> Spoofing Caller ID to someone else's number shouldn't be possible.

Right, this is why we have certificates for websites. I want to know it's my bank I'm logging in to. I'd also like to know it really is my bank that's calling...