Presence and IntComm WG

[anti-forgery]

  As many of you are aware spam is all but certain to become a serious
issue in VoIP.  Among the key problems is that the From: address is so
easily forged.  This is one of the primary reasons the FCC refused
recently to create a do not spam list.  There is often no viable way to
trace spam back to its originator.

  In PSTN-land the field that is used for billing and traceback purposes
is called ANI (automatic number identification) and is _not_ user
accessible.  ANI shouldn't be confused with the Caller-Id which can be
altered.  The existence of ANI is what makes do not call lists so useful.
Callers can be traced and prosecuted, if necessary.  In effect, we need
the equivalent of ANI on the net.

  If there were a VoIP mechanism to prevent From: address forgery, we'd
have a valuable first stop toward stanching the flow of spam.
Peterson and Jennings have authored a proposal for just such a mechanism.
http://www.ietf.org/internet-drafts/draft-ietf-sip-identity-02.txt .

  I presented on this draft at the recent SIP.edu Implementor's workshop
but I don't think that SIP.edu'ers feel proprietary about it.  There
isn't an action item for us here, yet, but I thought you might find it
interesting.

  Jiri, have you read it?  Would it be hard to implement in SER?

- Jeremy

--