Secure telephones

[Jack Lloyd]

On Sun, Jul 18, 2004 at 07:31:59PM +0100, Dave Howe wrote:

> OpenVPN is of course built on SSL, and can use either X509 certificates 
> or a preshared key for authentication. Sadly, there is no convenient way 
> to use DNS-SEC key records for OpenVPN.

How well is VoIP going to work over SSL/TLS (ie, TCP) though? I've never used
any VoIP-over-TCP software before, but some people I know who have say it sucks
(terrible latency, sometimes as bad as 5-10 seconds). That may have just been
an artifact of a bad implementation, though. DTLS might be a better pick for
securing VoIP. There's also SRTP.