On 10/27/2010 10:06 AM, Steve Totaro wrote:
On Tue, Oct 26, 2010 at 11:31 AM, Jonas Kellens <[email protected] <mailto:[email protected]>> wrote:

    Hello,

    has anyone experience with auto provisioning IP-phones on
    different locations through a central public provisioning server ?
    You use http or https ?

    Is there a danger that one uses a different MAC-address in the
    provisioning link to obtain SIP username / password settings ?


    Kind regards,
    Jonas.


Yes, there is a danger, especially with TFTP, but also with FTP to a lesser degreee.

If someone guessed correctly, they could download the config file for another phone.

Thanks,
Steve T


If I find a way to implement it... https would be safer ?

Or is the only safe way to work with certificates that are loaded on the IP-phone ?!

Jonas.
-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to