[Asterisk-Security] SRTP vs IPSEC

[Jeremy Jackson]

I've been playing with racooon/Linux IPSEC, and it seems quite simple to 
  enable security on a per-socket basis:

     policy = "in ipsec esp/transport//require";
     buf = ipsec_set_policy(policy, strlen(policy));
     setsockopt(so, level, IP_IPSEC_POLICY, buf,ipsec_get_policylen(buf))

I see there is also work being done on SRTP. It seems like SRTP would 
duplicate efforts, but maybe there are performance reasons that SRTP 
would be better?

Comments?

-- 
Jeremy Jackson
Coplanar Networks
W: (519)489-4903
C: (519)897-1516
http://www.coplanar.net