VoIP Mailing List Archives :: View topic - [Freeswitch-users] Passwords in clear text

Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community

[Freeswitch-users] Passwords in clear text

Goto page Previous 1, 2

VoIP Mailing List Archives Forum Index -> freeSWITCH Users

View previous topic :: View next topic

Author

Message

Prometheus001 at gmx.net
Guest

Posted: Thu Oct 23, 2008 6:17 am Post subject: [Freeswitch-users] Passwords in clear text

OK, I got it. The replay vulnerability only happens when key exchange is
done via unencrypted SIP. I understand that with TLS the Invite message
cannot be replayed as it cannot be seen in clear text.

Brian West schrieb:

Quote:

Its called TLS...

/b

On Oct 21, 2008, at 4:30 PM, Peter P GMX wrote:

Quote:

In our environment DTMF is of course transported via SRTP so this is
more secure (although the key exchange by SDES is known to have
security
issues, as rtp streams may be replayed by a 3rd party, there is no
replay prevention mechanism in SDES and therefore also not in
freeswitch, hein?).

_______________________________________________
Freeswitch-users mailing list
Freeswitch-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

Display posts from previous:

	VoIP Mailing List Archives Forum Index -> freeSWITCH Users	All times are GMT - 5 Hours Goto page Previous 1, 2
Page 2 of 2

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum