[77995] in North American Network Operators' Group
RE: Vonage complains about VoIP-blocking
daemon@ATHENA.MIT.EDU (Sean Donelan)
Tue Feb 15 20:22:18 2005
Date: Tue, 15 Feb 2005 20:21:37 -0500 (EST)
From: Sean Donelan <sean@donelan.com>
To: "Hannigan, Martin" <hannigan@verisign.com>
Cc: North American Noise and Off-topic Gripes <nanog@merit.edu>
In-Reply-To: <A206819EF47CBE4F84B5CB4A303CEB7A242387@dul1wnexmb01.vcorp.ad.vrsn.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, 15 Feb 2005, Hannigan, Martin wrote:
> > Unfortunately, TFTP is the only protocol that many phone vendors
> > implement -- and VoIP operators aren't happy about it. Some
> > vendors have
> > started implementing HTTP(S), but it's far from common at this point.
>
> Wouldn't there be a fee to utilize https?
Only if you like giving $995 to Verisign for fancy SSL certificates.
Most https phones can use locally issued X.509 certificates for the
download. Some use a manufacturer issued root certificates if you
want to get fancy and use code signing, etc.
Not the same problem as Microsoft Internet Explorer trusting every
root certificate in its cache. IP phones usually have a very short
certificate trust list in the phone.