Am 14.06.2012 15:22, schrieb Ethan Blanton:
> David Woolley spake unto us the following wisdom:
>> [email protected] wrote:
>>> I read at wikipedia about ZRTP (https://en.wikipedia.org/wiki/ZRTP)
>>
>> It seems to be encryption without authentication, which means it is
>> vulnerable to man in the middle attacks.
> 
> Authentication can be handled by the signalling protocol that sets up
> the RTP stream.

Yes, but you must make sure that you have secure connections on the
signalling level and this is not always guaranteed. Depending on the
authentication method you need support of SIP and/or XMPP servers.

Werner

> 
> Ethan
> 
> _______________________________________________
> [email protected] mailing list
> Want to unsubscribe?  Use this link:
> http://pidgin.im/cgi-bin/mailman/listinfo/support
> 


-- 
----------------------------------------------
Werner Dittmann    [email protected]
Tel +49 176 993 462 95
PGP key: 82EF5E8B

_______________________________________________
[email protected] mailing list
Want to unsubscribe?  Use this link:
http://pidgin.im/cgi-bin/mailman/listinfo/support

Reply via email to