What's the difference between a 401 Unauthorized and a 403 Forbidden error in SIP?

A 401 Unauthorized error indicates that authentication is required. The server responds with a 'WWW-Authenticate' header, prompting the client to provide credentials. A 403 Forbidden error, however, means authentication is not the issue; the client is simply not allowed to access the resource, regardless of credentials.