[SR-Users] loose_route security

Juha Heinanen jh at tutpro.com
Sun Apr 17 13:54:24 CEST 2011


Iñaki Baz Castillo writes:

> Depending on our topology we can just ask for authentication for every
> in-dialog request (unless it comes from a trusted node as a PSTN gw)
> but without trying to check the identity of the in-dialog request
> originator. Well, the identity is asserted by the proxy after
> authentication success. During an in-dialog request it doesn't matter
> the From/To URI value (this is not true in an initial INVITE in which
> From is usually used for accounting and CLI.

inaki,

lets say that a sip ua has dialog established with pstn gw and the sip
ua sends refer to pstn gateway for the purpose of transferring the call
to another pstn destination.  in that case, referred-by uri is used for
accounting of the new pstn leg.

-- juha



More information about the sr-users mailing list