On 2023-08-02 12:11, James Knott via talk wrote:
On 2023-08-02 11:57, Alvin Starr via talk wrote:
If you're worried about security, you might not want to do that. The
cell phone calls are encrypted with IPSec, but those VoIP provides
use plain SIP & RTP. At least that's what Fongo does.
That's why god invented SIP-TLS and SRTP.
Its a good thing that my VIOP povider supports this.
One one other thing they do is encapsulate the IPSec in UDP. This is
to get through NAT, as IPSec is broken by it. It also provides
seamless connection when moving between WiFi calling and the cell network.
To the best of my knowledge TLS and SSL are not subject to problems of
NAT translation but I could be wrong.
Cell phone calls may be encrypted with IPSec but its not a match for
moderately well equipped hackers.
Ask King Charles.
Were Chuck's calls intercepted? I know Diana's calls were, but they
were analog back in those days and very easy to intercept. A heck of
a lot of stuff uses IPSec and I haven't heard of it being broken.
There was the infamous call to now Queen Camilla.
There are still a number of security holes in the Cell phone system.
For example.
https://en.wikipedia.org/wiki/Cellphone_surveillance
IPSec is only as strong as the keys.
If the keys are compromised then all the rest nearly pointless.
There are also the cypher and exchange protocols that may have been
compromised.
The IPSec protocol as a whole may not have bee broken but sub-components
may be.
https://futurism.com/the-byte/hack-watching-led
That should keep you up at night covering over all the power LEDs on
your devices.
Once your call hits the PSTN your open to snooping from any number of
sources.
Plain PSTN is rapidly disappearing. Everything is moving to VoIP in
some form. I have "POTS" from Rogers, but it's VoIP from the box that
sits on my shelf. I have no idea whether they use encryption with it.
Why should they secure it because that would only make it harder for
them to scrape information from you that they can monetize.
But I am WAY to cynical.
--
Alvin Starr || land: (647)478-6285
Netvel Inc. || Cell: (416)806-0133
[email protected] ||
---
Post to this mailing list [email protected]
Unsubscribe from this mailing list https://gtalug.org/mailman/listinfo/talk
