From mailnull@www1.ietf.org Tue Nov 26 08:38:58 2002 Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA00748 for ; Tue, 26 Nov 2002 08:38:58 -0500 (EST) Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id gAQDfDW26701 for sip-security-archive@odin.ietf.org; Tue, 26 Nov 2002 08:41:13 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAQDfDv26698 for ; Tue, 26 Nov 2002 08:41:13 -0500 Received: from www1.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA00726 for ; Tue, 26 Nov 2002 08:38:27 -0500 (EST) Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAQDf7v26690; Tue, 26 Nov 2002 08:41:07 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAQDYtv25848 for ; Tue, 26 Nov 2002 08:34:55 -0500 Received: from albatross.wise.edt.ericsson.se (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA00489 for ; Tue, 26 Nov 2002 08:32:09 -0500 (EST) Received: from hendrix.lmf.ericsson.se (hendrix.lmf.ericsson.se [131.160.11.8]) by albatross.wise.edt.ericsson.se (8.12.1/8.12.1/WIREfire-1.4) with ESMTP id gAQDYpKV004563 for ; Tue, 26 Nov 2002 14:34:51 +0100 (MET) Received: from lmf.ericsson.se (EF5DM00K04BAV71.lmf.ericsson.se [131.160.30.3]) by hendrix.lmf.ericsson.se (8.12.6/8.12.6/lmf-2.1-jcs) with ESMTP id gAQDYqu4011942 for ; Tue, 26 Nov 2002 15:34:52 +0200 (EET) Message-ID: <3DE37875.B20A0D34@lmf.ericsson.se> Date: Tue, 26 Nov 2002 15:34:45 +0200 From: Gonzalo Camarillo X-Mailer: Mozilla 4.74 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Sip-security@ietf.org Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit Subject: [Sip-security] How active is this list? Sender: sip-security-admin@ietf.org Errors-To: sip-security-admin@ietf.org X-BeenThere: sip-security@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Security Issues for the SIP protocol List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit Folks, It seems that the security design team is not active anymore. I was wondering whether or not we still need this mailing list. Opinions? Thanks, Gonzalo _______________________________________________ Sip-security mailing list Sip-security@ietf.org https://www1.ietf.org/mailman/listinfo/sip-security From mailnull@www1.ietf.org Tue Nov 26 08:48:55 2002 Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA01154 for ; Tue, 26 Nov 2002 08:48:55 -0500 (EST) Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id gAQDp9l27177 for sip-security-archive@odin.ietf.org; Tue, 26 Nov 2002 08:51:09 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAQDp9v27173 for ; Tue, 26 Nov 2002 08:51:09 -0500 Received: from www1.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA01146 for ; Tue, 26 Nov 2002 08:48:24 -0500 (EST) Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAQDp3v27157; Tue, 26 Nov 2002 08:51:03 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAQDoOv27130 for ; Tue, 26 Nov 2002 08:50:24 -0500 Received: from zrc2s0jx.nortelnetworks.com (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA01126 for ; Tue, 26 Nov 2002 08:47:39 -0500 (EST) Received: from zrc2c011.us.nortel.com (zrc2c011.us.nortel.com [47.103.120.51]) by zrc2s0jx.nortelnetworks.com (Switch-2.2.0/Switch-2.2.0) with ESMTP id gAQDoWq15922; Tue, 26 Nov 2002 07:50:32 -0600 (CST) Received: by zrc2c011.us.nortel.com with Internet Mail Service (5.5.2653.19) id ; Tue, 26 Nov 2002 07:50:19 -0600 Message-ID: <1B54FA3A2709D51195C800508BF9386A05A7CB05@zrc2c000.us.nortel.com> From: "Mary Barnes" To: "'Gonzalo Camarillo'" , Sip-security@ietf.org Subject: RE: [Sip-security] How active is this list? Date: Tue, 26 Nov 2002 07:50:14 -0600 X-Mailer: Internet Mail Service (5.5.2653.19) Sender: sip-security-admin@ietf.org Errors-To: sip-security-admin@ietf.org X-BeenThere: sip-security@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Security Issues for the SIP protocol List-Post: List-Help: List-Subscribe: , Gonzalo, I thought Dean made a suggestion a few months back that this list can go away (but, I don't see that posting in the archives). There's only ever been a minimal of discussion on this list, with most ending up on the main SIP list. So, I would think it can easily disappear from active duty, but it might be nice to keep the archives if that would be possible. Mary. -----Original Message----- From: Gonzalo Camarillo [mailto:Gonzalo.Camarillo@lmf.ericsson.se] Sent: Tuesday, November 26, 2002 7:35 AM To: Sip-security@ietf.org Subject: [Sip-security] How active is this list? Folks, It seems that the security design team is not active anymore. I was wondering whether or not we still need this mailing list. Opinions? Thanks, Gonzalo _______________________________________________ Sip-security mailing list Sip-security@ietf.org https://www1.ietf.org/mailman/listinfo/sip-security _______________________________________________ Sip-security mailing list Sip-security@ietf.org https://www1.ietf.org/mailman/listinfo/sip-security From mailnull@www1.ietf.org Tue Nov 26 23:30:56 2002 Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA04728 for ; Tue, 26 Nov 2002 23:30:56 -0500 (EST) Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id gAR4XJI19472 for sip-security-archive@odin.ietf.org; Tue, 26 Nov 2002 23:33:19 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAR4XJv19469 for ; Tue, 26 Nov 2002 23:33:19 -0500 Received: from www1.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA04722 for ; Tue, 26 Nov 2002 23:30:25 -0500 (EST) Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAR4XCv19461; Tue, 26 Nov 2002 23:33:12 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAR4WHv19442 for ; Tue, 26 Nov 2002 23:32:17 -0500 Received: from hotmail.com (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA04716 for ; Tue, 26 Nov 2002 23:29:23 -0500 (EST) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 26 Nov 2002 20:32:07 -0800 Received: from 216.209.118.21 by lw11fd.law11.hotmail.msn.com with HTTP; Wed, 27 Nov 2002 04:32:06 GMT X-Originating-IP: [216.209.118.21] From: "Dmitri Vinokurov" To: sip-security@ietf.org Date: Wed, 27 Nov 2002 04:32:06 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 27 Nov 2002 04:32:07.0026 (UTC) FILETIME=[F1607520:01C295CD] Subject: [Sip-security] "forking problem" Sender: sip-security-admin@ietf.org Errors-To: sip-security-admin@ietf.org X-BeenThere: sip-security@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Security Issues for the SIP protocol List-Post: List-Help: List-Subscribe: , Hello, The "forking problem" for challenge-response authentication was mentioned in many sources. It looks like phone line is splitted inside the residence to more that one phones and all of them try to challenge the caller by different nonces, but Proxy accepts only the very first 401 response with all the ensuing consequences. Why doesn't Proxy wait X msec after receving first response (if it is 401), accept all challenges with the same Call-ID but not more than Y of them (say, 8) and compile and send to the caller one composite response as forking proxy does. What is wrong with such approach? And what is the proper generic non-PKI solution if any exists? Was is described somewhere? Thank you. Dmitri _________________________________________________________________ Tired of spam? Get advanced junk mail protection with MSN 8. http://join.msn.com/?page=features/junkmail _______________________________________________ Sip-security mailing list Sip-security@ietf.org https://www1.ietf.org/mailman/listinfo/sip-security From mailnull@www1.ietf.org Thu Nov 28 18:59:59 2002 Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA06956 for ; Thu, 28 Nov 2002 18:59:59 -0500 (EST) Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id gAT02Ld16196 for sip-security-archive@odin.ietf.org; Thu, 28 Nov 2002 19:02:21 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAT02Lv16193 for ; Thu, 28 Nov 2002 19:02:21 -0500 Received: from www1.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA06950 for ; Thu, 28 Nov 2002 18:59:28 -0500 (EST) Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAT02Fv16182; Thu, 28 Nov 2002 19:02:16 -0500 Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id gAT012v16161 for ; Thu, 28 Nov 2002 19:01:02 -0500 Received: from sj-msg-core-3.cisco.com (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA06908 for ; Thu, 28 Nov 2002 18:58:09 -0500 (EST) Received: from mira-sjc5-9.cisco.com (IDENT:mirapoint@mira-sjc5-9.cisco.com [171.71.163.32]) by sj-msg-core-3.cisco.com (8.12.2/8.12.2) with ESMTP id gAT00c0J025105 for ; Thu, 28 Nov 2002 16:00:38 -0800 (PST) Received: from CJ650 (ssh-sjc-1.cisco.com [171.68.225.134]) by mira-sjc5-9.cisco.com (Mirapoint Messaging Server MOS 3.1.0.66-GA) with SMTP id DJF00096; Thu, 28 Nov 2002 16:01:15 -0800 (PST) From: "Cullen Jennings" To: Subject: RE: [Sip-security] How active is this list? Date: Thu, 28 Nov 2002 16:02:03 -0800 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: <1B54FA3A2709D51195C800508BF9386A05A7CB05@zrc2c000.us.nortel.com> Content-Transfer-Encoding: 7bit Sender: sip-security-admin@ietf.org Errors-To: sip-security-admin@ietf.org X-BeenThere: sip-security@ietf.org X-Mailman-Version: 2.0.12 Precedence: bulk List-Unsubscribe: , List-Id: Security Issues for the SIP protocol List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit make this list die :-) > -----Original Message----- > From: sip-security-admin@ietf.org [mailto:sip-security-admin@ietf.org]On > Behalf Of Mary Barnes > Sent: Tuesday, November 26, 2002 5:50 AM > To: 'Gonzalo Camarillo'; Sip-security@ietf.org > Subject: RE: [Sip-security] How active is this list? > > > Gonzalo, > > I thought Dean made a suggestion a few months back that this list can go > away (but, I don't see that posting in the archives). There's only ever > been a minimal of discussion on this list, with most ending up on the main > SIP list. So, I would think it can easily disappear from active > duty, but it > might be nice to keep the archives if that would be possible. > > Mary. > > -----Original Message----- > From: Gonzalo Camarillo [mailto:Gonzalo.Camarillo@lmf.ericsson.se] > Sent: Tuesday, November 26, 2002 7:35 AM > To: Sip-security@ietf.org > Subject: [Sip-security] How active is this list? > > > Folks, > > It seems that the security design team is not active anymore. I was > wondering whether or not we still need this mailing list. > > Opinions? > > Thanks, > > Gonzalo > _______________________________________________ > Sip-security mailing list > Sip-security@ietf.org > https://www1.ietf.org/mailman/listinfo/sip-security > _______________________________________________ > Sip-security mailing list > Sip-security@ietf.org > https://www1.ietf.org/mailman/listinfo/sip-security > _______________________________________________ Sip-security mailing list Sip-security@ietf.org https://www1.ietf.org/mailman/listinfo/sip-security