I am reading about authentication protocols for SIP. I found that all protocols transfer the id/Username during the mutual authentication phase, directly with the message. Is it necessary to have the username/id directly in CHALLENGE-RESPONSE messages ? Why is anonymity in public channels is not considered in case of authentication for SIP ?
Why dynamic identity concept is not used in authentication for SIP ? is there any reason or we can use Dynamic identity instead of passing username/id ?


SIP supports full encryption ot the communication channel if you need anonymity.

  • I'm not sure this actually answers the question... or is accurate (since when does encryption provide anonymity?)... but I'm also not sure it's wrong or not an answer, so I'm just gonna leave this comment. Feb 6 '14 at 7:09
  • encryption provides privacy, not anonymity. The OP asks about the ways of authentication, so the user is still known to the server, but with encryption it's hidden from the sniffing man in the middle. Feb 6 '14 at 10:39
  • @StanislavSinyagin ok thanks. I am designing authentication protocol for SIP. So i found that most authentication protocols pass the id/username in REQUEST and RESPONSE messages. Is it a requirement of SIP specification to have the username as part of REQUEST or RESPONSE message ? or i can create a dynamic identity instead and pass it? whether will have that freedom?
    – LearningC
    Feb 7 '14 at 5:04
  • I'm afraid you have to get deeper into ietf.org/rfc/rfc3261.txt Feb 7 '14 at 9:07
  • ok. then you too cant be sure that dynamic identity can be used or not. ok anyway thanks for info. i checked that document already but dint go through much. ok i'll check it again.
    – LearningC
    Feb 7 '14 at 9:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.