From nobody Fri May 3 21:36:51 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56355120393 for ; Fri, 3 May 2019 21:36:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cgHkNwX-CQjB for ; Fri, 3 May 2019 21:36:46 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37F3D120394 for ; Fri, 3 May 2019 21:36:46 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 3 May 2019 21:36:36 -0700 From: Jim Schaad To: 'RFC Errata System' , , , , , CC: , References: <20190429123629.DE193B81EB8@rfc-editor.org> In-Reply-To: <20190429123629.DE193B81EB8@rfc-editor.org> Date: Fri, 3 May 2019 21:36:32 -0700 Message-ID: <01f301d50232$f55e8390$e01b8ab0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQHVaTHQM8kheeGAm/lgcXotd70r2KZZkyLA X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Curdle] [Editorial Errata Reported] RFC8410 (5709) X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 May 2019 04:36:49 -0000 This is not a correct errata and I would label it as rejected. The certificate is a self-issued certificate not a self-signed = certificate. Given that the algorithm for the key is "ECDH 25519 key = agreement" it could not be used for signing. > -----Original Message----- > From: RFC Errata System > Sent: Monday, April 29, 2019 5:36 AM > To: simon@josefsson.org; ietf@augustcellars.com; rdd@cert.org; > kaduk@mit.edu; daniel.migault@ericsson.com; rsalz@akamai.com > Cc: lijun.liao@gmail.com; curdle@ietf.org; rfc-editor@rfc-editor.org > Subject: [Editorial Errata Reported] RFC8410 (5709) >=20 > The following errata report has been submitted for RFC8410, "Algorithm > Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the = Internet X.509 > Public Key Infrastructure". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5709 >=20 > -------------------------------------- > Type: Editorial > Reported by: Lijun Liao >=20 > Section: 10.2 >=20 > Original Text > ------------- > - >=20 > Corrected Text > -------------- > - >=20 > Notes > ----- > The example certificate is a self-signed certificate containing X25519 = public > key. Unlike standard EC public key, the public key for key exchange is = NOT > the same as the one for digital signature in curve25519. That means, = for the > same private key, the public keys for X25519 and for Ed25519 are = different. > As a result, the public key in the self-signed certificate can NOT be = used to > verify the signature. In this context, please replace the example = certificate by > one containing the Ed25519 public key. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please = use > "Reply All" to discuss whether it should be verified or rejected. When = a > decision is reached, the verifying party can log in to change the = status and > edit the report, if necessary. >=20 > -------------------------------------- > RFC8410 (draft-ietf-curdle-pkix-10) > -------------------------------------- > Title : Algorithm Identifiers for Ed25519, Ed448, = X25519, and X448 for > Use in the Internet X.509 Public Key Infrastructure > Publication Date : August 2018 > Author(s) : S. Josefsson, J. Schaad > Category : PROPOSED STANDARD > Source : CURves, Deprecating and a Little more Encryption > Area : Security > Stream : IETF > Verifying Party : IESG From nobody Fri May 3 21:40:44 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34EA71203A3 for ; Fri, 3 May 2019 21:40:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0XdvOvHXKbWQ for ; Fri, 3 May 2019 21:40:41 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D63371203A2 for ; Fri, 3 May 2019 21:40:40 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 3 May 2019 21:40:32 -0700 From: Jim Schaad To: 'RFC Errata System' , , , , , CC: , References: <20190429062826.F1B15B8223D@rfc-editor.org> In-Reply-To: <20190429062826.F1B15B8223D@rfc-editor.org> Date: Fri, 3 May 2019 21:40:28 -0700 Message-ID: <01f401d50233$81d64ab0$8582e010$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQHkpA2EbYu3DvG4RGPnqcPr17rwRqY7Hnig X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Curdle] [Editorial Errata Reported] RFC8410 (5707) X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 May 2019 04:40:43 -0000 This errata is correct. I would recommend as labeling it "Editorial" = and "Hold for update" as, while it is not correctly DER encoded, a DER = decode should still correctly decode it. A BER decoder, which is what = I would use because of the history of encoding errors will successfully = decode it. Jim > -----Original Message----- > From: RFC Errata System > Sent: Sunday, April 28, 2019 11:28 PM > To: simon@josefsson.org; ietf@augustcellars.com; rdd@cert.org; > kaduk@mit.edu; daniel.migault@ericsson.com; rsalz@akamai.com > Cc: lijun.liao@gmail.com; curdle@ietf.org; rfc-editor@rfc-editor.org > Subject: [Editorial Errata Reported] RFC8410 (5707) >=20 > The following errata report has been submitted for RFC8410, "Algorithm > Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the = Internet X.509 > Public Key Infrastructure". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5707 >=20 > -------------------------------------- > Type: Editorial > Reported by: Lijun Liao >=20 > Section: 10.2 >=20 > Original Text > ------------- > - >=20 > Corrected Text > -------------- > - >=20 > Notes > ----- > In the example certificate, the critical-field of extensions keyUsage = and > subjectKeyIdentifier are of default value 'false'. They should not be = included > according to DER encoding rule. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please = use > "Reply All" to discuss whether it should be verified or rejected. When = a > decision is reached, the verifying party can log in to change the = status and > edit the report, if necessary. >=20 > -------------------------------------- > RFC8410 (draft-ietf-curdle-pkix-10) > -------------------------------------- > Title : Algorithm Identifiers for Ed25519, Ed448, = X25519, and X448 for > Use in the Internet X.509 Public Key Infrastructure > Publication Date : August 2018 > Author(s) : S. Josefsson, J. Schaad > Category : PROPOSED STANDARD > Source : CURves, Deprecating and a Little more Encryption > Area : Security > Stream : IETF > Verifying Party : IESG From nobody Mon May 6 14:46:32 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F1771201ED; Mon, 6 May 2019 14:46:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q5apNf3moQpM; Mon, 6 May 2019 14:46:27 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40989120021; Mon, 6 May 2019 14:46:27 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 28212B80A62; Mon, 6 May 2019 14:46:25 -0700 (PDT) To: lijun.liao@gmail.com, simon@josefsson.org, ietf@augustcellars.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: kaduk@mit.edu, iesg@ietf.org, curdle@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20190506214625.28212B80A62@rfc-editor.org> Date: Mon, 6 May 2019 14:46:25 -0700 (PDT) Archived-At: Subject: [Curdle] [Errata Rejected] RFC8410 (5709) X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 May 2019 21:46:31 -0000 The following errata report has been rejected for RFC8410, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5709 -------------------------------------- Status: Rejected Type: Editorial Reported by: Lijun Liao Date Reported: 2019-04-29 Rejected by: Benjamin Kaduk (IESG) Section: 10.2 Original Text ------------- - Corrected Text -------------- - Notes ----- The example certificate is a self-signed certificate containing X25519 public key. Unlike standard EC public key, the public key for key exchange is NOT the same as the one for digital signature in curve25519. That means, for the same private key, the public keys for X25519 and for Ed25519 are different. As a result, the public key in the self-signed certificate can NOT be used to verify the signature. In this context, please replace the example certificate by one containing the Ed25519 public key. --VERIFIER NOTES-- X25519 keys are only capable of key agreement, not signing, so by necessity a self-issued X25519 certificate cannot be self-signed. This document specifies, among other things, how to encode X25519 public keys into X.509 certificates, and so the example is accordingly a self-issued but not self-signed certificate. The issuing certificate has the same subject name but a different key (and key type). -------------------------------------- RFC8410 (draft-ietf-curdle-pkix-10) -------------------------------------- Title : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure Publication Date : August 2018 Author(s) : S. Josefsson, J. Schaad Category : PROPOSED STANDARD Source : CURves, Deprecating and a Little more Encryption Area : Security Stream : IETF Verifying Party : IESG From nobody Mon May 6 14:55:15 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21B3A12002F; Mon, 6 May 2019 14:55:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AYOH3gug5QUI; Mon, 6 May 2019 14:55:11 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA07B1200C4; Mon, 6 May 2019 14:55:10 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 8ABD2B80E01; Mon, 6 May 2019 14:55:08 -0700 (PDT) To: lijun.liao@gmail.com, simon@josefsson.org, ietf@augustcellars.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: kaduk@mit.edu, iesg@ietf.org, curdle@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20190506215508.8ABD2B80E01@rfc-editor.org> Date: Mon, 6 May 2019 14:55:08 -0700 (PDT) Archived-At: Subject: [Curdle] [Errata Held for Document Update] RFC8410 (5707) X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 May 2019 21:55:13 -0000 The following errata report has been held for document update for RFC8410, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5707 -------------------------------------- Status: Held for Document Update Type: Editorial Reported by: Lijun Liao Date Reported: 2019-04-29 Held by: Benjamin Kaduk (IESG) Section: 10.2 Original Text ------------- - Corrected Text -------------- - Notes ----- In the example certificate, the critical-field of extensions keyUsage and subjectKeyIdentifier are of default value 'false'. They should not be included according to DER encoding rule. -------------------------------------- RFC8410 (draft-ietf-curdle-pkix-10) -------------------------------------- Title : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure Publication Date : August 2018 Author(s) : S. Josefsson, J. Schaad Category : PROPOSED STANDARD Source : CURves, Deprecating and a Little more Encryption Area : Security Stream : IETF Verifying Party : IESG From nobody Tue May 7 22:29:05 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1453120134 for ; Tue, 7 May 2019 22:29:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tcN7oHHPhKKZ for ; Tue, 7 May 2019 22:29:02 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30C72120086 for ; Tue, 7 May 2019 22:29:02 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 17C2DB82245; Tue, 7 May 2019 22:28:58 -0700 (PDT) To: simon@josefsson.org, ietf@augustcellars.com, rdd@cert.org, kaduk@mit.edu, daniel.migault@ericsson.com, rsalz@akamai.com X-PHP-Originating-Script: 1005:errata_mail_lib.php From: RFC Errata System Cc: lijun.liao@gmail.com, curdle@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20190508052858.17C2DB82245@rfc-editor.org> Date: Tue, 7 May 2019 22:28:58 -0700 (PDT) Archived-At: Subject: [Curdle] [Editorial Errata Reported] RFC8410 (5709) X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2019 05:29:03 -0000 The following errata report has been submitted for RFC8410, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5709 -------------------------------------- Type: Editorial Reported by: Lijun Liao Section: 10.2 Original Text ------------- - Corrected Text -------------- - Notes ----- In the example certificate, the critical-field of extensions keyUsage and subjectKeyIdentifier are of default value 'false'. They should not be included according to DER encoding rule. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary. -------------------------------------- RFC8410 (draft-ietf-curdle-pkix-10) -------------------------------------- Title : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure Publication Date : August 2018 Author(s) : S. Josefsson, J. Schaad Category : PROPOSED STANDARD Source : CURves, Deprecating and a Little more Encryption Area : Security Stream : IETF From nobody Wed May 8 08:06:33 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1DAC1202C9; Wed, 8 May 2019 08:06:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M_fal3TTAnAC; Wed, 8 May 2019 08:06:20 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D20D5120257; Wed, 8 May 2019 08:06:08 -0700 (PDT) Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x48F64a8010471 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 8 May 2019 11:06:06 -0400 Date: Wed, 8 May 2019 10:06:04 -0500 From: Benjamin Kaduk To: draft-ietf-curdle-gss-keyex-sha2@ietf.org Cc: curdle@ietf.org Message-ID: <20190508150604.GB30884@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) Archived-At: Subject: [Curdle] new-AD review comments on draft-ietf-curdle-gss-keyex-sha2-08 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2019 15:06:33 -0000 Hi all, I'm almost ready to send draft-ietf-curdle-gss-keyex-sha2 to the IESG for evaluation, but would like to see a new revision posted first, mostly for the Abstract changes. In addition to the changes mentioned below, please also go ahead and make the editorial changes mentioned in the last call/directorate reviews. -Ben Abstract This document specifies additions and amendments to RFC4462. It defines a new key exchange method that uses SHA-2 for integrity and deprecates weak DH groups. The purpose of this specification is to I think we need to remove this statement about "deprecates weak DH groups"; I didn't see any further discussion of such deprecations in any revision of the document. Section 2 Following the rationale of [RFC8268] only SHA-256 and SHA-512 hashes are used for DH groups. For NIST curves the same curve-to-hashing algorithm pairing used in [RFC5656] is adopted for consistency. 8268 doesn't provide a whole lot of rationale for using SHA-256, rather, the closest thing to guidance would be in Section 1 where it cites the NSA IAD FAQ that wants to *avoid* using SHA-256. So perhaps it's better to say that this just follows the practice of 8268, rather than the rationale from it, especially since we are just using a "consistency" argument for the NIST curves' hashes. Section 3 RFC 8174 has an updated boilerplate text to use for the BCP 14 keywords. Section 4 The method name for each method is the concatenation of the family method name with the Base64 encoding of the MD5 hash [RFC1321] of the ASN.1 DER encoding [ISO-IEC-8825-1] of the underlying GSS-API mechanism's OID. [...] nit: I'd suggest using the "family name prefix" to match the table, rather than "family method name". Section 5 In [RFC5656] new SSH key exchange algorithms based on Elliptic Curve Cryptography are introduced. We reuse much of section 4 to define GSS-API-authenticated ECDH Key Exchanges. nit: I think this is intended to refer to Section 4 of RFC 5656, but the current text reads like we are referring to Section 4 of the current document. Section 5.1 For NIST Curves keys use uncompressed point representation and must nit: "the" be converted using the algorithm in Section 2.3.4 of [SEC1v2]. If the conversion fails or the point is trasmitted using compressed nit: "the" representation, the key exchange MUST fail. A GSS Context is established according to Section 4 of [RFC5656]; The client initiates the establishment using GSS_Init_sec_context() and the server completes it using GSS_Accept_sec_context(). For the I'm not sure what this reference was intended to be; the current one doesn't really seem right, though. Also, in a fully general GSS negotiation loop, the server does not necessarily make the last step, so "completes" may be slightly misleading. This key exchange process will exchange only a single token once the context has been established, therefore the replay_det_req_flag and sequence_req_flag SHOULD be set to "false". nit: "single message token", since we are not making a statement about context establishment tokens, and the previous text was about the context establishment process which might cause the reader to jump towards context tokens here. For curve25519 and curve448 the algorithm in Section 6 of [RFC7748] is used instead. nits: "algorithms", "are" (since there are different procedures in subsections 6.1 and 6.2 for the two curves). Section 6 It's not clear to me why the "Implementation Support" column is here -- it duplicates content from tables elsewhere in the document, and does not seem to be part of the registration template. Section 7.3 Some GSSAPI mechanisms can optionally delegate credentials to the target host by setting the deleg_ret_flag. In this case extra care must be taken to ensure that the acceptor being authenticated matches the target the user intended. [...] This is a bit weird to read, since the setting of the deleg_ret_flag is not what effectuates the delegation of credentials; that happens by virtue of the exchange of context tokens. (Also, RFC 2743 only lists a deleg_req_flag; the acceptor-side state is passed in the deleg_state boolean.) A simple replacement with deleg_req_flag doesn't work, either, as that's not something the mechanism does, but rather the GSSAPI consumer. So I think we may need a broader change, like: % Some GSSAPI mechanisms can act on a request to delegate credentials to % the target host when the deleg_req_flag is set. In this case, extra care % must be taken to ensure that the acceptor being authenticated matches the % target the user intended. [...] (And yes, I know that I'm basically responsible for this text being present; it may well have been my error originally.) From nobody Wed May 8 08:42:36 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77302120043; Wed, 8 May 2019 08:42:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.71 X-Spam-Level: X-Spam-Status: No, score=-2.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8RZnTWhMeUC2; Wed, 8 May 2019 08:42:32 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 180B812012D; Wed, 8 May 2019 08:42:32 -0700 (PDT) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x48FT9eT018797; Wed, 8 May 2019 08:42:31 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=to : cc : subject : in-reply-to : references : from : mime-version : content-type : content-id : date : message-id; s=PPS1017; bh=+r1qN0luwkOwq1y9sXHlii9S2tuycFTivOCA2l3JKhc=; b=UDMIx/IZkeAiqNpX2Y08QuQO9F4WY2CfkI0RKKi20WfW4XfAzQf+lweuoCbPVSgQyGtd tZ3ZSwpVQ3USsF/WURte6gwKrrdGIs6/4uR7TFeoIhGNWucTjbB0aY//cNeIOhGMEKsr jtEU0M7aSeEuTcsv6mELYPedmye8q82tfvyns54fovTxY8fT4tmJLmslXrrOiTspRjcD 0jgghaZt9CS9oHvpL3vuB5Gs8NNsq+tU3d662PHV/wVQT2TGg2I+NJFsKpjzEgq0RquO mvqnplhsIYnXn+eJGUAITwWjzeNz42zfG5EPwfuG+W2K5F4mwU1NSu+h+cAtJ177GeN2 +w== Received: from nam03-co1-obe.outbound.protection.outlook.com (mail-co1nam03lp2059.outbound.protection.outlook.com [104.47.40.59]) by mx0a-00273201.pphosted.com with ESMTP id 2sc1dn022f-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 08 May 2019 08:42:31 -0700 Received: from SN4PR0501CA0123.namprd05.prod.outlook.com (2603:10b6:803:42::40) by DM6PR05MB3993.namprd05.prod.outlook.com (2603:10b6:5:8f::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1878.18; Wed, 8 May 2019 15:42:30 +0000 Received: from CO1NAM05FT034.eop-nam05.prod.protection.outlook.com (2a01:111:f400:7e50::201) by SN4PR0501CA0123.outlook.office365.com (2603:10b6:803:42::40) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1878.17 via Frontend Transport; Wed, 8 May 2019 15:42:29 +0000 Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.12 as permitted sender) Received: from P-EXFEND-EQX-01.jnpr.net (66.129.239.12) by CO1NAM05FT034.mail.protection.outlook.com (10.152.96.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1856.4 via Frontend Transport; Wed, 8 May 2019 15:42:29 +0000 Received: from P-EXBEND-EQX-02.jnpr.net (10.104.8.53) by P-EXFEND-EQX-01.jnpr.net (10.104.8.54) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 8 May 2019 08:42:29 -0700 Received: from P-EXBEND-EQX-01.jnpr.net (10.104.8.52) by P-EXBEND-EQX-02.jnpr.net (10.104.8.53) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Wed, 8 May 2019 08:42:28 -0700 Received: from p-mailhub01.juniper.net (10.104.20.6) by P-EXBEND-EQX-01.jnpr.net (10.104.8.52) with Microsoft SMTP Server (TLS) id 15.0.1367.3 via Frontend Transport; Wed, 8 May 2019 08:42:28 -0700 Received: from contrail-ubm16-mdb.svec1.juniper.net ([10.163.18.199]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id x48FgRug010268; Wed, 8 May 2019 08:42:27 -0700 (envelope-from mdb@juniper.net) To: Benjamin Kaduk CC: , In-Reply-To: <20190508150604.GB30884@kduck.mit.edu> References: <20190508150604.GB30884@kduck.mit.edu> Comments: In-reply-to: Benjamin Kaduk message dated "Wed, 08 May 2019 10:06:04 -0500." From: "Mark D. Baushke" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <15352.1557330147.1@contrail-ubm16-mdb.svec1.juniper.net> Date: Wed, 8 May 2019 08:42:27 -0700 Message-ID: <15353.1557330147@contrail-ubm16-mdb.svec1.juniper.net> X-EXCLAIMER-MD-CONFIG: e3cb0ff2-54e7-4646-8a04-0dae4ac7b136 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:66.129.239.12; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(136003)(396003)(2980300002)(189003)(199004)(53936002)(316002)(86362001)(305945005)(69596002)(47776003)(23726003)(6306002)(6246003)(76176011)(7696005)(2171002)(478600001)(476003)(446003)(486006)(14444005)(126002)(426003)(5660300002)(54906003)(16586007)(11346002)(6916009)(97876018)(97756001)(4326008)(356004)(336012)(186003)(26005)(77096007)(46406003)(70586007)(70206006)(2906002)(81156014)(50466002)(8676002)(8936002)(81166006)(966005)(229853002)(117636001)(68736007)(62816006); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB3993; H:P-EXFEND-EQX-01.jnpr.net; FPR:; SPF:SoftFail; LANG:en; PTR:InfoDomainNonexistent; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: aaecaee3-e7fd-4b47-4942-08d6d3cbc751 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600141)(711020)(4605104)(4710095)(4711036)(2017052603328); SRVR:DM6PR05MB3993; X-MS-TrafficTypeDiagnostic: DM6PR05MB3993: X-MS-Exchange-PUrlCount: 2 X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:9508; X-Forefront-PRVS: 0031A0FFAF X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: zl6p5jl/SX4eoS0Xot4DYg3cMi8OTBAWfCDojNpnlD8JB8ELAWV4GGer8hu5xlMPqHL8niXLUS7+mQegDQUk7bS0wZOcrymSXpoxWPUhKY5nVYoc5g5cz64UuAQ3xvFkpj3/+lxltthSCB7WqlhoG6l4KwXCTJ1DzOCyScJOIM+HojcXGPcQSX2X8JtDWmaqAlmzBIcWU1Zu/uXsGvD6JcQvP6btTtZl8Ode8Vlm+mjNU8rIm3WjOd4O5kj+PIU88NY/3KqRU4pbzz4S/QyJ7AYBKtuL80sRhRJTDSeI1FVnLCV7gi4nV5dVWoaAqNtwhJH3qxITtZ3jx/pqdkxgHkadRdJc++lINogmLK/kghJrRLtu9eC2YDeGhnXChRm+7HIUz4MiTQIvLxa0ESp/tTFlroAav0X2vQVg5HKezKg= X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 May 2019 15:42:29.4248 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: aaecaee3-e7fd-4b47-4942-08d6d3cbc751 X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.12]; Helo=[P-EXFEND-EQX-01.jnpr.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB3993 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-05-08_08:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1905080097 Archived-At: Subject: Re: [Curdle] new-AD review comments on draft-ietf-curdle-gss-keyex-sha2-08 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2019 15:42:35 -0000 Hi Ben, In RFC 8268, I tried (and apparently failed) to say that the NSA IAD appears to prefer the use of SHA2-384 for TOP SECRET documents, but that the SHA2-256, SHA2-384, and SHA2-512 hashing functions are all NIST approved for FIPS 140-2 Implementation Guidance. The rationale for SHA2-384 being 'better' for TOP SECRET is apparently that there are 1024 bits in the internal state of the hashing algorithm, so 640 bits are kept private while for SHA2-256 there are 512 bits in the internal state, half of which are public and half of which are private. The only weak DH group which should be deprecated is the diffie-hellman-group1-sha1 and that mostly because of logjam (https://en.wikipedia.org/wiki/Logjam_(computer_security). I have been remiss in addressing the AD comments and submitting an updated draft of draft-ietf-curdle-ssh-curves (Secure Shell (SSH) Key Exchange Method using Curve25519 and Curve448), so there is no RFC listing for those key exchange methods in the IANA repository (URL: https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml ). I have not yet compared RFC7748 to the implementations of Curve25519 that exist in many SSH implementations which is one of the reasons that draft-ietf-curdle-ssh-curves has not been updated. The draft was trying to document a well deployed curve25519@libssh.org to ensure interoperability. -- Mark From nobody Wed May 8 08:52:19 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7E7C1200DF; Wed, 8 May 2019 08:52:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VWY0Ue1l7wbL; Wed, 8 May 2019 08:52:14 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04BB6120136; Wed, 8 May 2019 08:52:13 -0700 (PDT) Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x48FqApQ031087 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 8 May 2019 11:52:12 -0400 Date: Wed, 8 May 2019 10:52:09 -0500 From: Benjamin Kaduk To: "Mark D. Baushke" Cc: curdle@ietf.org, draft-ietf-curdle-gss-keyex-sha2@ietf.org Message-ID: <20190508155209.GD30884@kduck.mit.edu> References: <20190508150604.GB30884@kduck.mit.edu> <15353.1557330147@contrail-ubm16-mdb.svec1.juniper.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <15353.1557330147@contrail-ubm16-mdb.svec1.juniper.net> User-Agent: Mutt/1.10.1 (2018-07-13) Archived-At: Subject: Re: [Curdle] new-AD review comments on draft-ietf-curdle-gss-keyex-sha2-08 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2019 15:52:18 -0000 Hi Mark, On Wed, May 08, 2019 at 08:42:27AM -0700, Mark D. Baushke wrote: > Hi Ben, > > In RFC 8268, I tried (and apparently failed) to say that the NSA IAD > appears to prefer the use of SHA2-384 for TOP SECRET documents, but that > the SHA2-256, SHA2-384, and SHA2-512 hashing functions are all NIST > approved for FIPS 140-2 Implementation Guidance. Given that 8268 still uses SHA-256 it is clearly not forbidden to do so; my comment here was mostly of an editorial nature, that the word "rationale" does not seem to match up well with the reference. I don't think we need to change what we're doing in this document; we just may want to change how we talk about what we're doing. > The rationale for SHA2-384 being 'better' for TOP SECRET is apparently > that there are 1024 bits in the internal state of the hashing algorithm, > so 640 bits are kept private while for SHA2-256 there are 512 bits in > the internal state, half of which are public and half of which are > private. > > The only weak DH group which should be deprecated is the > diffie-hellman-group1-sha1 and that mostly because of logjam > (https://en.wikipedia.org/wiki/Logjam_(computer_security). I'm not opposed to adding that in to this document (instead of removing the bit from the abstract), but it might require another IETF LC if we choose to go that route. > I have been remiss in addressing the AD comments and submitting an > updated draft of draft-ietf-curdle-ssh-curves (Secure Shell (SSH) Key > Exchange Method using Curve25519 and Curve448), so there is no RFC > listing for those key exchange methods in the IANA repository (URL: > https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml ). > > I have not yet compared RFC7748 to the implementations of Curve25519 > that exist in many SSH implementations which is one of the reasons that > draft-ietf-curdle-ssh-curves has not been updated. The draft was trying > to document a well deployed curve25519@libssh.org to ensure > interoperability. Thanks for the extra background; let's hope that we can both find some time to work on our respective backlogs :) -Ben From nobody Thu May 9 03:34:46 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0A1A1200B4; Thu, 9 May 2019 03:34:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D9QGjVMStcOx; Thu, 9 May 2019 03:34:43 -0700 (PDT) Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B3C912001B; Thu, 9 May 2019 03:34:43 -0700 (PDT) Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.phx2.redhat.com [10.5.11.13]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 86FB7308425B; Thu, 9 May 2019 10:34:42 +0000 (UTC) Received: from pintsize.usersys.redhat.com (unknown [10.43.21.83]) by smtp.corp.redhat.com (Postfix) with ESMTP id C9B8E643E5; Thu, 9 May 2019 10:34:41 +0000 (UTC) From: Hubert Kario To: Benjamin Kaduk Cc: draft-ietf-curdle-gss-keyex-sha2@ietf.org, curdle@ietf.org Date: Thu, 09 May 2019 12:34:40 +0200 Message-ID: <4446646.IAIBc4NGeb@pintsize.usersys.redhat.com> In-Reply-To: <20190508150604.GB30884@kduck.mit.edu> References: <20190508150604.GB30884@kduck.mit.edu> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1717288.LoY9VqkToe"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Scanned-By: MIMEDefang 2.79 on 10.5.11.13 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.40]); Thu, 09 May 2019 10:34:42 +0000 (UTC) Archived-At: Subject: Re: [Curdle] new-AD review comments on draft-ietf-curdle-gss-keyex-sha2-08 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2019 10:34:45 -0000 --nextPart1717288.LoY9VqkToe Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" On Wednesday, 8 May 2019 17:06:04 CEST Benjamin Kaduk wrote: > Hi all, >=20 > I'm almost ready to send draft-ietf-curdle-gss-keyex-sha2 to the IESG for > evaluation, but would like to see a new revision posted first, mostly for > the Abstract changes. In addition to the changes mentioned below, please > also go ahead and make the editorial changes mentioned in the last > call/directorate reviews. >=20 > -Ben >=20 > Abstract >=20 > This document specifies additions and amendments to RFC4462. It > defines a new key exchange method that uses SHA-2 for integrity and > deprecates weak DH groups. The purpose of this specification is to >=20 > I think we need to remove this statement about "deprecates weak DH groups= "; > I didn't see any further discussion of such deprecations in any revision = of > the document. we've done that by not listing them, would you prefer to list them explicit= ly=20 in section 6 and Section 4 with a "MUST NOT" in "Implementation Support" an= d=20 "Implementation Recommendations"? =20 > Section 2 >=20 > Following the > rationale of [RFC8268] only SHA-256 and SHA-512 hashes are used for > DH groups. For NIST curves the same curve-to-hashing algorithm > pairing used in [RFC5656] is adopted for consistency. >=20 > 8268 doesn't provide a whole lot of rationale for using SHA-256, rather, > the closest thing to guidance would be in Section 1 where it cites the NSA > IAD FAQ that wants to *avoid* using SHA-256. So perhaps it's better to s= ay > that this just follows the practice of 8268, rather than the rationale fr= om > it, especially since we are just using a "consistency" argument for the > NIST curves' hashes. yes, "practice" would work better in this context =2D-=20 Regards, Hubert Kario Senior Quality Engineer, QE BaseOS Security team Web: www.cz.redhat.com Red Hat Czech s.r.o., Purky=C5=88ova 115, 612 00 Brno, Czech Republic --nextPart1717288.LoY9VqkToe Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEYeeuxEU+3unL/K+dkqjRuAHS9fUFAlzUAkAACgkQkqjRuAHS 9fUmKg//a/634hzpMEsL2xaR4rQzX/tVax2/PN4lD6RhArZlwZSks1vxqY53ZslS mu6O5bChe8aBcMvrVRsJ4XB9L6AIaWRuKIQwI/jEndMFjFAXGaNlyjlpAGkmxZ7R jAOKqlrWFX0xxeDgjIQOscvSk9BP4kbzbs8W5g1v0wkLhWlTDrieoXyRG5FPVtyG RnyKOwOzxbdhLkcT2nW/+6+ss9uRnGzCy3U/etoA3SpKweRQmN83GWRD3YBkheJB KwSPK1GT04bRXCA/CaXq3G8067cBsYDAd1Re8yP4S0rs9iAYjy0WqOfExuEwJbW0 dwZqrV9E4sXXlX0lr6DrMdXhLFng/oNcaKZNkQFGt1OVog3nbXImwMhoTvQx8qbo CD+jDtjCSpsVhISPoAt6W6qc5tKStCGgsOihfC4qvCq3zHilEEmnmU5vbxLxH3MF JxrbYaAOjxGZOjQW9JTA6vYddlJloenUo0XqqXbbRmyFp/+nmGXf+ME7vptEnvL3 o9T9bNcV18qQj0/1FTyOmLcS0We/gyIuVAr9RSTGw+F7fQYBuqQ/UwVNFUFNr474 YQm+h2G4aTg/eiyW0Bm9WfA7XW0Thvy+PpEz3gJtuH6ran14cVC2omSTotgn79Ux lvwuqKJv1g+onrgiLVU6ImgGQ2br8pJz1K2ttfM3xZvZPaUkBvA= =nWV2 -----END PGP SIGNATURE----- --nextPart1717288.LoY9VqkToe-- From nobody Fri May 10 07:02:42 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC60E120096; Fri, 10 May 2019 07:02:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JnTA-wPbv_DN; Fri, 10 May 2019 07:02:38 -0700 (PDT) Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91A47120021; Fri, 10 May 2019 07:02:38 -0700 (PDT) Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.phx2.redhat.com [10.5.11.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 4312C7A178; Fri, 10 May 2019 14:02:38 +0000 (UTC) Received: from ovpn-117-18.phx2.redhat.com (ovpn-117-18.phx2.redhat.com [10.3.117.18]) by smtp.corp.redhat.com (Postfix) with ESMTPS id D278F5E7D1; Fri, 10 May 2019 14:02:37 +0000 (UTC) Message-ID: From: Simo Sorce To: Benjamin Kaduk , draft-ietf-curdle-gss-keyex-sha2@ietf.org Cc: curdle@ietf.org Date: Fri, 10 May 2019 10:02:36 -0400 In-Reply-To: <20190508150604.GB30884@kduck.mit.edu> References: <20190508150604.GB30884@kduck.mit.edu> Organization: Red Hat, Inc. Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.79 on 10.5.11.14 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.28]); Fri, 10 May 2019 14:02:38 +0000 (UTC) Archived-At: Subject: Re: [Curdle] new-AD review comments on draft-ietf-curdle-gss-keyex-sha2-08 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 May 2019 14:02:41 -0000 Answers inline. On Wed, 2019-05-08 at 10:06 -0500, Benjamin Kaduk wrote: > Hi all, > > I'm almost ready to send draft-ietf-curdle-gss-keyex-sha2 to the IESG for > evaluation, but would like to see a new revision posted first, mostly for > the Abstract changes. In addition to the changes mentioned below, please > also go ahead and make the editorial changes mentioned in the last > call/directorate reviews. > > -Ben > > Abstract > > This document specifies additions and amendments to RFC4462. It > defines a new key exchange method that uses SHA-2 for integrity and > deprecates weak DH groups. The purpose of this specification is to > > I think we need to remove this statement about "deprecates weak DH groups"; > I didn't see any further discussion of such deprecations in any revision of > the document. See Hubert's question > Section 2 > > Following the > rationale of [RFC8268] only SHA-256 and SHA-512 hashes are used for > DH groups. For NIST curves the same curve-to-hashing algorithm > pairing used in [RFC5656] is adopted for consistency. > > 8268 doesn't provide a whole lot of rationale for using SHA-256, rather, > the closest thing to guidance would be in Section 1 where it cites the NSA > IAD FAQ that wants to *avoid* using SHA-256. So perhaps it's better to say > that this just follows the practice of 8268, rather than the rationale from > it, especially since we are just using a "consistency" argument for the > NIST curves' hashes. Fixed, replaced "rationale" with "practice" > Section 3 > > RFC 8174 has an updated boilerplate text to use for the BCP 14 keywords. Fixed > Section 4 > > The method name for each method is the concatenation of > the family method name with the Base64 encoding of the MD5 hash > [RFC1321] of the ASN.1 DER encoding [ISO-IEC-8825-1] of the > underlying GSS-API mechanism's OID. [...] > > nit: I'd suggest using the "family name prefix" to match the table, rather > than "family method name". Fixed > Section 5 > > In [RFC5656] new SSH key exchange algorithms based on Elliptic Curve > Cryptography are introduced. We reuse much of section 4 to define > GSS-API-authenticated ECDH Key Exchanges. > > nit: I think this is intended to refer to Section 4 of RFC 5656, but the > current text reads like we are referring to Section 4 of the current > document. Fixed > Section 5.1 > > For NIST Curves keys use uncompressed point representation and must > > nit: "the" > > be converted using the algorithm in Section 2.3.4 of [SEC1v2]. If > the conversion fails or the point is trasmitted using compressed > > nit: "the" both nits Fixed > representation, the key exchange MUST fail. > > A GSS Context is established according to Section 4 of [RFC5656]; The > client initiates the establishment using GSS_Init_sec_context() and > the server completes it using GSS_Accept_sec_context(). For the > > I'm not sure what this reference was intended to be; the current one > doesn't really seem right, though. > > Also, in a fully general GSS negotiation loop, the server does not > necessarily make the last step, so "completes" may be slightly misleading. Would it be ok to replace "completes" with "responds to" ? > This key > exchange process will exchange only a single token once the context > has been established, therefore the replay_det_req_flag and > sequence_req_flag SHOULD be set to "false". > > nit: "single message token", since we are not making a statement about > context establishment tokens, and the previous text was about the context > establishment process which might cause the reader to jump towards context > tokens here. I am not sure what you are suggesting/requesting here, can you clarify? > For curve25519 and curve448 the algorithm in Section 6 > of [RFC7748] is used instead. > > nits: "algorithms", "are" (since there are different procedures in > subsections 6.1 and 6.2 for the two curves). Fixed > Section 6 > > It's not clear to me why the "Implementation Support" column is here -- it > duplicates content from tables elsewhere in the document, and does not seem > to be part of the registration template. Ok, I'll drop the column. > Section 7.3 > > Some GSSAPI mechanisms can optionally delegate credentials to the > target host by setting the deleg_ret_flag. In this case extra care > must be taken to ensure that the acceptor being authenticated matches > the target the user intended. [...] > > This is a bit weird to read, since the setting of the deleg_ret_flag is not > what effectuates the delegation of credentials; that happens by virtue of > the exchange of context tokens. (Also, RFC 2743 only lists a > deleg_req_flag; the acceptor-side state is passed in the deleg_state > boolean.) A simple replacement with deleg_req_flag doesn't work, either, > as that's not something the mechanism does, but rather the GSSAPI consumer. > So I think we may need a broader change, like: > > % Some GSSAPI mechanisms can act on a request to delegate credentials to > % the target host when the deleg_req_flag is set. In this case, extra care > % must be taken to ensure that the acceptor being authenticated matches the > % target the user intended. [...] > > (And yes, I know that I'm basically responsible for this text being > present; it may well have been my error originally.) I like your wording better too, and nice catch on the flag name typo. Once I get answers on the remaining open questions I will include the results of the discussion in the document[1] and issue a new draft. Thanks, Simo. [1] https://github.com/simo5/ietf/blob/master/draft-ietf-curdle-gss-keyex-sha2.xml -- Simo Sorce Sr. Principal Software Engineer Red Hat, Inc From nobody Sat May 18 01:28:32 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 966AE1202EA for ; Sat, 18 May 2019 01:28:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.863 X-Spam-Level: X-Spam-Status: No, score=-0.863 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FORGED_HOTMAIL_RCVD2=0.874, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hotmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3GvJ4RUOWNFM for ; Sat, 18 May 2019 01:28:27 -0700 (PDT) Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-oln040092255066.outbound.protection.outlook.com [40.92.255.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8022212004E for ; Sat, 18 May 2019 01:28:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3R5dXIqkt1qhBc6nb/XJ19weVMfAuxFC0Kk3KruEZ2g=; b=sXdvYndoS8hcGTfxK1bJ86QPWvHiYsdHkMc0Lne5SJjRGPeJF7/TJRz2uZFH6Z5lRMFKVKDxMy9KzRHWuQNqo7Ww5WU8/mvez8i+L5QJTnN1cRL9lRz2UC2u6Du32nGLIN0WvU4HohgB+kHT6N0iGJg+1Nhnptz5jbZXYp/jUQfeBbe2Eh864VRraZB1Hr3c1C4lEaRYTyD9ua/JFpov16GQQGHN8TERKVr/00dWiqaWhnzOaAOUXkMxBN8ccuj9LaRq8jCFUhize0u7OpN3LFhnftyz06Q05wObGjG22kPN07gFbK2H+15TCfQEiiGOEsqiYqF7VN29VIQneb//Nw== Received: from HK2APC01FT060.eop-APC01.prod.protection.outlook.com (10.152.248.57) by HK2APC01HT089.eop-APC01.prod.protection.outlook.com (10.152.249.54) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1900.16; Sat, 18 May 2019 08:28:25 +0000 Received: from MAXPR01MB2304.INDPRD01.PROD.OUTLOOK.COM (10.152.248.52) by HK2APC01FT060.mail.protection.outlook.com (10.152.249.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1900.16 via Frontend Transport; Sat, 18 May 2019 08:28:25 +0000 Received: from MAXPR01MB2304.INDPRD01.PROD.OUTLOOK.COM ([fe80::c5a6:a57c:f79f:321f]) by MAXPR01MB2304.INDPRD01.PROD.OUTLOOK.COM ([fe80::c5a6:a57c:f79f:321f%4]) with mapi id 15.20.1900.010; Sat, 18 May 2019 08:28:25 +0000 From: pradeep xplorer To: "curdle@ietf.org" Thread-Topic: Fwd: Thread-Index: AQHVDVNxU7iye1dspU6ayETEpG0dZqZwjKC+ Date: Sat, 18 May 2019 08:28:25 +0000 Message-ID: References: , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-incomingtopheadermarker: OriginalChecksum:52B0B0134AF4F7BCE810651DB0EB493EDE14EEE1493055D529E6E0C15BECD546; UpperCasedChecksum:22158C232E81B3EE9C7BCF675A0B9A0868183915D68F46DDCAF4DBF39539FA1A; SizeAsReceived:6724; Count:43 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [o+a66wTm1z00iKwmlZUMFO34796Aa9mqcxMclGr4uCA=] x-ms-publictraffictype: Email x-incomingheadercount: 43 x-eopattributedmessage: 0 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(5050001)(7020095)(20181119110)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031323274)(2017031324274)(2017031322404)(1601125500)(1603101475)(1701031045); SRVR:HK2APC01HT089; x-ms-traffictypediagnostic: HK2APC01HT089: x-ms-exchange-purlcount: 2 x-microsoft-antispam-message-info: Onxg/nxtaPf/gIy0c1U5eaXpBFvcgDQ0tng1fxf/S1LC8VUJfjKScRkoyJq+QbKAMt5L+VVHTTtez+Mzm5tfTy4PLfU6p7Lb1LB+jLZBTGXd/k5PJ+dSYY6cXUUzMKf/3+4KMAPQHprXD/+szc0JqJtMXowPgGqK6z75o2+GcslOWa3JLjYzMdao0QSlw7E4 Content-Type: multipart/alternative; boundary="_000_MAXPR01MB2304C72C6661F0DFE3104082B7040MAXPR01MB2304INDP_" MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 5f375c6e-cb2b-4025-0b5c-08d6db6acbc2 X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2019 08:28:25.0462 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: HK2APC01HT089 Archived-At: Subject: [Curdle] Fw: Fwd: X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 May 2019 08:28:30 -0000 --_000_MAXPR01MB2304C72C6661F0DFE3104082B7040MAXPR01MB2304INDP_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable ________________________________ From: pradeep@dhyanayoga.info Sent: Saturday, May 18, 2019 1:56 PM To: pradeepan88@hotmail.com Subject: Fwd: Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: ladyofmanynames@gmail.com, ardenfire@yahoo.com, scotte.stafford@siap.pe= ntagon.mil, sovereignamber@hotmail.com, fmcreative@fantasymakers.com, amy@a= mytanathorn.com, dwestergreen@koenigrubloff.com, sumbody@sumbody.com, hr@ha= rbin.org, info@olt.org, otp.informationdesk@icc-cpi.int, icann@icann.org Sent: Sat, 18 May 2019 9:47 Subject: I am writing from coimbatore to me vk shankaravarma has been used to threat= en me to leave palakkad and i see the hands of criminals like Sridhar balan= kannan Durga temple and whoever behind this My mother needs me and the criminals are not allowing me to bring her here = and I have a dependency on her as well Pradeep kumar xplorer Sent from MailDroid [https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-anim= ated-no-repeat-v1.gif] I=92m protected = online with Avast Free Antivirus. Get it here =97 it=92s free forever. --_000_MAXPR01MB2304C72C6661F0DFE3104082B7040MAXPR01MB2304INDP_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable


From: pradeep@dhyanayoga.in= fo <pradeep@dhyanayoga.info>
Sent: Saturday, May 18, 2019 1:56 PM
To: pradeepan88@hotmail.com
Subject: Fwd:
 


Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: ladyofmanynames@gmail.com, ardenfire@yahoo.com, scotte.stafford@siap.pe= ntagon.mil, sovereignamber@hotmail.com, fmcreative@fantasymakers.com, amy@a= mytanathorn.com, dwestergreen@koenigrubloff.com, sumbody@sumbody.com, hr@ha= rbin.org, info@olt.org, otp.informationdesk@icc-cpi.int, icann@icann.org
Sent: Sat, 18 May 2019 9:47
Subject:

I am writing from coimbatore to me vk shankaravarma has been used to threat= en me to leave palakkad and i see the hands of criminals like Sridhar balan= kannan Durga temple and whoever behind this
My mother needs me and the criminals are not allowing me to bring her here = and I have a dependency on her as well
Pradeep kumar xplorer

Sent from MailDroid=

3D"" I=92m protected online with Avast Free Antivirus. Get it here =97 it=92s free forever.
=
--_000_MAXPR01MB2304C72C6661F0DFE3104082B7040MAXPR01MB2304INDP_-- From nobody Sat May 18 01:29:01 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA2CE1202DE for ; Sat, 18 May 2019 01:28:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.864 X-Spam-Level: X-Spam-Status: No, score=-0.864 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FORGED_HOTMAIL_RCVD2=0.874, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=hotmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 94pups7NwzAK for ; Sat, 18 May 2019 01:28:54 -0700 (PDT) Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-oln040092255027.outbound.protection.outlook.com [40.92.255.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 008E312004E for ; Sat, 18 May 2019 01:28:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=e0RQ2w5giNjdJhtZgS60KMEMd9eGdkQqsAPzKFXa254=; b=S2262R2X9FGJGwst/Kmkv5ClAP5L3xWAOXtFQOdSXZhVjMPK1nR58kqq5uIrtdn/LjacXJd3Ti75FEhKp1GHi/aqYc+oOuoaDD4NVFqMibZfwjZEXS/Wyu0iixHQ5aIlQHW+Vnz/Q4aA7r1E+NzJ9CRQZ5cuc+wS9ZEP6iNfrdFtCUocRaNcE1XsiJSdmHQEeT3xk61HF7xkPL7WSZeCdPYX3av8PFUBPGX/5T6lQREBOj9aTmQGW5hHSeJgcq7hZ4XuRTrFDig10RMMkt+RY20X/yr+5mhTZVh0hUsHRV7WJKuSPdOCuOsmBAHHuTIDYQb+wLeAkvHu92xtIQ4J2Q== Received: from HK2APC01FT060.eop-APC01.prod.protection.outlook.com (10.152.248.51) by HK2APC01HT200.eop-APC01.prod.protection.outlook.com (10.152.249.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1900.16; Sat, 18 May 2019 08:28:49 +0000 Received: from MAXPR01MB2304.INDPRD01.PROD.OUTLOOK.COM (10.152.248.52) by HK2APC01FT060.mail.protection.outlook.com (10.152.249.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1900.16 via Frontend Transport; Sat, 18 May 2019 08:28:49 +0000 Received: from MAXPR01MB2304.INDPRD01.PROD.OUTLOOK.COM ([fe80::c5a6:a57c:f79f:321f]) by MAXPR01MB2304.INDPRD01.PROD.OUTLOOK.COM ([fe80::c5a6:a57c:f79f:321f%4]) with mapi id 15.20.1900.010; Sat, 18 May 2019 08:28:49 +0000 From: pradeep xplorer To: "curdle@ietf.org" Thread-Topic: Re: Thread-Index: AQHVDVOBRh+BOTm0i0GAXjzfG7r5gqZwjLxB Date: Sat, 18 May 2019 08:28:49 +0000 Message-ID: References: <3375966c-75a1-4e93-a13d-32c854cb5e70.maildroid@localhost> <03e6f6cb-0713-48da-909c-accd3afc8265.maildroid@localhost> <346f02af-9be9-41ed-83ca-5bd23673ccbd.maildroid@localhost> <3d3a6480-6ff8-4faf-b067-0b6fb243073d.maildroid@localhost> <03a43b5e-4f13-4e27-8df1-99b453e4be4a.maildroid@localhost> <554525ad-2058-46a1-b046-1855e362a83b.maildroid@localhost> <36bd26cd-8d45-45c2-b2c8-1aa6e1a1a148.maildroid@localhost> <8567eb98-ca65-4e5c-9b33-feb1d545f405.maildroid@localhost>, <013c4fc0-7d40-49d9-b464-54c898b9edf4.maildroid@localhost> In-Reply-To: <013c4fc0-7d40-49d9-b464-54c898b9edf4.maildroid@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-incomingtopheadermarker: OriginalChecksum:BDAA6948E652F7EF4411E9E8022E7F87DE681F4B17D5EC35D82BC564D92ACA8E; UpperCasedChecksum:DF81C66DEA1CD0FDE5BFF6E5D654FFD122E3FA1B79B457A2AB2B40EBB47FCCAA; SizeAsReceived:7387; Count:43 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [ilaFmQUaJndYqwL4VgGc+jVhg1dBm/nGF8VUMRxPDqg=] x-ms-publictraffictype: Email x-incomingheadercount: 43 x-eopattributedmessage: 0 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(5050001)(7020095)(20181119110)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1601125500)(1603101475)(1701031045); SRVR:HK2APC01HT200; x-ms-traffictypediagnostic: HK2APC01HT200: x-ms-exchange-purlcount: 5 x-microsoft-antispam-message-info: eyA2/6JuIeCRuLDZtJoe3/tOCrWPVtFLKwc+cP8htAFqxct514bPRlYuBMMX+pkWpW/EQ/ZOszyT8TgbCHvEqTo30YyZrjLqxMexGlOKImc8CJR6bV9qppemkN/b3a148L819WYHJYCqHxTXhn+GDW9DAxdU1TH1t2hJo+RWCNpPYstCMk5uas8/ptSM9ypy Content-Type: multipart/alternative; boundary="_000_MAXPR01MB2304DA87B051480561794F54B7040MAXPR01MB2304INDP_" MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: b7cd65c6-9730-4b02-e32e-08d6db6ada6c X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2019 08:28:49.6379 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: HK2APC01HT200 Archived-At: Subject: [Curdle] Fw: Re: X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 May 2019 08:28:59 -0000 --_000_MAXPR01MB2304DA87B051480561794F54B7040MAXPR01MB2304INDP_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable ________________________________ From: pradeep@dhyanayoga.info Sent: Saturday, May 18, 2019 1:57 PM To: pradeepan88@hotmail.com Subject: Fwd: Re: Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com, rkumar.kpm@nic.in Sent: Sat, 18 May 2019 9:43 Subject: Re: Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com, rkumar.kpm@nic.in Sent: Sat, 18 May 2019 9:20 Subject: Re: I am now in coimbatore ate another buffet breakfast I could not bring my mo= ther here Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com Sent: Sat, 18 May 2019 6:57 Subject: Re: My mother in evening and morning asked me to contact vk shankaravarma anoth= er person who attacked me in Jan 2010 and another person who did = not solve this matter in 2015 when i arrived back from rishikesh = haridwar area when i got cheated by Ibrahim lamorde. I called in morning an= d he is saying i should go to a ci to solve this or something. I did not sa= y yes I have been detained by kerala police in ninans hospital and i suspec= t from his nature and the nature of the thieves around Me they would want m= e attacked and hospitalised again. Shankaravarma has never even once apprec= iated my website. Vk shankaravarma should have helped me relocate my mother= to a different space and my suspicion is that he is partner to this. All i= t takes is 2000rs to relocate my mother to kaliappa hotel. My mother is insane unhealthy and does not care about my websites. These ar= e economic offenders harming me for a failed relation in the 1990= s and whatever I expressed before Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com Sent: Fri, 17 May 2019 20:56 Subject: Re: I see some connection between me being harmed and detained in bethsada petu= mbavur and kannan being informed to be in always and i have no clue what th= at criminal Is employed in. I sense danger. The way balan verbally attacked= me and repeatedly entered govt homoe to discharge my mother. I am dealing = with two seasoned criminals sridhar and balan and i suspect sridhar sons ar= e also same as they have attacked me. I sense danger to me and my mother if= we cannot shift to a room. I sense these are partners to a serious crime t= hat led to the sale of sun microsystems in Jan 2010 and i sense t= he servant woman that worked for me in bangalore Wellington park looking li= ke a dark shylaja has something to do with this crime. I once felt kannan c= ould be son of that servant woman shanti. When i entered sravir store there was a van parked with two in it and one m= an was shopping.i sense balan and sridhar and kannan are partners to this l= ong crime to kill me and my mother and it's possible they extorted the 8000= 00rs harming sindhu also. There was some suspect who wrote kalis odiyya nandu menon. Some thing tells= me these want all my money because i played with mistresses and had eros f= un while in bayarea. This Durga temple is creation of that crime. I remember writing in yrec.info and that's a suspect crea= tion to extort corporate wealth to support Hinduism or all these temple cul= ts. I see many unemployed living with kids and big houses Pradeep kumar xplorer Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com Sent: Fri, 17 May 2019 20:02 Subject: Re: I could not quality test mothers lunch she has farted and for evening now i= arrived she has already had milk wheat she looks little nervous but the en= ergy I am getting from shylaja and rohini are they are not good and harming= me and her. I see some connection with kannan informed to be in alwaye and= me detained in bethsada ine02 Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com Sent: Fri, 17 May 2019 14:33 Subject: Re: My mother does not have anybody and so an organisation of unethical prevent= ed me from relating to anyone and marrying and relocating and breaking up w= ith her. At the same time they cleverly prevented me from being with her se= parated from the cousins who annoy and irritate me in a space like kathmand= u where with money I could have lived in a relation with an international w= oman and taken care of my mother. Even now a 5 million Can help me take my = mother to usa. See my tweets. An organisation operated and ran a show but p= revented me marrying someone and Being with her or relocating. I sense the = hands of criminals like Sridhar balan and theft of some money even now it i= s continuing some clever viewers and investigators have all my money or som= e of it so want to keep the status quo and slowly kill my mother and me. Pradeep kumar xplorer Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com Sent: Fri, 17 May 2019 13:32 Subject: Re: I helped my mother again urinate. Her progress is less and i am still suspe= cting shylajas food having poisonous or non healing energies. I gave 100 ml= of mango tang with glucose she is cautiously sipping. I can heal her easi= ly in a room like kaliappa hotel or elsewhere and i won't be disturbed. The= re's no life for me and she my mother is also sensing it. Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo, delpol@vsnl.com Sent: Fri, 17 May 2019 11:37 Subject: I arrived from palakkad to give some glucose drink to my mother and I bough= t tang glucose and water I made a big cup gave her a small cup she is rejec= ting it says she had complan and have to drink congi water for lunch. Morni= ng she reported fatigue and wanted my aadhar card to be kept in her pension= book Pradeep kumar xplorer Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.= org, homeons@neobee.net, amyji2@gmail.com, amy@amytanathorn.com, abuse@chas= e.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@gl= obeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@h= omeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasou= rce.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.com, hr= @harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyanayoga.in= fo Sent: Fri, 17 May 2019 7:53 Subject: Re: I have a security risk again I am again regressing and stating this I was in palakkad Feb 2004. I had email Contact with agamayoga group lori doyle asking me to do some karma yoga for= narcis tarcau and i helping out and sending emails. I did it out of friend= ship not discipleship. I took my mother in my Enfield and then later went t= o puthusery to meet with vk rajkumar who sat in office there. He was standi= ng out and he said he wanted to go to sbi bank and i tool him. On way there was some procession near town hall and stopped bike the queue= gave way and I proceeded. The suspect criminal traffic police ismail was t= here and called me back. I did not like the way he called me back or asked = me to stop and i protested at him targeting me and he attacked me threatene= d to beat Me up and gave a ticket for not having a pollution certificate. I= entered Vijnana Ramana ashram and talked to shanmukan and he recommended = kr nair who asked me to pay the fine. I left for usa after this. I suspect = this humiliation was to shift back to usa and one motivation is the house g= ayatri if i get employed and married and settled then these cousins Can inh= erit it. Other motivation is to continue exploiting me using sindhu issue. = The criminals could say i should be like the us military and attack ismail = then. But that's for lawyer kr nair to do. I still remember balan requestin= g for money to enter gulf showing visa. How could that man build this house= rohinivilla then. I was not offered any kind of position in software.anoth= er motive is agamayoga wanting me to enter thailan= d but i entered only after spending a year in mountianview and expending ab= out 30000 dollars. If then agamayoga prevented me being reemploy= ed in software or entering another relation. I am suffering isolation pover= ty and inability to help my mother whoever claiming my websites ip value ar= e criminals to me Pradeep kumar xplorer Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, dgp.pol@kerala.gov.in, ardenfire@yahoo.com, scotte.= stafford@siap.pentagon.mil, rwalker@scscourt.org, sovereignamber@hotmail.co= m, john.c.gerspach@citi.com, adv.prasadmuthuswamy@gmail.com, johnjohnassoci= ates@yahoo.co.in, dmvmediarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, i= nfo@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amyta= nathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, deptc@= jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informationd= esk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kin= oyoga.com, info@yogasource.com, info@yogaworks.com, mail@ashtangayoga.info,= info@agamayoga.com, hr@harbin.org, info@olt.org, ladyofmanynames@gmail.com= , pradeep@dhyanayoga.info Sent: Thu, 16 May 2019 21:17 Subject: Re: I have a security risk again Some thing need to be done so i can heal my mother and not get it worse and= solve this situation. . I again suspect some food poison has entered she l= ooks less vital.. may be she needs a Douche or something to expel faeces.. = I remember shylaja in menons hospital when sushilkumar was admitted did not= give some thing I bought for him kept on saying doctors don't want it give= n.. I dont know what that talks to her when i am not around. . I need my mo= ther to consent to shifting somewhere else and be under my care for few wee= ks. Pradeep kumar xplorer Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, dgp.pol@kerala.gov.in, ardenfire@yahoo.com, scotte.= stafford@siap.pentagon.mil, rwalker@scscourt.org, sovereignamber@hotmail.co= m, john.c.gerspach@citi.com, adv.prasadmuthuswamy@gmail.com, johnjohnassoci= ates@yahoo.co.in, dmvmediarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, i= nfo@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amyta= nathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, deptc@= jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informationd= esk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kin= oyoga.com, info@yogasource.com, info@yogaworks.com, mail@ashtangayoga.info,= info@agamayoga.com, hr@harbin.org, info@olt.org, ladyofmanynames@gmail.com= , pradeep@dhyanayoga.info Sent: Thu, 16 May 2019 13:27 Subject: Re: I have a security risk again Facebook.com/lugimwidnaus is my page and = there are no comments if you cannot see page or comments it is evidence of = crime Sent from MailDroid -----Original Message----- From: pradeep@dhyanayoga.info To: dgp@tncctns.gov.in, dgp.pol@kerala.gov.in, ardenfire@yahoo.com, scotte.= stafford@siap.pentagon.mil, rwalker@scscourt.org, sovereignamber@hotmail.co= m, john.c.gerspach@citi.com, adv.prasadmuthuswamy@gmail.com, johnjohnassoci= ates@yahoo.co.in, dmvmediarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, i= nfo@homeopathyhongkong.org, homeons@neobee.net, zoe.tillman@buzzfeed.com, a= myji2@gmail.com, amy@amytanathorn.com, abuse@chase.com, alerts@wellsfargo.c= om, office@vkhd.de, deptc@jcap.com, opportillo@globeacceptance.com, icann@i= cann.org, otp.informationdesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, = askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.co= m, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org,= ladyofmanynames@gmail.com Sent: Wed, 15 May 2019 21:37 Subject: I have a security risk again My mother is down and not eating food I give. She looks less vital. She mad= e me return to this house to help her urinate. The man who visited created = fear in me. I chatted with him and my mother still mentioned sindhu issue a= nd she says I abandoned amy.. she did not accept me amy and her went to mys= ore palace and i am victim of crime. The man unnecessarily asked her to app= ly for something. . My mother is not admitting she is not making any effort= to solve my situation. .she says I am hallucinating I am getting paid mill= ions of dollars. I am sure the organisation is being run using my money and= there has been no solution to these attacking me and harming me. Then my mother said something like I would leave from here. That man looks = like bhagyakumar brother and I am surprised he said things like he remember= s me from Ramachandran house. Balan is outside and is an attack threat to me. I should be with my woman a= nd frends and i still say these are slowly killing me and my mother. Sent from MailDroid [https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-anim= ated-no-repeat-v1.gif] I=92m protected = online with Avast Free Antivirus. Get it here =97 it=92s free forever. --_000_MAXPR01MB2304DA87B051480561794F54B7040MAXPR01MB2304INDP_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable


From: pradeep@dhyanayoga.in= fo <pradeep@dhyanayoga.info>
Sent: Saturday, May 18, 2019 1:57 PM
To: pradeepan88@hotmail.com
Subject: Fwd: Re:
 


Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com, rkum= ar.kpm@nic.in
Sent: Sat, 18 May 2019 9:43
Subject: Re:



Sent from MailDroid

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com, rkum= ar.kpm@nic.in
Sent: Sat, 18 May 2019 9:20
Subject: Re:


I am now in coimbatore ate another buffet breakfast I could not bring my mo= ther here

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com
Sent: Sat, 18 May 2019 6:57
Subject: Re:

My mother in evening and morning asked me to contact vk shankaravarma = another person who attacked me in Jan 2010 and another person who did not solve this mat= ter in 2015 when i arrived back from rishikesh haridwar area when i got cheate= d by Ibrahim lamorde. I called in morning and he is saying i should go to a= ci to solve this or something. I did not say yes I have been detained by k= erala police in ninans hospital and i suspect from his nature and the nature of the thieves around Me they= would want me attacked and hospitalised again. Shankaravarma has never eve= n once appreciated my website. Vk shankaravarma should have helped me reloc= ate my mother to a different space and my suspicion is that he is partner to this. All it takes is 2000rs to relocate my mother to kaliappa hotel.
My mother is insane unhealthy and does not care about my websites. These ar= e economic offenders harming me for a failed relation in the 1990s and whatever I expressed before

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com
Sent: Fri, 17 May 2019 20:56
Subject: Re:

I see some connection between me being harmed and detained in bethsada= petumbavur and kannan being informed to be in always and i have no clue wh= at that criminal Is employed in. I sense danger. The way balan verbally att= acked me and repeatedly entered govt homoe to discharge my mother. I am dealing with two seasoned criminal= s sridhar and balan and i suspect sridhar sons are also same as they have a= ttacked me. I sense danger to me and my mother if we cannot shift to a room= . I sense these are partners to a serious crime that led to the sale of sun microsystems in Jan 2010 and i sense the servant woman that worked for me in bangalore Well= ington park looking like a dark shylaja has something to do with this crime= . I once felt kannan could be son of that servant woman shanti.
When i entered sravir store there was a van parked with two in it and one m= an was shopping.i sense balan and sridhar and kannan are partners to this l= ong crime to kill me and my mother and it's possible they extorted the 800000rs harming sindhu also.
There was some suspect who wrote kalis odiyya nandu menon. Some thing tells= me these want all my money because i played with mistresses and had eros f= un while in bayarea. This Durga temple is creation of that crime.
I remember writing in yrec.info and that's= a suspect creation to extort corporate wealth to support Hinduism or all t= hese temple cults. I see many unemployed living with kids and big houses Pradeep kumar xplorer

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com
Sent: Fri, 17 May 2019 20:02
Subject: Re:

I could not quality test mothers lunch she has farted and for evening = now i arrived she has already had milk wheat she looks little nervous but t= he energy I am getting from shylaja and rohini are they are not good and ha= rming me and her. I see some connection with kannan informed to be in alwaye and me detained in bethsada ine02
Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com
Sent: Fri, 17 May 2019 14:33
Subject: Re:

My mother does not have anybody and so an organisation of unethical pr= evented me from relating to anyone and marrying and relocating and breaking= up with her. At the same time they cleverly prevented me from being with h= er separated from the cousins who annoy and irritate me in a space like kathmandu where with money I could h= ave lived in a relation with an international woman and taken care of my mo= ther. Even now a 5 million Can help me take my mother to usa. See my tweets= . An organisation operated and ran a show but prevented me marrying someone and Being with her or relocating.= I sense the hands of criminals like Sridhar balan and theft of some money = even now it is continuing some clever viewers and investigators have all my= money or some of it so want to keep the status quo and slowly kill my mother and me.
Pradeep kumar xplorer

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com
Sent: Fri, 17 May 2019 13:32
Subject: Re:

I helped my mother again urinate. Her progress is less and i am still = suspecting shylajas food having poisonous or non healing energies. I gave 1= 00 ml of mango tang with glucose she is cautiously sipping.  I can hea= l her easily in a room like kaliappa hotel or elsewhere and i won't be disturbed. There's no life for me and sh= e my mother is also sensing it.

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info, delpol@vsnl.com
Sent: Fri, 17 May 2019 11:37
Subject:

I arrived from palakkad to give some glucose drink to my mother and I = bought tang glucose and water I made a big cup gave her a small cup she is = rejecting it says she had complan and have to drink congi water for lunch. = Morning she reported fatigue and wanted my aadhar card to be kept in her pension book
Pradeep kumar xplorer

Sent from MailDroid

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, ardenfire@yahoo.com, scotte.stafford@siap.pentagon.= mil, rwalker@scscourt.org, sovereignamber@hotmail.com, john.c.gerspach@citi= .com, adv.prasadmuthuswamy@gmail.com, johnjohnassociates@yahoo.co.in, dmvme= diarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net, amyji2@gmail.com, amy@amy= tanathorn.com, abuse@chase.com, alerts@wellsfargo.com, office@vkhd.de, dept= c@jcap.com, opportillo@globeacceptance.com, icann@icann.org, otp.informatio= ndesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.c= om, mail@ashtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org= , ladyofmanynames@gmail.com, pradeep@dhyanayoga.info
Sent: Fri, 17 May 2019 7:53
Subject: Re: I have a security risk again

I am again regressing and stating this
I was in palakkad Feb 2004. I had email
Contact with agamayoga group lori doyle asking me to do some karma yoga for= narcis tarcau and i helping out and sending emails. I did it out of friend= ship not discipleship. I took my mother in my Enfield and then later went t= o puthusery to meet with vk rajkumar who sat in office there. He was standing out and he said he wanted to go t= o sbi bank and i tool him.
On way there was some procession near town hall and  stopped bike the = queue gave way and I proceeded. The suspect criminal traffic police ismail = was there and called me back. I did not like the way he called me back or a= sked me to stop and i protested at him targeting me and he attacked me threatened to beat Me up and gave a ticket= for not having a pollution certificate. I entered Vijnana Ramana  ash= ram and talked to shanmukan and he recommended kr nair who asked me to pay = the fine. I left for usa after this. I suspect this humiliation was to shift back to usa and one motivation is = the house gayatri if i get employed and married and settled then these cous= ins Can inherit it. Other motivation is to continue exploiting me using sin= dhu issue. The criminals could say i should be like the us military and attack ismail then. But that's for la= wyer kr nair to do. I still remember balan requesting for money to enter gu= lf showing visa. How could that man build this house rohinivilla then. I wa= s not offered any kind of position in software.another motive is agam= ayoga wanting me to enter thailand but i entered only after spending a year= in mountianview and expending about 30000 dollars. If then agamayoga prevented me bei= ng reemployed in software or entering another relation. I am suffering isol= ation poverty and inability to help my mother whoever claiming my websites = ip value are criminals to me
Pradeep kumar xplorer

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, dgp.pol@kerala.gov.in, ardenfire@yahoo.com, scotte.= stafford@siap.pentagon.mil, rwalker@scscourt.org, sovereignamber@hotmail.co= m, john.c.gerspach@citi.com, adv.prasadmuthuswamy@gmail.com, johnjohnassoci= ates@yahoo.co.in, dmvmediarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net,= amyji2@gmail.com, amy@amytanathorn.com, abuse@chase.com, alerts@wellsfargo= .com, office@vkhd.de, deptc@jcap.com, opportillo@globeacceptance.com, icann= @icann.org, otp.informationdesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@= yogasource.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.= com, hr@harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyana= yoga.info
Sent: Thu, 16 May 2019 21:17
Subject: Re: I have a security risk again

Some thing need to be done so i can heal my mother and not get it wors= e and solve this situation. . I again suspect some food poison has entered = she looks less vital.. may be she needs a Douche or something to expel faec= es.. I remember shylaja in menons hospital when sushilkumar was admitted did not give some thing I bought fo= r him kept on saying doctors don't want it given.. I dont know what that ta= lks to her when i am not around. . I need my mother to consent to shifting = somewhere else and be under my care for few weeks.
Pradeep kumar xplorer

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, dgp.pol@kerala.gov.in, ardenfire@yahoo.com, scotte.= stafford@siap.pentagon.mil, rwalker@scscourt.org, sovereignamber@hotmail.co= m, john.c.gerspach@citi.com, adv.prasadmuthuswamy@gmail.com, johnjohnassoci= ates@yahoo.co.in, dmvmediarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net,= amyji2@gmail.com, amy@amytanathorn.com, abuse@chase.com, alerts@wellsfargo= .com, office@vkhd.de, deptc@jcap.com, opportillo@globeacceptance.com, icann= @icann.org, otp.informationdesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@usdoj.gov, info@kinoyoga.com, info@= yogasource.com, info@yogaworks.com, mail@ashtangayoga.info, info@agamayoga.= com, hr@harbin.org, info@olt.org, ladyofmanynames@gmail.com, pradeep@dhyana= yoga.info
Sent: Thu, 16 May 2019 13:27
Subject: Re: I have a security risk again

Facebook.com/lugimwidnaus= is my page and there are no comments if you cannot see page or comment= s it is evidence of crime

Sent from MailDroid=

-----Original Message-----
From: pradeep@dhyanayoga.info
To: dgp@tncctns.gov.in, dgp.pol@kerala.gov.in, ardenfire@yahoo.com, scotte.= stafford@siap.pentagon.mil, rwalker@scscourt.org, sovereignamber@hotmail.co= m, john.c.gerspach@citi.com, adv.prasadmuthuswamy@gmail.com, johnjohnassoci= ates@yahoo.co.in, dmvmediarelations@dmv.ca.gov, zoe.tillman@buzzfeed.com, info@homeopathyhongkong.org, homeons@neobee.net,= zoe.tillman@buzzfeed.com, amyji2@gmail.com, amy@amytanathorn.com, abuse@ch= ase.com, alerts@wellsfargo.com, office@vkhd.de, deptc@jcap.com, opportillo@= globeacceptance.com, icann@icann.org, otp.informationdesk@icc-cpi.int, rada@homeopaticka-asociacia.sk, askdoj@us= doj.gov, info@kinoyoga.com, info@yogasource.com, info@yogaworks.com, mail@a= shtangayoga.info, info@agamayoga.com, hr@harbin.org, info@olt.org, ladyofma= nynames@gmail.com
Sent: Wed, 15 May 2019 21:37
Subject: I have a security risk again

My mother is down and not eating food I give. She looks less vital. She mad= e me return to this house to help her urinate. The man who visited created = fear in me. I chatted with him and my mother still mentioned sindhu issue a= nd she says I abandoned amy.. she did not accept me amy and her went to mysore palace and i am victim of cri= me. The man unnecessarily asked her to apply for something. . My mother is = not admitting she is not making any effort to solve my situation. .she says= I am hallucinating I am getting paid millions of dollars. I am sure the organisation is being run using my= money and there has been no solution to these attacking me and harming me.=
Then my mother said something like I would leave from here. That man looks = like bhagyakumar brother and I am surprised he said things like he remember= s me from Ramachandran house.
Balan is outside and is an attack threat to me. I should be with my woman a= nd frends and i still say these are slowly killing me and my mother.

Sent from MailDroid=

3D"" I=92m protected online with Avast Free Antivirus. Get it here =97 it=92s free forever.
=
--_000_MAXPR01MB2304DA87B051480561794F54B7040MAXPR01MB2304INDP_-- From nobody Sat May 25 13:10:32 2019 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EAF2120131; Sat, 25 May 2019 13:10:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i4DjXfpSOoRH; Sat, 25 May 2019 13:10:28 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61AFD12012C; Sat, 25 May 2019 13:10:28 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 21B23B82054; Sat, 25 May 2019 13:10:02 -0700 (PDT) To: lijun.liao@gmail.com, simon@josefsson.org, ietf@augustcellars.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: kaduk@mit.edu, iesg@ietf.org, curdle@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20190525201002.21B23B82054@rfc-editor.org> Date: Sat, 25 May 2019 13:10:02 -0700 (PDT) Archived-At: Subject: [Curdle] [Errata Held for Document Update] RFC8410 (5707) X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 May 2019 20:10:30 -0000 The following errata report has been held for document update for RFC8410, "Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5707 -------------------------------------- Status: Held for Document Update Type: Editorial Reported by: Lijun Liao Date Reported: 2019-04-29 Held by: Benjamin Kaduk (IESG) Section: 10.2 Original Text ------------- Corrected Text -------------- Notes ----- In the example certificate, the critical-field of extensions keyUsage and subjectKeyIdentifier are of default value 'false'. They should not be included according to DER encoding rule. -------------------------------------- RFC8410 (draft-ietf-curdle-pkix-10) -------------------------------------- Title : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure Publication Date : August 2018 Author(s) : S. Josefsson, J. Schaad Category : PROPOSED STANDARD Source : CURves, Deprecating and a Little more Encryption Area : Security Stream : IETF Verifying Party : IESG