[stir] STIR's basic operational model with SIP

[Dave Crocker <[e-mail]>]

Folks,

 From what I've been told offline -- but which is not explicitly 
documented in the specifications -- the intended operational framework 
for these specifications is amongst a relatively small set of service 
providers.  That is, the community of folk who are regulated and/or used 
to doing business with bilateral agreements.

This appears to produce an expectation of a service infrastructure for 
STIR that is not public.  That is, the query service for obtaining keys 
and key validation information will not be accessible to random users 
over the open Internet.

For the SIP-based portion of the validation service, this means that a 
caller or a callee with their own SIP clients will not be able to 
participate in the validation process.

If that is not correct, would someone please explain?

If it is correct, why is that an acceptable operational choice for a SIP 
service?

d/
-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net