6 Jul
2011
6 Jul
'11
6:14 a.m.
Am 06.07.2011 10:30, schrieb Martin Hoffmann:
IIRC "sips:" does not mandate
any protocol, just that encryption must be used. Thus, plain TCP over IPsec would also fulfill "sips:", but for sure is different than TLS+TCP.
3261 specifically mentions TLS over TCP a couple of times. Before SCTP and DTLS came along, sips meant TLS, stat.
This confirms that sips is broken :-)