[OpenSIPS-Users] Multi-domain and reinvite authentications

[Carlo Dimaggio]

Il giorno 26/ott/09, alle ore 17:27, Iñaki Baz Castillo ha scritto:

> El Lunes, 26 de Octubre de 2009, Carlo Dimaggio escribió:
>> Is there a better implementation?
>
> Yes, don't ask for authentication for a re-INVITE :)

Hi Iñaki,

Is this the right implementation or a workaround? (in Flavio  
Goncalves' book I see the authentication of re-invites...)
There could be a security issue without this authentication? (for  
example a custom packet with a fake to_tag and a route header?

Thanks