Re: [stir] current draft charter

[Dan York <[e-mail]>]

Hadriel,

On 6/12/13 5:38 PM, "Hadriel Kaplan" <[e-mail]> wrote:

>That begs the question of what issues you think made Public ENUM fail,
>and why we won't hit the same issues in whatever model we choose.

Since you addressed this question to me, I feel compelled to answer... but
in the meantime both Brian and Jon have given much more detailed answers
with which I mostly agree.

I saw security/privacy issues as the main issues that made Public ENUM not
work, i.e. Brian's points 4, 5 and 6:

> 4. Any public database that was able to show any information about a
>telephone number was considered a privacy issue, requiring a lot of "sign
>off", which never happened.
> 5. Everyone objected to being able to determine what numbers were "live"
> 6. Carriers objected to a public database that told competitors what
>numbers they controlled


The potential for spam was also high.  Five or six years ago there was at
least one tool circulating around that would walk an ENUM tree, generate a
list of all potential phone numbers and then send SIP INVITEs to all of
those numbers.  I remember either seeing a video or reading about how
someone did this with all the public ENUM numbers published for Germany
(at that time). So using Public ENUM could be a fantastic way to
potentially get yourself on the calling lists for telemarketers.

Ideally, I think a public service *would* be a useful way to enable
ubiquitous usage. I'm just not sure how to get there without also opening
a solution up to these same kind of security/privacy issues.

Dan

--
Dan York
Senior Content Strategist, Internet Society
[e-mail] <mailto:[e-mail]>   [phone]
Jabber: [e-mail] <mailto:[e-mail]>
Skype: danyork   http://twitter.com/danyork

http://www.internetsociety.org/deploy360/