%% You should probably cite rfc8862 instead of this I-D. @techreport{ietf-sipbrandy-rtpsec-04, number = {draft-ietf-sipbrandy-rtpsec-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-sipbrandy-rtpsec/04/}, author = {Jon Peterson and Eric Rescorla and Richard Barnes and Russ Housley}, title = {{Best Practices for Securing RTP Media Signaled with SIP}}, pagetotal = 14, year = 2018, month = may, day = 1, abstract = {Although the Session Initiation Protocol (SIP) includes a suite of security services that has been expanded by numerous specifications over the years, there is no single place that explains how to use SIP to establish confidential media sessions. Additionally, existing mechanisms have some feature gaps that need to be identified and resolved in order for them to address the pervasive monitoring threat model. This specification describes best practices for negotiating confidential media with SIP, including both comprehensive protection solutions which bind the media to SIP-layer identities as well as opportunistic security solutions.}, }