[VOIPSEC] S/MIME?

[Brian Rosen]

S/MIME is a basic end to end security mechanism defined in the base RFC3261
document.  It only protects the BODY of the SIP message, not the headers.
Headers have to be interpreted by all the intermediaries (proxy servers), so
S/MIME would not be appropriate for them.  

It has very little deployment for two reasons:
1. It depends on a PKI that doesn't exist
2. Middle boxes (firewalls, SBCs and other ALGs) can't deal with encrypted
session parameters.



-----Original Message-----
From: Voipsec-bounces at voipsa.org [mailto:Voipsec-bounces at voipsa.org] On
Behalf Of Porter, Thomas (Tom)
Sent: Wednesday, August 24, 2005 5:27 PM
To: Voipsec at voipsa.org
Subject: [VOIPSEC] S/MIME?

I'm curious why S/MIME hasn't caught on as a SIP encryption protocol. Is
it a lack of communication between the implementors and the standards
group?

Thanks, Tom

_______________________________________________
Voipsec mailing list
Voipsec at voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org