[sipcore] No WebSocket level authentication scenario [was RE: I-D Action: draft-ietf-sipcore-sip-websocket-09.txt]

Hi Inaki & all,

IIUC, The below text in Sec 7 of the draft:

"If no authentication is done at WebSocket level then SIP Digest
   authentication is required for every SIP request coming over the
   WebSocket connection."

has to be changed as Normative statement as follows:

"If no authentication is done at WebSocket level then SIP Digest
   authentication MUST be done for every SIP request coming over the
   WebSocket connection."

Please let me know in case I'm missing something.

Thanks
Partha

> -----Original Message-----
> From: sipcore-bounces@ietf.org [mailto:sipcore-bounces@ietf.org] On
> Behalf Of Iñaki Baz Castillo
> Sent: Thursday, June 13, 2013 6:53 AM
> To: SIPCORE (Session Initiation Protocol Core) WG
> Subject: Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-websocket-
> 09.txt
> 
> Hi all,
> 
> This new revision addresses all the issues reported in the WG since
> previous 08 revision. The changelog in revision 09 is the following:
> 
> 
> - Improved section "Handshake" (under "The WebSocket SIP
> Sub-Protocol") by mentioning the error handling when establishing a
> WebSocket connection (thanks to Suresh Krishnan).
> 
> - Mention to RFC 4168 (SIP SCTP) removed from the "SIP URI Transport
> Parameter" section (reported by Suresh Krishnan).
> 
> - "SIP Transport Implementation Requirements" section clarified by
> removing the "MAY" keyword (reported by Suresh Krishnan), and text
> from RFC 3261 section 18 amended (thanks to Barry Leiba).
> 
> - Text about certificate validation in secure WebSocket clarified in
> section "Secure WebSocket Connection" within "Security Considerations"
> (thanks to  Richard Barnes).
> 
> - Section "Authentication" made normative and text about SIP/Web
> authentication requirement improved.
> 
> - New appendix "Authentication Use Cases".
> 
> 
> Really thanks a lot for your help and comments.
> 
> 
> 
> 
> 2013/6/13  <internet-drafts@ietf.org>:
> >
> > A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> >  This draft is a work item of the Session Initiation Protocol Core
> Working Group of the IETF.
> >
> >         Title           : The WebSocket Protocol as a Transport for
> the Session Initiation Protocol (SIP)
> >         Author(s)       : Inaki Baz Castillo
> >                           Jose Luis Millan Villegas
> >                           Victor Pascual
> >         Filename        : draft-ietf-sipcore-sip-websocket-09.txt
> >         Pages           : 25
> >         Date            : 2013-06-12
> >
> > Abstract:
> >    The WebSocket protocol enables two-way realtime communication
> between
> >    clients and servers in web-based applications.  This document
> >    specifies a WebSocket sub-protocol as a reliable transport
> mechanism
> >    between SIP (Session Initiation Protocol) entities to enable usage
> of
> >    SIP in web-oriented deployments.  This document normatively
> updates
> >    RFC 3261.
> >
> >
> > The IETF datatracker status page for this draft is:
> > https://datatracker.ietf.org/doc/draft-ietf-sipcore-sip-websocket
> >
> > There's also a htmlized version available at:
> > http://tools.ietf.org/html/draft-ietf-sipcore-sip-websocket-09
> >
> > A diff from the previous version is available at:
> > http://www.ietf.org/rfcdiff?url2=draft-ietf-sipcore-sip-websocket-09
> >
> >
> > Internet-Drafts are also available by anonymous FTP at:
> > ftp://ftp.ietf.org/internet-drafts/
> >
> > _______________________________________________
> > sipcore mailing list
> > sipcore@ietf.org
> > https://www.ietf.org/mailman/listinfo/sipcore
> 
> 
> 
> --
> Iñaki Baz Castillo
> <ibc@aliax.net>
> _______________________________________________
> sipcore mailing list
> sipcore@ietf.org
> https://www.ietf.org/mailman/listinfo/sipcore