[stir] Re: Verifiable Voice Protocol (VVP)
Orie <orie@or13.io> Fri, 10 October 2025 13:18 UTC
Return-Path: <orie@or13.io>
X-Original-To: stir@mail2.ietf.org
Delivered-To: stir@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id CB7EF70AB09A for <stir@mail2.ietf.org>; Fri, 10 Oct 2025 06:18:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=or13.io
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SACpjuGICIo8 for <stir@mail2.ietf.org>; Fri, 10 Oct 2025 06:18:38 -0700 (PDT)
Received: from mail-vk1-xa2c.google.com (mail-vk1-xa2c.google.com [IPv6:2607:f8b0:4864:20::a2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5A5B670AB043 for <stir@ietf.org>; Fri, 10 Oct 2025 06:18:17 -0700 (PDT)
Received: by mail-vk1-xa2c.google.com with SMTP id 71dfb90a1353d-54bc6f33513so1288908e0c.2 for <stir@ietf.org>; Fri, 10 Oct 2025 06:18:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=or13.io; s=google; t=1760102297; x=1760707097; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=mP687NO3mJF6hHNh18vq2k9Fu7l7EFr/1VhMhOsM6jg=; b=aFUD8cE+r6fbaVZ0fWO8mO3bDJKm3YJDnN2UXLf+Qwlt2bUS76YjA3Ixw+FuLmn6rA 0XN4p5t+f9WQZlAnF5n8j2xH6zHMyFc2ph8zczKqOl08g7iaBHtV/cTR5nqtN+EbMBAQ cscbjOEg5c7AbNOvikz4s/0lmD9/ZzSq7D8QQVNPJLo+yEyJIQE611Dx2oXQlOFpnHcH TJlE3r4n5ebz485WVgRClzy7P+7GUKxpG38ptzpBLCR56yMmLe+tfEOBMiXWwRgb1jAG FMvgwa792Plx3b4gdTS9gEuPXIM8QkSokaJjNLAZtGByBXxJfy0z3EX9MrTwjhUxBn1f Wskw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1760102297; x=1760707097; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=mP687NO3mJF6hHNh18vq2k9Fu7l7EFr/1VhMhOsM6jg=; b=iSOpuFntx4iH4HYJ3R3h3ccDjiYhLsQ2fzvK7yvk/eaP5/xcJpa8FE/pxf99uj+60Z gXDK1xKLWSdzF+dE4pPYEHf7yMi0Rc1SGamTkfbmo8lUBZTO5jcEh/BRoVQs9graaqDR DyTfPBL0BHwgWIXzbYr1/MY0Nu7a/XVt6X9EEYk7uJ+ipik27Z4CaVBwuya/a+QtIXFc TCjwRWWVCitLjZ4Tks7T5FwRbu3gKo8THclRv+QY/FE29QfQzsJKIfI/cmiAvuzF+P7U Hb+hmqzpcfbBfLXG5KJ+0w1cD8lsfH37HY0sr4baC8LFyGyingTYsgj8yIsx2kfgkLzw /LxA==
X-Forwarded-Encrypted: i=1; AJvYcCUH9A5buaT6kxBMknI3aoHTqy99RshOdxX0QVl8miH9dJN6ExRx83Wh8/zEe44CY23EpZKS@ietf.org
X-Gm-Message-State: AOJu0YxV6ccFjqaG+edds4bQMYp2EHbzh+rI+i5IRO+l7svmXBbB4Iuh revwdJU7UY97ml6NLV7Cf706s4CZKnPR3hfz3W4FqG7TBRLwF/sHaZBdNhugNbwKkCcuKZJOg1C AqNJ/4ZHzZweXx24MHR+OGZ1ZBbb526v/SGtCadLxRw==
X-Gm-Gg: ASbGncvcLBXUIcQbh46tMTtXXtOc8MqcWve4jE0AyLGZWWiC0RZfNDh5y5jNVMtgFuQ T1uGe6jJTVppZSviwb7MssuwBWJQvhdGxr9QYVyaeDeqcSIo+spvvTfPCzhG43HhyNPGoFJc9BE evLAIf4mtcbixbU8cndlHmbEs27GC5yEgCKGZ/sjm8DD4m3n7BjDsPnh1H5vs8dQ+lTvTp03ti3 YGZvlOuiB9rAy9SUWY0jI+EOAYx9XaDw6iJjHG6trX/9UIQux7C4YPpVs1jzQXvGUBwsxX8goRG Nk0seriDcVAkgTd8/wmK1ooSw78=
X-Google-Smtp-Source: AGHT+IF4opfiDT2D5xSCrXePLh7U5v/yGYWfUogmEtxC6qHeCEXJllS0miiT7eMfg5MkNw4lYwM4GFSo4KdjEajbiV0=
X-Received: by 2002:a05:6122:4592:b0:549:f04a:6eb3 with SMTP id 71dfb90a1353d-554b8b95420mr4816146e0c.9.1760102296787; Fri, 10 Oct 2025 06:18:16 -0700 (PDT)
MIME-Version: 1.0
References: <CAD5OKxsCDRA_TWfqBNQjpoACntFfqOS98cVHL8aWNR8YKvjR+Q@mail.gmail.com> <0687B06D-E2A6-4461-8486-91D6DF64CF85@chriswendt.net> <CH3PR13MB67474A4BBA37A797BD655CD9E1E1A@CH3PR13MB6747.namprd13.prod.outlook.com> <CAD5OKxsDrC9r-skA_h+=hiNcFELONEKncvz-woiN2wwOs9JcvQ@mail.gmail.com> <CH3PR13MB6747A843414CC671AA4588BFE1E1A@CH3PR13MB6747.namprd13.prod.outlook.com> <D3BB43A7-4249-4BB9-8237-16118933E742@vigilsec.com>
In-Reply-To: <D3BB43A7-4249-4BB9-8237-16118933E742@vigilsec.com>
From: Orie <orie@or13.io>
Date: Fri, 10 Oct 2025 08:18:05 -0500
X-Gm-Features: AS18NWCpB_ueXDXc6f0F1CY7HcHy0DJu1sPSAV-pJKauGjnLhN5WmK01Biiqm8M
Message-ID: <CAMzqgoysSOsXTzn6xH2ok_bx7yjpbONQVSzyj25tfZ2E2oeUaQ@mail.gmail.com>
To: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="0000000000002b2e4c0640cdc038"
Message-ID-Hash: MZMDKHAS2PVLXJMMZTXUIFEIQJ5XVEBG
X-Message-ID-Hash: MZMDKHAS2PVLXJMMZTXUIFEIQJ5XVEBG
X-MailFrom: orie@or13.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-stir.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Pierce Gorman <Pierce.Gorman@numeracle.com>, Chris Wendt <chris-ietf@chriswendt.net>, Brett Nemeroff <Brett.Nemeroff@numeracle.com>, Richard Shockey <richard@shockey.us>, IETF STIR Mail List <stir@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [stir] Re: Verifiable Voice Protocol (VVP)
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/gcWFTndlmnVZhxglTC2G3Z9w6BA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Owner: <mailto:stir-owner@ietf.org>
List-Post: <mailto:stir@ietf.org>
List-Subscribe: <mailto:stir-join@ietf.org>
List-Unsubscribe: <mailto:stir-leave@ietf.org>
Hi Daniel ! & STIR, First time seeing this draft : ) There have been some STIR presentations of applicability of the "Issuer, Holder / Presenter, Verifier" model for verifiable credentials to STIR WG, at previous IETFs. For folks less familiar with Verifiable Credentials, they are sorta like https://datatracker.ietf.org/doc/html/rfc5755 They are also worked on in OAUTH and SPICE, with primitives coming from JOSE / COSE (or other security mechanisms like https://www.w3.org/TR/vc-data-integrity/, or https://trustoverip.github.io/tswg-acdc-specification/ ) Here are some related drafts to consider: - https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/ - https://datatracker.ietf.org/doc/draft-wendt-stir-vesper/ The security technology "ACDCs" have also been proposed in this draft: - https://datatracker.ietf.org/doc/draft-smith-satp-vlei-binding/ I'll leave it to the STIR chairs to handle the agenda discussions, just thought I would share some background on this topic. Regards, OS, ART AD On Wed, Oct 8, 2025 at 12:44 PM Russ Housley <housley@vigilsec.com> wrote: > Pierce: > > For historical reasons, the tooling fills in “Network Working Group“ if > the author does not specify a working group. The final RFC is approved, > will just indicate "IETF" > > Russ > > > On Oct 8, 2025, at 12:14 PM, Pierce Gorman <Pierce.Gorman@numeracle.com> > wrote: > > Is anyone aware of an effort to bring VVP into the STIR working group? > > The protocol specification posted in the IETF archive under the “Network > Working Group“ (?) defines a new kind of STIR PASSporT using numerous > non-STI verifiable credentials. > > Verifiable Voice Protocol > <https://www.ietf.org/archive/id/draft-hardman-verifiable-voice-protocol-00.html> > > Pierce > > > _______________________________________________ > stir mailing list -- stir@ietf.org > To unsubscribe send an email to stir-leave@ietf.org >
- [stir] For those of you who follow this kind of s… Richard Shockey
- [stir] Re: For those of you who follow this kind … Roman Shpount
- [stir] Re: [art] Re: For those of you who follow … Richard Shockey
- [stir] Re: [art] Re: For those of you who follow … Roman Shpount
- [stir] Re: [art] Re: For those of you who follow … Brett Nemeroff
- [stir] Re: [art] Re: Re: Re: For those of you who… Tim Bray
- [stir] Re: [art] Re: Re: Re: For those of you who… Brett Nemeroff
- [stir] Re: [art] Re: For those of you who follow … Richard Shockey
- [stir] Re: [art] Re: For those of you who follow … Roman Shpount
- [stir] Re: [art] Re: For those of you who follow … Chris Wendt
- [stir] Re: [art] Re: For those of you who follow … Pierce Gorman
- [stir] Re: [art] Re: For those of you who follow … Brett Nemeroff
- [stir] Re: [art] Re: For those of you who follow … Roman Shpount
- [stir] Verifiable Voice Protocol (VVP) Pierce Gorman
- [stir] Re: [art] Re: For those of you who follow … Pierce Gorman
- [stir] Re: [art] Re: For those of you who follow … Andy Newton
- [stir] Re: Verifiable Voice Protocol (VVP) Daniel Hardman
- [stir] Re: [art] Re: Re: Re: For those of you who… Roman Shpount
- [stir] Re: Verifiable Voice Protocol (VVP) Russ Housley
- [stir] Re: [art] Re: Re: Re: For those of you who… Richard Shockey
- [stir] Re: [art] Re: Re: Re: For those of you who… Roman Shpount
- [stir] Re: [art] Re: Re: Re: For those of you who… Henning Schulzrinne
- [stir] Re: [art] Re: Re: Re: For those of you who… Roman Shpount
- [stir] Re: [art] Re: Re: Re: For those of you who… Pierce Gorman
- [stir] Re: Verifiable Voice Protocol (VVP) Orie
- [stir] Re: Verifiable Voice Protocol (VVP) Peterson, Jon
- [stir] Re: [art] Re: For those of you who follow … Brett Nemeroff
- [stir] Re: [art] Re: Re: Re: For those of you who… Richard Shockey
- [stir] Re: Verifiable Voice Protocol (VVP) Daniel Hardman
- [stir] Re: [art] Re: For those of you who follow … Chris Wendt
- [stir] Re: Verifiable Voice Protocol (VVP) Brett Nemeroff