Tuesday, May 23, 2006

Encrypting VoIP Calls

Encryption is good, or so we all believe, but it is not the complete fix for electronic wiretaps.
Zfone Encrypts VoIP Calls
Felton says: "Phil Zimmerman, who created the PGP encryption software, and faced a government investigation as a result, now offers a new program, Zfone, that provides end-to-end encryption of computer-to-computer (VoIP) phone calls, according to a story in yesterday’s New York Times. "
The article continues by discussing how the encryption scheme exchanges a secret key: using vocal communications. Felton raises an interesting point: encryption does nothing if spyware is installed on one of the computers -- the conversation could still be archived unencrypted without knowledge of the key.

No comments: