search

Divested-Mobile / DivestOS-Build

Everything needed to build DivestOS, a more private and more secure aftermarket mobile operating system.
https://divestos.org/index.php?page=build
Other
218 stars 31 forks source link

VoWiFi (WiFi calling) whitelist #195

Closed EmanuelLoos closed 1 year ago

EmanuelLoos commented 1 year ago

WiFi calling is currently disabled in DivestOS. However, correct me if i'm wrong, but I don't think WiFi calling over my own private WiFi network comes with secority risks. Therefore, I think, it would be great to let the users add access points to a list of trusted WiFi networks after they were informed regarding the possible threats, instead of WiFi calling just being no option so that users can make their own informed choices.

SkewedZeppelin commented 1 year ago

disabled

It is removed, not disabled.

WiFi calling over my own private WiFi network comes with security risks

It has privacy, security, and freedom risks.

add access points to a list of trusted WiFi networks

Absolutely non-trivial. Nor is that the issue, Wi-Fi calling is over an encrypted IPSec tunnel.

instead of WiFi calling just being no option

Users are free to follow the compile guide, available in written and video form, to have Wi-Fi calling included.

EmanuelLoos commented 1 year ago

Which freedom risks does it convey? And why would there be more risks then the non-removed normal phone-call functionality has?

SkewedZeppelin commented 1 year ago

The dozens of proprietary blobs necessary for it to function: https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Deblob.sh#L110-L126

SkewedZeppelin commented 1 year ago

And why would there be more risks then the non-removed normal phone-call functionality has?

VoLTE is routed over cellular, but VoWiFi not which let's your carrier have fine grained tracking of which networks/IP addresses you use and can directly associate that with your identity via SIM.

EmanuelLoos commented 1 year ago

Why are there so many additional proprietary blobs neccessary?