[VOIPSEC] Prevailing trends in securing the SIP signaling plane

[J. Oquendo]

On Tue, 14 Apr 2009, Vijay K. Gurbani wrote:

> SIPit   Unique          Number of TLS
> No.     Implementations implementations   Percentage
> ----------------------------------------------------
> 16       57                  25               44%
> 18       73                  30               41%
> 19       90                  41               45%
> 20       90                  42               46%
> 21       70                  34               49%
> 22       80                  50               63%
> 23       50                  24               48%
> 

Vijay, out of these statistics, what percentage of it boils
down to carriers and site to site (one office to another).
>From my view as a carrier who's peered with Level3, Global,
Verizon, pukeListGoesOn... I can tell you, I've never seen
any kind of interop testing they've required from us. On
the flip side of this, maybe Hadriel @ Acme can clear this,
I am aware there are SBC's, media gateways, etc., etc.,
that can do the job but at a cost (processing, bandwidth,
etc). So from my point of view, sure we'd do it... At a
cost. Would make much more sense to do IPSEC for me and
ultimately if something is *that* sensitive, perhaps you
shouldn't be saying it over a wire ;)


=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP

"Enough research will tend to support your
conclusions." - Arthur Bloch

"A conclusion is the place where you got
tired of thinking" - Arthur Bloch

227C 5D35 7DCB 0893 95AA  4771 1DCE 1FD1 5CCD 6B5E
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E