[Asterisk-Security] SRTP vs IPSEC

[Olle E. Johansson]

Jeremy Jackson wrote:
> I've been playing with racooon/Linux IPSEC, and it seems quite simple to
>  enable security on a per-socket basis:
> 
>     policy = "in ipsec esp/transport//require";
>     buf = ipsec_set_policy(policy, strlen(policy));
>     setsockopt(so, level, IP_IPSEC_POLICY, buf,ipsec_get_policylen(buf))
> 
> I see there is also work being done on SRTP. It seems like SRTP would
> duplicate efforts, but maybe there are performance reasons that SRTP
> would be better?
> 
> Comments?
SRTP can be setup on a per-call basis.

/O