[SR-Users] it's auth module send clear text password?

[PICCORO McKAY Lenz]

El mar., 5 de mar. de 2019 a la(s) 09:33, Giovanni Maruzzelli (........@
gmail.com) escribió:

> On Tue, Mar 5, 2019 at 1:12 PM PICCORO McKAY Lenz <mckaygerhard at gmail.com>
> wrote:
>
>> thanks for aswer Federico, another, if the communication beetween
>> asterisk and kamailio are using public ip, that password are easyl
>> hackaeable?
>>
> yes, they are hackable, exactly like HTTP passwords. Easily, that depends
> who the hackers are.
>

umm like that so then sound and any other stream beetween two right?


> For real security (and privacy, etc) go for TLS and SRTP (ZRTP being the
> uber good).
>
TLS implementation are knowed, but some documentations and ruting examples
for SRTP case?

very very thanks Giovanni Maruzzelli


>
> -giovanni
>
>
>
>>
>> i read rfc2617 but does are not clear respect security and seems SIP is
>> not an easy protocol to secure due relationship beetween both are trusted
>> or something similar?
>>
>> El mar., 5 de mar. de 2019 a la(s) 03:08, Federico Cabiddu (
>> federico.cabiddu at gmail.com) escribió:
>>
>>> Hi,
>>> auth module implement digest authentication (rfc2617) so passwords are
>>> not sent in clear from the client to kamailio.
>>>
>>> Federico
>>>
>>> On Tue, Mar 5, 2019 at 7:07 AM PICCORO McKAY Lenz <
>>> mckaygerhard at gmail.com> wrote:
>>>
>>>> if kamailio doe snot use TLS all the mechanish in atuh module are send
>>>> the pasword nude to the network?
>>>>
>>>> Lenz McKAY Gerardo (PICCORO)
>>>> http://qgqlochekone.blogspot.com
>>>> _______________________________________________
>>>> Kamailio (SER) - Users Mailing List
>>>> sr-users at lists.kamailio.org
>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>> _______________________________________________
>>> Kamailio (SER) - Users Mailing List
>>> sr-users at lists.kamailio.org
>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>> _______________________________________________
>> Kamailio (SER) - Users Mailing List
>> sr-users at lists.kamailio.org
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>
>
> --
> Sincerely,
>
> Giovanni Maruzzelli
> OpenTelecom.IT
> cell: +39 347 266 56 18
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20190305/5faf5996/attachment.html>