Skip to content

Extra Session URI validation #2

Description

@tuijldert

Specifics: Although as far as I can tell, it's not required for an endpoint to
do so, it probably would be good and add value as an extra security measure to
confirm that the adjacent endpoint URI's address stated on the From-Path:
session URI is actually coming from the host that is on the URI.

Solution directions: In order to do this, one might need to do some reverse DNS
lookups, that in case of failure shouldn't contribute to the decision of
accepting or not the incoming connection/session.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions