Re: [stir] Adding categories from sipcore-callinfo-spam to draft-ietf-sipcore-callinfo-rcd-04

Henning Schulzrinne <hgs@cs.columbia.edu> Sat, 12 March 2022 20:44 UTC

Return-Path: <hgs10@columbia.edu>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93E383A0DE1 for <stir@ietfa.amsl.com>; Sat, 12 Mar 2022 12:44:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.008
X-Spam-Level:
X-Spam-Status: No, score=-7.008 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=columbia.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AxyUmdS4vWCt for <stir@ietfa.amsl.com>; Sat, 12 Mar 2022 12:44:46 -0800 (PST)
Received: from mx0b-00364e01.pphosted.com (mx0b-00364e01.pphosted.com [148.163.139.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B3263A0DE2 for <stir@ietf.org>; Sat, 12 Mar 2022 12:44:45 -0800 (PST)
Received: from pps.filterd (m0167073.ppops.net [127.0.0.1]) by mx0b-00364e01.pphosted.com (8.16.1.2/8.16.1.2) with ESMTP id 22CKUXW6025911 for <stir@ietf.org>; Sat, 12 Mar 2022 15:44:44 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=columbia.edu; h=mime-version : references : in-reply-to : from : date : message-id : subject : to : cc : content-type; s=pps01; bh=yQ6Ex/pPXTqwILWlXoRa3WV1ZMM748uoxhIUb8JSzus=; b=JciUwZ9+J9wyfBKMFEKBJiaFZ3OKU5ztXM6BOZlFQdyyU4xv/TdS6jWhGxczqUA6g7AB 92S2RJ5Sk4THL1oGez6I+zBWXwjoq3Gx2JFo9ubmMeUlGlea993Q2JwdEhWPUt3E8zmG OYHn06AKUGeKsk0jpucP2vbAgsIHg8jjW/n5sOajyJN4Usnp5FAixmDMaG7sKHVKlsSd kt5gBcrFeU7ZzL6hjCgL+mheBX7Tkrt3f5IdRBEamqPPK7NRSet4mshqh8w1X1qOroON E10uV5JZVaCzkJX4AVYhXWYtcTfHqE8g3kuYVBpf6R0FTpPwtELOf5RvDHytetuUezCv tA==
Received: from sendprdmail22.cc.columbia.edu (sendprdmail22.cc.columbia.edu [128.59.72.24]) by mx0b-00364e01.pphosted.com (PPS) with ESMTPS id 3err9jjnub-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <stir@ietf.org>; Sat, 12 Mar 2022 15:44:44 -0500
Received: from mail-qv1-f69.google.com (mail-qv1-f69.google.com [209.85.219.69]) by sendprdmail22.cc.columbia.edu (8.14.7/8.14.4) with ESMTP id 22CKihbR076910 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for <stir@ietf.org>; Sat, 12 Mar 2022 15:44:44 -0500
Received: by mail-qv1-f69.google.com with SMTP id 33-20020a0c8024000000b0043d17ffb0bdso3414653qva.18 for <stir@ietf.org>; Sat, 12 Mar 2022 12:44:44 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=yQ6Ex/pPXTqwILWlXoRa3WV1ZMM748uoxhIUb8JSzus=; b=CmHHImbcunEB+Z6BAjcSK5Y1AhF5wJyfi+jw5HwsYzoVnJZDmMaP4wCGT+M2RhrdFc sHfBexhvbqyauUXM449t5BN/oj9TaXH35enZTQAcs2QSjh648RUngKHO6XwvzMWDxr46 BJblPJ9F3T+qeomv0qUS3bYlNbDuBuQwF7hxKCOsPnAQWmlp1fx7YrZ+uPmgXh5rKK1O GkynatKWljWIO+A4HRAYTBi8o5szWiSk2Gh/KvK2pJVJ+gRH7AK/H4TBNqvikAEteS4O qfriy0YnWe9ucwXPY2NJ5FJh1ojhoZ8+0guGcevrlJy1LWGgjgmUMtiZEOMg2EkI4tGl hr6w==
X-Gm-Message-State: AOAM5302N8hI+3uMCLVfoGJZnoGkStNuboclfkNet09z2rv609/n74ZF PRPP4t8svb5OupUWXcMI1k0pDBvYUTEcHELGJNzZNVrTDpD8lSgpVg/3w+YkXcQgqjURhR/6oB7 GiuNT2CY9shFBfpVcCncsKCOFOpe7
X-Received: by 2002:a05:620a:4554:b0:67d:6750:6a3 with SMTP id u20-20020a05620a455400b0067d675006a3mr8039503qkp.439.1647117883574; Sat, 12 Mar 2022 12:44:43 -0800 (PST)
X-Google-Smtp-Source: ABdhPJzpn7SH/p4lCns+FtODcWZ19Pm1Bl5S3tSzEeKRetx3W6FQnfgLH1PhNY8dSoql0lfKZSADRHbgzbGR+uCcPOQ=
X-Received: by 2002:a05:620a:4554:b0:67d:6750:6a3 with SMTP id u20-20020a05620a455400b0067d675006a3mr8039494qkp.439.1647117883213; Sat, 12 Mar 2022 12:44:43 -0800 (PST)
MIME-Version: 1.0
References: <CACgrgBa-7pxgHygj+-bcE36AT3REBO1VDVRpyvj+auLnHN4+ug@mail.gmail.com> <MWHPR02MB287805ED59554A1C8FF99761AC0D9@MWHPR02MB2878.namprd02.prod.outlook.com>
In-Reply-To: <MWHPR02MB287805ED59554A1C8FF99761AC0D9@MWHPR02MB2878.namprd02.prod.outlook.com>
From: Henning Schulzrinne <hgs@cs.columbia.edu>
Date: Sat, 12 Mar 2022 15:44:17 -0500
Message-ID: <CACgrgBYgmg1_auAkUOCuf07BF=CT_LVMpYA4-7eXSUwK0GM3og@mail.gmail.com>
To: "Holmes, David" <David.Holmes@t-mobile.com>
Cc: "stir@ietf.org" <stir@ietf.org>, SIPCORE <sipcore@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000055227805da0b841a"
X-Proofpoint-ORIG-GUID: WWPMr3hl5ogOkL_8LuK_81_MUuq5ZCKk
X-Proofpoint-GUID: WWPMr3hl5ogOkL_8LuK_81_MUuq5ZCKk
X-CU-OB: Yes
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.205,Aquarius:18.0.816,Hydra:6.0.425,FMLib:17.11.64.514 definitions=2022-03-12_09,2022-03-11_02,2022-02-23_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 impostorscore=10 malwarescore=0 suspectscore=0 mlxlogscore=999 lowpriorityscore=10 phishscore=0 priorityscore=1501 bulkscore=10 clxscore=1015 adultscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2202240000 definitions=main-2203120124
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/M-TvNZa9OEc2BEN9oOZmc9q_2ug>
Subject: Re: [stir] Adding categories from sipcore-callinfo-spam to draft-ietf-sipcore-callinfo-rcd-04
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Mar 2022 20:44:53 -0000

The basic idea originated in the FCC robocall strike force a few years ago,
with lots of carrier participation, so you could go back to the various FCC
reports that were produced at the time for the motivation and background
(e.g., https://transition.fcc.gov/cgb/Robocall-Strike-Force-Final-Report.pdf
and https://www.fcc.gov/file/12311/download). This I-D and requirements
have been discussed since 2017, so this is hardly a new idea. The draft
itself has been through IESG review - I just never got around to implement
the changes requested.

The basic requirement is that we want the receiving callee to make
automated or semi-automated judgements. Currently, the RCD draft has a
free-form field, but that doesn't really help for anything automated (or,
say, displaying icons or other graphical elements).

Like all spam labeling, this is probabilistic, i.e.,  if you're waiting for
perfection, this isn't for you. Current robocall filtering services already
label numbers with categories (they are in the same ballpark, but not
exactly the same and each seems to differ a bit). There are at least two
possible sources:

* For some labels, the calling party (with signing) will insert the
information, presumably for the more "positive" labels like "health" or
"government" or "personal". If a carrier lies, this becomes either a
reputational issue ("never trust labels from carrier X") or enforcement
matter (e.g., as a potential deficiency in robocall mitigation). The label
may be part of the KYC process when a carrier signs up a customer - after
all, in almost all cases this is pretty obvious ("your business says Joe's
Travel Agency. You are picking the healthcare designation how?") A
terminating carrier may, for example, decide to only trust known carriers
(say, T-Mobile) in deciding whether to convey this information to the
called party.

* An intermediary service used by the terminating carrier labels (signed)
numbers based on honeypots, crowdsourcing or number databases, probably
more focused on negative labels like "telemarketing" or "fraud". Again,
versions of this exist today.

Henning

On Sat, Mar 12, 2022 at 3:10 PM Holmes, David <David.Holmes@t-mobile.com>
wrote:

> Hi Henning,
>
> Interesting idea, but who could define the categories, and who would
> verify the claims?
>
> There may be something here, but this is a good example of where we should
> agree the use cases and then define requirements before leaping to
> solutions.
>
> BR/David Holmes/T-Mobile USA
>
> Get Outlook for Android <https://aka.ms/ghei36>
> ------------------------------
> *From:* stir <stir-bounces@ietf.org> on behalf of Henning Schulzrinne <
> hgs@cs.columbia.edu>
> *Sent:* Saturday, March 12, 2022 9:24:47 AM
> *To:* stir@ietf.org <stir@ietf.org>; SIPCORE <sipcore@ietf.org>
> *Subject:* [stir] Adding categories from sipcore-callinfo-spam to
> draft-ietf-sipcore-callinfo-rcd-04
>
> [External]
>
> In trying to get back to looking at my ancient, dusty draft, a thought: I
> think RCD would be significantly more useful if it contained standardized
> categories of callers, such as the one included in callinfo-spam. This
> allows much better user interfaces and automated handling ("send all
> political calls to voicemail", "play special ringtone for personal calls").
>
> Henning
>
>