AS4 - clarification on pulling from the default channel with no WS-Security UserName tokens

Hi All

I'm wondering if anyone could clarify what the expected use case should be when an AS4 pull signal message is received for the default MPC with no WS-Security user name tokens. 

Possibilities could include any of the following

i   Return any message stored on the default MPC for the default user as defined in section 4.3 of the ebms 3 core spec.

ii  Return an HTTP 401 authorisation failed unknown reason.

-- 
Regards
Theo