[OpenSER-Devel] nonce errors in trunk

[Ovidiu Sas]

hmm ... even WARNING may be to noisy on a loaded server ...
Also, can we merge the two probes into a single one?


On Fri, Jun 6, 2008 at 11:53 AM, Juha Heinanen <jh at tutpro.com> wrote:
> Bogdan-Andrei Iancu writes:
>
>  > I'm not saying that re-using the nonce is against RFC and that the phone
>  > is broken  - I'm saying it is a security issue (stolen credentials) and
>  > rejecting such auth requests does not break anything.
>
> in that case i would say that ERROR level messages should be downgraded
> to warning or notice, because there is no error.
>
> -- juha
>
> _______________________________________________
> Devel mailing list
> Devel at lists.openser.org
> http://lists.openser.org/cgi-bin/mailman/listinfo/devel
>