
On 09/20/2010 08:47 PM, James Hess wrote:
It might be useful to think about possible deprecation of the use of UDP for registration, or at least the requiring of a firm bidirectional acknowledgement with nonce (as in an authenticated request/acknowledgement), before a registration "attempt" can be regarded to fail or succeed.
"Firm bidirectional acknowledgment" is already required in an authenticated REGISTER sequence: 1. ---------- REGISTER ----------> 2. <-------- 401 challenge ------- 4. ------- REGISTER + digest ----> 5. <---------- 200 OK ------------ Unless this happens, an attempt cannot be regarded to "succeed." -- Alex Balashov - Principal Evariste Systems LLC 1170 Peachtree Street 12th Floor, Suite 1200 Atlanta, GA 30309 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/