Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two SIP client?
-does the proxy implement some particular tasks or actions, or is it a client-side problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
__________________________________________________________________ Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two SIP client?
-does the proxy implement some particular tasks or actions, or is it a client-side problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
On Thursday 24 February 2005 17:13, Daniel-Constantin Mierla wrote:
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
The newer snom UAs suport SRTP, as well as some Linksys product AFAIK.
Greetings Nils
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
Anyway IPSec seems a good solution, but if I configure the proxy server for IPSec, can i handle both encrypted and not encrypted calls?
stafano
-- Messaggio Originale -- Date: Thu, 24 Feb 2005 17:13:00 +0100 From: Daniel-Constantin Mierla Daniel-Constantin.Mierla@fokus.fraunhofer.de To: Stefano stefanoblasco@tiscali.it CC: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two
SIP
client?
-does the proxy implement some particular tasks or actions, or is it a
client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
__________________________________________________________________ Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for SIP proxies.
Anyway IPSec seems a good solution, but if I configure the proxy server for IPSec, can i handle both encrypted and not encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the plain old messages. But this solution will only work if you put an IPSec gateway in front of a complete subnetwork with phones in it or use only soft-phones. Because I do not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings Nils
stafano
-- Messaggio Originale -- Date: Thu, 24 Feb 2005 17:13:00 +0100 From: Daniel-Constantin Mierla Daniel-Constantin.Mierla@fokus.fraunhofer.de To: Stefano stefanoblasco@tiscali.it CC: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two
SIP
client?
-does the proxy implement some particular tasks or actions, or is it a
client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
May I ask some questions?
1. is there any SRTP aware termination GW/softswitches wide known 2. can cisco 2650MX handle traffic from 24 simultaneous calls G711 ? 3. Can SAME cisco get those calls via T1 and then forward via SIP ?
Wrong list for that :) I know
-----Original Message----- From: serusers-bounces@iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Nils Ohlmeier Sent: Friday, February 25, 2005 2:10 PM To: serusers@lists.iptel.org Cc: Stefano Subject: Re: [Serusers] SIP encrypted calls
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for SIP proxies.
Anyway IPSec seems a good solution, but if I configure the proxy server
for
IPSec, can i handle both encrypted and not encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the plain old messages. But this solution will only work if you put an IPSec gateway in front of a complete subnetwork with phones in it or use only soft-phones. Because I do not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings Nils
stafano
-- Messaggio Originale -- Date: Thu, 24 Feb 2005 17:13:00 +0100 From: Daniel-Constantin Mierla Daniel-Constantin.Mierla@fokus.fraunhofer.de To: Stefano stefanoblasco@tiscali.it CC: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two
SIP
client?
-does the proxy implement some particular tasks or actions, or is it a
client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
_______________________________________________ Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
On Friday 25 February 2005 20:25, Vitaly Nikolaev wrote:
- is there any SRTP aware termination GW/softswitches wide known
I dont know any gateways with SRTP support. Which does not mean they dont exist :)
- can cisco 2650MX handle traffic from 24 simultaneous calls G711 ?
- Can SAME cisco get those calls via T1 and then forward via SIP ?
Ask your friendly Cisco support :)
Regards Nils
Wrong list for that :) I know
-----Original Message----- From: serusers-bounces@iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Nils Ohlmeier Sent: Friday, February 25, 2005 2:10 PM To: serusers@lists.iptel.org Cc: Stefano Subject: Re: [Serusers] SIP encrypted calls
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for SIP proxies.
Anyway IPSec seems a good solution, but if I configure the proxy server
for
IPSec, can i handle both encrypted and not encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the plain old messages. But this solution will only work if you put an IPSec gateway in front of a complete subnetwork with phones in it or use only soft-phones. Because I do not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings Nils
stafano
-- Messaggio Originale -- Date: Thu, 24 Feb 2005 17:13:00 +0100 From: Daniel-Constantin Mierla Daniel-Constantin.Mierla@fokus.fraunhofer.de To: Stefano stefanoblasco@tiscali.it CC: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two
SIP
client?
-does the proxy implement some particular tasks or actions, or is it a
client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Thank you very much for the news, i have another question:
what about SIPS (SIP Secure)? i found out two links to this subject
http://www.ietf.org/internet-drafts/draft-barnes-sipping-sec-inserted-info-0... http://www.ietf.org/internet-drafts/draft-jennings-sip-sec-flows-02.txt
and i think SNOM has implemented something about SIPS. What about SER do you think there will be future implementation of SIPS?
stefano
-- Messaggio Originale -- From: Nils Ohlmeier lists@ohlmeier.org To: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls Date: Fri, 25 Feb 2005 20:09:47 +0100 Cc: "Stefano" stefanoblasco@tiscali.it, "Daniel-Constantin Mierla" Daniel-Constantin.Mierla@fokus.fraunhofer.de
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent
for
SIP proxies.
Anyway IPSec seems a good solution, but if I configure the proxy server
for
IPSec, can i handle both encrypted and not encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages. But this solution will only work if you put an IPSec gateway in front of a complete subnetwork with phones in it or use only soft-phones. Because I do not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings Nils
stafano
-- Messaggio Originale -- Date: Thu, 24 Feb 2005 17:13:00 +0100 From: Daniel-Constantin Mierla Daniel-Constantin.Mierla@fokus.fraunhofer.de To: Stefano stefanoblasco@tiscali.it CC: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two
SIP
client?
-does the proxy implement some particular tasks or actions, or is it
a
client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
__________________________________________________________________ Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
On Saturday 26 February 2005 12:05, Stefano wrote:
what about SIPS (SIP Secure)? i found out two links to this subject
http://www.ietf.org/internet-drafts/draft-barnes-sipping-sec-inserted-info- 02.txt http://www.ietf.org/internet-drafts/draft-jennings-sip-sec-flows-02.txt
SIPS is already in RFC3261 defined.
and i think SNOM has implemented something about SIPS.
Yes snom has SIPS available in all its products.
What about SER do you think there will be future implementation of SIPS?
AFAIK SIPS support is available for SER under commercial license, but not for free.
Greetings Nils
stefano
-- Messaggio Originale -- From: Nils Ohlmeier lists@ohlmeier.org To: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls Date: Fri, 25 Feb 2005 20:09:47 +0100 Cc: "Stefano" stefanoblasco@tiscali.it, "Daniel-Constantin Mierla" Daniel-Constantin.Mierla@fokus.fraunhofer.de
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent
for
SIP proxies.
Anyway IPSec seems a good solution, but if I configure the proxy server
for
IPSec, can i handle both encrypted and not encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages. But this solution will only work if you put an IPSec gateway in front of a complete subnetwork with phones in it or use only soft-phones. Because I do not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings Nils
stafano
-- Messaggio Originale -- Date: Thu, 24 Feb 2005 17:13:00 +0100 From: Daniel-Constantin Mierla Daniel-Constantin.Mierla@fokus.fraunhofer.de To: Stefano stefanoblasco@tiscali.it CC: serusers@lists.iptel.org Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS can be an alternative to IPsec. Just for media, a solution would be Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two
SIP
client?
-does the proxy implement some particular tasks or actions, or is it
a
client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much stefano
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS! Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita' a soli 29.95 euro al mese senza limiti di tempo. Attivati entro il 28 Febbraio 2005, 3 MESI sono GRATIS Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Hi Nils!
Nils Ohlmeier wrote:
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there should be some client that can do it without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for SIP proxies.
How will the clients exchange the key for the RTP encryption? Will it be sent in the SDP? If yes, wouldn't I also need encrypted SIP to hide the RTP key?
regards, klaus
Hi Klaus,
On Monday 28 February 2005 11:31, Klaus Darilion wrote:
Nils Ohlmeier wrote:
There are clients. See my previous mail. SRTP is completely transparent for SIP proxies.
How will the clients exchange the key for the RTP encryption? Will it be sent in the SDP? If yes, wouldn't I also need encrypted SIP to hide the RTP key?
Yes the keys will be exchanged within the SDP. So indeed you should crypt the SDP in signaling either by using TLS or S/MIME. Otherwise someone could read the keys from the signaling and decrypt the RTP streams.
Greetings Nils
-
Daniel-Constantin Mierla -
Klaus Darilion -
Nils Ohlmeier -
Stefano -
Vitaly Nikolaev