Under RFC 5922 a SIP TLS client compares the certificate identities against the original domain of the URI it passed into RFC 3263 resolution, not against the SRV target host name.

Checked 2026-09-24

the client MUST compare the original domain portion of the SIP AUS used as input to the RFC 3263 server location procedures to the SIP domain identities obtained from the certificate
Vendor
IETF
Product
SIP over TLS
Subsystem
TLS identity
Deployment
any
Region
not restricted
Release range
RFC 5922 (June 2010)
Checked
2026-09-24

Sources

Cite this note

APA

WarmTransfer. (2026, September 24). DNS SRV and service discovery for SIP: source note dns-srv-voice-rfc5922-original-domain. WarmTransfer. https://warmtransfer.net/knowledge/claims/dns-srv-voice-rfc5922-original-domain

BibTeX

@misc{warmtransfer-claim-dns-srv-voice-rfc5922-original-domain,
  title  = {DNS SRV and service discovery for SIP: source note dns-srv-voice-rfc5922-original-domain},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/dns-srv-voice-rfc5922-original-domain},
  note   = {Source note dns-srv-voice-rfc5922-original-domain, checked 2026-09-24}
}

Read in context