Architecture: Key Exchange: Signalling or Media Path? Signalling (SDP, SIP) Already standardized MIKEY/kmgmt-ext, Security Descriptions Problems with Media-before-SDP-Answer, forking Media path Internet Drafts only Pure inline ZRTP Hybrid EKT (key exchange using security descriptions) DTLS/RTP (fingerprints in SDP) Better coordination with media protection Changes RTP architecture |