ZRTP provides end-to-end encryption of RTP, without using SIP or similar for negotiation or key exchange. I'd love to see support for this in Telepathy, in a way that both SofiaSIP and Gabble can use.
GNU ZRTP and the libZRTP SDK both provide libraries implementing ZRTP.
Several other clients have support for ZRTP, such as Twinkle; these should interoperate with any other implementation of ZRTP.
I don't know if any client yet supports ZRTP for XMPP/Jingle calls; that would prove particularly useful.
Is this already in progress? Would be required for many things, e.g. https://bugzilla.gnome.org/show_bug.cgi?id=589778
*** Bug 28056 has been marked as a duplicate of this bug. ***
Jitsi provides a good example of a ZRTP implementation, with ZRTP working for both SIP and XMPP/Jingle:
Some background information on this is here:
There is also the nightlies of cSIPSIMPLE (https://code.google.com/p/csipsimple/), which implements ZRTP for SIP calls on Android.
I am really interested in this and would be prepared to throw a small amount of money at pushing it through the various stages required to get zRTP-secured XMPP/Jingle calls in Empathy. (At the moment I'm using Jitsi, which isn't anywhere near as nice to use as Empathy.)
From the many comments that I have seen around generally, I would expect others to be the same. Perhaps you could establish a BidForFix to have this feature implemented and see if people are interested in financing it?
I'm also very interested in this feature.
ZRTP has protection against main-in-the-middle attacks and is very easy to use.
Here are some links that could be helpful as a starting place..
ZRTP Protocol information..
Other ZRTP Clients..
Some ZRTP libraries..
I started a bounty for the addition of ZRTP support to Telepathy.
it's supported now within farstream: https://bugs.freedesktop.org/show_bug.cgi?id=52481
regarding ZRTP there is also this GStreamer-plugin: https://github.com/wernerd/gstzrtp
(In reply to daniel.scharon from comment #9)
> regarding ZRTP there is also this GStreamer-plugin:
Neat. Thank you for adding the link