id":49130336,"user":"kjellsbells","time":1785548660,"time_ago":"3 hours ago","type":"comment","content":"

Jim is a good guy and ATIS tried real hard with STIR/SHAKEN, but technology cannot overcome the commercial incentives that carriers have to let this nonsense continue. I've written about this before too [0].

[0] https://news.ycombinator.com/item?id=48920432#48928781","comments":[{"id":49130655,"user":"dredmorbius","time":1785553104,"time_ago":"2 hours ago","type":"comment","content":"

I'd seen your earlier comment at the time.

Your follow-up, here (<https://news.ycombinator.com/item?id=48938169>), was particularly insightful, and has influenced my thinking. Essentially: authentication / validation should happen out of band with phone number itself, for the reasons you've given.

I do suspect that for routing authentication, header-level signifiers should be reasonably useful, but for strong identity or authority attestation, they're not. That's ... a deeper problem, but also one which can be solved independently.

Oh, and I'd love to see that Dallas Morning News AT&T CEO interview story, if you could find it.

Would this be it?

"Watchdog Memo to AT&T's CEO: Didn't mean to get you in trouble", by Dave Lieber (July 8, 2016) <https://www.dallasnews.com/news/watchdog/2016/07/08/watchdog...>","comments":[],"comments_count":0,"level":0,"url":"item?id=49130655"}],"comments_count":1,"url":"item?id=49130336"}

Comment by kjellsbells