[Asterisk-Dev] IAX Spec online

[Andreas Sikkema]

asterisk-dev-bounces at lists.digium.com wrote:

>> * Encryption is not adequately specified.
>> 
> It's not *completely* specified, but I daresay it may be
> *adequately* specified: Mark's philosophy on this (last I talked to
> him) was that we should provide the appropriate tools for native
> encryption (e.g. ENCRYPTION and ENCKEY IEs), but not specify how
> the encryption itself is done. He wants as much flexibility as
> possible, so that implementors can choose how they want to encrypt
> their calls. So the vagueness of it is somewhat intentional.
> 
> Now: keeping that in mind, is it *too* vague? If so, how could I
> clarify it while still maintaining the desired flexibility?

I hope the receiving application can find out how the encryption 
works from the message itself. If it has to guess you've lost 
interoperability ;-)

-- 
Andreas Sikkema                Rits tele.com
Van Vollenhovenstraat 3    3016 BE Rotterdam
t: +31 (0)10 2245544  f: +31 (0)10 413 65 45