Re: [Sipping] Updated version from Functions of SBC draft

[Gonzalo Camarillo <[e-mail]>]

Hi Henry,

you are right. We need to expand the security considerations section. In 
the document, we talk about mechanisms that break end-to-end integrity 
or end-to-end authentication... we need to mention those issues again in 
the security considerations sections.

Thanks,

Gonzalo

[e-mail] wrote:
> This is a useful document and well worth the time.
> 
> In Section 4 "Security Considerations" there is only very cryptic language
> (no pun intended):
> 
>    Many of the functions this document describes have important security
>    and privacy implications.
> 
> This needs to be properly expanded. What are for example the vulnerabilities
> if an SBC is compromised?
> 
> Thanks, Henry
> 
> -----Original Message-----
> From: Jani Hautakorpi (JO/LMF) [mailto:[e-mail]] 
> Sent: Wednesday, July 27, 2005 4:07 AM
> To: [e-mail]
> Cc: [e-mail]; [e-mail];
> [e-mail]; [e-mail]
> Subject: [Sipping] Updated version from Functions of SBC draft
> 
> Hi,
> 
> We have updated the "SIP-Unfriendly Functions in Current Communication 
> Architectures" draft, and it can be fetched from:
> 
> http://www.ietf.org/internet-drafts/draft-camarillo-sipping-sbc-funcs-01.txt
> 
> We've got some feedback from the area director and others, and we have 
> proceeded according to the feedback.
> 
> New version of the draft concentrates strictly to those functions of SBC 
> that break SIP in one way or the other. We believe that it's important to 
> document these functions, and then use these as a foundation for the 
> future work.
> 
> 

-- 
Gonzalo Camarillo         Phone :  [phone]
Oy L M Ericsson Ab        Mobile:  [phone]
Telecom R&D               Fax   :  [phone]
FIN-02420 Jorvas          Email :  [e-mail]
Finland                   http://www.hut.fi/~gonzalo

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use [e-mail] for questions on current sip
Use [e-mail] for new developments of core SIP