<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Asterisk &#8220;hack&#8221; to show blocked Caller-ID points to larger trust issues with SIP</title>
	<atom:link href="http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/feed/" rel="self" type="application/rss+xml" />
	<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/</link>
	<description>Collective thoughts and musings on the state of VoIP security today.</description>
	<pubDate>Fri, 05 Dec 2008 09:41:35 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
		<item>
		<title>By: ssaud</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/#comment-250728</link>
		<dc:creator>ssaud</dc:creator>
		<pubDate>Tue, 09 Sep 2008 19:13:58 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-250728</guid>
		<description>Well, here is little question if someone know. How can i know that a call is bridged and what dtmf-relay is being used? someone told me it can be identified from the network trace i.e. TCPDUMP etc .. but not sure how.</description>
		<content:encoded><![CDATA[<p>Well, here is little question if someone know. How can i know that a call is bridged and what dtmf-relay is being used? someone told me it can be identified from the network trace i.e. TCPDUMP etc .. but not sure how.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan York</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/#comment-221376</link>
		<dc:creator>Dan York</dc:creator>
		<pubDate>Wed, 23 Jul 2008 05:22:50 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221376</guid>
		<description>@Christopher - Yes, I, too, expect that sadly there will need to be a "significant effect" before customers realize how much things have changed from what they expect. Can we get strong identity soon enough?  I don't know.

@Garrett - Thanks for your kind words and I'm glad it helped.

@aswath - I don't know that the unregulated access is the issue... people have woken up to the fact that telephony is no longer this arcane and complicated thing when you bring it onto a PC. They are figuring out new ways to do things via VoIP. Regulated or unregulated, I think it still would have happened.

You're right that SS7 passes the same basic signaling with a "privacy bit" called "CNID".  The issue is that as @Christopher commented, there were far fewer players in the SS7 club than there are now.

As to your question about "why can't VoIPers leave the PSTN alone...", I've been working on a draft that answers that precise question (in the way that you posed it to Twitter). I'll probably work on that on my plane ride home from Portland and post it next week.</description>
		<content:encoded><![CDATA[<p>@Christopher - Yes, I, too, expect that sadly there will need to be a &#8220;significant effect&#8221; before customers realize how much things have changed from what they expect. Can we get strong identity soon enough?  I don&#8217;t know.</p>
<p>@Garrett - Thanks for your kind words and I&#8217;m glad it helped.</p>
<p>@aswath - I don&#8217;t know that the unregulated access is the issue&#8230; people have woken up to the fact that telephony is no longer this arcane and complicated thing when you bring it onto a PC. They are figuring out new ways to do things via VoIP. Regulated or unregulated, I think it still would have happened.</p>
<p>You&#8217;re right that SS7 passes the same basic signaling with a &#8220;privacy bit&#8221; called &#8220;CNID&#8221;.  The issue is that as @Christopher commented, there were far fewer players in the SS7 club than there are now.</p>
<p>As to your question about &#8220;why can&#8217;t VoIPers leave the PSTN alone&#8230;&#8221;, I&#8217;ve been working on a draft that answers that precise question (in the way that you posed it to Twitter). I&#8217;ll probably work on that on my plane ride home from Portland and post it next week.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Aswath Rao</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/#comment-221362</link>
		<dc:creator>Aswath Rao</dc:creator>
		<pubDate>Wed, 23 Jul 2008 04:52:54 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221362</guid>
		<description>The trust boundary was made porous in part by VoIP proponents who lobbied for unregulated access to VoIP providers. So I do not agree that "there are no easy answers". By the way this form of passing restricted Caller ID could have been done in PRI as well. Why can't VoIPers leave PSTN alone or live with the rules of PSTN? If VoIP is wild west, why should a gentrified PSTN be forced to interact with it?</description>
		<content:encoded><![CDATA[<p>The trust boundary was made porous in part by VoIP proponents who lobbied for unregulated access to VoIP providers. So I do not agree that &#8220;there are no easy answers&#8221;. By the way this form of passing restricted Caller ID could have been done in PRI as well. Why can&#8217;t VoIPers leave PSTN alone or live with the rules of PSTN? If VoIP is wild west, why should a gentrified PSTN be forced to interact with it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Garrett Smith</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/#comment-221346</link>
		<dc:creator>Garrett Smith</dc:creator>
		<pubDate>Wed, 23 Jul 2008 03:30:01 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221346</guid>
		<description>Dan:

Thanks for this post. I will be the first to admit that I am not a nuts and bolts telephony guy, so I was looking at this from the, "is there anything that people are not doing with Asterisk," but after reading this, wow, what a problem this could be.

Again thanks for increase my acumen here on this subject - you rock!</description>
		<content:encoded><![CDATA[<p>Dan:</p>
<p>Thanks for this post. I will be the first to admit that I am not a nuts and bolts telephony guy, so I was looking at this from the, &#8220;is there anything that people are not doing with Asterisk,&#8221; but after reading this, wow, what a problem this could be.</p>
<p>Again thanks for increase my acumen here on this subject - you rock!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Christopher Herot</title>
		<link>http://voipsa.org/blog/2008/07/23/asterisk-hack-to-show-blocked-caller-id-points-to-larger-trust-issues-with-sip/#comment-221303</link>
		<dc:creator>Christopher Herot</dc:creator>
		<pubDate>Wed, 23 Jul 2008 01:18:36 +0000</pubDate>
		<guid isPermaLink="false">http://voipsa.org/blog/?p=411#comment-221303</guid>
		<description>I agree that "trust boundary" is the operative concept here.  Back when telco was a small club the Caller ID was set by the originating CO and the display of same was handled by the terminating CO and everyone played by the same rules.  Now that those boundaries have become more porous, not everyone respects the old rules, but the customers haven't figured it out.  I'm waiting from some high profile case where someone relied on caller ID for identity or relied on the carrier for anonymity but didn't get the intended result.  Do you think we'll get "strong identity" in time?  I doubt it.</description>
		<content:encoded><![CDATA[<p>I agree that &#8220;trust boundary&#8221; is the operative concept here.  Back when telco was a small club the Caller ID was set by the originating CO and the display of same was handled by the terminating CO and everyone played by the same rules.  Now that those boundaries have become more porous, not everyone respects the old rules, but the customers haven&#8217;t figured it out.  I&#8217;m waiting from some high profile case where someone relied on caller ID for identity or relied on the carrier for anonymity but didn&#8217;t get the intended result.  Do you think we&#8217;ll get &#8220;strong identity&#8221; in time?  I doubt it.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
