[Voptalk] VoIP DTLS support (SIP and SRTP)?

[Nimrod Sasson]

Hello, vendors like cisco and nortel use proprietary protocols (unistim,
skinny) which based SIP and H323 but their RFP aint published yet, so I
don't know if there's any way to sniff their protocols.

2nd nortel use Secure Unistim to encrypt users authentication and even
use certificated to insure two factor authentication.

 

-----Original Message-----
From: voptalk-bounces at lists.vopsecurity.org
[mailto:voptalk-bounces at lists.vopsecurity.org] On Behalf Of Raul Siles
Sent: Tuesday, October 16, 2007 3:32 PM
To: voptalk at vopsecurity.org
Subject: [Voptalk] VoIP DTLS support (SIP and SRTP)?

Hi everyone,
A couple of questions related with the current state-of-the-art of
VoIP DTLS implementations (as a consequence of the recent OpenSSL
Security Advisory, CVE-2007-4995):

1) Is anyone aware of VoIP vendors currently providing support for SIP
over DTLS or/and SRTP-DTLS for VoIP servers or VoIP endpoints?
2) If any, do they use the OpenSSL implementation or a proprietary one?

Thanks,
--
Raul Siles
GSE
www.raulsiles.com
_______________________________________________
- The VoPSecurity Forum -

To post a message to the mailing list send an email to [
voptalk_at_lists.vopsecurity.org ] 
**********************************************************************************************
IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the 
named recipient(s) only.
If you have received this email in error, please notify the system manager or the sender immediately and do 
not disclose the contents to anyone or make copies thereof.
*** eSafe scanned this email for viruses, vandals, and malicious content. ***
**********************************************************************************************