[VOIPSEC] VoIP and Banking Security

[Brian Rosen]

>.... I could be wrong, but I believe SRTP would take care of this.
Thoughts?


Yes, SRTP would take care of this as long as the DTMF was carried as RFC2833
(there is a revision coming), or just as inline G.711 encoded audio.

We're moving in the direction of not sending key presses as DTMF for VoIP
enabled services.  The "KPML" work (in the RFC editor's queue) does that; it
turns a key press into a signaling message, not a media stream event.
Securing your signaling would be needed there.

Brian