Resources

FAQ: SHAKEN

• STI-GA Policy Change Request Form
• STI-GA Policy Decisions Binder
• STI-GA Operating Procedures
• STI-GA Go-Live Report
• STI Participant Agreement
• STI-TC Best Practices

• Errata to ATIS Standard on Signature-based Handling of Asserted information using toKENs (SHAKEN) – ATIS-1000074-E
• ATIS Standard on Signature-based Handling of Asserted information using toKENs (SHAKEN): Governance Model and Certificate Management – ATIS-1000080.v003
• ATIS Technical Report on Signature-based Handling of Asserted information using toKENs (SHAKEN): Governance Model and Certificate Management – ATIS-1000084.v002
• ATIS Technical Report on a Framework for Display of Verified Caller ID – ATIS-1000081
• ATIS Technical Report on SHAKEN APIs for a Centralized Signing and Signature Validation Server – ATIS-1000082
• ATIS Technical Report on a Framework for SHAKEN Attestation and Origination Identifier – ATIS-1000088
• ATIS Technical Report on Full Attestation Alternatives for Enterprises and Business Entities with Multi-Homing and Other Arrangements – ATIS-1000089

 

Specifications

• RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
• RFC 8224: Authenticated Identity Management in the Session Initiation Protocol (SIP)
• RFC 8225: PASSporT: Personal Assertion Token
• RFC 8226: Secure Telephone Identity Credentials: Certificates
• RFC 8555: Automatic Management Certificate Environment (ACME)
• RFC 8443: Personal Assertion Token (PASSporT) Extension for Resource Priority Authorization
• RFC 8588: Personal Assertion Token (PASSporT) Extension for Signature-based Handling of Asserted information using toKENs (SHAKEN)

Internet Drafts*

• draft-ietf-stir-cert-delegation-01: STIR Certificate Delegation
• draft-ietf-stir-passport-divert-07: PASSporT Extension for Diverted Calls
• draft-ietf-stir-passport-rcd-05: PASSporT Extension for Rich Call Data
• draft-ietf-stir-rph-emergency-services-00: Assertion Values for a Resource Priority Header Claim in Support of Emergency Services Networks
• draft-ietf-acme-authority-token-04: ACME Challenges Using an Authority Token
• draft-ietf-acme-authority-token-tnauthlist-05: TNAuthList profile of ACME Authority Token
• draft-ietf-stir-oob-06: STIR Out-of-Band Architecture and Use Cases

*In the IETF internet Standards Process, Internet-Drafts have no formal status, and are subject to change or removal at any time.

• NANC CATA WG Report on Selection of Governance Authority and Timely Deployment of SHAKEN/STIR
• Industry Robocall Strike Force Report
• NANC CATA WG Best Practices for the Implementation of Call Authentication Frameworks

Federal Legislation

• Pallone-Thune Telephone Robocall Abuse Criminal Enforcement and Deterrence Act

Federal Communications Commission

• Docket 20-67 – Implementation of TRACED Act

• Docket 17-97 – Call Authentication Trust Anchor

• Docket 17-59 – Advanced Methods to Target and Eliminate Unlawful Robocalls
  • November 2017, Report & Order – FCC Adopts Rules to Allow Phone Companies to Proactively Block Illegal Robocalls
  • December 2018, Second Report & Order – FCC Orders Reassigned Numbers Database.
  • June 2019 Declaratory Ruling – FCC Issues Order Allowing Call Blocking
  • March 2020, Report & Order – FCC Mandates Implementation of STIR/SHAKEN
  • July 2020, Third Report & Order – FCC Creates Call Blocking Safe Harbor
  • September 2020, Second Report & Order – FCC clarifies STIR/SHAKEN Mandate, Extensions and Exemptions
  • December 2020, Fourth Report & Order –  Expanded Call Blocking Safe Harbor and Other Blocking Requirements

• Chairman Pai Demands Industry Adopt Protocols to End Illegal Spoofing

• FCC Report: Call Blocking Tools Now Substantially Available to Consumers
• FCC Report to Congress: Caller ID Authentication Implementation Progress

• Wireline Competition Bureau: Caller ID Authentication Best Practices

Federal Trade Commission

• FTC Robocalling Page

Government Accountability Office

• FAKE CALLER ID SCHEMES: Information on Federal Agencies’ Efforts to Enforce Laws, Educate the Public, and Support Technical Initiatives

State Attorneys General

• State AG Letter on TRACED Act and Robocallling
• State AG/Industry Anti-Robocall Principles

State Legislation

• California SB-208 Consumer Call Protection Act of 2019

International

• CRTC – Status of implementation by telecommunications service providers of authentication/verification measures for caller identification
• CRTC Establishment of the Canadian Secure Token Governance Authority

*This list of STIR/SHAKEN related legislative and regulatory content is not intended to be exhaustive.