diff options
| author | Thomas Voss <mail@thomasvoss.com> | 2024-11-27 20:54:24 +0100 | 
|---|---|---|
| committer | Thomas Voss <mail@thomasvoss.com> | 2024-11-27 20:54:24 +0100 | 
| commit | 4bfd864f10b68b71482b35c818559068ef8d5797 (patch) | |
| tree | e3989f47a7994642eb325063d46e8f08ffa681dc /doc/rfc/rfc8787.txt | |
| parent | ea76e11061bda059ae9f9ad130a9895cc85607db (diff) | |
doc: Add RFC documents
Diffstat (limited to 'doc/rfc/rfc8787.txt')
| -rw-r--r-- | doc/rfc/rfc8787.txt | 368 | 
1 files changed, 368 insertions, 0 deletions
diff --git a/doc/rfc/rfc8787.txt b/doc/rfc/rfc8787.txt new file mode 100644 index 0000000..0d3fe32 --- /dev/null +++ b/doc/rfc/rfc8787.txt @@ -0,0 +1,368 @@ + + + + +Internet Engineering Task Force (IETF)                   J. Winterbottom +Request for Comments: 8787                   Winterb Consulting Services +Updates: 6442                                                  R. Jesske +Category: Standards Track                               Deutsche Telekom +ISSN: 2070-1721                                               B. Chatras +                                                             Orange Labs +                                                               A. Hutton +                                                                    Atos +                                                                May 2020 + + +     Location Source Parameter for the SIP Geolocation Header Field + +Abstract + +   There are some circumstances where a Geolocation header field may +   contain more than one locationValue.  Knowing the identity of the +   node adding the locationValue allows the recipient more freedom in +   selecting the value to look at first rather than relying solely on +   the order of the locationValues.  This document defines the "loc-src" +   parameter so that the entity adding the locationValue to the +   Geolocation header field can identify itself using its hostname. +   This document updates RFC 6442. + +Status of This Memo + +   This is an Internet Standards Track document. + +   This document is a product of the Internet Engineering Task Force +   (IETF).  It represents the consensus of the IETF community.  It has +   received public review and has been approved for publication by the +   Internet Engineering Steering Group (IESG).  Further information on +   Internet Standards is available in Section 2 of RFC 7841. + +   Information about the current status of this document, any errata, +   and how to provide feedback on it may be obtained at +   https://www.rfc-editor.org/info/rfc8787. + +Copyright Notice + +   Copyright (c) 2020 IETF Trust and the persons identified as the +   document authors.  All rights reserved. + +   This document is subject to BCP 78 and the IETF Trust's Legal +   Provisions Relating to IETF Documents +   (https://trustee.ietf.org/license-info) in effect on the date of +   publication of this document.  Please review these documents +   carefully, as they describe your rights and restrictions with respect +   to this document.  Code Components extracted from this document must +   include Simplified BSD License text as described in Section 4.e of +   the Trust Legal Provisions and are provided without warranty as +   described in the Simplified BSD License. + +Table of Contents + +   1.  Introduction +   2.  Terminology +   3.  Rationale +   4.  Mechanism +   5.  Example +   6.  Privacy Considerations +   7.  Security Considerations +   8.  IANA Considerations +     8.1.  Registration of "loc-src" Parameter for Geolocation Header +           Field +   9.  References +     9.1.  Normative References +     9.2.  Informative References +   Acknowledgements +   Authors' Addresses + +1.  Introduction + +   The SIP Geolocation specification [RFC6442] describes the +   "Geolocation" SIP header field, which is used to indicate that the +   SIP message is conveying location information.  [RFC6442] specifies +   that SIP intermediaries should not add locationValues to a SIP +   request that already contains a locationValue.  [RFC6442] also states +   that if a SIP intermediary adds location, it is fully responsible for +   addressing the concerns of any 424 (Bad Location Information) SIP +   response it receives.  However, some communications architectures, +   such as 3GPP [TS23-167] and ETSI [M493], prefer to use information +   provided by edge proxies or acquired through the use of core-network +   nodes before using information provided solely by user equipment +   (UE).  These solutions don't preclude the use of UE-provided location +   but require a means of being able to distinguish the identity of the +   node adding the locationValue to the SIP message from that provided +   by the UE. + +   [RFC6442] stipulates that the order of locationValues in the +   Geolocation header field is the same as the order in which they were +   added to the header field.  Whilst this order provides guidance to +   the recipient as to which values were added to the message earlier in +   the communication chain, it does not identify which node added the +   locationValue.  Knowing the identity of the entity that added the +   location to the message allows the recipient to choose which location +   to consider first rather than relying solely on the order of the +   locationValues in the Geolocation header field. + +   This document extends the Geolocation header field of [RFC6442] by +   allowing an entity adding the locationValue to identify itself using +   a hostname.  This is done by defining a new geoloc-param header field +   parameter, "loc-src".  How the entity adding the locationValue to the +   header field obtains the location information is out of scope of this +   document.  Please note that the "loc-src" parameter field does not +   alter the subject of the locationValue. + +2.  Terminology + +   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", +   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and +   "OPTIONAL" in this document are to be interpreted as described in +   BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all +   capitals, as shown here. + +3.  Rationale + +   The primary intent of the "loc-src" parameter in this specification +   is for use in emergency calling.  There are various architectures +   defined for providing emergency calling using SIP-based messaging. +   Each has its own characteristics with corresponding pros and cons. +   All of them allow the UE to provide location information; however, +   many also attach other sources of location information to support +   veracity checks, to provide backup information, or to be used as the +   primary location. + +   This document does not comment on these various architectures or on +   the rationale for including multiple locationValues.  It does +   recognize that these architectures exist and that there is a need to +   identify the entity adding the location information. + +   The "loc-src" parameter adds the location source generating the +   locationValue to allow recipients to make informed decisions about +   which of the multiple values to use. + +   The "loc-src" parameter is applicable within a single private +   administrative domain or between different administrative domains +   where there is a trust relationship between the domains.  Thus, it is +   intended to use this parameter only in trust domains where Spec(T) as +   described in [RFC3325] exists. + +   The "loc-src" parameter is not included in a SIP message sent to +   another network if there is no trust relationship.  The "loc-src" +   parameter is not applicable if the administrative domain manages +   emergency calls in a way that does not require any generation of the +   location. + +   The functional architecture to support emergency caller location +   described within ETSI [M493] is an example of an architecture where +   it makes sense to use this parameter. + +4.  Mechanism + +   The mechanism adds a geoloc-param parameter to the locationValue +   defined in [RFC6442] that identifies the hostname of the entity +   adding the locationValue to the Geolocation header field.  The +   Augmented BNF (ABNF) [RFC5234] for this parameter is shown in +   Figure 1. + +          location-source = "loc-src" EQUAL hostname +          hostname = <defined in RFC 3261> + +                         Figure 1: Location Source + +   Only a fully qualified host name is valid.  The syntax does not +   support IP addresses, and if an entity conforming to this +   specification receives a Geolocation header field with a "loc-src" +   parameter containing an IP address, it MUST remove the parameter. + +   A SIP intermediary conformant to this specification adding a +   locationValue to a Geolocation header field SHOULD also add a "loc- +   src" header field parameter so that it is clearly identified as the +   node adding the location.  A User Agent (UA) MUST NOT insert a "loc- +   src" header field parameter.  If a SIP intermediary receives a +   message from an untrusted source with the "loc-src" parameter set, +   then it MUST remove the "loc-src" parameter before passing the +   message into a trusted network. + +5.  Example + +   The following example shows a SIP INVITE message containing a +   Geolocation header field with two locationValues.  The first +   locationValue points to a Presence Information Data Format Location +   Object (PIDF-LO) in the SIP body using a content-indirection (cid:) +   URI per [RFC4483], and this is provided by the UE.  The second +   locationValue is an https URI provided by a SIP intermediary, which +   identifies itself using the "loc-src" parameter. + +      INVITE sip:bob@biloxi.example.com SIP/2.0 +      Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bK74bf9 +      Max-Forwards: 70 +      To: Bob <sip:bob@biloxi.example.com> +      From: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl +      Call-ID: 3848276298220188511@atlanta.example.com +      Geolocation: <cid:target123@atlanta.example.com>, +           <https://lis.example.com:8222/y77syc7cuecbh>; +                    loc-src=edgeproxy.example.com +      Geolocation-Routing: yes +      Accept: application/sdp, application/pidf+xml +      CSeq: 31862 INVITE +      Contact: <sip:alice@atlanta.example.com> +      Content-Type: multipart/mixed; boundary=boundary1 +      Content-Length: ... + +            Figure 2: Example Location Request (in Trust Domain) + +6.  Privacy Considerations + +   This document doesn't change any of the privacy considerations +   described in [RFC6442].  While the addition of the "loc-src" +   parameter identifies the entity that added the location in the +   signaling path, this addition provides little more exposure than +   adding a proxy identity to the Record-Route header field (privacy +   defined in [RFC3323]). + +7.  Security Considerations + +   This document introduces the ability of a SIP intermediary to insert +   a host name indicating that they added the specific locationValue to +   the Geolocation header field.  The intent is for this field to be +   used by the location recipient in the event that the SIP message +   contains multiple locationValues.  As a consequence, this parameter +   should only be used by the location recipient in a trusted network. +   Adding this parameter in an untrusted network serves solely to give +   location information to untrusted parties and is NOT RECOMMENDED. + +   As already stated in [RFC6442], securing the location hop by hop, +   using TLS, protects the message from eavesdropping and modification +   in transit but exposes the information to all SIP intermediaries on +   the path as well as the endpoint.  The "loc-src" parameter is +   applicable within a single private administrative domain or between +   different administrative domains where there is a relationship +   between the domains.  If such a trust relationship is not given, it +   is strongly recommended to delete the location information. + +   The use of this parameter is not restricted to a specific +   architecture, but using multiple locations and loc-src may end in +   compatibility issues.  [RFC6442] already addresses the issue of +   multiple locations.  To avoid problems of a possible corruption of +   the location information including the "loc-src" parameter when using +   an untrusted relationship, it is strongly recommended to delete +   location information when passed to another domain out of the trust +   domain. + +8.  IANA Considerations + +8.1.  Registration of "loc-src" Parameter for Geolocation Header Field + +   IANA has added a new SIP header field parameter for the Geolocation +   header field in the "Header Field Parameters and Parameter Values" +   subregistry (created by [RFC3968]) of the "Session Initiation +   Protocol (SIP) Parameters" registry found at +   <https://www.iana.org/assignments/sip-parameters/>. + +   Header Field:  Geolocation + +   Parameter Name:  loc-src + +   Predefined Values:  No + +   Reference:  RFC 8787 + +9.  References + +9.1.  Normative References + +   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate +              Requirement Levels", BCP 14, RFC 2119, +              DOI 10.17487/RFC2119, March 1997, +              <https://www.rfc-editor.org/info/rfc2119>. + +   [RFC3323]  Peterson, J., "A Privacy Mechanism for the Session +              Initiation Protocol (SIP)", RFC 3323, +              DOI 10.17487/RFC3323, November 2002, +              <https://www.rfc-editor.org/info/rfc3323>. + +   [RFC3325]  Jennings, C., Peterson, J., and M. Watson, "Private +              Extensions to the Session Initiation Protocol (SIP) for +              Asserted Identity within Trusted Networks", RFC 3325, +              DOI 10.17487/RFC3325, November 2002, +              <https://www.rfc-editor.org/info/rfc3325>. + +   [RFC3968]  Camarillo, G., "The Internet Assigned Number Authority +              (IANA) Header Field Parameter Registry for the Session +              Initiation Protocol (SIP)", BCP 98, RFC 3968, +              DOI 10.17487/RFC3968, December 2004, +              <https://www.rfc-editor.org/info/rfc3968>. + +   [RFC5234]  Crocker, D., Ed. and P. Overell, "Augmented BNF for Syntax +              Specifications: ABNF", STD 68, RFC 5234, +              DOI 10.17487/RFC5234, January 2008, +              <https://www.rfc-editor.org/info/rfc5234>. + +   [RFC6442]  Polk, J., Rosen, B., and J. Peterson, "Location Conveyance +              for the Session Initiation Protocol", RFC 6442, +              DOI 10.17487/RFC6442, December 2011, +              <https://www.rfc-editor.org/info/rfc6442>. + +   [RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC +              2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, +              May 2017, <https://www.rfc-editor.org/info/rfc8174>. + +9.2.  Informative References + +   [M493]     European Telecommunications Standards Institute, +              "Functional architecture to support European requirements +              on emergency caller location determination and transport", +              ES 203 178, V 1.1.1, February 2015. + +   [RFC4483]  Burger, E., Ed., "A Mechanism for Content Indirection in +              Session Initiation Protocol (SIP) Messages", RFC 4483, +              DOI 10.17487/RFC4483, May 2006, +              <https://www.rfc-editor.org/info/rfc4483>. + +   [TS23-167] 3rd Generation Partnership Project, "Technical +              Specification Group Services and System Aspects; IP +              Multimedia Subsystem (IMS) emergency sessions", TS 23.167, +              V12.1.0, March 2015. + +Acknowledgements + +   The authors would like to thank Dale Worley, Christer Holmberg, and +   Jean Mahoney for their extensive review of this document.  The +   authors would like to acknowledge the constructive feedback provided +   by Paul Kyzivat and Robert Sparks. + +Authors' Addresses + +   James Winterbottom +   Winterb Consulting Services +   Gwynneville NSW 2500 +   Australia + +   Phone: +61 448 266004 +   Email: a.james.winterbottom@gmail.com + + +   Roland Jesske +   Deutsche Telekom +   Heinrich-Hertz Str, 3-7 +   64295 Darmstadt +   Germany + +   Email: r.jesske@telekom.de +   URI:   www.telekom.de + + +   Bruno Chatras +   Orange Labs +   44, avenue de la Republique +   F-92320 Chatillon +   France + +   Email: bruno.chatras@orange.com + + +   Andrew Hutton +   Atos +   Mid City Place +   London +   WC1V 6EA +   United Kingdom + +   Email: andrew.hutton@atos.net  |