Antwort: Re: how to Improve security in minisip?

[hubertus.grobbel at gi-de.com]

Hi Nuno,

watch out for DTLS ...

Regards
Hubertus




"Nuno Carvalho" <profncarvalho at gmail.com> 
Gesendet von: minisip-devel-bounces at minisip.org
15.05.2007 12:13
Bitte antworten an
minisip developers' mailing list <minisip-devel at minisip.org>


An
"minisip developers' mailing list" <minisip-devel at minisip.org>
Kopie

Thema
Re: how to Improve security in minisip?






Hi,
 
Thanks for your quick reply
I'll study the tip 
 
Best regards,
Nuno Carvalho


 
On 5/14/07, Mikael Magnusson <mikma264 at gmail.com> wrote: 
Nuno Carvalho wrote:
> Hi,
>
>
>
> I´m interested in developing new security features in minisip for my 
master 
> thesis but I need some ideas of what to do or what to find.
>
> I already install a openser and use a secure connection with minisip.
>
> Please a need some help to start.
>
>
>
> Best regards,
>
> Nuno Carvalho
>

1) sdescriptions RFC 4568. Doesn't really improve security, but
interoperability. Sdescriptions is similar to MIKEY NULL, and needs
S/MIME for end-to-end security. But most implementations only supports 
TLS, ie. hop-by-hop security and possibility for proxies to eavesdrop on
the conversations.

2) Extend ZRTP support to latest draft. It's probably a matter of
updating to current ZRTP implementation from GNU ccRTP. 

ZRTP is under evaluation by RTPSEC working group:

http://www.ietf.org/internet-drafts/draft-wing-rtpsec-keying-eval-02.txt 
http://www3.ietf.org/proceedings/07mar/minutes/rtpsec.txt


Mikael
_______________________________________________
Minisip-devel mailing list 
Minisip-devel at minisip.org
http://lists.minisip.org/mailman/listinfo/minisip-devel
_______________________________________________
Minisip-devel mailing list
Minisip-devel at minisip.org
http://lists.minisip.org/mailman/listinfo/minisip-devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.minisip.org/pipermail/minisip-devel/attachments/20070515/54aee606/attachment.htm