[asterisk-users] ZRTP + asterisk and Best Security Practice

[Olle E Johansson]

15 dec 2007 kl. 14.48 skrev Olivier:

> Hi Olle
>
> 2007/12/15, Olle E Johansson <oej at edvina.net>:
> 14 dec 2007 kl. 11.20 skrev Andres Gomez:
>
> > Hello List
> >
> >
> > I am very interested in developing a research project on security
> > protocol for VoIP, under the GPL.
> >
> > For some time I have been reviewing ZRTP, I would like to know the
> > opinion having regard to whether and under asterisk, but I see that
> > this closed implementations according am
> > Http://bugs.digium.com/view.php?id=10024
> >
> Work is still in progress and we hope to have something ready for
> testing after new year's.
>
> > Are Zphone and ZRTP the future for the Voip Security?
>
> There's a lot of progress in other areas too.
> What do you have in  mind ?
> Are you thinking about another way to exchange encryption keys ?

I was thinking of the efforts of using UDP+DTLS to encrypt UDP  
signalling
and SRTP for media.

The key exchange and the identify handling is a large area.

/O