Hi
As far as SIP this problem can be taken care of by adding a B2BUa which
acts a proxy registrar.
U can create two UIDs one for ur personal calls and one for others.
Implement proxy authontication, thats it
Otherwise set up a call pilot u can put a password to ur phone calls
UA1 B2BUa UA2
--------Invite(sdp)-------->
<-----100 trying---
-----invite(sdp call pilot)-->
<----200 OK(answer)-------
===Announcement for pin)==
When digits entered are correct
-----re-invite(sdp)------------>
<----200 OK---------------------
<--200 ok-------
On Fri, Nov 11, 2011 at 6:37 PM, Hadriel Kaplan <[email protected]>wrote:
>
> On Nov 11, 2011, at 1:56 AM, Olle E. Johansson wrote:
>
> >
> > 11 nov 2011 kl. 00:58 skrev Hadriel Kaplan:
> >
> >>
> >> On Nov 9, 2011, at 3:43 AM, Olle E. Johansson wrote:
> >>
> >>> While I agree with what you say in regards to PSTN, I'm still waiting
> for the tabloids to come up with articles about neighbours listening to the
> calls you did not want your *wife* to find out about. Many broadband
> networks - and Wifi - can't be considered secure and there are cases where
> you don't want other people to really listen in.
> >>>
> >>> Like e-mail, people put a lot of trust in th esystem. I think we need
> to make sure that we don't harm that trust as we move over to more
> Internet-based telephony.
> >>
> >> And yet S/MIME would not protect against neighbors listening in on your
> calls. Encrypting or signing the SDP doesn't prevent listening to the RTP
> itself - only SRTP does that. S/MIME made more sense in email because the
> email's MIME body actually contains the sensitive information: the
> communication content is in that body; whereas in SIP most of the
> communication content is in the media.[1] Some sensitive information is in
> the SIP layer, such as the caller/called party info (i.e., SIP URIs) - but
> those can't be hidden from the SIP proxies obviously.
> > SIP presence and instant messaging?
> >
> >>
> >> So a more logical approach to prevent neighbors listening in is to use
> SIP over TLS for the signaling plane, as well as SRTP for the media plane.
> Obviously using SIP over TLS still relies on trusting the proxies, and not
> using S/MIME in such cases means the proxies know what your media IP
> address:ports and codecs will be or could change them, but again that's not
> what makes your media "secure" - SRTP is.[2] S/MIME adds nothing of value
> there.
> >
> >
> > S/MIME can help with SRTP key exchange, but you are right if you
> consider voice calls the only application of SIP. I don't.
>
> Which is why I put the footnote in my email that for things like MESSAGE
> method the body might actually be sensitive. But the example you had in
> your previous email was a neighbor listening to "calls", and
> "Internet-based telephony". I.e., not IM/presence.
>
> -hadriel
>
>
> _______________________________________________
> Sip-implementors mailing list
> [email protected]
> https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
>
--
With Regards
Sairam
_______________________________________________
Sip-implementors mailing list
[email protected]
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
