Zfone and ZRTP :: encryption for voip protocols

Victor Duchovni Victor.Duchovni at MorganStanley.com
Thu Mar 16 10:41:29 EST 2006

On Wed, Mar 15, 2006 at 02:52:15PM -0800, Ed Gerck wrote:

> cybergio wrote:
> >
> >Zfone :: http://www.philzimmermann.com/EN/zfone/index.html
> "...it achieves security without reliance on a PKI, key certification,
> trust models, certificate authorities, or key management..."
> Good. But, uf course, there's a trust model and you need to rely on it.
> "...allows the detection of man-in-the-middle (MiTM) attacks by
> displaying a short authentication string for the users to read and
> compare over the phone."
> Depends on the trust model. May not work.

Indeed, but it looks to be the right security model for the mass market.


 /"\ ASCII RIBBON                  NOTICE: If received in error,
 \ / CAMPAIGN     Victor Duchovni  please destroy and notify
  X AGAINST       IT Security,     sender. Sender does not waive
 / \ HTML MAIL    Morgan Stanley   confidentiality or privilege,
                                   and use is prohibited.

The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com

More information about the cryptography mailing list