Re: [cnit] CNIT Charter bashing..

Richard Shockey <richard@shockey.us> Fri, 12 June 2015 13:56 UTC

Return-Path: <richard@shockey.us>
X-Original-To: cnit@ietfa.amsl.com
Delivered-To: cnit@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E24E1AC3FC for <cnit@ietfa.amsl.com>; Fri, 12 Jun 2015 06:56:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ob8EjfGCccN9 for <cnit@ietfa.amsl.com>; Fri, 12 Jun 2015 06:56:50 -0700 (PDT)
Received: from qproxy4-pub.mail.unifiedlayer.com (qproxy4-pub.mail.unifiedlayer.com [66.147.248.250]) by ietfa.amsl.com (Postfix) with SMTP id 9DBDA1AC3FB for <cnit@ietf.org>; Fri, 12 Jun 2015 06:56:50 -0700 (PDT)
Received: (qmail 1918 invoked by uid 0); 12 Jun 2015 13:56:49 -0000
Received: from unknown (HELO cmgw3) (10.0.90.84) by qproxy4.mail.unifiedlayer.com with SMTP; 12 Jun 2015 13:56:49 -0000
Received: from box462.bluehost.com ([74.220.219.62]) by cmgw3 with id fXVu1q00V1MNPNq01XVxpS; Fri, 12 Jun 2015 13:29:57 -0600
X-Authority-Analysis: v=2.1 cv=K/SxQUmI c=1 sm=1 tr=0 a=jTEj1adHphCQ5SwrTAOQMg==:117 a=jTEj1adHphCQ5SwrTAOQMg==:17 a=cNaOj0WVAAAA:8 a=f5113yIGAAAA:8 a=j1VUBDpLDLYA:10 a=8nJEP1OIZ-IA:10 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=ZZnuYtJkoWoA:10 a=8WrITzYgnNwA:10 a=-h4zUWlAkX4A:10 a=XAFQembCKUMA:10 a=48vgC7mUAAAA:8 a=z9tbli-vAAAA:8 a=jKZ029TlAAAA:8 a=OTLVf7z5AAAA:8 a=HLLxP2VMAAAA:8 a=ll-iCDY8AAAA:8 a=M0OflfRGAAAA:8 a=bfLuiRfvAAAA:8 a=pGLkceISAAAA:8 a=OjAO0AJQm2TZWLKD68oA:9 a=OisW1ap6CBkzvXjq:21 a=AlxJrouqeSJf2MKd:21 a=wPNLvfGTeEIA:10 a=ivbTfD_dPm4A:10 a=-FEs8UIgK8oA:10 a=NWVoK91CQyQA:10
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-transfer-encoding:Content-type:Mime-version:In-Reply-To:References:Message-ID:To:From:Subject:Date; bh=+iQc1dU8EBe0VQC3MMbExqh3IAiAmVsFDIxQjkfogPk=; b=YCbAm9Uz0gdbg4XLygjT4EAKglklAm/R1mozHaPqs/V0keZoStCeKBvo3+m9/DDSrl7nCPQw5oSyJam4C2Ccmg9qJvAVQ2BvI5sve5/EbE2rQTEe+HvrxLLQGBToALPu;
Received: from [108.56.131.149] (port=49328 helo=[192.168.1.11]) by box462.bluehost.com with esmtpa (Exim 4.84) (envelope-from <richard@shockey.us>) id 1Z3P8X-0003Wf-Nj; Fri, 12 Jun 2015 07:36:46 -0600
User-Agent: Microsoft-MacOutlook/14.5.1.150515
Date: Fri, 12 Jun 2015 09:36:39 -0400
From: Richard Shockey <richard@shockey.us>
To: Henning Schulzrinne <Henning.Schulzrinne@fcc.gov>, "philippe.fouquart@orange.com" <philippe.fouquart@orange.com>, "cnit@ietf.org" <cnit@ietf.org>
Message-ID: <D1A055CF.26E60%richard@shockey.us>
Thread-Topic: [cnit] CNIT Charter bashing..
References: <D19F23AD.26CEA%richard@shockey.us> <E42CCDDA6722744CB241677169E8365603614617@MISOUT7MSGUSRDB.ITServices.sbc.com> <9588_1434045613_5579CCAD_9588_574_1_fki5dyxdmgyv92b6hugpfuoy.1434045608655@email.android.com> <E6A16181E5FD2F46B962315BB05962D07D354C94@fcc.gov> <9384_1434103912_557AB068_9384_7221_1_B5939C6860701C49AA39C5DA5189448B14C216E0@OPEXCLILM42.corporate.adroot.infra.ftgroup> <E6A16181E5FD2F46B962315BB05962D07D355444@fcc.gov>
In-Reply-To: <E6A16181E5FD2F46B962315BB05962D07D355444@fcc.gov>
Mime-version: 1.0
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable
X-Identified-User: {3286:box462.bluehost.com:shockeyu:shockey.us} {sentby:smtp auth 108.56.131.149 authed with richard+shockey.us}
Archived-At: <http://mailarchive.ietf.org/arch/msg/cnit/nk1kyYyjwyW7Zn-7Hwm4gm6nUes>
Subject: Re: [cnit] CNIT Charter bashing..
X-BeenThere: cnit@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Calling Name Identity Trust discussion list <cnit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cnit>, <mailto:cnit-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/cnit/>
List-Post: <mailto:cnit@ietf.org>
List-Help: <mailto:cnit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cnit>, <mailto:cnit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jun 2015 13:56:54 -0000

In line

On 6/12/15, 9:13 AM, "Henning Schulzrinne" <Henning.Schulzrinne@fcc.gov>
wrote:

>>From what I can tell, North American businesses see a fair amount of
>>value in this feature, as many people (due to robocalls) won't pick up
>>anonymous calls or calls from numbers they do not recognize. In
>>addition, this address book has to be created somehow. It's a whole lot
>>easier to auto-populate the name from the caller name information than
>>asking users to type in the name for the person that just called them.
>>After all, that's how typical email-derived address books work - people
>>don't type in that information.
>
>I suspect we'll see, as in the Apple announcement, various third-party
>kludges that go beyond the personal address book, where Google and Apple
>(and, with a year or two delay, Microsoft) try to use their own data, web
>page data and maybe crowd-sourced data to create a pseudo-CNAM, with a
>proprietary architecture and opaque data sources. This will work ok to
>the point where a business finds that their name is horribly mangled and
>then tries to determine how they can get it fixed by somebody they can't
>talk to.

RS> Amen ..


>
>That said, we're talking about a SIP feature (display name) that already
>exists and is, I assume, widely used for enterprise VoIP systems. Thus,
>my goal is modest: allow signed and extended versions of the display name.


RS> Well intra enterprise certainly.  There it tends to get pulled from
Active Directory but until we can get the NNI interface deployed its not
working at all for inter enterprise.  We are certainly looking at that for
Phase 2 of the NNI TF.

My goal is some what more modest for a first phase.  Certainly you want
signed extended versions of the display name but one should not create
artificial barriers to non signed data exchanges between service providers
where the security comes from the big yellow wire at Layer 1.  Plus I
still want a straight answer if this proposal is going to have a
requirement for a new SIP header and all the IETF ART pain and suffering
that goes with that. I want the AD¹s to make that demand ( if it is to be
imposed) explicit now.

> 
>
>I find it peculiar that carriers always say that they want to be more
>than bit pipes, but then find all kinds of reasons not to add value to
>their services. This obviously only applies to people and organizations
>not on this list :-)


 

>
>Henning
>
>
>________________________________________
>From: cnit [cnit-bounces@ietf.org] on behalf of
>philippe.fouquart@orange.com [philippe.fouquart@orange.com]
>Sent: Friday, June 12, 2015 6:11 AM
>To: cnit@ietf.org
>Subject: Re: [cnit] CNIT Charter bashing..
>
>As far as what the feature does, I think you are right. And after all,
>displaying a name is..., well just that really, displaying a name and the
>variations are mostly around whether the source is authoritative or to
>what extent.
>
>As to the misunderstanding relative to whether this is or isn't
>implemented, I know that this hasn't been massively successful as a
>feature and the need to replicate that beyond TDM isn't clear. It would
>seem that most people would consider at this stage that
>"matching-CLI-with-names-in-Contacts-and-displaying-the-CLI-or-anonymous-w
>hen-not-present" is just good enough. Displaying names was a challenge in
>environments and days when contact books weren't available and although
>from an engineering perspective, not having a single format to display
>may not be satisfactory or ideal for both CgP and CdP, it may actually be
>a de facto happy medium for their conflicting needs for
>privacy/information respectively.  Probably slightly off topic for this
>list.
>
>Philippe Fouquart
>Orange Labs Networks
>+33 (0) 1 45 29 58 13
>
>-----Message d'origine-----
>De : Henning Schulzrinne [mailto:Henning.Schulzrinne@fcc.gov]
>Envoyé : jeudi 11 juin 2015 20:05
>À : FOUQUART Philippe IMT/OLN; cnit@ietf.org
>Objet : RE: [cnit] CNIT Charter bashing..
>
>>From my reading, the function seems similar to caller name delivery,
>>even if the mechanism is not a CNAM database.
>
>According to Google Translate:
>
>Presented coordinates are those listed in the directories. These are
>necessarily the coordinates of the line holder that are displayed. The
>name of the calling line holder is displayed only if the call is
>presented on a compatible device.
>
>________________________________
>From: cnit [cnit-bounces@ietf.org] on behalf of
>philippe.fouquart@orange.com [philippe.fouquart@orange.com]
>Sent: Thursday, June 11, 2015 2:00 PM
>To: DOLLY, MARTIN C; Richard Shockey; cnit@ietf.org
>Subject: Re: [cnit] CNIT Charter bashing..
>
>The feature I was referring to
>http://assistance.orange.fr/presentation-du-nom-de-la-ligne-fixe-utilisati
>on-4010.php
>(In French, with my apologies)
>As I said, it isn't a CNAM service.
>
>Regards,
>
>Philippe Fouquart
>Orange Labs Networks
>+33 (0) 1 45 29 58 13
>
>
>-------- Message d'origine --------
>De : "DOLLY, MARTIN C"
>Date :11/06/2015 18:18 (GMT+01:00)
>À : Richard Shockey , FOUQUART Philippe IMT/OLN , cnit@ietf.org Objet :
>RE: [cnit] CNIT Charter bashing..
>
>I got a different answer from the Orange/FT folks at the CT WG
>meetings...so please check and clarify..
>
>From: cnit [mailto:cnit-bounces@ietf.org] On Behalf Of Richard Shockey
>Sent: Thursday, June 11, 2015 11:46 AM
>To: philippe.fouquart@orange.com; cnit@ietf.org
>Subject: Re: [cnit] CNIT Charter bashing..
>
>
>Thank you that is very helpful. I'm assuming its network delivered based
>on information derived from the calling party billing data.
>
>My other running assumption has been that some form Advanced Calling Name
>Delivery is a precondition for advanced realtime communications service
>delivery.. Aka ubiquitous video calling.   Would that be a reasonable
>presumption?
>
>From: <philippe.fouquart@orange.com<mailto:philippe.fouquart@orange.com>>
>Date: Thursday, June 11, 2015 at 9:02 AM
>To: "cnit@ietf.org<mailto:cnit@ietf.org>"
><cnit@ietf.org<mailto:cnit@ietf.org>>
>Subject: Re: [cnit] CNIT Charter bashing..
>
>Richard,
>
>For a number of years, there has been an optional caller name dispay
>feature attached to some of the telephone services in France, but indeed
>nothing like the standalone CNAM service concept that underpins the
>discussions on this list.
>
>Regards,
>
>Philippe Fouquart
>Orange Labs Networks
>+33 (0) 1 45 29 58 13
>
>-------- Message d'origine --------
>De : Richard Shockey
>Date :11/06/2015 05:21 (GMT+01:00)
>À : Brian Rosen , Henning Schulzrinne
>Cc : cnit@ietf.org<mailto:cnit@ietf.org>
>Objet : Re: [cnit] CNIT Charter bashing..
>
>
>
>Here is what I want to know now.
>
>Before we start to process this concept I want to know how relevant the
>existing CNAM service is deployed outside North America.
>
>I'm told by reliable sources that the CNAM service is not deployed
>anywhere among the major telecom markets in Europe or Asia. Not Japan
>China or South Korea UK Italy France and in fact it might actually be
>illegal under the strict privacy regulations in Germany.
>
>I don't know.
>
>That said our friends at Apple seem to understand there is a problem
>here. I have tried to engage the most senior management at Google about
>who would be responsible for defining how the VoLTE CUA could actually
>display an advanced call display data and frankly no one knows.
>
>http://www.businessinsider.com/apple-update-in-ios9-suggests-caller-id-201
>5-6
>
>There is a realistic question if this is simply a North American specific
>problem why is this  a IETF issue. You might ask the same question of
>MODERN but I frankly don't want to go there.
>
>
>
>
>From: Richard Shockey <richard@shockey.us<mailto:richard@shockey.us>>
>Date: Tuesday, June 2, 2015 at 12:35 PM
>To: Brian Rosen <br@brianrosen.net<mailto:br@brianrosen.net>>
>Cc: <cnit@ietf.org<mailto:cnit@ietf.org>>
>Subject: Re: [cnit] CNIT Charter bashing..
>
>
>Hopefully but I still haven't seen any response to my concern about
>normative dependencies on STIR.
>
>If we can define the object/headers first then I don't have a issue.
>
>-
>Richard Shockey
>Shockey Consulting LLC
>Chairman of the Board SIP Forum
>www.shockey.us<http://www.shockey.us>
>www.sipforum.org<http://www.sipforum.org>
>richard<at>shockey.us
>Skype-Linkedin-Facebook rshockey101
>PSTN +1 703-593-2683
>
>
>From: Brian Rosen <br@brianrosen.net<mailto:br@brianrosen.net>>
>Date: Tuesday, June 2, 2015 at 12:26 PM
>To: Richard Shockey <richard@shockey.us<mailto:richard@shockey.us>>
>Cc: Eric Burger 
><eburger@standardstrack.com<mailto:eburger@standardstrack.com>>,
><cnit@ietf.org<mailto:cnit@ietf.org>>
>Subject: Re: [cnit] CNIT Charter bashing..
>
>Are we planning to submit a charter in the next couple of days, and then
>see if we can get a slot at the next IETF?
>
>Brian
>On May 28, 2015, at 1:55 PM, Richard Shockey
><richard@shockey.us<mailto:richard@shockey.us>> wrote:
>
>
>A fair argument but I don't want to spend 5 years waiting for a series of
>normative dependencies on the trust model before actually understanding
>what headers can/should be used here.
>
>
>Its much too difficult to get things done in the IETF as it is.   I'd
>much prefer building from success starting with the definition of the
>data object then ..then folding that into a trust model and frankly given
>what we have seen in STIR I'm not sure your argument holds up. Again the
>MARTINI model.
>
>Didn't you recently  say something about "perfection is the enemy of the
>good"  :-)
>
>
>
>From: Eric Burger 
><eburger@standardstrack.com<mailto:eburger@standardstrack.com>>
>Date: Wednesday, May 27, 2015 at 10:11 PM
>To: <cnit@ietf.org<mailto:cnit@ietf.org>>
>Subject: Re: [cnit] CNIT Charter bashing..
>
>On May 25, 2015, at 5:31 PM, Richard Shockey
><richard@shockey.us<mailto:richard@shockey.us>> wrote:
>
>From: Mary Barnes 
><mary.ietf.barnes@gmail.com<mailto:mary.ietf.barnes@gmail.com>>
>Date: Friday, May 22, 2015 at 12:58 PM
>Attached is what I have at this point. Really, the only thing I'm
>struggling with is the milestones as I don't think we can request
>publication of the data object and headers without having defined the
>trust model.
>
>
>RS> Mary I'm not sure about that statement. I can certainly anticipate
>several deployment models where the trust mechanism (aka signing) does
>not need to be formally integrated in the solution especially those where
>the exchange of data is more bi-lateral and the trust mechanism is at
>lower layers of the stack than the signaling. My initial concern  is what
>is the header and what is the data object(s) carried in the header. How
>the CNIT data is created should not be our concern.
>
>I do not buy it. If there are private agreements between service
>providers, they have private agreements. They can do whatever they want.
>
>Last I looked, this is the Internet Engineering Task Force. Assume
>untrusted transport across the wide open Internet, and trust no endpoint
>that cannot cryptographically prove who they are. If it happens two
>service providers exchange CNIT data over a single, yellow cable, then it
>is a benefit that no state-sponsored security service can listen in on
>the cable.
>
>I do not want to take three years to build a protocol and two more years
>after that for products to be available just to have a system that only
>works in walled gardens. I do not want to be the person that has to
>explain to the media why Calling Name Delivery is just as broken as it
>always was and it will be another five years before the world sees a real
>solution.
>
>Let us get this right the first time.
>[snip]
>_______________________________________________ cnit mailing list
>cnit@ietf.org<mailto:cnit@ietf.org>https://www.ietf.org/mailman/listinfo/c
>nit
>_______________________________________________
>cnit mailing list
>cnit@ietf.org<mailto:cnit@ietf.org>
>https://www.ietf.org/mailman/listinfo/cnit
>
>_______________________________________________ cnit mailing list
>cnit@ietf.org<mailto:cnit@ietf.org>
>https://www.ietf.org/mailman/listinfo/cnit
>
>__________________________________________________________________________
>_______________________________________________
>
>
>
>Ce message et ses pieces jointes peuvent contenir des informations
>confidentielles ou privilegiees et ne doivent donc
>
>pas etre diffuses, exploites ou copies sans autorisation. Si vous avez
>recu ce message par erreur, veuillez le signaler
>
>a l'expediteur et le detruire ainsi que les pieces jointes. Les messages
>electroniques etant susceptibles d'alteration,
>
>Orange decline toute responsabilite si ce message a ete altere, deforme
>ou falsifie. Merci.
>
>
>
>This message and its attachments may contain confidential or privileged
>information that may be protected by law;
>
>they should not be distributed, used or copied without authorisation.
>
>If you have received this email in error, please notify the sender and
>delete this message and its attachments.
>
>As emails may be altered, Orange is not liable for messages that have
>been modified, changed or falsified.
>
>Thank you.
>_______________________________________________ cnit mailing list
>cnit@ietf.org<mailto:cnit@ietf.org>
>https://www.ietf.org/mailman/listinfo/cnit
>
>__________________________________________________________________________
>_______________________________________________
>
>Ce message et ses pieces jointes peuvent contenir des informations
>confidentielles ou privilegiees et ne doivent donc pas etre diffuses,
>exploites ou copies sans autorisation. Si vous avez recu ce message par
>erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les
>pieces jointes. Les messages electroniques etant susceptibles
>d'alteration, Orange decline toute responsabilite si ce message a ete
>altere, deforme ou falsifie. Merci.
>
>This message and its attachments may contain confidential or privileged
>information that may be protected by law; they should not be distributed,
>used or copied without authorisation.
>If you have received this email in error, please notify the sender and
>delete this message and its attachments.
>As emails may be altered, Orange is not liable for messages that have
>been modified, changed or falsified.
>Thank you.
>
>
>__________________________________________________________________________
>_______________________________________________
>
>Ce message et ses pieces jointes peuvent contenir des informations
>confidentielles ou privilegiees et ne doivent donc
>pas etre diffuses, exploites ou copies sans autorisation. Si vous avez
>recu ce message par erreur, veuillez le signaler
>a l'expediteur et le detruire ainsi que les pieces jointes. Les messages
>electroniques etant susceptibles d'alteration,
>Orange decline toute responsabilite si ce message a ete altere, deforme
>ou falsifie. Merci.
>
>This message and its attachments may contain confidential or privileged
>information that may be protected by law;
>they should not be distributed, used or copied without authorisation.
>If you have received this email in error, please notify the sender and
>delete this message and its attachments.
>As emails may be altered, Orange is not liable for messages that have
>been modified, changed or falsified.
>Thank you.
>
>_______________________________________________
>cnit mailing list
>cnit@ietf.org
>https://www.ietf.org/mailman/listinfo/cnit
>
>
>_______________________________________________
>cnit mailing list
>cnit@ietf.org
>https://www.ietf.org/mailman/listinfo/cnit