The document ”The use of the SIPS URI Scheme in the Session Initiation Protocol (SIP)“ is now approved by the IESG as a proposed standard. This is an update to RFC3261 that clears up a lot of the issues that has been open in regards to the SIPS: URL scheme.Now we need some clarifications on the “;transport=tls” use and implementation notes, so that all application developers can start working with fixing the applications.I did not realize how bad the situation was until last SIPit where I participated in a TLS interoperability test. There where too many opinions on how to implement and support TLS in SIP, and too many non-interoperable implementations. A missing piece in many implementations, is DNS NAPTR support. NAPTR plays a very important role in secure SIP connection setups. The biggest question still remains: What’s a secure call? For Asterisk, we have to do a lot of work here to implement security in the dialplan. But at least we have one document that more clearly explains SIPS: to work with now!
Archived Entry
- Post Date:
- Friday, Jan 16th, 2009 at 11:48
- Category:
- IETF standards & drafts and Security
- Do More:
- Responses are currently closed, but you can trackback from your own site.
Elsewhere
- Latest
- SIPit 26 - Why SIP testing is important to Asterisk and to you
- Robert Sparks on the importance of John Postel’s robustness principle
- Realtime communication - the Open way
- Important security advisory for Asterisk :: Dialstring injections
- Asterisk 1.8 LTS wishlist #1: New media negiotiation framework
- Why should the VoIP users care about IPv6?
- Test my RTCP test branch based on Asterisk 1.4!
- Kamailio 3.0 is released
- Measuring voice quality in Asterisk
- Jabber’s 11 year birthday and todo-list for 2010
© Copyright 2000-2008 Edvina AB, Sollentuna, Sweden. All rights reserved. You may not copy the material and publish without our consent.
However, you are free and welcome to link to our site.
In Swedish:
Materialet får inte spridas i någon form utan vårt godkännande. Vi är öppna för dialog, så fråga oss
om du har något tänkt användningsområde. Du får gärna länka till voip-forum.com!
Edvina AB, Runbovägen 10, SE-192 48 Sollentuna, Sweden
Powered by WordPress 2.3.2. using the disconnected Theme. Best Viewed with Firefox.








