[asterisk-users] SIP secruity: username and password

[Sherwood McGowan]

Little to none...SIP is set up so that the packet contains identifiable data
(the username) but the authentication is performed with a digest of the
username password [domain] and [CalliD] (I think I got that right)

On Thu, May 5, 2011 at 7:08 AM, bilal ghayyad <bilmar_gh at yahoo.com> wrote:

> Hi All;
>
> When the endpoint register on Asterisk or initiate a call, so they exchange
> the sip username and password. What is the possibility that this will be
> capture by the hacker and how to avoid this problem?
>
> Regards
> Bilal
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>



-- 
Sherwood McGowan
Telecommunications and VOIP Consultant
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110505/256422c8/attachment-0001.htm>