Re: [Sip] Need for RPH in SIP Responses

Niranjan,

> As has been pointed out earlier, possible security risk of permitting 
> RPH in SIP responses is minimal in managed IP networks where this 
> capability is generally expected to be used.
>
For this argument to apply, the element sending the RPH header in a 
response and the element acting on it should both be in the same domain. 
In other words you are talking about a closed system, a very specific 
environment. The use of this header in this way then clearly does not 
apply to the Internet; the proper way to standardize this is as a 
P-header (instead of taking a header which is already defined in a 
"approved-for-the-Internet" RFC, and modifying its allowed use to 
accommodate for a non-Internet use)

Regards,
Jeroen


_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip