VoIP Password: Difference between revisions

== A Note on passwords and SIP ==

When your phone registers to our servers, the password is '''not''' sent in clear text.

This is due to Digest Authentication being used between your phone and our servers - this is normal SIP operation.

When your phone uses Digest MD5 authentication, the phone and our server engage in a challenge-response exchange.

Our server sends a challenge (called a nonce), and the phone responds with a hash of its password combined with the challenge that our server sent.

It is this hash, not the plain text password, is sent over the network.