[asterisk-bugs] [JIRA] (ASTERISK-22820) Plaintext auth is still supported in IAX2

[Michael L. Young (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-22820?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=211465#comment-211465 ] 

Michael L. Young commented on ASTERISK-22820:
---------------------------------------------

First, thanks for the contribution.  It is appreciated.

My comment above was based on, to me, that it can be based on different point of views in regards to whether it needs to be taken out or not.  On one hand you have something that perhaps doesn't match the RFC but on the other hand it might still be there for backwards compatibility.  That is why I didn't think we should just assume that it needs to be taken out without some discussion and getting what the consensus was.  Hence my comment to mention it on the mailing list in order to find out if it was an issue that needed to be taken on or not.

Again, thanks for the contribution.
                
> Plaintext auth is still supported in IAX2
> -----------------------------------------
>
>                 Key: ASTERISK-22820
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-22820
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_iax2
>    Affects Versions: 11.6.0, 12.0.0-beta1
>            Reporter: Eugene
>            Severity: Minor
>         Attachments: iax2_remove_plaintext_auth_support.diff
>
>
> Starting from draft 2 of RFC 5456 (October 23, 2006) plaintext auth is not supported in IAX2 protocol. Please refer to section 8.6.3 of RFC 5456.
> But plaintext auth is still supported by Asterisk implementation of IAX2. This support should be dropped.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira