[VOIPSEC] Softphone RTP Encryption - Packetizer Beta Program

[Simon Horne]

Jason

We are very interested in porting this idea to SIP too. From the start, it 
was our intention to have a cross protocol solution, we were initially 
looking at using SAML http://en.wikipedia.org/wiki/SAML however our main 
problem was how to transport the message through the intermediaries to do 
the authentication and get it back so we can encrypt RTP.

If any has any ideas let me know

Simon


At 07:22 PM 24/10/2005, Austin, Jason wrote:
>Hi all,
>
>Finally found a moments time to make a submission. I've been following the 
>threads on the mailing list for some time now and have seen more and more 
>active work beginning with respect to efficient means of securing speech 
>path whilst remaining true to the ideals of the underlying "lightweight" 
>protocols.
>I am part of the voice engineering team at Cable & Wireless that looks 
>after the growth and development of the Bulldog LLU xDSL network which now 
>covers the whole of the UK pushing out from the major cities and beyond.
>Over the past year or so we have built a legacy TDM network to deliver a 
>POTS service equivalent to BT, launched a simple MGCP based second line 
>service for home workers, multiline ISDN to SIP gateway service for 
>businessses as well as building an H248 infrastructure to migrate our V5 
>based POTS service. A lot has happened in that short space of time as you 
>can see but we are pushing and growing still further and ever stronger 
>moving towards ADSL2+ using a GigE backhaul and MEN backbone with new and 
>emerging triple play services such as content on demand and HDTV.
>Our next major project is to develop a softphone client for our customers 
>to offer mobility of numbers and tarrifs in an easy to use pc based 
>client. Security is certainly a major area of interest to the developement 
>team because this will be the first product that breaches the safety of 
>the edge of our network. I would be keen to understand what work if any 
>you plan to do on a SIP based client rather than H323 as this will be our 
>prefered signalling protocol.
>
>JA
>
>Bulldog Voice Engineering
>
>
>-----Original Message-----
>From:   Voipsec-request at voipsa.org [mailto:Voipsec-request at voipsa.org]
>Sent:   Mon 10/24/2005 12:00
>To:     Voipsec at voipsa.org
>Cc:
>Subject:        Voipsec Digest, Vol 10, Issue 22
>Send Voipsec mailing list submissions to
>         Voipsec at voipsa.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>         http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>or, via email, send a message with subject or body 'help' to
>         Voipsec-request at voipsa.org
>
>You can reach the person managing the list at
>         Voipsec-owner at voipsa.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of Voipsec digest..."
>
>
>Today's Topics:
>
>    1. Looking for beta testers. (Simon Horne)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Mon, 24 Oct 2005 14:05:56 +0800
>From: Simon Horne <s.horne at packetizer.com>
>Subject: [VOIPSEC] Looking for beta testers.
>To: voipsec at voipsa.org
>Message-ID: <6.0.0.22.2.20051024124311.02df9e90 at mail.isvo.net>
>Content-Type: text/plain; charset="us-ascii"; format=flowed
>
>
>Hi guys
>
>The recent discussion on softphone security has been very interesting, and
>has uncovered a lot of issues to consider, and has also spurred us into
>taking action.
>
>Packetizer Labs are developing a secure H.323 based windows softphone that
>is capable of end-to-end High Encryption with caller authentication to
>TLSv1 over Standard RTP (which should make it interoperable with most
>standard H.323 based equipment) .
>
>Currently, we are looking for a small group of beta 1 testers to evaluate
>the softphone, test its security capabilities and test its'
>interpretability and report any finding or concerns they may have..
>
>If you think you can provide assistance with beta testing and general
>feedback then please let me know.
>
>Simon
>
>
>Simon Horne
>Packetizer Labs
>s.horne at packetizer.com
>www.packetizer.com/labs
>
>
>
>
>------------------------------
>
>_______________________________________________
>Voipsec mailing list
>Voipsec at voipsa.org
>http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>
>
>End of Voipsec Digest, Vol 10, Issue 22
>***************************************
>
>
>
>_______________________________________________
>Voipsec mailing list
>Voipsec at voipsa.org
>http://voipsa.org/mailman/listinfo/voipsec_voipsa.org

Simon Horne
Director
Packetizer Labs
www.packetizer.com/labs