14 Sep
2008
14 Sep
'08
6:42 p.m.
Its still not the same as an MD5 flaw or collision. The Digest auth is time sensitive and unless you have a very weak password the chances are almost zero for someone to crack it. Needless to say you should be concerned about the signaling and the media... So TLS/SRTP all the way if at all possible. /b On Sep 14, 2008, at 12:30 PM, Martin Joseph wrote:
Still it's not wise to use language like impossible when discussing security precautions.
Thanks for the great software and all the help too, Marty
PS thanks for the link.
PPS here's another: http://www.esecurityplanet.com/patches/article.php/3446071
Brian West sip:brian@freeswitch.org