New IETF proposal on secure call recording with SIP and SRTP

Dan Wing just released a new Internet Draft called “Disclosing Secure RTP (SRTP) Session Keys with a SIP Event Package” that merits attention and consideration. As Jonathan and I have discussed on Blue Box and as has been discussed in the VOIPSEC mailing list from time to time, there are situations where you want both the secure encryption of all voice and also the ability to record calls. However, right now this is difficult to do in any “standard” way in the world of SIP, and this new proposal is one view of how that situation might be solved. Dan is looking for feedback (and his address can be found in the document) and this document will no doubt be discussed at the upcoming IETF meeting in Prague in mid-March.