Re: [asterisk-users] STIR/SHAKEN

2021-03-07 Thread Alexander Perkins 
Hi Greg.  In our use case, we purchase DIDs from them.  So, they are the
inbound carrier (they are a CLEC and IPES) and STIR/SHAKEN Service
Provider.  However, we do not use them for termination.  They offer service
termination, but we do not use them due to existing contracts.  So, in
order to have our calls signed, we needed them to do it.  The biggest issue
we've come across is the number of companies *able to *provide this service
is limited, especially to the Asterisk community.  I stress able to because
even though some companies are Service Providers, they are simply not
technically capable of offering it.

I will send you my contact's information at TILTX privately.  He's a
subject-matter expert with the STIR/SHAKEN framework and he's offered us
invaluable help.

Thanks,
Alex

On Sun, Mar 7, 2021 at 1:43 PM Greg Troxel  wrote:

>
> Alexander Perkins  writes:
>
> > They ended up creating an AGI script for us that handles everything.  At
> > the end of the day, all we needed to do was pull down the script, and add
> > the exten => s,n,AGI(TILTX-SHAKEN.agi) command and it handles
> > everything else.
>
> I wonder if you could step back and explain the big picture, as I'm not
> really following this.   As I understand it:
>
>   usually asterisk is used as a pbx
>
>   STIR/SHAKEN is a protocol run between carriers to prove the authority
>   to use the claimed callerid
>
>   when someone gets service from a carrier and connects to it from
>   asterisk, I would expect the carrier to basically filter the claimed
>   callerid to be from the set of values recorded with your account as
>   legit, and for the carrier to do the STIR/SHAKEN authentication.
>
> So I wonder if your asterisk instance is connecting to the PSTN as a
> top-level carrier, or, more likely, I am confused in some way.
>
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] STIR/SHAKEN

2021-03-07 Thread Jeff LaCoursiere 



On 3/7/21 2:26 PM, Doug Lytle wrote:

On 3/7/21 1:43 PM, Greg Troxel wrote:

So I wonder if your asterisk instance is connecting to the PSTN as a
top-level carrier, or, more likely, I am confused in some way.


Greg,

I think this is the case for quite alot of those here.

For me though, I just manage the on premise PBX and my carrier handles 
the STIR/SHAKEN part.


Doug



Hi,

There are issues for those of us that use multiple upstream carriers for 
call termination, with LCR for example.  If you send your calls out the 
same provider that supplies your inbound DID, your calls should get the 
"A" rating and your callers should have no issues. At present if I send 
calls out a provider that does NOT handle the DID in the caller ID 
field, it gets a "B" rating.  I don't think this will pose a problem for 
the forseeable future - I don't see carriers marking these as "spam",  
they just won't get the ultra-special "secure" mark.


Also good to note the upcoming deadline does NOT mean call blocking, 
just call tagging.  The blocking bit will be up to the end user, though 
I could see phones shipping with default settings that may do so.


Basically we can't do LCR anymore.  Outbound calls are locked to the 
provider that gave us the DID.  I'm not sure that's really a bad thing, 
its less headache than for us to try to become a signing authority.


I think the whole thing is still very fluid.  Didn't even mention call 
forwarding issues.


j

--


*Jeff LaCoursiere*
STRATUSTALK, INC. / CTO

Phone:  *+1 703.496.4990 x108*
Mobile: *+1 815.546.6599*
Email:  *j...@stratustalk.com* 
Website:*https://www.stratustalk.com*
Address:*One Freedom Square
13th Floor
Reston, VA 20190*

 
 




-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] STIR/SHAKEN

2021-03-07 Thread Doug Lytle 

On 3/7/21 1:43 PM, Greg Troxel wrote:

So I wonder if your asterisk instance is connecting to the PSTN as a
top-level carrier, or, more likely, I am confused in some way.


Greg,

I think this is the case for quite alot of those here.

For me though, I just manage the on premise PBX and my carrier handles 
the STIR/SHAKEN part.


Doug

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] STIR/SHAKEN

2021-03-07 Thread Greg Troxel 

Alexander Perkins  writes:

> They ended up creating an AGI script for us that handles everything.  At
> the end of the day, all we needed to do was pull down the script, and add
> the exten => s,n,AGI(TILTX-SHAKEN.agi) command and it handles
> everything else.

I wonder if you could step back and explain the big picture, as I'm not
really following this.   As I understand it:

  usually asterisk is used as a pbx

  STIR/SHAKEN is a protocol run between carriers to prove the authority
  to use the claimed callerid

  when someone gets service from a carrier and connects to it from
  asterisk, I would expect the carrier to basically filter the claimed
  callerid to be from the set of values recorded with your account as
  legit, and for the carrier to do the STIR/SHAKEN authentication.

So I wonder if your asterisk instance is connecting to the PSTN as a
top-level carrier, or, more likely, I am confused in some way.


signature.asc
Description: PGP signature
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] STIR/SHAKEN

2021-03-07 Thread Alexander Perkins 
Hi All.  I wanted to give an update to this as we've been working closely
with the Technology Innovation Lab (TILTX) and getting this working on our
Asterisk boxes.

They ended up creating an AGI script for us that handles everything.  At
the end of the day, all we needed to do was pull down the script, and add
the exten => s,n,AGI(TILTX-SHAKEN.agi) command and it handles
everything else.

Anyways, I am sharing this because it took us a long time to find a
STIR/SHAKEN Service Provider that would work with us.  These guys not only
worked with us, but they created something super-simple for us at no
charge.  Highly recommend them.  Here's their email address for this -
0...@tiltx.com

Hope this helps.

Alex
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users