[VOIPSEC] This call is being recorded for Quality Assurance

[J. Oquendo]

Hey all, what has anyone come across for the following scenario:

You work at Company X whose customer service department (or other
department for that matter) plays an audio "This call is being
recorded..." Company X indeed records and stores conversations (or
samples or conversations) for later playback.

1) Conference between client and Company X has to be encrypted (locally
TLS works fine)
2) Audio recorded has to be encrypted and retrievable
3) Message format has to be small so as not to chew through space.

Make sense?

In premise #1, TLS would work fine but it wouldn't stop a local tap on
the client's side (not much a company can do about this).

In premise #2, I've seen nothing functional that says something to the
tune of `gpg conversation.wav conversation.wav.gpg`

In premise $3, I'm thinking MP3 is probably the best bet for space/sizes.

-- 

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP

"It takes 20 years to build a reputation and five minutes to
ruin it. If you think about that, you'll do things
differently." - Warren Buffett

227C 5D35 7DCB 0893 95AA  4771 1DCE 1FD1 5CCD 6B5E
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E