Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

Richard Shockey <richard@shockey.us> Wed, 13 March 2024 22:48 UTC

Return-Path: <richard@shockey.us>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41C28C14F70E for <stir@ietfa.amsl.com>; Wed, 13 Mar 2024 15:48:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.906
X-Spam-Level:
X-Spam-Status: No, score=-1.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (768-bit key) header.d=shockey.us
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XWf-GTUF6RL8 for <stir@ietfa.amsl.com>; Wed, 13 Mar 2024 15:48:25 -0700 (PDT)
Received: from omta34.uswest2.a.cloudfilter.net (omta34.uswest2.a.cloudfilter.net [35.89.44.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 705E8C14F6B8 for <stir@ietf.org>; Wed, 13 Mar 2024 15:48:25 -0700 (PDT)
Received: from eig-obgw-6007a.ext.cloudfilter.net ([10.0.30.247]) by cmsmtp with ESMTPS id kRg5rIi2GHXmAkXObrZD5Y; Wed, 13 Mar 2024 22:48:25 +0000
Received: from box5527.bluehost.com ([162.241.218.19]) by cmsmtp with ESMTPS id kXOarVynf9abNkXOarJuU2; Wed, 13 Mar 2024 22:48:24 +0000
X-Authority-Analysis: v=2.4 cv=cfrUrGDM c=1 sm=1 tr=0 ts=65f22d38 a=KXpOjjFwo8kCkgxs2x2AJQ==:117 a=KXpOjjFwo8kCkgxs2x2AJQ==:17 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=K6JAEmCyrfEA:10 a=qMgonR0qfJAA:10 a=PeFO9FbFhS32YxYntvkA:9 a=8pif782wAAAA:8 a=ll-iCDY8AAAA:8 a=M0OflfRGAAAA:8 a=48vgC7mUAAAA:8 a=gYdj9CMZAAAA:8 a=Z80JlwQ0AAAA:8 a=pGLkceISAAAA:8 a=tX6xneRpXgV3EjLpXykA:9 a=QEXdDO2ut3YA:10 a=Z4DHgucsFCkA:10 a=X-aAQs0CHs0A:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=szBg0fSXmE3HI-3YG4YA:9 a=ubZC76p6EQo8fQv5:21 a=gKO2Hq4RSVkA:10 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10 a=frz4AuCg-hUA:10 a=lqcHg5cX4UMA:10 a=jqBRFv0mrdWfL_K7jfQc:22 a=VpyrLIdO_Ztbr3SWPBuH:22 a=6yl0mh0s51TKORVA8GqK:22 a=w1C3t2QeGrPiZgrLijVG:22 a=HE9wkd683oz8aKaGCqil:22 a=Zz-tw7mMPhxMdvFcggwQ:22
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-type:Mime-version:In-Reply-To:References:Message-ID:CC: To:From:Subject:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=jIhEp6Oj+HlbdtCboxyFQ/Jol3MtU70/mL3Qkh+QuYc=; b=YbCZyfFgk9fhWU9P7P5xyIL8hj HPXowZ/3cRQCqww0BMK4FFWD603KIE1XFor8H6OB91O+/FnXmt5/IgMTKY2KsFUOdOT5QDvTt7WuW W/MWa8yhqBBZwa6j0/63wyBVq;
Received: from pool-100-36-48-45.washdc.fios.verizon.net ([100.36.48.45]:55347 helo=[192.168.1.214]) by box5527.bluehost.com with esmtpa (Exim 4.96.2) (envelope-from <richard@shockey.us>) id 1rkXOZ-0017lu-24; Wed, 13 Mar 2024 16:48:23 -0600
User-Agent: Microsoft-MacOutlook/16.83.24031120
Date: Wed, 13 Mar 2024 18:48:21 -0400
From: Richard Shockey <richard@shockey.us>
To: Pierce Gorman <Pierce.Gorman@numeracle.com>, Ben Campbell <ben@nostrum.com>
CC: "Murray S. Kucherawy" <superuser@gmail.com>, "stir@ietf.org" <stir@ietf.org>
Message-ID: <0D0ADAF6-967E-4D8B-BC78-450BC9733A8B@shockey.us>
Thread-Topic: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05
References: <170689342892.43577.13483715713883494287@ietfa.amsl.com> <CAL0qLwb9LUsGuj4AwczOne9GCTT6NvuZJyZYPaeaZdRvaFGUzQ@mail.gmail.com> <97C689F5-C32D-4EAF-AC76-942CB3296341@shockey.us> <01E7796C-203A-4344-A656-EF85817B0E35@nostrum.com> <0D740856-CBE3-446F-B953-363DAC625558@shockey.us> <CH3PR13MB67474302850984AE2B8723C8E12B2@CH3PR13MB6747.namprd13.prod.outlook.com> <77BCC004-8794-4C24-99FE-3D34001DEF5E@shockey.us> <CH3PR13MB674769F00AFF5F6F58E44D7EE12A2@CH3PR13MB6747.namprd13.prod.outlook.com>
In-Reply-To: <CH3PR13MB674769F00AFF5F6F58E44D7EE12A2@CH3PR13MB6747.namprd13.prod.outlook.com>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3793200503_448824938"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - box5527.bluehost.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - shockey.us
X-BWhitelist: no
X-Source-IP: 100.36.48.45
X-Source-L: No
X-Exim-ID: 1rkXOZ-0017lu-24
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: pool-100-36-48-45.washdc.fios.verizon.net ([192.168.1.214]) [100.36.48.45]:55347
X-Source-Auth: richard@shockey.us
X-Email-Count: 1
X-Org: HG=bhshared;ORG=bluehost;
X-Source-Cap: c2hvY2tleXU7c2hvY2tleXU7Ym94NTUyNy5ibHVlaG9zdC5jb20=
X-Local-Domain: yes
X-CMAE-Envelope: MS4xfA/7s7Y1+ufG8xO1oIoe2g6YgiwNo064Jq2avdSEwv+Qbvkcj94So7N/iIOT8vhAUM3KkyuqngSoQc38IVO1DxTZI4TBpGk+VoDkxMmhypJZDhQMi2Rd +zLojkiLbG6Y1epWL2ssljiyWP8FN9gAUVAbj4wvAtIPxIuGtRnriRLGi2L8bTMPt24QA6j9WO9dpA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/3LJeaq4MvLjITBGLIK5seUOU-Q8>
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Mar 2024 22:48:30 -0000

 

Right .. you know how many 4ESS are still in the field?  ATT still has 100 or more of them. Its staggering considering they are servicing the major Enterprise Voice networks. The inbound call centers that have not converted to cloud..yet.

 

You are right about parts, line cards in particular. There is a thriving market for all of this especially in Germany that uses the old Siemens switches and the 5E’s

 

I’ve done the NANC now for 15 years. You and I are both on CATA.  My guess something is going to have to break sooner rather than later. Then the whole issue of databases for TN to URI is going to come up and that is going to drag me back to RFC 6116. I really have strong views on that issue for historical reasons. IMHO we need to revisit 6116 and reconfigure DNS over HTTPS . The originating carrier queries the terminating carrier on where to terminate. We outlined the procedure in the original SIPForum/ATIS recommendation.

 

https://en.wikipedia.org/wiki/DNS_over_HTTPS

 

 

In general when we look at the needs for PKI in the network for RCD, things start to look more promising.

 

OOB just sucks. I do not know one carrier that wants to implement it.

 

 

 

 

Richard Shockey

Shockey Consulting LLC

Chairman of the Board SIP Forum

www.shockey.us

www.sipforum.org

richard<at>shockey.us

Skype-Linkedin-Facebook –Twitter  rshockey101

PSTN +1 703-593-2683

 

 

From: stir <stir-bounces@ietf.org> on behalf of Pierce Gorman <Pierce.Gorman@numeracle.com>
Date: Wednesday, March 13, 2024 at 5:41 PM
To: Richard Shockey <richard@shockey.us>, Ben Campbell <ben@nostrum.com>
Cc: "Murray S. Kucherawy" <superuser@gmail.com>, "stir@ietf.org" <stir@ietf.org>
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

 

Now there’s a better response.  Thank you Richard.

 

I agree asking for money for voice network modernization in the big 3 has to be a depressing exercise.  It wasn’t fun back when I was having to do it several years ago.  Nokia, Ribbon, and Ericsson are probably not supporting their old TDM switches for free, and there is a significant maintenance and facilities cost (and electric bill) for keeping all those switches going.  And I expect scouring gray market sources for parts is becoming increasingly challenging (or impossible?).  Even so, network finance folks can be damnably difficult to work with.  Maybe a series of FCC-reportable outages from old failing equipment will help the budgets.

 

Anyway, there is nothing inherently special about out-of-band STIR which prevents it from being used in a secure fashion any more than there is something inherent about web browsing or SIP trunks that prevents those from being used in a secure fashion.  The question isn’t whether it’s possible.  The question is whether to use it for STIR/SHAKEN once it’s been satisfactorily established to have been sufficiently secured.

 

That question isn’t before the FCC’s NANC, but if it gets asked there, I expect the CATA working group may become significantly more interesting to be a member of (and I’ve been a member of all 4 instances so far).

 

Cheers,

 

Pierce

 

From: Richard Shockey <richard@shockey.us> 
Sent: Wednesday, March 13, 2024 3:57 PM
To: Pierce Gorman <Pierce.Gorman@numeracle.com>; Ben Campbell <ben@nostrum.com>
Cc: Murray S. Kucherawy <superuser@gmail.com>; stir@ietf.org
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

 

EXTERNAL EMAIL 
In line…

 

From: stir <stir-bounces@ietf.org> on behalf of Pierce Gorman <Pierce.Gorman@numeracle.com>
Date: Tuesday, March 12, 2024 at 10:59 AM
To: Richard Shockey <richard@shockey.us>, Ben Campbell <ben@nostrum.com>
Cc: "Murray S. Kucherawy" <superuser@gmail.com>, "stir@ietf.org" <stir@ietf.org>
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

 

At the risk of annoying someone I consider a friend, I think Richard is being a little disingenuous.  He knows better than most people the barriers to all IP and the #1 problem is NOT a lack of capital.

 

RS> Its somewhat more nuanced than that. You are a network VP and you want to invest in SIP IP and junk the C4 C5 crap that is out there. You go the CFO of ATT or any carrier and what they tell you is NO.  “What is the ROI on this investment?”  “What is the new revenue it will generate?” Voice as we both know is a tough business these days.

 

 

Two of the three biggest TDM providers spend multiple billions of dollars a year on Radio Access Network (RAN) infrastructure for their mobile networks.  Probably somewhere between 1% and 5% of their annual capital budgets would be sufficient to modernize their networks and eliminate TDM.  I say this having been one of the lead engineers at Sprint who helped eliminate more than 99% of the TDM from the network.  It wsSasn’t expensive but it did take a few years.

 

For the largest TDM providers, the sticking point is offering VoIP access on the same terms as they offer TDM.  This is largely a regulatory issue, not a technical issue.

 

RS> True very True.  That has been understood for years.  Interconnected VoIP lives in a strange place at FCC. It is regulated but only because of the authority in Section 251 e 1 numbering and the Public Safety obligations.  Though I’m convinced and so are a lot of people that the TRACED act does give the FCC authority to mandate a conversion if for no other reason than fighting robocalls.   BTW there is a similar problem in Canada ..don’t ask me why I know. <g>

 

Brian Ford, a lobbyist with NTCA – The Rural Broadband Association, has said for years the majority of their 800+ members are VoIP-enabled on the line side of their infrastructure.  The trunk side remains TDM.  The reason is the small, mostly rural, service providers say they cannot afford VoIP access and routing on commercial terms different than what they currently enjoy with TDM connectivity.  And if I understand correctly, the large TDM providers are still able to recover facilities costs on TDM facilities that were totally amortized a couple of decades ago.

 

The result is a regulatory and commercial stalemate that for whatever reasons (that I’m pretty certain Richard knows better than I do) the FCC has declined to address.

 

RS>  I know Brian Ford and his boss Mike Romano very well and we have had this discussion for years. All would be solved if they could swap out SBC’s for the Tandems at the edge of their networks under the same terms and conditions.  The FCC never reformed Originating Access charges when they essentially eliminated Terminating Access to fight Traffic Pumping.  

 

 

For what it’s worth, out-of-band (OOB) signaling is very popular in the TDM infrastructure.  It’s called SS7.

 

RS> Which is also an insecure POS that needs to die ASAP.

 

Anyway, STIR OOB is valuable as a plausible approach to assist in ubiquitous deployment of STIR/SHAKEN (mandated by Congress and the FCC) in a heterogenous TDM/IP infrastructure.

 

RS> With all due respect, my friend, OBB is a total waste of time effort and capital.  Especially with 45 billion US dollars of BEAD money ready to hit the pipeline.  

 

Beyond that STIR OOB may someday help with:
all IP insofar as SIP INVITEs may routinely become overloaded with SIP “Identity” headers for one or more of the 6 existing or proposed standard types of STIR PASSporTs
authenticating SMS messaging
mutual authentication
 

 

RS> NEVER if I have anything to say about it in the FCC NANC.  I repeat OOB is a abomination.  I read the FCC docket here 17-59 17-97 every single day. I agree the FCC needs to act. So does the CRTC.  I will say OFCOM in the UK is actually talking a solid approach with a 2025 mandate to go all IP (which I’m positive they will miss) but they have to get their Common Numbering Database under control first.  The regulatory structure in the US is unique with the separation of Title 1 vs Title 2 telecom.  Most of the rest of the planet does not make those distinctions.  “If it looks like a Duck…”  For goodness sake I’ve been approached to do SIPIT for Rich Call Data but it would be nice to get a RFC number.  You know vendors. NO RFC number NO code. That problem seems to be beyond my pay grade.

 

Pierce

 

 

From: Richard Shockey <richard@shockey.us> 
Sent: Monday, March 11, 2024 1:56 PM
To: Ben Campbell <ben@nostrum.com>
Cc: Murray S. Kucherawy <superuser@gmail.com>; stir@ietf.org
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

 

 

From: Ben Campbell <ben@nostrum.com>
Date: Monday, March 11, 2024 at 2:35 PM
To: Richard Shockey <richard@shockey.us>
Cc: "Murray S. Kucherawy" <superuser@gmail.com>, "stir@ietf.org" <stir@ietf.org>
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

 

Hi Richard,

 

Can you elaborate on that?  Am I correct to assume that you object to out-of-band STIR as a general concept, 

 

 

RS> Correct. OOB is a total waste of time and effort and CAPEX that would be better spent on converting these networks to all SIP/IP

 

 

or do you have objections specific to the details of this draft?

 

Thanks!

 

Ben.

 

On Mar 8, 2024, at 5:05 PM, Richard Shockey <richard@shockey.us> wrote:

 

For the record this entire document is an abomination.

 

 

Richard Shockey

Shockey Consulting LLC

Chairman of the Board SIP Forum

www.shockey.us

www.sipforum.org

richard<at>shockey.us

Skype-Linkedin-Facebook –Twitter  rshockey101

PSTN +1 703-593-2683

 

 

From: stir <stir-bounces@ietf.org> on behalf of "Murray S. Kucherawy" <superuser@gmail.com>
Date: Friday, March 8, 2024 at 5:12 PM
To: <stir@ietf.org>
Subject: Re: [stir] Publication has been requested for draft-ietf-stir-servprovider-oob-05

 

On Fri, Feb 2, 2024 at 9:03 AM Ben Campbell via Datatracker <noreply@ietf.org> wrote:

Ben Campbell has requested publication of draft-ietf-stir-servprovider-oob-05 as Proposed Standard on behalf of the STIR working group.

Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-stir-servprovider-oob/

 

AD Evaluation:

This seems to be in pretty good shape.  I'll send it along after I explore one thing:

Section 4 curiously avoids any sort of commitment around how the CPS advertisement would be discovered.  Might be a database, might be DNS, might be some private distribution system, maybe something else.  Should any of those (assuming examples already exist) be described here?  Or how would one get started in this regard absent such guidance?

 

-MSK

_______________________________________________ stir mailing list stir@ietf.orghttps://www.ietf.org/mailman/listinfo/stir

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

 

_______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir 

_______________________________________________ stir mailing list stir@ietf.org https://www.ietf.org/mailman/listinfo/stir