@techreport{rosenberg-stir-callback-00, number = {draft-rosenberg-stir-callback-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-rosenberg-stir-callback/00/}, author = {Jonathan Rosenberg and Cullen Fluffy Jennings}, title = {{Bootstrapping STIR Deployments with Self-Signed Certs and Callbacks}}, pagetotal = 16, year = 2018, month = mar, day = 1, abstract = {Robocalling has become an increasing problem in the Public Switched Telephone Network (PSTN). A partial remedy for it is the provision of an authenticated caller ID in the PSTN, which today is lacking. Secure Telephone Identity Revisited (STIR) provides this through the usage of signed payloads in Session Initiation Protocol (SIP) calls. However, STIR deployment requires a global certificate system which allows for worldwide issuance of certifications that attest to which numbers a provider is responsible for. Such a system is likely to take years to rollout. To accelerate STIR deployment, this draft proposes a technique wherein STIR can be used without certificates that attest to number ownership. This is done through a combination of self-signed certificates, reverse callbacks and cached validations.}, }