Encryption [Relayed from German Forum]

[NMN]

I found this post in the German forum. As it is fairly quite over there, but the question is intriguing, I though I post a translation of it here:

Without encryption VoIP traffic can be captured frighteningly easily and unnoticed on an internal network
(i.e. Wireshark has already plugins available, which re-assembles IP packets, so that the codec can be determined and the conversation replayed).

To prevent this SIP and RTP have, analogue to HTTP/HTTPS, the protocol variants SIPS and SRTP.

Does 3CX support these protocols in so far as they are supported by client hardware?

If so, how does that affect the CPU load on the server?

Original post: http://www.3cx.de/forums/verschlusselung-7.html

I am sure mschmidt would appreciate any insight and I will gladly translate any answer posted here ...

NMN

 

[FITEC]

did you get any info relating SIPS/SRTP?

 

[William400]

Hi

As of the release of V7, 3CX can do SSIP. We are still working on SRTP, however there is no ETA on this.

As to configuring secure SIP please review http://www.3cx.com/support/Secure-SIP.html .

 

[Darrin]

Any chance there's an ETA on the SRTP feature now?

Also, If we have remote clients using the proxy/tunnel, is there any encryption applied (ie: do we need to employ SSIP/SRTP over the tunnel or is that redundant)?

Darrin

 

[archie]

Currently, tunnel do not encrypt its traffic, but there's still no Wireshark plugin to extract audio streams out of it.