[Freeswitch-users] problems with freeswitch + zrtp in proxy-media mode

[Ken Rice]

Also, keep in mind that FS in a mode other then proxy or bypass media, when
you have a ZRTP call is kind of pointless, that leads to a vector for a man
in the middle attack which is also the reason the SASs don't match is you
have 2 different ZRTP legs with FS in the middle decrypting and
re-encrypting the conversation...

There is a way to do Trusted MITM I believe there is a setting for that


On 4/9/13 4:57 AM, "mehroz" <mehroz.ashraf85 at gmail.com> wrote:

> Any luck with this issue?
> 
> I am having the same configurations, FS acting as normal mode i.e bypass and
> proxy on default(commented)
> 
> Clients are Linphone, and SAS does not match......
> 
> Over jitsi ... SAS are identical ONLY IF
> 
> IF linphone does not support "zrtp-hash" attribute in SIP/SDP, what is the
> next possible solution?
> 
> 
> 
> --
> View this message in context:
> http://freeswitch-users.2379917.n2.nabble.com/problems-with-freeswitch-zrtp-in
> -proxy-media-mode-tp7586936p7589541.html
> Sent from the freeswitch-users mailing list archive at Nabble.com.
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> 
> 
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-- 
Ken
http://www.FreeSWITCH.org
http://www.ClueCon.com
http://www.OSTAG.org
irc.freenode.net #freeswitch