RE: Plan for moving forward

["Dan Wing" <dwing@xxxxxxxxx>]

> > Yes, but in conjunction with SIP-Identity (RFC4474) you get
> > authentication -- if, of course, you trust the entity that 
> > created that RFC4474 signature.  I don't usually think of DTLS-SRTP
> > without SIP-Identity, myself -- without SIP-Identity, you're getting
> > little more than opportunistic encryption (unless you store the
> > certificate you used last time with that same party, and/or read 
> > each other's certificate fingerprints or something akin to that).
> 
> Totally agree. I'm just saying that we ought to think of the 
> authentication as happening in the signalling and being transferred
> into the media. We should try to avoid having authentication 
> mechanisms which authenticate only the media and not the signalling.

I agree.

-d