14 Sep
2008
14 Sep
'08
9:47 p.m.
Still with a password thats secure the probability is rather low. But if you're that concerned about the signaling you should be equally concerned about the media. As entering your credit card or account information over VoIP is just as bad and also travels in the RTP stream. Also don't use VBR codecs on SRTP links. /b On Sep 14, 2008, at 2:49 PM, Michael Jerris wrote:
The digest is of more than just the password, there are other elements to the hash's including the nonce, while in the "old days" these were pretty hard to brute force, with the current availability of rainbow tables, it shouldn't be that hard to reverse even non trivial passwords.
Mike
Brian West sip:brian@freeswitch.org