@karlauerbach @chris_bloke @glent @mattblaze Getting SIP security as good as possible was a continual challenge. As Security AD, I once blocked some RFC on security grounds, and had to defend my actions at a lunch surrounded by annoyed SIP folks. I had to pull out my laptop and show them exactly how the attack would work before they believed me. (It was, as I recall, a redirection request that was not properly authenticated.)