3 ms·
I’d be happy to have a SPF like framework for calls. The phone number blocks are allocated to companies, and it should be trivial to ensure the incoming call c
by nikanj 8y ago
I’d be happy to have a SPF like framework for calls.
The phone number blocks are allocated to companies, and it should be trivial to ensure the incoming call comes from the legitimate holder of the block.
Add an authorized user api so you can still use your number in outgoing calls with Skype etc.
After number faking is fixed, I can safely ignore all calls from foreign countries and weird area codes.
- Rjevski 8y agoI thought about a similar system but based on cryptography. The telecoms regulators for each country would act as a CA and have their root key capable of signing anything for that particular country code, and phones would have all of them in their trust store (it could be all managed by the GSMA or something). They would in turn issue certificates to any telecoms company that has number ranges allocated - those certs allow signing of calls for any of the number ranges the cert is for, as well as signing further certs. The telecoms company will in turn issue certificates for their customers for their assigned number only. It could be placed on the SIM card or distributed by email (perfect security isn’t needed here - “good enough” is all that’s required). When a phone places a call it signs it with its certificate and the current date & time (to avoid replay attacks), and any equipment in the call path can verify the chain of trust all the way back to a trusted CA before relaying the call. As the user still holds the end certificate, legitimate caller ID spoofing is still possible by them, but not anyone else.
- oh_sigh 8y agoHow do you handle number portability?
- maccard 8y ago> I can safely ignore all calls from foreign countries and weird area codes Most of the real phone calls I get (my insurance company, my phone company ) that aren't from know contacts are from weird area codes. I like the authorised user idea though, especially if legit companies adhere to it.
- chiph 8y agoI've gotten them from the same area code and exchange as my mobile. It all depends on whether they can get a number they can use that will look reasonable to sufficient numbers of people to get them to pick up.