Re: [VIPR] VIPR privacy issue

"Kevin P. Fleming" <kpfleming@digium.com> Fri, 27 January 2012 15:39 UTC

Return-Path: <kpfleming@digium.com>
X-Original-To: vipr@ietfa.amsl.com
Delivered-To: vipr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F1D121F850D for <vipr@ietfa.amsl.com>; Fri, 27 Jan 2012 07:39:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.534
X-Spam-Level:
X-Spam-Status: No, score=-106.534 tagged_above=-999 required=5 tests=[AWL=0.065, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id myxvLalgqWq8 for <vipr@ietfa.amsl.com>; Fri, 27 Jan 2012 07:39:22 -0800 (PST)
Received: from mail.digium.com (mail.digium.com [216.207.245.2]) by ietfa.amsl.com (Postfix) with ESMTP id 397A221F850F for <vipr@ietf.org>; Fri, 27 Jan 2012 07:39:22 -0800 (PST)
Received: from [10.24.55.203] (helo=zimbra.hsv.digium.com) by mail.digium.com with esmtp (Exim 4.69) (envelope-from <kpfleming@digium.com>) id 1RqntZ-0008OV-GD for vipr@ietf.org; Fri, 27 Jan 2012 09:39:21 -0600
Received: from localhost (localhost.localdomain [127.0.0.1]) by zimbra.hsv.digium.com (Postfix) with ESMTP id 77A64D8004 for <vipr@ietf.org>; Fri, 27 Jan 2012 09:39:21 -0600 (CST)
Received: from zimbra.hsv.digium.com ([127.0.0.1]) by localhost (zimbra.hsv.digium.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UzUxrl1BYIGl for <vipr@ietf.org>; Fri, 27 Jan 2012 09:39:20 -0600 (CST)
Received: from [10.24.250.46] (unknown [10.24.250.46]) by zimbra.hsv.digium.com (Postfix) with ESMTPSA id E5FE5D8002 for <vipr@ietf.org>; Fri, 27 Jan 2012 09:39:20 -0600 (CST)
Message-ID: <4F22C528.6080706@digium.com>
Date: Fri, 27 Jan 2012 09:39:20 -0600
From: "Kevin P. Fleming" <kpfleming@digium.com>
Organization: Digium, Inc.
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20111124 Thunderbird/8.0
MIME-Version: 1.0
To: vipr@ietf.org
References: <4F1F1A42.1030201@acm.org> <26235819-9BF3-453F-81F5-F5351F648D4C@iii.ca>
In-Reply-To: <26235819-9BF3-453F-81F5-F5351F648D4C@iii.ca>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [VIPR] VIPR privacy issue
X-BeenThere: vipr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Verification Involving PSTN Reachability working group <vipr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/vipr>, <mailto:vipr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/vipr>
List-Post: <mailto:vipr@ietf.org>
List-Help: <mailto:vipr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/vipr>, <mailto:vipr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jan 2012 15:39:23 -0000

On 01/26/2012 06:27 PM, Cullen Jennings wrote:

> For some of the attacks on ViPR, the best defense is to make sure your PSTN numbers are registered. I view this as  feature of the design. I'm sure opinions vary on this.

Wearing a 'businessperson' hat, I just don't see how this is an 
acceptable situation. This would be similar to saying that if you don't 
choose to advertise in the Yellow Pages, other companies can do it in a 
way that lets them know who your customers are. Granted, there might not 
be much of a direct cost to participate in a public ViPR cloud, but 
there are certainly significant potential indirect costs for companies 
who don't have the equipment/software in place to participate from day one.

In addition, wearing my 'paranoia' hat, who is to say that there won't 
be multiple (possibly many) ViPR clouds being used to route E.164 
numbers? For each one that exists, anyone who wishes to best defend 
their numbers must participate.

I suppose one way to look at this is that it will potentially spawn a 
whole new industry of 'ViPR protection service' companies :-)

-- 
Kevin P. Fleming
Digium, Inc. | Director of Software Technologies
Jabber: kfleming@digium.com | SIP: kpfleming@digium.com | Skype: kpfleming
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at www.digium.com & www.asterisk.org