Re: [sipcore] draft-ietf-sipcore-callinfo-spam-01 - SIP entities

Henning Schulzrinne <Henning.Schulzrinne@fcc.gov> Thu, 20 July 2017 17:17 UTC

Return-Path: <Henning.Schulzrinne@fcc.gov>
X-Original-To: sipcore@ietfa.amsl.com
Delivered-To: sipcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DF56131C31 for <sipcore@ietfa.amsl.com>; Thu, 20 Jul 2017 10:17:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fccoffice.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XV6IysvMyVUu for <sipcore@ietfa.amsl.com>; Thu, 20 Jul 2017 10:17:14 -0700 (PDT)
Received: from mx0a-0024ed01.pphosted.com (mx0a-0024ed01.pphosted.com [148.163.149.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF4CA131B4B for <sipcore@ietf.org>; Thu, 20 Jul 2017 10:17:14 -0700 (PDT)
Received: from pps.filterd (m0102173.ppops.net [127.0.0.1]) by mx0a-0024ed01.pphosted.com (8.16.0.21/8.16.0.21) with SMTP id v6KHED7D004390; Thu, 20 Jul 2017 17:17:11 GMT
Received: from gcc01-cy1-obe.outbound.protection.outlook.com (mail-cy1gcc01lp0021.outbound.protection.outlook.com [23.103.198.21]) by mx0a-0024ed01.pphosted.com with ESMTP id 2bqbus43de-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 20 Jul 2017 17:17:11 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fccoffice.onmicrosoft.com; s=selector1-fcc-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZDLz+eA3HK5vUkvSfW90I3A7YZBdDg1RI1aWvlOXaLs=; b=iDue+UlZ26e5XSAFjrB44OSBXMvHqACZVbEgkH5yZH3ztRjkYYGE4aZ0TSfGlHHEZj1Kp2QszFOUAXP2KD1J0kqs0aL87RjghObbp6Ly9stg802ZeNfc49X1RqXMP69DJF8se1U2PZYvwYYddLNmCu5ILZUHX2v9g76KJnpjqrA=
Received: from CY1PR09MB0760.namprd09.prod.outlook.com (10.161.173.151) by CY1PR09MB0757.namprd09.prod.outlook.com (10.161.173.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.13; Thu, 20 Jul 2017 17:17:10 +0000
Received: from CY1PR09MB0760.namprd09.prod.outlook.com ([10.161.173.151]) by CY1PR09MB0760.namprd09.prod.outlook.com ([10.161.173.151]) with mapi id 15.01.1261.024; Thu, 20 Jul 2017 17:17:10 +0000
From: Henning Schulzrinne <Henning.Schulzrinne@fcc.gov>
To: Richard Shockey <richard@shockey.us>, "sipcore@ietf.org" <sipcore@ietf.org>
Thread-Topic: [sipcore] draft-ietf-sipcore-callinfo-spam-01 - SIP entities
Thread-Index: AQHS//8f86lEHhh9VUKR5rSbwxo4z6Ja0ofAgABzoYCAAC1loIAAAo2AgAAGWUCAAWxBgIAADIFA
Date: Thu, 20 Jul 2017 17:17:09 +0000
Message-ID: <CY1PR09MB0760C398A942BEBB0EAD07D0EAA70@CY1PR09MB0760.namprd09.prod.outlook.com>
References: <CY1PR09MB07602078727954F586DCBDD3EAA10@CY1PR09MB0760.namprd09.prod.outlook.com> <SN2PR03MB235023C01D8658B9B25A3577B2A60@SN2PR03MB2350.namprd03.prod.outlook.com> <75f4364f-a10d-18eb-f547-8bdb17acef78@alum.mit.edu> <SN2PR03MB23509530AE70988D06A97191B2A60@SN2PR03MB2350.namprd03.prod.outlook.com> <CY1PR09MB07606A3F6AD98F8CB7235FD5EAA60@CY1PR09MB0760.namprd09.prod.outlook.com> <SN2PR03MB2350B8FDFC86CC4DDA03F013B2A60@SN2PR03MB2350.namprd03.prod.outlook.com> <C9588D9A-B3ED-4088-9128-4E4D54FCA06C@shockey.us>
In-Reply-To: <C9588D9A-B3ED-4088-9128-4E4D54FCA06C@shockey.us>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: shockey.us; dkim=none (message not signed) header.d=none;shockey.us; dmarc=none action=none header.from=fcc.gov;
x-originating-ip: [192.104.54.21]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR09MB0757; 7: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
x-ms-office365-filtering-correlation-id: ff1e93dc-2d1e-4a6a-8f0b-08d4cf9327ea
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:CY1PR09MB0757;
x-ms-traffictypediagnostic: CY1PR09MB0757:
x-exchange-antispam-report-test: UriScan:(133145235818549)(10436049006162)(26388249023172)(236129657087228)(90097320859284)(48057245064654)(247924648384137);
x-microsoft-antispam-prvs: <CY1PR09MB07579F43BA90AD854C787A4BEAA70@CY1PR09MB0757.namprd09.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(2017060910075)(5005006)(8121501046)(3002001)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(6041248)(20161123555025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123560025)(20161123562025)(20161123558100)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY1PR09MB0757; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY1PR09MB0757;
x-forefront-prvs: 0374433C81
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39450400003)(39840400002)(39400400002)(39410400002)(24454002)(13464003)(377454003)(102836003)(2900100001)(229853002)(38730400002)(6436002)(6116002)(3280700002)(230783001)(2906002)(93886004)(45080400002)(189998001)(2950100002)(55016002)(6306002)(74316002)(9686003)(25786009)(53936002)(3660700001)(77096006)(305945005)(6246003)(72206003)(14454004)(7696004)(3846002)(7736002)(99286003)(8676002)(478600001)(53546010)(81166006)(54356999)(5660300001)(2501003)(6506006)(66066001)(33656002)(76176999)(86362001)(8936002)(575784001)(50986999)(966005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR09MB0757; H:CY1PR09MB0760.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: fcc.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2017 17:17:10.1501 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72970aed-3669-4ca8-b960-dd016bc72973
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR09MB0757
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-07-20_09:, , signatures=0
X-Proofpoint-Spam-Reason: safe
Archived-At: <https://mailarchive.ietf.org/arch/msg/sipcore/xHNqbUIfkn97o400ICaCWGhhvlw>
Subject: Re: [sipcore] draft-ietf-sipcore-callinfo-spam-01 - SIP entities
X-BeenThere: sipcore@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: SIP Core Working Group <sipcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sipcore>, <mailto:sipcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sipcore/>
List-Post: <mailto:sipcore@ietf.org>
List-Help: <mailto:sipcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sipcore>, <mailto:sipcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Jul 2017 17:17:22 -0000

There are four likely models:

* the call type (and spam-quotient) information may be shown to users, but most likely when reviewing voice mail, not a ringing call (where a simple binary indicator is probably more suitable, derived from information in the draft, possibly)
* various end system call handling algorithms, e.g., the semi-automated 'do not disturb' features in Android and iOS, so that, for example, non-personal calls would be directed to voice mail after 10 pm or during meetings.
* PBX and similar corporate systems that filter and manage calls, whether by corporate policy (e.g., to prevent Microsoft "support" calls) or by user preference
* as a call-out to a third-party system - the call information is proxied to a third party system, which then add the call-info labeling to the call

In all cases, the information in the header would seem to be, at most, be indirectly reflected in the appropriate user interface.  But, in my view, you need to provide the end system and UI with a bit more data so that they can do the filtering and UI tailoring. It's easy to turn a spam score into red and green, but you can't set red and green thresholds appropriate to the circumstances if the carrier has already made that decision.

The CNAM information seems complementary to this, although it might use some of the same type labeling. CNAM also seems to require far more originator cooperation (and a caller is unlikely to label itself as "spam"...).

Henning

-----Original Message-----
From: Richard Shockey [mailto:richard@shockey.us] 
Sent: Thursday, July 20, 2017 12:22 PM
To: Asveren, Tolga <tasveren@sonusnet.com>; Henning Schulzrinne <Henning.Schulzrinne@fcc.gov>; Paul Kyzivat <pkyzivat@alum.mit.edu>; sipcore@ietf.org
Subject: Re: [sipcore] draft-ietf-sipcore-callinfo-spam-01 - SIP entities



The other issue is who is the intended recipient of the data?  Among those of us that are actively evaulating Call Validation Display options we see some differences.  What a consumer may need to see is vastly different from what a inbound call center agent or enterprise user should see and should call validation data be combined with other forms of calling party identity in a expanded  CNAM (calling party name) like service offering.  In the EU for example they have no experience at all with CNAM.  That has typically been a North Americian service. 

I understand the argument for a binary data display such as green check vs red octonganal stop like visual indicator and there are serious nuances in what type of text should be displayed. We are not there yet.   We are delving into the black arts of UI design here and we are simply going to have to do some experimentation to come up with answers and even then its clear that one size may not fit all.

In any event there is already a thoughtful discussion between the service provider community and some national regulators on what the options are.

..

On 7/19/17, 2:46 PM, "sipcore on behalf of Asveren, Tolga" <sipcore-bounces@ietf.org on behalf of tasveren@sonusnet.com> wrote:

    Agreed that this is somewhat about "philosophical aspects of priority". Having said that, I really feel not content with a fine-granularity indicator considering how in practice it would/could be generated especially considering all the operator/equipment/call scenario/deployment model combinations. It would be like, actually worse, than how sausages are prepared.
    
    I am not religiously advocating a change toward a binary indicator (i.e. I wouldn't consider the current model as something "wrong") but IMHO that would be a more practical way of getting something useful at the end; just my 2 cents.
    
    Thanks,
    Tolga
    
    -----Original Message-----
    From: Henning Schulzrinne [mailto:Henning.Schulzrinne@fcc.gov] 
    Sent: Wednesday, July 19, 2017 2:33 PM
    To: Asveren, Tolga <tasveren@sonusnet.com>; Paul Kyzivat <pkyzivat@alum.mit.edu>; sipcore@ietf.org
    Subject: RE: [sipcore] draft-ietf-sipcore-callinfo-spam-01 - SIP entities
    
    This type of labeling is very common for email spam filters. It's essentially the same as "There's a 47% chance of rain today." Except that meteorologists are smart enough not to say 47%, but rather 50%.
    
    It is better than the "According to the polls, candidate H has an 89% chance of winning the election." (Any semblance of initials to real persons has a 1-in-26 chance of being made up.)
    
    Theoretically, unlike for elections and somewhat similar to the weather case, this is testable: You could take all the 50% spam or rain predictions, check with some reliable metric (human or rain gauge) whether the spam or rain happened and compare your results, i.e., roughly one in two such predictions should indeed turn out to be spam or rain. (It's more complicated than that, but we're getting pretty close to the philosophical debate of what probabilities mean when making predictions, which is apparently a rather unsettled scientific question.)
    
    To actually answer your question: I don't think this is useful except as a rough way for users to trade false-positive/false-negative penalties. For example, they may discard all 80%+ probability calls, route 30-80% calls to voicemail and ring the below-30% calls. The thresholds are arbitrary, but users may tune them based on experience ("all the calls in voicemail were spam, so I can go lower").
    
    Some people pack an umbrella when there's a 20% chance of rain, others are more willing to risk getting wet. By the way, it is well-known that meteorologists over-predict rain since nobody complains if they did not get soaked.
    
    Henning
    
    -----Original Message-----
    From: sipcore [mailto:sipcore-bounces@ietf.org] On Behalf Of Asveren, Tolga
    Sent: Wednesday, July 19, 2017 2:11 PM
    To: Paul Kyzivat <pkyzivat@alum.mit.edu>; sipcore@ietf.org
    Subject: Re: [sipcore] draft-ietf-sipcore-callinfo-spam-01 - SIP entities
    
    Let me ask this question then:
    What would "spam with a likelihood of 47%" mean? Will the specification detail how this percentage need to be calculated? Otherwise how can the end-device take some action based on this value? One could argue that all these are "implementation dependent" but honestly I think this would just create confusion/chaos in practice and likely to be not useful.
    
    Thanks,
    Tolga
     
    
    _______________________________________________
    sipcore mailing list
    sipcore@ietf.org
    https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_sipcore&d=DwICaQ&c=y0h0omCe0jAUGr4gAQ02Fw&r=FJcVoDkWM5EiVcV0ReX8lDU1XeHIYRHfarpk4MK59RE&m=B4eJ1PKmueNhKHee7Uns8SvL4EwRgp-A98tQOLWwL2g&s=06LUWYaIYuqYCl5NSo8ONPBkR7yWFyc-8lxUlVTOyWI&e=