[asterisk-users] SIP over SSL TCP or SRTP?

[Kevin P. Fleming]

On 06/22/2012 12:56 PM, Bruce B wrote:

> Which one of these ensures that SIP packets are sent and received in a
> secure format so that users using public wifi don't allow MITM type of
> attacks or others can't read the plaintext SIP packet info. VPN is not
> an option. Looking for 2nd most secure to VPN.

SIP over TLS (what used to be called SSL) is what secures the SIP 
signaling. SRTP is for securing media streams.

-- 
Kevin P. Fleming
Digium, Inc. | Director of Software Technologies
Jabber: kfleming at digium.com | SIP: kpfleming at digium.com | Skype: kpfleming
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at www.digium.com & www.asterisk.org