Or using SAS [1] and PGP check words [2] ala implementations like ZRTP [1] edit: I realize the salient point is that this gives you assurance that the encrypti

Or using SAS [1] and PGP check words [2] ala implementations like ZRTP [1] edit: I realize the salient point is that this gives you assurance that the encryption handshake hasn't be intercepted but no guarantee as to the identity of the person you've connected to. With real-time VoIP this potentially isn't a problem (yet) as it's relatively obvious who you're chatting to on the phone. [1] http://en.wikipedia.org/wiki/ZRTP#SAS http://en.wikipedia.org/wiki/ZRTP#SAS [2] http://en.wikipedia.org/wiki/PGP_word_list http://en.wikipedia.org/wiki/PGP_word_list