[asterisk-users] Encrypted password for voicemail

[Tzafrir Cohen]

On Tue, Nov 28, 2006 at 09:12:19PM -0800, jezzzz . wrote:
> Encrypt voicemail password with Asterisk public key.
> Asterisk then decrypts the password and takes the hash
> of it and compares it with the hash stored in
> voicemail.conf. This way the real password is never
> stored in voicemail.conf and there is no way to know
> what the password is just by looking at the file.

One minor implementation note: many phones only support digits. Thus for
them you can only use digits in the voicemail secret. All in all, the
voicemail prompt dialog may not be the best place to provide
authentication.

How exactly do you intend to interact with the user?

-- 
               Tzafrir Cohen       
icq#16849755                    jabber:tzafrir at jabber.org
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com       
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir