Search This Blog

Monday, July 25, 2005

VoIP encryption not needed on cable modems


NETWORK WORLD NEWSLETTER: STEVE TAYLOR AND LARRY HETTICK ON
CONVERGENCE
07/25/05
Today's focus: VoIP encryption not needed on cable modems

Dear security.world@gmail.com,

In this issue:

* Readers respond to article on VoIP and encryption, Part 1
* Links related to Convergence
* Featured reader resource
_______________________________________________________________
This newsletter is sponsored by Pulver.com

IP Convergence is NOW. IP Convergence is VON. Get your critical
business and technology intelligence at the VoIP industry trade
show. Fall VON 2005 Conference and Expo, September 19-22,
Boston. Book before 6 Aug and save up to $600.
http://www.fattail.com/redir/redirect.asp?CID=108695 for full
Conference, or Expo-only passes. Quote "CE" for maximum
discounts.
_______________________________________________________________
SERVER BLADE BUYER'S GUIDE

Updated constantly, NW Fusion's Buyer's Guides give you the
latest information on product capabilities, features,
requirements, pricing and more. Not sure which server blade to
buy? Our server blade buyer's guide gives you the latest product
specs and let's you compare with our compare-o-matic. Click
here:
http://www.fattail.com/redir/redirect.asp?CID=108722
_______________________________________________________________

Today's focus: VoIP encryption not needed on cable modems

By Steve Taylor and Larry Hettick

In a recent newsletter, we discussed whether it was necessary to
encrypt conversations being transmitted over an IP network. In
fact, we went so far as to suggest that it might be too easy to
encrypt voice conversations over an IP network. We ended by
asking for your opinions - and boy, did we hear from you.

For that reason, we'll offer our apologies if we did not respond
to you personally. Rest assured, though, that you are heard.
Many of you disagreed with us, so we want to share these
comments and continue the discussion.

One reader responded:

"Granted, existing phone conversations are not encrypted. On the
other hand, 'regular' phone calls go over a dedicated wire that
runs from the user's phone to the PBX/CO and from there on. For
someone not authorized to tap to your conversation, they need to
have physical access to your phone or your phone line. A VoIP
call, though, is using a shared media. This means that, for
example, if I use a cable modem, anyone on my network segment
with a sniffer can have access to all my conversations. From my
perspective VoIP encryption is not only a security issue but
most importantly a privacy issue, as no encryption can even let
'neighbors' track the phone numbers you are calling."

We understand the user's point. However, we must point out that
it is our understanding that essentially all cable modems adhere
to a standard called DOCSIS (Data Over Cable Service Interface
Specification), and one of the functions of DOCSIS is to ensure
that the information "on the cable" is encrypted for each
individual cable modem. See:
<http://www.cablemodem.com/faq/#FAQ7>

So from this perspective, we must respectfully disagree with the
reader. And it seems worthwhile to point out this disagreement
since the reader is arguing from the perspective of one of the
most common "telecom urban legends."

By the way, the same level of encryption is not needed for DSL
access since DSL runs over the same physical wires as the
"normal" telephony conversation.

Here's the original article on VoIP encryption:
<http://www.networkworld.com/nlconvergence3630>

The top 5: Today's most-read stories

1. Future-proof your network
<http://www.networkworld.com/nlconvergence3454>

2. City finds big savings in Linux
<http://www.networkworld.com/nlconvergence3457>

3. Appliances replace DNS, DHCP software
<http://www.networkworld.com/nlconvergence3455>

4. Life's rich in telecom... if you're a lawyer
<http://www.networkworld.com/nlconvergence3631>

5. The ROI of VoIP
<http://www.networkworld.com/nlconvergence3632>

Today's most forwarded story:

Microsoft to acquire FrontBridge for e-mail security
<http://www.networkworld.com/nlconvergence3633>
_______________________________________________________________
To contact: Steve Taylor and Larry Hettick

Steve Taylor is president of Distributed Networking Associates
and publisher/editor-in-chief of Webtorials. For more detailed
information on most of the topics discussed in this newsletter,
connect to Webtorials <http://www.webtorials.com/>, the premier
site for Web-based educational presentations, white papers, and
market research. Taylor can be reached at
<mailto:taylor@webtorials.com>

Larry Hettick is an industry veteran with more than 20 years of
experience in voice and data. He is Vice President for Telecom
Services and Infrastructure at Current Analysis, the leading
competitive response solutions company. He can be reached at
<mailto:lhettick@currentanalysis.com>
_______________________________________________________________
This newsletter is sponsored by Colubris Networks
5 Key Principles to Creating a Wireless LAN Plan. Download "The
New Wireless LAN Architecture" Special Report today.

Agility is the key to managing a successful Wireless LAN. In
the Special Report The New Wireless LAN Architecture, read how
you can create a plan based on 5 key principles. You will also
assess enhanced services while reviewing the primary business
and organizational trends that are driving this technology.
http://www.fattail.com/redir/redirect.asp?CID=108820
_______________________________________________________________
ARCHIVE LINKS

Archives of the Convergence newsletter:
http://www.networkworld.com/newsletters/converg/index.html
_______________________________________________________________
FEATURED READER RESOURCE

THE NEW DATA CENTER: SPOTLIGHT ON STORAGE

This Network World report takes a look at storage trends such as
virtualization, encryption and archiving. Here you will also
find seven tips for managing storage in the new data center, how
storage encryption can help ease the threat of identity theft,
why one exec believes its all about the information and more.
Click here:

<http://www.networkworld.com/supp/2005/ndc4/>
_______________________________________________________________
May We Send You a Free Print Subscription?
You've got the technology snapshot of your choice delivered
at your fingertips each day. Now, extend your knowledge by
receiving 51 FREE issues to our print publication. Apply
today at http://www.subscribenw.com/nl2

International subscribers click here:
http://nww1.com/go/circ_promo.html
_______________________________________________________________
SUBSCRIPTION SERVICES

To subscribe or unsubscribe to any Network World e-mail
newsletters, go to:
<http://www.nwwsubscribe.com/Changes.aspx>

To change your e-mail address, go to:
<http://www.nwwsubscribe.com/ChangeMail.aspx>

Subscription questions? Contact Customer Service by replying to
this message.

This message was sent to: security.world@gmail.com
Please use this address when modifying your subscription.
_______________________________________________________________

Have editorial comments? Write Jeff Caruso, Newsletter Editor,
at: <mailto:jcaruso@nww.com>

Inquiries to: NL Customer Service, Network World, Inc., 118
Turnpike Road, Southborough, MA 01772

For advertising information, write Kevin Normandeau, V.P. of
Online Development, at: <mailto:sponsorships@nwfusion.com>

Copyright Network World, Inc., 2005

No comments: