priller
join:2000-10-20
Gainesville, VA
1 edit | reply to DrTCP
Re: Are you ready for SPIT? No ... no .... no .... no.
SIP Authentication is done with an authentication username and authentication realm. This should be implemented by any consumer VoIP service.
Somebody can't just send a SIP INVITE to your TA and make your phone ring. The SIP Proxy and the SIP Agent will only accept SIP messages from each other upon proper authenication.
Could SPIT happen to "open" SIP devices on the net, yes. But, not to a commercial service. |
|
priller
join:2000-10-20
Gainesville, VA
1 edit | Actually, here's an SIP Proxy sending back an "Unauthorized". |
|
 DrTCPYours trulyPremium,ExMod 1999-04
join:1999-11-09
Round Rock, TX | reply to priller
said by priller:Could SPIT happen to "open" SIP devices on the net, yes. I took the article was talking about SIP phones that could be IP dialled without going through a provider. So, provider authentication will not apply.
When the SIP phones becomes more common place most people might choose to SIP Phone to SIP Phone communications for some of their calls (along with DynDNS style registration). |
|
priller
join:2000-10-20
Gainesville, VA | Fair enough. When this has come up before, most people assumed it could happen to their Vonage, SunRocket, etc. accounts. |
|
 jimeezHeads Are EmptyPremium
join:2002-04-28
Mount Holly Springs, PA
 ·Vonage
| said by priller:When this has come up before, most people assumed it could happen to their Vonage, SunRocket, etc. accounts. I know I did. |
|
|
|
