[VOIPSEC] voip security products

[Mike Stauffer]

Diana,

 

There seems to be little question as to the suitability for implementation
for Secure RTP.  How were you thinking of spreading keys around?  There are
a number of different ways (MIKEY, SDESCRIPTIONS, etc).

Each offers advantages for different environments.  In addition to the
sourceforge site (the reference implementation), www.minisip.org
<http://www.minisip.org/>  is interesting, and many vendors are looking to
utilize SRTP to secure their media streams.

 

TLS as a protocol is quite mature also.  I have heard from some (not me)
rumblings about scalability of TLS for hop-by-hop security for signaling.
perhaps someone on the list has seen a truly large-scale implementation of
the TLS/SIP solution, or examples of major vendors exploring or using TLS as
part of their SIP solution.

 

Mike Stauffer