> Do any embedded systems actually use it for sensitive phone calls? I hope not... > then they (hopefully) have TLS on top. I'd hope so too, especially given

> Do any embedded systems actually use it for sensitive phone calls? I hope not... > then they (hopefully) have TLS on top. I'd hope so too, especially given that many cellular modem modules have SSL/TLS support themselves (and they had already 10 years ago), so even a tiny microcontroller communicating by UART to the modem can do TLS. But reality might be different... it would actually be interesting to see some real-world data about this. I think that some systems connect to special GPRS endpoints (not the usual ones) that connect them directly to some VPN network instead of using the public internet... (if I remember well, I've read this about some automotive systems). So they might actually rely on the VPN encryption for the Internet part, but the GPRS part would then be unsecured if the GPRS crypto is broken.