From rafiee@hpi.uni-potsdam.de Tue Dec 4 02:41:09 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F1F521F86EE; Tue, 4 Dec 2012 02:41:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.249 X-Spam-Level: X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WUwNzhaR1nfm; Tue, 4 Dec 2012 02:41:08 -0800 (PST) Received: from mail2.hpi.uni-potsdam.de (mail2.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17a]) by ietfa.amsl.com (Postfix) with ESMTP id C377921F86AB; Tue, 4 Dec 2012 02:41:08 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail2.hpi.uni-potsdam.de (Postfix) with ESMTP id AD868D2C9F; Tue, 4 Dec 2012 11:41:06 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Tue, 4 Dec 2012 11:41:06 +0100 From: "Rafiee, Hosnieh" To: "DNSOP@ietf.org" Date: Tue, 4 Dec 2012 11:41:05 +0100 Thread-Topic: New version available, Please comment on draft-rafiee-intarea-cga-tsig-01.txt Thread-Index: Ac3JBFwvFEnPMQYYT+CKEJ+BPKWaXgAAJcyQAkGrajA= Message-ID: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Cc: "v6ops@ietf.org" Subject: [DNSOP] New version available, Please comment on draft-rafiee-intarea-cga-tsig-01.txt X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Dec 2012 10:41:09 -0000 DQpIZWxsbywNCkkgcmV2aXNlZCAgbXkgZHJhZnQtcmFmaWVlLWludGFyZWEtY2dhLXRzaWcgaW5j b3Jwb3JhdGluZyB5b3VyIGNvbW1lbnRzIHRoYXQgSSByZWNlaXZlZCBieSBlbWFpbC4gUGxlYXNl IHJldmlldyBteSByZXZpc2VkIGRvY3VtZW50Lg0KQmVzdCBSZWdhcmRzLA0KSG9zbmllaA0KDQoN ClVSTDogICAgICAgICAgICAgaHR0cDovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJh ZnQtcmFmaWVlLWludGFyZWEtY2dhLXRzaWctMDEudHh0DQpTdGF0dXM6ICAgICAgICAgIGh0dHA6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtcmFmaWVlLWludGFyZWEtY2dhLXRzaWcN Ckh0bWxpemVkOiAgICAgICAgaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtcmFmaWVl LWludGFyZWEtY2dhLXRzaWctMDENCkRpZmY6ICAgICAgICAgICAgaHR0cDovL3d3dy5pZXRmLm9y Zy9yZmNkaWZmP3VybDI9ZHJhZnQtcmFmaWVlLWludGFyZWEtY2dhLXRzaWctMDENCg0KQWJzdHJh Y3Q6DQogICBUaGUgZmlyc3Qgc3RlcCBpbiB0aGUgVHJhbnNhY3Rpb24gU0lHbmF0dXJlIChUU0lH KSAoUkZDIDI4NDUpIHByb2Nlc3MNCiAgIGlzIHRoZSBnZW5lcmF0aW9uIG9mIGEgc2hhcmVkIHNl Y3JldCB0byBiZSB1c2VkIGJldHdlZW4gYSBETlMgc2VydmVyDQogICBhbmQgYSBob3N0LiBUaGUg c2Vjb25kIHN0ZXAgaXMgdGhlIG1hbnVhbCBleGNoYW5nZSBvZiB0aGUgc2hhcmVkDQogICBzZWNy ZXQgYmV0d2VlbiB0aGUgRE5TIHNlcnZlciBhbmQgdGhlIGhvc3QuIFRoaXMgZG9jdW1lbnQsIENH QS1UU0lHLA0KICAgcHJvcG9zZXMgYSBwb3NzaWJsZSB3YXkgdG8gYXV0b21hdGUgdGhlIG5vdyBt YW51YWwgcHJvY2VzcyB1c2VkIGZvcg0KICAgdGhlIGF1dGhlbnRpY2F0aW9uIG9mIGEgbm9kZSB3 aXRoIGEgRE5TIHNlcnZlciBkdXJpbmcgdGhlIEROUyBVcGRhdGUNCiAgIHByb2Nlc3MgYnkgdXNp bmcgdGhlIHNhbWUgcGFyYW1ldGVycyBhcyBhcmUgdXNlZCBpbiBnZW5lcmF0aW5nIGENCiAgIHNl Y3VyZSBhZGRyZXNzIGluIElQdjYgbmV0d29ya3MsIGkuZS4sIENyeXB0b2dyYXBoaWNhbGx5IEdl bmVyYXRlZA0KICAgQWRkcmVzc2VzIChDR0EpIChSRkMgMzk3MikuIENHQS1UU0lHIGZhY2lsaXRh dGVzIHRoaXMgYXV0aGVudGljYXRpb24NCiAgIHByb2Nlc3MgYW5kIHJlZHVjZXMgdGhlIHRpbWUg bmVlZGVkIGZvciBETlMgVXBkYXRlcy4gVGhlIGN1cnJlbnQNCiAgIHNpZ25hdHVyZSBnZW5lcmF0 aW9uIHByb2Nlc3MgYW5kIHZlcmlmaWNhdGlvbiBtZWNoYW5pc20gaW4gVFNJRyBhcmUNCiAgIHRo dXMgcmVwbGFjZWQgd2l0aCBDR0EuIFRoaXMgYWxnb3JpdGhtIGlzIGFkZGVkLCBhcyBhbiBleHRl bnNpb24sIHRvDQogICBUU0lHIHRvIGVsaW1pbmF0ZSB0aGUgaHVtYW4gaW50ZXJ2ZW50aW9uIG5l ZWRlZCBmb3IgZ2VuZXJhdGlvbiBhbmQNCiAgIGV4Y2hhbmdlIG9mIGtleXMgYmV0d2VlbiBhIERO UyBzZXJ2ZXIgYW5kIGEgaG9zdCB3aGVuIFNFY3VyZSBOZWlnaGJvcg0KICAgRGlzY292ZXJ5IChT RU5EKSAoUkZDIDM5NzEpIGlzIHVzZWQuDQoNCg0KDQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg DQoNCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0K From ietf-ipr@ietf.org Thu Dec 6 09:20:13 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D9DB21F87C1; Thu, 6 Dec 2012 09:20:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.413 X-Spam-Level: X-Spam-Status: No, score=-102.413 tagged_above=-999 required=5 tests=[AWL=0.186, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NUiWG4LAM813; Thu, 6 Dec 2012 09:20:11 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E82F221F87B2; Thu, 6 Dec 2012 09:20:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: IETF Secretariat To: olaf@nlnetlabs.nl, matthijs@nlnetlabs.nl, miek.gieben@sidn.nl X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121206172011.28125.12963.idtracker@ietfa.amsl.com> Date: Thu, 06 Dec 2012 09:20:11 -0800 Cc: rbonica@juniper.net, dnsop@ietf.org, pk@ISOC.DE, bclaise@cisco.com, sa.morris7@googlemail.com, ipr-announce@ietf.org Subject: [DNSOP] IPR Disclosure: VeriSign, Inc.'s Statement about IPR related to draft-ietf-dnsop-rfc4641bis-13 and draft-koch-dnsop-dnssec-operator-change-04 X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2012 17:20:13 -0000 Dear Olaf M. Kolkman, Matthijs Mekking, R. (Mie Gieben: An IPR disclosure that pertains to your Internet-Draft entitled "DNSSEC Operational Practices, Version 2" (draft-ietf-dnsop-rfc4641bis) was submitt= ed to the IETF Secretariat on 2012-12-05 and has been posted on the "IETF Page of Intellectual Property Rights Disclosures" (https://datatracker.ietf.org/ipr/1924/). The title of the IPR disclosure is "VeriSign, Inc.'s Statement about IPR related to draft-ietf-dnsop-rfc4641bi= s-13 and draft-koch-dnsop-dnssec-operator-change-04.""); The IETF Secretariat From sm@resistor.net Thu Dec 6 11:14:54 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0527021F8742 for ; Thu, 6 Dec 2012 11:14:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.633 X-Spam-Level: X-Spam-Status: No, score=-102.633 tagged_above=-999 required=5 tests=[AWL=-0.034, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b70CpDeNR50n for ; Thu, 6 Dec 2012 11:14:53 -0800 (PST) Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id 560F221F8697 for ; Thu, 6 Dec 2012 11:14:53 -0800 (PST) Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id qB6JEcum012910; Thu, 6 Dec 2012 11:14:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1354821288; bh=abG8O1bc2CyXz9vl0eiJUxdkId1T7fvAdQIYmqXKNNg=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=ZS8HmvypsbteYtUCSeP1u2d5cpIRrNICcqTO+pr4HXyUYKcHzDZnPVncxwQuHayt4 fiDbFCO/nUeocSmoXI6eeqkaOjPCHFG5TJcjT7+QP5tyRGTwt6H6dQU1okg1EL5hPQ Vo/S/5wNpUOhH1idXrlguXD6xdsfNvpVoFtBGv2Q= DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1354821288; i=@resistor.net; bh=abG8O1bc2CyXz9vl0eiJUxdkId1T7fvAdQIYmqXKNNg=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=M6gWgTez/S9pr3+fXMI6rXUdQtOrn7DQI+DqEQkKvtxrTob4LbLLtD8z4blmDZNNE J10PQ3pdkWN8BU3W2U7mLUFBxSK7x/tLETE1bX5vsUV2TinMvlHysA4kDUDK+yZ0EL wtuhsgx1+xtWw/odWgbQjMEhTM0R12AAW9ctYdfw= Message-Id: <6.2.5.6.2.20121206110336.09bf23a8@resistor.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Thu, 06 Dec 2012 11:13:49 -0800 To: dnsop@ietf.org, patentlicensing@verisign.com From: SM In-Reply-To: <20121206172011.28125.12963.idtracker@ietfa.amsl.com> References: <20121206172011.28125.12963.idtracker@ietfa.amsl.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: matthijs@nlnetlabs.nl, riwhite@verisign.com, rbonica@juniper.net, dnsop@ietf.org, pk@ISOC.DE, miek.gieben@sidn.nl, bclaise@cisco.com, sa.morris7@googlemail.com Subject: Re: [DNSOP] IPR Disclosure: VeriSign, Inc.'s Statement about IPR related to draft-ietf-dnsop-rfc4641bis-13 and draft-koch-dnsop-dnssec-operator-change-04 X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Dec 2012 19:14:54 -0000 At 09:20 06-12-2012, IETF Secretariat wrote: > An IPR disclosure that pertains to your Internet-Draft entitled "DNSSEC >Operational Practices, Version 2" (draft-ietf-dnsop-rfc4641bis) was >submitted to >the IETF Secretariat on 2012-12-05 and has been posted on the "IETF Page of >Intellectual Property Rights Disclosures" >(https://datatracker.ietf.org/ipr/1924/). The title of the IPR disclosure is >"VeriSign, Inc.'s Statement about IPR related to >draft-ietf-dnsop-rfc4641bis-13 >and draft-koch-dnsop-dnssec-operator-change-04.""); The IPR disclosure at https://datatracker.ietf.org/ipr/1924/ does not mention RFC 4641. As draft-ietf-dnsop-rfc4641bis-13 is based on RFC 4641, does the submitter believe that an IPR disclosure is required for RFC 4641? Regards, -sm From castongj@umd.edu Thu Dec 13 14:39:42 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C798521F898B for ; Thu, 13 Dec 2012 14:39:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6l4FkxNBMK8L for ; Thu, 13 Dec 2012 14:39:41 -0800 (PST) Received: from pdc-mx2.umd.edu (pdc-mx2.umd.edu [128.8.15.52]) by ietfa.amsl.com (Postfix) with ESMTP id 166CD21F8970 for ; Thu, 13 Dec 2012 14:39:40 -0800 (PST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhQDAMNXylCACBWzgWdsb2JhbABFDrZ9h3sOAQEWJieCVwFFPRYYAwIBAgFLDQgBAYgPDJsjmGGJCY1xgykDiGCTFI0SXA X-IronPort-AV: E=Sophos;i="4.84,276,1355115600"; d="scan'208";a="112634189" Received: from oitmx1008.umd.edu (HELO exch.mail.umd.edu) ([128.8.21.179]) by pdc-mx2.umd.edu with ESMTP; 13 Dec 2012 17:39:39 -0500 Received: from [192.168.1.126] (128.8.1.142) by OITMX1008.AD.UMD.EDU (128.8.21.179) with Microsoft SMTP Server (TLS) id 14.2.309.2; Thu, 13 Dec 2012 17:39:18 -0500 Message-ID: <50CA5CB1.8010306@umd.edu> Date: Thu, 13 Dec 2012 17:54:41 -0500 From: Jason Castonguay User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 8bit X-Mailman-Approved-At: Thu, 13 Dec 2012 15:05:47 -0800 Subject: [DNSOP] =?windows-1252?q?Advisory_=97_D-root_is_changing_its_IPv4?= =?windows-1252?q?_address_on_the_3rd_of_January=2E?= X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Dec 2012 22:39:42 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory — D-root is changing its IPv4 address on the 3rd of January. This is advance notice that there is a scheduled change to the IPv4 address for one of the authorities listed for the DNS root zone and the .ARPA TLD. The change is to D.ROOT-SERVERS.NET, which is administered by the University of Maryland. The new IPv4 address for this authority is 199.7.91.13 The current IPv6 address for this authority is 2001:500:2d::d and it will continue to remain unchanged. This change is anticipated to be implemented in the root zone on 3 January 2013, however the new address is currently operational. It will replace the previous IP address of 128.8.10.90 (also once known as TERP.UMD.EDU). We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root “hints” file. This should be updated with the new IP address. New hints files will be available at the following URLs once the change has been formally executed: http://www.internic.net/domain/named.root http://www.internic.net/domain/named.cache The old address will continue to work for at least six months after the transition, but will ultimately be retired from service. - -- Jason Castonguay Network Integration Software Engineer Division of Information Technology University of Maryland College Park, MD 20742 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDKXLEACgkQA5NiLuECHn4lRQCgoOlYQhq+kXk2Az3nPeN1hUfz 0e4AoKCwp0cLpABJFc/7RV5E/ecfWwoJ =ktnM -----END PGP SIGNATURE----- From rafiee@hpi.uni-potsdam.de Fri Dec 14 09:18:45 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47F9D21F8422; Fri, 14 Dec 2012 09:18:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.579 X-Spam-Level: X-Spam-Status: No, score=-0.579 tagged_above=-999 required=5 tests=[AWL=1.669, BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bsrX9TZcjf6f; Fri, 14 Dec 2012 09:18:43 -0800 (PST) Received: from mail3.hpi.uni-potsdam.de (mail3.hpi.uni-potsdam.de [IPv6:2001:638:807:204::8d59:e17b]) by ietfa.amsl.com (Postfix) with ESMTP id 7640A21F8907; Fri, 14 Dec 2012 09:18:43 -0800 (PST) Received: from owa2.hpi.uni-potsdam.de (owa2.hpi.uni-potsdam.de [141.89.225.162]) by mail3.hpi.uni-potsdam.de (Postfix) with ESMTP id 3012216A00E; Fri, 14 Dec 2012 18:18:41 +0100 (CET) Received: from 8MXMA1R.hpi.uni-potsdam.de ([fe80::88e9:3d98:b35f:83bf]) by OWA2.hpi.uni-potsdam.de ([2002:8d59:e1a2::8d59:e1a2]) with mapi; Fri, 14 Dec 2012 18:18:39 +0100 From: "Rafiee, Hosnieh" To: "Int-area@ietf.org" Date: Fri, 14 Dec 2012 18:18:37 +0100 Thread-Topic: Call for the adoption of draft-rafiee-intarea-CGA-TSIG Thread-Index: Ac3aHtFFFtVD9r7kR+GWjIzerXvptw== Message-ID: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: multipart/alternative; boundary="_000_EA738325B0580041A50A364F5F76B68924EB86C58A8MXMA1Rhpiuni_" MIME-Version: 1.0 Cc: "DNSOP@ietf.org" , "dnsext@ietf.org" , "Suresh Krishnan \(suresh.krishnan@ericsson.com\)" Subject: [DNSOP] Call for the adoption of draft-rafiee-intarea-CGA-TSIG X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Dec 2012 17:18:45 -0000 --_000_EA738325B0580041A50A364F5F76B68924EB86C58A8MXMA1Rhpiuni_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I am presenting this document for adoption in either the intarea wg or the = dnsext wg or dnsop wg. I believe that I have considered all the comments th= at I received and incorporated what was applicable into this draft thus mak= ing it a much improved draft. I also read most of the RFCs dealing with SSH= and its use in DNS that Dave suggested. Even though you say that CGA is co= mplex, I proved in my draft, based on the experimental results, that it can= be generated less than 600 milliseconds. SSH also has its own complexity.= As you know, SSH uses different ports, and so, one needs to integrate SSH = with the current DNS implementations in order to have the authentication ac= cepted using port 22. It is for this reason that I do not believe that the = use of SSH is a good solution for the current problem, i.e., secure authent= ication in NDP and SEND enabled networks. My solution only involves the use of the same cached value available in the= node. I have implemented this solution and the implementation of CGA-TSIG = won the first place prize at the 5th IPv6 International Contest as a soluti= on for securing DNS against spoofing attacks. Here is a summary of what is being proffered: - Using the cached value, available in a node, for authentication purposes = for o A client to authenticate a resolver o A DNS server to authenticate another DNS server or a client who wants to = update its resource records on that server. - This approach is applicable in all networks using SEND to secure them - The implementation of this approach is now available for a Windows client= (that I will extend to Linux clients) and for PowerDNS as a server. For th= e client, it is easily installed. A user, with little computer experience, = can install it as he just needs to click on the "NEXT" button. But for Pow= erDNS, as the powerDNS has its own configuration, it is equally as easy. - Analysis of the data from our many experiments shows that the CGA genera= tion, using a sec value 1, which provides enough security for the network, = is less than 600 milliseconds. Finally, the purpose of this draft is to demonstrate how to minimize human = intervention, as much as possible, in performing the update process and res= olving a query . When, in a network ,a good node (a legitimate node) goes b= ad, because of a virus or an attacker takes control of one of the legitimat= e nodes in a network, CGA-TSIG will prevent spoofing attacks against this D= NS server. If there are any questions with regard to this draft, feel free to ask me = for clarification. Finally, do not forget to reply with +1 if you would like to support this s= olution. http://tools.ietf.org/html/draft-rafiee-intarea-cga-tsig-01 Thank you, Hosnieh --_000_EA738325B0580041A50A364F5F76B68924EB86C58A8MXMA1Rhpiuni_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello,

I am presenting this document for adopti= on in either the intarea wg or the dnsext wg or dnsop wg. I believe that I = have considered all the comments that I received and incorporated what was = applicable into this draft thus making it a much improved draft. I also rea= d most of the RFCs dealing with SSH and its use in DNS that Dave suggested.= Even though you say that CGA is complex, I proved in my draft, based on th= e experimental results, that it can be generated less than 600 milliseconds= .  SSH also has its own complexity. As you know, SSH uses different po= rts, and so, one needs to integrate SSH with the current DNS implementation= s in order to have the authentication accepted using port 22. It is for thi= s reason that I do not believe that the use of SSH is a good solution for t= he current problem, i.e., secure authentication in NDP and SEND enabled net= works.

My solution only involve= s the use of the same cached value available in the node. I have implemente= d this solution and the implementation of CGA-TSIG won the first place priz= e at the 5th IPv6 International Contest as a solution for securi= ng DNS against spoofing attacks.

Here is a summary of what is being proffered:

- Using the cached value, available in a node, for authentication= purposes for

o <= span style=3D'font-size:12.0pt;font-family:"Arial","sans-serif"'>A client t= o authenticate a resolver

A DNS server to authenticate another DNS server or a client who wants t= o update its resource records on that server.

- This approach is applicable in all networks using SEND to secure= them

- The implementation of this ap= proach is now available for a Windows client (that I will extend to Linux c= lients) and for PowerDNS as a server. For the client, it is easily installe= d. A user, with little computer experience, can install it as he just needs= to click on the  “NEXT” button. But for PowerDNS, as the = powerDNS has its own configuration, it is equally as easy.

-  Analysis of the data from our many experiment= s shows that the CGA generation, using a sec value 1, which provides enough= security for the network, is less than 600 milliseconds.

Finally, the purpose of this d= raft is to demonstrate how to minimize human intervention, as much as possi= ble, in performing the update process and resolving a query . When, in a ne= twork ,a good node (a legitimate node) goes bad, because of a virus or an a= ttacker takes control of one of the legitimate nodes in a network, CGA-TSIG= will prevent spoofing attacks against this DNS server.

If there are any  questions = with regard to this draft, feel free to ask me for clarification.

Finally, do not forget = to reply with +1 if you would like to support this solution.

http://tools.ietf.org/html/draf= t-rafiee-intarea-cga-tsig-01

Thank you,

Hosnieh

&n= bsp;

= --_000_EA738325B0580041A50A364F5F76B68924EB86C58A8MXMA1Rhpiuni_-- From willem@nlnetlabs.nl Tue Dec 18 05:02:53 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDE3221F8A0A for ; Tue, 18 Dec 2012 05:02:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RxDqebsn2pHM for ; Tue, 18 Dec 2012 05:02:53 -0800 (PST) Received: from open.nlnetlabs.nl (open.nlnetlabs.nl [IPv6:2001:7b8:206:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id DE69D21F8A05 for ; Tue, 18 Dec 2012 05:02:52 -0800 (PST) Received: from [IPv6:2001:7b8:206:1:7dd1:a02c:c4c8:8d96] ([IPv6:2001:7b8:206:1:7dd1:a02c:c4c8:8d96]) (authenticated bits=0) by open.nlnetlabs.nl (8.14.5/8.14.4) with ESMTP id qBID2iEx042773 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Tue, 18 Dec 2012 14:02:45 +0100 (CET) (envelope-from willem@nlnetlabs.nl) DKIM-Filter: OpenDKIM Filter v2.7.1 open.nlnetlabs.nl qBID2iEx042773 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nlnetlabs.nl; s=default; t=1355835765; bh=gt//g7QDXjtwY7qaeXcLGeiOCtMCluLtMgwQBHg93IE=; h=Date:From:To:Subject; b=v9nLOSyZGZrwoJ5a6rJsCYf59jHZmY0P0QMfDCWgGVdlxqPvWuwDvTSYqKWicxese sqIRWYn3qbOFf7MR2wPCdZiuNyrbxX3Y5qkLaFlIcLRx2xouBNIAYHJrvBgwUs6GcD lfHFmdFQ4c25eZuyl4rc9WjTJz+s0ivRwbmN6lqU= Message-ID: <50D0697D.8090802@nlnetlabs.nl> Date: Tue, 18 Dec 2012 14:02:53 +0100 From: Willem Toorop User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: dns-operations@mail.dns-oarc.net, DNSOP@ietf.org, dns-wg@ripe.net, maintainers@nlnetlabs.nl X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7 (open.nlnetlabs.nl [IPv6:2001:7b8:206:1::53]); Tue, 18 Dec 2012 14:02:45 +0100 (CET) Subject: [DNSOP] New user mailing-list for Net::DNS X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2012 13:02:54 -0000 [This message has been mailed to several lists, apologies for duplicates] Dear Perl DNS programmers, NLnet Labs has been maintaining the perl Net::DNS and Net::DNS::SEC packages for more then seven years. Traditionally people who wanted to discuss Net::DNS used RT at cpan or directly mailed the maintainer(s). While Net::DNS and Net::DNS::SEC are libraries that are supported by NLnet Labs, they also benefit from significant community contribution and collaboration. Until now, there was no official platform for Net::DNS users to talk to each other and share experiences. About time to set this up; ie. a mailing-list for Net::DNS users. If you use Net::DNS and Net::DNS::SEC and wish to discuss it with other users (and with us), please subscribe to our list on the webpage: https://www.nlnetlabs.nl/mailman/listinfo/net-dns-users or subscribe by sending an email to net-dns-users-request@nlnetlabs.nl with the word `subscribe' in the subject or body. Best regards, Willem Toorop From wwwrun@rfc-editor.org Fri Dec 21 17:40:02 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE55A21E8030; Fri, 21 Dec 2012 17:40:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.194 X-Spam-Level: X-Spam-Status: No, score=-102.194 tagged_above=-999 required=5 tests=[AWL=0.406, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cjxmVogAo05w; Fri, 21 Dec 2012 17:40:02 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id EC63A21E802E; Fri, 21 Dec 2012 17:39:54 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id D8D3DB1E002; Fri, 21 Dec 2012 17:30:38 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20121222013038.D8D3DB1E002@rfc-editor.org> Date: Fri, 21 Dec 2012 17:30:38 -0800 (PST) Cc: dnsop@ietf.org, rfc-editor@rfc-editor.org Subject: [DNSOP] RFC 6781 on DNSSEC Operational Practices, Version 2 X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Dec 2012 01:40:03 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6781 Title: DNSSEC Operational Practices, Version 2 Author: O. Kolkman, W. Mekking, R. Gieben Status: Informational Stream: IETF Date: December 2012 Mailbox: olaf@nlnetlabs.nl, matthijs@nlnetlabs.nl, miek.gieben@sidn.nl Pages: 71 Characters: 161581 Obsoletes: RFC4641 I-D Tag: draft-ietf-dnsop-rfc4641bis-13.txt URL: http://www.rfc-editor.org/rfc/rfc6781.txt This document describes a set of practices for operating the DNS with security extensions (DNSSEC). The target audience is zone administrators deploying DNSSEC. The document discusses operational aspects of using keys and signatures in the DNS. It discusses issues of key generation, key storage, signature generation, key rollover, and related policies. This document obsoletes RFC 4641, as it covers more operational ground and gives more up-to-date requirements with respect to key sizes and the DNSSEC operations. This document is a product of the Domain Name System Operations Working Group of the IETF. INFORMATIONAL: This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From yaojk@cnnic.cn Sun Dec 23 19:52:50 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3E9121F8BDE for ; Sun, 23 Dec 2012 19:52:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.524 X-Spam-Level: X-Spam-Status: No, score=-98.524 tagged_above=-999 required=5 tests=[AWL=-0.092, BAYES_40=-0.185, MIME_BASE64_TEXT=1.753, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TzT3NSH3ZwmA for ; Sun, 23 Dec 2012 19:52:50 -0800 (PST) Received: from cnnic.cn (smtp.cnnic.cn [159.226.7.146]) by ietfa.amsl.com (Postfix) with SMTP id BEB6221F8BD7 for ; Sun, 23 Dec 2012 19:52:49 -0800 (PST) X-EYOUMAIL-SMTPAUTH: yaojk@cnnic.cn Received: from unknown127.0.0.1 (HELO lenovo47e041cf) (127.0.0.1) by 127.0.0.1 with SMTP; Mon, 24 Dec 2012 11:52:39 +0800 Message-ID: From: "Jiankang YAO" To: , , "SM" References: <20121206172011.28125.12963.idtracker@ietfa.amsl.com> <6.2.5.6.2.20121206110336.09bf23a8@resistor.net> Date: Mon, 24 Dec 2012 11:55:52 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: base64 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157 Cc: matthijs@nlnetlabs.nl, riwhite@verisign.com, rbonica@juniper.net, dnsop@ietf.org, pk@ISOC.DE, miek.gieben@sidn.nl, bclaise@cisco.com, sa.morris7@googlemail.com Subject: Re: [DNSOP] IPR Disclosure: VeriSign, Inc.'s Statement about IPR related to draft-ietf-dnsop-rfc4641bis-13 and draft-koch-dnsop-dnssec-operator-change-04 X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Dec 2012 03:52:50 -0000 DQotLS0tLSBPcmlnaW5hbCBNZXNzYWdlIC0tLS0tIA0KRnJvbTogIlNNIiA8c21AcmVzaXN0b3Iu bmV0Pg0KVG86IDxkbnNvcEBpZXRmLm9yZz47IDxwYXRlbnRsaWNlbnNpbmdAdmVyaXNpZ24uY29t Pg0KQ2M6IDxtYXR0aGlqc0BubG5ldGxhYnMubmw+OyA8cml3aGl0ZUB2ZXJpc2lnbi5jb20+OyA8 cmJvbmljYUBqdW5pcGVyLm5ldD47IDxkbnNvcEBpZXRmLm9yZz47IDxwa0BJU09DLkRFPjsgPG1p ZWsuZ2llYmVuQHNpZG4ubmw+OyA8YmNsYWlzZUBjaXNjby5jb20+OyA8c2EubW9ycmlzN0Bnb29n bGVtYWlsLmNvbT4NClNlbnQ6IEZyaWRheSwgRGVjZW1iZXIgMDcsIDIwMTIgMzoxMyBBTQ0KU3Vi amVjdDogUmU6IFtETlNPUF0gSVBSIERpc2Nsb3N1cmU6IFZlcmlTaWduLCBJbmMuJ3MgU3RhdGVt ZW50IGFib3V0IElQUiByZWxhdGVkIHRvIGRyYWZ0LWlldGYtZG5zb3AtcmZjNDY0MWJpcy0xMyBh bmQgZHJhZnQta29jaC1kbnNvcC1kbnNzZWMtb3BlcmF0b3ItY2hhbmdlLTA0DQoNCg0KPiBUaGUg SVBSIGRpc2Nsb3N1cmUgYXQgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9pcHIvMTkyNC8g ZG9lcyBub3QgDQo+IG1lbnRpb24gUkZDIDQ2NDEuICBBcyBkcmFmdC1pZXRmLWRuc29wLXJmYzQ2 NDFiaXMtMTMgaXMgYmFzZWQgb24gUkZDIA0KPiA0NjQxLCBkb2VzIHRoZSBzdWJtaXR0ZXIgYmVs aWV2ZSB0aGF0IGFuIElQUiBkaXNjbG9zdXJlIGlzIHJlcXVpcmVkIA0KPiBmb3IgUkZDIDQ2NDE/ DQo+IA0KDQpJIGFtIGludGVyZXN0ZWQgaW4gdGhpcyBxdWVzdGlvbiB0b28gc2luY2UgcmZjNDY0 MWJpcyBhbmQgcmZjNDY0MSBzaGFyZSBhIGxvdCBvZiBwb2ludHMuDQoNCkppYW5rYW5nIFlhbw0K PiBSZWdhcmRzLA0KPiAtc20gDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPiBETlNPUCBtYWlsaW5nIGxpc3QNCj4gRE5TT1BAaWV0Zi5vcmcN Cj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kbnNvcA== From yaojk@cnnic.cn Sun Dec 23 19:52:50 2012 Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEF1A21F8BD7 for ; Sun, 23 Dec 2012 19:52:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.493 X-Spam-Level: X-Spam-Status: No, score=-98.493 tagged_above=-999 required=5 tests=[AWL=-0.061, BAYES_40=-0.185, MIME_BASE64_TEXT=1.753, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ref-dVyysbBD for ; Sun, 23 Dec 2012 19:52:50 -0800 (PST) Received: from cnnic.cn (smtp.cnnic.cn [159.226.7.146]) by ietfa.amsl.com (Postfix) with SMTP id BEF4E21F8BDC for ; Sun, 23 Dec 2012 19:52:48 -0800 (PST) X-EYOUMAIL-SMTPAUTH: yaojk@cnnic.cn Received: from unknown127.0.0.1 (HELO lenovo47e041cf) (127.0.0.1) by 127.0.0.1 with SMTP; Mon, 24 Dec 2012 11:52:39 +0800 Message-ID: From: "Jiankang YAO" To: , , "SM" References: <20121206172011.28125.12963.idtracker@ietfa.amsl.com> <6.2.5.6.2.20121206110336.09bf23a8@resistor.net> Date: Mon, 24 Dec 2012 11:55:52 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: base64 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157 Cc: matthijs@nlnetlabs.nl, riwhite@verisign.com, rbonica@juniper.net, dnsop@ietf.org, pk@ISOC.DE, miek.gieben@sidn.nl, bclaise@cisco.com, sa.morris7@googlemail.com Subject: Re: [DNSOP] IPR Disclosure: VeriSign, Inc.'s Statement about IPR related to draft-ietf-dnsop-rfc4641bis-13 and draft-koch-dnsop-dnssec-operator-change-04 X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Dec 2012 03:52:50 -0000 DQotLS0tLSBPcmlnaW5hbCBNZXNzYWdlIC0tLS0tIA0KRnJvbTogIlNNIiA8c21AcmVzaXN0b3Iu bmV0Pg0KVG86IDxkbnNvcEBpZXRmLm9yZz47IDxwYXRlbnRsaWNlbnNpbmdAdmVyaXNpZ24uY29t Pg0KQ2M6IDxtYXR0aGlqc0BubG5ldGxhYnMubmw+OyA8cml3aGl0ZUB2ZXJpc2lnbi5jb20+OyA8 cmJvbmljYUBqdW5pcGVyLm5ldD47IDxkbnNvcEBpZXRmLm9yZz47IDxwa0BJU09DLkRFPjsgPG1p ZWsuZ2llYmVuQHNpZG4ubmw+OyA8YmNsYWlzZUBjaXNjby5jb20+OyA8c2EubW9ycmlzN0Bnb29n bGVtYWlsLmNvbT4NClNlbnQ6IEZyaWRheSwgRGVjZW1iZXIgMDcsIDIwMTIgMzoxMyBBTQ0KU3Vi amVjdDogUmU6IFtETlNPUF0gSVBSIERpc2Nsb3N1cmU6IFZlcmlTaWduLCBJbmMuJ3MgU3RhdGVt ZW50IGFib3V0IElQUiByZWxhdGVkIHRvIGRyYWZ0LWlldGYtZG5zb3AtcmZjNDY0MWJpcy0xMyBh bmQgZHJhZnQta29jaC1kbnNvcC1kbnNzZWMtb3BlcmF0b3ItY2hhbmdlLTA0DQoNCg0KPiBUaGUg SVBSIGRpc2Nsb3N1cmUgYXQgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9pcHIvMTkyNC8g ZG9lcyBub3QgDQo+IG1lbnRpb24gUkZDIDQ2NDEuICBBcyBkcmFmdC1pZXRmLWRuc29wLXJmYzQ2 NDFiaXMtMTMgaXMgYmFzZWQgb24gUkZDIA0KPiA0NjQxLCBkb2VzIHRoZSBzdWJtaXR0ZXIgYmVs aWV2ZSB0aGF0IGFuIElQUiBkaXNjbG9zdXJlIGlzIHJlcXVpcmVkIA0KPiBmb3IgUkZDIDQ2NDE/ DQo+IA0KDQpJIGFtIGludGVyZXN0ZWQgaW4gdGhpcyBxdWVzdGlvbiB0b28gc2luY2UgcmZjNDY0 MWJpcyBhbmQgcmZjNDY0MSBzaGFyZSBhIGxvdCBvZiBwb2ludHMuDQoNCkppYW5rYW5nIFlhbw0K PiBSZWdhcmRzLA0KPiAtc20gDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPiBETlNPUCBtYWlsaW5nIGxpc3QNCj4gRE5TT1BAaWV0Zi5vcmcN Cj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kbnNvcA==