OBiTALK Community

Region Specific Technical / Service Provider Support => North America - Including Google Voice, Skype, etc. => Topic started by: Geokat on June 20, 2017, 06:58:14 AM

Title: Obi202 encryption
Post by: Geokat on June 20, 2017, 06:58:14 AM
Does the Obi202 use encryption to connect with the SIP server
What is the voice security over the internet?
Title: Re: Obi202 encryption
Post by: drgeoff on June 20, 2017, 07:31:19 AM
SRTP can be enabled on the OBi202 but my understanding is that few Service Providers support it.

Generally speaking, POTS is easier to tap and is less secure than VoIP.
Title: Re: Obi202 encryption
Post by: Geokat on June 20, 2017, 08:29:34 AM
Does GV support SRTP?
Title: Re: Obi202 encryption
Post by: SteveInWA on June 20, 2017, 11:44:44 AM
No.

You'd need end-to-end support (both the originating and terminating service providers).

On a related note, Google Hangouts calls, from one Hangouts client, to another, are encrypted.  This is made possible by not using the Public Switched Telephone Network at all.
Title: Re: Obi202 encryption
Post by: Geokat on June 21, 2017, 01:36:19 PM
OBi support is claiming that "all communications between OBi device and SIP service (i.e. Google Voice) are encrypted".     

Does the Obi202 connect to OBI and OBI to GV?
Title: Re: Obi202 encryption
Post by: drgeoff on June 21, 2017, 03:43:18 PM
Quote from: Geokat on June 21, 2017, 01:36:19 PM
OBi support is claiming that "all communications between OBi device and SIP service (i.e. Google Voice) are encrypted".    

Does the Obi202 connect to OBI and OBI to GV?
While I have high regard for the design and development people at Obihai, that does not extend to their current technical support.

The IP packets go from your OBi device to GV's servers.  Obihai's server(s) are not even aware that the GV call is in progress.

(BTW GV does not use SIP.)
Title: Re: Obi202 encryption
Post by: Geokat on June 22, 2017, 06:17:50 AM
What does the GV use?

Do you know if the GV supports encryption?
Title: Re: Obi202 encryption
Post by: Taoman on June 22, 2017, 08:20:23 AM
Quote from: Geokat on June 22, 2017, 06:17:50 AM
What does the GV use?

Do you know if the GV supports encryption?

Google Voice uses XMPP/Jingle. TLS is supported but I don't believe SRTP is so media is not encrypted.
Title: Re: Obi202 encryption
Post by: SteveInWA on June 22, 2017, 02:06:50 PM
Google Voice is a PSTN-based service; calls traverse the regular telephone network.  They are not encrypted.

As I mentioned earlier, Google Voice's companion service, Hangouts, is end-to-end encrypted, via TLS.
Title: Re: Obi202 encryption
Post by: Taoman on June 22, 2017, 03:30:15 PM
Quote from: SteveInWA on June 22, 2017, 02:06:50 PM
Google Voice is a PSTN-based service; calls traverse the regular telephone network.  They are not encrypted.
Was referring to path between OBi device and Google Voice gateway which does use TLS since Google deprecated SSLv3.

Quote from: SteveInWAAs I mentioned earlier, Google Voice's companion service, Hangouts, is end-to-end encrypted, via TLS.

Although Hangouts does use encryption it definitely isn't "end-to-end encrypted" the way Apple's iMessage and Facetime are.

Quote from: 9to5Google.comFollowing a Reddit AMA on government surveillance, Google has admitted that while it does encrypt Hangouts conversations, it does not use end-to-end encryption, meaning the company itself can tap into those sessions when it receives a government court order requiring it to do so. This contrasts with the end-to-end encryption used by some services, like Apple's FaceTime, which cannot be tapped even by the company offering the service.

https://9to5google.com/2015/05/12/google-hangouts-security/ (https://9to5google.com/2015/05/12/google-hangouts-security/)
Title: Re: Obi202 encryption
Post by: SteveInWA on June 22, 2017, 03:54:45 PM
Asking and answering this subject piecemeal is pointless.   Why are you asking, and what is your use case?

Bottom line, if you want end-to-end, fully encrypted conversations, do not use the PSTN, and use a pure VoIP solution that has the capability to encrypt the entire call path.
Title: Re: Obi202 encryption
Post by: Geokat on June 23, 2017, 04:40:24 AM


The Google Talk supports SRTP for media encryption, which supports the crypto-suites of AES_CM_128_HMAC_SHA1_32 and AES_CM_128_HMAC_SHA1_80 as described in RFC 3711.

GV also supports "G722", "EG711U", "EG711A" and RTP

https://developers.google.com/talk/call_signaling