Re: SIP over SSL TCP or SRTP?

[Bruce B <bruceb444@xxxxxxxxx>]

Thanks. Want to secure everything and anything possible.

1- Can both  SIP over TLS  and SRTP work in conjunction to each other?

2- Is SIP over TLS a package or added on module that can be installed from Digium Asterisk repository?

3- SRTP takes care of the RTP and makes it secure so that MITM type sniffing is not possible?

Regards,

On Fri, Jun 22, 2012 at 2:39 PM, Kevin P. Fleming <kpfleming@xxxxxxxxxx> wrote:

On 06/22/2012 12:56 PM, Bruce B wrote:

Which one of these ensures that SIP packets are sent and received in a
secure format so that users using public wifi don't allow MITM type of
attacks or others can't read the plaintext SIP packet info. VPN is not
an option. Looking for 2nd most secure to VPN.

SIP over TLS (what used to be called SSL) is what secures the SIP signaling. SRTP is for securing media streams.

--
Kevin P. Fleming
Digium, Inc. | Director of Software Technologies
Jabber: kfleming@xxxxxxxxxx | SIP: kpfleming@xxxxxxxxxx | Skype: kpfleming
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at www.digium.com & www.asterisk.org

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
             http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
 http://lists.digium.com/mailman/listinfo/asterisk-users

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users