12,579
edits
VoIP Password: Difference between revisions
m
no edit summary
mNo edit summary |
mNo edit summary |
||
|
<br>
[[File:Controlpagevoippw.png|600px]]
== A Note on passwords and SIP ==
When your phone registers to our servers, the password is '''not''' sent in clear text.
This is due to Digest Authentication being used between your phone and our servers - this is normal SIP operation.
When your phone uses Digest MD5 authentication, the phone and our server engage in a challenge-response exchange.
Our server sends a challenge (called a nonce), and the phone responds with a hash of its password combined with the challenge that our server sent.
It is this hash, not the plain text password, is sent over the network.
| |||