[VOIPSEC] ipsec vs. tls/srtp ?

[dan_york at Mitel.com]

Jin,

> The recent list discussion about voip & vpns brings up another 
> question: How do the list members feel about using tls & srtp as a 
> secure alternative to running sip voip over ipsec vpns ?    There 
> would seem to be some advantages to using tls & srtp but I  would like 
some other opinions.

Are you asking about the approach of separately encrypting the SIP call 
control 
using TLS and then encrypting the voice using SRTP?  (Versus not 
encrypting both 
but just tunnelling all the unencrypted traffic over an encrypted VPN 
tunnel?)

If so, yes, we see that as a secure alternative to VPN tunnelling.  This 
is
how we secure all of our (Mitel) sets. 

Regards,
Dan

-- 
Dan York, CISSP
Dir of IP Technology, Office of the CTO
Mitel Corp.     http://www.mitel.com
dan_york at mitel.com +1-613-592-2122
PGP key (F7E3C3B4) available for 
secure communication