SIP Trunk encryption

[nima1]

Hell community,

I have seen a view posts and pages regarding encryption.
https://www.3cx.com/docs/sip-trunk-options/ > SRTP

The problem seems, that with newer versions of 3CX encrypted and unencrypted media is send to the trunk when SRTP is activated. There is no way to ensure, that the call is secured, because the backend can decide. I have contact with telecom providers and some huger only accept encrypted traffic when SRTP option is enabled so calls are not possible any more. I know the RFC and the implementations seems not wrong but from the view of security it is better to do so, as some of the providers handle it and this is also not wrong.

Is there any option planned to prevent unencrypted media stream with activated SRTP in the future? At the moment encrypted calls are not possible since the update and this is really not good.

 

[JohnS_3CX]

Hi @nima1

There are no immediate plans for this but I would not rule out the possibility for the future to have something similar to what extensions have:

 

[Evolute IT]

Hi @nima1

There are no immediate plans for this but I would not rule out the possibility for the future to have something similar to what extensions have:

View attachment 17679

Actually, it's already there in the templates. It's just commented out. If we uncomment it, the field appears. However, it does not work for now unless we put the variable at the right setting. I guess this will come with SIP TLS options as well.