On Thursday 04 August 2005 13:09, Michael Richardson wrote:
>   landline taps in theory, require physical access, and can in theory,
> only be done by the "phone company"

VOIP taps, in theory, require you to be "in the path" of the data flow...  I 
dunno, I think (hope) that the law sees the "theory" part as just that and 
not reality.

>   Well, I don't trust my landline.
>   I use GSM for mobile use, rather than the Canada-wide-cordless stuff
> that Bell and Telus sells.

CDMA has and uses encryption just as GSM does.  My LG4750 even has an easy to 
set option to use strong encryption.  :-)

>   There are some minor NAT-related issues that will prevent it from
> being plug-n-play for for people' whose Asterisk is behind their NAT.
> This will initially require that we do some minor manual configuration
> for these customers.

Actually it's trivial for any OpenS/WAN gateway to work through NAT (using 
NAT-T) that it would actually be *EASIER* to have multiple SIP phones behind 
a residential or corporate firewall than not. 

>   For people using WRT54GS as their NAT, we can just run the IPsec on
> that box, using OpenWRT....

True enough but that little processor I don't think would do such a hot job at 
authenticating, encrypting and decrypting the flood of small packets that a 
VOIP stream creates.  I have no data on it but it's just a gut feeling.

-A.

Reply via email to