[VOIPSEC] Voipsec Digest, Vol 48, Issue 12

[Klaus Darilion]

Bggdg at aol.com wrote:
> 
> In a message dated 12/29/2008 6:05:20 A.M. Central Standard Time,  
> voipsec-request at voipsa.org writes:
> 
> _http://www.ipcom.at/index.php?id=565_ (http://www.ipcom.at/index.php?id=565) 
>  
> Would rfc 4474 not provide a far more secure authentication than the  
> proposed solution of digest authentication?

RFC 4474 solves a different problem.

Digest authentication will be used to authenticate the user to the 
service providers proxy.

RFC 4474 allows to authenticate requests between domains, unless you 
deploy client certificates.


regards
klaus