UK SIP trunks supporting 3CX, TLS and SRTP

[telis]

Does anyone know which of these SIP Trunnk providers (if any) support TLS and SRTP?

https://www.3cx.com/partners/sip-trunks/uk/

 

[telis]

Someone? Anyone?

Surely TLS and SRTP should in the list of supported/unsupported features for the provider along with "IPV6 Ready" etc.

 

[YiannisH_3CX]

Hello @telis

We do not have a list of supported providers that support TLS as we added support for this on V16 SP3 and we need to test all providers for TLS support. Once we have tested enough we will add the TLS support in the features page.

 

[telis]

@YiannisH_3CX

OK great. I'm glad it's on someones list. Definitely worth a 3CX blog post once done.

 

[Alphabetic]

Voiceflex has this option if this helps you.

 

[telis]

@kieferschild Thanks for responding! They are on the supported list and they support CLIP no screening so looks hopeful.

Have you been able to get their SIP to work with 3CX over TLS with SRTP?

 

[Alphabetic]

I dont really use it. But im pretty sure once upon a time when i was testing I got SRTP working.

 

[telis]

@kieferschild

I asked one of my staff to call voiceflex yesterday and get a demo account just after 17:00 and the phone rang for 10 mins and then they appeared to pick up the handset just to hang it up. Of course that may not be exactly how it happened and it may not be representative so probably I shouldn't hold this against them.

I will get someone to try again today and test it myself. SRTP by itself isn't any more secure than RTP since the keys are sent over SIP so you need SIP over TLS to make it any better.

 

[Alphabetic]

Voiceflex's sales team operate over the UK (working from home) so you will struggle to get them, IME I have the same problem most times. I would email [email protected] you'll probably get a faster reply.

 

[cobaltit]

I will get someone to try again today and test it myself. SRTP by itself isn't any more secure than RTP since the keys are sent over SIP so you need SIP over TLS to make it any better.

SRTP itself is absolutely more secure than RTP, even without TLS. It raises the bar on the intelligence needed to snoop the traffic. Practically anyone can load a capture of an unencrypted VoIP call into wireshark and listen to the audio. Take a capture of a call using SRTP without TLS and they will have to know how to find the keys. But yes they should go hand in hand for proper implementation.