[asterisk-dev] VoIP Encryption

[James Harper]

> I think that the discussion of IPSEC and various higher-layer VPN
> solutions is probably overkill for VoIP, in both complexity and in
> purpose.  I am a firm believer in applications-layer security.  VPNs
> are primarily used as a hack when the underlying protocols are
> insufficient to provide adequate protection for the transported data.

I don't think anyone was suggesting using IPSEC tunnel mode, just
transport, although I'm not sure that NAT is a solved problem there.

But I agree with you that VPN's aren't necessarily the perfect solution.

James