Wifi SIP WPA/PSK Support
I'm working on finding a Wifi SIP phone that supports WPA/PSK that we can recommended to VOIP clients. As everybody knows, currently most Wifi SIP phones support WEP which is demonstrably insecure. For banking and financial customers, or companies that are given passwords or credit cards over the phone, this is a serious security issue. We recently bought a Hitachi-Cable Wireless IPC-5000 WiFi SIP Phone from voipsupply.com after finding some web pages that said that phone supported WPA (the pages were in German), yet once we got the phone all it supported was WEP even after updating the firmware to the latest version using the website mentioned in the documentation that came with the phone. I've had a few people say that there was some sort of conspiracy to keep US citizens from using secure phones, however I found that laughable because the potential risk of terrorist or criminal interception from having all Wifi telephone conversations involving credit cards (let alone social security numbers, bank account numbers, passwords, what have you) in the clear would create an attack vector so large as to exceed all other possible attack vectors... I mean why work on cracking anything when you can just listen to everybody in the clear (well virtually in the clear with WEP). So, back in reality, could anybody in the US that bought their Wifi SIP phone in the US share a success story at getting Wifi SIP setup with WPA/PSK? What model of phone did you buy? Where did you get it? Did you have to upgrade it to any special version of firmware or what? Mike. +----------------- H U R R I C A N E - E L E C T R I C -----------------+ | Mike Leber Direct Internet Connections Voice 510 580 4100 | | Hurricane Electric Web Hosting Colocation Fax 510 580 4151 | | mleber@he.net http://www.he.net | +-----------------------------------------------------------------------+
On 1/26/06, Mike Leber <mleber@he.net> wrote:
I'm working on finding a Wifi SIP phone that supports WPA/PSK that we can recommended to VOIP clients. As everybody knows, currently most Wifi SIP phones support WEP which is demonstrably insecure. For banking and financial customers, or companies that are given passwords or credit cards over the phone, this is a serious security issue.
http://www.paesys.com/en/WIFI_wireless_phone_moimstone_Stonehenge_WP150.htm Security & Encryption WPA-PSK AES, TKIP 64/128 bit WEP 802.1x certification (Optional) Even seems to do v6. -srs
Thank you! We'll order one immediately and report back. Mike. On Thu, 26 Jan 2006, Suresh Ramasubramanian wrote:
On 1/26/06, Mike Leber <mleber@he.net> wrote: I'm working on finding a Wifi SIP phone that supports WPA/PSK that we can recommended to VOIP clients. As everybody knows, currently most Wifi SIP phones support WEP which is demonstrably insecure. For banking and financial customers, or companies that are given passwords or credit cards over the phone, this is a serious security issue.
http://www.paesys.com/en/WIFI_wireless_phone_moimstone_Stonehenge_WP150.htm Security & Encryption WPA-PSK AES, TKIP 64/128 bit WEP 802.1x certification (Optional) Even seems to do v6. -srs
Mike Leber wrote: [snip]
I've had a few people say that there was some sort of conspiracy to keep US citizens from using secure phones, however I found that laughable because [snip]
Because domestically the US gov't (or local LEOs) can just intercept the calls when they hit the PSTN. They don't bother intercepting between the phone and its access point. Now, whether there are LEOs pushing against end-to-end encryption becoming widely available to consumers is a whole separate issue. -- Crist J. Clark crist.clark@globalstar.com Globalstar Communications (408) 933-4387
On Thu, 26 Jan 2006, Crist Clark wrote:
Because domestically the US gov't (or local LEOs) can just intercept the calls when they hit the PSTN. They don't bother intercepting between the phone and its access point.
Securing against people who might casually sniff your connection is better than no security/encryption at all. You won't be able to do anything about the LEOs if they really want to listen to your {IP|cellular|landline} phone conversations. -- Steve Sobol, Professional Geek 888-480-4638 PGP: 0xE3AE35ED Company website: http://JustThe.net/ Personal blog, resume, portfolio: http://SteveSobol.com/ E: sjsobol@JustThe.net Snail: 22674 Motnocab Road, Apple Valley, CA 92307
participants (4)
-
Crist Clark -
Mike Leber -
Steve Sobol -
Suresh Ramasubramanian