Subject: Re: [stir] Call For Adoption of draft-peterson-stir-servprovider-oob

From: "Peterson, Jon" <[email-masked]>
Date: Sun, 27 Sep 2020 22:31:19 +0000

Thanks for the heads-up, and yes, this has been repaired in the AUTH 48 process for stir-oob.

Jon Peterson
Neustar, Inc.

From: Piotr Gregor <[email-masked]>
Date: Monday, August 24, 2020 at 5:09 PM
To: Russ Housley <[email-masked]>
Cc: IETF STIR Mail List <[email-masked]>, "Peterson, Jon" <[email-masked]>, Eric Rescorla <[email-masked]>
Subject: Re: [stir] Call For Adoption of draft-peterson-stir-servprovider-oob

I believe there is an error in draft-ietf-stir-oob-07, here in section 9 it is said that call originates for destination 2.222.555.2222
but then 2.222.222.2222 appears in places I highlighted:

9<https://urldefense.com/v3/__https:/tools.ietf.org/html/draft-ietf-stir-oob-07*section-9__;Iw!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdTjMWlRsw$>.  Example HTTPS Interface to the CPS

(...)

   Assume that an authentication service has created the following

   PASSporT for a call to the telephone number 2.222.555.2222

(...)

   Through some discovery mechanism (see Section 10<https://urldefense.com/v3/__https:/tools.ietf.org/html/draft-ietf-stir-oob-07*section-10__;Iw!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdQ2wNRsUA$>), the authentication

   service discovers the network location of a web service that acts as

   the CPS for 2.222.555.2222.

(...)

   Having concluded the numbered steps in Section 8.1<https://urldefense.com/v3/__https:/tools.ietf.org/html/draft-ietf-stir-oob-07*section-8.1__;Iw!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdSkY1ufcw$>, including

   acquiring any token (per Section 6.1<https://urldefense.com/v3/__https:/tools.ietf.org/html/draft-ietf-stir-oob-07*section-6.1__;Iw!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdTPr31zLw$>) needed to store the PASSporT at

   the CPS, the authentication service then stores the encrypted

   PASSporT:

Rescorla & Peterson    Expires September 10, 2020              [Page 20]

________________________________

 <https://urldefense.com/v3/__https:/tools.ietf.org/html/draft-ietf-stir-oob-07*page-21__;Iw!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdR0UBsvaQ$>

Internet-Draft              STIR Out-of-Band                  March 2020

      POST /cps/2.222.555.2222/ppts HTTP/1.1

      Host: cps.example.com<https://urldefense.com/v3/__http:/cps.example.com__;!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdTqcnHCLg$>

(...)

   The web service assigns a new location for this encrypted PASSporT in

   the collection, returning a 201 OK with the location of

   /cps/2.222.222.2222/ppts/ppt1.

^^^^^^^^^^^^^^^^^^^^^^

->>>>>>>>>>>>> should be /cps/2.222.555.2222/ppts/ppt1

Now the authentication service can

   place the call, which may be signaled by various protocols.  Once the

   call arrives at the terminating side, a verification service contacts

   its CPS to ask for the set of incoming calls for its telephone number

   (2.222.222.2222).

^^^^^^^^^^^^^^^^^^^^^^^^^^^

->>>>>>>>>>>>> should be 2.222.555.2222

      GET /cps/2.222.555.2222/ppts

      Host: cps.example.com<https://urldefense.com/v3/__http:/cps.example.com__;!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdTqcnHCLg$>

   This returns to the verification service a list of the PASSporTs

   currently in the collection, which currently consists of only

   /cps/2.222.222.2222/ppts/ppt1.

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

->>>>>>>>>>>>> should be /cps/2.222.555.2222/ppts/ppt1

  The verification service then sends a

   new GET for /cps/2.222.555.2222/ppts/ppt1/ which yields:

(...)

cheers,

Piotr

  |  Ask me about SignalWire Work<https://urldefense.com/v3/__https:/signalwire.com/products/work__;!!N14HnBHF!qGWhl_lldmfxuAhX9SKZInSk2i34niQESzkNmAFSMCHw3jkCsoxihluS9UpnvdRgBc1c8Q$>, our new digital office alternative.