From nobody Mon Feb 1 17:41:32 2021 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C84723A1654; Mon, 1 Feb 2021 17:41:26 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Murray Kucherawy via Datatracker To: "The IESG" Cc: draft-ietf-dime-group-signaling@ietf.org, dime-chairs@ietf.org, dime@ietf.org, jounikor@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Murray Kucherawy Message-ID: <161223008679.3966.11781007881267691335@ietfa.amsl.com> Date: Mon, 01 Feb 2021 17:41:26 -0800 Archived-At: Subject: [Dime] Murray Kucherawy's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Feb 2021 01:41:27 -0000 Murray Kucherawy has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I agree with Barry's editorial suggestions. What does the "*)" in the table in Section 3.3 mean? >From Section 10: [...] if the Diameter client or server is compromised, an attacker could launch DoS attacks by terminating a large number of sessions with a limited set of commands using the session group management concept. Is it worth mentioning that an attacker could also mess with the set of sessions associated with a group, possibly causing disruptions other than bulk session terminations? From nobody Tue Feb 2 03:19:02 2021 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A17243A0CE5; Tue, 2 Feb 2021 03:18:57 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?=C3=89ric_Vyncke_via_Datatracker?= To: "The IESG" Cc: draft-ietf-dime-group-signaling@ietf.org, dime-chairs@ietf.org, dime@ietf.org, jounikor@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?=C3=89ric_Vyncke?= Message-ID: <161226473720.3689.6553919994209922910@ietfa.amsl.com> Date: Tue, 02 Feb 2021 03:18:57 -0800 Archived-At: Subject: [Dime] =?utf-8?q?=C3=89ric_Vyncke=27s_No_Objection_on_draft-ietf?= =?utf-8?q?-dime-group-signaling-13=3A_=28with_COMMENT=29?= X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Feb 2021 11:18:58 -0000 Éric Vyncke has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for the work put into this document. Like Barry and other ADs, I found this document difficult to read: long and complex sentences do not help the reader (but I am not a native English speaker). Therefore, I trust the responsible AD for the correctness of all the details in the specification. E.g., FSM or time line diagrams would have been helpful. Please find below some non-blocking COMMENT points (but replies would be appreciated), and some nits. I hope that this helps to improve the document, Regards, -éric == DISCUSS == == COMMENTS == Any reason why the authors affiliation is not shown ? The shepherd write-up is dated back in 2018... Is it still applicable ? -- Section 7.2 -- About the flag bits, I wonder why the values are not 0x01 and 0x02 rather than 0x01 and 0x10. Isn't this a waste of bits ? Should the IANA sub-registry for those flags be mentioned? From nobody Tue Feb 2 17:40:28 2021 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 484743A11B2; Tue, 2 Feb 2021 17:40:26 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Benjamin Kaduk via Datatracker To: "The IESG" Cc: draft-ietf-dime-group-signaling@ietf.org, dime-chairs@ietf.org, dime@ietf.org, jounikor@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Benjamin Kaduk Message-ID: <161231642581.26850.13965330226098009886@ietfa.amsl.com> Date: Tue, 02 Feb 2021 17:40:26 -0800 Archived-At: Subject: [Dime] Benjamin Kaduk's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 01:40:26 -0000 Benjamin Kaduk has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I agree with the other commenters that an editorial pass over the document before it is sent to the RFC Editor is probably in order; I only noted the more eggregious nits that have obvious fixes but skipped the ones where I did not have a resolution ready at hand to suggest. Barry's remarks about restrictive vs non-restrictive clauses are particularly important. I also have several high-level issues that don't quite rise to discuss-level but seem worth getting resolution on; they mostly involve edge cases where the current text either leaves me unclear on what is supposed to happen or seems to present conflicting guidance: - what's the error handling in cases of partial success? * For operations adding/removing sessions to/from groups, it seems that the general principle is that the new changes introduced with any group-relevant CCF exchange are to be treated atomically: either all group additions/removals succeed or all fail (and when it fails the session is forced into a single-session fallback mode). But for server-initiated modifications this is enforced by "if the client can't do it, the client MUST tear down the affected session(s)", and I'm not sure if there's a case where the client can send a new request that includes some modifications and the server also tries to make some modifications in its response; such a scenario might in effect allow partial success and might also be hard to correctly interpret. * For operations acting on groups, we do allow partial success (DIAMETER_LIMITED_SUCCESS) and attempt to mandate fallback to single-session operation for affected sessions, but the specifics of how the Failed-AVP effectuates this are not clear to me (see my comment on Section 4.4.3). - we require that group identifiers are globally unique, which can be done with the diameter-node namespace prefix. But for the portion after that prefix, we seem to suggest reusing the construction from Section 8.8 of RFC 6733, which is just (in essence) a 64-bit global counter. In the vein of draft-gont-numeric-ids-sec-considerations, that seems overly constrained, in that it reveals sequencing across group creation and rate of per-node group creation to the remote peer. It seems that a construction akin to a keyed hash of a counter would preserve the guaranteed uniqueness property but avoid leaking such information to the network. - the permissions model is a bit unorthodox, with groups "owned" by their creator but the binding of a session to a group "owned" by the node that performed the binding. It seems like there is some risk of deadlock situations or conflict, e.g., where a client has added a session to a group G but the server wants to remove the session from G, or where a session is part of a group but the owner of the group wants to delete the group. For the latter case, my understanding is that group deletion "trumps" ownership of the session/group binding, such that deletion can proceed even while sessions are in the group, but I'm less sure what should happen in the former case (or others). - Is it possible to have a group with no member sessions? Section 3.3 suggests that if the last session is removed the group should be deleted, but AFAICT this would still require the node performing the removal to unset SESSION_GROUP_STATUS_IND, and I didn't see a requirement to do that spelled out. I do see how it is impossible to create a group directly in a state with no member sessions. - Is there a requirement to always send the current state of group membership when acting on a session? I could (perhaps naively) imagine a case where due to previous interactions a session belongs to groups G1, G2, and G3, but in some subsequent request the client only mentions G1. Does the membership in G2 and G3 get implicitly retained in the absence of an explicit unset SESSION_GROUP_ALLOCATION_ACTION or are there some other constraints that make such a scenario impossible? - Is there supposed to be a strong distinction between "including" an AVP and "appending" one? I see that 6733 does make some fairly clear distinction between the terms, but it seems that (e.g.) in Section 4.2.1 we use both phrasings to discuss Session-Group-Info. Now for some section-by-section (mostly editorial or nit-level) notes. Abstract, Introduction a million concurrent Diameter sessions. Recent use cases have revealed the need for Diameter nodes to apply the same operation to a large group of Diameter sessions concurrently. The Diameter base I note that the -00 is from 2012; are these use cases still "recent"? Section 3 As an editorial note, the way the current text jumps in to say that sessions can be assigned to groups leaves the reader uncertain whether this is describing preexisting functionality or the new mechanisms added by this document. A top-level intro paragraph for Section 3 that says roughly "to accomodate bulk operations on Diameter sessions, the concept of session groups is introduced; once sessions are added to a group, a command acting on the group will affect all the member sessions" might help. Section 3.3 If I understand correctly, the lines in the table for "remove a session from an owned Session Group"/"remove a session from a non-owned Session Group" mean only that this operation can be done sometimes, not that it can always be done (per the lines about "created the assignment". Would it be helpful to indicate this, perhaps by using a different symbol for those lines and adding a footnote? Section 4 While I understand the desire to keep the document structure as it is, with the actual AVPs specified in Section 7, it would have been very helpful to have a toplevel introductory paragraph here that mentions or references that there is a containing Session-Group-Info grouped AVP that contains the Session-Group-Control-Vector with information about the action and group, and zero or one(?) Session-Group-Id AVP to identify the group when a specific group is being identified. This would also allow clarifying whether the Session-Group-Id AVP is currently only defined to appear within the Session-Group-Info. Section 4.1.1 Such applications provide intrinsic discovery for the support of session grouping capability using the assigned Application Id advertised during the capability exchange phase two Diameter peers establish a transport connection (see Section 5.3 of [RFC6733]). nit: I think there's a missing word here, perhaps "where" after "phase"? Section 4.2.1 The client may also indicate in the request that the server is responsible for the assignment of the session in one or multiple sessions owned by the server. [...] nit(?): is this supposed to be "assignment of the session into one or multiple session *groups* owned by the server"? I'm having a hard time understanding it as written. If the assignment of the session to one or some of the multiple identified session groups fails, the session group assignment is treated as failure. In such case the session is treated as single session without assignment to any session group by the Diameter nodes. The server sends the response to the client and MAY include those Session-Group-Info AVPs for which the group assignment failed. The SESSION_GROUP_ALLOCATION_ACTION flag of included Session-Group- Info AVPs MUST be cleared. I guess I understand the part where the entire set of group-assignment operations has to succeed or fail as an atomic unit, but this text perhaps implies some semantics that the server is supposed to only explicitly include in the response the subset of group assignments that were unable to be processed, omitting the ones that could have been processed (but were not processed since a failure on one means that none of the operations get applied). If that's the intent, I'd suggest being a bit more explicit about what is and isn't sent. A Diameter client, which sent a request for session initiation to a Diameter server and appended a single or multiple Session-Group-Id AVPs but cannot find any Session-Group-Info AVP in the associated (editorial) the phrase "cannot find" makes me wonder how hard it's expected to be looking; more definitive statements about "not present" seem more typical for RFC style. Section 4.2.3 When a Diameter server enforces an update to the assigned groups mid- nit: this seems to be the only time we use the word "enforce" in this sense in the document; previous discussion seems to just use "decides to make an update" or similar. answer. The client subsequently sends a service-specific re- authorization request containing one or multiple Session-Group-Info AVPs with the SESSION_GROUP_ALLOCATION_ACTION flag set and the Session-Group-Id AVP identifying the session group to which the session had been previously assigned. [...] nit: I think this has to be "group or groups" to be consistent with the rest of the doc. Section 4.4.1 Either Diameter node (client or server) can request the recipient of a request to process an associated command for all sessions assigned to one or multiple groups by identifying these groups in the request. The sender of the request appends for each group, to which the command applies, a Session-Group-Info AVP including the Session- Group-Id AVP to identify the associated session group. Both, the SESSION_GROUP_ALLOCATION_ACTION flag as well as the SESSION_GROUP_STATUS_IND flag MUST be set. What's the error handling if one or both listed flags are not set -- just ignore the request? Action AVP to ALL_GROUPS (1) or PER_GROUP (2). If the answer can be sent before the complete process of the request for all the sessions or if the request timeout timer is high enough, the sender MAY set the Group-Response-Action AVP to ALL_GROUPS (1) or PER_GROUP (2). (side note) just the phrase "high enough" doesn't give much of an indication of what the criteria are and what numerical values might be appropriate. That said, it's not entirely clear how much guidance we can really give in this situation. Section 4.4.2 If the received request identifies multiple groups in multiple appended Session-Group-Id AVPs, the receiver SHOULD process the associated command for each of these groups. If a session has been assigned to more than one of the identified groups, the receiver MUST process the associated command only once per session. Why is this only a SHOULD for each group -- what other behaviors could the receiver do? Section 4.4.3 In the case of limited success, the sessions, for which the processing of the group command failed, MUST be identified using a Failed-AVP AVP as per Section 7.5 of [RFC6733]. [...] My reading of the referenced part of RFC 6733 is that there is a single Failed-AVP pointing to a single AVP that could not be processed properly. Is there such a single failed AVP in the case where processing failed for multiple sessions in the group(s)? It seems that the "largest containing AVP" that includes all failed groups might be so large so as to not be useful in indicating the problem. Section 7.2 SESSION_GROUP_STATUS_IND (0x00000010) If there's a mnemonic for the "IND" part of "SESSION_GROUP_STATUS_IND", that would be helpful to expand. Section 9.2 The Specification Required policy includes review by Designated Experts; is there any guidance we should provide to the DEs? Appendix A.1 Discon GASA received Cleanup Idle Spot-checking against RFC 6733's state machine, the non-group ASA received case only makes this transition when there was a previous ASR that was successfully sent. Is that am important distinction? (Also, as an editorial nit, RFC 6733 spells "Clean up" as two words.) From nobody Wed Feb 3 08:24:34 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03FD03A0927; Wed, 3 Feb 2021 08:24:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3nqaJTuU6ekh; Wed, 3 Feb 2021 08:24:29 -0800 (PST) Received: from mailer2.neclab.eu (mailer2.neclab.eu [195.37.70.41]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A5693A0925; Wed, 3 Feb 2021 08:24:28 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer2.neclab.eu (Postfix) with ESMTP id 7C61CF2491; Wed, 3 Feb 2021 17:24:26 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-b.office.hd) Received: from mailer2.neclab.eu ([127.0.0.1]) by localhost (atlas-b.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XCh8z0zEfbG8; Wed, 3 Feb 2021 17:24:26 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from puck.office.hd (puck.office.hd [192.168.24.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer2.neclab.eu (Postfix) with ESMTPS id 35CF5F2490; Wed, 3 Feb 2021 17:24:18 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by puck.office.hd (192.168.24.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 3 Feb 2021 17:24:17 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.006; Wed, 3 Feb 2021 17:24:17 +0100 From: Marco Liebsch To: "lionel.morand@orange.com" , Alissa Cooper , "dime@ietf.org" , "draft-ietf-dime-group-signaling@ietf.org" Thread-Topic: New Version Notification - draft-ietf-dime-group-signaling-13.txt Thread-Index: AQHWCEhYi+HzDRNhTUCkbv5Rps787ahkYJmAgeQft+A= Date: Wed, 3 Feb 2021 16:24:17 +0000 Message-ID: References: <158379258407.5546.724230233939136123@ietfa.amsl.com> <05DF032E-983D-4786-8D42-1490989E98D8@cooperw.in> <27355_1585761419_5E84CC8B_27355_267_1_6B7134B31289DC4FAF731D844122B36E3A40AC04@OPEXCAUBM41.corporate.adroot.infra.ftgroup> In-Reply-To: <27355_1585761419_5E84CC8B_27355_267_1_6B7134B31289DC4FAF731D844122B36E3A40AC04@OPEXCAUBM41.corporate.adroot.infra.ftgroup> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0074_01D6FA51.660B7450" MIME-Version: 1.0 Archived-At: Subject: Re: [Dime] New Version Notification - draft-ietf-dime-group-signaling-13.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 16:24:32 -0000 ------=_NextPart_000_0074_01D6FA51.660B7450 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable We're compiling v14 of the draft to implement comments from the IESG. = Alissa's comment has been addressed and is fixed. marco -----Original Message----- From: lionel.morand@orange.com =20 Sent: Mittwoch, 1. April 2020 19:17 To: Alissa Cooper ; dime@ietf.org; = draft-ietf-dime-group-signaling@ietf.org Subject: RE: New Version Notification - = draft-ietf-dime-group-signaling-13.txt Thx, Alissa! Your assumption is correct. Regards, Lionel > -----Message d'origine----- > De : Alissa Cooper [mailto:alissa@cooperw.in] Envoy=C3=A9 : mercredi 1 = > avril 2020 19:10 =C3=80 : dime@ietf.org;=20 > draft-ietf-dime-group-signaling@ietf.org > Objet : Re: New Version Notification -=20 > draft-ietf-dime-group-signaling-13.txt >=20 > Hi all, >=20 > I finally got to review these changes. Apologies for the delay. I have = > just one question about this text in Section 3.3: >=20 > "Either the client and the server can assign a session to a = group.=E2=80=9D >=20 > I=E2=80=99m assuming this is supposed to say =E2=80=9CEither the = client or the server,=E2=80=9D correct? >=20 > Thanks, > Alissa >=20 >=20 > > On Mar 9, 2020, at 6:23 PM, internet-drafts@ietf.org wrote: > > > > > > A new version (-13) has been submitted for draft-ietf-dime-group- > signaling: > > https://www.ietf.org/internet-drafts/draft-ietf-dime-group-signaling > > - > 13.txt > > > > Sub state has been changed to AD Followup from Revised ID Needed > > > > > > The IETF datatracker page for this Internet-Draft is: > > https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ > > > > Diff from previous version: > > = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dime-group-signaling-13 > > > > Please note that it may take a couple of minutes from the time of > submission > > until the diff is available at tools.ietf.org. > > > > IETF Secretariat. > > > > _________________________________________________________________________= ________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations = confidentielles ou privilegiees et ne doivent donc pas etre diffuses, = exploites ou copies sans autorisation. Si vous avez recu ce message par = erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les = pieces jointes. Les messages electroniques etant susceptibles = d'alteration, Orange decline toute responsabilite si ce message a ete = altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged = information that may be protected by law; they should not be = distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and = delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have = been modified, changed or falsified. Thank you. ------=_NextPart_000_0074_01D6FA51.660B7450 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMDMxNjI0 MTZaMCMGCSqGSIb3DQEJBDEWBBSZTUG8papgq2koxOORMp0RJlt/wjCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAVrm6 FCCkpfKDevnLZpLAjtTZHSd3+SUg/b3AvzCqMmANZSY0ul7xDGBqiYASH0A/WUkFAGlokrasSAz5 id4fmKfal/4m9jruwbGslaegy+Lsn1eJQ/qZN5CyTiH2H0d8/CMJpQifBIySdVXWieLnpEcikCFC goFKosXw3h92si/Rch01ZymnQYye6739c6oVG0C5g3E65vE0Vsvk/7Gm+OtYvovzCJcBcPS0rB+k PRa23MxqAZSD1u1/HS9TUbfmFgbV1+5yeZJB9B0ZoU9vyDGlFI7zkzr4eDtSwVeUpNyGWoC37hP0 ptNzEiM7yzqLegNbBO0ZT+dy3c6Gdt5/wgAAAAAAAA== ------=_NextPart_000_0074_01D6FA51.660B7450-- From nobody Wed Feb 3 08:31:18 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C0A23A097B; Wed, 3 Feb 2021 08:31:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25Y438EfOC0s; Wed, 3 Feb 2021 08:31:14 -0800 (PST) Received: from mailer1.neclab.eu (mailer1.neclab.eu [195.37.70.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C9203A0977; Wed, 3 Feb 2021 08:31:12 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer1.neclab.eu (Postfix) with ESMTP id 2C7CFFFCFD; Wed, 3 Feb 2021 17:31:10 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-a.office.hd) Received: from mailer1.neclab.eu ([127.0.0.1]) by localhost (atlas-a.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aDqWLJMPx7BT; Wed, 3 Feb 2021 17:31:10 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from titania.office.hd (titania.office.hd [192.168.24.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer1.neclab.eu (Postfix) with ESMTPS id F32A3FF9E1; Wed, 3 Feb 2021 17:31:09 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by titania.office.hd (192.168.24.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 3 Feb 2021 17:31:09 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.006; Wed, 3 Feb 2021 17:31:09 +0100 From: Marco Liebsch To: Catherine Meadows , "secdir@ietf.org" CC: "dime@ietf.org" , "draft-ietf-dime-group-signaling.all@ietf.org" , "last-call@ietf.org" Thread-Topic: Secdir last call review of draft-ietf-dime-group-signaling-13 Thread-Index: AQHW9AQtbL+WXnrgPkyP5QXIGFMKkqpGq7YA Date: Wed, 3 Feb 2021 16:31:09 +0000 Message-ID: <656fca8e311b4e528137258995b5c22e@neclab.eu> References: <161168017872.21141.3982625411769831365@ietfa.amsl.com> In-Reply-To: <161168017872.21141.3982625411769831365@ietfa.amsl.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0080_01D6FA52.5B9BAE80" MIME-Version: 1.0 Archived-At: Subject: Re: [Dime] Secdir last call review of draft-ietf-dime-group-signaling-13 X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 16:31:16 -0000 ------=_NextPart_000_0080_01D6FA52.5B9BAE80 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Thanks, Catherine, for the review. marco -----Original Message----- From: Catherine Meadows via Datatracker Sent: Dienstag, 26. Januar 2021 17:56 To: secdir@ietf.org Cc: dime@ietf.org; draft-ietf-dime-group-signaling.all@ietf.org; last-call@ietf.org Subject: Secdir last call review of draft-ietf-dime-group-signaling-13 Reviewer: Catherine Meadows Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This draft presents the commands a Diameter node could use to communicate with multiple sessions of the Diameter simultaneously. The Security Considerations section mentions two issues. One is that the use of bulk commands introduces increases the ease of implementing certain types of DoS attacks because a single command, e.g. to terminate a session, could affect multiple sessions instead of just one. The other is that current security mechanisms employed by Diameter do not enforce end-to-end security, and so make it difficult to trust information received from non-adjacent nodes. Work is ongoing on end-to-end security for Diameter, so it is premature to address end-to-end security in this document, which instead relies on available security mechanisms. I think this is a reasonable summary of the security considerations. Since end-to-end security for Diameter is a work in progress, it would be premature to attempt to address it in this document. I consider this document Ready. ------=_NextPart_000_0080_01D6FA52.5B9BAE80 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMDMxNjMx MDhaMCMGCSqGSIb3DQEJBDEWBBRIC2OmKkXuYjHcOrpImZ/gh5rmojCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAZv40 sZccCJKzgf2/a9Guatklw3RTb8BpOSRqqnttsrkhdiYmEpLzC6XBz/MsY0DsCRqsyN8bZ59g6yI/ fHeHihm8ZwiEmr38hSvfiBhXKRjg8zhLgx13h28aIzO+MHJWZPt+tHfeXrZfIKS4+7H4cTkj/X8R ckLesdoWI7gpjCS/lCAFSGLY4PBuv1kD5Dp0yPqn/ZlZvVd+fGoBkmA3qP/goyqSDTyCTQFIC8Cb bYOCwHleHaO2RtJBPOygxKdcY8ZVa+Zc1w8oejH+TJm/7pQmR6sSDxRIkPIjL5pPAqYaSE7E8oCK o0qy7kzv4LE4EZ/n6yKaSVnSsySf3PtpAQAAAAAAAA== ------=_NextPart_000_0080_01D6FA52.5B9BAE80-- From nobody Wed Feb 3 08:43:44 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59B973A09DE; Wed, 3 Feb 2021 08:43:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0lhmV7dCVSqX; Wed, 3 Feb 2021 08:43:40 -0800 (PST) Received: from mailer1.neclab.eu (mailer1.neclab.eu [195.37.70.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E4553A09BC; Wed, 3 Feb 2021 08:43:39 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer1.neclab.eu (Postfix) with ESMTP id 2EEF6FFCFD; Wed, 3 Feb 2021 17:43:37 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-a.office.hd) Received: from mailer1.neclab.eu ([127.0.0.1]) by localhost (atlas-a.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HtZtRKPv7o91; Wed, 3 Feb 2021 17:43:37 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from titania.office.hd (titania.office.hd [192.168.24.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer1.neclab.eu (Postfix) with ESMTPS id 018AFFF9E1; Wed, 3 Feb 2021 17:43:37 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by titania.office.hd (192.168.24.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 3 Feb 2021 17:43:36 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.006; Wed, 3 Feb 2021 17:43:36 +0100 From: Marco Liebsch To: Martin Duke , The IESG CC: "draft-ietf-dime-group-signaling@ietf.org" , "dime-chairs@ietf.org" , "dime@ietf.org" , "jounikor@gmail.com" Thread-Topic: Martin Duke's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) Thread-Index: AQHW9dG9rIPG5Dpfvk+dqM8U/p4O16pGq2Rw Date: Wed, 3 Feb 2021 16:43:36 +0000 Message-ID: <367a7dadc48e438b9d2b32609c9d56e7@neclab.eu> References: <161187841539.26744.16694158082239595671@ietfa.amsl.com> In-Reply-To: <161187841539.26744.16694158082239595671@ietfa.amsl.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0084_01D6FA54.18D77AA0" MIME-Version: 1.0 Archived-At: Subject: Re: [Dime] Martin Duke's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 16:43:42 -0000 ------=_NextPart_000_0084_01D6FA54.18D77AA0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Thanks, Martin, for spotting this. You're absolutely right and it's already fixed. marco -----Original Message----- From: Martin Duke via Datatracker Sent: Freitag, 29. Januar 2021 01:00 To: The IESG Cc: draft-ietf-dime-group-signaling@ietf.org; dime-chairs@ietf.org; dime@ietf.org; jounikor@gmail.com Subject: Martin Duke's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) Martin Duke has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Sec 4.2.3 "The server responds with a service-specific auth response and includes one or multiple Session- Group-Info AVP with the SESSION_GROUP_ALLOCATION_ACTION flag set and the Session-Group-Id AVP identifying the session group, to which the identified session is to be assigned. With the same response message, the server may send one or multiple Session-Group-Info AVPs with the SESSION_GROUP_ALLOCATION_ACTION flag cleared and the Session-Group-Id AVP identifying the session groups from which the identified session is to be removed." s/may/MAY, to match similar text in 4.2.2. Much as in that section, it is a little subtle that the state can be totally inferred by the first requirement, and the second MAY requirement is purely advisory. ------=_NextPart_000_0084_01D6FA54.18D77AA0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMDMxNjQz MzVaMCMGCSqGSIb3DQEJBDEWBBSwiCwGMT0BMtwAPiZE03qikxdgiTCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAEJol MLNN4632YhKoiGuLcuV8MlSCMnD0OmIRbRT8tDyyvEOrySLnQsGwRKvRfQK4g4m88ngSybW6osCj /TnU6foSMxttqMMN5brpecuJQPv/I2/MP5ZTE+zD34zEJ+hDQ5wbEEa2WGqkJn2yVPdxpKrK7a+o mYMqvrIUY4gWtkoQOh29CksjlfvXK/GCgJ1Xvw1BiXE2IaYLPZ6+CABoWQhUQVLftfiMJqL8uKeg RtlGpCFy4g/fh9nnkzQdFw9bP92buxSFag30HqNqZIDGeGAyxVGAobgl7Ff8sA8KJylSKGjbz5Zj UHI6BzhjnQwAundMmHY02zUkWgCYHRcr2QAAAAAAAA== ------=_NextPart_000_0084_01D6FA54.18D77AA0-- From nobody Wed Feb 3 08:53:36 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCB143A0B23; Wed, 3 Feb 2021 08:53:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aNzcAiMeTmeT; Wed, 3 Feb 2021 08:53:28 -0800 (PST) Received: from mailer1.neclab.eu (mailer1.neclab.eu [195.37.70.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7CAD3A09D7; Wed, 3 Feb 2021 08:53:27 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer1.neclab.eu (Postfix) with ESMTP id E4E61FFCFD; Wed, 3 Feb 2021 17:53:25 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-a.office.hd) Received: from mailer1.neclab.eu ([127.0.0.1]) by localhost (atlas-a.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NNWUsrj_XH6h; Wed, 3 Feb 2021 17:53:25 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from puck.office.hd (puck.office.hd [192.168.24.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer1.neclab.eu (Postfix) with ESMTPS id AFFF3FF9E1; Wed, 3 Feb 2021 17:53:25 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by puck.office.hd (192.168.24.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 3 Feb 2021 17:53:25 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.006; Wed, 3 Feb 2021 17:53:25 +0100 From: Marco Liebsch To: Erik Kline , The IESG CC: "draft-ietf-dime-group-signaling@ietf.org" , "dime-chairs@ietf.org" , "dime@ietf.org" , "jounikor@gmail.com" Thread-Topic: Erik Kline's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) Thread-Index: AQHW93U3I0hTeVnLY0KnI3S3rlOemqpGqsUg Date: Wed, 3 Feb 2021 16:53:25 +0000 Message-ID: References: <161205858110.13585.13307125040418788418@ietfa.amsl.com> In-Reply-To: <161205858110.13585.13307125040418788418@ietfa.amsl.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0088_01D6FA55.77C0B350" MIME-Version: 1.0 Archived-At: Subject: Re: [Dime] Erik Kline's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 16:53:31 -0000 ------=_NextPart_000_0088_01D6FA55.77C0B350 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Thank you, Erik. Fixed in the currently edited update. marco -----Original Message----- From: Erik Kline via Datatracker Sent: Sonntag, 31. Januar 2021 03:03 To: The IESG Cc: draft-ietf-dime-group-signaling@ietf.org; dime-chairs@ietf.org; dime@ietf.org; jounikor@gmail.com Subject: Erik Kline's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) Erik Kline has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- [[ nits ]] [ section 10 ] * s/Session-group-Control-Vector/Session-Group-Control-Vector/ ------=_NextPart_000_0088_01D6FA55.77C0B350 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMDMxNjUz MjRaMCMGCSqGSIb3DQEJBDEWBBTOdK/RyNu7vKyzTpojrwaASZfoJTCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAQkur moEoUFHClsEEUs7Yzfrxis0Mq6pIRBYHutryc0GuuK5KMJ54BP9E5KVv8My6lMu6GeyiuEpANV61 bV0g0L54JTQXEm4hrGTCzq44o0B+heqDSdlQvUKY1DdwfTVsk1PCGTQVxiEWXGwPlZs2a7ZwMjlZ N84fDIM1UuQHlN5F4W5BIsboIkGd92mD+8U9FDISjuMpFql4xTxzDWawK3JLmdujKzUBBE5GEplw bHbkWaG+MRi002A6aq8JJw1MIgrNz7qj+YCj6k+K8cjrWzVhCQpyZ9d8fJTWvehnAIlR2/22JFsT 44DifvAGTGW2O5pXvL4hrkqlKNIMH3rMuQAAAAAAAA== ------=_NextPart_000_0088_01D6FA55.77C0B350-- From nobody Wed Feb 3 13:12:59 2021 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4140B3A1162; Wed, 3 Feb 2021 13:12:58 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Roman Danyliw via Datatracker To: "The IESG" Cc: draft-ietf-dime-group-signaling@ietf.org, dime-chairs@ietf.org, dime@ietf.org, jounikor@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 7.25.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Roman Danyliw Message-ID: <161238677779.11599.14411757834277525186@ietfa.amsl.com> Date: Wed, 03 Feb 2021 13:12:58 -0800 Archived-At: Subject: [Dime] Roman Danyliw's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2021 21:12:58 -0000 Roman Danyliw has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks to Catherine Meadows for the SECDIR review. ** Section 3.3. I had trouble reconciling the generic design principles espoused here with the more detailed specification of the protocol documented in Section 4.*. The text here says: This specification follows the most flexible model where both, a Diameter client and a Diameter server can create a new group and assign a new identifier to that session group. And the table in this section says that the client could assign itself to a server owned session group. Assign a Session to a non-owned Session Group | X | X | However, in Section 4.2.1 If the Diameter server receives a command request from a Diameter client and the command includes at least one Session-Group-Info AVP having the SESSION_GROUP_ALLOCATION_ACTION flag in the Session-Group- Control-Vector AVP set, the server can accept or reject the request for group assignment. It seems to me that this text in Section 4.2.1 is suggesting that the client could ask to be put into a group but the server has the ability reject it, which seems like an implicit permission model. ** Section 7. In the table in this section the Session-Group-Id is of type OctetString, but in Section 7.3 it is UTF8String. ** Section 10. Given the flexible permission model suggested in Section 3.3, is cautionary guidance needed to say that specific applications using this capability need to consider the decisions they make based on group membership? From nobody Tue Feb 23 10:19:52 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 199483A0D4E; Tue, 23 Feb 2021 10:19:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oO3VZ7yItNp8; Tue, 23 Feb 2021 10:19:43 -0800 (PST) Received: from relay8-d.mail.gandi.net (relay8-d.mail.gandi.net [217.70.183.201]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E9BF3A0D4A; Tue, 23 Feb 2021 10:19:38 -0800 (PST) X-Originating-IP: 45.72.253.70 Received: from [172.18.10.17] (unknown [45.72.253.70]) (Authenticated sender: mark@azu.ca) by relay8-d.mail.gandi.net (Postfix) with ESMTPSA id 80A3B1BF206; Tue, 23 Feb 2021 18:19:32 +0000 (UTC) To: Barry Leiba , The IESG Cc: draft-ietf-dime-group-signaling@ietf.org, dime-chairs@ietf.org, dime@ietf.org, jounikor@gmail.com References: <161212305848.21181.8553749177220111509@ietfa.amsl.com> From: Mark Jones Autocrypt: addr=mark@azu.ca; keydata= mQINBFTO24IBEACzeJfqz82LIhLROAV6w/i63OZrPluFNnT0EVzQWILiu73h+B5owgdLl3T7 dSng+E+5rRYU4Zk/Oj6+r6bJv0YOjBYPJ27NP9wGWnfjQPi61rmbEvjyxZXIXX6NpP+V/B0Z l5ibCyCj2nOEvXeBsBQbQ0VrVULoeIS2hTrbY4TlAW7WeSNn3bNYDxxcJRTD6oWb6/1jGHK1 5nRR3p1RqJSyPu/I3KVyWxAy9/cXwMj7z+0WzitdNfDEbnqH9/9wlDqDS1vRRR3G/ip3BMwm 4FgtS2MjnrdrLy7pPXomkeIt0nNkR6S2ugt/1E/yPjTjZW/B/+ixQMS5nJZj8TIHSt+lkmjs JS0dgNSjenBfx3rUgkPuDtxOI1p9/EwVXsQ5O64bb+MbUQRwVicsfaqHz9FwZ/qOvl0e4EPg AKY4PjTvQIa71uAsPjRuWmUKnQgt4pGnm055V/W7rEieCLdW6qFZ8HBMjw3NjVjyu42R0kAO 60xRGudL4/i4S/pxdvcbgT5gVq9RF9+rDHEDRh8w27qEhuc0a+BfNzkzNsfO/Gj4xBui1nIY 31RnFTeOCYe1EWxmxBRMvMegl0Cu+cppeX3Ld/kkLiIJH4tCi7tWfaHowdBXttJX5sZ3TZTo RD4ggxW9oiGtbcGbzWqyHrbOH5OD6eiajgPt5qy304gQagvo3QARAQABtBhNYXJrIEpvbmVz IDxtYXJrQGF6dS5jYT6JAlQEEwEIAD4CGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQSF HeiT2i4Rm9Bf7QE5eUOf0oV44QUCX+9hwAUJDQG5vQAKCRA5eUOf0oV44S6/EACZNfF50jq1 jQv/Jdd6UC8PAq4tWWrE+rG33mtolrZknEc/i2AhjwOu/Qu7zTDD4W8QtZyohj7gSec6g0pu zBtNI4+sHWBilTuorwSSFCKInp0YiPNPkrPKRmtE299I/9GPR8vAu/q5/EmCnv3LuRfgWq3L S32Hf9xY519uEdDgwSSuFLJbk20Vv7PnwTDNZu+ivV05zvOn70hu1+mK5VnvuHSjfdiJZg7e I3cAApJAVW3ccrSU82qS4cvzi4SteCIFjFVY9m2sfXBySFrMrQQvkkWpxMtDqEC6kKZgMS4A WoSWqAUG3m1tW7IC99l5IpDJbP6VZrVQ0n5uBAgGTi97aQSn3wF4KC86T73KHXITthaZOMYF I4NT9+xagnRd3PSvFwtEQevE7jCoOGqZm7sh4nY6lSqlc/OX/LkWPgEqu6dT9omekOQUsBNL 3GU/i1iik31IM9k2CQd7CwuhWyuzbkIN+7IRpleyX39OoFiLYISSPE1mwwxniohGXMVUcD0n MhggQAGg4nv1cWsF9g2P+xlCXAhPtxMUUs/y2FKZK5+LOIR5oC+1zw7TThijEZaPYFiN8dP6 B109ZWVxBDpFw02XPj9+TYAFSE/pTBW+TKwt+S8vvkZMTmFu0ynAvcxednUzdWuinaD3ZvQp KUUGCdu449H4npf0qUHjsGzkybkCDQRUztuCARAA5iMJ2k+GnSQbxEYq9FckNB72a1To1eye L1X9qefIIFdm+oaw69LlZAtwoVsF3BP5N/LYxusL37vMLOg2RGvU+DU4Cdnv2BW31BVfjNNe ts21CytmOyiemJ6uG2uO6gLBJ7K5GVoqg3dh9sGSUGP4kS2j+D+t/wWemOjb0wS5j4FHWXur 4cG4YTlhpBY1/okWYxuLsLiybUJSSwoqKmJGKILAgKk3JeoqGXXwNr7r3AvppwJ8FNZSSxvm qDFIQ7A+KNB6B/RxlKJNSPl5OjGIOCTA+HVKbJn2d+yhczZKl406tY0yH2JVTPBXDAmCStP0 RPaKdxAooQ/PheTo8vmonj98CBLcs4oYi30xhtLbOm9udd1co4TIEspSct+fXISvsutk21nx PSfUEP6fjdMCXOm2lM4r4kCaPMpVnI4B6nN819KD0AbMbeaO4c1fv9+2lLoGy0CPekEOP6MC BmIatT8w7rKFDZQLQE8WWQcaTmmNGAooxFQnAucOZSHmVvk6PFALImuIan4qH6M20hlE2F7q gU1YmcNFc4BRkXmOmvTCpSDUo72r09s10Xf7wvJh8vGkXKdWmASsXcG5kmCFIHCYADvrznvc K8id2t/r2+excjv91k4M7evU8zxZhvD7s/hRBFdF8CqHiC27XPb5j/PGdg/oHkwBmWyN7stE OmMAEQEAAYkCPAQYAQgAJgIbDBYhBIUd6JPaLhGb0F/tATl5Q5/ShXjhBQJf72HABQkNAbm+ AAoJEDl5Q5/ShXjh2GAP/RfCihJ8lLIGbUNP0059YRF0Qshk53d9FQdz9nEthRcb2rygyHOL 8nuU16emb2USYPtQpEwVBpl98YvkccWlQCW57Ex+6UTzfSF5rMLZFdtMcbE+CgjvZg6qm0US 7cvlBk9ablPR8VSuzj2xKPlLVliTBFZYPy/rXVRntedjdRlzZi20bki3rXnnlVSXq07i4AOA zaQN6sirkFkkjtL1pd0+Jb62gC/meY5osLH+uPLhDO41np9yLaUyv6gzj++0NBR6JKwuGDSr mgTBOaMwb5PoBayBQHfcA7LRFhvDjoImgHLJv4gwlHSV6/5uYynCXt4Lq6LMjT+E4WXzFJAm /fYGf3JwrUV4lIvY5IiuQWbPnxRUsFRfFvorUbCQHw8/es6NGSsXj5vDMW5/qAcM4qbak0bP V6YdkWnkU44GglJdOeWujqLaLiv3CkfoakhDRtHDGU8VvTTSJGHs+FX5Jne1YHZbQPTUQgEq 89YSQEIBJkkuO2yZqQCZM8h6n2iPgD3zwcI2P26GeraCL1fueJlNUH5MG5Pm0LLMQeePwG5m tFZFY8olZYT9EeP9lU/AOnUQdtQtykqTVmcYkHxGTufcFEhkDUNWZVN8PwqE7M3DZgF6nwAX rmcXpup8RFrFDMdP2vPl9MJ3pOl64rFBV/qYszF/UxkA47BBQIs23uZxuQINBFTO3HUBEADh 4iYII/xish1C2ZCX42r+fFlrUg4HLRTXKq7tZZ1ZCMumka2G8T3WUJptC+YiZZeMUjelJQ9f LHo0BJ6OA442DIobSSwliQ7xjm7XZKsDgVfm8d8PJrtjQZYjLQ+KV2PELLUgGzoCPh0xUq3x YuAlvx/bpIFD/RxDkdhYBaudCC228pchGKOf00CMmYnjUWd7/uneAjpY2gkBIHY5NXB5la+G aqakRqAzlxjsO9gtu8p/lr3AjGnUHnYjZYFqZx2dGzLL1u3DFnge2Lsblc4MitUfmnLGj3tt 9ylEw6ZVncRd8sssPAEsUEfJ5cVerrzwm1/jcGSohY9czEHPxkkaIWyPGqSTfQKxqE6kYNye lst75vaqewJ1Ydv6iR1xBmv+ll1BHXuprQdGFUZfwIFY03ZdRbgmE4WQV4FaWYE5tCJup2n4 r655tUB2nccnyS4KC5ATrR6DZlNj6wMqEwmD8uK5pqHmGt64wELKBP8584jvUkYSpE2HfY3c 0C6D/aXL38BY7YEqOrbBPSBCSmJMuFJLWeU172AbSGWdpnNaPzGpucXwhcJzTpcAIEg91toN PUJe54QL2iyKtuV+0bFbO1uxLPDPRlaULVouF3diNkefMrMnode9r7v9vKx9a6rxXNb7baTM GpWliG0a3Z9Jsytb91V7iX/Iks8JT3iD9wARAQABiQRbBBgBCAAmAhsCFiEEhR3ok9ouEZvQ X+0BOXlDn9KFeOEFAl/vYcEFCQ0BuMwCKcFdIAQZAQoABgUCVM7cdQAKCRCAeMBSpt+65B64 EADYAlu0heeyz7rEPvFoHuxyZtH5abrGfT14YD042AvL/mXelWnUcpQNRhP4UayrKzyPZyiJ wZ5jQgvuWjRiIIGRng9IAKsd3uc89V2PO8rzIwfXcL0nK0+tDdJWnPUfsCv2RrnOUYHVsfHS OcwW88ReIzLsSLrCiWCo5hYsaxN7khodMzNXWMMc7p+ODRpumO7SUdS84iATygh4IsY/VC2J tgO9Ex0YjjE56anjXKHhoIZl/40qyz7sjSrl3snn/AzTs61WjlGvUyemjYv5sN/Bdf1l6PPS bCKNJ2jfTu/6BTCM82zJrVxJEG/fcXo9R5WMPmo4Vfu22rcu9s+W8CjawlmQbd5C3/IgM0rv icBzZ2d3sMFm3NDfzI8RYBEkC82CvNACRA6HIJqjrLzoRebNq6JgxA8uz7dK7atZhk0C+Ui2 +duc3ke1XdKbX0d5bXfPmLhZ8H8HMPPlh40RS9ogcQEBagk/lI+Q2iBnEGsYbXK7OaT5cDVS y/gu2HJnJhe734527u4FiwtQ5KhRNEpDGfRATIlqojUoO7rf7kf5HxvK8wP1cpCjoV6tW5f5 SVL9VuNYIoE6ATGlSNaN4j+/kA9LewhLuQpoBeGqUZpKC9a8BuYwBwR9PsH5g44X5TIqcXXV lrbIOBAqZ6X3znUXdtQj/rzmCqkqNTSH0nFXmAkQOXlDn9KFeOF9ug/+IRW15fJjTPYgpKVO LmdRmp09CTI64gv6YOzohMddPp32zeY9x+MUpBGO0fRMnK4e5SmUvsRDyAgDQZKBpBNluTkT r9VH/GnTJtmljp/XaZsdaHnZNcXgG2W6Z6LjK9I9cdJhyU3bU0luePDIWVNR62QADJbS4nJS wL0VRQz1ZXu6Qmf6p3+J0hdlWZLbrO7Jw3hCUg8WSwQ1KEom/U0BLbn1X3qqtnlFW7nFOzZi GBUcDRxSzdxLziB+cELK2Mb/udU7x3OD27j37qQYLIkx/yw4YHrPfDQP36VwLpw0jWHpGPGk 5s3is6KuWjWtZ+JAZ/BYY2rcf2JPnLWwI0voUwBaheD/LM+eCHP2VwkKq19d7GFiKNxRd5km 6vE2tnc0g+cIOb8BvqykljfXmJTlz6eShEVtoZD3fXEQQECFVEqF7biF37MZgO7xUfvIc/D0 zOs5w1vfYMM3lhtUPztsPV1okCuhvQzf5DBJkCXl/He92AbzNfThGODD10izICYVXXvFHZe/ b3mAvaGvpQc4m7mhKcrQV/MFyYXJvUYQqNRIgajhSxN7mbN/sIQYqIMxszophMuFENpT6f+C nX0CMvs+ZSb5fNHZHsZCfGWzXdjq4UgBpvdaspx7Wor/WYDskHFCzJtUwAvG8zxFW64LHQNJ g0tx5RXZpetL0Lum5+E= Message-ID: <38aacde1-aa19-c193-23e1-c71a14173e06@azu.ca> Date: Tue, 23 Feb 2021 13:19:30 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <161212305848.21181.8553749177220111509@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Dime] Barry Leiba's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Feb 2021 18:19:46 -0000 Appreciate the thorough review, Barry. Comments inline below. On 2021-01-31 2:57 p.m., Barry Leiba via Datatracker wrote: > Barry Leiba has entered the following ballot position for > draft-ietf-dime-group-signaling-13: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I have to say that I found this to be challenging to read: much of it is very > dense, with paragraphs giving sometimes-subtly-different conditions, and I > would be reading it thinking, “Does this paragraph apply to my situation? I > don’t think so, but what about the next one? Wait, maybe it was the other one > after all.” I just have to assume that someon actually implementing Diameter > would have an easier time following it. > > I have some editorial comments that won’t help with that aspect, but that I > hope will help with clarity in general: > > — Section 3.1 — > > A session group, which has sessions assigned, can be deleted, e.g., > due to a change in multiple users' subscription profile so that the > group's assigned sessions do not share certain characteristics > > It appears that “has sessions assigned” is restrictive (it’s a required > description, not just extra information). If so, it should say, “A session > group that has sessions assigned can be deleted, e.g., due to...” without the > internal commas. > > Another way to put it might be, “A session group can be deleted even if it has > sessions assigned, e.g., due to...” > We intended to say that a session group can be deleted and provide an example. The concept of "group" is clearly introduced in the paragraph just above and the details are provided in the subsequent sections. We propose the following rephrasing: "It may be required to delete a session group, e.g. at the expiry of a promotional period that applied to multiple subscriber profiles". > — Section 3.3 — > > This specification follows the most flexible model where both, a > Diameter client and a Diameter server can create a new group and > > Nit: no comma here > > Either the client and the server > can assign a session to a group. > > Nit: “Either the client or the server can”, or “Both the client and the server > can”. > Suggested wording: "This specification allows a permissive model where either Diameter client or Diameter server can create a new group. The creator of the group becomes the group owner and assigns a new identifier to the group according to the rules in Section 7.3." > Details about > enforcing a more constraint permission model > > I think the word you want is “constrained”. > Agreed. Addressed in the next revision. > — Section 4.2 — > > Diameter AAA > applications typically assign client and server roles to the Diameter > nodes, which are referred to as relevant Diameter nodes to utilize > session grouping and issue group commands. > > I’m having trouble parsing this sentence and determining what you’re trying to > tell me. Can you please rephrase or repunctuate it to make it clearer? What > are referred to as “relevant Diameter nodes”? What goes with “to utilize > session grouping”? > We agree that it needs rephrasing and propose: "Although Diameter is a peer-to-peer protocol, Diameter AAA applications typically assign the role of "Diameter client" to the Diameter node initiating the Diameter session and the role of "Diameter server" to the Diameter node authorizing the Diameter session. This specification does not restrict group creation, assignment or deletion actions to a specific role. In the following sections, Diameter node is used to refer to either role." > Diameter nodes, which are group-aware, MUST store and maintain an > entry about the group assignment together with a session's state. > > Similar to earlier: is “are group aware” meant to be restrictive (there are > Diameter nodes that are group aware and those that are not, and you’re talking > about the former), or non-restrictive (all Diameter nodes are group aware, and > you’re just pointing that fact out). It is currently written as > non-restrictive, but I think you mean it to be restrictive. If that is > correct, remove both commas and change “which” to “that”. > We propose rephrasing to: "Any Diameter node that has advertised support of session grouping and group operations MUST store and maintain the group assignment as part of the session's state." > A Diameter node MUST also keep a record about sessions, which > have been assigned to a session group by itself. > > The comma shouldn’t be there, and “which” should be “that”. But it’s a bit > awkward anyway: may I suggest rephrasing in active voice as, “Each Diameter > node MUST also keep a record about sessions that it has assigned to a session > group.” > Agree with suggested rephrasing. Will implement in the next revision. > — Section 4.2.1 — > > If the > response from the server indicates success in the result code but > solely the assignment of the session to a session group has been > rejected by the server, the client treats the session as single > session without group assignment. > > What does “solely” mean in this sentence? > It should have been "only". However, we believe this sentence has been made redundant by previous edits and can now be removed. The previous sentence already states that the client MUST remove the session from the group if the server rejects the proposed assignment. The session then proceeds as if it were not assigned to the group. > A Diameter client, which sent a request for session initiation > > Please remove the comma (and change “which” to “that”). > We propose the following rephrasing: "If a Diameter client sends a request for session initiation containing one or more Session-Group-Info AVPs but the response from the Diameter server does not contain a Session-Group-Info AVP, the Diameter client MUST proceed as if the request was processed without group assignments." > — Section 4.2.2 — > > The session, which is to be removed from a group, is > > Make it, “The session that is to be removed from the group is” > > When a Diameter client decides to remove a session from all session > groups, to which the session has been previously assigned, > > Remove the comma after “groups”. > Agreed. Fixed in next revision. > The session, which is to be removed from all groups, to > which the session has been previously assigned, is identified in the > Session-Id AVP of the command request. > > Make it, “The session that is to be removed from all groups to which it had > been previously assigned is identified in the Session-Id AVP of the command > request.” > We came up with the following rephrasing to improve the readability: "The Session-Id AVP in the re-authorization request identifies the session that is to be removed from all groups to which it had been previously assigned." > — Section 7.3 — > > The > portion of the Session-Group-Id MUST identify the > Diameter node, which owns the session group. > > Please remove the comma and change “which” to “that”. > Agreed. Will be fixed in next revision. ./Mark From nobody Wed Feb 24 07:16:12 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E810A3A16EA; Wed, 24 Feb 2021 07:16:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fzql-mmspWhV; Wed, 24 Feb 2021 07:16:05 -0800 (PST) Received: from mailer1.neclab.eu (mailer1.neclab.eu [195.37.70.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 243B43A16EB; Wed, 24 Feb 2021 07:16:03 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer1.neclab.eu (Postfix) with ESMTP id 2A214103941; Wed, 24 Feb 2021 16:16:00 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-a.office.hd) Received: from mailer1.neclab.eu ([127.0.0.1]) by localhost (atlas-a.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dfIm0iu9I148; Wed, 24 Feb 2021 16:16:00 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from titania.office.hd (titania.office.hd [192.168.24.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer1.neclab.eu (Postfix) with ESMTPS id F07E3FFE0E; Wed, 24 Feb 2021 16:15:59 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by titania.office.hd (192.168.24.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 24 Feb 2021 16:15:59 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.008; Wed, 24 Feb 2021 16:15:59 +0100 From: Marco Liebsch To: Murray Kucherawy , The IESG CC: "draft-ietf-dime-group-signaling@ietf.org" , "dime-chairs@ietf.org" , "dime@ietf.org" , "jounikor@gmail.com" Thread-Topic: Murray Kucherawy's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) Thread-Index: AQHW+QSJ6ZpPT3Fzc0mK8tRhKMP8+qpniYig Date: Wed, 24 Feb 2021 15:15:59 +0000 Message-ID: References: <161223008679.3966.11781007881267691335@ietfa.amsl.com> In-Reply-To: <161223008679.3966.11781007881267691335@ietfa.amsl.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0059_01D70AC8.560A94F0" MIME-Version: 1.0 Archived-At: Subject: Re: [Dime] Murray Kucherawy's No Objection on draft-ietf-dime-group-signaling-13: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Feb 2021 15:16:11 -0000 ------=_NextPart_000_0059_01D70AC8.560A94F0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Thanks a lot for your review and comments, Murray. Please see inline = [ml] for our feedback. -----Original Message----- From: Murray Kucherawy via Datatracker =20 Sent: Dienstag, 2. Februar 2021 02:41 To: The IESG Cc: draft-ietf-dime-group-signaling@ietf.org; dime-chairs@ietf.org; = dime@ietf.org; jounikor@gmail.com Subject: Murray Kucherawy's No Objection on = draft-ietf-dime-group-signaling-13: (with COMMENT) Murray Kucherawy has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all = email addresses included in the To and CC lines. (Feel free to cut this = introductory paragraph, however.) Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I agree with Barry's editorial suggestions. What does the "*)" in the table in Section 3.3 mean? [ml] Thanks for spotting this. It's actually a leftover from a removed = remark (editor's note) that we had in past revisions. We'll remove the = tag from the table in revision 14. =20 >From Section 10: [...] if the Diameter client or server is compromised, an attacker could launch DoS attacks by terminating a large number of sessions with a limited set of commands using the session group management concept. Is it worth mentioning that an attacker could also mess with the set of = sessions associated with a group, possibly causing disruptions other = than bulk session terminations? [ml] yes, it's a valid scenario during an attack, too. We propose the = following extension to the existing text to cover your proposal: =E2=80=9C..if the Diameter client or server is compromised, an attacker = could launch DoS attacks by terminating or applying change operations=20 to a large number of sessions with a limited set of commands using the = session group management concept.=E2=80=9D=20 marco ------=_NextPart_000_0059_01D70AC8.560A94F0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjQxNTE1 NThaMCMGCSqGSIb3DQEJBDEWBBTLGWjzLNUF4EwE9+lYNR+g6MvsSTCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAKTGp Q2KJsERyItcDWOXnaFXaALh8aTVaFxxzGH/o9DBHVz1mHut9uj1jW6XL8XgDWARszl2sEzYJ66Zq pLdB57IqKogoRzEypejPhrncrRv7mQt8Iab5sb8DLUg73oV0ZA/ZQFqTvSDB7sWgZRBSDfWYSvWR vYInLC+2igrDJqjNe4Sz3ro6UIFQcyE5Ro0bUuzTwyZr73IZh6m7bFqIlf4Niypf/3vHpVzqowgT qaEnp9vKK+bUzQw7GebNEnYlTej1XiVw3o41P03GocDLy/jcFjVivAyuaimNdYkKKN9S8XSIZTus 0/TdBcV/1cuOL9887KKPae2Iyztlz1ZR5wAAAAAAAA== ------=_NextPart_000_0059_01D70AC8.560A94F0-- From nobody Wed Feb 24 07:39:43 2021 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1A743A1856; Wed, 24 Feb 2021 07:39:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d9cgdCV8Pz3y; Wed, 24 Feb 2021 07:39:32 -0800 (PST) Received: from mailer1.neclab.eu (mailer1.neclab.eu [195.37.70.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B9333A1783; Wed, 24 Feb 2021 07:39:10 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailer1.neclab.eu (Postfix) with ESMTP id 4B89C103941; Wed, 24 Feb 2021 16:39:09 +0100 (CET) X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas-a.office.hd) Received: from mailer1.neclab.eu ([127.0.0.1]) by localhost (atlas-a.office.hd [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wzF1pfHIJ026; Wed, 24 Feb 2021 16:39:09 +0100 (CET) X-ENC: Last-Hop-TLS-encrypted X-ENC: Last-Hop-TLS-encrypted Received: from titania.office.hd (titania.office.hd [192.168.24.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailer1.neclab.eu (Postfix) with ESMTPS id 1DE57FFE9C; Wed, 24 Feb 2021 16:39:09 +0100 (CET) Received: from puck.office.hd (192.168.24.91) by titania.office.hd (192.168.24.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Wed, 24 Feb 2021 16:39:08 +0100 Received: from puck.office.hd ([192.168.126.12]) by puck.office.hd ([192.168.126.12]) with mapi id 15.01.2106.008; Wed, 24 Feb 2021 16:39:08 +0100 From: Marco Liebsch To: =?utf-8?B?w4lyaWMgVnluY2tl?= , The IESG CC: "draft-ietf-dime-group-signaling@ietf.org" , "dime-chairs@ietf.org" , "dime@ietf.org" , "jounikor@gmail.com" Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgTm8gT2JqZWN0aW9uIG9uIGRyYWZ0LWlldGYtZGlt?= =?utf-8?Q?e-group-signaling-13:_(with_COMMENT)?= Thread-Index: AQHW+VU1KfEkap6/OU6yMeprqG89H6pnjh5g Date: Wed, 24 Feb 2021 15:39:08 +0000 Message-ID: <5420872c5a904a24b7b447b006bf78c5@neclab.eu> References: <161226473720.3689.6553919994209922910@ietfa.amsl.com> In-Reply-To: <161226473720.3689.6553919994209922910@ietfa.amsl.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.168.24.96] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_005D_01D70ACB.91ED8420" MIME-Version: 1.0 Archived-At: Subject: Re: [Dime] =?utf-8?q?=C3=89ric_Vyncke=27s_No_Objection_on_draft-ietf?= =?utf-8?q?-dime-group-signaling-13=3A_=28with_COMMENT=29?= X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Feb 2021 15:39:41 -0000 ------=_NextPart_000_005D_01D70ACB.91ED8420 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Thanks a lot for your comments, =C3=89ric. Please find our feedback = inline [ml] below. -----Original Message----- From: =C3=89ric Vyncke via Datatracker =20 Sent: Dienstag, 2. Februar 2021 12:19 To: The IESG Cc: draft-ietf-dime-group-signaling@ietf.org; dime-chairs@ietf.org; = dime@ietf.org; jounikor@gmail.com Subject: =C3=89ric Vyncke's No Objection on = draft-ietf-dime-group-signaling-13: (with COMMENT) =C3=89ric Vyncke has entered the following ballot position for draft-ietf-dime-group-signaling-13: No Objection When responding, please keep the subject line intact and reply to all = email addresses included in the To and CC lines. (Feel free to cut this = introductory paragraph, however.) Please refer to = https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for the work put into this document. Like Barry and other ADs, = I found this document difficult to read: long and complex sentences do = not help the reader (but I am not a native English speaker). Therefore, = I trust the responsible AD for the correctness of all the details in the = specification. E.g., FSM or time line diagrams would have been helpful. [ml] We address Barry's and other ADs' comments in separate eMails and = also discussed between co-authors where and how to improve some = description in revision 14. =20 Please find below some non-blocking COMMENT points (but replies would be = appreciated), and some nits. I hope that this helps to improve the document, [ml] absolutely. Regards, -=C3=A9ric =3D=3D DISCUSS =3D=3D =3D=3D COMMENTS =3D=3D Any reason why the authors affiliation is not shown ? [ml] no particular reason, only a change of affiliation in one case. = Missing information will be added to revision 14. The shepherd write-up is dated back in 2018... Is it still applicable ? [ml] yes, Jouni's comments have been addressed at that point in time and = we built on that version to address Ben's comments. Despite some delay, = the draft progresses according to the defined procedure. -- Section 7.2 -- About the flag bits, I wonder why the values are not 0x01 and 0x02 = rather than 0x01 and 0x10. Isn't this a waste of bits ? Should the IANA sub-registry = for those flags be mentioned? [ml] The AVP with type Unsigned32 is treated as bit mask. Two bits for = the Session-Group-Control-Vector AVP are defined in the draft, one for = the Session-Group-Capability-Vector AVP.=20 Combinations of bits in a mask can be set and make sense in some cases, = whereas some other combinations don't. For example, clearing the SESSION_GROUP_STATUS_IND bit while setting the = SESSION_GROUP_ALLOCATION_ACTION bit in an intance of a = Session-Group-Control-Vector AVP does not make sense. Since IANA also asked for clarification, we = proposed updated text for the IANA considerations section, which will go = into revision 14 of the draft. marco ------=_NextPart_000_005D_01D70ACB.91ED8420 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIUdTCCA8Mw ggKroAMCAQICAQEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5 c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3Qg Q2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTA4MTAwMTEw NDAxNFoXDTMzMTAwMTIzNTk1OVowgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQKDCJULVN5c3RlbXMg RW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVy MSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAql/aG1/oc5Hl2lz0ouZH5fNoVWAFHQKks5tZ8x6KrzSt/A3C2UgZ7mmP ySD8IaoHGe2wXKxlx1/tAnx7fC0b1rq5gMIYghaE+mawCMZUI4HkzblJP/ZPbjdIKDgPxb7naHD9 OZdN0seYkVCqxESzI305R+lSYtYSk163MZZCBft2px6j9cL86XrFbKlxT+rLeLxgr8fe9NnLvn4z pW6Ug/A0+iGr6o5yoD+k3jBb74ZNapVbQ0SoEBUc5QFXxZjx5gYokaogxbdTJlFDsgsRlVjhwA92 2cCNfIHzcnCeb/4ajtlfNcaybzR8vkhP4lo519ideJ6fhj4DXhmLRKLVxwIDAQABo0IwQDAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUv1kgNgB5oKAia4zV8mHSuCzL gkowDQYJKoZIhvcNAQELBQADggEBADEDomELH3TocjbGbflNnvoiqOGBVs/Nu5/qq5EZOK+qfBVN 87ajjaX0jvZEqafoIZWtPgBiFojwArr8YSPmM5swems2YnutBCOEWGXi2yuK5yVTN2JTX7zaAWIp oqYnceY6In7Bbx2VcCBKBzTf6v8VgOW613rYW3V8BXopR35AqDETd81AO7RRR3ouEeNHEd6dZtCL 1VRm+oNV6nzCKYkb6W+zzuIFhMkvPniFYm7JX8F4Y3RYwEgYDJk566TMGrV5Wo0VnNgUDfZ6B1fH IoMFLTybJSY9GLOpQ3zIyKtkjw6jv5wbnTDb2tAZLqo88fszgHbkza0ZTwUnjhOhbsIwggUSMIID +qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSswKQYDVQQK DCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5c3RlbXMg VHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAyMB4XDTE2 MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQKEzxWZXJl aW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4x EDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN 6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZ N7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDc Nb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9 s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKG MUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba 1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/ BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYG Z4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUHMAGG IGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIwDQYJKoZI hvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6dl2e6BiC lmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+hFvu+c+Z 6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWST1k+kEcQ SrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7h0S2EQvV DFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWsMIIElKADAgECAgcb Y7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1 ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYD VQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IDIwHhcNMTYwNTI0MTEzODQwWhcNMzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNV BAoMPFZlcmVpbiB6dXIgRm9lcmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHpl cyBlLiBWLjEQMA4GA1UECwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNz dWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZ ojDbchwFfylfS2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNM Zj0cZGnlm6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhf ZZkQ0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9 TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08WkVK usqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQU azqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwt cm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUHAQEEgdAwgc0wMwYIKwYBBQUH MAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+ aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2Vy dC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzIt Y2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFq PnjMaDWpHPOVnj/z+N9rOHeJLI21rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dG dfBi5G5mUcFCMWdQ5UnnOR7Ln8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISo KTlslPwQkgZ7nu7YRrQbtQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuE GMGpuEvObJAaguS5Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2Kgt dRXYShjqFu9VNCIaE40GMIIF5DCCBMygAwIBAgIMIRcEoknAmU62D8JoMA0GCSqGSIb3DQEBCwUA MIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERl dXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5MDYwNTA5MTA1M1oXDTIyMDYwNDA5 MTA1M1owfjELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzETMBEGA1UE BwwKSGVpZGVsYmVyZzElMCMGA1UECgwcTkVDIExhYm9yYXRvcmllcyBFdXJvcGUgR21iSDEWMBQG A1UEAwwNTWFyY28gTGllYnNjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUyIof8 z+hrLI9SMX036t+yE93DumjWBZz6IBjIuH6frsK4ijBk0k7ld1vtOaUJk1VqhDlHQvyUQuL9q3rY QJHnx2PDXyFAz9Hu6CtB8RPjgYM1E/iNlbpnABClFKbgxFWV+OGmW2OSJMdEso1L4w40Y9md9cs7 Nl2MNwZUxLFQsE6AYjq7ulcUHFE/NkDBJijBuEP7PL1lHUjYao3P19xQRnl6rumO2JMe8bnvPA7P pNhdsQ6691GerAgZK3imEfQTT7C7q8Vys8DZRPHPwLCpzwIqkpNB/9M7qmxrZE5YLbOvKw7z2DSI 3RVaFyIVAOfaz1xXZ/o6ne0dXIzUfqcCAwEAAaOCAlAwggJMMD4GA1UdIAQ3MDUwDwYNKwYBBAGB rSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFIwO 8YCTddrM9wma6T9eKHvhnRBnMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCIGA1Ud EQQbMBmBF01hcmNvLkxpZWJzY2hAbmVjbGFiLmV1MIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6 Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rm bi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8v Y2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0G CSqGSIb3DQEBCwUAA4IBAQBTWK8RXWqcsxBz0/wxUUCoGlQOaBssuSCgIkiHY8OvhYjoiSNyD2oZ 0xsuxQ7I7TFd8iGnEONSUTVKZeF3bsl2r+S9l3T8PrYFMzelDBIyxqg10TUjjFMFOEuynjl5MZxd G1lVlddgAT8syWMziVyP5oUH/ch2+WVBoZN/DLdgWmj2Nh5w2OhYz45eTpmD0LoHDPpM3iCUoqHQ 5mKRSBUI1rak8xCrK9f80oW6sRX26GrmLc1JsciF7ygxgEKm+5TgePsdUcC4OneF/aE+OrFfHK4F 7OgLi6rAoVrzFfY3/UZ5ZgFj5ZXJUAPX65POF0QC6p7mDSleQZQ7T0uYnvq5MYIEIzCCBB8CAQEw gZ4wgY0xCzAJBgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMg RGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNV BAMMHERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCEXBKJJwJlOtg/CaDAJBgUrDgMCGgUA oIICWTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjQxNTM5 MDdaMCMGCSqGSIb3DQEJBDEWBBQzDfngefMOIKDrUICHmevnX+mGIDCBkwYJKoZIhvcNAQkPMYGF MIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZI AWUDBAICMAsGCWCGSAFlAwQCATCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFF MEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdz bmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2Jh bCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBG b3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVy ZWluIEdsb2JhbCBJc3N1aW5nIENBAgwhFwSiScCZTrYPwmgwDQYJKoZIhvcNAQEBBQAEggEAh2F+ sf4LFVYDF43aRIjzVWdlfeQUwruVKWcD1et2yMzRLawSWBdJxScekHmlIQ0JHEE2EZwe13bPTOYg xvZhJaaKNKVoVK1oyDXpn00ihWR0bpV/F57+T4MBpfK7tkHVdxKJxIGNld0mT24tOfS06m49yUxK 43p+KPS9UkqHqjcjuumebbKELSeLZW7ORvVSTkL7D1ZqCuKJ1SEP+2AWpcHp1wq61/rFvgVJF+xo FVg5HTixI/Gvf9GSFMPJf4R4OQyItO9UfEJER6K7Px0zpse/mTRkUCEYzQgV6eA9ugLKj8+Fb+lJ BMAaFqrU3ENnzTZ1e1PP8cj9D8ZguW8lxAAAAAAAAA== ------=_NextPart_000_005D_01D70ACB.91ED8420--