[Asterisk-Dev] Why Proxy-Authenticate instead of WWW-Authenticate
Olle E. Johansson
oej at edvina.net
Wed Jun 8 22:37:05 MST 2005
Mikael Magnusson wrote:
> It's often mentioned on the list that Asterisk is an user SIP agent and not a
> proxy. But why is then Proxy-Authenticate (and 407 Proxy
> Authentication Required) used instead of WWW-Authenticate
> (and 401 Unauthorized) in chan_sip. According to section 22.1 Framework
> in RFC 3261:
> In SIP, a UAS uses the 401 (Unauthorized) response to challenge the
> identity of a UAC.
I fully agree, but all patches to fix this has been refused because of
fear we might break something. This makes it hard to use Asterisk
together with an outbound proxy that authenticates.
More information about the asterisk-dev