Clearly, you can only authenticate sequential requests corresponding to calls whose initial requests were subject to authentication. If the initial request was not authenticated, there is no reason to believe that the endpoint would support authentication of sequential requests.<br><br>As to whether you should do this, that is a controversial matter. I suppose that the security-maximising approach would be to challenge all requests, but it invites problems with many endpoints.<br><br>--<br>Alex Balashov - Principal<br>Evariste Systems LLC<br>235 E Ponce de Leon Ave<br>Suite 106<br>Atlanta, GA 30030<br>Tel: +1-678-954-0671<br>Web: http://www.evaristesys.com/, http://www.alexbalashov.com<br><br>David <kamailio.org@spam.lublink.net> wrote:<br><br>
<p>Hello,</p>
<p>Should I be requiring users to authenticate before letting them into loose_route(); ? What about anonymous calls from E164, how do I authenticate these calls after they have started?</p>
<p>Thanks,</p>
<p>David</p>
<p> </p>
<div> </div>