[VoiceOps] VoIP Abuse Project

[Alex Balashov]

On 09/20/2010 08:47 PM, James Hess wrote:

> It might be useful to think about possible deprecation of the use of
> UDP  for registration, or at least  the requiring of a firm
> bidirectional acknowledgement with nonce  (as in an authenticated
> request/acknowledgement), before a registration  "attempt"  can be
> regarded to fail or succeed.

"Firm bidirectional acknowledgment" is already required in an 
authenticated REGISTER sequence:

1. ---------- REGISTER ---------->
2. <-------- 401 challenge -------
4. ------- REGISTER + digest ---->
5. <---------- 200 OK ------------

Unless this happens, an attempt cannot be regarded to "succeed."

-- 
Alex Balashov - Principal
Evariste Systems LLC
1170 Peachtree Street
12th Floor, Suite 1200
Atlanta, GA 30309
Tel: +1-678-954-0670
Fax: +1-404-961-1892
Web: http://www.evaristesys.com/