I have a questions in regards to SIP Auth, and specifically how Asterisk 13 with PJSIP appears to send Invites.

It seems that the typical Kamailio config sends the SIP auth challenge with the from domain as the auth realm.
however in the case of the Asterisk 13 ( PJSIP ) invite, the from domain is an RFC1918 IP address and I would have to use the domain from the request.

What im wanting to know is what the consensus is on where the auth realm comes from.
does everyone 100% agree that you send auth using the SIP From header, or is this something that some do Request domain ?   What im considering doing is to use the from domain, but if from domain = RFC1918 then use request domain.

Im just after everyone's opinion on how to best handle this invite, from a auth_challenge perspective.
( not so much if the Asterisk 13 PJSIP module is doing the right or wrong thing )


--