Hacker News Reader

I read through a summary from a different source and I was not impressed.

Any voip phone, and of course smart phone, can be easily set up for client side certificates.

Landlines and anything else that can be accessed via SS7 methods are already secure in terms of identity.

And that's it. Client side certs and you are done...

SIP over TLS (which uses SRTP) is great, but as soon as it hits a vendor downstream that doesn't support it, it immediately gets trans-coded into plain-ole-SIP and is just as insecure as any other VoIP call. This is not a solution by any means, because it assumes that the entire call path is TLS-enabled, which, in my experience, is impossible on the public telephony network.

Well I am referring to the use of client certificates for identity.

You might not need to have SRTP in the middle of a big telecom network, like one that handles millions of calls per day, just at the edges where you interconnect with others.

Reply on news.ycombinator.com