[Serusers] authenticating BYE messages

[Klaus Darilion]

Ooops, sorry! I've mistaken something.

klaus

Andrei Pelinescu-Onciul wrote:
> On Mar 30, 2004 at 10:55, Klaus Darilion <klaus.mailinglists at pernau.at> wrote:
> 
>>You can disable UDP - that prevents from faked messages, but causes lots 
>>of interoperability problems.
> 
> 
> Disabling UDP won't prevent faked messages. You don't have to inject the
> faked message into the same tcp connection (which would be difficult).
> You can open another tcp connection and send the faked BYE on it. There
> is nothing that would prevent this (and there are/were some UAs that
> opened a different tcp connection for each request).
> 
> Andrei
> 
>