[asterisk-dev] RFC4733 SRTP option

[Olle E. Johansson]

27 nov 2009 kl. 10.20 skrev Nick Lewis:

>> Now, the authors of the rfcs says that implementors should treat SHOULD
> as if it was a
>> MUST which sounds funny, but that's the message to all coders.
> 
> As long as they do not say that implementors must treat SHOULD as if it
> was a MUST we 
> can claim compliance even without SRTP
> 
> Trying to mandate security for rfc events without mandating it for sip
> or sdp seems 
> crazy to me

Well, you can actually exchange keys for SRTP without revealing the keys in the open in the SIP messaging channel.
So it's not that crazy, Nick.

/O