[sipcore] SASL Authentication for SIP

[Rick van Rein <[e-mail]>]

Hello,

Please note the following specification for SASL authentication
in SIP.  This serves as an alternative for Digest authentication.

The specification is based on our work on HTTP-SASL auth, and
may be combined with the SXOVER-PLUS mechanism that can be used
for Realm Crossover, that is, pass a client login attempt back
to their own domain, using TLS, DNSSEC and DANE to validate
that @domain.name part of the client identity.  Combined, this
enables authentication across SIP domains that have never been
in contact before.

Your feedback is kindly welcomed.  I am assuming that the ASAP
group is present in SIPCORE, so that I should not cross-post.

You are not present in London, right?

Best,

Rick van Rein
InternetWide.org


    -----    -----    -----    -----    -----    -----    -----


A new version of I-D, draft-vanrein-sipauth-sasl-01.txt
has been successfully submitted by Rick van Rein and posted to the
IETF repository.

Name:		draft-vanrein-sipauth-sasl
Revision:	01
Title:		SASL Authentication for SIP
Document date:	2022-10-14
Group:		Individual Submission
Pages:		13
URL:            https://www.ietf.org/archive/id/draft-vanrein-sipauth-sasl-01.txt
Status:         https://datatracker.ietf.org/doc/draft-vanrein-sipauth-sasl/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-vanrein-sipauth-sasl
Diff:           https://www.ietf.org/rfcdiff?url2=draft-vanrein-sipauth-sasl-01

Abstract:
   Many protocols benefit from "pluggable" authentication choice as a
   result of SASL authentication.  In the Session Initiation Protocol,
   the independent branch of HTTP Authentication has been elected.
   Recent progress has been made in bringing SASL to HTTP, but SIP has
   its own special considerations and needs its own embedding to gain
   the flexibility of SASL.