18 Mar
2014
18 Mar
'14
4:41 p.m.
On 2014-03-16 20:07, Brian West wrote:
Once the PBX is trusted it serves no purpose to have the SAS displayed to the end user in this case.
The reason the script is there is for cases where the non-ZRTP leg trusts the PBX and its connection to it, but the ZRTP leg doesn't have a trust relationship yet. You could then in theory bootstrap the ZRTP trust relationship by comparing the SAS between legs. Without something like this it is indeed difficult to bootstrap that trust relationship with the PBX unless you're logged in and looking at the console so you can verify the SAS. But the non-ZRTP leg here must trust the PBX and the connection or the exercise is without purpose.