Is it possible for an ASP.net mobile page to retrieve a phone number using WAP? The obvious use would be authenticating users by phone number. If it is possible, i am guessing it would be pretty insecure. Is this true?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Is it possible for an ASP.net mobile page to retrieve a phone number using WAP? The obvious use would be authenticating users by phone number. If it is possible, i am guessing it would be pretty insecure. Is this true?
I work in the mobile industry. Typically, a request made from a mobile device will include the MSISDN as one of the headers. To verify it actually belong to the user, it needs to be cross-checked against a carrier’s user system using additionally provided information (for example, IP of the gateway that sent the request). To validate that the value passed in the header was not spoofed, you would need a bind to the carrier’s infrastructure. Unless you’re doing work directly for the carriers (as my company does) it’s unlikely you’ll have access to it. So, in that sense getting the MSISDN is easy as it’s already present if you parse the headers Verifying it is actually ‘belongs’ to the user a bit more tricky.