[Freeswitch-users] SRTP WITH PROXY MODE OF FREESWITCH ??

[Daniel Ivanov]

Well, now. This poses an interesting one. By design SRTP is not to handle
peer-to-peer encryption, but instead relies on the pbx to negotiate keys
AND protect / unprotect the stream. As i can remember freeswitch negotiates
a keyset for each leg, so if you would force proxy mode at some point, the
clients will not know how to handle the keys and run an encrypted
conversation. That would require code modification on both FS and the peers
in order to work. I wait to be corrected.
On Nov 13, 2013 8:49 AM, "Mehroz Ashraf" <mehroz.ashraf85 at gmail.com> wrote:

> For all those reason that FreeSWITCH wiki says:
>
>    - Debatably (slightly) less CPU.
>    - Allows FreeSWITCH to handle codecs that it does not officially
>    support.
>    - Lesser delay in voice
>
>
> And ideally a secure communication should not involve any one processing
> RTP , and should work flawlessly.
>
>
> On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <kris at kriskinc.com>wrote:
>
>> There is almost no reason to use proxy_media mode.  Why are you using it?
>>
>>
>> On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah at smonte.com> wrote:
>>
>>> HI EVERY  ONE ,
>>>
>>> IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE
>>> FALLOWED THE WIKI LINK  BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
>>>
>>>
>>> PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO
>>> AUDIO IS
>>> HEARING..
>>>
>>> Thanks
>>>
>>>
>>>
>>>
>>>
>>> --
>>> View this message in context:
>>> http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESWITCH-tp7595988.html
>>> Sent from the freeswitch-users mailing list archive at Nabble.com.
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> 
>>> 
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://wiki.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>>
>> --
>> Kristian Kielhofner
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20131113/de510429/attachment-0001.html