Additional Threats

[bernard_aboba@…]

Aside from the threats described in the document, a few others come to mind. It might be useful for the document to state explicitly why or why not these are out of scope:

1. Live versus replayed streams. While you might have media security, this doesn't tell you whether the stream is actually originating from a device or is being replayed.

2. Prank calling. While the document talks about permission to make calls, it doesn't mention permission to receive or blocking of unwanted calls.