<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><div bgcolor="#FFFFFF" text="#000000"><div>Motty,</div><div><br></div><div>Isn't this why digest authentication (ie the nonce[1]) is part of the standard SIP auth handshake?</div><div></div><div>Ie, why do you think the password is not already encrypted?</div><div><br></div></div></div><div><div bgcolor="#FFFFFF" text="#000000"><div>Pete</div><div><br></div><div>[1] <a href="https://andrewjprokop.wordpress.com/2015/01/27/understanding-sip-authentication/">https://andrewjprokop.wordpress.com/2015/01/27/understanding-sip-authentication/</a></div><div>(paragraph starting 'Take a look at the Proxy-Authenticate header and you will see a Nonce parameter')</div><div><br></div><div><br></div></div></div><div>On 30/10/2015, at 10:01 AM, Motty <<a href="mailto:motty.cruz@gmail.com">motty.cruz@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta content="text/html; charset=windows-1252" http-equiv="Content-Type">
<div bgcolor="#FFFFFF" text="#000000">
Thanks Jeff, <br>
I don't want SIP over TLS. I would like to encrypt <b><font color="#ff271c">password only</font></b>, I
suppose over TLS.<br>
<br>
<div class="moz-cite-prefix">On 10/29/2015 01:11 PM, Jeff
LaCoursiere wrote:<br>
</div>
<blockquote cite="mid:56327D7A.9020005@jeff.net" type="cite">
<meta content="text/html; charset=windows-1252" http-equiv="Content-Type">
<div class="moz-cite-prefix">You want SIP over TLS. That encrypts the signalling. SRTP and
ZRTP encrypt the actual voice traffic.</div>
</blockquote></div></blockquote></div><br></body></html>