[stir] DRAFT minutes for STIR 2020-04-20 Interim

[Robert Sparks <[e-mail]>]

Thanks to Russ for the notes.

The bluesheet section is not yet complete - people were having problems 
with the etherpad. If you were present and haven't already let me know 
by email, please do so ASAP.

------

STIR - Interim meeting - 2020-04-20

Notes
-----

Jon Peterson (Neustar) gave an update on the Out-of-Band document 
(draft-ietf-stir-oob) and the PASSporT Divert document 
(draft-ietf-stir-passport-divert).  The Out-of-Band document is with the 
RFC Editor, and PASSporT Divert got some DISCUSS positions from the IESG 
that need to be resolved.  The main concern is about “div-o” hiding the 
original called number by not including a “div” PASSporT.  The “div-o” 
text needs to be fleshed out a bit more, which would require the 
document to come back to the STIR WG.  The current thought it to 
explicitly state that “opt” is for “Original PASSporT”.

Martin Dolly (AT&T) gave an update on the Assertion Values for a 
Resource Priority Header Claim in Support of Emergency Services Networks 
dcoument (draft-ietf-stir-rph-emergency-services).  References are 
needed for “SOS” addressing, “anonymous”, and “Unregistered UE”.  Expect 
that the document will be ready for WG Last Call in July.

Jon Peterson (Neustar) talked about the Rich Call Data PASSporT 
extension document (draft-ietf-stir-passport-rcd).  Major update was to 
include a “crn” claim that corresponds to a “reason” or string 
representing the intent for a call.  This concept is also discussed in 
draft-wendt-sipcore-callinfo-rcd, which says “this message SHOULD be no 
longer than ten words.”  String is the primary format, but an extensible 
format allows flexibility. Coordination with SIPCORE is needed before 
this document reaches WG Last Call.

Eric Burger (Georgetown University) talked about an IANA registry for 
country-specific STIR Trust Anchors (draft-burger-stir-iana-cert).  
Concerns were expressed during IETF 101 that IANA would need to be an 
arbiter of who gets to put records in registry, but since then Burger 
realized that it does not matter. In real life, illegal robocall 
mitigation is all about reputation and statistics. We know there will be 
calls that have no attestation that are just fine, and we know there 
will be call that will have the highest levels of attestation that are 
illegal robocalls.  STIR increases the confidence in the identifying the 
caller, which can be used to allow, warn, or block the call.  Not 
expecting IANA to figure out who is the responsible organization, 
including delegation, for making or updating a registration.  Rather, 
IANA would confirm valid cryptographic identities.  Te re are not 
privacy concerns since the entries are associated with governments.  The 
suggestion is a “First Come First Served” registry.


BlueSheet
---------
Robert Sparks - AMS
Russ Housley - Vigil Security, LLC
Subir Das - Perspecta Labs
Jon Peterson - Neustar
Murray Kucherawy - Facebook
Ken Carlberg - FCC
David Frankel - ZipDX
Andrew Hutton - Atos
Jack Rickard - Metaswitch
Ben Campbell - Independent
Andy Gallant
Brian Rosen
Eric Burger - Georgetown University
Alissa Cooper  - Cisco
Wilhelm Wimmreuter - InCharge Systems Inc
Martin Dolly - AT&T