<p dir="ltr">Well, now. This poses an interesting one. By design SRTP is not to handle peer-to-peer encryption, but instead relies on the pbx to negotiate keys AND protect / unprotect the stream. As i can remember freeswitch negotiates a keyset for each leg, so if you would force proxy mode at some point, the clients will not know how to handle the keys and run an encrypted conversation. That would require code modification on both FS and the peers in order to work. I wait to be corrected.</p>

<div class="gmail_quote">On Nov 13, 2013 8:49 AM, &quot;Mehroz Ashraf&quot; &lt;<a href="mailto:mehroz.ashraf85@gmail.com">mehroz.ashraf85@gmail.com</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">For all those reason that FreeSWITCH wiki says:<div><ul style="line-height:19.200000762939453px;font-size:12.727272033691406px;font-family:sans-serif;margin:0.3em 0px 0px 1.6em;padding:0px">
<li style="margin-bottom:0.1em">Debatably (slightly) less CPU. </li><li style="margin-bottom:0.1em">Allows FreeSWITCH to handle codecs that it does not officially support.</li><li style="margin-bottom:0.1em">Lesser delay in voice </li>

</ul><div><font color="#000000" face="sans-serif"><span style="line-height:19.200000762939453px"><br></span></font></div></div><div><font color="#000000" face="sans-serif"><span style="line-height:19.200000762939453px">And ideally a secure communication should not involve any one processing RTP , and should work flawlessly.</span></font></div>

</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <span dir="ltr">&lt;<a href="mailto:kris@kriskinc.com" target="_blank">kris@kriskinc.com</a>&gt;</span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">There is almost no reason to use proxy_media mode.  Why are you using it?</div><div class="gmail_extra">

<div><div><br><br><div class="gmail_quote">On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <span dir="ltr">&lt;<a href="mailto:abdullah@smonte.com" target="_blank">abdullah@smonte.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">HI EVERY  ONE ,<br>
<br>
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE<br>
FALLOWED THE WIKI LINK  BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..<br>
<br>
<br>
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS<br>
HEARING..<br>
<br>
Thanks<br>
<br>
<br>
<br>
<br>
<br>
--<br>
View this message in context: <a href="http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESWITCH-tp7595988.html" target="_blank">http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESWITCH-tp7595988.html</a><br>



Sent from the freeswitch-users mailing list archive at Nabble.com.<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br><br clear="all"><div><br></div></div></div><span><font color="#888888">-- <br>Kristian Kielhofner
</font></span></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div>