Re: [reSIProcate-users] SIP over TLS?

[Daniel Pocock <daniel@xxxxxxxxxx>]

On 30/07/14 17:18, Nathan Stratton wrote:

On Tue, Jul 22, 2014 at 5:43 PM, Scott Godin <sgodin@xxxxxxxxxxxxxxx> wrote:

I don't believe there is any option to disable certificate validation as this is not a good practice.  : )

Agree, but there are a LOT of tandberg products out there with just "tandberg", they have valid certs and trust chains, but domains are all screwed up. 

Are you talking about a config option for the repro proxy or a config option in the API of the stack?

From my own experience, even if this was just an option for developers to use, there are many developers who don't fully understand TLS and enable something like this as a shortcut and forget to disable it later.

That said, I would not be averse to having this functionality in the API but I don't think we should make it easy to disable via repro.config