<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>T-Mobile is using PA certificates, I'm passing live traffic with them right now. What I've heard so far intercarrier is just Comcast (private cert), T-Mobile (STI-PA cert), Twilio (not sure), and us (STI-PA cert). Verizon and AT&T have just been doing private
interconnect from what I understand.</p>
<p><br>
</p>
<p>-Paul<br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> VoiceOps <voiceops-bounces@voiceops.org> on behalf of Dave Frigen <dfrigen@wabash.net><br>
<b>Sent:</b> Monday, July 27, 2020 3:49 PM<br>
<b>To:</b> voiceops@voiceops.org<br>
<b>Subject:</b> Re: [VoiceOps] Production STIR/SHAKEN</font>
<div> </div>
</div>
<div>
<div style="">
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif">Paul, this is in reply to your question posted on July 24<sup>th</sup>: Currently there are 34 active STI-GA SHAKEN participants authorized to exchange SHAKEN tokens in the U.S. While Canada and the UK are working
on SHAKEN, to my knowledge there are no PA’s or CA’s to operate and approve new applicants in those countries.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif">T-Mobile, Comcast, Verizon, and AT&T were the first four carriers to adopt SHAKEN and are still temporarily using self-signed certificates (not official PA authored certificates that Transnexus and the rest of
the U.S. uses). This is due to FCC expectations of having a SHAKEN platform in production at the beginning of the year and there not being a PA (Policy Administrator), nor any CA’s (Certificate Authorities) at that time. Self-signing certificates were the
only means of operating the SHAKEN platform in the FCC timeframe. We, as out-of-band (OOB) operators do not have the ability to exchange certs. (certificates) with the self-signers today. It goes without saying that these networks are huge and not easily converted.
T-Mobile and Comcast are in the process of converting to official PA authored certificates, they are expected to be on-line in the coming month. Both AT&T and Verizon are in the engineering stages and planning to convert in the future. I reside on a board
seat of the national STI-GA governance board as an NTCA representative, and have asked the self-signers to begin publishing their self-signing root addresses so every can exchange tokens in the interim regardless of whether or not they are official PA authored
certs. I anticipate self-signing certs going away, and likely within the coming months. In summary, we, as out-of-band (OOB) operators, do not have the ability to exchange certs. with the self-signers today, hopefully they will agree to publish their root
certificate addresses soon.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif">I want to prequalify this next statement by congratulating any TDM provider that is adopting OOB or some sort of TDM SHAKEN technology. You’re doing the right thing, because TDM isn’t going away anytime soon. And
all Americans deserve the right to have their calls officially authenticated and verified just like any iP network provider’s calls. OOB and other technologies for use on TDM calls for SHAKEN are in the infant stages and are just now being discussed and considered
for permanent TDM standards. The body that is adopting new TDM standards is the </span>
<span style="font-family:"Verdana",sans-serif">PTSC Non-IP Call Authentication Task Force, led by ATIS. Anyone is welcome to become a member of the task force. There is a nominal $250 fee for organizations that are not already an ATIS member. If you want more
information on how to join the committee, I’d be glad to help. Belonging to the committee is one of many ways to comply with the FCC’s mandate for TDM providers to adopt SHAKEN.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif">As to the original question of who to test OOB with, Transnexus to Transnexus will allow for both authentication and verification testing; or Transnexus to Netnumber or Neustar. These would be OOB to OOB calls.
Regarding OOB to IP, or the reverse……it’s my understanding that OOB to in-band will only work one way today. OOB can authenticate a PA certificate that in-band can receive. HTTP Post software or a Call Placement Service (CPS) is required for an IP provider
to post a token to an OOB provider. With that being said, Wabash is a Transnexus customer and would be more than happy to test OOB SHAKEN with any provider desiring to do so. Let me know and I’ll get you in touch with our engineers.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif">Lastly, I’d like to add that Wabash originally implemented OOB SHAKEN into a C-15 with no CapEx, just existing translations modifications. After running the Transnexus/ClearIP platform for a while, we decided to
upgrade our SBC to a cloud solution for under $100 a month, but to date that is our only capital expense to be OOB SHAKEN enabled. So, don’t let your switch vendor insist that you break-the-bank to operate OOB.</span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif"> </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-family:"Verdana",sans-serif">Dave </span></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<b><span style="font-size:22.0pt">Dave Frigen</span></b></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<b><i><span style="font-size:12.0pt">Chief Operating Officer </span></i></b></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
Wabash Communications CO-OP | www.wabash.net</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
Office: 618.665.3311 </p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<a href="https://www.facebook.com/wabashcommunicationscoop/"><span style="color:windowtext; text-decoration:none"><img naturalheight="26" naturalwidth="26" id="Picture_x0020_1" style="width:.2708in; height:.2708in" width="26" height="26" border="0" src="cid:image001.png@01D66409.4059F990"></span></a><a href="https://www.instagram.com/wabashcommunications/"><span style="color:windowtext; text-decoration:none"><img naturalheight="26" naturalwidth="26" id="Picture_x0020_2" style="width:.2708in; height:.2708in" width="26" height="26" border="0" src="cid:image002.png@01D66409.4059F990"></span></a><a href="https://www.youtube.com/channel/UCWoo3wyybeYEnTpTxK2jbUg"><span style="color:windowtext; text-decoration:none"><img naturalheight="26" naturalwidth="26" id="Picture_x0020_3" style="width:.2708in; height:.2708in" width="26" height="26" border="0" src="cid:image003.png@01D66409.4059F990"></span></a> <a href="https://www.linkedin.com/company/18788687/admin/"><span style="color:windowtext; text-decoration:none"><img naturalheight="24" naturalwidth="24" id="Picture_x0020_4" style="width:.25in; height:.25in" width="24" height="24" border="0" src="cid:image004.png@01D66409.4059F990"></span></a></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
<a href="http://www.wabash.net/"><span style="color:windowtext; text-decoration:none"><img naturalheight="66" naturalwidth="193" id="Picture_x0020_0" alt="WabashCom_CO-OP_RGB.png" style="width:2.0104in; height:.6875in" width="193" height="66" border="0" src="cid:image005.png@01D66409.4059F990"></span></a></p>
<p style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
</div>
</div>
</div>
</div>
</body>
</html>