<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>If you operate a small PBX for a business your approach is fine.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>If you operate a large PBX, or just have lots of high toll rate calls, the price difference between carriers can add up to a lot money every day. These operators will route their calls to whomever offers the best rate for that route. <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>And that’s the problem being solved. STIR/SHAKEN makes it tough for spoofers, but also tough for businesses doing LCR. Sadly, the easier it becomes to implement STIR/SHAKEN (telling the next hop along the route to trust your identity), the easier it will be for spoofers to do the same. I suspect it won’t be long until unscrupulous service providers undermine STIR/SHAKEN <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> asterisk-users [mailto:asterisk-users-bounces@lists.digium.com] <b>On Behalf Of </b>Sebastian Nielsen<br><b>Sent:</b> Thursday, March 11, 2021 7:34 PM<br><b>To:</b> 'Mailing List' <asterisk-users@lists.digium.com><br><b>Subject:</b> Re: [asterisk-users] STIR/SHAKEN<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=SV>I reallt don’t understand why people simply use the same operator to terminate your calls, which also provide DIDs for you.<o:p></o:p></span></p><p class=MsoNormal><span lang=SV><o:p> </o:p></span></p><p class=MsoNormal><span lang=SV>Then you don’t need to touch this at all, your carrier will do all the STIR/SHAKEN handling for you, you are just a PBX customer.<o:p></o:p></span></p><p class=MsoNormal><span lang=SV>And then the operator then simply limits your account to only present your DID as outgoing number.<o:p></o:p></span></p><p class=MsoNormal><span lang=SV><o:p> </o:p></span></p><p class=MsoNormal><span lang=SV>Seems to be a unneccesary complicated solution just to have your numbers at company 1 and have your call termination at company 2.<o:p></o:p></span></p><p class=MsoNormal><span lang=SV>So fricking unneccessary.<o:p></o:p></span></p><p class=MsoNormal><span lang=SV><o:p> </o:p></span></p><p class=MsoNormal><span lang=SV>What I know there is requirements of number portability, so as long as company 2 can handle DIDs (ergo ”own” DIDs) you should be able to move your DIDs from company 1 to company 2 – then company 2 owns your DIDs.<o:p></o:p></span></p><p class=MsoNormal><span lang=SV><o:p> </o:p></span></p><p class=MsoNormal><span lang=SV>Best regards, Sebastian Nielsen<o:p></o:p></span></p><p class=MsoNormal><span lang=SV><o:p> </o:p></span></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-left:65.2pt'><b><span lang=SV>Från:</span></b><span lang=SV> <a href="mailto:asterisk-users-bounces@lists.digium.com">asterisk-users-bounces@lists.digium.com</a> <<a href="mailto:asterisk-users-bounces@lists.digium.com">asterisk-users-bounces@lists.digium.com</a>> <b>För </b>Alexander Perkins<br><b>Skickat:</b> den 12 mars 2021 01:23<br><b>Till:</b> <a href="mailto:asterisk-users@lists.digium.com">asterisk-users@lists.digium.com</a><br><b>Ämne:</b> Re: [asterisk-users] STIR/SHAKEN<o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>Hi Jeff. What exactly do you mean by the 'inbound piece'? I've spent quite a lot of time with the folks at TILTX understanding the framework; but I am not exactly sure what you mean by the 'inbound piece.<o:p></o:p></span></p><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>Greg/Doug, like many folks here, we use LCR. So, the terminating carrier is not necessarily the one that issued us the telephone numbers. So, they will not sign it or simply cannot sign it. Remember that a very limited number of companies can actually sign the calls; the rest have to buy it from these 'Service Providers'. <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>And there is another situation - the company you purchase your numbers from and the company you place your calls through may be different and both may not be able to sign your calls. Again, a very limited number of service providers that can actually sign your calls. So what do you do in that scenario? You have to find a Service Provider that can:<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>1. Verify you own that telephone number(s).<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>2. Sign your calls.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>3. Provide you with the technical means to do so.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>So, that's that... I hope this makes sense. <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:65.2pt'><span lang=SV>Alex<o:p></o:p></span></p></div></div></div></body></html>