Key Capabilities and Components of STIR/SHAKENlink to this section
To restore trust in voice networks and prevent legitimate enterprise numbers from being mislabeled as spam, STIR/SHAKEN provides:
- Cryptographic Call Signing: Generates an encrypted SIP identity token containing the calling number, recipient number, timestamp, and signature before the call traverses the network.
- Verification at Termination: Enables terminating carriers to validate the digital certificate against trusted certificate authorities before passing the call to the consumer.
- Traceback Accountability: Attaches a unique origination identifier to every call, enabling telecommunications regulators to track illegal traffic back to its source network.
- Protection for Brand Reputation: Reduces the likelihood that outbound business calls are flagged as "Spam Likely" or "Scam Likely" by mobile carriers and device analytics engines.
- Cross-Border Regulatory Compliance: Aligns enterprise calling with mandates across North America and Europe, including the FCC TRACED Act in the US, CRTC mandates in Canada, and the MAN framework in France.
The Three Levels of Attestationlink to this section
When a voice provider initiates a call, it assigns one of three standardized attestation levels based on its knowledge of the caller and their right to use the telephone number:
| Attestation Level | Meaning | Verification Criteria | Impact on Call Delivery |
|---|---|---|---|
| A (Full Attestation) | Complete trust | The provider knows the customer identity and verifies they are authorized to use that specific caller ID number. | Highest trust rating. Calls rarely get labeled as spam or blocked. |
| B (Partial Attestation) | Verified origin, unverified number | The provider knows who the customer is, but cannot confirm if they own or are authorized to use the chosen outbound number (e.g., call forwarding). | Neutral trust. Calls may receive deeper scrutiny by carrier spam filters. |
| C (Gateway Attestation) | Unverified origin | The provider received the call from an unauthenticated gateway or external network with no visibility into the caller or number ownership. | Lowest trust rating. High risk of call labeling, spam warnings, or blocking. |
Why Businesses are Prioritizing Call Authenticationlink to this section
Unauthenticated caller ID practices have caused consumers to stop answering unknown calls, directly damaging outbound contact center performance and customer outreach.
| Feature | Legacy Caller ID (Unauthenticated) | STIR/SHAKEN Authenticated Calling |
|---|---|---|
| Caller ID Integrity | Easily manipulated via basic spoofing tools | Cryptographically signed and tamper-evident |
| Call Answer Rates | Low, due to widespread consumer distrust | Higher, driven by verified caller displays and fewer spam flags |
| Spam / Scam Flagging | Frequent false positives on legitimate business numbers | Minimized false positives through Level A attestation |
| Traceability | Anonymized across intermediate telecom carriers | Auditable back to the originating carrier and tenant |
| Regulatory Standing | Subject to carrier blocks and regulatory penalties | Fully compliant with FCC, CRTC, and international mandates |
How it Works: The 8x8 Advantagelink to this section
8x8 operates as a registered, compliant voice service provider with full STIR/SHAKEN implementation across its global communications platform:
- Call Placement: An agent initiates an outbound call using 8x8 Work or 8x8 Contact Center.
- Identity Verification: The 8x8 network confirms the customer identity and verifies that the outbound caller ID number is assigned and authorized on the account.
- Token Creation: 8x8's Secure Telephone Identity Authentication Service (STI-AS) generates an encrypted SIP Identity Header with Level A (Full) attestation.
- Transit and Verification: Intermediate carriers pass the identity header unchanged. The terminating carrier decrypts the certificate and verifies it against the authorized certificate authority.
- Call Delivery: The call arrives on the recipient's device verified, displaying the accurate caller ID and, where supported by mobile carriers, a "Caller Verified" badge.
