Re: [rtcweb] Identity and PSTN gateways

["Olle E. Johansson" <[e-mail]>]

3 apr 2012 kl. 18:01 skrev Roman Shpount:

> 
> On Tue, Apr 3, 2012 at 11:53 AM, Iñaki Baz Castillo <[e-mail]> wrote:
> 2012/4/3 Roman Shpount <[e-mail]>:
> > I agree with you that you can only identify the gateway. Above this, I think
> > the whole discussion is pointless since there are no security guarantees
> > within PSTN. A million of people can be listening in. You can be connected
> > to a completely different number then the one you've dialed due to LNP, call
> > routing rules, call forwarding, or anything else. If you are dialing
> > internationally your traffic often goes over unsecured public internet. So
> > far, 99.999% of all phone calls were unsecured, tapped into, recorded and
> > listen by anybody who possessed even the moderate desire to do so. If you
> > start talking about calls coming from PSTN, you have even less guarantees
> > about accuracy of the caller ID information. You are currently trying to
> > secure the edge and provide identity on top of this mess.
> 
> 
> I don't understand why we are trying to resolve eternal PSTN problems in rtcweb.
> 
> I do not, even though you repeatedly say that you want to fix the Internet via WebRTC. All I am saying that the PSTN gateway cannot provide identity on behalf of the phone number. PSTN phone number is not an identity and we should never display something that says "You have a secure communication with +1800YOURBANK". You can only say "You have a secure communication with ACME Telecom Phone Gateway" 

Exactly. Thanks.

/O