Subject: [saag] STIR

From: Russ Housley <[email-masked]>
Date: Sat, 13 Mar 2021 12:59:58 -0500

STIR Certificate Delegation (draft-ietf-stir-cert-delegation):  The document is with the IESG, and a recent revision was posted to address issues raised by IESG Evaluation.  No one raised concerns with the changes.

PASSporT Extension for Rich Call Data (draft-ietf-stir-passport-rcd): Several concerns were raised during WG Last Call, and the document was revise to address them.  A hash value provides integrity for the whole jCard structure, and then for each URL in the structure, JSON pointer-like syntax is used to provide a hash value of the object that the URL will return.  This is a significant change, so WG Last Call will be repeated.

Out-of-Band STIR for Service Providers (draft-ietf-stir-servprovider-oob): A quick status was provided.  More work is needed to get the document in shape for WG Last Call.

Enhanced JWT Claim Constraints for STIR Certificates (draft-ietf-stir-enhance-rfc8226): The enhancements are straightforward, and the document is ready for WG Last Call.

 Messaging Use Cases and Extensions for STIR (draft-peterson-stir-messaging): There was a lot of interest in providing PASSporT authentication for the source of a text message.  To provide integrity of the messages, a MIME-level security mechanism will be used.  When TLS is used, it provides hop-by-hop integrity, but the MILE-level protection will be end-to-end.

Connected Identity for STIR (draft-peterson-stir-rfc4916-update):  A re-charter will be needed to take on this work, which will provide a PASSpporT for the number that a call reached.  With call forwarding and other mechanisms that can redirect a call, this is a very attractive capability.