[asterisk-users] Auto provisioning from public server

[Jonas Kellens]

On 10/27/2010 10:06 AM, Steve Totaro wrote:
> On Tue, Oct 26, 2010 at 11:31 AM, Jonas Kellens 
> <jonas.kellens at telenet.be <mailto:jonas.kellens at telenet.be>> wrote:
>
>     Hello,
>
>     has anyone experience with auto provisioning IP-phones on
>     different locations through a central public provisioning server ?
>     You use http or https ?
>
>     Is there a danger that one uses a different MAC-address in the
>     provisioning link to obtain SIP username / password settings ?
>
>
>     Kind regards,
>     Jonas.
>
>
> Yes, there is a danger, especially with TFTP, but also with FTP to a 
> lesser degreee.
>
> If someone guessed correctly, they could download the config file for 
> another phone.
>
> Thanks,
> Steve T


If I find a way to implement it... https would be safer ?

Or is the only safe way to work with certificates that are loaded on the 
IP-phone ?!

Jonas.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20101027/f37512d3/attachment.htm