]> Somos, Inc.

US chris@appliedbits.com

Somos, Inc.

US robjsliwa@gmail.com

TransNexus

US alec.fenichel@transnexus.com

Twilio

US vanilgaikwad@twilio.com

Applications and Real-Time Secure Telephone Identity Revisited stir certificates delegate certificates This document describes a framework for the use of the Certificate Transparency (CT) protocol for publicly logging the existence of Secure Telephone Identity (STI) certificates as they are issued or observed. This allows any interested party that is part of the STI ecosystem to audit STI certification authority (CA) activity and audit both the issuance of suspect certificates and the certificate logs themselves. The intent is to establish a level of trust within the STI ecosystem that relies on the verification of telephone numbers. This involves requiring and refusing to honor STI certificates that are not listed in an established log. This effectively establishes the precedent that STI CAs must add all issued certificates to the logs and thus establishes unique association of STI certificates to an authorized provider or assignee of a telephone number resource. In the STI ecosystem, the primary role of CT is to provide verifiable trust by detecting the unauthorized issuance of duplicate telephone number level delegate certificates or provider level certificates. This provides a robust auditable mechanism for the detection of unauthorized creation of certificate credentials for illegitimate spoofing of telephone numbers or service provider codes (SPC). The framework borrows the log structure and API model from RFC6962 to enable public auditing and verifiability of certificate issuance. While the foundational mechanisms for log operation, Merkle Tree construction, and Signed Certificate Timestamps (SCTs) are aligned with RFC6962, this document contextualizes their application in the STIR ecosystem, focusing on verifiable control over telephone number or service provider code resources. The latest revision of this draft can be found at . Status information for this document may be found at . Discussion of this document takes place on the Secure Telephone Identity Revisited Working Group mailing list (), which is archived at . Subscribe at . Source for this draft and an issue tracker can be found at .

Introduction Certificate Transparency (CT) aims to mitigate the problem of mis-issued certificates by providing append-only logs of issued certificates. The logs do not themselves prevent mis-issuance, but ensure that interested parties (particularly those named in legitimate certificates or certificate chains) can detect such mis-issuance. describes the core protocols and mechanisms for use of CT for the purposes of public TLS server certificates associated with a domain name as part of the public domain name system (DNS). This document describes a conceptually similar framework that directly borrows concepts like transparency receipts in the form of SCTs and how they are used in certificates, and their specific use as part of the larger STIR framework for call authentication. This framework is defined for the specific use with both Secure Telephone Identity (STI) certificates and delegate certificates . Telephone numbers (TNs) and their management and assignment by telephone service providers and Responsible Organizations (RespOrgs) for toll-free numbers share many similarities to the Domain Name System (DNS) where there is a global uniqueness and established association of telephone numbers to regulatory jurisdictions that manage the allocation and assignment of telephone numbers under country codes and a set of numeric digits for routing telephone calls and messages over telephone networks. STI Certificates use a TNAuthList extension defined in to specifically associate either telephone service providers or telephone numbers to the issuance of STI certificates and certificate chains that are intended to represent the authorized right to use a telephone number. This trusted association can be establish via mechanisms such as Authority tokens for TNAuthList defined in . Certificate transparency and the concept of transparency is generally meant to provide a publicly verifiable and auditable representation of the creation of certificates in order to establish transparency and trust to interested parties as part of a STIR related ecosystem. There are three primary roles in the certificate transparency framework. The first role is the STI Certification Authorities (CAs) that submit all certificates to be issued to one or more transparency append-only log services. The log services are network services that implement the protocol operations for submissions of STI certificates and subsequent queries. They are hosted by interested parties in the STI ecosystem and can accept certificate log submissions from any other CA participant. The second role is the monitors that monitor the CT logs to check for potential mis-issuance as well as auditing of the log services. This role can be played by any STI ecosystem participant interested in the trust of the ecosystem or the integrity of the telephone number or provider level certificates produced in the ecosystem. CT provides a mechanism of a receipt or Signed Certificate Timestamp (SCT) that is provided as a result of submitting a certificate to the append-only log. The third role is the ecosystem participants that can send and receive receipt(s) or SCT(s) to prove and validate that a certificate was submitted to a log(s) and optionally query the log directly for further validation. The details that follow in this document will detail the specific protocols and framework for Certificate Transparency associated with STI certificates. Most of the details borrow many of the concepts of certificate transparency defined in used in web browser and web PKI environments, but provide a specific framework designed for STI certificates and their specific issuance and usage in a telecommunications and telephone number dependent ecosystem. This general mechanism could also be used for transparently logging other important STIR related metadata associations perhaps via JWTClaimConstraints defined in and or other ways defined in potential future extensions of this document.

Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

The Use of Certificate Transparency for STI Certificates CT log(s) contains certificate chains, which can be submitted by any CA authorized in a STIR ecosystem. It is expected that these CAs will contribute all their newly issued certificates to one or more logs. Note, in it is possible for certificate holders and interested third parties to contribute certificate chains, however because STIR ecosystems generally consist of entities that are authorized to be assigned telephone number resources, this does not seem to be a likely scenario. Generally, many STIR ecosystems have a controlled set of CAs that are authorized to participate as valid trust anchors. Each chain submitted to a log is required to end in a trust anchor that the log accepts. The set of trust anchors a log accepts is either the set authorized in the ecosystem or a subset of that set. When a chain is accepted by a log, a signed timestamp is returned, which is later used to provide evidence to STIR verification services (VS), defined in , that the chain has been submitted. A VS can thus require that all certificates they accept as valid are accompanied by signed timestamps. Those concerned about mis-issuance of STIR certificates can monitor the logs, checking them regularly for all new entries, and can thus check whether the service provider codes or telephone numbers for which they are responsible have had certificates issued that they did not expect. What they do with this information, particularly when they find that a mis-issuance has happened, is beyond the scope of this document. However, broadly speaking, because many existing STI ecosystems have a connection to regulated and industry environments that govern the issuance of STI certificates, they can invoke existing mechanisms for dealing with issues such as mis-issued certificates, such as working with the CA to get the certificate revoked or with maintainers of trust anchor lists to get the CA removed.

Terminology This section defines key terms used throughout the STI-CT framework to ensure clarity and consistency.

Authentication Service (AS) A service defined in that signs the identity of a telephone call using Secure Telephone Identity (STI) certificates, ensuring the authenticity of the caller information. It ensures that STI Certificates contain SCTs.

Certificate Transparency (CT) A framework designed to provide an open and verifiable log of issued certificates. It aims to detect and prevent the misuse or mis-issuance of certificates by maintaining append-only logs that can be audited by any interested party.

Delegate Certificate A type of STI certificate defined in that associates a specific telephone number or a range of telephone numbers with a particular entity used to delegate the right to use these numbers.

Log An append-only, cryptographically verifiable structure used in Certificate Transparency to record precertificate entries. Logs accept submissions, generate Signed Certificate Timestamps (SCTs), and maintain the integrity of the entries through a Merkle Tree structure.

Merkle Tree A cryptographic data structure used in logs to ensure the integrity and consistency of the entries. It is built by hashing individual log entries and combining them into a single root hash that represents the state of the entire log.

Precertificate A certificate issued by an CA that is intended to be submitted to a Certificate Transparency log before the final certificate is issued. The precertificate includes a special extension (the poison extension) that prevents it from being used as a valid certificate on its own.

Signed Certificate Timestamp (SCT) A data structure provided by a Certificate Transparency log in response to a precertificate submission. The SCT serves as a promise from the log to include the submitted precertificate in the log within a specified time frame (Maximum Merge Delay). It is included in the final certificate to prove that it has been logged.

STI Certification Authority (STI-CA) An entity responsible for issuing STI certificates in the Secure Telephone Identity ecosystem. The CA can also issue precertificates, which are submitted to CT logs before the final certificate is issued.

STI Subordinate Certification Authority (STI-SCA) An entity authorized by an CA to issue STI certificates under the authority of the STI-CA. The STI-SCA can also issue precertificates for submission to CT logs.

Signed Tree Head (STH) A cryptographically signed data structure that represents the current state of a Certificate Transparency log. It includes the root hash of the Merkle Tree and the number of entries in the log, allowing auditors to verify the integrity and consistency of the log.

TBSCertificate (To Be Signed Certificate) A component of an X.509 certificate that contains all the information about the certificate except the actual digital signature. The TBSCertificate includes fields such as the version, serial number, issuer, validity period, subject, and the subject's public key information. This component is signed by the certificate authority (CA) to create the final certificate. In the context of Certificate Transparency, the TBSCertificate of a precertificate is submitted to the log for inclusion.

Verification Service (VS) A service defined in that verifies the authenticity of a telephone call by checking the validity of the PASSporT token, including verification that certificate contains valid SCTs.

STI Certificate Transparency Framework This section describes the format and operational procedures for logs in the STI Certificate Transparency (CT) framework.

Log Entries Logs in the STI CT framework are append-only structures that store entries in a Merkle Tree and use SHA-256 for data hashing. The entries consist of precertificates submitted by STI Certification Authorities (STI-CAs) or Subordinate Certification Authorities (STI-SCAs). The log entries help ensure that all issued STI certificates can be audited for legitimacy.

Precertificate Submission An STI-CA/STI-SCA submits a precertificate to a log before the actual STI certificate is issued. The precertificate submission MUST include all necessary intermediate certificates to validate the chain up to an accepted root certificate. The root certificate may be omitted from the submission. When a precertificate is submitted: The log verifies the chain of the precertificate up to a trusted root. If valid, the log generates and returns a Signed Certificate Timestamp (SCT) to the submitter. The SCT serves as a promise from the log that the precertificate will be included in the Merkle Tree within a defined Maximum Merge Delay (MMD). Logs MUST publish a list of accepted root certificates, which aligns with those trusted in the STIR ecosystem. The inclusion of SCTs in the actual STI certificates is critical, as Verification Services (VS) will only accept certificates that include valid SCTs. Note: The data structures (e.g., LogEntry, SignedCertificateTimestamp, TreeHeadSignature) in this section follow the definitions provided in .

Log Entry Logs may impose a limit on the length of the certificate chain they will accept. The log verifies the validity of the precertificate chain up to an accepted root and, upon acceptance, stores the entire chain for future auditing.

Signed Certificate Timestamp (SCT) The SCT is included in the final STI certificate, and VS services will check the presence and validity of SCTs to verify the legitimacy of the certificate.

Merkle Tree Structure Logs use a Merkle Tree structure, with each leaf corresponding to a MerkleTreeLeaf entry. The leaves are hashed to form the tree, which is continuously updated as new entries are added. The root hash of the Merkle Tree represents the state of the log at a given time and can be used to verify the inclusion of specific entries.

Signed Tree Head (STH) The log periodically signs the root of the Merkle Tree, producing a Signed Tree Head (STH), which ensures the integrity of the log over time. Logs MUST produce an STH within the Maximum Merge Delay (MMD) to confirm that all SCTs issued have been incorporated into the Merkle Tree. Auditors and monitors can use the STH to verify that the log is operating correctly and that no entries have been tampered with.

STI-CT APIs STI-CT re-uses the REST endpoints defined in Section 4 of (the "/ct/v1/" namespace) with no semantic changes. For operational clarity it is RECOMMENDED deployments expose them under a path /stict/v1/ but the request/response formats are compatible with .

Clients This section describes various roles clients of STI-CT perform. Any inconsistency detected by clients could serve as evidence that a log has not behaved correctly, and the signatures on the data structures prevent the log from denying any misbehavior.

Submitters (STI-CA/STI-SCA) Submitters in the STI-CT framework are typically STI Certification Authorities (STI-CAs) or Subordinate Certification Authorities (STI-SCAs). These entities submit precertificates to the log as described in the APIs section. The returned Signed Certificate Timestamp (SCT) can then be used to construct the final STI certificate, which includes one or more SCTs.

Use of SCTs by Authentication and Verification Services This specification defines the STI ecosystem rely exclusively on the precertificate chain method defined in ; therefore every Certificate issued for call signing MUST already carry one or more embedded SCTs in the SignedCertificateTimestampList X.509 extension at issuance time. Because the SCT is delivered in-band with the Certificate, neither the AS nor the VS perform any network round-trips to Certificate Transparency (CT) logs on the call path.

Authentication Service Processing Optional local SCT validation - For each embedded SCT the AS MAY: compute the hash of the TBSCertificate as defined in Section 3.2 of and verify the SCT signature with the cached public key of the issuing CT log; verify that now() >= SCT.timestamp advertised by that log. Implementations SHOULD pre-compute and cache these checks at certificate activation time so that per-call signing incurs only an O(1) lookup. PASSporT construction - The PASSporT header and payload are produced per using the Certificate’s private key; the Certificate (with its SCT list) is conveyed in the 'x5u' or 'x5c' parameter. Optional Failure handling - If no SCT validates, the AS MAY treat the Certificate as unusable and refuse to sign the call.

Verification Service Processing Upon receipt of a SIP INVITE bearing an Identity header, the VS performs the steps below, all of which are deliberately offline to avoid adding call-path latency: Verify PASSporT signature with DC public key. Validate DC chain to an accepted STI trust anchor. For each embedded SCT: Verify signature against cached log key. Ensure now() >= SCT.timestamp or defer to asynchronous auditor. Implementations SHOULD cache certificates and validated SCT objects for the lifetime of the certificates' notAfter field to amortize step 3 across many calls.

Performance and Scalability Guidelines No synchronous log queries - Embedded SCTs guarantee log commitment; therefore, AS/VS MUST NOT fetch proofs on the call path. Key caching - Log public keys are static and SHOULD be loaded at process start-up; reload only on key-roll events signaled via CT or operator policy.

Monitor Monitors in the STI-CT framework play a crucial role in maintaining the integrity and trust of the ecosystem. They ensure that no certificates are mis-issued, particularly concerning the TNAuthList field, which lists the telephone numbers an entity is authorized to use.

Monitor Workflow Initialize Monitor: Set up the Monitor to periodically query the transparency logs for new entries. The Monitor MUST be configured with the base URL of each log it intends to monitor. Configure the Monitor with a list of telephone numbers (TNs) and/or associated SPC represented entities to track. Retrieve Latest STH: The Monitor retrieves the latest Signed Tree Head (STH) from each log to determine the current state of the log.

API Call: GET https://<log server>/stict/v1/get-sth Retrieve New Entries from Log: Using the STH, the Monitor retrieves new entries from the log that have been added since the last known state.

API Call: GET https://<log server>/stict/v1/get-entries?start=last_known_index&end=current_sth_index Decode and Verify Certificates: Decode each retrieved certificate and verify its validity using the provided certificate chain. Extract the entity name and TNAuthList from the certificate. Check for Mis-issuance: Compare the TNAuthList and entity name from the newly issued certificate with the Monitor's configured list. Alarm if a certificate is issued in the name of a different entity for the same TNs. Alarm and Reporting: If a mis-issuance is detected, raise an alarm and log the details for further investigation. Notify relevant stakeholders to rectify any confirmed mis-issuance. Maintain State and Continuity: Update the Monitor's last known state with the current STH index to ensure continuity in monitoring. STH Verification and Consistency Check: After retrieving a new STH, verify the STH signature. If not keeping all log entries, fetch a consistency proof for the new STH with the previous STH (GET https://<log server>/stict/v1/get-sth-consistency) and verify it. Go to Step 5 and repeat the process.

Auditor Auditors are responsible for verifying the consistency and correctness of the log, ensuring that the log behaves according to the expected protocol. Auditors can operate as standalone services or as part of another client role, such as a monitor or an VS.

Auditor Functions STH Verification: Auditors can fetch STHs periodically and verify their signatures to ensure the log is maintaining its integrity.

API Call: GET https://<log server>/stict/v1/get-sth Consistency Proof Verification: Auditors verify the consistency of a log over time by requesting a consistency proof between two STHs.

API Call: GET https://<log server>/stict/v1/get-sth-consistency Audit Proof Verification: A certificate accompanied by an SCT can be verified against any STH dated after the SCT timestamp + the Maximum Merge Delay by requesting a Merkle audit proof.

API Call: GET https://<log server>/stict/v1/get-proof-by-hash Cross-Checking Logs: Auditors can cross-check entries across different logs by comparing SCTs and verifying that entries are consistently logged across the ecosystem. Error and Inconsistency Detection: Any discrepancies or failures in verification processes can be logged as evidence of potential log misbehavior, and appropriate actions can be taken based on the findings.

Relationship to RFC6962 This document profiles the Certificate Transparency (CT) protocol as defined in for use within the STIR ecosystem. All log data structures (e.g., LogEntry, SignedCertificateTimestamp, TreeHeadSignature) and API endpoints (e.g., add-pre-chain, get-sth, get-entries, etc.) are adopted directly from . The main differences are: The expected certificate types are STI certificates as defined in and , with TNAuthList extensions. Submitters are limited to STI Certification Authorities and Subordinate Certification Authorities. Monitoring and auditing are focused on detection of mis-issued telephone number or service provider codes (SPCs). The client roles (e.g., VS, AS) interact with certificates and logs in ways specific to SIP call authentication.

Security Considerations As this specification follows the guidance of , it also inherits the security considerations defined therein. Trust in the system depends on the integrity of CT logs. The criteria for accepting a log are set by the policy of the ecosystem in which it is used, and are outside the scope of this document. Logs SHOULD be monitored for inconsistent Signed Tree Heads (STHs). Signed Certificate Timestamps (SCTs) MUST be verified by Verification Services (VS) using trusted log public keys before a certificate is relied upon, to prevent forgery or replay, and MAY be verified by Authentication Services (AS) before use for creating digital signatures. The log public keys used for this verification SHOULD be obtained and updated through the same mechanism as trust anchors. An SCT proves that a certificate was submitted to a log, not that it was issued legitimately. A certificate mis-issued by a participating CA receives a valid SCT in the same way as any other, and a Verification Service that checks SCTs alone cannot distinguish the two. Detection depends on the logs being monitored and on the results being acted upon: monitors SHOULD track Telephone Number (TN) and Service Provider Code (SPC) associations and alert stakeholders if certificates are issued outside of authorized ranges. Log entries are public, so a certificate discloses the association between the telephone numbers or service provider codes in its TNAuthList and the entity named in it. Where that association is sensitive, a deployment SHOULD consider whether a service provider code or a number range would suffice in place of individual numbers.

IANA Considerations None at this time.

This document describes an experimental protocol for publicly logging the existence of Transport Layer Security (TLS) certificates as they are issued or observed, in a manner that allows anyone to audit certificate authority (CA) activity and notice the issuance of suspect certificates as well as to audit the certificate logs themselves. The intent is that eventually clients would refuse to honor certificates that do not appear in a log, effectively forcing CAs to add all issued certificates to the logs. Logs are network services that implement the protocol operations for submissions and queries that are defined in this document. The baseline security mechanisms in the Session Initiation Protocol (SIP) are inadequate for cryptographically assuring the identity of the end users that originate SIP requests, especially in an interdomain context. This document defines a mechanism for securely identifying originators of SIP requests. It does so by defining a SIP header field for conveying a signature used for validating the identity and for conveying a reference to the credentials of the signer. This document obsoletes RFC 4474. In order to prevent the impersonation of telephone numbers on the Internet, some kind of credential system needs to exist that cryptographically asserts authority over telephone numbers. This document describes the use of certificates in establishing authority over telephone numbers, as a component of a broader architecture for managing telephone numbers as identities in protocols like SIP. The Secure Telephone Identity Revisited (STIR) certificate profile provides a way to attest authority over telephone numbers and related identifiers for the purpose of preventing telephone number spoofing. This specification details how that authority can be delegated from a parent certificate to a subordinate certificate. This supports a number of use cases, including those where service providers grant credentials to enterprises or other customers capable of signing calls with STIR. RFC 8226 specifies the use of certificates for Secure Telephone Identity Credentials; these certificates are often called "Secure Telephone Identity Revisited (STIR) Certificates". RFC 8226 provides a certificate extension to constrain the JSON Web Token (JWT) claims that can be included in the Personal Assertion Token (PASSporT), as defined in RFC 8225. If the PASSporT signer includes a JWT claim outside the constraint boundaries, then the PASSporT recipient will reject the entire PASSporT. This document updates RFC 8226; it provides all of the capabilities available in the original certificate extension as well as an additional way to constrain the allowable JWT claims. The enhanced extension can also provide a list of claims that are not allowed to be included in the PASSporT. This document defines a profile of the Automated Certificate Management Environment (ACME) Authority Token for the automated and authorized creation of certificates for Voice over IP (VoIP) telephone providers to support Secure Telephone Identity (STI) using the TNAuthList defined by STI certificates. In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.

Acknowledgments The authors would like to thank the authors and contributors to the protocols and ideas around Certificate Transparency which sets the basis for the STI ecosystem to adopt in a very straight forward way, providing trust and transparency in the telephone number world.