while it is true that there are other insecure systems and protocols, we should not use that as an excuse for the fact that sip/rtp are pretty damned insecure. and the current ietf approach is to complicate them so much that no one will ever be able to have any confidence that an implementation is reasonably secure or not. randy