[SR-Users] How to get Stir/Shaken certificates

[David Villasmil]

There really is no way of doing what you’re thinking about. STIR/SHAKEN is
really for calls TO US/Canada numbers. Where all incoming calls should have
an Identity header which you can then validate. Even incoming international
calls should in theory include said header as a transit (attestation C)
source.

You are receiving calls from US/Canada numbers to non-US/Canada numbers.

You could, on the other hand, require your inbound providers to forward the
identity header and you could then validate it, and act accordingly.
Whether the providers will do that is another story.



On Thu, 22 Jul 2021 at 16:52, Oleg Belousov <obelousov at gmail.com> wrote:

> STIR-SHAKEN is currently only applicable for the US and Canada. To be
> part of it service provider must have an Operating Company Number (OCN)
> which allows access to NANPA Numbering Resource assignments. That also
> means (and as per my knowledge/experience) - US/Canadian SPs only sign
> calls with +1 destination. It is however worth it to check if the identity
> header is present in calls you receive. If it is here - then you can
> validate MT calls even not being part of a stir-shaken ecosystem.
> --
> obelousov.tel
>
>
> On Thu, Jul 22, 2021 at 4:31 PM Benoît Panizzon <benoit.panizzon at imp.ch>
> wrote:
>
>> Hi
>>
>> > You need first to register with STI-PA (Policy Administrator), in
>> > order to receive a token to obtain further certificates from an
>> > approved Certification Authority.
>> > In the US STI-PA is Iconectiv, in Canada - Neustar. Please check that
>> > link https://authenticate.iconectiv.com/
>>
>> Thank you for that link. This is very interesting.
>>
>> We receive an increasing number of calls from spoofed US numbers in
>> Switzerland. Mostly tech support scams. I was pondering if there is a
>> way to validate them via STIR/SHAKEN.
>>
>> We try to filter out invalid +1 prefixes and lengths, but that is a
>> rather fuzzy thing to do.
>>
>> So it would be great, if we could implement STIR/SHAKEN to validate
>> received calls from the +1 prefix.
>>
>> Unfortunately to register for a STI-PA account, only TSP with an
>> address in he United States are allowed. Do you know if there is a way
>> to register as a Swiss Ofcom registered TSP?
>>
>> (And yes, I am aware that signature signalling also has to be
>> implemented but we have to start somewhere).
>>
>> Hopefully STIR/SHAKEN can in future be deployed on a global level.
>> Germany and UK would also benefit a lot, seeing also a lot of spoofed
>> calls with their prefixes.
>>
>> --
>> Mit freundlichen Grüssen
>>
>> -Benoît Panizzon- @ HomeOffice und normal erreichbar
>> --
>> I m p r o W a r e   A G    -    Leiter Commerce Kunden
>> ______________________________________________________
>>
>> Zurlindenstrasse 29
>> <https://www.google.com/maps/search/Zurlindenstrasse+29?entry=gmail&source=g>
>>            Tel  +41 61 826 93 00
>> CH-4133 Pratteln                Fax  +41 61 826 93 01
>> Schweiz                         Web  http://www.imp.ch
>> ______________________________________________________
>>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-- 
Regards,

David Villasmil
email: david.villasmil.work at gmail.com
phone: +34669448337
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20210722/72b4c9c2/attachment.htm>