Authenticate All Signaling Messages

• Requires that you fix the protocol

• The nature of VoIP requires that unknown parties be able to initiate sessions

• Can potentially wrap the protocol in an authenticating transport like IPSec or TLS