Hello,
I have a few questions about how to secure SIP messages...
IPSec or TLS can be used to guarantee privacy, integrity and
authenticity of transmitted data. But SIP is only payload/data for
these protocols.
Digest Authentication does only guarantee authenticity...
S/MIME seems to be interesting but I don't know any implementation in
a SIP client.
My questions:
- Is there any mechanism that prevents me from corrupting or faking
SIP messages?
- Is it possible to create a kind of binding between the certificates
used for TLS/IPSec and the SIP accounts?
Thanks for your answers...
Best regards,
Steffen