[Asterisk-Dev] libsrtp

[Olle E. Johansson]

Dr. Rich Murphey wrote:

> RFC 3711 doesn't specify the method for establishing the shared srtp session
> key.   Likewise, libsrtp appears to require that the two endpoints have
> already established a shared key.
> 
> Does anyone know of any voip standards for key exchange?
> 
I guess, only guess, that for SIP the exchange is done over SIPS, ie SIP over
TLS. TLS is the standard for SIP UA-proxy encryption, and  S/MIME is used for
end-to-end auth and encryption.

I do need to investigate this a bit further.

/O