CounterPath 1.5 Telephone User Manual page 56

CounterPath eyeBeam 1.5
Setting up the root certificate on your computer ensures that the connection to the proxy is TLS secure (the first
hop). Any proxy in the chain (between you and the caller) that does not support TLS may cause an insecure link
in the chain. Therefore, if the other party is outside your domain, you cannot be completely sure that the call is
secured at the signaling level, which means that you cannot be sure that it is secured at the media level.
When a call with both signaling and media encryption is established, eyeBeam displays the encryption icon
( ). This icon indicates that the call is secure between each caller and their proxy (first and last hop) and that it
may or may not be secure for other hops.
When a call with no encryption or with only signaling encryption is established, eyeBeam displays the
unencrypted icon ( ).
Setting up for Security within eyeBeam
The options for media encryption are described in the following table.
Option
Make and accept only eyeBeam will place all calls with TLS. The call
encrypted calls
INVITE
If the correct certificates are not in place or if the
other party does not accept encrypted calls, the call
will fail.
Prefer to make and eyeBeam will place all calls with TLS. The call
accept encrypted calls
INVITE
If the correct certificates are not in place or if the
other party does not accept encrypted calls, the call
will fail. eyeBeam will then place the call without
encryption.
Make unencrypted calls, eyeBeam will place only unencrypted calls.
accept all calls
If the other party does not accept unencrypted
calls, the call will fail.
Do not allow encrypted eyeBeam will place only unencrypted calls.
call
If the other party does not accept unencrypted
calls, the call will fail.
Table 14: Security Options
How Outgoing Calls are Handled
will specify SRTP media encryption.
will specify SRTP media encryption.
How Incoming Calls Are Handled
eyeBeam will only accept INVITEs that are for
encrypted calls.
If eyeBeam receives a call INVITE that is not
encrypted, the call will be rejected and will be
placed in the Blocked list in the Calls & Contacts
drawer.
eyeBeam will accept
and unencrypted calls.
eyeBeam will accept
and unencrypted calls.
eyeBeam will only accept
unencrypted calls.
If eyeBeam receives a call
encrypted, the call will be rejected and will be
placed in the Blocked list in the Calls & Contacts
drawer.
53
s for
both encrypted
INVITE
s for
INVITE both encrypted
s
that are for
INVITE
that is
INVITE