[Serusers] authenticating BYE messages

[Andrei Pelinescu-Onciul]

On Mar 30, 2004 at 10:55, Klaus Darilion <klaus.mailinglists at pernau.at> wrote:
> You can disable UDP - that prevents from faked messages, but causes lots 
> of interoperability problems.

Disabling UDP won't prevent faked messages. You don't have to inject the
faked message into the same tcp connection (which would be difficult).
You can open another tcp connection and send the faked BYE on it. There
is nothing that would prevent this (and there are/were some UAs that
opened a different tcp connection for each request).

Andrei