[asterisk-dev] Security Request for discussion: Should sip.conf allowguest=yes be the default

[Michiel van Baak]

On 14:31, Thu 12 Nov 09, Tilghman Lesher wrote:
> On Thursday 12 November 2009 14:00:44 Jeff LaCoursiere wrote:
> > On Thu, 12 Nov 2009, Atis Lezdins wrote:
> > > On Thu, Nov 12, 2009 at 8:34 PM, Tzafrir Cohen <tzafrir.cohen at xorcom.com> 
> wrote:
> > >> Please explain to me why exactly allowing guests is a bad thing. How can
> > >> I allow people to call me from the internet? Create a local account for
> > >> each and every one in my addressbook?
> > >
> > > How about creating context "guest" or "public", and setting it as
> > > default in samples? That would make user to think much more before
> > > adding some code there.
> >
> > That sounds like the most reasonable suggestion yet.
> 
> That sounds fine to me.

And me.

-- 

Michiel van Baak
michiel at vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x71C946BD

"Why is it drug addicts and computer aficionados are both called users?"