XMPP Video/VoIP encrypted?

Werner Dittmann Werner.Dittmann at t-online.de
Thu Jun 14 02:41:37 EDT 2012


Am 14.06.2012 08:32, schrieb David Woolley:
> Beeblebrox at cryptolab.net wrote:
> 
>>
>> I read at wikipedia about ZRTP (https://en.wikipedia.org/wiki/ZRTP)
> 
> It seems to be encryption without authentication, which means it is vulnerable to man in the middle attacks.
> 
> 

That's why GUI support is required: ZRTP uses some clever ways to provide
authentication checks and to confirm authentication. Once this was done
ZRTP uses mechanisms to check the authentication in follwoing calls with
the same VoIP client. It's fairly simple to use from a user's point of view.


Regards,
Werner

-- 
----------------------------------------------
Werner Dittmann    Werner.Dittmann at t-online.de
Tel +49 176 993 462 95
PGP key: 82EF5E8B




More information about the Support mailing list