Re: [Sip] Thoughts on SIP Identity issues

[Hadriel Kaplan <HKaplan at acmepacket.com>]

> -----Original Message-----
> From: Eric Rescorla [mailto:ekr at networkresonance.com]
>
> Funny you should mention that.
>
> It's becoming increasingly clear that VBR codecs leak a fair
> amount of information, even when they are encrypted [WBC+08].
> So, if, for instance, you were planning to use a fixed-rate
> codec and an attacker could force you into a VBR codec, that
> might leak information.

Fascinating paper. (truly)  But it sounds more like just a reason to fix SRTP for VBR, through random padding or whatever.

-hadriel
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors at cs.columbia.edu for questions on current sip
Use sipping at ietf.org for new developments on the application of sip