<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Blue Box Podcast #31 - VoIP Fraud discussion, CALEA tutorial/commentary, VoIP security news and more</title>
	<atom:link href="http://voipsa.org/blog/2006/06/27/blue-box-podcast-31-voip-fraud-discussion-calea-tutorialcommentary-voip-security-news-and-more/feed/" rel="self" type="application/rss+xml" />
	<link>http://voipsa.org/blog/2006/06/27/blue-box-podcast-31-voip-fraud-discussion-calea-tutorialcommentary-voip-security-news-and-more/</link>
	<description>Collective thoughts and musings on the state of VoIP security today.</description>
	<pubDate>Wed, 20 Aug 2008 13:36:44 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
		<item>
		<title>By: Randell Jesup</title>
		<link>http://voipsa.org/blog/2006/06/27/blue-box-podcast-31-voip-fraud-discussion-calea-tutorialcommentary-voip-security-news-and-more/#comment-398</link>
		<dc:creator>Randell Jesup</dc:creator>
		<pubDate>Thu, 29 Jun 2006 00:45:34 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/2006/06/27/blue-box-podcast-31-voip-fraud-discussion-calea-tutorialcommentary-voip-security-news-and-more/#comment-398</guid>
		<description>Good podcast!

I'm not sure I'm as optimistic as you are that the FCC will adapt to the internet, as opposed to it trying to impose requirements from the circuit-switched world to the internet.  Note that Skype could (with a bunch of work) implement CALEA by always routing through supernodes (which could act as interception points - though fully avoiding it being sniffed is tough without making all supernodes under Skype control).  Right now I think Skype will (when possible) send directly.

I disagree with one of your statements: I believe CALEA may apply to enterprise VoIP.  

The reason is that the same argument used by the FCC to ensnare educational institutions ("because they touch a public network") would apply to enterprises.  In fact, the CALEA ruling would seem to imply that a corporate ("private") network that touches the internet would be covered by the same CALEA rules that apply to ISPs.</description>
		<content:encoded><![CDATA[<p>Good podcast!</p>
<p>I&#8217;m not sure I&#8217;m as optimistic as you are that the FCC will adapt to the internet, as opposed to it trying to impose requirements from the circuit-switched world to the internet.  Note that Skype could (with a bunch of work) implement CALEA by always routing through supernodes (which could act as interception points - though fully avoiding it being sniffed is tough without making all supernodes under Skype control).  Right now I think Skype will (when possible) send directly.</p>
<p>I disagree with one of your statements: I believe CALEA may apply to enterprise VoIP.  </p>
<p>The reason is that the same argument used by the FCC to ensnare educational institutions (&#8221;because they touch a public network&#8221;) would apply to enterprises.  In fact, the CALEA ruling would seem to imply that a corporate (&#8221;private&#8221;) network that touches the internet would be covered by the same CALEA rules that apply to ISPs.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
