3 ms·
I disagree that encrypting the header data for SIP to be all that critical, even on the public internet, the RTP yeah, thats a good thing to encrypt, but header
by Aloha 7y ago
I disagree that encrypting the header data for SIP to be all that critical, even on the public internet, the RTP yeah, thats a good thing to encrypt, but headers? nah - its good if you can, but when you're tryin to bring up two systems with no real user interface to troubleshoot, often the headers data is the most useful thing you have.
- yjftsjthsd-h 7y agoIt might be less sensitive, but isn't there still metadata in there? Or signaling information that would let an (MITM) attacker downgrade the RTP connection?
- Aloha 7y agoI dont know enough about SRTP negotiation to know if a downgrade attack is possible, but I can see ways in a new system to deal with that though.