Re: [rtcweb] Identity and PSTN gateways

[Igor Faynberg <[e-mail]>]

I cannot quite agree with Iñaki, although I do need to qualify this. 
(Maybe we don't disagree after all.)

POTS has been as secure as anything could be (short of attacks involving 
splicing the twisted pair or cable), but all kinds of games played with 
gateways have made it vulnerable as far as caller identification is 
concerned.  But here--at least in the US--there are strong regulations 
that protect the POTS end-points (i.e., consumers).

The major point though is that wireless networking has been sufficiently 
secure in 3G and 4G. To this end, a mobile phone with the SIM 
application is a strong authentication device, and there are many 
interesting way to bootstrap this into IdP services.  We had a very 
interesting discussion during the BrowserID session, which came I think 
very closely to this point.

Igor

On 4/3/2012 12:59 PM, Iñaki Baz Castillo wrote:
> ...
> And for sure you are 100% right. PSTN is insecure by nature (signed: a
> telco worker).
>
>
>