%% You should probably cite draft-ietf-stir-oob instead of this I-D. @techreport{rescorla-stir-fallback-00, number = {draft-rescorla-stir-fallback-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-rescorla-stir-fallback/00/}, author = {Eric Rescorla}, title = {{Secure Caller-ID Fallback Mode}}, pagetotal = 11, year = 2013, month = jul, day = 15, abstract = {A major challenge with RFC 4474-style identity assertions has been that SIP operates in highly mediated and interworked environments. SIP requests may pass through gateways, policy enforcement devices or other entities that receive SIP requests and effectively act as user agents, re-initiating a request. In these circumstances, intermediaries may recreate the fields protected by the RFC4474 signature, making end-to end integrity impossible. This document describes a mechanism for two compliant endpoints to exchange authentication data even in the face of intermediaries which remove all additional call signaling meta-data or which translate from SIP into protocols incapable of understanding identity meta-data (e.g., where one side is the PSTN).}, }