<div><font color="#222222" face="arial, sans-serif">This is completely pointless.</font></div><div><font color="#222222" face="arial, sans-serif"><br></font></div><div><font color="#222222" face="arial, sans-serif">SRTP keys are transmitted plaintext within SIP, you need to use TLS to encrypt them.</font></div>
<div><font color="#222222" face="arial, sans-serif"><br></font></div><div><font color="#222222" face="arial, sans-serif">Anyone intercepting your SRTP stream would also intercept your SIP packets, which means if you're not using TLS they'll have the encryption key to decrypt the SRTP packets. So it's no more secure than RTP.</font></div>
<div><font color="#222222" face="arial, sans-serif"><br></font></div><div><font color="#222222" face="arial, sans-serif">-Steve</font></div><div><font color="#222222" face="arial, sans-serif"><br></font></div><div><font color="#222222" face="arial, sans-serif"><br>
</font></div><div><font color="#222222" face="arial, sans-serif"><br></font><br><div class="gmail_quote">On 21 November 2012 13:08, Yehavi Bourvine <span dir="ltr"><<a href="mailto:yehavi.bourvine@gmail.com" target="_blank">yehavi.bourvine@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> I am trying to use SRTP without TLS</blockquote></div><br></div>