24 Feb
2005
24 Feb
'05
4:37 p.m.
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two SIP
client?
-does the proxy implement some particular tasks or actions, or is it a client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much
stefano
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
24 Feb
24 Feb
6:13 p.m.
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
Hi all,
i have a question:
-do you know how it's possible to encrypt the comunication between two SIP
client?
-does the proxy implement some particular tasks or actions, or is it a client-side
problem?
-if it is so, do you know any SIP client that implements encription?
Thank you very much
stefano
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
11:17 p.m.
On Thursday 24 February 2005 17:13, Daniel-Constantin Mierla wrote:
You want to encrypt the signaling, media or
everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
The newer snom UAs suport SRTP, as well as some Linksys product AFAIK.
Greetings
Nils
25 Feb
25 Feb
1:02 p.m.
I'd like to encrypt media, but i thought there should be some client that
can do it
without changing proxy behaviour!
Anyway IPSec seems a good solution, but if I configure the proxy server for
IPSec, can i handle both encrypted and not encrypted calls?
stafano
-- Messaggio Originale --
Date: Thu, 24 Feb 2005 17:13:00 +0100
From: Daniel-Constantin Mierla <Daniel-Constantin.Mierla(a)fokus.fraunhofer.de>
To: Stefano <stefanoblasco(a)tiscali.it>
CC: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
>Hi all,
>
>i have a question:
>
>-do you know how it's possible to encrypt the comunication between two
SIP
>client?
>
>-does the proxy implement some particular tasks or actions, or is it a
client-side
>problem?
>
>-if it is so, do you know any SIP client that implements encription?
>
>Thank you very much
>stefano
>
>__________________________________________________________________
>Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
>Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
>a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
>il 28 Febbraio 2005, 3 MESI sono GRATIS
>Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
>
>
>
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>
>
>
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
9:09 p.m.
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there
should be some client that
can do it
without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for
SIP proxies.
Anyway IPSec seems a good solution, but if I configure
the proxy server for
IPSec, can i handle both encrypted and not encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages.
But this solution will only work if you put an IPSec gateway in front of a
complete subnetwork with phones in it or use only soft-phones. Because I do
not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings
Nils
stafano
-- Messaggio Originale --
Date: Thu, 24 Feb 2005 17:13:00 +0100
From: Daniel-Constantin Mierla
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de> To: Stefano
<stefanoblasco(a)tiscali.it>
CC: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
>Hi all,
>
>i have a question:
>
>-do you know how it's possible to encrypt the comunication between two
SIP
>client?
>
>-does the proxy implement some particular tasks or actions, or is it a
client-side
>problem?
>
>-if it is so, do you know any SIP client that implements encription?
>
>Thank you very much
>stefano
>
>__________________________________________________________________
>Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
>Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
>a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
>il 28 Febbraio 2005, 3 MESI sono GRATIS
>Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
>
>
>
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers 
9:25 p.m.
May I ask some questions?
1. is there any SRTP aware termination GW/softswitches wide known
2. can cisco 2650MX handle traffic from 24 simultaneous calls G711 ?
3. Can SAME cisco get those calls via T1 and then forward via SIP ?
Wrong list for that :) I know
-----Original Message-----
From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org] On
Behalf Of Nils Ohlmeier
Sent: Friday, February 25, 2005 2:10 PM
To: serusers(a)lists.iptel.org
Cc: Stefano
Subject: Re: [Serusers] SIP encrypted calls
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought there
should be some client that
can do it
without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for
SIP proxies.
Anyway IPSec seems a good solution, but if I configure
the proxy server
for
IPSec, can i handle both encrypted and not encrypted
calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages.
But this solution will only work if you put an IPSec gateway in front of a
complete subnetwork with phones in it or use only soft-phones. Because I do
not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings
Nils
stafano
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
-- Messaggio Originale --
Date: Thu, 24 Feb 2005 17:13:00 +0100
From: Daniel-Constantin Mierla
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de> To: Stefano
<stefanoblasco(a)tiscali.it>
CC: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
>Hi all,
>
>i have a question:
>
>-do you know how it's possible to encrypt the comunication between two
SIP
>client?
>
>-does the proxy implement some particular tasks or actions, or is it a
client-side
>problem?
>
>-if it is so, do you know any SIP client that implements encription?
>
>Thank you very much
>stefano
>
>__________________________________________________________________
>Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
>Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
>a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
>il 28 Febbraio 2005, 3 MESI sono GRATIS
>Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
>
>
>
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
28 Feb
28 Feb
1:33 p.m.
On Friday 25 February 2005 20:25, Vitaly Nikolaev wrote:
1. is there any SRTP aware termination GW/softswitches
wide known
I dont know any gateways with SRTP support. Which does not mean they dont
exist :)
2. can cisco 2650MX handle traffic from 24
simultaneous calls G711 ?
3. Can SAME cisco get those calls via T1 and then forward via SIP ?
Ask your friendly Cisco support :)
Regards
Nils
Wrong list for that :) I know
-----Original Message-----
From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org] On
Behalf Of Nils Ohlmeier
Sent: Friday, February 25, 2005 2:10 PM
To: serusers(a)lists.iptel.org
Cc: Stefano
Subject: Re: [Serusers] SIP encrypted calls
On Friday 25 February 2005 12:02, Stefano wrote:
I'd like to encrypt media, but i thought
there should be some client that
can do it
without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for
SIP proxies.
Anyway IPSec seems a good solution, but if I
configure the proxy server
for
IPSec, can i handle both encrypted and not
encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages.
But this solution will only work if you put an IPSec gateway in front of a
complete subnetwork with phones in it or use only soft-phones. Because I do
not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings
Nils
stafano
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers -- Messaggio Originale --
Date: Thu, 24 Feb 2005 17:13:00 +0100
From: Daniel-Constantin Mierla
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de> To: Stefano
<stefanoblasco(a)tiscali.it>
CC: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
>Hi all,
>
>i have a question:
>
>-do you know how it's possible to encrypt the comunication between two
SIP
>client?
>
>-does the proxy implement some particular tasks or actions, or is it a
client-side
>problem?
>
>-if it is so, do you know any SIP client that implements encription?
>
>Thank you very much
>stefano
>
>__________________________________________________________________
>Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
>Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
>a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
>il 28 Febbraio 2005, 3 MESI sono GRATIS
>Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
>
>
>
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
26 Feb
26 Feb
1:05 p.m.
Thank you very much for the news,
i have another question:
what about SIPS (SIP Secure)? i found out two links to this subject
http://www.ietf.org/internet-drafts/draft-barnes-sipping-sec-inserted-info-…
http://www.ietf.org/internet-drafts/draft-jennings-sip-sec-flows-02.txt
and i think SNOM has implemented something about SIPS.
What about SER do you think there will be future implementation of SIPS?
stefano
-- Messaggio Originale --
From: Nils Ohlmeier <lists(a)ohlmeier.org>
To: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
Date: Fri, 25 Feb 2005 20:09:47 +0100
Cc: "Stefano" <stefanoblasco(a)tiscali.it>it>,
"Daniel-Constantin Mierla"
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de>
On Friday 25 February 2005 12:02, Stefano wrote:
for
I'd like to encrypt media, but i thought
there should be some client that
can do it
without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent
SIP proxies.
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
Anyway IPSec seems a good solution, but if I
configure the proxy server
for
IPSec, can i handle both encrypted and not
encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages.
But this solution will only work if you put an IPSec gateway in front of
a
complete subnetwork with phones in it or use only soft-phones. Because I
do
not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings
Nils
stafano
a
>
> client-side
>
> >>problem?
> >>
> >>-if it is so, do you know any SIP client that implements encription?
> >>
> >>Thank you very much
> >>stefano
> >>
> >>__________________________________________________________________
> >>Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
> >>Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
> >>a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
> >>il 28 Febbraio 2005, 3 MESI sono GRATIS
> >>Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
> >>
> >>
> >>
> >>_______________________________________________
> >>Serusers mailing list
> >>serusers(a)lists.iptel.org
> >>http://lists.iptel.org/mailman/listinfo/serusers
>
> __________________________________________________________________
> Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
> Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
> a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
> il 28 Febbraio 2005, 3 MESI sono GRATIS
> Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
>
>
>
> _______________________________________________
> Serusers mailing list
> serusers(a)lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers -- Messaggio Originale --
Date: Thu, 24 Feb 2005 17:13:00 +0100
From: Daniel-Constantin Mierla
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de> To: Stefano
<stefanoblasco(a)tiscali.it>
CC: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
>Hi all,
>
>i have a question:
>
>-do you know how it's possible to encrypt the comunication between two
SIP
>>client?
>>
>>-does the proxy implement some particular tasks or actions, or is it
28 Feb
28 Feb
1:35 p.m.
On Saturday 26 February 2005 12:05, Stefano wrote:
what about SIPS (SIP Secure)? i found out two links to
this subject
http://www.ietf.org/internet-drafts/draft-barnes-sipping-sec-inserted-info-
02.txt
http://www.ietf.org/internet-drafts/draft-jennings-sip-sec-flows-02.txt
SIPS is already in RFC3261 defined.
and i think SNOM has implemented something about SIPS.
Yes snom has SIPS available in all its products.
What about SER do you think there will be future
implementation of SIPS?
AFAIK SIPS support is available for SER under commercial license, but not for
free.
Greetings
Nils
stefano
-- Messaggio Originale --
From: Nils Ohlmeier <lists(a)ohlmeier.org>
To: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
Date: Fri, 25 Feb 2005 20:09:47 +0100
Cc: "Stefano" <stefanoblasco(a)tiscali.it>it>,
"Daniel-Constantin Mierla"
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de>
On Friday 25 February 2005 12:02, Stefano wrote:
for
I'd like to encrypt media, but i thought
there should be some client
that can do it
without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent SIP proxies.
__________________________________________________________________
Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
il 28 Febbraio 2005, 3 MESI sono GRATIS
Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/ Anyway IPSec seems a good solution, but if I
configure the proxy server
for
IPSec, can i handle both encrypted and not
encrypted calls?
You should be able to receive messages encrypted over IPSec as well as the
plain old messages.
But this solution will only work if you put an IPSec gateway in front of
a
complete subnetwork with phones in it or use only soft-phones. Because I
do
not know any hard phones which support IPSec (correct me if I'm wrong).
Greetings
Nils
stafano
a
> client-side
>
> >>problem?
> >>
> >>-if it is so, do you know any SIP client that implements encription?
> >>
> >>Thank you very much
> >>stefano
> >>
> >>__________________________________________________________________
> >>Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
> >>Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
> >>a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
> >>il 28 Febbraio 2005, 3 MESI sono GRATIS
> >>Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
> >>
> >>
> >>
> >>_______________________________________________
> >>Serusers mailing list
> >>serusers(a)lists.iptel.org
> >>http://lists.iptel.org/mailman/listinfo/serusers
>
> __________________________________________________________________
> Tiscali Adsl 3 Mega Flat, 3 MESI GRATIS!
> Con Tiscali Adsl 3 Mega Flat navighi in Rete alla supervelocita'
> a soli 29.95 euro al mese senza limiti di tempo. Attivati entro
> il 28 Febbraio 2005, 3 MESI sono GRATIS
> Scopri come http://abbonati.tiscali.it/adsl/sa/2flat_tc/
>
>
>
> _______________________________________________
> Serusers mailing list
> serusers(a)lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers -- Messaggio Originale --
Date: Thu, 24 Feb 2005 17:13:00 +0100
From: Daniel-Constantin Mierla
<Daniel-Constantin.Mierla(a)fokus.fraunhofer.de> To: Stefano
<stefanoblasco(a)tiscali.it>
CC: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SIP encrypted calls
You want to encrypt the signaling, media or everything?
For everything I guess IPsec is the solution, for signaling only, TLS
can be an alternative to IPsec. Just for media, a solution would be
Secure-RTP but I am not aware of any client implementing it.
If the signaling is encrypted, the proxy must know how to decrypt it.
Daniel
On 02/24/05 15:37, Stefano wrote:
>Hi all,
>
>i have a question:
>
>-do you know how it's possible to encrypt the comunication between two
SIP
>>client?
>>
>>-does the proxy implement some particular tasks or actions, or is it 
12:31 p.m.
Hi Nils!
Nils Ohlmeier wrote:
On Friday 25 February 2005 12:02, Stefano wrote:
How will the clients exchange the key for the RTP encryption? Will it be
sent in the SDP? If yes, wouldn't I also need encrypted SIP to hide the
RTP key?
regards,
klaus
I'd like to encrypt media, but i thought there
should be some client that
can do it
without changing proxy behaviour!
There are clients. See my previous mail. SRTP is completely transparent for
SIP proxies.
1:44 p.m.
Hi Klaus,
On Monday 28 February 2005 11:31, Klaus Darilion wrote:
Nils Ohlmeier wrote:
Yes the keys will be exchanged within the SDP. So indeed you should crypt the
SDP in signaling either by using TLS or S/MIME. Otherwise someone could read
the keys from the signaling and decrypt the RTP streams.
Greetings
Nils
There are clients. See my previous mail. SRTP is
completely transparent
for SIP proxies.
How will the clients exchange the key for the RTP encryption? Will it be
sent in the SDP? If yes, wouldn't I also need encrypted SIP to hide the
RTP key?
7207
days inactive
7211
days old
11 comments
5 participants
participants (5)
-
Daniel-Constantin Mierla -
Klaus Darilion -
Nils Ohlmeier -
Stefano -
Vitaly Nikolaev