[VOIPSEC] Key Negotiation for SRTP (Ahmar Ghaffar)

[Robert Moskowitz]

At 07:51 PM 8/29/2005, Mark Baugher wrote:

> > I don't disagree that we'd need public key authentication
> > infrastructure.
>
>It's like Waiting for Godot.  Phil Zimmerman has an alternative
>approach that does not require one.  That's yet another way to key
>SRTP, however.

We are starting to see large PKI deployments like CERTIPATH, HEBCA, 
and SAFE.  Then there is ACES.  So there options.  And if product 
supported PKI authentication (A USB port on every phone?), those and 
other PKIs would have a 'killer' application.



Robert Moskowitz
Senior Technical Director
ICSA Labs, a division of Cybertrust, Inc.
W:      248-968-9809
F:      248-968-2824
VoIP:   248-291-0713
E:      rgm at icsalabs.com

There's no limit to what can be accomplished if it doesn't matter who 
gets the credit