Hacker News new | past | comments | ask | show | jobs | submit login

In the hypothetical, assume you are calling a bank employee on a landline. IMSI is for mobile.



Ok, then whatever the equivalent is for landlines. I don't know how telephone numbers are assigned to particular physical lines, but however that's done, it can be changed.


So, a landline phone number that theoretically changes so frequently and without notice to you such that you are encouraged to keep looking it up again everyday. Except you are not expected to perform or monitor that process. Instead it is automated and hidden from you. Imagine this creates risk of fraud by someone pretending to be the bank employee, so then you rely on a third party to "validate" the number you obtain for the bank employee.


I mean, you just described mobile numbers. If someone calls my cell phone, the phone system has to figure out what tower I'm connected to and therefore how to reach me. That's roughly equivalent to figuring out what IP address the domain should resolve to right now.

In any case, I don't really understand what point you're trying to make. For the phone system we assume the phone company will route our call correctly. Sometimes they don't! Over the years I've seen a number of anecdotes where someone called a number and was connected to the completely wrong person, and when they tried a second time it worked. At least the DNS system allows critical sites like banks to use features like certificate pinning if they're afraid of hackers intercepting their domain and having a DV cert issued by a trusted root.


"In any case, I don't really understand what point you're trying to make."

I agree.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: