[OpenSER-Devel] nonce errors in trunk
Bogdan-Andrei Iancu
bogdan at voice-system.ro
Fri Jun 6 18:34:19 CEST 2008
It will be changed to DBG - the same as the log for stale nonce .
Regards,
Bogdan
Ovidiu Sas wrote:
> hmm ... even WARNING may be to noisy on a loaded server ...
> Also, can we merge the two probes into a single one?
>
>
> On Fri, Jun 6, 2008 at 11:53 AM, Juha Heinanen <jh at tutpro.com> wrote:
>
>> Bogdan-Andrei Iancu writes:
>>
>> > I'm not saying that re-using the nonce is against RFC and that the phone
>> > is broken - I'm saying it is a security issue (stolen credentials) and
>> > rejecting such auth requests does not break anything.
>>
>> in that case i would say that ERROR level messages should be downgraded
>> to warning or notice, because there is no error.
>>
>> -- juha
>>
>> _______________________________________________
>> Devel mailing list
>> Devel at lists.openser.org
>> http://lists.openser.org/cgi-bin/mailman/listinfo/devel
>>
>>
>
>
More information about the Devel
mailing list