msec-2----Page:3
1  2  3  4  5  6  7  8  9 

Problem description
Very often, one does not have the PKr in advance, especially for peer-to-peer communication such as SIP
Certificate of responder may not be known in advance
Can not use MIKEY Public Key mode
Responder may have different identity than one originally called
Calls may be made to “group aliases”, phone numbers for hunt groups, etc.
“Forking” or “retargeting” (SIP for “forwarding”)
Can not predict who will answer
Will result in multiple round-trips
You may still want to do media encryption (sRTP) in those cases
PPT Version