@techreport{rosenberg-sip-rfc4474-concerns-00, number = {draft-rosenberg-sip-rfc4474-concerns-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-rosenberg-sip-rfc4474-concerns/00/}, author = {Jonathan Rosenberg}, title = {{Concerns around the Applicability of RFC 4474}}, pagetotal = 14, year = 2008, month = feb, day = 17, abstract = {RFC 4474 defines a mechanism for secure identification of callers in the Session Initiation Protocol (SIP). This mechanism has been used as the foundation for some recent additional work, including connected party identification, anti-spam, and secure media. However, concerns have been raised about the applicability of RFC 4474 in real deployments and the actual level of security services it provides. This document describes those concerns.}, }