Better yet make them repeat something (a nonce in the form of dialtones) back to prevent replay attacks in the form of recorded responses (as was also pointed o

Better yet make them repeat something (a nonce in the form of dialtones) back to prevent replay attacks in the form of recorded responses (as was also pointed out in the comments there).