Dear Kevin,
Thanks for your answer.
At least in this case, only TOP DOGS must be encrypted End-To-End while
they are talking between them.. so Asterisk should be right solution,
they would not take advantage of .. some Asterisk Features while they
are talking between them, but all other extensions and when they talk
with any other person, they would take full advantage of asterisk features.
I've read ZRTP works this way end-to-end and man in the middle is not
possible because end points negotiate security directly through RTP
which is gonna flow between end points directly. But.. only softphones
availables AFAIK
Is possible to secure calls end-to-end with SRPT ?
Thanks in advance.
Best Regards,
El 5/3/2012 9:22 AM, Kevin P. Fleming escribió:
On 05/03/2012 07:17 AM, Fernando Berretta wrote:
Hi,
I'm analyzing how to make Asterisk communications secured End-To-End,
and not sure which is the best approach, SRTP + TLS seems to be secured
but.. at least by default, doesn't appear to be End-To-End allowing
Asterisk administrators to wiretap communications.. some sites I've hear
that with SRTP is also possible End Points exchange keys between them
directly avoiding Man in the Middle, is it possible with asterisk ? how
On the other hand I've found ZRTP seems to be secured end-to-end, but we
couldn't find any IP phones with support for it.. just SoftPhones
Could someone please point me to the right direction ?
This is a fundamental architectural issue with all back-to-back User
Agents used in SIP networks. They are pretty much by definition a 'man
in the middle'. If they are used, the administrators will have access
to call signaling and media for all calls passing through them.
It is also important to realize that if you want end-to-end media
security, then you would not be able to use any of Asterisk's features
that involve media handling (transcoding, recording,
whispering/spying, music-on-hold, conferencing, etc.) Given that, what
you really want is a pure SIP proxy like Kamailio or OpenSIPs.
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
