[stir] draft-ietf-sipcore-callinfo-04 (call-reason)

Henning Schulzrinne <hgs@cs.columbia.edu> Fri, 18 March 2022 03:50 UTC

Return-Path: <hgs10@columbia.edu>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF1D23A17F1 for <stir@ietfa.amsl.com>; Thu, 17 Mar 2022 20:50:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.007
X-Spam-Level:
X-Spam-Status: No, score=-2.007 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=columbia.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BDZDpK1RV1B5 for <stir@ietfa.amsl.com>; Thu, 17 Mar 2022 20:50:04 -0700 (PDT)
Received: from mx0a-00364e01.pphosted.com (mx0a-00364e01.pphosted.com [148.163.135.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C5383A17F0 for <stir@ietf.org>; Thu, 17 Mar 2022 20:50:04 -0700 (PDT)
Received: from pps.filterd (m0167071.ppops.net [127.0.0.1]) by mx0a-00364e01.pphosted.com (8.16.1.2/8.16.1.2) with ESMTP id 22I3isLY027450 for <stir@ietf.org>; Thu, 17 Mar 2022 23:50:03 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=columbia.edu; h=mime-version : from : date : message-id : subject : to : content-type; s=pps01; bh=q6zLk76764i+fnbw4ITi1dlpbs5gbQ9uSLYAUs7YYv0=; b=LNNbpwGaGWguzlJWserSJyPuH3J9QMbJXMOJRcxsLk01i6q2bnB2OcvIufEeCYcOtYZK otvaGjY6wp1DbTgOIVYZPaklkucHpHgqCh8Gko5QyrWj0mm22t7uBdrD8uOpYWuVUHMx gtLNKMflBRca5SbhLBEhcTrqrgY+4UPK3Gukeyuvdv5/YOO6mB6MO3Ql44VvX7LIBG8k ePZfp2xuMdpwY0iucnCTEeDaEm2w+LuXEshOuZjmkiB/BbcpC0QfEZLxXHBaHzu9gxYO /UTog7H8dEoKN4LRrAcdiBTqbBissVtW3Af4w/vyKbFdznt7Sz/yNu2jqlazc49UGPNZ oQ==
Received: from sendprdmail20.cc.columbia.edu (sendprdmail20.cc.columbia.edu [128.59.72.22]) by mx0a-00364e01.pphosted.com (PPS) with ESMTPS id 3evg7g0gkg-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <stir@ietf.org>; Thu, 17 Mar 2022 23:50:03 -0400
Received: from mail-qt1-f197.google.com (mail-qt1-f197.google.com [209.85.160.197]) by sendprdmail20.cc.columbia.edu (8.14.7/8.14.4) with ESMTP id 22I3o2jM049618 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for <stir@ietf.org>; Thu, 17 Mar 2022 23:50:02 -0400
Received: by mail-qt1-f197.google.com with SMTP id h11-20020a05622a170b00b002e0769b9018so4908551qtk.14 for <stir@ietf.org>; Thu, 17 Mar 2022 20:50:02 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=q6zLk76764i+fnbw4ITi1dlpbs5gbQ9uSLYAUs7YYv0=; b=DqEEJ+1nxXltyissiCqxX2gvOwzvj8Uvc7aJR03yBqndvztRrqX8wg49WsbL70Ja6j QSRBBzMF8lcnCSuNcxutl8s/h5zhp1ADS3mbFyvANrLPiYFIbpQcZXKobKwzgikU/XRH 0Gt2mav04Hv5daZthc4zpV1MYmnW4/0MUiiqPV94aQfF3AsKtNoi9pRUxT1+QOspEru2 ncTlQ4mbzT3GTivKMy5QYHPyrr3zDt+N8Cr27BCP6hc738qYV6vJJnIbZu6dRdFZ157g yYzdLUaw8SB0eP5H1r+IFxIWLPcnqn+Benk5ghX2yUpe8tNyT7OND7nJQGQt6COD8Vry fJLA==
X-Gm-Message-State: AOAM531UH1NObabPMVuNeucgPvXVcJV2Uc79z16l6EyyaZubKtkKguMY w/7q3Ql33z3IaHK7QbQh8re8/BxJ38dMWC6x3u6YRTcsBkVFmJoaLfXwJbgGq3WtcE+pV8MCfYX HWvw62h+eAKDAFqQOEjep+C9BKty9
X-Received: by 2002:a05:6214:19e5:b0:43e:c697:7b2 with SMTP id q5-20020a05621419e500b0043ec69707b2mr5930720qvc.4.1647575401894; Thu, 17 Mar 2022 20:50:01 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJytKch7oQDLWinGSBDoYQofBhEl7WwfFvZIqvduAMrASihPFx//EWniHl+g1br/gHkSDLFiGKc/ZdOL1WUWkFU=
X-Received: by 2002:a05:6214:19e5:b0:43e:c697:7b2 with SMTP id q5-20020a05621419e500b0043ec69707b2mr5930711qvc.4.1647575401466; Thu, 17 Mar 2022 20:50:01 -0700 (PDT)
MIME-Version: 1.0
From: Henning Schulzrinne <hgs@cs.columbia.edu>
Date: Thu, 17 Mar 2022 23:49:35 -0400
Message-ID: <CACgrgBbUASA4HTukPwZL9V=8XOMTx_keZcDh-pVc0eSJYtVS8w@mail.gmail.com>
To: SIPCORE <sipcore@ietf.org>, stir@ietf.org
Content-Type: multipart/alternative; boundary="0000000000008ba1c505da760a95"
X-Proofpoint-GUID: zNrRYksRvBHspYvCvP-WwmvFZi3si4CU
X-Proofpoint-ORIG-GUID: zNrRYksRvBHspYvCvP-WwmvFZi3si4CU
X-CU-OB: Yes
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.205,Aquarius:18.0.850,Hydra:6.0.425,FMLib:17.11.64.514 definitions=2022-03-18_05,2022-03-15_01,2022-02-23_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=10 mlxlogscore=999 clxscore=1015 priorityscore=1501 adultscore=0 suspectscore=0 lowpriorityscore=10 malwarescore=0 impostorscore=10 spamscore=0 phishscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2202240000 definitions=main-2203180018
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/650Lvq0X91sT7eogtcyVkP1Wzwc>
Subject: [stir] draft-ietf-sipcore-callinfo-04 (call-reason)
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Mar 2022 03:50:10 -0000

There was a brief discussion on this in August 2020, but now that the draft
is stabilizing, I'd like to comment on the call-reason parameter. I'm not
sure I found all the discussions, with only an August 2020 discussion (from
Paul Kyzivat and Chris Wendt) popping up. In any event, as drafted, this
seems to be exactly duplicating the Subject header. Having two header
fields that do pretty much the same thing seems unwise.

There was discussion on structured content, but this doesn't seem possible
to add without breaking backwards-compatibility. You really don't want to
add JSON to an existing string, or other parameters.

There seems to be no obvious reason why systems that drop Subject would
treat call-reason with more care (or deliver it to the UA). Indeed, richer
information is likely to make the handling more challenging - the more
stuff the UA can embed, the more likely that this will cause security
concerns. (You really don't want to include full HTML with JavaScript
here...)

It is also a poor addition to the callinfo header, as the RCD will likely
be generated by a trusted entity, such as the carrier or the enterprise
PBX, while the call-reason has to be generated, on a call-by-call basis, by
the UA, either via human input or via the robot generating the (hopefully
wanted) calls.

I think there are three reasons that Subject has not seen much use:

(1) For person-to-person phone calls, there seems to be little appetite to
add more overhead to making calls. If I want to text ahead ("I'll call you
shortly about the vet"), people will likely do that instead. Call-reason or
Subject are not substitutes for texting-ahead.

(2) For enterprise-to-consumer calls, this seems like an opportunity for
potential abuse and spam.

(3) SIP headers provided by the end system or end user don't seem to
survive the paranoia of B2BUAs and various other in-call entities.

All of these would likely apply to call-reason, with the additional issue
of who-generates-what added for complexity. If the landscape has changed,
i.e., there's a willingness to deliver information UA-to-UA, then this
would apply to the Subject header as well.

Henning