Re: [dispatch] VIPR - proposed charter version 3

[Jonathan Rosenberg <[e-mail]>]

Richard Shockey wrote:

> RS> You cannot authoritatively determine a binding between a phone number
> and a consumer (domain) without access to the databases.

The point of ViPR is that the authoritative mapping as you've defined it 
just isn't necessary; a forward routability check is all that is really 
needed.

Indeed, let us look at email for a moment. How does one know that 
"[e-mail]" authoritatively maps to me? In reality the only 
authoritative source for this is the databases at jdrosen.net which 
contain credentials that are bound to me. However, those are 
inaccessible to the rest of the world. Instead, one can check if 
[e-mail] routes to me by sending me an email with some kind 
of secret, and if I can prove I know that secret, you know that I'm 
[e-mail]. This forward routability check is the foundation 
for vast amounts of web security and identity, and that same principle 
is applied here for phone numbers.

Do you argue that we should stop using these forward email routing 
checks in the web?

-Jonathan R.


-- 
Jonathan D. Rosenberg, Ph.D.                   SkypeID: jdrosen
Chief Technology Strategist                    Mobile: [phone]
Skype                                          SkypeIn: [phone]
[e-mail]                              http://www.skype.com
[e-mail]                            http://www.jdrosen.net