Encrypted voip calls and pay in BTC

[sergio]

If you are familiar with asterisk using the voip service at www.vpn3000.com you can have encrypted phone calls on the IAX2 channel using aes128 encryption, this is not the same as a voip call going over a vpn, this is the actual call encrypted and there is no service usage, you only pay  for the calls you make, the encryption will take place from your end to the voip server.

[1715180407]

1715180407

[1715180407]

1715180407

[1715180407]

1715180407

[1715180407]

1715180407

[1715180407]

1715180407

[sergio]

The voip calls are normally routed using the SIP or IAX2 voip protocols.

in the case of IAX2 the entire channel can be encrypted very easily, with  a very tiny change to the overall configuration of the iax.conf file in asterisk.

Since no one offers this service, I though  there might be some interest to it.

In the case 2 users of vpn3000.com use the service, the entire call from one user to the other can be encrypted, in the more common case where you call the regular phone number, the encryption will be from your end to the server, but not from the server to the phone that is being called,  unless the call is being terminated by the same server to a customer that is also requesting encryption.

Since asterisk has support for encrypting the IAX2 channel it will not be a problem for customers that have asterisk servers, but I am not aware of hardware of soft phones with IAX2 with support for encryption.

To very more specific in iax.conf you can enable the following parameters:
forceencryption = yes
encryption=aes128

The forceencryption forces the channel to  be encryped, so that way you are assured that encryption is taking place, the other parameter specifies the encryption protocol.

and that change could be added at vpn3000.com at users request.

In the case of SIP, calls can also be encrypted, but I would have to do more rearch on it, in the case of srtp sip calls can be encrypted but it is not as trivial as IAX2.

This way a customer can have 2 channels, sip for unencrypted calls, and iax2 for encrypted calls at his request.

[sergio]

It is already set up, the only thing that is done manually for now is enabling the encryption for the customer, by default is off when the account is created.

So yes it is setup, but the configuration for the encryption is being done manually, if there is enough interest I could  make some changes to the customer gui, so that it could be enabled from there , or when the account is created, but for now it is done the old fashion way, that is using vi.

The way it is currently done, you create an account, and then let me know by using a support ticket that you would like encryption enabled, that way I know you want  encryption enabled, and I will enable the encryption for the IAX2 channel only, on your end in the IAX2 config you will have to add this 2 lines of code in the file iax.conf

encryption=aes128
forceencryption = yes

To create the account:
http://www.vpn3000.com/customer

To fund the account in bitcoins use the shopping cart
http://www.vpn3000.com/btcshop/bitcoin.php

To fund the account in other currencies:
http://www.vpn3000.com/catalog

There will be a 0.05 BTC credit as gift so that you can try the account at no risk.