an implementation technique and so we 
couldn't standardize it, but it might be a way to allow this crippled 
mechanism to be useful.

	Paul

_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip