Re: [Linphone-users] Media Encryption

[Hans Georg Schaathun]

Thanks a lot for your answer, Guillaume,

On Tue, Nov 26, 2013 at 10:02:14AM +0100, Guillaume Beraudo wrote:
> If you are confident in all the certificate issuers in the world, then
> you should use what we call "SRTP" method.
> 
> If you are not confident in these and prefer to check it yourself then
> use "ZRTP" method.

Good point.  I guess I was hoping for something like ssh keys,
i.e. personal, user-managed key pairs. 

> You can switch the encryption method in linphone android.

I see.  I am using the desktop versions, on Mac OS and on Linux.
I could not find any reference to media encryption.  Does anyone
know how to manage encryption with the desktop client?

> When using ZRTP, check the presence of the lock, to make sure the stream
> is encrypted. Note that you only need to do the manual validation once.

I would assume that you mean once per session here, but it could be
once per correspondent.  The latter would of course be ambiguous, is
the key linked to the SIP account, the client system, or the user account
on the client system?  Do you have any details?

-- 
:-- Hans Georg