Its still not the same as an MD5 flaw or collision.  The Digest auth is time sensitive and unless you have a very weak password the chances are almost zero for someone to crack it.  Needless to say you should be concerned about the signaling and the media...  So TLS/SRTP all the way if at all possible.


/b

On Sep 14, 2008, at 12:30 PM, Martin Joseph wrote:

Still it's not wise to use language like impossible when discussing  
security precautions.

Thanks for the great software and all the help too,
Marty

PS thanks for the link.

http://en.wikipedia.org/wiki/Digest_access_authentication

PPS here's another:
http://www.esecurityplanet.com/patches/article.php/3446071