Iñaki Baz Castillo wrote:
El Viernes, 12 de Diciembre de 2008, Klaus Darilion escribió:
The user sends the request with: From: Anonymous sip:anonymous@XXXXXx P-Preferred-Identity: sip:alice@domain.com Privacy: id
If the user has only one identity, then the PPI header is not necessary as the user's identity will be know by the proxy,
Not in case the user wants hidden callerid. In this case the user indicates his identity in PPI and set From to anoymous value, and includes Privacy: id. The proxy then can know who the sender is and can require credentials, and after it removes PPI when sending the request to an untrusted node (or removes PPI and replaces with PAI when sending the request to a trusted node). But PPI is needed in this case even if the user has only one identity.
Probably I am being a little academic (or just too tired) but the username in the Authentication header would be enough information for the proxy to add the proper PAI.
regards klaus
and the user for example bill be identified by its authentication username.
The proxy can inspect the From header and PPI header to look for a local domain, and just in that case asks for auth (it makes no sense that a proxy requires credentials to an external user).
But this again may cause problem with multidomain configurations and the auth user does not include domain.
That's the point :)
Thus, maybe adding the PPI header always is a good idea.
Unfortunatelly I just know two implementations using PPI when asking for privacy: Twinkle and Sofia stack.
Regards.