[VOIPSEC] Voice or Not -- Fake Voice Packet???
rgm at icsalabs.com
Thu Oct 6 22:01:07 BST 2005
At 10:22 AM 10/5/2005, Paine, Richard H wrote:
>Without something like the Host Identity Protocol (HIP), the
>authenticity of the source will always be spoofable. Take a look at HIP
Now you are going to force me to update my web site! Go look over at
the IETF HIP workgroup while I get things current!
>There are several
>reference implementations of HIP and they are available for download and
>testing. Clients for both Windows and Linux are available. The Open
>Group developed an integration architecture called the Secure Mobile
>Architecture (SMA) and Boeing has a prototype implementation of it
>within its Intranet. With SMA, the
>VOIP calls are not spoofable and are protected and encrypted over both
>wire and wireless across the Internet.
I am biased.
I never felt MobileIP was the right answer for devices with changing
IP addresses, whatever the application traffic is (e.g. RTP or
SRTP). Hence HIP.
But this is not saying anything new here.
Though and interesting intersection of VoIP and HIP would be to have
the device's SIP server and HIP rendezvous server be the same
platform. This would also provide secure SIP UDP between the client
and SIP server. Hmmmm....
Senior Technical Director
ICSA Labs, a division of Cybertrust, Inc.
E: rgm at icsalabs.com
There's no limit to what can be accomplished if it doesn't matter who
gets the credit
More information about the Voipsec