[VOIPSEC] IPSec and VoIP Security

[Randell Jesup]

"Geoff Devine" <gdevine at cedarpointcom.com> writes:
>...but one can assume that 3GPP will never bear the header overhead
>expense of securing the media traffic with IPSec.  Licensed spectrum is
>costly and IPSec ESP is probably unacceptable when you use a compression
>codec.  The header overhead for SRTP compared to RTP is the four octet
>HMAC-SHA1 authentication hash.  

Zero overhead if you decide you don't need AUTH (and you could use even
less auth I believe, at obviously lower levels of assurance of auth).

-- 
Randell Jesup, Worldgate (developers of the Ojo videophone), ex-Amiga OS team
rjesup at wgate.com
"The fetters imposed on liberty at home have ever been forged out of the weapons
provided for defence against real, pretended, or imaginary dangers from abroad."
		- James Madison, 4th US president (1751-1836)