VOIP (of the Vonage-type caliber) is being considered for an office where there the occasional confidential conversation takes place. I don't think that the office has to actually be HIPPA compliant, but I'm generally curious about the security of IP phone systems...the ones that cost 30-50 per month. Whats the verdict?

10/19/2006 2:59:28 PM

It's supposed to be possible to encrypt the VoIP data stream, but I haven't done any research into it.

10/19/2006 3:05:28 PM

there are a couple different ways to encrypt voip traffic. Ranging from something standard like TLS, to more SIP specific encryption, to even using VPNs.

If you're using an external sip provider you'll have to ask them about how they do security. Are you doing Provider -> individual phones or provider -> inhouse voip pbx -> individual phones?

10/19/2006 3:21:43 PM

Quote :

"Are you doing Provider -> individual phones or provider -> inhouse voip pbx -> individual phones?"

This would have to be a cost-efficent implementation as we are a non-profit. I was assuming we would use a vonage router/box + our store-bought phones. There's only going to be one phone line at this point.

10/19/2006 3:41:57 PM

vomit

http://www.dridoctor.com/blog/archives/2005/07/vomit_diagnosti.html

10/19/2006 3:57:28 PM

also just ran across this:

http://www.enderunix.org/voipong/index.php?sect=main&lang=en

10/19/2006 4:48:55 PM

You won't have any security for those calls with vonage. Your ISP can sniff the calls, vonage can sniff the calls.

You need to do some serious thinking here, because if these calls are /truly/ confidential, then you need a solution that will offer privacy, and vonage is not it.

10/19/2006 10:55:43 PM

^ what is (on the less expensive tip?)

10/20/2006 10:19:48 AM

this thread supports terrorism

10/20/2006 10:25:29 AM

There are many programs, routers, crypto devices, and companys out there that provide voip encryption/secure voip capabilites.

http://www.google.com/search?hl=en&q=voip+encryption&btnG=Google+Search
http://www.google.com/search?hl=en&q=secure+voip&btnG=Google+Search

both of those searches returned a combined 30 million topics on voip confidential calls.

I know thales does pretty good voip encryption

10/23/2006 9:49:13 AM