[VOIPSEC] Suggestions for security improvements to Asterisk...

[Diana Cionoiu]

Hi,

The main problem with Asterisk sip implementation is the fact that does
have a transaction engine.
So the transactions are connected to the phone calls incited of being
independent.

Diana

Dan York wrote:
> VOIPSEC readers,
>
> As I mentioned in the VOIPSA blog last month, I was down at AstriCon,  
> the Asterisk conference, last month giving a general overview of VoIP  
> security issues.  As part of that, I also offered my views on what  
> improvements could be made to Asterisk with regard to security.  I  
> summarized that information up on the VOIPSA blog at:
>
> http://voipsa.org/blog/2007/10/09/suggestions-for-a-security-roadmap- 
> for-asterisk/
>
> Jonathan and I also discussed that on Blue Box #69 which I'm  
> currently post-producing and should be posting tonight.
>
> Anyway, comments and feedback are definitely welcome.
>
> Regards,
> Dan
>
> --
> Dan York  dyork at lodestar2.com
> http://www.danyork.com/   skype:danyork
> Phone: +1-802-735-1624
>
> Disruptive Telephony - http://www.disruptivetelephony.com
> Disruptive Conversations - http://www.disruptiveconversations.com/
> Blue Box: The VoIP Security Podcast - http://www.blueboxpodcast.com/
> Voice of VOIPSA - http://www.voipsa.org/blog
>
>
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>