<div dir="ltr"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span style="font-family:arial,sans-serif;font-size:13px">There is a way to do Trusted MITM I believe there is a setting for that</span></blockquote>
<div> </div><div class="" style="font-family:arial,sans-serif;font-size:13px"></div><action application="set" data="zrtp_enrollment=true"/><br><div class="gmail_extra"><br><br><div class="gmail_quote">
On 9 April 2013 16:11, Ken Rice <span dir="ltr"><<a href="mailto:krice@freeswitch.org" target="_blank">krice@freeswitch.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Also, keep in mind that FS in a mode other then proxy or bypass media, when<br>
you have a ZRTP call is kind of pointless, that leads to a vector for a man<br>
in the middle attack which is also the reason the SASs don't match is you<br>
have 2 different ZRTP legs with FS in the middle decrypting and<br>
re-encrypting the conversation...<br>
<br>
There is a way to do Trusted MITM I believe there is a setting for that<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
On 4/9/13 4:57 AM, "mehroz" <<a href="mailto:mehroz.ashraf85@gmail.com">mehroz.ashraf85@gmail.com</a>> wrote:<br>
<br>
> Any luck with this issue?<br>
><br>
> I am having the same configurations, FS acting as normal mode i.e bypass and<br>
> proxy on default(commented)<br>
><br>
> Clients are Linphone, and SAS does not match......<br>
><br>
> Over jitsi ... SAS are identical ONLY IF<br>
><br>
> IF linphone does not support "zrtp-hash" attribute in SIP/SDP, what is the<br>
> next possible solution?<br>
><br>
><br>
><br>
> --<br>
> View this message in context:<br>
> <a href="http://freeswitch-users.2379917.n2.nabble.com/problems-with-freeswitch-zrtp-in" target="_blank">http://freeswitch-users.2379917.n2.nabble.com/problems-with-freeswitch-zrtp-in</a><br>
> -proxy-media-mode-tp7586936p7589541.html<br>
> Sent from the freeswitch-users mailing list archive at Nabble.com.<br>
><br>
> _________________________________________________________________________<br>
> Professional FreeSWITCH Consulting Services:<br>
> <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
> <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
><br>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
> <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
><br>
> Official FreeSWITCH Sites<br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
> <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
> <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
><br>
> FreeSWITCH-users mailing list<br>
> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
Ken<br>
<a href="http://www.FreeSWITCH.org" target="_blank">http://www.FreeSWITCH.org</a><br>
<a href="http://www.ClueCon.com" target="_blank">http://www.ClueCon.com</a><br>
<a href="http://www.OSTAG.org" target="_blank">http://www.OSTAG.org</a><br>
<a href="http://irc.freenode.net" target="_blank">irc.freenode.net</a> #freeswitch<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br></div></div>