On Tue, Mar 5, 2019 at 1:12 PM PICCORO McKAY Lenz <mckaygerhard@gmail.com> wrote:

thanks for aswer Federico, another, if the communication beetween asterisk and kamailio are using public ip, that password are easyl hackaeable?

yes, they are hackable, exactly like HTTP passwords. Easily, that depends who the hackers are. 

For real security (and privacy, etc) go for TLS and SRTP (ZRTP being the uber good).

-giovanni

 

i read rfc2617 but does are not clear respect security and seems SIP is not an easy protocol to secure due relationship beetween both are trusted or something similar?

El mar., 5 de mar. de 2019 a la(s) 03:08, Federico Cabiddu (federico.cabiddu@gmail.com) escribió:

Hi,

auth module implement digest authentication (rfc2617) so passwords are not sent in clear from the client to kamailio.

Federico

On Tue, Mar 5, 2019 at 7:07 AM PICCORO McKAY Lenz <mckaygerhard@gmail.com> wrote:

if kamailio doe snot use TLS all the mechanish in atuh module are send the pasword nude to the network?

Lenz McKAY Gerardo (PICCORO)

http://qgqlochekone.blogspot.com

_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

--

Sincerely,

Giovanni Maruzzelli
OpenTelecom.IT
cell: +39 347 266 56 18

_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users