> None of this is particularly difficult technically. Even simply slapping x509 certs on calls and having some basic filtering would achieve a lot.
Slapping x509 certs on probably some of the oldest telecommunications infrastructure in the world (both in terms of devices using it, and devices enabling it) wouldn't be "technically difficult"?
But I've never worked in telecommunications, maybe I'm overestimating how large piece of work this would be.
- caller identity should not be spoofable
- identities should form hierarchies and groups so you can allow whole organizations instead of individuals
- organizations should use predictable identities for egress calls
- most likely managing multiple identities per device is needed (e.g. personal and work identites)
etc
None of this is particularly difficult technically. Even simply slapping x509 certs on calls and having some basic filtering would achieve a lot.