Security mechanisms in baseline SIP SIP is difficult to secure –Has many different end-to-end and hop-by-hop sec properties Digest –Based on HTTP Digest (Basic has been deprecated) –Can be used to derive authentication properties (based on shared secrets) and some integrity properties –Useful for the SIP registration function (likely to share a secret with the registrar) TLS –Which is of course the new name for SSL –Gets canonical properties: integrity, confidentiality, mutual authN, replay protection) –Authentication requires certificates S/MIME –SIP used to support PGP… –Authentication also requires certificates
{}