This question already has an answer here:
Stingrays exploit a significant security vulnerability of cell phones: phones attempt to identify themselves to, and even worse, continue to use fake towers. Why not have towers authenticate themselves to phones, ideally before phones identify themselves to the towers? I'm imagining a protocol like this:
- the phone pings for towers
- a tower sends its public key to the phone signed by a trusted CA
- the phone encrypts a symmetric key with the tower's public key and sends it to the tower
Okay, maybe this specific protocol is less than ideal. But the point is, shouldn't there be some form of authentication that occurs before a phone identifies itself?