I don't think SDES over TLS can be called secure. And according to RFC 4568 this combination should not be used. (Anyway this seems to be the mostly used configuration at the moment.) Even if MIKEY is not a perfect soloution for the problem, it provides end-to-end security for keying material. Regards -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK -----Ursprüngliche Nachricht----- Von: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] Im Auftrag von Brian West Gesendet: Donnerstag, 24. Januar 2008 21:35 An: freeswitch-users@lists.freeswitch.org Betreff: Re: [Freeswitch-users] MIKEY-Support Right now we do SDES which is described in RFC4568. If we wanted to do MIKEY someone would either have to write a license compatible MIKEY library. I do know its low on the priority list unless someone wants to fund the work to move it up on the priority list. Can you provide me the reasoning behind MIKEY and justify its use? What devices support it? Thanks, Brian On Jan 24, 2008, at 8:33 AM,License Komenda wrote:
Hello,
does FreeSWITCH support MIKEY? If not, is it scheduled? Which key exchange methods does it support?
What about the soft and hard phones on the market? What's the preferred method for key exchange there?
Regards, -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org