Nailed it
Nailed it
Yeah, sorry I incrementally edited the title before posting and accidentally made it make no sense. I meant publicly announce that a private key was compromised
I don’t see anywhere in his comment(s) where he says something postive about privacy guides.
Wow that’s super interesting to know. So its still got some resistance, but a lot less than I thought. Thanks again for sharing!
Thank you for such a long and detailed post! I indeed did not know about things beyond the SIM, and I didn’t know about the extra details about the country codes either. That is extremely interesting to me.
With the phone spoofing though, does that mean two factor with a phone number is basically useless? If I had authentication based on a MAC address, it would take seconds to break it. But I think, and sure hope, that auth based on phone numbers is more secure.
I think your domain name answer – that for the most part computers didnt need them – is a very satisfying answer.
If I’m understanding correctly, you’re saying that right now the network doesn’t have an exhaustive table of IP addresses to physical locations. It has a cache, and a hierarchy, and the path to a location of the IP is fluid.
But a system where every device could be directly contacted/identified like a Sim card, would effectively require a complete table of “what network is device ABC at”. A table that is updated every time the device changes network connections. It would be like trying to change domain name to point to a different IP address.
The problem is, updating a domain to point to a new IP takes hours or days not seconds, so doing that every time a phone changes WiFi is not practical.
Is that a good summary?
Finally :D thank you so much!
So basically VOIP is “cheating” because its not actually handled by the network directly, the phone company pays for always-online servers, and phone(s) reach out to those server every time they change networks, in order for servers to be able to route calls to them.
Which also means! it is possible to do the same thing for computers, but it requires having
Which also explains why general network providers wouldn’t want to create the infrastructure. Even if universal addresses were given to each device, which simplifies DHCP and address-leasing, and shortens time it takes to handshake with the network, all of that is less of a cost than the infrastructure needed track of devices as they change networks. (And that’s on top of ISP’s being slow to change from the legacy approach of local networks and desktops).
^ which is more the conversation I wanted to have but didnt really get with this post.
Thats a sizable edit!
Yeah 😅 I didnt want it to be this complicated of a question, but I didnt see how else to explain that current addressing systems don’t meet the same need as a phone number.
You’re right it depends on the definition of phone number, and I edited the original post to try and be more clear that I meant the phone number including the country code and area code.
If you’re talking about something other than country/area code though, then that’s news to me.
Thats a valid solution, thanks for saying it!
I think it is good to note this requires either having another system at home or in the cloud to host the VPN right?
This I’m interested in, because its at the edge/limits of my knowledge when it comes to domains and cellular networking.
Are you saying if cell phones had a larger address space, let’s say 32 digits base 10, and every device was given a cell phone number, it would overwhelm the existing infrastructure?
Fair, I could have said fully qualified number, including country code.
And also fair, instead of saying a MAC could be edited, I should’ve said each phone number has one global owner, while each MAC address could have many owners.
Corrections have been made 👍
AFAIK a static IP does not fix that. If I’m wrong, which is possible, I’d be very happy to find that out.
AFAIK static public-facing IP addresses are limited to a physical location. It would work if my laptop never left my house but as soon as I take it to the airport its no longer accessible. People who try to connect to the static ip would just get a message saying the address timed out.
I can send a message to the IP address but AFAIK the message won’t get to him because he will almost certainly have a new address when he connects to the airport WiFi in the new city.
Cool, I’ll have to look that up!
I can get VOIP calls behind a NAT without cell service. I’m asking how is that possible. Is the router somehow part of the same AP as cell service?
I was wrong, I didnt realize ipv6 was 128bit. Still stuff like IPFS and git hashes are larger than 128bit to prevent collisions so there is a precedence for using larger address spaces when not having address reuse.
Yep, and I can verify my phone number didnt change when roaming, people could still call me.
The IP doesn’t persist across network hops (cell tower to cell tower) and the MAC address doesnt have one verified owner. A phone number is both verified having one owner and persists across network hops.
Cool, this is exactly what I was hoping to learn but couldn’t find. It sounds like its still a pretty manual process, but thats okay. If thats how it is righ now, then thats exactly what I want to know.
I’m considering making tools (GUI local app, but also website AUTH frontend/backend tooling) to try and make systems like this more commonplace and standardized. I didn’t know about revocation keys, so I’m glad I heard about that before trying to build my own.