[Devel] Re: uac_auth - set credentials with avpops

[Thomas Gelf]

Klaus Darilion schrieb:
 > Have you tried other authentication mechanisms, e.g. TLS based?

I would really like to do so - tecnically there are lots of methods
ways better than rewriting each SIP packets credentials.

The problem is more a political than a tecnical one: Italy has
lots of very old laws, far away from reality - but in the last
time it looks as they would seriously like to win the European
"who-has-the-most-comprehensive-anti-terrorism-law"-competition.

No more free public internet access points, severe restrictions
regulating internet access in hotels, everybody has to log every-
thing forever and everyone could be prosecuted and punished for
everything and mostly for not satisfying our governments vague
regulations.

So as long as laws are there and nobody knows how to apply them
you could either

a) go on like you are already doing and hope that nobody will
    ever ask you if you did a good job in satisfying the new
    privacy/anti-terrorism/whatever-laws

b) try to make a lucky guess and immagine what government may
    exactly want you to do or

c) take the strongest measurements you could take to be absolutely
    sure to respect the law

There is a great uncertainty about how law should be applied and
our "VoIP/PSTN-Uplink-Provider" (DID-Provider, whatever - what's
the right term for such a kind of "uplink provider"?) at the moment
offers absolutely no way to do some kind of "SIP peering". We also
have to grant that we would take fotocopies from each VoIP users
valid identity card and and and...

Many thanks to Mr. Berlusconi and his friend Mr. Bush for making
our world that secure! What? You don't want government to control
every little step you are doing? Maybe you are in favour of child
porn and terrorism, aren't you?

Cheers,
Thomas