[VOIPSEC] Analysis of a VoIP Attack

Iñaki Baz Castillo ibc at aliax.net
Fri Oct 24 10:32:48 CDT 2008


El Viernes, 24 de Octubre de 2008, Klaus Darilion escribió:

> > This is, the attacker will receive the responses always, since they will
> > be always sent to the real source address, regardless of the Via
> > "sent-by" value.
> >
> > However, this is a typical confusion, I think the problem is the SIP
> > design, in which the application level data (pure SIP) contains lower
> > layers data (network and transport protocol).
>
> Hi Inaki!
>
> Yes, you are right - as long as all SIP client are standard conform and
> read the RFC as precise as you  ;-)

Yeah! :)


-- 
Iñaki Baz Castillo




More information about the Voipsec mailing list