Re: Plan for moving forward

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

At Thu, 07 Jun 2007 10:21:14 -0700,
Lakshminath Dondeti wrote:
> I definitely understand the mode of operation you are talking about, but 
> the point is that the caller has to authenticate twice, first with a 
> self-signed cert and then later using DTMF digits.  In some cases, the 
> first authentication has no real purpose, so why can't we skip it? 
> That's what I am getting at.

It does have a purpose: it ties the signalling to the media so
that (for instance) ANI works properly.

Moreover, what's the purpose of skipping it? As far as I can tell
it just saves a signature...

-Ekr