A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : Secure Origin Identification: Problem Statement, Threat Model, Requirements, and Roadmap
Author(s) : Jon Peterson
Henning Schulzrinne
Hannes Tschofenig
Filename : draft-peterson-secure-origin-ps-01.txt
Pages : 28
Date : 2013-07-15
Abstract:
Over the past decade, SIP has become a major signaling protocol for
voice communications, one which has replaced many traditional
telephony deployments. However, interworking SIP with the
traditional telephone network has ultimately reduced the security of
Caller ID systems. Given the widespread interworking of SIP with the
telephone network, the lack of effective standards for identifying
the calling party in a SIP session has granted attackers new powers
as they impersonate or obscure calling party numbers when
orchestrating bulk commercial calling schemes, hacking voicemail
boxes or even circumventing multi-factor authentication systems
trusted by banks. This document therefore examines the reasons why
providing identity for telephone numbers on the Internet has proven
so difficult, and shows how changes in the last decade may provide us
with new strategies for attaching a secure identity to SIP sessions.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-peterson-secure-origin-ps
There's also a htmlized version available at:
http://tools.ietf.org/html/draft-peterson-secure-origin-ps-01
A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=draft-peterson-secure-origin-ps-01
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
