From nobody Fri Mar 1 13:17:27 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DD652130EF2; Fri, 1 Mar 2019 13:10:13 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: stir@ietf.org, adam@nostrum.com X-Test-IDTracker: no X-IETF-IDTracker: 6.92.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155147461390.6101.1658357614150004727.idtracker@ietfa.amsl.com> Date: Fri, 01 Mar 2019 13:10:13 -0800 Archived-At: Subject: [stir] stir - Requested session has been scheduled for IETF 104 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Mar 2019 21:10:28 -0000 Dear Russ Housley, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. stir Session 1 (1:00 requested) Friday, 29 March 2019, Morning Session I 0900-1030 Room Name: Karlin 1/2 size: 150 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/104/sessions/stir.ics Request Information: --------------------------------------------------------- Working Group Name: Secure Telephone Identity Revisited Area Name: Applications and Real-Time Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 60 Conflicts to Avoid: First Priority: curdle sipbrandy ipwave modern ice secdispatch sipcore mmusic rtcweb avtcore ecrit tls lamps suit saag Second Priority: perc clue ace acme oauth dispatch teep People who must be present: Russ Housley Sean Turner Adam Roach Robert Sparks Jon Peterson Chris Wendt Resources Requested: Special Requests: --------------------------------------------------------- From nobody Sat Mar 9 15:24:06 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 16658127968; Sat, 9 Mar 2019 15:23:57 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Eric Rescorla via Datatracker To: "The IESG" Cc: draft-ietf-stir-passport-shaken@ietf.org, Robert Sparks , stir-chairs@ietf.org, rjsparks@nostrum.com, stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155217383705.28806.8912882552084565826.idtracker@ietfa.amsl.com> Date: Sat, 09 Mar 2019 15:23:57 -0800 Archived-At: Subject: [stir] Eric Rescorla's No Objection on draft-ietf-stir-passport-shaken-07: (with COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Mar 2019 23:23:57 -0000 Eric Rescorla has entered the following ballot position for draft-ietf-stir-passport-shaken-07: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Jon and I talked offline and came up with some text that I believe is mutually acceptable. In the interest of moving this forward, I am clearing my DISCUSS and trusting the AD to follow through with the new version. From nobody Sun Mar 10 08:15:02 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F555127817; Sun, 10 Mar 2019 08:15:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: stir@ietf.org Message-ID: <155223090048.31119.431706966115685380@ietfa.amsl.com> Date: Sun, 10 Mar 2019 08:15:00 -0700 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-passport-shaken-08.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Mar 2019 15:15:00 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : PASSporT SHAKEN Extension (SHAKEN) Authors : Chris Wendt Mary Barnes Filename : draft-ietf-stir-passport-shaken-08.txt Pages : 8 Date : 2019-03-10 Abstract: This document extends PASSporT, which is a token object that conveys cryptographically-signed information about the participants involved in communications. The extension is defined, corresponding to the SHAKEN specification, to provide both a specific set of levels-of- confidence in the correctness of the originating identity for a SIP based Communication Service Provider (CSP) telephone network originated call as well as an identifier that allows the CSP to uniquely identify the origin of the call within its network. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-passport-shaken-08 https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-shaken-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-passport-shaken-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Mar 10 08:19:12 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DB3D127979 for ; Sun, 10 Mar 2019 08:19:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t7BHPnJ7sRl7 for ; Sun, 10 Mar 2019 08:19:09 -0700 (PDT) Received: from mail-qt1-x844.google.com (mail-qt1-x844.google.com [IPv6:2607:f8b0:4864:20::844]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C092127817 for ; Sun, 10 Mar 2019 08:19:09 -0700 (PDT) Received: by mail-qt1-x844.google.com with SMTP id z25so2389306qti.13 for ; Sun, 10 Mar 2019 08:19:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=RMykFNtsbIMgFlaGep9dKtA6UG3nyOcIZsc2EEt0Mxk=; b=IA6D0Wd8AkgoIMXGq0p1hmfkysXoID9ksPHMBBIlnTziLvOTNWIbM1ER7TcTtcINi2 JxU+emP3sfeH0mgpwGcnjE0KX17+0rNS8yzBeUQKpoPWIQC5AKZIyiyNUEKp9XUS6Ddj WGRSMFoSsKfmVoUKJm9V5+V4xoYSJNu4LcHAU/HqvB3LPJ3neR+KJFApvoeGcrA+098M 8UfDIDe5FqvKQh9xDYuHGIK8vepJlNG7QsYR0OP4VHGiVH13rVxI5qHOgfYvhFQC8Zaz lrQZ2WBSanBGSq7VpWvtkrXbczg+NFjYUJ61GVXPVHigamexreOWRizV4sq+A5BCkLJR av6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=RMykFNtsbIMgFlaGep9dKtA6UG3nyOcIZsc2EEt0Mxk=; b=MwWgiJo95bWFpdc1a4HjA2Xt3/7Ycka9O8a15YUvJ5hfEfKhEQoYplVy/DjW0knaux gOmT3rSNsKwJ2ewq11Ck5mTw+Sw8E9ujKGGQ1ioxVa2+ej0qBxKbR63RJ1J6jhjg0K3a KQSuiLEnu9+n4LfybpMwTSEtfWBS8TMaJ/slPjNyYfcMmkY3rg4RIRG6XCGTWY8sxyps WOsq4BrvER+S9ExoWmEKeMCeTIdYgXf7HwA/UcgMefY/QezObgX8JiqvdXE09JtUlkud zihPKj8CkvaJbqLFXWzyJDgSPWsvtFzGmn57+8d6p9iOYEYLJ2ohJk3D4FRl7M5PQGuw O66g== X-Gm-Message-State: APjAAAXBNylt/2VrWcnc5733GdsG7U27g4IUpeqAO1Cq4sdTpyjy8xht 10Hn2k+roIWv/83+aHcOnaCXuQ== X-Google-Smtp-Source: APXvYqzZTf6kIcfcers2FaKVwIwQrVJFoeaQ0Quns2UeOFeKO4SMHBNPQcgAMsZ84jU1j8neR55RZw== X-Received: by 2002:ac8:1b6b:: with SMTP id p40mr21530312qtk.155.1552231148744; Sun, 10 Mar 2019 08:19:08 -0700 (PDT) Received: from [10.37.44.24] (209.222.19.251.adsl.inet-telecom.org. [209.222.19.251]) by smtp.gmail.com with ESMTPSA id n3sm1883093qkf.93.2019.03.10.08.19.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 10 Mar 2019 08:19:08 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) From: Chris Wendt In-Reply-To: <155217383705.28806.8912882552084565826.idtracker@ietfa.amsl.com> Date: Sun, 10 Mar 2019 11:19:07 -0400 Cc: The IESG , draft-ietf-stir-passport-shaken@ietf.org, Robert Sparks , stir-chairs@ietf.org, stir@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <9132C471-B123-44F5-AC10-0455A0921FCA@chriswendt.net> References: <155217383705.28806.8912882552084565826.idtracker@ietfa.amsl.com> To: Eric Rescorla via Datatracker X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [stir] Eric Rescorla's No Objection on draft-ietf-stir-passport-shaken-07: (with COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Mar 2019 15:19:11 -0000 Relative to this, I have submitted 08 version of draft that has the new = text for privacy section. > On Mar 9, 2019, at 6:23 PM, Eric Rescorla via Datatracker = wrote: >=20 > Eric Rescorla has entered the following ballot position for > draft-ietf-stir-passport-shaken-07: No Objection >=20 > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut = this > introductory paragraph, however.) >=20 >=20 > Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. >=20 >=20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ >=20 >=20 >=20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 > Jon and I talked offline and came up with some text that I believe is = mutually > acceptable. In the interest of moving this forward, I am clearing my = DISCUSS > and trusting the AD to follow through with the new version. >=20 >=20 From nobody Mon Mar 11 05:00:29 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 93410126C87; Mon, 11 Mar 2019 05:00:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: stir@ietf.org Message-ID: <155230562158.16813.8692944086807744724@ietfa.amsl.com> Date: Mon, 11 Mar 2019 05:00:21 -0700 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-oob-04.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2019 12:00:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : STIR Out-of-Band Architecture and Use Cases Authors : Eric Rescorla Jon Peterson Filename : draft-ietf-stir-oob-04.txt Pages : 24 Date : 2019-03-11 Abstract: The PASSporT format defines a token that can be carried by signaling protocols, including SIP, to cryptographically attest the identify of callers. Not all telephone calls use Internet signaling protocols, however, and some calls use them for only part of their signaling path. This document describes use cases that require the delivery of PASSporT objects outside of the signaling path, and defines architectures and semantics to provide this functionality. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-oob/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-oob-04 https://datatracker.ietf.org/doc/html/draft-ietf-stir-oob-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-oob-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 11 16:22:42 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A18571311C4; Mon, 11 Mar 2019 16:22:28 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: stir@ietf.org Message-ID: <155234654860.23130.74709782549996339@ietfa.amsl.com> Date: Mon, 11 Mar 2019 16:22:28 -0700 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-passport-rcd-03.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2019 23:22:35 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : PASSporT Extension for Rich Call Data Authors : Jon Peterson Chris Wendt Filename : draft-ietf-stir-passport-rcd-03.txt Pages : 15 Date : 2019-03-11 Abstract: This document extends PASSporT, a token for conveying cryptographically-signed information about personal communications, to include rich data that can be rendered to users, such as a human- readable display name comparable to the "Caller ID" function common on the telephone network. The element defined for this purpose is extensible to include related information about calls that helps people decide whether to pick up the phone. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-rcd/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-passport-rcd-03 https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-rcd-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-passport-rcd-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 11 16:23:24 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCA10128D2B for ; Mon, 11 Mar 2019 16:23:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O9ARexQE19-J for ; Mon, 11 Mar 2019 16:23:19 -0700 (PDT) Received: from mail-qk1-x731.google.com (mail-qk1-x731.google.com [IPv6:2607:f8b0:4864:20::731]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC55E13123E for ; Mon, 11 Mar 2019 16:23:09 -0700 (PDT) Received: by mail-qk1-x731.google.com with SMTP id o129so358862qke.8 for ; Mon, 11 Mar 2019 16:23:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=sCVVh5b2ZIilcvLd0fMG4cRRG5BHd7rrus5WacfaTQQ=; b=Psjduxpk9/shbcnaICWZOO8WFzAC73Sd98SajOQ7vQwnPyGvh2KW1+RbDm0Sg6QY+k Df/rYAhXu7UyPHzPkTLihZV+ygYXSOnxpwnnt6LwnIUGE1A47t33ApJnBOpMQAdrODGx A3m7oaWJ3t5W/GTKxDdLsW1TE74Zd1Z7EIj823QXkZhn4nVKinG/xdTyBvWwhgf29kyw sSliS5qUA8y6DIniuPwC5GX1KLtJ8h3TTz87G5gEWrRjUEgdh7befZ0czsWaURqAcrnu NQk+WQV96qqobygZwrhUZqCZ0c2iT0vN/nqA+DcJsaVgj0v7xfy8vPFE1LDKvkuA30zD PERw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=sCVVh5b2ZIilcvLd0fMG4cRRG5BHd7rrus5WacfaTQQ=; b=bHMKY+x8Ie//t2CWKrDIYRrMZmJYWZitDec+E11f/SkoP4bcHMXqx9uwm0hpzdpcxd ll/AwnYg0a+C1GhfxubqR/lKcMq3SPrmUqyL78ru6hsHAbgJQFlHJs0qqcy95fd28UXS 13ejanwNd8ZY6s5SOG5+ryuQxx+S9ymNZE7wcm7Y/eFoU37y1IZHjnLjdYyZaHcEwqge O5AB5ZWDMq3PtAFRmZpqXgXuTJyBzD3TblGZlHvDoAWsHLKic25AoRYHSUqxLEQvwUBI ICIGaAbBHQeAabAdaXfFbj/vgt7Pam02LvtdjhN+BI7Pu6tT5nfuoUfzLioOGGGTkw/y JuSQ== X-Gm-Message-State: APjAAAXdMwBVuoush+TsXq00OnheqS0yMlRHfz2KXe543nRUfmBNr6Gl HkupqyvOrLc5SO7awc6Rom9Q/A== X-Google-Smtp-Source: APXvYqzhUL28eSQxKG9LaVEx3hPZFq/4mZch0UohnUp+eyii2FvQUvXWZFxZxluR1b5ucznmyE8Glw== X-Received: by 2002:a05:620a:15b8:: with SMTP id f24mr1308700qkk.256.1552346589002; Mon, 11 Mar 2019 16:23:09 -0700 (PDT) Received: from [10.16.20.10] (23.226.128.22.adsl.inet-telecom.org. [23.226.128.22]) by smtp.gmail.com with ESMTPSA id h10sm8311426qta.3.2019.03.11.16.23.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 11 Mar 2019 16:23:08 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) From: Chris Wendt In-Reply-To: <5C9A5363-9B2B-4D0B-AB44-F7ACAF787133@vigilsec.com> Date: Mon, 11 Mar 2019 19:23:06 -0400 Cc: IETF STIR Mail List Content-Transfer-Encoding: quoted-printable Message-Id: <1CF5B7BF-9FA4-43C0-AE2E-1936880466CC@chriswendt.net> References: <155061346581.20620.16849840835484562717@ietfa.amsl.com> <5C9A5363-9B2B-4D0B-AB44-F7ACAF787133@vigilsec.com> To: Russ Housley X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [stir] I-D Action: draft-ietf-stir-passport-rcd-02.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2019 23:23:22 -0000 Thanks Russ, I have addressed this in the 03 version of the draft. > On Feb 20, 2019, at 10:21 AM, Russ Housley = wrote: >=20 > Thanks Chris. >=20 > I expected Section 3.1 to say something about the number of times that = 'nam' can appear in the JSON object. >=20 > Russ >=20 >=20 >> On Feb 19, 2019, at 5:31 PM, Chris Wendt = wrote: >>=20 >> Hi All, >>=20 >> We have updated the rcd draft to include some of the items discussed = at last meeting regarding use of jcard and URLs to jcards primarily with = a few other assorted improvements to the text. Please review and = provide comments. Thanks. >>=20 >> -Chris >>=20 >>> On Feb 19, 2019, at 3:57 PM, internet-drafts@ietf.org wrote: >>>=20 >>>=20 >>> A New Internet-Draft is available from the on-line Internet-Drafts = directories. >>> This draft is a work item of the Secure Telephone Identity Revisited = WG of the IETF. >>>=20 >>> Title : PASSporT Extension for Rich Call Data >>> Authors : Jon Peterson >>> Chris Wendt >>> Filename : draft-ietf-stir-passport-rcd-02.txt >>> Pages : 15 >>> Date : 2019-02-19 >>>=20 >>> Abstract: >>> This document extends PASSporT, a token for conveying >>> cryptographically-signed information about personal communications, >>> to include rich data that can be rendered to users, such as a human- >>> readable display name comparable to the "Caller ID" function common >>> on the telephone network. The element defined for this purpose is >>> extensible to include related information about calls that helps >>> people decide whether to pick up the phone. >>>=20 >>>=20 >>> The IETF datatracker status page for this draft is: >>> https://datatracker.ietf.org/doc/draft-ietf-stir-passport-rcd/ >>>=20 >>> There are also htmlized versions available at: >>> https://tools.ietf.org/html/draft-ietf-stir-passport-rcd-02 >>> = https://datatracker.ietf.org/doc/html/draft-ietf-stir-passport-rcd-02 >>>=20 >>> A diff from the previous version is available at: >>> https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-stir-passport-rcd-02 >>>=20 >>>=20 >>> Please note that it may take a couple of minutes from the time of = submission >>> until the htmlized version and diff are available at tools.ietf.org. >>>=20 >>> Internet-Drafts are also available by anonymous FTP at: >>> ftp://ftp.ietf.org/internet-drafts/ >>>=20 >>> _______________________________________________ >>> stir mailing list >>> stir@ietf.org >>> https://www.ietf.org/mailman/listinfo/stir >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 From nobody Tue Mar 12 07:01:31 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8B16130DF6 for ; Tue, 12 Mar 2019 07:01:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.532 X-Spam-Level: X-Spam-Status: No, score=-0.532 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.468, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oUncjbbclVxH for ; Tue, 12 Mar 2019 07:01:27 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A873130DCB for ; Tue, 12 Mar 2019 07:01:26 -0700 (PDT) Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x2CDrru2005408 for ; Tue, 12 Mar 2019 10:01:26 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=Q1eWGdLJsK2s6w//Od6a3seutFZ+OYSxsrTJ68aHcbQ=; b=ZwISRj31J8WEXoO2jlCoqG1ofKctGa9rjytQdrbKJJjxlrhWTXjsftZV+waFgaqe9V4O thO1H14YNhX5hZDnraDhuR7k7Z0LIK4PLyWemFzmpxbJy77h0ov1//+Wn/vKp21JyDbJ aMMsCzTb5e0Xpak6dOgQ1B2u2BzMb2klaCpyPtYc85M0mT70+GwPmBqSPFfyPHgAgeKP BfLH9j1yPf9t/YCdUxHRIHtmm72XdpKCsDAzxgALCyxmsQ38vFKDEe/Dc3u3rtK2PLKo 5CtemjNxe0/AXEbKrY+OKH6txACejO63WSufYf5/3hf62WVtPlHGpQe+peXdwr5Zo38U 3Q== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2r4912x9hb-4 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 12 Mar 2019 10:01:26 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::40e3:3b2:1d62:c68e]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0279.002; Tue, 12 Mar 2019 10:01:17 -0400 From: "Peterson, Jon" To: "stir@ietf.org" Thread-Topic: STIR certificate delegation Thread-Index: AQHU2NwQZmKigZ+/4UG2GY8hdblF3A== Date: Tue, 12 Mar 2019 14:01:17 +0000 Message-ID: <63E9BF16-DA95-4E1B-9550-A4A45FDAC547@team.neustar> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.7.190210 x-originating-ip: [10.96.12.11] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-03-12_08:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 lowpriorityscore=0 mlxlogscore=455 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1903120099 Archived-At: Subject: [stir] STIR certificate delegation X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2019 14:01:30 -0000 DQpIZWxsbywNCg0KSSd2ZSBzdWJtaXR0ZWQgYSBuZXcgZHJhZnQgd2hpY2ggdGFrZXMgYSBmaXJz dCBzdGFiIGF0IHNwZWNpZnlpbmcgYSB3YXkgdG8gZGVsZWdhdGUgY2VydGlmaWNhdGVzIGluIFNU SVIuIFRoaXMgd291bGQgYWxsb3cgYSBjYXJyaWVyLCBzYXksIHRvIGRlbGVnYXRlIHRvIGFuIGVu dGVycHJpc2UgYXV0aG9yaXR5IGZvciBvbmUgb3IgbW9yZSB0ZWxlcGhvbmUgbnVtYmVycyBzbyB0 aGF0IHRoZSBlbnRlcnByaXNlIGNhbiBydW4gaXRzIG93biBhdXRoZW50aWNhdGlvbiBzZXJ2aWNl IGFuZCBzaWduIGNhbGxzIGl0c2VsZi4NCg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWQvZHJhZnQt cGV0ZXJzb24tc3Rpci1jZXJ0LWRlbGVnYXRpb24tMDAudHh0DQoNCkJhc2ljYWxseSwgdGhpcyBk b2N1bWVudCBwcm9wb3NlcyB0aGF0IGRlbGVnYXRpb24gb2YgU1RJUiBjZXJ0aWZpY2F0ZXMgcmVs eSBvbiBzb21ldGhpbmcgYSBiaXQgbGlrZSB0aGUgUlBLSSAiZW5jb21wYXNzaW5nIiBtZWNoYW5p c206IHRoYXQgaXMsIHJhdGhlciB0aGFuIGhhdmluZyBzb21lIGV4cGxpY2l0IGNvbnN0cmFpbnQg aW4gYSBjZXJ0aWZpY2F0ZSB0aGF0IGluZGljYXRlcyB3aGljaCBuYW1lcyBpdCBjYW4gZGVsZWdh dGUgdG8sIHRoYXQgaW5zdGVhZCB0aGUgVE5BdXRoTGlzdCBpcyBpdHNlbGYgdGhlIGNvbnN0cmFp bnQsIHNvIHRoYXQgcmVseWluZyBwYXJ0aWVzIHdobyByZWNlaXZlIGNhbGxzIHNpZ25lZCBieSB0 aGlzIGNlcnRpZmljYXRlLCBhcyB0aGV5IGluc3BlY3QgYSBjZXJ0aWZpY2F0ZSBjaGFpbiwgdmVy aWZ5IHRoYXQgZWFjaCBjaGlsZCBjZXJ0aWZpY2F0ZSdzIHNjb3BlIG9mIFROQXV0aExpc3QgYXV0 aG9yaXR5IGlzIGVuY29tcGFzc2VkIGJ5IGl0cyBwYXJlbnQncy4gVGhpcyBjYW4gYmUgYSBiaXQg bWVzc3kgd2hlbiBkZWxlZ2F0aW5nIGZyb20gU1BDIHRvIFROIHJhbmdlcywgYnV0IHRoYXQgbWVz c2luZXNzIHByb2JhYmx5IGlzbuKAmXQgYXZvaWRhYmxlLg0KDQpJdCBhbHNvLCBwZXJoYXBzIGNv bnRyb3ZlcnNpYWxseSwgaGFzIGFuIG9wdGltaXphdGlvbiB0aGF0IGFsbG93cyBjZXJ0aWZpY2F0 ZXMgdGhhdCBjYW4gc2lnbiBkZWxlZ2F0ZSBjZXJ0aWZpY2F0ZSAoYW5kIHRodXMgaGF2ZSB0aGVp ciBDQSBib29sZWFuIHNldCB0byAidHJ1ZSIpIHRvIGFjdHVhbGx5IHNpZ24gUEFTU3BvclRzIGFz IHdlbGwuDQoNClRoaXMgZG9jdW1lbnQgaGFzIGEgZmV3IGludGVyYWN0aW9ucyB3aXRoIHRoZSBB Q01FIG1lY2hhbmlzbXMgdXNpbmcgdGhlIEF1dGhvcml0eSBUb2tlbiBmb3IgVE5BdXRoTGlzdHMg YXMgd2VsbCwgd2hpY2ggd2UgYXJlIHN0aWxsIGlyb25pbmcgb3V0IGEgYml0LCBidXQgd2hpY2gg aXMgcmVmbGVjdGVkIGluIHRob3NlIGRyYWZ0cyB0b2RheS4NCg0KQ29tbWVudHMgd2VsY29tZSEg V2Ugc2hvdWxkIGZpbmQgc29tZSB0aW1lIHRvIGRpc2N1c3MgaW4gUHJhZ3VlLg0KDQpKb24gUGV0 ZXJzb24NCk5ldXN0YXIsIEluYyzvu78NCg0K From nobody Tue Mar 12 07:51:54 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BC521310E5 for ; Tue, 12 Mar 2019 07:51:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MjVmx3p6aTlv for ; Tue, 12 Mar 2019 07:51:51 -0700 (PDT) Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87E3F1310E7 for ; Tue, 12 Mar 2019 07:51:43 -0700 (PDT) Received: by mail-qk1-x736.google.com with SMTP id z3so1593954qkf.5 for ; Tue, 12 Mar 2019 07:51:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ZdBT/tsuoq2MJ5MP7uvzjG3K56Uzyqmp7UqXKiJVCOE=; b=f7Mvz2GWsy4svheuOIw50HJHNnS6fJPnR6qVbrsKONSe7rPQXNz6M1qSIj9Ik8bu5O rD8ArocMEg4+LNSTEKrwWy4slhRe5FbRD0cyyE3lrMHIHq+2CXZYjDA7qXQ5E8gLU6up n0PATmlV1q0r/d9u1HTffVPlX1KOaVyV0oB79TX8XDI9/BvIcUKKY/wbVqRAal6K8e84 dKa8B6rkYAFcdCZHo5H0yCwVS94hr6Xw4N/1oiOMCqcgeUw+3t9r4k4KO0aq6QWi9Y49 03w71XM1CwKs5Ay0LMZ3Hwhc3hjyJFspxu3vjMUFJZE0MszhRU3hoFQLZCOSHl9iDwPk EuaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ZdBT/tsuoq2MJ5MP7uvzjG3K56Uzyqmp7UqXKiJVCOE=; b=jzM1QhEnoE9Jaz3okGbM8RnuUQN1fZCwdApIGwhPAE3Emmn/y7NJ42LPoe2qoT6Jr8 ZFGTAZXnYLBO2CPwNdRkRna1CDpm/xeOElmAhVbHbZO5QnA07Kpvi4wQdLrHzMA1FF74 jDTqFbhmkDgtL75see2MoJbnlhv3T0QW5gqvcJFJ0m9Y3EP1gz/POYy7nbvCIxGAjrac sPq0DFiA7NG3r14ODGTHN1hf0s9OO2Nx/ZsQiCclviBNTsdHre0IzWumrjliRJbQkaLZ 3LYbucuZabFKP4TWZ5EiTbZX5DYE+mVBCmojdv/SFAXtWL3Kts2LBQZC9QQPamjYil9S 270Q== X-Gm-Message-State: APjAAAWEtfpo3VMYLpwe8dm9jUAoflVT605jIyQ8K0h1q62NTkwohAuX S509yYn06Prk33ewy/gBXpuHaKvxu/Q= X-Google-Smtp-Source: APXvYqzDYTOiZH2HqPrZ4GFLKmK3pRVPXN4YIO/xe3/U/bVpo/PozeodB3W0OGQhaPMHo2osH+6YpA== X-Received: by 2002:ae9:f20c:: with SMTP id m12mr15631530qkg.236.1552402302600; Tue, 12 Mar 2019 07:51:42 -0700 (PDT) Received: from [10.37.48.21] (209.222.19.251.adsl.inet-telecom.org. [209.222.19.251]) by smtp.gmail.com with ESMTPSA id y134sm4828335qka.73.2019.03.12.07.51.41 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 12 Mar 2019 07:51:41 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) From: Chris Wendt In-Reply-To: <63E9BF16-DA95-4E1B-9550-A4A45FDAC547@team.neustar> Date: Tue, 12 Mar 2019 10:51:40 -0400 Cc: "stir@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <719D5CF4-56AC-4449-8993-BE0D833CDBD5@chriswendt.net> References: <63E9BF16-DA95-4E1B-9550-A4A45FDAC547@team.neustar> To: "Peterson, Jon" X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [stir] STIR certificate delegation X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2019 14:51:53 -0000 +1 Jon and I have discussed this and it is aligned with what was presented = a few weeks ago to the IP-NNI Joint Task Force for delegated = certificates and enterprise use cases. =20 > On Mar 12, 2019, at 10:01 AM, Peterson, Jon = wrote: >=20 >=20 > Hello, >=20 > I've submitted a new draft which takes a first stab at specifying a = way to delegate certificates in STIR. This would allow a carrier, say, = to delegate to an enterprise authority for one or more telephone numbers = so that the enterprise can run its own authentication service and sign = calls itself. >=20 > https://www.ietf.org/id/draft-peterson-stir-cert-delegation-00.txt >=20 > Basically, this document proposes that delegation of STIR certificates = rely on something a bit like the RPKI "encompassing" mechanism: that is, = rather than having some explicit constraint in a certificate that = indicates which names it can delegate to, that instead the TNAuthList is = itself the constraint, so that relying parties who receive calls signed = by this certificate, as they inspect a certificate chain, verify that = each child certificate's scope of TNAuthList authority is encompassed by = its parent's. This can be a bit messy when delegating from SPC to TN = ranges, but that messiness probably isn=E2=80=99t avoidable. >=20 > It also, perhaps controversially, has an optimization that allows = certificates that can sign delegate certificate (and thus have their CA = boolean set to "true") to actually sign PASSporTs as well. >=20 > This document has a few interactions with the ACME mechanisms using = the Authority Token for TNAuthLists as well, which we are still ironing = out a bit, but which is reflected in those drafts today. >=20 > Comments welcome! We should find some time to discuss in Prague. >=20 > Jon Peterson > Neustar, Inc,=EF=BB=BF >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Tue Mar 12 08:11:28 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78B6F130E77 for ; Tue, 12 Mar 2019 08:11:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M-ZW9sonPBdL for ; Tue, 12 Mar 2019 08:11:23 -0700 (PDT) Received: from mail-lj1-x22b.google.com (mail-lj1-x22b.google.com [IPv6:2a00:1450:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 816E4130E46 for ; Tue, 12 Mar 2019 08:11:23 -0700 (PDT) Received: by mail-lj1-x22b.google.com with SMTP id z20so2619008ljj.10 for ; Tue, 12 Mar 2019 08:11:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Qww+/jpIRUEVokJEyPPNIvrUPH4tAF/JpsWYWep9t0I=; b=jG66rBcmqDqi+0tUyK86IAuWhBkA51xsOLEDt7jPNhukWAsR+VaA/ijzB3HfBbpqIX VXouVETuuSwXVBLxOgWLDScjDYJqbPnFz6Ubl7dE3EGRNgLb64VuV1QqzKmIfyrukl7K w8LPWT8I7rGMjBWAWyaxvEOjuqaky5oerA0S+PyBrve+BOM0/AsElBbvqw+o337mwyzS Lpelw3j0eAU/6bF6B143eKGVkDOLshNfeulxdqRJH4afO/HJx2wUMrG44AtS6DlnDFaV wKlA9crW4a4CAufvenlt6Nx/X0wlM4FojggBEZBCMYxqpHj5WUXBCVY6LBO1bI9v0scT 9w2g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Qww+/jpIRUEVokJEyPPNIvrUPH4tAF/JpsWYWep9t0I=; b=LHIsFpH5UNdGgv+qFUKZa1iK+n7pjg8hB/ZTU590D/R+fH5SEr95KMGkDIKz9ULNtH dXPSMI2UumXW26gMtV3CDYRsAO2wigCxbU5zvCC+V/Pmw4S6Dfz1VcK4fkhTx2EhI2v/ ln5J0F3ZZyUkn/D4eDVcoL4gawsI70XGKynFX07w6+cKNUjca8jeKFflH42TskZ1RsG6 RjxJNqbsT5YNatOExzHdlQBpcpL2rAPaOibOs6eTL6T7HUfeTARzTcy6WmOxDTOwi19t rbLHp39ljXgGfrOppIHWAiUvM9STuBEbUD8z27xbQghaq4Zap8xeFfVe6vfmM+1ucDfA l6Ug== X-Gm-Message-State: APjAAAX8CSCG7yNEGPB7sSrAx3TzIR9uplfsXAtRM0vc+xrA5Q8EXoQU nDly4j7NFoOzPBQ4ElADgR8hCoKy11ECciRHgHA= X-Google-Smtp-Source: APXvYqxrpO8wW81cQR4jcNgrivk4cShSAvJpJrIRarbmYeZssfniQFLazTLXiD5mn9wb6KlV7WRxW1jycvOs+6ZKMEQ= X-Received: by 2002:a2e:9ec2:: with SMTP id h2mr19819292ljk.186.1552403481597; Tue, 12 Mar 2019 08:11:21 -0700 (PDT) MIME-Version: 1.0 References: <63E9BF16-DA95-4E1B-9550-A4A45FDAC547@team.neustar> <719D5CF4-56AC-4449-8993-BE0D833CDBD5@chriswendt.net> In-Reply-To: <719D5CF4-56AC-4449-8993-BE0D833CDBD5@chriswendt.net> From: Mary Barnes Date: Tue, 12 Mar 2019 10:11:10 -0500 Message-ID: To: Chris Wendt Cc: "Peterson, Jon" , "stir@ietf.org" Content-Type: multipart/alternative; boundary="0000000000001199c40583e71a8a" Archived-At: Subject: Re: [stir] STIR certificate delegation X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2019 15:11:27 -0000 --0000000000001199c40583e71a8a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable But, the proposal in IP-NNI has not yet been agreed, so this is not yet a requirement for SHAKEN. Regards, Mary. On Tue, Mar 12, 2019 at 9:51 AM Chris Wendt wrote: > +1 > > Jon and I have discussed this and it is aligned with what was presented a > few weeks ago to the IP-NNI Joint Task Force for delegated certificates a= nd > enterprise use cases. > > > On Mar 12, 2019, at 10:01 AM, Peterson, Jon 40team.neustar@dmarc.ietf.org> wrote: > > > > > > Hello, > > > > I've submitted a new draft which takes a first stab at specifying a way > to delegate certificates in STIR. This would allow a carrier, say, to > delegate to an enterprise authority for one or more telephone numbers so > that the enterprise can run its own authentication service and sign calls > itself. > > > > https://www.ietf.org/id/draft-peterson-stir-cert-delegation-00.txt > > > > Basically, this document proposes that delegation of STIR certificates > rely on something a bit like the RPKI "encompassing" mechanism: that is, > rather than having some explicit constraint in a certificate that indicat= es > which names it can delegate to, that instead the TNAuthList is itself the > constraint, so that relying parties who receive calls signed by this > certificate, as they inspect a certificate chain, verify that each child > certificate's scope of TNAuthList authority is encompassed by its parent'= s. > This can be a bit messy when delegating from SPC to TN ranges, but that > messiness probably isn=E2=80=99t avoidable. > > > > It also, perhaps controversially, has an optimization that allows > certificates that can sign delegate certificate (and thus have their CA > boolean set to "true") to actually sign PASSporTs as well. > > > > This document has a few interactions with the ACME mechanisms using the > Authority Token for TNAuthLists as well, which we are still ironing out a > bit, but which is reflected in those drafts today. > > > > Comments welcome! We should find some time to discuss in Prague. > > > > Jon Peterson > > Neustar, Inc,=EF=BB=BF > > > > _______________________________________________ > > stir mailing list > > stir@ietf.org > > https://www.ietf.org/mailman/listinfo/stir > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --0000000000001199c40583e71a8a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
But, the proposal in IP-NNI has not yet been agreed, so th= is is not yet a requirement for SHAKEN.

Regards,
Mary.=C2=A0

On Tue, Mar 12, 2019 at 9:51 AM Chris Wendt <chris-ietf@chriswendt.net> wro= te:
+1

Jon and I have discussed this and it is aligned with what was presented a f= ew weeks ago to the IP-NNI Joint Task Force for delegated certificates and = enterprise use cases.=C2=A0

> On Mar 12, 2019, at 10:01 AM, Peterson, Jon <jon.peterson=3D40team.neustar@= dmarc.ietf.org> wrote:
>
>
> Hello,
>
> I've submitted a new draft which takes a first stab at specifying = a way to delegate certificates in STIR. This would allow a carrier, say, to= delegate to an enterprise authority for one or more telephone numbers so t= hat the enterprise can run its own authentication service and sign calls it= self.
>
> https://www.ietf.org/id/draft= -peterson-stir-cert-delegation-00.txt
>
> Basically, this document proposes that delegation of STIR certificates= rely on something a bit like the RPKI "encompassing" mechanism: = that is, rather than having some explicit constraint in a certificate that = indicates which names it can delegate to, that instead the TNAuthList is it= self the constraint, so that relying parties who receive calls signed by th= is certificate, as they inspect a certificate chain, verify that each child= certificate's scope of TNAuthList authority is encompassed by its pare= nt's. This can be a bit messy when delegating from SPC to TN ranges, bu= t that messiness probably isn=E2=80=99t avoidable.
>
> It also, perhaps controversially, has an optimization that allows cert= ificates that can sign delegate certificate (and thus have their CA boolean= set to "true") to actually sign PASSporTs as well.
>
> This document has a few interactions with the ACME mechanisms using th= e Authority Token for TNAuthLists as well, which we are still ironing out a= bit, but which is reflected in those drafts today.
>
> Comments welcome! We should find some time to discuss in Prague.
>
> Jon Peterson
> Neustar, Inc,=EF=BB=BF
>
> _______________________________________________
> stir mailing list
> stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
--0000000000001199c40583e71a8a-- From nobody Tue Mar 12 12:21:21 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E57C1311FF for ; Tue, 12 Mar 2019 12:21:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ipv-sx.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VOPtpCFUazyp for ; Tue, 12 Mar 2019 12:21:17 -0700 (PDT) Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47560131191 for ; Tue, 12 Mar 2019 12:21:17 -0700 (PDT) Received: by mail-ot1-x32d.google.com with SMTP id v62so3582597otb.3 for ; Tue, 12 Mar 2019 12:21:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipv-sx.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ghO0eEWgafLkt0p/IMc+j6lzX9vIWWpa5Q6nPUG3H7E=; b=KVpm1Vso212p0ZBJG0ZxNNYVQwFywJF/a65afjKjuhSKrxw2KfeXi6aoyXNxPuarMx J7IlDAXWj5Pb1xHNx1G4hrAfWDHNw8ombn0mUw8oGhdMWYnxGoL26JcvhJsYzQmaI12O i2aMOsQTjLh3sEc0xDm2XEBRSIBoHRnBoN6e8MVYH2R7Udv7W5PUwtiQbkBEUGFU1FbB +QoF/Uy3VWF1kGyclXFl8013sufuDSAwDweizgLLFxGM57UTGCnTuM8xQvgkyN0zs72c NbnwxcdgKC8wdW9mTLxdksnkA7xvPIJu3n1OAWdoHEgZD2JQDxxMsfIkMN4dHz4XB0Ae 7VPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ghO0eEWgafLkt0p/IMc+j6lzX9vIWWpa5Q6nPUG3H7E=; b=mduT1zmcgTmRfNXq3RcEIP4hv5S2xTx/E2N7QugD2JusoLnCxvaik/I+4SdnbkJFzb AhaewJFnN300D9ShB1xMJ14G1R88DzDDNA9R+I1FYnbcn7Tj0+k6KZN1gj++M+2APjx+ ysuHVzKp0dat6tFzuy+Py2fTZIxec2xcgtI10n5/L8G8rJQcCyv16ionPR/PwmgV69ZA 5ZBhm8ph/n4W/7FQ2aixFpnzW9vEh1PG3fYebnIj19XZ06HFDSwzEXtj0Rcx7I4/eerL lxcsjOHqzgOuAybWYg9qksNzS5kWKhErfC877SejLZEaZ/VK/wQn87OfXueFGm4/WupW d6BA== X-Gm-Message-State: APjAAAWK9aZcrV8rUzP5xmp0rRGnZKtI1+8MufDPX0ejUGgWex3upefQ h+qmBNYMuvyjWFdHR4nSqTaC4mC8YZ9HcSzi6ldBz0ch X-Google-Smtp-Source: APXvYqy1enyxR5eKb7oRm9igt8Lb4svpuqiTXr5Jto/NppuOWRatwjRwwE+1MVAB7nyD7qFZwHtgL/QuywzxLhle2qc= X-Received: by 2002:a9d:7694:: with SMTP id j20mr23766265otl.23.1552418476309; Tue, 12 Mar 2019 12:21:16 -0700 (PDT) MIME-Version: 1.0 References: <63E9BF16-DA95-4E1B-9550-A4A45FDAC547@team.neustar> In-Reply-To: <63E9BF16-DA95-4E1B-9550-A4A45FDAC547@team.neustar> From: Richard Barnes Date: Tue, 12 Mar 2019 15:20:47 -0400 Message-ID: To: "Peterson, Jon" Cc: "stir@ietf.org" Content-Type: multipart/alternative; boundary="000000000000d2d6510583ea977f" Archived-At: Subject: Re: [stir] STIR certificate delegation X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2019 19:21:19 -0000 --000000000000d2d6510583ea977f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This generally seems like a sane approach. We should make sure that it's clear that an RP *always* needs to verify that TNAuthLists scope for STIR certificates. That may already be in there, but it wasn't obvious to me on a quick skim. In particular, it seems like this doc needs to formally update RFC 8226. I would prefer if CA certificates were distinct from PASSporT-signing certificates, but if it's really not tolerable to have one more hop in the chain, I can probably live with it. --RLB On Tue, Mar 12, 2019 at 10:01 AM Peterson, Jon wrote: > > Hello, > > I've submitted a new draft which takes a first stab at specifying a way t= o > delegate certificates in STIR. This would allow a carrier, say, to delega= te > to an enterprise authority for one or more telephone numbers so that the > enterprise can run its own authentication service and sign calls itself. > > https://www.ietf.org/id/draft-peterson-stir-cert-delegation-00.txt > > Basically, this document proposes that delegation of STIR certificates > rely on something a bit like the RPKI "encompassing" mechanism: that is, > rather than having some explicit constraint in a certificate that indicat= es > which names it can delegate to, that instead the TNAuthList is itself the > constraint, so that relying parties who receive calls signed by this > certificate, as they inspect a certificate chain, verify that each child > certificate's scope of TNAuthList authority is encompassed by its parent'= s. > This can be a bit messy when delegating from SPC to TN ranges, but that > messiness probably isn=E2=80=99t avoidable. > > It also, perhaps controversially, has an optimization that allows > certificates that can sign delegate certificate (and thus have their CA > boolean set to "true") to actually sign PASSporTs as well. > > This document has a few interactions with the ACME mechanisms using the > Authority Token for TNAuthLists as well, which we are still ironing out a > bit, but which is reflected in those drafts today. > > Comments welcome! We should find some time to discuss in Prague. > > Jon Peterson > Neustar, Inc,=EF=BB=BF > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --000000000000d2d6510583ea977f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
This generally seems like a sane approach.=C2=A0 We s= hould make sure that it's clear that an RP *always* needs to verify tha= t TNAuthLists scope for STIR certificates.=C2=A0 That may already be in the= re, but it wasn't obvious to me on a quick skim.=C2=A0 In particular, i= t seems like this doc needs to formally update RFC 8226.

I would prefer if CA certificates were distinct from PASSporT-signin= g certificates, but if it's really not tolerable to have one more hop i= n the chain, I can probably live with it.

--RLB

On Tue, Mar 12, 2019 at 10:01 AM Peterson, Jon <jon.peterson=3D40team.neustar@dmarc.ietf.or= g> wrote:

Hello,

I've submitted a new draft which takes a first stab at specifying a way= to delegate certificates in STIR. This would allow a carrier, say, to dele= gate to an enterprise authority for one or more telephone numbers so that t= he enterprise can run its own authentication service and sign calls itself.=

https://www.ietf.org/id/draft-pete= rson-stir-cert-delegation-00.txt

Basically, this document proposes that delegation of STIR certificates rely= on something a bit like the RPKI "encompassing" mechanism: that = is, rather than having some explicit constraint in a certificate that indic= ates which names it can delegate to, that instead the TNAuthList is itself = the constraint, so that relying parties who receive calls signed by this ce= rtificate, as they inspect a certificate chain, verify that each child cert= ificate's scope of TNAuthList authority is encompassed by its parent= 9;s. This can be a bit messy when delegating from SPC to TN ranges, but tha= t messiness probably isn=E2=80=99t avoidable.

It also, perhaps controversially, has an optimization that allows certifica= tes that can sign delegate certificate (and thus have their CA boolean set = to "true") to actually sign PASSporTs as well.

This document has a few interactions with the ACME mechanisms using the Aut= hority Token for TNAuthLists as well, which we are still ironing out a bit,= but which is reflected in those drafts today.

Comments welcome! We should find some time to discuss in Prague.

Jon Peterson
Neustar, Inc,=EF=BB=BF

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir
--000000000000d2d6510583ea977f-- From nobody Tue Mar 19 18:39:09 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 062C4130E62 for ; Tue, 19 Mar 2019 18:39:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.851 X-Spam-Level: X-Spam-Status: No, score=-1.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=0.85, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wbxY68lkLazc for ; Tue, 19 Mar 2019 18:39:05 -0700 (PDT) Received: from mx0b-0018ba01.pphosted.com (mx0b-0018ba01.pphosted.com [67.231.157.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7F78128CF3 for ; Tue, 19 Mar 2019 18:39:05 -0700 (PDT) Received: from pps.filterd (m0078668.ppops.net [127.0.0.1]) by mx0b-0018ba01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x2K1XAN0019604 for ; Tue, 19 Mar 2019 21:39:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : subject : date : message-id : content-type : content-id : content-transfer-encoding : mime-version; s=selector1; bh=7QA0c/Of/PPK+zD7eWryKzOhf1dIUQukkUh3U3WjaBg=; b=SS9aoK9EploBul/skoynTroZCYCOwr9+3Aj9F2CarNd5ce3a7nO3ne9/L3+Xrn2Cavx4 Xy9rdD+vwfn0zwz9jwHllkBGvviF+dahrabVGtb+j5ZSN7TVRqr4SlYvsFMRTPSeoLYl Q0f++GS4HTssCYUQ/qN03XYpCPHEdmrXaxwRSPVnJvRRzjF5IZEVKknouPz+10TX58Wh lSd8BSRjGxv2n7p0szEcsXHQjeYLXmJouh+rw9VnXxolUcy6pRy6ZIdo1g7rMbEXNrF2 IUtGSVAit2iw6uBvyQ9hieX1H7QTRAZC/WunnwIqMo7Nx4epjhZkaylehQePOFumxws3 FA== Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0b-0018ba01.pphosted.com with ESMTP id 2ratb99q9n-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 19 Mar 2019 21:39:04 -0400 Received: from STNTEXMB101.cis.neustar.com ([fe80::40e3:3b2:1d62:c68e]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0439.000; Tue, 19 Mar 2019 21:39:03 -0400 From: "Peterson, Jon" To: "stir@ietf.org" Thread-Topic: stir-oob-04 Thread-Index: AQHU3r2yzeCxb2+EfE2c1NNekzBydA== Date: Wed, 20 Mar 2019 01:39:03 +0000 Message-ID: <9BB03273-2BFA-4907-9234-EC8CE33E0186@team.neustar> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.7.190210 x-originating-ip: [10.96.12.189] Content-Type: text/plain; charset="utf-8" Content-ID: <04CF255AE940694E9BD9E5440F76E2EE@neustar.biz> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-03-20_01:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=790 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1903200007 Archived-At: Subject: [stir] stir-oob-04 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2019 01:39:08 -0000 DQpJbiBQcmFndWUgSSdsbCBiZSBwcmVzZW50aW5nIG9uIGEgcmV2aXNpb24gdG8gdGhlIHN0aXIt b29iIGRyYWZ0LiBBIGZldyBjaGFuZ2VzIHRoZXJlIHJlc3VsdGVkIGZyb20gdGhlIGxhc3QgcmV2 aXNpb24gdG8gdGhlICJkaXYiIGRyYWZ0LCBlc3BlY2lhbGx5IHRoZSBjcmVhdGlvbiBvZiB0aGUg ImRpdi1vIiBQQVNTcG9yVCB0eXBlLiBJIGFsc28gYWRkZWQgYW5vdGhlciB1c2UgY2FzZSB0aGF0 IEkgaGF2ZSBoZWFyZCBzb21lIGludGVyZXN0IGluOiBhbiBlbnRlcnByaXNlIGNhbGwgY2VudGVy IHVzZSBjYXNlIGZvciBpbmJvdW5kIGNhbGxzLiBUaGVyZSB3YXMgYSBjZW50ZXIgYW1vdW50IG9m IGNsZWFuLXVwIHRoYXQgbmVlZGVkIHRvIGJlIGRvbmUgdG8gYWxpZ24gc29tZSBzdHJheSBvbGQg dGV4dCB3aXRoIHRoZSBmaW5hbCBzdGF0ZSBvZiB0aGUgbWVjaGFuaXNtIHRoYXQgaGFkIGJlZW4g c2hvd24gaW4gdGhlIHByZXZpb3VzIGl0ZXJhdGlvbi4gV2UgYWxzbyBoYWQgc29tZSBnb29kIGVk aXRvcmlhbCBhbmQgY29udGVudCBwYXRjaGVzIGZyb20gUm9iZXJ0Lg0KDQpJdCBpcyBzdGlsbCBo b3dldmVyIG5vdCB0aGUgYWltIG9mIHRoaXMgZHJhZnQgdG8gb2ZmZXIgYSBjb21wbGV0ZSBwcm90 b2NvbCBzcGVjaWZpY2F0aW9uIGZvciBvdXQtb2YtYmFuZDogaXQgaXMgYW4gYXJjaGl0ZWN0dXJl IGFuZCBhIGZyYW1ld29yayB0aGF0IHNob3dzIGJyb2FkbHkgaG93IGEgQ1BTIGNvdWxkIGJlIGlt cGxlbWVudGVkLiBJIGRvIHVuZGVyc3RhbmQgdGhhdCB0aGVyZSBoYXMgYmVlbiBzb21lIGV4cGVy aW1lbnRhbCBpbnRyYW5ldHdvcmsgZGVwbG95bWVudCBiYXNlZCBvbiB0aGlzIGFyY2hpdGVjdHVy ZSwgYnV0IEkgdGhpbmsgd2UgY2FuIHN0aWxsIGFkdmFuY2UgdGhlIGRvY3VtZW50IG1vcmUgb3Ig bGVzcyBhcy1pcyBhbmQgZmxlc2ggb3V0IGEgcHJvdG9jb2wgbGF0ZXIgaWYgdGhlIG5lZWQgYXJp c2VzLg0KDQpKb24gUGV0ZXJzb24NCk5ldXN0YXIsIEluYy4NCg0K From nobody Mon Mar 25 03:55:57 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A495D1203AA; Mon, 25 Mar 2019 03:55:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.94.1 Auto-Submitted: auto-generated Precedence: bulk Cc: The IESG , adam@nostrum.com, draft-ietf-stir-passport-shaken@ietf.org, stir@ietf.org, Robert Sparks , rfc-editor@rfc-editor.org, stir-chairs@ietf.org, rjsparks@nostrum.com Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Message-ID: <155351134466.29028.2735015852823259955.idtracker@ietfa.amsl.com> Date: Mon, 25 Mar 2019 03:55:44 -0700 Archived-At: Subject: [stir] Protocol Action: 'PASSporT SHAKEN Extension (SHAKEN)' to Proposed Standard (draft-ietf-stir-passport-shaken-08.txt) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Mar 2019 10:55:49 -0000 The IESG has approved the following document: - 'PASSporT SHAKEN Extension (SHAKEN)' (draft-ietf-stir-passport-shaken-08.txt) as Proposed Standard This document is the product of the Secure Telephone Identity Revisited Working Group. The IESG contact persons are Adam Roach, Alexey Melnikov and Ben Campbell. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-passport-shaken/ Technical Summary This document extends PASSporT, which is a token object that conveys cryptographically-signed information about the participants involved in communications, to include information defined as part of the SHAKEN specification from ATIS (Alliance for Telecommunications Industry Solutions) and the SIP Forum IP-NNI Joint Task Force. These extensions provide a level of confidence in the correctness of the originating identity for a telephone network that has communications coming from both STIR participating originating communications as well as communications that does not include STIR information. Working Group Summary This document is a product of the STIR working group. No aspects of the document were particularly controversial. Document Quality There are implementations of this document, and multiple governmental agencies have specified regulations calling for it deployment. JWT claims registration review was requested 18 Oct 2018. Personnel Robert Sparks is the document shepherd. Adam Roach is the responsible area director. From nobody Fri Mar 29 11:38:01 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49A9D120285 for ; Fri, 29 Mar 2019 11:37:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.441 X-Spam-Level: X-Spam-Status: No, score=-0.441 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QRHk6u-PYf-P for ; Fri, 29 Mar 2019 11:37:57 -0700 (PDT) Received: from implementers.org (unknown [IPv6:2001:4b98:dc0:45:216:3eff:fe7f:7abd]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E4D112026B for ; Fri, 29 Mar 2019 11:37:57 -0700 (PDT) Received: from [IPv6:2601:648:8400:8e7d:491c:989b:def8:d41e] (unknown [IPv6:2601:648:8400:8e7d:491c:989b:def8:d41e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "Marc Petit-Huguenin", Issuer "implementers.org" (verified OK)) by implementers.org (Postfix) with ESMTPS id C7B0DAE004 for ; Fri, 29 Mar 2019 19:37:53 +0100 (CET) To: "stir@ietf.org Mail List" From: Marc Petit-Huguenin Openpgp: preference=signencrypt Autocrypt: addr=petithug@acm.org; prefer-encrypt=mutual; keydata= mQINBE6Mh9wBEADrUEDZChteJbQtsHwZITZExr7TAqT7pniNwhBX3nFgd+FrV3lsLKJ1rym2 52MAYpubXEJZGzMp6uCCAnROWbtmQbOm8z/jHnjxHhPqfuYCYPpAQqu8K/Sc194Rp37krMwB jz32yr7+gvWLzRgQGKIh9d2mzy8QLMETVWWQWGb6fEfpOxXo0wumN1rc/275kZwOu44JIPGg zbgwZdnEqYOUUa18K9MXeRDoWbwDISP30CvKuZDwD14lbBE3o7tBQrU9uoMhE7eFlTjbsCox qoubI2tZSuOTF8mRXjPmNrRGtf9mYkQnOB7y6qy/QxmOVMq4IRtHzOYIm/EZ6NTodcpZQHOM 2v6B6YK9uKrYrapSpJzn4f9oU7alT31Y3o2hOlxAWDQ16+Dd1MOPYsKQXOwY1/ihm4PTjiJ8 ud8yPzy7c+BSVs5wkBU6QuLNIgZHrrxdn+KxM+F/oAVtfzO7XzVoeOcXyWi3/CHL5pgoBruY enIF/RrRuplpy09pvZjmFPNfqKBYJGnqpQuqsQwO7LsFqDqfY2EuHg+KsGN1XuN+jxXc48/1 gCnKw7ALSPWEb7g25wD6KfiZTAcyRTG8LePNFQKhw61LbIWmkw9EaVLyXvwPTc1iCSc0dDT/ pcT/z+8xrWOyWGZNZAjR584NlDpKollbItcxYtFcYZkvTCmOVwARAQABtCZNYXJjIFBldGl0 LUh1Z3VlbmluIDxwZXRpdGh1Z0BhY20ub3JnPokCOAQTAQgAIgIbIwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AFAlfy11wACgkQKcRFldZqfsRWqBAAu/61DGo+j38UefTKnEse0mftPBXa S4lre7vknn33MI0L5QXmiM8zRs9FOKSuXPx0EV+JhI4pWZGW/2MJPuyifXHvnIChcdGInN8J GBdTLZSOgdDFZL9msO+QUsvMA8ZUsqlKOEcVL1NyoLupblCWNq4fYhBCx1zDwX9LZSuGn8lZ Mk8a4QFGoR6dWKaOxeCwnoquW5IK1CfRIhYjHfQMjA5gY0H46F0iCqBaFF/S7krQwIJd0XN4 YbSL4KOrWuxtgQ+iH/iaxxBXgJ1blBNRzXaWJBF4PHv23nSnEzWO17j+uVMaHJu7ycYEf8T9 pVc0xcok1BM2rCrNE5FUFAzsUtAtBZEEK6sSIeOhRG93uD/Hv1hrWzEwf+Z7B1tVQLCQQ4kL 7wyS7SXI/JTuW2xTEGCmwMeWYGERdkgsatmx4zi5nVHDjt3/mlPMj4L+u05SkI2iV4W6xxU1 jHlBIJDs7AVM0dsxzTyIPf2Sz843WyHuBgkoCskxGfOwlkZzDX9rwcWRKal1wjy1w/25LsBY U50INandw3UbrS2I73VX8ARI8uOWZrW7uzRLf8EmuPhtSQ35ThmdoNSgGMP9EXwNgzi/i+5G hbX5KbrSLG9SITFJEcJA4tnwu3nqmBh7D7vbd5ln5X7rmqPdyjidt0zcSjvuaBA+nkmakA4A O+choWy5Ag0EToyH3AEQAL+LguHhcSDCL/IevdcvH/5/fzO2fmuuTxdGwrZZSm7l6/HD2Ira h6Wpa1LvVeRbnsRq8k6O8/i3wVapEoQPmNY3vjWfXaJb8R4vHcqgcxw9N9jhZa+mvGJk9+cI ilDyPzHRBBID4d/3oFKQCQ4Y2SIkO66znPhfBOS2f2AU7AtXHhVEyj6WsLK6boEMcj7j+w5a es2nZam0jhgoz+4DQem4uk8outrRlboGnZN7A2kCNuy39UeOp7BpvQ95IKcJCIeSoiJt2A4B NPQroqhW0zGn9Y9FJ9UiZ9YIeNPYbscUxxvrD+OU9Jv67hW0v3KfvoIKDwVKpO3MW6o+1teS Gt1KCSz+CvGJCvIxfCk7S5K5SBne7ZNKz7rkGXYIzlyr7ZoEgRHmqGmcK/sHTS4e6g2pQQrR USkspyqLZl5Uzmg7yI5oGBL0aHTzYdDkkOKMRXYnl7ivBeNtGcniGqlONLJxpbwec8j7hLRq pXFuepbtPqX/GefuK8rdo+ppEqpRJ50cJTegchTfWfSjn5/mG1B4Oz9OnOcBEeTLO729n0K9 BeTx1pmisD6P/fyrqZZTozDwVEi7Wo9AOaqWOhuTe8L0FlFIk6fc/yM0wzvDWP7sNrevEYHK V9rd+Yc/Jjt293J4uayrt6DNMmSkAw3nlBq3uK5d54J0FAsAUcsE/W2/ABEBAAGJAh8EGAEI AAkCGwwFAlfy11wACgkQKcRFldZqfsSQyA/+Kx3eWtKyb/y35TjgtjT/Hrtw+aIpr1uK97LA ln1j5m7+lQ/jh0/rvSZjs+YQMYLqVGI8oaaF/u+qrokkU6pfrhVZ49D1BmmSTMBSYgnBDYqZ yZ+uzQnnDYt/mpo2OLbl9BhuifR5QXLp43cE1FIhyDT46wfse5tNZ+ll4m4HtXuTw4W3b4cP Hto10260Mki7hXbkDMZ+icBFDMkrrZyYHSnBhelzIM7XnY7A/XZdulfFcDXEcZhAFEv3ylJs xTnGwzDyP1VAdBFL3hpP1CqfP1Kti4hKcxXZYbIgTSsBjcYbPchw3ktUTU29I/nWKH5gmD+q wFizyhtt8Qhl6U67OdZ/XbRGBXs/7tlYJIGiGZyG7IQtDOX0PsVd+6WRcDdFqkpBwYkxU8gd iCeW+YTQ5d8mXXPT2dhFAeK2hCFa2+IdaXvH8ovjZpTMeKstHrWJUDaSqQ4GFT676DbDyqtm P6Ul9cjGVtXIs64FWqR9wrbwBH1GuIHhDmG9sN5AkyB9mxXaEG3uG4E6qQeedtIKC6p+ebAs aTGgztFWMJDC8LUznu7B0oyWxNVoE/RGt5mesOeAtqYr6Jtdh7unyk8BYP1y4e+SSMwvtwh+ 69tJwNhGYbOJrdX34tXNAKb6r/rFRjVJm+sPPs5ok7LddvV35o+Fho0LRNDsioDV3HytlhA= Message-ID: Date: Fri, 29 Mar 2019 11:37:45 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="nanahzPtmKXxzcCt5jIdQiaCrGSLCA0wO" Archived-At: Subject: [stir] SIP URI in info parameter X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2019 18:38:00 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --nanahzPtmKXxzcCt5jIdQiaCrGSLCA0wO Content-Type: multipart/mixed; boundary="IU4sbo2TMYfxuKcssWRo3praC5JVGMIhD"; protected-headers="v1" From: Marc Petit-Huguenin To: "stir@ietf.org Mail List" Message-ID: Subject: SIP URI in info parameter --IU4sbo2TMYfxuKcssWRo3praC5JVGMIhD Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hi, I read most of the RFCs/I-Ds on STIR and SHAKEN, but I could not find inf= ormation on how to process a SIP URI in the info parameter of an Identity= header attribute. RFC 8226 states that "three URI schemes are REQUIRED: the CID URI, the SI= P URI, and the HTTP URI." The CID URI is pretty much self-explanatory, H= TTP URI is explained a bit more in ATIS-1000082, but I could not find a d= ocument that describes the mechanism when using SIP. RFC 8226 also says = that the SIP mechanism is via SUBSCRIBE/NOTIFY but I think that there is = still a lot there that is missing if one hope to implement an interoperab= le verification service based on SIP SUBSCRIBE/NOTIFY. Is there a document that I overlooked? Thanks. --=20 Marc Petit-Huguenin Email: marc@petit-huguenin.org Blog: https://marc.petit-huguenin.org Profile: https://www.linkedin.com/in/petithug --IU4sbo2TMYfxuKcssWRo3praC5JVGMIhD-- --nanahzPtmKXxzcCt5jIdQiaCrGSLCA0wO Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEBSI+IuCHU8MsI1GjKcRFldZqfsQFAlyeZfkACgkQKcRFldZq fsS+XBAAuq62oN3LDtgInMlUXEUAdjanfNiW5hK3Fr8E40B8x7IYE29Qbh+LGVCT WO8bbeYLs4tPdXwVRNSeChlwtbVT+4wyTNkS6WlkWZbtbJb+MYztxv5CaD1ttYYM NmwuwtH4jMV5AzllMwf/Yp9NHQcJRXgU7K6rIbSzbc+EjXYwvWJ0EtrGZXT1LhsI YUQB8OBeNTqXx21Ib4TuIs+vSLu4dr1Wg1E7hgmyeOz+Fd8KSaM5jEJy7fJQZ+Pb SMEGDdFE1jZKNU2T37pbwE61v0gEkstRSoXZxpwSBNVksh2LM8+SJKKqXJFiESlr FmtfHUI1Uvk2REMd8oYs5PJm3jNAYNU3sZ28EGJ5Tnd1HdmI4CxKaA5SQzslTcn0 4yGY3FLaXIwNhm8CeDWwsGSvClP+sYSS8grFzZEzzCAXNPA0WDjnNK2Imu+FxPuM WqFo2ZI5Xu9fmHPMMupMx7bRz4/LqdgoJFVYmJjq+ojsNwhB3oLRZnWAlqTovVl9 i1ARjnktqUHN8j5YfCKMnQe6yRFtqWIc3oMH0fr4jmzlKbFOxSaEg6MfVzcsMb8a 4hHTgH8CAhuKAaLUEzJ9eHFtZW9Vxgg0DyQVEWDioSa+rkhHDiEthHTuid1Zi2Wo Ouq6MAHmuo6/wudugJrg5yLCDnKnihg7nmUGplhUVqqsbwZ1Y6w= =eT9d -----END PGP SIGNATURE----- --nanahzPtmKXxzcCt5jIdQiaCrGSLCA0wO-- From nobody Fri Mar 29 12:53:51 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76D1B1203FE for ; Fri, 29 Mar 2019 12:53:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_DYNAMIC=0.85, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8qRI4NU7hmVb for ; Fri, 29 Mar 2019 12:53:47 -0700 (PDT) Received: from mx0a-00191d01.pphosted.com (mx0b-00191d01.pphosted.com [67.231.157.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D6E61203AD for ; Fri, 29 Mar 2019 12:53:47 -0700 (PDT) Received: from pps.filterd (m0049458.ppops.net [127.0.0.1]) by m0049458.ppops.net-00191d01. (8.16.0.27/8.16.0.27) with SMTP id x2TJlLem031659; Fri, 29 Mar 2019 15:53:40 -0400 Received: from alpi155.enaf.aldc.att.com (sbcsmtp7.sbc.com [144.160.229.24]) by m0049458.ppops.net-00191d01. with ESMTP id 2rhsp10eqb-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 29 Mar 2019 15:53:40 -0400 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id x2TJrdIO014519; Fri, 29 Mar 2019 15:53:39 -0400 Received: from zlp27128.vci.att.com (zlp27128.vci.att.com [135.66.87.50]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id x2TJrb5k014486; Fri, 29 Mar 2019 15:53:37 -0400 Received: from zlp27128.vci.att.com (zlp27128.vci.att.com [127.0.0.1]) by zlp27128.vci.att.com (Service) with ESMTP id 365FF400A0A4; Fri, 29 Mar 2019 19:53:37 +0000 (GMT) Received: from MISOUT7MSGHUBAC.ITServices.sbc.com (unknown [130.9.129.147]) by zlp27128.vci.att.com (Service) with ESMTPS id 23847400A0A3; Fri, 29 Mar 2019 19:53:37 +0000 (GMT) Received: from MISOUT7MSGUSRDB.ITServices.sbc.com ([169.254.2.33]) by MISOUT7MSGHUBAC.ITServices.sbc.com ([130.9.129.147]) with mapi id 14.03.0439.000; Fri, 29 Mar 2019 15:53:36 -0400 From: "DOLLY, MARTIN C" To: Marc Petit-Huguenin CC: "stir@ietf.org Mail List" Thread-Topic: [stir] SIP URI in info parameter Thread-Index: AQHU5l6VbvItcwWqXU2FuN7LuuC6s6YjBXQN Date: Fri, 29 Mar 2019 19:53:35 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-03-29_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1903290135 Archived-At: Subject: Re: [stir] SIP URI in info parameter X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2019 19:53:49 -0000 Correct Martin C Dolly AT&T Lead Member of Technical Staff Government & Services Standards +1 609 903 3360 > On Mar 29, 2019, at 2:38 PM, Marc Petit-Huguenin wrote= : >=20 > Hi, >=20 > I read most of the RFCs/I-Ds on STIR and SHAKEN, but I could not find inf= ormation on how to process a SIP URI in the info parameter of an Identity h= eader attribute. >=20 > RFC 8226 states that "three URI schemes are REQUIRED: the CID URI, the SI= P URI, and the HTTP URI." The CID URI is pretty much self-explanatory, HTT= P URI is explained a bit more in ATIS-1000082, but I could not find a docum= ent that describes the mechanism when using SIP. RFC 8226 also says that t= he SIP mechanism is via SUBSCRIBE/NOTIFY but I think that there is still a = lot there that is missing if one hope to implement an interoperable verific= ation service based on SIP SUBSCRIBE/NOTIFY. >=20 > Is there a document that I overlooked? >=20 > Thanks. >=20 > --=20 > Marc Petit-Huguenin > Email: marc@petit-huguenin.org > Blog: https://marc.petit-huguenin.org > Profile: https://www.linkedin.com/in/petithug >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Fri Mar 29 13:10:04 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3EDCA12032A for ; Fri, 29 Mar 2019 13:10:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.441 X-Spam-Level: X-Spam-Status: No, score=-0.441 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cgCW_YEOllg1 for ; Fri, 29 Mar 2019 13:09:59 -0700 (PDT) Received: from implementers.org (unknown [92.243.22.217]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A60C9120302 for ; Fri, 29 Mar 2019 13:09:59 -0700 (PDT) Received: from [IPv6:2601:648:8400:8e7d:491c:989b:def8:d41e] (unknown [IPv6:2601:648:8400:8e7d:491c:989b:def8:d41e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "Marc Petit-Huguenin", Issuer "implementers.org" (verified OK)) by implementers.org (Postfix) with ESMTPS id D9EFCAE004; Fri, 29 Mar 2019 21:09:56 +0100 (CET) To: "DOLLY, MARTIN C" Cc: "stir@ietf.org Mail List" References: From: Marc Petit-Huguenin Openpgp: preference=signencrypt Autocrypt: addr=petithug@acm.org; prefer-encrypt=mutual; keydata= mQINBE6Mh9wBEADrUEDZChteJbQtsHwZITZExr7TAqT7pniNwhBX3nFgd+FrV3lsLKJ1rym2 52MAYpubXEJZGzMp6uCCAnROWbtmQbOm8z/jHnjxHhPqfuYCYPpAQqu8K/Sc194Rp37krMwB jz32yr7+gvWLzRgQGKIh9d2mzy8QLMETVWWQWGb6fEfpOxXo0wumN1rc/275kZwOu44JIPGg zbgwZdnEqYOUUa18K9MXeRDoWbwDISP30CvKuZDwD14lbBE3o7tBQrU9uoMhE7eFlTjbsCox qoubI2tZSuOTF8mRXjPmNrRGtf9mYkQnOB7y6qy/QxmOVMq4IRtHzOYIm/EZ6NTodcpZQHOM 2v6B6YK9uKrYrapSpJzn4f9oU7alT31Y3o2hOlxAWDQ16+Dd1MOPYsKQXOwY1/ihm4PTjiJ8 ud8yPzy7c+BSVs5wkBU6QuLNIgZHrrxdn+KxM+F/oAVtfzO7XzVoeOcXyWi3/CHL5pgoBruY enIF/RrRuplpy09pvZjmFPNfqKBYJGnqpQuqsQwO7LsFqDqfY2EuHg+KsGN1XuN+jxXc48/1 gCnKw7ALSPWEb7g25wD6KfiZTAcyRTG8LePNFQKhw61LbIWmkw9EaVLyXvwPTc1iCSc0dDT/ pcT/z+8xrWOyWGZNZAjR584NlDpKollbItcxYtFcYZkvTCmOVwARAQABtCZNYXJjIFBldGl0 LUh1Z3VlbmluIDxwZXRpdGh1Z0BhY20ub3JnPokCOAQTAQgAIgIbIwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AFAlfy11wACgkQKcRFldZqfsRWqBAAu/61DGo+j38UefTKnEse0mftPBXa S4lre7vknn33MI0L5QXmiM8zRs9FOKSuXPx0EV+JhI4pWZGW/2MJPuyifXHvnIChcdGInN8J GBdTLZSOgdDFZL9msO+QUsvMA8ZUsqlKOEcVL1NyoLupblCWNq4fYhBCx1zDwX9LZSuGn8lZ Mk8a4QFGoR6dWKaOxeCwnoquW5IK1CfRIhYjHfQMjA5gY0H46F0iCqBaFF/S7krQwIJd0XN4 YbSL4KOrWuxtgQ+iH/iaxxBXgJ1blBNRzXaWJBF4PHv23nSnEzWO17j+uVMaHJu7ycYEf8T9 pVc0xcok1BM2rCrNE5FUFAzsUtAtBZEEK6sSIeOhRG93uD/Hv1hrWzEwf+Z7B1tVQLCQQ4kL 7wyS7SXI/JTuW2xTEGCmwMeWYGERdkgsatmx4zi5nVHDjt3/mlPMj4L+u05SkI2iV4W6xxU1 jHlBIJDs7AVM0dsxzTyIPf2Sz843WyHuBgkoCskxGfOwlkZzDX9rwcWRKal1wjy1w/25LsBY U50INandw3UbrS2I73VX8ARI8uOWZrW7uzRLf8EmuPhtSQ35ThmdoNSgGMP9EXwNgzi/i+5G hbX5KbrSLG9SITFJEcJA4tnwu3nqmBh7D7vbd5ln5X7rmqPdyjidt0zcSjvuaBA+nkmakA4A O+choWy5Ag0EToyH3AEQAL+LguHhcSDCL/IevdcvH/5/fzO2fmuuTxdGwrZZSm7l6/HD2Ira h6Wpa1LvVeRbnsRq8k6O8/i3wVapEoQPmNY3vjWfXaJb8R4vHcqgcxw9N9jhZa+mvGJk9+cI ilDyPzHRBBID4d/3oFKQCQ4Y2SIkO66znPhfBOS2f2AU7AtXHhVEyj6WsLK6boEMcj7j+w5a es2nZam0jhgoz+4DQem4uk8outrRlboGnZN7A2kCNuy39UeOp7BpvQ95IKcJCIeSoiJt2A4B NPQroqhW0zGn9Y9FJ9UiZ9YIeNPYbscUxxvrD+OU9Jv67hW0v3KfvoIKDwVKpO3MW6o+1teS Gt1KCSz+CvGJCvIxfCk7S5K5SBne7ZNKz7rkGXYIzlyr7ZoEgRHmqGmcK/sHTS4e6g2pQQrR USkspyqLZl5Uzmg7yI5oGBL0aHTzYdDkkOKMRXYnl7ivBeNtGcniGqlONLJxpbwec8j7hLRq pXFuepbtPqX/GefuK8rdo+ppEqpRJ50cJTegchTfWfSjn5/mG1B4Oz9OnOcBEeTLO729n0K9 BeTx1pmisD6P/fyrqZZTozDwVEi7Wo9AOaqWOhuTe8L0FlFIk6fc/yM0wzvDWP7sNrevEYHK V9rd+Yc/Jjt293J4uayrt6DNMmSkAw3nlBq3uK5d54J0FAsAUcsE/W2/ABEBAAGJAh8EGAEI AAkCGwwFAlfy11wACgkQKcRFldZqfsSQyA/+Kx3eWtKyb/y35TjgtjT/Hrtw+aIpr1uK97LA ln1j5m7+lQ/jh0/rvSZjs+YQMYLqVGI8oaaF/u+qrokkU6pfrhVZ49D1BmmSTMBSYgnBDYqZ yZ+uzQnnDYt/mpo2OLbl9BhuifR5QXLp43cE1FIhyDT46wfse5tNZ+ll4m4HtXuTw4W3b4cP Hto10260Mki7hXbkDMZ+icBFDMkrrZyYHSnBhelzIM7XnY7A/XZdulfFcDXEcZhAFEv3ylJs xTnGwzDyP1VAdBFL3hpP1CqfP1Kti4hKcxXZYbIgTSsBjcYbPchw3ktUTU29I/nWKH5gmD+q wFizyhtt8Qhl6U67OdZ/XbRGBXs/7tlYJIGiGZyG7IQtDOX0PsVd+6WRcDdFqkpBwYkxU8gd iCeW+YTQ5d8mXXPT2dhFAeK2hCFa2+IdaXvH8ovjZpTMeKstHrWJUDaSqQ4GFT676DbDyqtm P6Ul9cjGVtXIs64FWqR9wrbwBH1GuIHhDmG9sN5AkyB9mxXaEG3uG4E6qQeedtIKC6p+ebAs aTGgztFWMJDC8LUznu7B0oyWxNVoE/RGt5mesOeAtqYr6Jtdh7unyk8BYP1y4e+SSMwvtwh+ 69tJwNhGYbOJrdX34tXNAKb6r/rFRjVJm+sPPs5ok7LddvV35o+Fho0LRNDsioDV3HytlhA= Message-ID: <7cc27b95-96a4-093d-3a1c-8d5a7686b4fa@acm.org> Date: Fri, 29 Mar 2019 13:09:45 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="tWxuWqsZORXg81MYwI098rMhtIGQIiIg7" Archived-At: Subject: Re: [stir] SIP URI in info parameter X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2019 20:10:02 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --tWxuWqsZORXg81MYwI098rMhtIGQIiIg7 Content-Type: multipart/mixed; boundary="t9FOqqaTYTldTnp6XLHD0021e2qhL4tit"; protected-headers="v1" From: Marc Petit-Huguenin To: "DOLLY, MARTIN C" Cc: "stir@ietf.org Mail List" Message-ID: <7cc27b95-96a4-093d-3a1c-8d5a7686b4fa@acm.org> Subject: Re: [stir] SIP URI in info parameter References: In-Reply-To: --t9FOqqaTYTldTnp6XLHD0021e2qhL4tit Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Then may I inquire what is the document that I overlooked, and where can = I find it? Thanks. On 3/29/19 12:53 PM, DOLLY, MARTIN C wrote: > Correct >=20 > Martin C Dolly > AT&T > Lead Member of Technical Staff > Government & Services Standards > +1 609 903 3360 >=20 >> On Mar 29, 2019, at 2:38 PM, Marc Petit-Huguenin wr= ote: >> >> Hi, >> >> I read most of the RFCs/I-Ds on STIR and SHAKEN, but I could not find = information on how to process a SIP URI in the info parameter of an Ident= ity header attribute. >> >> RFC 8226 states that "three URI schemes are REQUIRED: the CID URI, the= SIP URI, and the HTTP URI." The CID URI is pretty much self-explanatory= , HTTP URI is explained a bit more in ATIS-1000082, but I could not find = a document that describes the mechanism when using SIP. RFC 8226 also sa= ys that the SIP mechanism is via SUBSCRIBE/NOTIFY but I think that there = is still a lot there that is missing if one hope to implement an interope= rable verification service based on SIP SUBSCRIBE/NOTIFY. >> >> Is there a document that I overlooked? >> >> Thanks. >> --=20 Marc Petit-Huguenin Email: marc@petit-huguenin.org Blog: https://marc.petit-huguenin.org Profile: https://www.linkedin.com/in/petithug --t9FOqqaTYTldTnp6XLHD0021e2qhL4tit-- --tWxuWqsZORXg81MYwI098rMhtIGQIiIg7 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEBSI+IuCHU8MsI1GjKcRFldZqfsQFAlyee4kACgkQKcRFldZq fsRdSA/+Nq87aRpGi8Sa/9uZ0AApxftw/T8z/fXAhOigUhJCqnIl5QBJS1ZCxQQ7 3cbtIeeez42cD+6G4yVGWCrczrvdivaj8TYrw6bCV6OqY1FjBEVFhmuKlHggyy1S RPm6mr1fafx5yrhj+uq4GjOK4eY0anUbjFNgJldM/3J8ESRchyxtHjA9t70IdxUO Lg2Nd53rIq83rWiwm+ufQeBcnkZa4U0iieFtijyix+YxVdYEGqZZZm8iRQcZHtAU na4FpV6QHxi9oBYsMMm0GtGEYJSUf/sHhcvET+n5VNfzAUVS7LNfHdGAjNOTxAJP fwe6clfU9ghAX8YHtitCco5LuRZ2t8zTtd+XqZwaUcpzympcOfAferGMDgfX8bXG TXQzBNo0NVFtnBX6bE919gMTUFqocgYmPzYZ9zdjr3+IguOEdbVNfJZhWxpXwopd P8i7OA9NH6pdTztBMXH8TjsRTij+T4wfVWdKTCCtRmTYskrBa50+SFRVSOacpZxE EmjLuJ6H6ebxb1i0rKvp+6WRftnhsMPBCY3hbIrIto75xvjfdK5DVTproj/DckQb V4PvDuGQ7TLZ7gOVBP21uxlW+jCjFVP5fXQRAwAIR/3OyUBM9sM8IBHI4JcYijbH wBJtoRK8yRg6dKrweIE0swd8e6ZsRVfe6Vkotw+bMxH0LqOUfYE= =TBzb -----END PGP SIGNATURE----- --tWxuWqsZORXg81MYwI098rMhtIGQIiIg7-- From nobody Fri Mar 29 16:18:05 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F16212004E for ; Fri, 29 Mar 2019 16:18:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_DYNAMIC=0.85, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GNtCXOw5-O-n for ; Fri, 29 Mar 2019 16:18:02 -0700 (PDT) Received: from mx0a-00191d01.pphosted.com (mx0b-00191d01.pphosted.com [67.231.157.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A503812006F for ; Fri, 29 Mar 2019 16:18:02 -0700 (PDT) Received: from pps.filterd (m0049463.ppops.net [127.0.0.1]) by m0049463.ppops.net-00191d01. (8.16.0.27/8.16.0.27) with SMTP id x2TL5k4h019839; Fri, 29 Mar 2019 17:17:45 -0400 Received: from alpi155.enaf.aldc.att.com (sbcsmtp7.sbc.com [144.160.229.24]) by m0049463.ppops.net-00191d01. with ESMTP id 2rht3k1y86-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 29 Mar 2019 17:17:45 -0400 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id x2TLHiXB010656; Fri, 29 Mar 2019 17:17:45 -0400 Received: from zlp27125.vci.att.com (zlp27125.vci.att.com [135.66.87.52]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id x2TLHfY3010627 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 29 Mar 2019 17:17:42 -0400 Received: from zlp27125.vci.att.com (zlp27125.vci.att.com [127.0.0.1]) by zlp27125.vci.att.com (Service) with ESMTP id CAD7D16A3E7; Fri, 29 Mar 2019 21:17:41 +0000 (GMT) Received: from MISOUT7MSGHUBAG.ITServices.sbc.com (unknown [130.9.129.151]) by zlp27125.vci.att.com (Service) with ESMTPS id B77D516A599; Fri, 29 Mar 2019 21:17:41 +0000 (GMT) Received: from MISOUT7MSGUSRDB.ITServices.sbc.com ([169.254.2.33]) by MISOUT7MSGHUBAG.ITServices.sbc.com ([130.9.129.151]) with mapi id 14.03.0439.000; Fri, 29 Mar 2019 17:17:39 -0400 From: "DOLLY, MARTIN C" To: Marc Petit-Huguenin CC: "stir@ietf.org Mail List" Thread-Topic: [stir] SIP URI in info parameter Thread-Index: AQHU5l6VbvItcwWqXU2FuN7LuuC6s6YjBXQNgABHkYD//8/qNw== Date: Fri, 29 Mar 2019 21:17:38 +0000 Message-ID: <457FE088-A063-4754-83A0-11AF5AA98528@att.com> References: , <7cc27b95-96a4-093d-3a1c-8d5a7686b4fa@acm.org> In-Reply-To: <7cc27b95-96a4-093d-3a1c-8d5a7686b4fa@acm.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-03-29_12:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1903290145 Archived-At: Subject: Re: [stir] SIP URI in info parameter X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Mar 2019 23:18:05 -0000 I agree additional documentation is needed=20 Martin C Dolly AT&T Lead Member of Technical Staff Government & Services Standards +1 609 903 3360 > On Mar 29, 2019, at 4:10 PM, Marc Petit-Huguenin wrote= : >=20 > Then may I inquire what is the document that I overlooked, and where can = I find it? >=20 > Thanks. >=20 >> On 3/29/19 12:53 PM, DOLLY, MARTIN C wrote: >> Correct >>=20 >> Martin C Dolly >> AT&T >> Lead Member of Technical Staff >> Government & Services Standards >> +1 609 903 3360 >>=20 >>> On Mar 29, 2019, at 2:38 PM, Marc Petit-Huguenin wro= te: >>>=20 >>> Hi, >>>=20 >>> I read most of the RFCs/I-Ds on STIR and SHAKEN, but I could not find i= nformation on how to process a SIP URI in the info parameter of an Identity= header attribute. >>>=20 >>> RFC 8226 states that "three URI schemes are REQUIRED: the CID URI, the = SIP URI, and the HTTP URI." The CID URI is pretty much self-explanatory, H= TTP URI is explained a bit more in ATIS-1000082, but I could not find a doc= ument that describes the mechanism when using SIP. RFC 8226 also says that= the SIP mechanism is via SUBSCRIBE/NOTIFY but I think that there is still = a lot there that is missing if one hope to implement an interoperable verif= ication service based on SIP SUBSCRIBE/NOTIFY. >>>=20 >>> Is there a document that I overlooked? >>>=20 >>> Thanks. >>>=20 >=20 > --=20 > Marc Petit-Huguenin > Email: marc@petit-huguenin.org > Blog: https://marc.petit-huguenin.org > Profile: https://www.linkedin.com/in/petithug >=20 > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir From nobody Sun Mar 31 13:01:54 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A466120033 for ; Sun, 31 Mar 2019 13:01:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QPlgxRp9KDkG for ; Sun, 31 Mar 2019 13:01:50 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E750712000E for ; Sun, 31 Mar 2019 13:01:49 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 628FF3009FB for ; Sun, 31 Mar 2019 15:43:31 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Cws8FHByh9EZ for ; Sun, 31 Mar 2019 15:43:26 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 6B2DE3001A5 for ; Sun, 31 Mar 2019 15:43:26 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Message-Id: <9E2381A8-F39F-425D-BB64-EB39AE1018F6@vigilsec.com> Date: Sun, 31 Mar 2019 16:01:43 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Mar 2019 20:01:52 -0000 This is the second Working Group Last Call for = draft-ietf-stir-passport-divert, which is now at revision -05. Please send your comments to the list or the chairs by Friday, 19 April = 2019. (This leaves a little over three weeks since many have travel = plans after the IETF week). Robert and Russ= From nobody Sun Mar 31 13:08:03 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79707120033 for ; Sun, 31 Mar 2019 13:08:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nLllMYa57U8I for ; Sun, 31 Mar 2019 13:08:00 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6BE1712000E for ; Sun, 31 Mar 2019 13:08:00 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 1D04B3009FB for ; Sun, 31 Mar 2019 15:49:42 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 2vb4HnRCIjfE for ; Sun, 31 Mar 2019 15:49:37 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 50B9E3001A5 for ; Sun, 31 Mar 2019 15:49:37 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Message-Id: <3BF05F63-D7C2-4BC3-912F-A7628F1B3BEC@vigilsec.com> Date: Sun, 31 Mar 2019 16:07:54 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: [stir] Second WGLC: draft-ietf-stir-passport-divert-05 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Mar 2019 20:08:02 -0000 This is the second Working Group Last Call for draft-ietf-stir-oob, = which is now at revision -04. Please send your comments to the list or the chairs by Friday, 19 April = 2019. (This leaves a little over three weeks since many have travel = plans after the IETF week). Robert and Russ= From nobody Sun Mar 31 13:08:46 2019 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EC04120043; Sun, 31 Mar 2019 13:08:45 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.94.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155406292526.12285.8992744634369670682.idtracker@ietfa.amsl.com> Date: Sun, 31 Mar 2019 13:08:45 -0700 Archived-At: Subject: [stir] The STIR WG has placed draft-peterson-stir-cert-delegation in state "Candidate for WG Adoption" X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Mar 2019 20:08:45 -0000 The STIR WG has placed draft-peterson-stir-cert-delegation in state Candidate for WG Adoption (entered by Russ Housley) The document is available at https://datatracker.ietf.org/doc/draft-peterson-stir-cert-delegation/ From nobody Sun Mar 31 13:10:58 2019 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68990120033 for ; Sun, 31 Mar 2019 13:10:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5HG6QPJzr6kB for ; Sun, 31 Mar 2019 13:10:55 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96F4D12000E for ; Sun, 31 Mar 2019 13:10:55 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 6128D3009FB for ; Sun, 31 Mar 2019 15:52:37 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lXdgqhsr4R6X for ; Sun, 31 Mar 2019 15:52:32 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 9AF953001A5 for ; Sun, 31 Mar 2019 15:52:32 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Message-Id: Date: Sun, 31 Mar 2019 16:10:49 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: [stir] Call for Adoption by STIR WG: draft-peterson-stir-cert-delegation-00 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Mar 2019 20:10:57 -0000 During IETF 104, several people expressed a desire for the STIR WG to = adopt draft-peterson-stir-cert-delegation-00. Please send your support or concerns to the list or the chairs by = Friday, 19 April 2019. (This leaves a little over three weeks since many = have travel plans after the IETF week). Robert and Russ=