[VoiceOps] Identity Header Test Tool

[Pete Eisengrein]

Thanks for this, David, very helpful.

Earlier Lee asked, *"If term provider 2 has TDM trunks with term provider
1, there would be no headers to pass, correct?"* This is one of the (many)
flaws to the SHAKEN implementation. It ignores the fact that there's still
tons of legacy telco networking out there. And as such, an awful lot of
traffic is having its attestation stripped. There's an out-of-band API
lookup that can be used, but I don't think anyone's using it, really.
Today, a small percentage of traffic we receive is attested. It's hard to
turn on verification if most of the traffic is going to get flagged as
possible spam -- it's like the boy who cried wolf.







On Sun, Jul 3, 2022 at 11:13 AM David Frankel <dfrankel at zipdx.com> wrote:

> Last week I was forwarded a note from this list regarding tools to test and
> debug SHAKEN Identity headers. That prompted us to stitch together some
> modules we already had in an attempt to help.
>
> What we have is at http://identity.legalcallsonly.org. You can call one of
> the test numbers listed on that page, and if we receive your header, we'll
> read you a six-digit code. Disconnect and then plug the code into the box
> on
> the web form, and we'll show you details of that Identity header.
>
> Perhaps most importantly, you'll be able to see if the header we received
> is
> the one you sent. In addition, we parse the header and try to tell you if
> it
> is correctly formatted and valid.
>
> Currently we have a couple of geographic DIDs and three toll-free numbers
> (each using different underlying providers). So far we aren't having a lot
> of success getting the Identity headers on the TFNs; we're working to
> improve that.
>
> Suggestions welcome. We hope the tool provokes more discussion about best
> practices regarding making the Authentication Framework as functional and
> useful as possible.
>
> Happy 4th of July!
>
> David Frankel
> ZipDX LLC
> St. George, UT USA
>
>
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20220707/50ca6bdc/attachment-0001.htm>