[VOIPSEC] Why a secure keyechange for media encryption?

[Michael Prochaska]

Gupta, Sachin schrieb:
>  
> Michael,
> I am unaware of any such service. Can you provide with some information
> here. Are there any procedures which allow you to do a SIP URI Lookup
> and get the Certificates??

i don't think that there is already such a service but as i said, i want 
to describe at least one scenario in my thesis.

my idea:
before a UA sends an invite it requests the public key from a DNS 
server. DNSSEC (rfc4033, rfc4034 and rfc4035) defines a possibility to 
distribute keys through the DNS.

regards,
michael