Re: TLS/SRTP
Alexis Fidalgo via sr-users <[email protected]> Wed, 1 Jul 2026 07:00:48 -0300
| Newsgroups | gmane.comp.voip.ser |
|---|---|
| Message-ID | <[email protected]> |
--===============0986634760== Content-Type: multipart/alternative; boundary=Apple-Mail-6766DCB1-35AF-44F6-B68A-A26030A89212 Content-Transfer-Encoding: 7bit --Apple-Mail-6766DCB1-35AF-44F6-B68A-A26030A89212 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html class=3D"apple-mail-supports-explicit-dark-mode"><head><meta http-equi= v=3D"content-type" content=3D"text/html; charset=3Dutf-8"></head><body dir=3D= "auto">1. tampering,, mitm, copying, sniffing, profiling, etc etc.<div><br><= /div><div>2. it dependa on where and how it=E2=80=99s deployed. there are go= od practices prior to any regulatory or compliance issues. </div><div><= br></div><div>3. seen a lot, but most important where service provider= s falling down because of =E2=80=98what is this traffic to xxxxx=E2=80=99? a= nd that was in a matter of hours.</div><div><br></div><div>those platforms a= re constantly and heavy targeted, no protection or security measures are red= undant </div><div><br></div><div><br id=3D"lineBreakAtBeginningOfSignat= ure"><div dir=3D"ltr">Enviado desde dispositivo m=C3=B3vil </div><div d= ir=3D"ltr"><br><blockquote type=3D"cite">El 1 jul 2026, a la(s) 06:53, Asma B= OUDDYACH <[email protected]> escribi=C3=B3:<br><br></blockqu= ote></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF<div dir=3D"lt= r">Hi,<br><br>Thank you for your clear answer.<br><br>Could you elaborate on= the concrete risks and constraints of NOT implementing TLS on a public-faci= ng Kamailio SBC, even with strict IP ACLs already in place?<br><br>Specifica= lly:<br>1. What can an attacker realistically do if SIP runs in clear text?<= br>2. Are there compliance or regulatory constraints we should be aware of?<= br>3. What incidents have you seen in real deployments without TLS?<br><br>T= hanks,</div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D= "ltr" class=3D"gmail_attr">Le mar. 30 juin 2026 =C3=A0 18:03, alex= is via sr-users <<a href=3D"mailto:[email protected]">sr-users@= lists.kamailio.org</a>> a =C3=A9crit :<br></div><blockquote class=3D= "gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20= 4,204,204);padding-left:1ex"><div dir=3D"auto">maybe not for a local network= , absolutely yes for a public one no matter the acl/rule/firewall </div= ><div dir=3D"auto"><br></div><div><br><div class=3D"gmail_quote"><div dir=3D= "ltr" class=3D"gmail_attr">El El mar, 30 jun 2026 a la(s) 12:57, asma.bouddy= ach--- via sr-users <<a href=3D"mailto:[email protected]" targe= t=3D"_blank">[email protected]</a>> escribi=C3=B3:<br></div><bl= ockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left= :1px solid rgb(204,204,204);padding-left:1ex">Hi all,<br> <br> My Kamailio SBC (in front of 3CX,) currently runs SIP in clear text, n= o SRTP. Security is mainly IP-based ACLs:<br> <br> if ($si =3D=3D PBX_IP) {<br> route(FROM_PBX);<br> if ($si =3D=3D ITSP_IP_IN || $si =3D=3D ITSP_IP_OUT) {<br> route(FROM_ITSP);<br> <br> What are the concrete risks of staying without TLS/SRTP in this setup, and w= ould you still recommend encryption given these ACLs already in place?<br> <br> Thanks,<br> Asmaa BOUDDYACH<br> __________________________________________________________<br> Kamailio - Users Mailing List - Non Commercial Discussions -- <a href=3D"mai= lto:[email protected]" target=3D"_blank">[email protected]= rg</a><br> To unsubscribe send an email to <a href=3D"mailto:[email protected]= lio.org" target=3D"_blank">[email protected]</a><br> Important: keep the mailing list in the recipients, do not reply only to the= sender!<br> </blockquote></div></div> __________________________________________________________<br> Kamailio - Users Mailing List - Non Commercial Discussions -- <a href=3D"mai= lto:[email protected]" target=3D"_blank">[email protected]= rg</a><br> To unsubscribe send an email to <a href=3D"mailto:[email protected]= lio.org" target=3D"_blank">[email protected]</a><br> Important: keep the mailing list in the recipients, do not reply only to the= sender!<br> </blockquote></div> <br> <p><span style=3D"font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31= ,73,125)" lang=3D"EN-US">This message and any of its attachments is intended= solely for the addresses and is confidential. If you receive this message in= error, please delete it and immediately notify the sender. Any use not in accord with its purpose, any dissemination or disclosure, either whole or partial, is prohibited except formal approval. The internet cannot guarantee= the integrity of this message. The INTELCIA Group shall (will) not therefore= be liable for the message if modified.</span><span></span></p> <p><span style=3D"font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31= ,73,125)">=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2= =80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94</span>= <span></span></p> <p><span style=3D"font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31= ,73,125)">Ce message et toutes les pi=C3=A8ces jointes sont =C3=A9tablis =C3=A0 l'intenti= on exclusive de ses destinataires et sont confidentiels. Si vous recevez ce message par erre= ur, merci de le d=C3=A9truire et d=E2=80=99en avertir imm=C3=A9diatement l=E2=80= =99exp=C3=A9diteur. Toute utilisation de ce message non conforme =C3=A0 sa destination, toute diffusio= n ou toute publication, m=C3=AAme partielle, est interdite, sauf autorisation exp= resse. L=E2=80=99internet ne permettant pas d=E2=80=99assurer l=E2=80=99int=C3=A9gr= it=C3=A9 de ce message, le groupe INTELCIA d=C3=A9cline toute responsabilit=C3=A9 au titre de ce message, dans= l=E2=80=99hypoth=C3=A8se o=C3=B9 il aurait =C3=A9t=C3=A9 modifi=C3=A9.</span><span></span></p> </div></blockquote></div></body></html>= --Apple-Mail-6766DCB1-35AF-44F6-B68A-A26030A89212-- --===============0986634760== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected] To unsubscribe send an email to [email protected] Important: keep the mailing list in the recipients, do not reply only to the sender! --===============0986634760==--