Can MSISDN only be fetched by a WAP website?

Question

I have a requirement to get MSISDN (phone number) of the person who will be visiting it from a Android or iPhone. I know I can get the MSISDN from the HTTP headers.

I want to know that if I already have contracts with mobile carriers then can i get the MSISDN from a full fledged HTML website or do i need to make a WAP only site?

Answer 1

You can get the headers, if they are there, regardless of the technology used on the client side. Server side you just need to pluck out the headers you want. They'll be there whether or not it's a WAP or HTML request, as both are HTTP. WAP/WML is a markup language much like HTML, the requests for WAP pages are to the best of my knowledge still HTTP.

Disclosure: I work on such projects.

Original Answer Below, left as it may prove useful to 'those that come after'

You can't get the MSISDN from the HTTP headers unless:

• Something has gone horribly wrong, see O2 MSISDN leak. When their filter started adding the MSISDN as a header to all websites rather than their own stuff.

• You have a really dodgy provider.

• You have an agreement with a particular network provider to insert those headers for visitors to your system from their network.

For more information see Mobile Subscriber Leakage in HTTP, or google around. The hit rate you achieve capturing such information will be very very low.

To the best of my knowledge WAP is no different. The privacy implications are huge and such leakage would be soundly and rightfully condemned by the public.

Also :

The Register