Subject: [dispatch] E2E Secure Messaging for SIP/SIMPLE

From: Ben Campbell <[email-masked]>
Date: Tue, 31 Oct 2017 13:47:56 -0500

(strictly as an individual)

Hi everyone,

Russ and I submitted a draft [1] on the use of S/MIME for the SIP MESSAGE method and for MSRP. It mainly offers clarifications of the S/MIME guidance in RFCs 3261, 3428, and 4975, but it also makes a few updates.

The main use case we have in mind is for where organizations want to send secure notifications to their users. For example, financial organizations send transaction notices, organizations send password update notices, 2FA notices, etc. Much of that is currently done over various mobile messaging systems (SMS, etc). Most of that is done with no e2e authentication or integrity protection. We’d like to enable at least end-to-end signed messaging for SIP based mobile messaging systems.

We would appreciate it if people would take a look, and send your comments.

[1] https://tools.ietf.org/html/draft-campbell-sip-messaging-smime-00

Thanks!

Ben.