Re: [sipcore] I-D Action: draft-ietf-sipcore-sip-token-authnz-02.txt

[Roman Shpount <[e-mail]>]

On Tue, Jul 9, 2019 at 7:17 PM Rifaat Shekh-Yusef <[e-mail]>
wrote:

> Can you provide a real life example of confidential UA using OAuth for
>> registration only and not generating calls or sending any messages in
>> dialog (or using different authentication method for these actions)?
>>
>
> What? why do you think that is the case?
> How did you get to the conclusion that the UA will not be able to make a
> call?
>
>
Quoting Christer:

As far as I know, OAuth for SIP has only been used for REGISTER requests,
between the UA and the registrar. I have never heard about anyone using it
for non-REGISTER authentication, and I wonder whether we even need to cover
it in the draft.


So, I am trying to understand the use case where:

1. UA is confidential
2. OAuth is used for registration only
3. Other messages are not sent or different authentication method is used
for them, i.e. calls and in dialog messages are not initiated or initiated
using a different authentication method.

So far, I cannot figure out what this is.

Best Regards,
_____________
Roman Shpount