From c.pretschuh@msc-ennssalzatal.at Thu May 1 13:55:32 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CD2603A6AB4; Thu, 1 May 2008 13:55:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -87.766 X-Spam-Level: X-Spam-Status: No, score=-87.766 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_DSL=1.129, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4LaREs31cKZx; Thu, 1 May 2008 13:55:30 -0700 (PDT) Received: from adsl190-25117103.dyn.etb.net.co (unknown [190.25.117.103]) by core3.amsl.com (Postfix) with SMTP id B56173A6F11; Thu, 1 May 2008 13:54:14 -0700 (PDT) X-Originating-IP: 38.184.161.186 by smtp.190.25.117.103; Thu, 01 May 2008 16:54:18 -0500 Message-ID: From: "Tommie Moseley" Reply-To: "Tommie Moseley" To: discuss-bounces@ietf.org Subject: Save thousands... no one will know Date: Thu, 01 May 2008 16:54:18 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit With hundreds of models to choose from, rock bottom prices and the best customer service in the whole wide web, Prestige Replicas has become the standard by which replica watches stores are measured. It's no wonder every day hundreds of new visitors flock to this website in search of the ultimate (yet affordable) gift: a replica Breitling watch. And every one of these visitors has been exceedingly delighted with the quality of their new Breitling timepiece. http://livudezoxav80.blogspot.com/ Prestige Replicas is a well-established online store that has made the purchase of a replica timepiece easy, safe and affordable. They take pride in the exceptional quality watches they offer, and will do whatever it takes to provide you with a distinctive replica timepiece like the one you've always wanted. That's why they now offer an extra 15% discount in the purchase of two watches. Just when you thought Prestige Replicas couldn't get any better, they have improved the perfect watch shopping experience! http://livudezoxav80.blogspot.com/ From c6852@mail.tsit.com.tw Fri May 2 01:55:59 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A7773A6A56; Fri, 2 May 2008 01:55:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -75.409 X-Spam-Level: X-Spam-Status: No, score=-75.409 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_EQ_DYNAMIC=1.144, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1kmRS6wAMFBM; Fri, 2 May 2008 01:55:58 -0700 (PDT) Received: from host65-159-dynamic.21-87-r.retail.telecomitalia.it (host65-159-dynamic.21-87-r.retail.telecomitalia.it [87.21.159.65]) by core3.amsl.com (Postfix) with SMTP id 266783A69B3; Fri, 2 May 2008 01:55:46 -0700 (PDT) X-Originating-IP: 192.14.18.71 by smtp.87.21.159.65; Fri, 02 May 2008 04:55:49 -0500 Message-ID: From: "Angelica Snell" Reply-To: "Angelica Snell" To: discuss-bounces@ietf.org Subject: Take a look at the latest replica watches Date: Fri, 02 May 2008 04:55:49 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit With hundreds of models to choose from, rock bottom prices and the best customer service in the whole wide web, Prestige Replicas has become the standard by which replica watches stores are measured. It's no wonder every day hundreds of new visitors flock to this website in search of the ultimate (yet affordable) gift: a replica Breitling watch. And every one of these visitors has been exceedingly delighted with the quality of their new Breitling timepiece. http://mabylydemac01.blogspot.com/ Prestige Replicas is a well-established online store that has made the purchase of a replica timepiece easy, safe and affordable. They take pride in the exceptional quality watches they offer, and will do whatever it takes to provide you with a distinctive replica timepiece like the one you've always wanted. That's why they now offer an extra 15% discount in the purchase of two watches. Just when you thought Prestige Replicas couldn't get any better, they have improved the perfect watch shopping experience! http://mabylydemac01.blogspot.com/ From owner-namedroppers@ops.ietf.org Fri May 2 06:29:29 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1C85E3A6AF8; Fri, 2 May 2008 06:29:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.543 X-Spam-Level: X-Spam-Status: No, score=-2.543 tagged_above=-999 required=5 tests=[AWL=0.057, BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xiPm2E3tBDXS; Fri, 2 May 2008 06:29:28 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 74A8D3A6BD2; Fri, 2 May 2008 06:29:23 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jrv7I-0000B5-N9 for namedroppers-data@psg.com; Fri, 02 May 2008 13:16:00 +0000 Received: from [2001:1890:1112:1::20] (helo=mail.ietf.org) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jrv6o-00007H-V4 for namedroppers@ops.ietf.org; Fri, 02 May 2008 13:15:45 +0000 Received: by core3.amsl.com (Postfix, from userid 0) id 56DBF3A6BD2; Fri, 2 May 2008 06:15:01 -0700 (PDT) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Cc: namedroppers@ops.ietf.org Subject: I-D Action:draft-ietf-dnsext-rfc2672bis-dname-13.txt Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20080502131501.56DBF3A6BD2@core3.amsl.com> Date: Fri, 2 May 2008 06:15:01 -0700 (PDT) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DNS Extensions Working Group of the IETF. Title : Update to DNAME Redirection in the DNS Author(s) : S. Rose, W. Wijngaards Filename : draft-ietf-dnsext-rfc2672bis-dname-13.txt Pages : 17 Date : 2008-05-02 The DNAME record provides redirection for a sub-tree of the domain name tree in the DNS system. That is, all names that end with a particular suffix are redirected to another part of the DNS. This is an update of the original specification in RFC 2672, also aligning RFC 3363 and RFC 4294 with this revision.Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-dnsext-rfc2672bis-dname-13.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-dnsext-rfc2672bis-dname-13.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2008-05-02060646.I-D@ietf.org> --NextPart-- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From patriciasteelefischer@gmail.com Sat May 3 13:35:10 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E2B953A6831; Sat, 3 May 2008 13:35:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -65.079 X-Spam-Level: X-Spam-Status: No, score=-65.079 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_REPLICA_ROLEX=3.157, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, GB_ROLEX=5, HELO_DYNAMIC_IPADDR=2.426, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, REPLICA_WATCH=3.396, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_REP=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3gjApaAql5HR; Sat, 3 May 2008 13:35:09 -0700 (PDT) Received: from pc-160-15-74-200.cm.vtr.net (pc-160-15-74-200.cm.vtr.net [200.74.15.160]) by core3.amsl.com (Postfix) with SMTP id AEEAC3A68A6; Sat, 3 May 2008 13:35:00 -0700 (PDT) X-Originating-IP: 119.255.152.6 by smtp.200.74.15.160; Sat, 03 May 2008 16:35:01 -0500 Message-ID: From: "Shelton Holbrook" Reply-To: "Shelton Holbrook" To: discuss-bounces@ietf.org Subject: Spring quality watches offer Date: Sat, 03 May 2008 16:35:01 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit How about making your friends jealous and saving a lot of money doing it? Forget about spending thousands of dollars on a new Rolex watch! Instead, visit the newly redesigned Prestige Replicas and buy yourself a beautiful, one of a kind Rolex Datejust watch! http://pyvixahotef34.blogspot.com/ Of course, we're talking about replica watches, not the overpriced originals... After all, our Rolex Datejusts offer the same precise functionality and exact look than their costly counterparts, but you can buy yours for just a couple of hundred bucks. So, come aboard Prestige Replicas and take advantage of our extensive collection of replica Rolex watches, our superb customer service and our super low prices! http://pyvixahotef34.blogspot.com/ From ropedecap2512003@gmail.com Sun May 4 03:51:40 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DA8FE3A6AAA; Sun, 4 May 2008 03:51:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -71.636 X-Spam-Level: X-Spam-Status: No, score=-71.636 tagged_above=-999 required=5 tests=[AWL=6.893, BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_RECV_SPEEDY_AR=0.808, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SFLkAp1xNHGv; Sun, 4 May 2008 03:51:40 -0700 (PDT) Received: from 190-48-154-202.speedy.com.ar (unknown [190.48.154.202]) by core3.amsl.com (Postfix) with SMTP id 2EE6928C104; Sun, 4 May 2008 03:49:50 -0700 (PDT) X-Originating-IP: 120.98.168.128 by smtp.190.48.154.202; Sun, 04 May 2008 06:49:50 -0500 Message-ID: From: "Lisa Diamond" Reply-To: "Lisa Diamond" To: discuss-bounces@ietf.org Subject: Spring quality watches offer Date: Sun, 04 May 2008 06:49:50 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Prestige Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://rowofezulic16.blogspot.com/ As you are probably aware of, Prestige Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Prestige Replicas today! http://rowofezulic16.blogspot.com/ From minosterics174692@yahoo.com Sun May 4 14:43:47 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6C4573A6A53; Sun, 4 May 2008 14:43:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -81.471 X-Spam-Level: X-Spam-Status: No, score=-81.471 tagged_above=-999 required=5 tests=[FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, HELO_DYNAMIC_DHCP=1.52, HELO_EQ_DSL=1.129, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=2.188, RCVD_IN_DSBL=0.753, RCVD_IN_PBL=0.509, RCVD_IN_SORBS_DUL=1.615, RCVD_IN_XBL=2.896, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vxpZF+yXteQW; Sun, 4 May 2008 14:43:46 -0700 (PDT) Received: from adsl190-25117077.dyn.etb.net.co (unknown [190.25.117.77]) by core3.amsl.com (Postfix) with SMTP id D133C3A6A8B; Sun, 4 May 2008 14:43:35 -0700 (PDT) X-Originating-IP: 48.140.157.60 by smtp.201.239.106.110; Sun, 04 May 2008 17:43:05 -0500 Message-ID: From: "Magdalena Joseph" Reply-To: "Magdalena Joseph" To: discuss-bounces@ietf.org Subject: Get one of these awesome replicas Date: Sun, 04 May 2008 17:43:05 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit An IWC watch is a uniquely handcrafted time piece that combines a classical element with a timeless elegance. Its appeal comes from their traditional beauty and their superb performance. But this sophistication has always come with a high price tag. Except of course, when you buy an IWC replica. And Prestige Replicas has dozens of IWC replica watches at prices so incredibly low that you can rest assured they won't last long! So, why not head over to Prestige Replicas right now and take a look at their IWC watches? After all, isn't it time you wore a splendid wristwatch without having to spend a fortune? http://rozewymadod48.blogspot.com/ From owner-namedroppers@ops.ietf.org Mon May 5 02:21:08 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 644AD3A6879; Mon, 5 May 2008 02:21:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.95 X-Spam-Level: * X-Spam-Status: No, score=1.95 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, GB_I_LETTER=-2, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, J_CHICKENPOX_43=0.6, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TnhFZmx2JOOF; Mon, 5 May 2008 02:21:04 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id D752E3A67F8; Mon, 5 May 2008 02:21:03 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jswif-000AIB-76 for namedroppers-data@psg.com; Mon, 05 May 2008 09:10:49 +0000 Received: from [141.39.29.190] (helo=mailer.enum-trial.de) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jswi4-000AD8-Fj for namedroppers@ops.ietf.org; Mon, 05 May 2008 09:10:28 +0000 Received: by gl1dns1.dnsnglab.ipv6.berkom.de (Postfix, from userid 65534) id A3F63B9195; Mon, 5 May 2008 11:09:54 +0200 (CEST) Received: from karma.berkom.de (karma.berkom.de [141.39.12.198]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by gl1dns1.dnsnglab.ipv6.berkom.de (Postfix) with ESMTP id 11984B9192 for ; Mon, 5 May 2008 11:09:52 +0200 (CEST) X-Original-To: wjontofs@atriumberlin.de Delivered-To: wjontofs@atriumberlin.de Received: from localhost (localhost [127.0.0.1]) by mailer.atriumberlin.de (Postfix) with ESMTP id 9196E6A39E for ; Tue, 15 Apr 2008 18:35:17 +0200 (CEST) X-Virus-Scanned: amavisd-new at atriumberlin.de Received: from mailer.atriumberlin.de ([127.0.0.1]) by localhost (mailer.atriumberlin.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FDdBwlPgltBr for ; Tue, 15 Apr 2008 18:35:14 +0200 (CEST) Received: from psg.com (psg.com [147.28.0.62]) by mailer.atriumberlin.de (Postfix) with ESMTP id 41D4F69C03 for ; Tue, 15 Apr 2008 18:35:14 +0200 (CEST) Received: from majordom by psg.com with local (Exim 4.68 (FreeBSD)) (envelope-from ) id 1Jlnfz-000FdI-5f for namedroppers-data@psg.com; Tue, 15 Apr 2008 16:06:31 +0000 Received: from [81.91.160.182] (helo=office.denic.de) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.68 (FreeBSD)) (envelope-from ) id 1Jlnfs-000FcB-UT for namedroppers@ops.ietf.org; Tue, 15 Apr 2008 16:06:29 +0000 Received: from denic.de ([10.122.65.99]) by office.denic.de with esmtp id 1Jlnfq-0002Kn-Au; Tue, 15 Apr 2008 18:06:22 +0200 Received: by unknown.office.denic.de (Postfix, from userid 501) id 7BB3261B0F3; Tue, 15 Apr 2008 18:06:32 +0200 (CEST) Date: Tue, 15 Apr 2008 18:06:32 +0200 From: Peter Koch To: IETF DNSEXT WG Subject: Re: DNS is mandatory text Message-ID: <20080415160632.GA8323@unknown.office.denic.de> References: <200803120332.m2C3WlBU084335@ogud.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200803120332.m2C3WlBU084335@ogud.com> User-Agent: Mutt/1.4.2.1i List-id: DNSEXT discussion Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On Tue, Mar 11, 2008 at 11:31:54PM -0400, Olafur Gudmundsson wrote: {catching up ...} > So I propose that the next version of EDNS0bis contain something like: > (feel free to word smith) > > ENDS is required > > ENDS was specified in 1999 been on the wire since then, with minimal > adverse effects. > As number of uses of DNS require larger answers than can be easily fit in > 512 byte answers, it makes sense to require modern DNS software to implement > EDNS0. > Thus Authorative servers, Recursive Resolvers, Stub-resolver and middle-ware > boxes speaking DNS in any form MUST implement ENDS0 and MUST support buffer > size of at least 2K. I agree that some text like this somewhere would be helpful but we need to distinguish the respective audiences. Even though the requirement originated from the ENUM sphere, where some are used to working with monolithic documents that cover both implementation and operation, there's a split to make: 1) DNS software implementors first need to implement EDNS0 _and_ need to support a reasonable minimum maximum payload size. 2) "middleboxes" need to understand that DNS packets no longer are restricted to 512 octets in payload length and should be left alone. 3) Operators need to configure (and/or vendors need to supply defaults) not only EDNS0 enabled, but also with "reasonable" (as in: TBD) payload sizes. Any self-reference ("this spec now is mandatory") seems dubious to me, and although that path hasn't been walked much, a look at RFC 2026 shows that in addition to maturity levels, the standards process (yes, usual disclaimer of general inapplicability applies - no pun - but still) knows about "requirement levels" to be expressed in "Applicability Statements" that are expected to accompany a "Technical Specification". Following the spirit instead of the letter, I'd assume that (1) and maybe (2) above could go in an AS-like document (probably separate from the EDNS0/bis draft), while (3) is an operational issue that would be addressed in a BCP, giving trade-off considerations (did I say that?) and making size recommendations. -Peter -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From coffmanmeetinge404593@gmail.com Mon May 5 05:23:40 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3E5A23A686B; Mon, 5 May 2008 05:23:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -58.006 X-Spam-Level: X-Spam-Status: No, score=-58.006 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_BAYES_5x7=0.6, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uhLX9p5vEwZs; Mon, 5 May 2008 05:23:39 -0700 (PDT) Received: from 46-129-22-190.adsl.terra.cl (46-129-22-190.adsl.terra.cl [190.22.129.46]) by core3.amsl.com (Postfix) with SMTP id E20363A6C69; Mon, 5 May 2008 05:23:30 -0700 (PDT) X-Originating-IP: 197.164.166.184 by smtp.190.22.129.46; Mon, 05 May 2008 08:23:29 -0500 Message-ID: From: "Selena Harrison" Reply-To: "Selena Harrison" To: discuss-bounces@ietf.org Subject: The affordable watch alternative Date: Mon, 05 May 2008 08:23:29 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is a one of a kind store: the online place where you can find the highest quality replica watches at the best prices in the world! Forget about flying to China to get a mockup Cartier watch... You can now get European quality Cartier replicas at deeply discounted prices at Prestige Replicas! The best part is that our watches are so finely crafted that even the most experienced connoisseur would have a hard time telling our watches from the real deal. http://vupenalugel63.blogspot.com/ Visit Prestige Replicas today and discover a wide range of top quality Cartier replica watches offered at unbelievable prices, with a 15% discount when you buy two! http://vupenalugel63.blogspot.com/ From owner-namedroppers@ops.ietf.org Mon May 5 06:38:38 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 50D593A6AD1; Mon, 5 May 2008 06:38:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fsm0WaDFVN+b; Mon, 5 May 2008 06:38:37 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 819783A68D5; Mon, 5 May 2008 06:38:37 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jt0it-000DqO-Ih for namedroppers-data@psg.com; Mon, 05 May 2008 13:27:19 +0000 Received: from [2001:4f8:3:bb::1] (helo=sa.vix.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jt0ii-000Dp8-BW for namedroppers@ops.ietf.org; Mon, 05 May 2008 13:27:13 +0000 Received: from sa.vix.com (localhost [127.0.0.1]) by sa.vix.com (Postfix) with ESMTP id C798611425; Mon, 5 May 2008 13:27:05 +0000 (UTC) (envelope-from vixie@sa.vix.com) From: Paul Vixie To: Peter Koch cc: IETF DNSEXT WG Subject: Re: DNS is mandatory text In-Reply-To: Your message of "Tue, 15 Apr 2008 18:06:32 +0200." <20080415160632.GA8323@unknown.office.denic.de> References: <200803120332.m2C3WlBU084335@ogud.com> <20080415160632.GA8323@unknown.office.denic.de> X-Mailer: MH-E 8.0.2; nmh 1.0.4; GNU Emacs 21.3.1 Date: Mon, 05 May 2008 13:27:05 +0000 Message-ID: <27002.1209994025@sa.vix.com> Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion > {catching up ...} > > > So I propose that the next version of EDNS0bis contain something like: > > (feel free to word smith) > > > > ENDS is required > > ... > ... > Any self-reference ("this spec now is mandatory") seems dubious to me, ... i would like to just publish the document, and not lose another IETF Interval (that being the time between meetings) wondering how many bits can dance on the head of this particular pin. any objections to declaring mandatoriness controversial and moving on without it? -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Mon May 5 17:29:05 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C9E443A6A6B; Mon, 5 May 2008 17:29:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.895 X-Spam-Level: X-Spam-Status: No, score=-5.895 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, GB_I_LETTER=-2, HELO_MISMATCH_COM=0.553, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EM2Sq+s24+dY; Mon, 5 May 2008 17:29:05 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id CB2433A6870; Mon, 5 May 2008 17:29:04 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtAtb-0002Cm-H7 for namedroppers-data@psg.com; Tue, 06 May 2008 00:19:03 +0000 Received: from [198.32.6.68] (helo=vacation.karoshi.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtAsw-00028s-UH for namedroppers@ops.ietf.org; Tue, 06 May 2008 00:18:48 +0000 Received: from karoshi.com (localhost.localdomain [127.0.0.1]) by vacation.karoshi.com (8.12.8/8.12.8) with ESMTP id m45JFsUp026321; Mon, 5 May 2008 19:16:08 GMT Received: (from bmanning@localhost) by karoshi.com (8.12.8/8.12.8/Submit) id m45HS3iS026160; Mon, 5 May 2008 17:28:03 GMT Date: Mon, 5 May 2008 17:28:03 +0000 From: bmanning@vacation.karoshi.com To: Peter Koch Cc: IETF DNSEXT WG Subject: Re: DNS is mandatory text Message-ID: <20080505172803.GA26154@vacation.karoshi.com.> References: <200803120332.m2C3WlBU084335@ogud.com> <20080415160632.GA8323@unknown.office.denic.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20080415160632.GA8323@unknown.office.denic.de> User-Agent: Mutt/1.4.1i Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion peter, i like this approach. --bill On Tue, Apr 15, 2008 at 06:06:32PM +0200, Peter Koch wrote: > On Tue, Mar 11, 2008 at 11:31:54PM -0400, Olafur Gudmundsson wrote: > > {catching up ...} > > > So I propose that the next version of EDNS0bis contain something like: > > (feel free to word smith) > > > > ENDS is required > > > > ENDS was specified in 1999 been on the wire since then, with minimal > > adverse effects. > > As number of uses of DNS require larger answers than can be easily fit in > > 512 byte answers, it makes sense to require modern DNS software to implement > > EDNS0. > > Thus Authorative servers, Recursive Resolvers, Stub-resolver and middle-ware > > boxes speaking DNS in any form MUST implement ENDS0 and MUST support buffer > > size of at least 2K. > > I agree that some text like this somewhere would be helpful but we need to > distinguish the respective audiences. Even though the requirement originated > from the ENUM sphere, where some are used to working with monolithic > documents that cover both implementation and operation, there's a split > to make: > > 1) DNS software implementors first need to implement EDNS0 _and_ need to > support a reasonable minimum maximum payload size. > > 2) "middleboxes" need to understand that DNS packets no longer are > restricted to 512 octets in payload length and should be left alone. > > 3) Operators need to configure (and/or vendors need to supply defaults) > not only EDNS0 enabled, but also with "reasonable" (as in: TBD) > payload sizes. > > Any self-reference ("this spec now is mandatory") seems dubious to me, > and although that path hasn't been walked much, a look at RFC 2026 > shows that in addition to maturity levels, the standards process (yes, > usual disclaimer of general inapplicability applies - no pun - but still) > knows about "requirement levels" to be expressed in "Applicability > Statements" that are expected to accompany a "Technical Specification". > Following the spirit instead of the letter, I'd assume that (1) and maybe (2) > above could go in an AS-like document (probably separate from the EDNS0/bis > draft), while (3) is an operational issue that would be addressed in a BCP, > giving trade-off considerations (did I say that?) and making size > recommendations. > > -Peter > > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From annmcguiregross@gmail.com Mon May 5 17:54:38 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 589873A6C9A; Mon, 5 May 2008 17:54:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -55.99 X-Spam-Level: X-Spam-Status: No, score=-55.99 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_IPADDR=2.426, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_BAYES_5x7=0.6, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rwfc+YMdZy5H; Mon, 5 May 2008 17:54:37 -0700 (PDT) Received: from pc-218-135-86-200.cm.vtr.net (pc-218-135-86-200.cm.vtr.net [200.86.135.218]) by core3.amsl.com (Postfix) with SMTP id C37A83A6EC6; Mon, 5 May 2008 17:54:21 -0700 (PDT) X-Originating-IP: 164.37.194.190 by smtp.200.86.135.218; Mon, 05 May 2008 20:54:20 -0500 Message-ID: From: "Earnest Randolph" Reply-To: "Earnest Randolph" To: discuss-bounces@ietf.org Subject: Why replica watches are better Date: Mon, 05 May 2008 20:54:20 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is a one of a kind store: the online place where you can find the highest quality replica watches at the best prices in the world! Forget about flying to China to get a mockup Cartier watch... You can now get European quality Cartier replicas at deeply discounted prices at Prestige Replicas! The best part is that our watches are so finely crafted that even the most experienced connoisseur would have a hard time telling our watches from the real deal. http://mydacixehuz26.blogspot.com/ Visit Prestige Replicas today and discover a wide range of top quality Cartier replica watches offered at unbelievable prices, with a 15% discount when you buy two! http://mydacixehuz26.blogspot.com/ From owner-namedroppers@ops.ietf.org Tue May 6 03:02:20 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4AE9F3A6DD2; Tue, 6 May 2008 03:02:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zf-IP0UKYuiE; Tue, 6 May 2008 03:01:58 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id B92413A6B21; Tue, 6 May 2008 03:01:36 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtJrJ-0005x1-EE for namedroppers-data@psg.com; Tue, 06 May 2008 09:53:17 +0000 Received: from [2001:41d0:1:6d55:211:5bff:fe98:d51e] (helo=givry.fdupont.fr) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtJqu-0005tj-TA for namedroppers@ops.ietf.org; Tue, 06 May 2008 09:53:05 +0000 Received: from givry.fdupont.fr (localhost [127.0.0.1]) by givry.fdupont.fr (8.13.8/8.13.8) with ESMTP id m469qgc9067743; Tue, 6 May 2008 11:52:42 +0200 (CEST) (envelope-from dupont@givry.fdupont.fr) Message-Id: <200805060952.m469qgc9067743@givry.fdupont.fr> From: Francis Dupont To: namedroppers@ops.ietf.org Cc: tim.polk@nist.gov, Pasi.Eronen@nokia.com Subject: how to deprecate HMAC-MD5 TSIG Date: Tue, 06 May 2008 11:52:42 +0200 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion I don't know if dnsext is the right working group, dnsop is a candidate but the document to amend is a dnsext one. The saag is another candidate but is not as far as I know a formal working group (I've copied this mail to the security area directors anyway). The idea is to deprecated the HMAC-MD5 algorithm is TSIG. It is registered by IANA as "HMAC-MD5.SIG-ALG.REG.INT" and the RFC 4635 which specifies the HMAC-SHA* keeps it as "mandatory" to implement. The TSIG Algorithms are under the IETF Consensus policy so IMHO we should publish a document which: - deprecate HMAC-MD5.SIG-ALG.REG.INT in the IANA registery - make its implementation optional (MUST -> MAY) - make its use NOT RECOMMENDED but how to proceed in details? Regards Francis.Dupont@fdupont.fr PS: the RFC 3110 deprecated the RSA/MD5 algorithm for (DNS)KEY and (RR)SIG RRs. -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Tue May 6 05:09:55 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7BA823A6AA4; Tue, 6 May 2008 05:09:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.195 X-Spam-Level: X-Spam-Status: No, score=-0.195 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id loU-Ke2HHv5u; Tue, 6 May 2008 05:09:53 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 1D80E3A69DF; Tue, 6 May 2008 05:09:53 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtLpD-000JCD-Db for namedroppers-data@psg.com; Tue, 06 May 2008 11:59:15 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtLol-000J7U-Cw for namedroppers@ops.ietf.org; Tue, 06 May 2008 11:59:01 +0000 Received: from Puki.ogud.com (mail.md.ogud.com [10.20.30.6]) by ogud.com (8.13.1/8.13.1) with ESMTP id m46BwTsj081011; Tue, 6 May 2008 07:58:29 -0400 (EDT) (envelope-from ogud@ogud.com) Message-Id: <200805061158.m46BwTsj081011@ogud.com> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Tue, 06 May 2008 07:57:43 -0400 To: Francis Dupont , namedroppers@ops.ietf.org From: =?iso-8859-1?Q?=D3lafur?= =?iso-8859-1?Q?_Gu=F0mundsson?= /DNSEXT chair Subject: Re: how to deprecate HMAC-MD5 TSIG Cc: tim.polk@nist.gov, Pasi.Eronen@nokia.com In-Reply-To: <200805060952.m469qgc9067743@givry.fdupont.fr> References: <200805060952.m469qgc9067743@givry.fdupont.fr> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Scanned-By: MIMEDefang 2.63 on 10.20.30.6 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion Write draft-dupont-dnsext-tsig-md5-obsolete-00.txt that updates RFC2445 saying basically what you say below. DNSEXT will process the document. Olafur At 05:52 06/05/2008, Francis Dupont wrote: >I don't know if dnsext is the right working group, dnsop is a candidate >but the document to amend is a dnsext one. The saag is another candidate >but is not as far as I know a formal working group (I've copied this mail >to the security area directors anyway). > >The idea is to deprecated the HMAC-MD5 algorithm is TSIG. It is >registered by IANA as "HMAC-MD5.SIG-ALG.REG.INT" and the RFC 4635 >which specifies the HMAC-SHA* keeps it as "mandatory" to implement. > >The TSIG Algorithms are under the IETF Consensus policy so IMHO >we should publish a document which: > - deprecate HMAC-MD5.SIG-ALG.REG.INT in the IANA registery > - make its implementation optional (MUST -> MAY) > - make its use NOT RECOMMENDED >but how to proceed in details? > >Regards > >Francis.Dupont@fdupont.fr > >PS: the RFC 3110 deprecated the RSA/MD5 algorithm for (DNS)KEY and >(RR)SIG RRs. > >-- >to unsubscribe send a message to namedroppers-request@ops.ietf.org with >the word 'unsubscribe' in a single line as the message text body. >archive: -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Tue May 6 06:15:09 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC1DB28C151; Tue, 6 May 2008 06:15:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.128 X-Spam-Level: ** X-Spam-Status: No, score=2.128 tagged_above=-999 required=5 tests=[AWL=-0.877, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jOtKC5BDRz5C; Tue, 6 May 2008 06:15:03 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 435A23A6B7F; Tue, 6 May 2008 06:15:01 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtMtf-0001La-O5 for namedroppers-data@psg.com; Tue, 06 May 2008 13:07:55 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtMtI-0001Hr-O4 for namedroppers@ops.ietf.org; Tue, 06 May 2008 13:07:47 +0000 Received: from mail.ogud.com (localhost [127.0.0.1]) by ogud.com (8.13.1/8.13.1) with ESMTP id m46D7PxV081841 for ; Tue, 6 May 2008 09:07:25 -0400 (EDT) (envelope-from namedroppers@mail.ogud.com) Received: (from namedroppers@localhost) by mail.ogud.com (8.13.1/8.13.1/Submit) id m46D7PAl081840 for namedroppers@ops.ietf.org; Tue, 6 May 2008 09:07:25 -0400 (EDT) (envelope-from namedroppers) Received: from [213.178.172.147] (helo=WOTAN.TR-Sys.de) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JsIgV-000FyU-0d for namedroppers@ops.ietf.org; Sat, 03 May 2008 14:26:02 +0000 Received: from ZEUS.TR-Sys.de by w. with ESMTP ($Revision: 1.37.109.26 $/16.3) id AA166374722; Sat, 3 May 2008 16:25:22 +0200 Received: (from ah@localhost) by z.TR-Sys.de (8.9.3 (PHNE_25183)/8.7.3) id QAA11315; Sat, 3 May 2008 16:25:20 +0200 (MESZ) From: Alfred =?hp-roman8?B?SM5uZXM=?= Message-Id: <200805031425.QAA11315@TR-Sys.de> Subject: draft-ietf-dnsext-rfc2672bis-dname-13 -- another iteration To: scottr@nist.gov, wouter@nlnetlabs.nl Date: Sat, 3 May 2008 16:25:20 +0200 (MESZ) Cc: namedroppers@ops.ietf.org X-Mailer: ELM [$Revision: 1.17.214.3 $] Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----------=_1210079246-73582-54" X-Scanned-By: MIMEDefang 2.63 on 66.92.146.160 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion This is a multi-part message in MIME format... ------------=_1210079246-73582-54 Content-Type: text/plain; charset=hp-roman8 Content-Transfer-Encoding: 7bit Content-Disposition: inline [ Moderators note: Post was moderated, either because it was posted by a non-subscriber, or because it was over 20K. With the massive amount of spam, it is easy to miss and therefore delete relevant posts by non-subscribers. Please fix your subscription addresses. ] Hello all, Once again closely reading the rfc2672bis-dname-13 I-D, I found another few details that should be considered. [ Apparently, the human brain needs intermediate versions to uncover subtle inconsistencies previously 'hidden' underneath more substantial issues. :-) ] (1) Front matter The discussion so far has centered around the logical role of the new document, and it is now accepted consensus that it is intended as a full replacement of RFC 2672, which it will obsolete therefore. This leaves the document Title and the Abstract alone, both still talking of 'update'. For logical consistency, and to avoid misinterpretations, I therefore suggest the following changes, also recognizing that the introduction of the UD bit is an additional performance optimization newly introduced in this *revision* of the DNAME specification. a) document title: Update to DNAME Redirection in the DNS --- DNAME Redirection in the DNS (Revised) (Note: I do not insist on this particular wording; please substitute a better proposal if you have one.) b) in the Abstract: [...]. This is an update of the original specification in RFC 2672, also aligning RFC 3363 and RFC 4294 with this revision. --- [...]. This is a revision of the original specification in RFC 2672, also aligning RFC 3363 and RFC 4294 with this revision. A few similar changes are embedded below, all in the intent to consistently replace "update to 2672" by "revision of 2672", but for the sake of brevity, I do not present an exhaustive list. The goal is leaving "update" only in the context of "Dynamic DNS Update" [RFC2136], EDNS(0) [RFC2671] Flags update for the UD bit, and IANA actions). (2) Examples in Section 1 Once more reconsidering the nature of the examples presented in paragraphs 4 and 5 of Section 1, I now observed that the two major kinds of application ought to be better characterized (keep in mind, "redirection" is always performed), and that the ENUM example better fits with the reverse mapping scenario than the "domain aliasing" scenario (punnycode alternatives), in which the driving force is to make a single domain name tree available below *multiple* higher level domain names. Currently, the -dname-13 draft says: This document is an update of the original specification of DNAME in RFC 2672 [RFC2672]. DNAME was conceived to help with the problem of maintaining address-to-name mappings in a context of network renumbering. With a careful set-up, a renumbering event in the network causes no change to the authoritative server that has the address-to-name mappings. Examples in practice are classless reverse address space delegations. Another usage of DNAME lies in redirection of name spaces. For example, a zone administrator may want sub-trees of the DNS to contain the same information. Examples include punycode alternates for domain spaces. DNAME is also used for the redirection of ENUM domains to another maintaining party. I suggest the following modifications: vvvvvvvvvv | This document is a revision of the original specification of DNAME in RFC 2672 [RFC2672]. DNAME was conceived to help with the problem of maintaining address-to-name mappings in a context of network renumbering. With a careful set-up, a renumbering event in the network causes no change to the authoritative server that has the | address-to-name mappings. The primary examples in practice are | classless reverse address space delegations. Similarly, DNAME is | also used for the redirection of ENUM domains to another maintaining | party. vvvvvvvv vvvv | Another usage of DNAME lies in aliasing of DNS name spaces. For example, a zone administrator may want sub-trees of the DNS to contain the same information. Examples include punycode alternates | for domain spaces. ^^^... (3) Section 2.5 -- better clarification of history, and role of document The second paragraph of Section 2.5 says: Although the previous DNAME specification [RFC2672] (that is obsoleted by this specification) talked about signaling to allow compression of the target name, such signaling is not specified. To better bridge the historical and semantical gaps, I suggest to add a few clarifying words: Although the previous DNAME specification [RFC2672] (that is obsoleted by this specification) talked about signaling to allow | compression of the target name, such signaling has never been | specified and purposely also is not specified here. The third paragraph says: RFC 2672 stated that the EDNS version had a meaning for understanding | of DNAME and DNAME target name compression. This document updates RFC 2672, in that there is no EDNS version signaling for DNAME. [...] In line with the rationale presented for item (1) above, I suggest to there also replace "updates" by "revises": RFC 2672 stated that the EDNS version had a meaning for understanding | of DNAME and DNAME target name compression. This document revises RFC 2672, in that there is no EDNS version signaling for DNAME. [...] (4) Section 3.2 -- nit In the first section, for consistency with other parts of the text, "(Understand-DNAME)" should be spelled with the joining hyphen. [Missed from last review] (5) Section 5.3.2 The leading text line is rather terse. I suggest to turn it into a full sentence, e.g.: Examples of why DNSSEC validators MUST understand DNAME. --- Below are examples of why DNSSEC validators MUST understand DNAME. ^^^^^^^^^^^ Kind regards, Alfred. -- +------------------------+--------------------------------------------+ | TR-Sys Alfred Hoenes | Alfred Hoenes Dipl.-Math., Dipl.-Phys. | | Gerlinger Strasse 12 | Phone: (+49)7156/9635-0, Fax: -18 | | D-71254 Ditzingen | E-Mail: ah@TR-Sys.de | +------------------------+--------------------------------------------+ ------------=_1210079246-73582-54 Content-Type: text/plain; name="SpamAssassinReport.txt" Content-Disposition: inline; filename="SpamAssassinReport.txt" Content-Transfer-Encoding: 7bit MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) Spam detection software, running on the system "mail.ogud.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see The administrator of that system for details. Content preview: [ Moderators note: Post was moderated, either because it was posted by a non-subscriber, or because it was over 20K. With the massive amount of spam, it is easy to miss and therefore delete relevant posts by non-subscribers. Please fix your subscription addresses. ] [...] Content analysis details: (3.0 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.4 HEADER_SPAM Bulk email fingerprint (header-based) found 3.2 CHARSET_FARAWAY_HEADER A foreign language charset used in headers -2.3 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.0000] 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS -1.4 AWL AWL: From: address is in the auto white-list ------------=_1210079246-73582-54-- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Tue May 6 06:18:20 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B94F028C189; Tue, 6 May 2008 06:18:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.048 X-Spam-Level: X-Spam-Status: No, score=-5.048 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w+XElkVy4Tpi; Tue, 6 May 2008 06:18:18 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id C9C4F3A68C8; Tue, 6 May 2008 06:18:17 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtMyC-00020P-Kc for namedroppers-data@psg.com; Tue, 06 May 2008 13:12:36 +0000 Received: from [129.6.16.226] (helo=smtp.nist.gov) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JtMxR-0001t9-3q for namedroppers@ops.ietf.org; Tue, 06 May 2008 13:12:07 +0000 Received: from 98-140.antd.nist.gov (98-140.antd.nist.gov [129.6.140.98]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id m46DBfTk011352; Tue, 6 May 2008 09:11:41 -0400 Message-ID: <4820590D.6070602@nist.gov> Date: Tue, 06 May 2008 09:11:41 -0400 From: Scott Rose Organization: NIST User-Agent: Thunderbird 2.0.0.6 (X11/20070728) MIME-Version: 1.0 To: Francis Dupont CC: namedroppers@ops.ietf.org Subject: Re: how to deprecate HMAC-MD5 TSIG References: <200805060952.m469qgc9067743@givry.fdupont.fr> In-Reply-To: <200805060952.m469qgc9067743@givry.fdupont.fr> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: scottr@nist.gov Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion Personally, I support this effort, even if the product is a very short internet-draft. DNSEXT is the correct place I believe since it is not just an operational change. Scott Francis Dupont wrote: > I don't know if dnsext is the right working group, dnsop is a candidate > but the document to amend is a dnsext one. The saag is another candidate > but is not as far as I know a formal working group (I've copied this mail > to the security area directors anyway). > > The idea is to deprecated the HMAC-MD5 algorithm is TSIG. It is > registered by IANA as "HMAC-MD5.SIG-ALG.REG.INT" and the RFC 4635 > which specifies the HMAC-SHA* keeps it as "mandatory" to implement. > > The TSIG Algorithms are under the IETF Consensus policy so IMHO > we should publish a document which: > - deprecate HMAC-MD5.SIG-ALG.REG.INT in the IANA registery > - make its implementation optional (MUST -> MAY) > - make its use NOT RECOMMENDED > but how to proceed in details? > > Regards > > Francis.Dupont@fdupont.fr > > PS: the RFC 3110 deprecated the RSA/MD5 algorithm for (DNS)KEY and (RR)SIG RRs. > > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > -- ---------------------------------------- Scott Rose Computer Scientist NIST ph: +1 301-975-8439 scott.rose@nist.gov http://www-x.antd.nist.gov/dnssec http://www.dnsops.gov/ ----------------------------------------- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From cooleyhartleyan7597534@yahoo.com Tue May 6 09:53:06 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A832928C164; Tue, 6 May 2008 09:53:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.613 X-Spam-Level: X-Spam-Status: No, score=-14.613 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, GB_ROLEX=5, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_DSL=1.129, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E4MSZ2bUl31H; Tue, 6 May 2008 09:53:05 -0700 (PDT) Received: from dinamic_adsl_193-99-144.emcali.net.co (dinamic_adsl_193-99-144.emcali.net.co [190.99.144.193]) by core3.amsl.com (Postfix) with SMTP id CF7C93A6D76; Tue, 6 May 2008 09:52:56 -0700 (PDT) X-Originating-IP: 41.182.150.26 by smtp.190.99.144.193; Tue, 06 May 2008 12:52:54 -0500 Message-ID: From: "Agustin Chamberlain" Reply-To: "Agustin Chamberlain" To: discuss-bounces@ietf.org Subject: 15% off on two watches Date: Tue, 06 May 2008 12:52:54 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Prestige Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://www.repplls.com/ Prestige Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://www.repplls.com/ From kristinaprediscretion9291072@yahoo.com Sun May 11 14:52:11 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 573243A6AC8; Sun, 11 May 2008 14:52:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -74.755 X-Spam-Level: X-Spam-Status: No, score=-74.755 tagged_above=-999 required=5 tests=[BAYES_60=1, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DIALUP=0.862, HELO_EQ_DSL=1.129, HOST_EQ_DIALUP=0.862, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2j1DZeuFJLHF; Sun, 11 May 2008 14:52:10 -0700 (PDT) Received: from r190-135-13-171.dialup.adsl.anteldata.net.uy (r190-135-13-171.dialup.adsl.anteldata.net.uy [190.135.13.171]) by core3.amsl.com (Postfix) with SMTP id 5D04F3A6AE8; Sun, 11 May 2008 14:51:55 -0700 (PDT) X-Originating-IP: 58.207.184.64 by smtp.190.135.13.171; Sun, 11 May 2008 17:51:54 -0500 Message-ID: From: "Katina Shipley" Reply-To: "Katina Shipley" To: discuss-bounces@ietf.org Subject: Classy, new and inexpensive watches Date: Sun, 11 May 2008 17:51:54 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Everybody knows that a Cartier watch is a silent statement of wealth and luxury. But we all know as well that the price of putting one of them on your wrist is for the most unaffordable by the average Joe. That's why replica Cartier watches are becoming more and more popular by the day. They're actually the affordable solution to this dilemma. And thanks to the internet, there is now a place where the highest quality Cartier replicas are available: Prestige Replicas. So, why not take a look at the extensive inventory that this site has to offer? After all, browsing through their hundreds of Cartier watches is absolutely free, and buying the one of your dreams is simply inexpensive. http://sepuduwa17004.blogspot.com/ From fionaimrie@compuserve.com Mon May 12 03:53:31 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6D31A3A67F9; Mon, 12 May 2008 03:53:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -63.732 X-Spam-Level: X-Spam-Status: No, score=-63.732 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_HOST_EQ_D_D_D_D=0.765, HELO_EQ_IP_ADDR=1.119, HTML_MESSAGE=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, URIBL_BLACK=20, URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id roRvaJeboHzn; Mon, 12 May 2008 03:53:30 -0700 (PDT) Received: from [58.9.154.148] (ppp-58-9-154-148.revip2.asianet.co.th [58.9.154.148]) by core3.amsl.com (Postfix) with ESMTP id 852E83A67A6; Mon, 12 May 2008 03:53:11 -0700 (PDT) Received: from [58.9.154.148] by mail.mx5.compuserve.com; Mon, 12 May 2008 10:53:26 +0000 Message-ID: <01c8b41e$67969700$949a093a@fionaimrie> From: "Google AdWords-noreply" To: Subject: Update Your Billing Information. Date: Mon, 12 May 2008 10:53:26 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C8B41E.67969700" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.1 This is a multi-part message in MIME format. ------=_NextPart_000_0007_01C8B41E.67969700 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable -------------------------------------------------------------------------= ----- Dear Google AdWords Customer, We were unable to process your payment. Your ads will be suspended soon unless we can process your payment. To prevent your ads from being suspended, please update your payment info= rmation. Please sign in to your account at http://adwords.google.com/select/login, and update your payment information. -------------------------------------------------------------------------= ----------------- This message was sent from a notification-only email address that does not accept incoming email. Please do not reply to this message. -------------------------------------------------------------------------= ------------------------- We look forward to providing you with the most effective advertising avai= lable. Thank you for choosing AdWords. ------=_NextPart_000_0007_01C8B41E.67969700 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable -------------------------------------------------------------------------= --------
Dear Google AdWords Customer,

We were unable to process your payment.
Your ads will be suspended soon unless we can process your payment.
To prevent your ads from being suspended, please update your payment info= rmation.

Please sign in
to your account at http://adwords.google.com/select/login,
and update your payment information.

-------------------------------------------------------------------------= --------------
This message was sent from a notification-only email address that does not accept incoming email. Please do not reply to this message.
-------------------------------------------------------------------------= --
------=_NextPart_000_0007_01C8B41E.67969700-- From owner-namedroppers@ops.ietf.org Mon May 12 07:05:05 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E9BF03A6884; Mon, 12 May 2008 07:05:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.547 X-Spam-Level: X-Spam-Status: No, score=-1.547 tagged_above=-999 required=5 tests=[AWL=-1.052, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gZc3iD0EbJWQ; Mon, 12 May 2008 07:05:00 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 5FC9F3A67B6; Mon, 12 May 2008 07:04:56 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JvYQ7-000HwQ-R9 for namedroppers-data@psg.com; Mon, 12 May 2008 13:50:27 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JvYLX-000H9e-7u for namedroppers@ops.ietf.org; Mon, 12 May 2008 13:46:10 +0000 Received: from mail.ogud.com (localhost [127.0.0.1]) by ogud.com (8.13.1/8.13.1) with ESMTP id m4CDjb1N038478 for ; Mon, 12 May 2008 09:45:37 -0400 (EDT) (envelope-from namedroppers@mail.ogud.com) Received: (from namedroppers@localhost) by mail.ogud.com (8.13.1/8.13.1/Submit) id m4CDjbr9038477 for namedroppers@ops.ietf.org; Mon, 12 May 2008 09:45:37 -0400 (EDT) (envelope-from namedroppers) Received: from [130.105.36.66] (helo=cirrus.av8.net) by psg.com with esmtps (TLSv1:DES-CBC3-SHA:168) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JuvqP-000GIl-Fz for namedroppers@ops.ietf.org; Sat, 10 May 2008 20:39:16 +0000 Received: from citation2.av8.net (citation2.av8.net [130.105.12.10]) (authenticated bits=0) by cirrus.av8.net (8.12.11/8.12.11) with ESMTP id m4AKcSJw002720 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Sat, 10 May 2008 16:38:28 -0400 Date: Sat, 10 May 2008 16:38:26 -0400 (EDT) From: Dean Anderson To: Stephane Bortzmeyer cc: Joe Abley , George Michaelson , , Subject: Re: TCP mandatory? Re: DNS is mandatory text In-Reply-To: <20080114090525.GA17771@nic.fr> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Scanned-By: MIMEDefang 2.63 on 66.92.146.160 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion [ Moderators note: Post was moderated, either because it was posted by a non-subscriber, or because it was over 20K. With the massive amount of spam, it is easy to miss and therefore delete relevant posts by non-subscribers. Please fix your subscription addresses. ] IESG: I cannot post to the DNSEXT list on the basis of false, fictional, and fraudulent claims of misconduct. I am in agreement that either TCP or EDNSO is mandatory. This decision has an impact on DNS Anycast. Both TCP and EDNSO are unreliable when Anycasted. FYI, I note that the NSID extension indicates that the dispute of stateful anycast stability was entirely frivolous. The NSID draft arose from the acceptance that two (individually stateless UDP) packets could not be reliably sent to the same server for identification purposes. This implies that 2 or more packets (as necessary with TCP) also cannot be sent reliably to the same server, and so TCP Anycast is unreliable. --Dean On Mon, 14 Jan 2008, Stephane Bortzmeyer wrote: > On Fri, Jan 11, 2008 at 01:59:05PM -0500, > Joe Abley wrote > a message of 478 lines which said: > > > >4.2.2. TCP > > > > > > {new normative language, maybe.. } The server MAY accept TCP > > > connections. {? what is the correct wording and reference?} > > > > I think that MAY should be a MUST. > > I am in sympathy with this view point but do note that EDNS0 is > mandatory, if I read correctly the previous section. It seems to > adress your concern. > > My personal inclination would be "the name server MUST offer EDNS0 - > with large sizes - *or* TCP". > > > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > > -- Av8 Internet Prepared to pay a premium for better service? www.av8.net faster, more reliable, better service 617 344 9000 -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Mon May 12 09:10:29 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8BFF23A695C; Mon, 12 May 2008 09:10:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.449 X-Spam-Level: X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OE3nxzppfr-p; Mon, 12 May 2008 09:10:21 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id BD1AF3A6B8A; Mon, 12 May 2008 09:10:04 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JvaUo-000863-Ip for namedroppers-data@psg.com; Mon, 12 May 2008 16:03:26 +0000 Received: from [2001:4f8:3:bb::1] (helo=sa.vix.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JvaUZ-00083V-Kv for namedroppers@ops.ietf.org; Mon, 12 May 2008 16:03:16 +0000 Received: from sa.vix.com (localhost [127.0.0.1]) by sa.vix.com (Postfix) with ESMTP id 132ED1142F; Mon, 12 May 2008 16:03:03 +0000 (UTC) (envelope-from vixie@sa.vix.com) From: Paul Vixie To: Dean Anderson cc: Stephane Bortzmeyer , Joe Abley , George Michaelson , namedroppers@ops.ietf.org, iesg@ietf.org Subject: Re: TCP mandatory? Re: DNS is mandatory text In-Reply-To: Your message of "Sat, 10 May 2008 16:38:26 -0400." References: X-Mailer: MH-E 8.0.2; nmh 1.0.4; GNU Emacs 21.3.1 Date: Mon, 12 May 2008 16:03:03 +0000 Message-ID: <22946.1210608183@sa.vix.com> Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion > ... Both TCP and EDNSO are unreliable when Anycasted. nope. -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From MAILER-DAEMON Wed May 14 00:39:55 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DC3333A682A for ; Wed, 14 May 2008 00:39:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[AWL=0.497, BAYES_00=-2.599, NORMAL_HTTP_TO_IP=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FxaaB++Xiylg for ; Wed, 14 May 2008 00:39:54 -0700 (PDT) Received: from mta1.prod1.dngr.net (mta5.prod1.dngr.net [216.220.209.224]) by core3.amsl.com (Postfix) with ESMTP id 6CD443A67A2 for ; Wed, 14 May 2008 00:39:54 -0700 (PDT) Received: from prod.danger.com (unknown [10.253.33.100]) by px05.prod1.dngr.org (Postfix) with ESMTP id D9CCB4CEE05 for ; Wed, 14 May 2008 00:38:49 -0700 (PDT) Subject: Undeliverable mail: the huge joy From: To: Date: Wed, 14 May 2008 00:38:49 -0700 Message-ID: X-MAPI-Message-Class: REPORT.IPM.Note.NDR MIME-Version: 1.0 Content-Type: multipart/report; report-type="delivery-status"; boundary="_===239018826====mfe2.prod.danger.com===_" --_===239018826====mfe2.prod.danger.com===_ Content-Type: text/plain; charset="utf-8" Failed to deliver to 'soniakathykolacz@tmail.com' LOCAL module(account soniakathykolacz@tmail.com) reports: mail receiving disabled --_===239018826====mfe2.prod.danger.com===_ Content-Type: message/delivery-status Reporting-MTA: dns; mfe2.prod.danger.com Original-Recipient: rfc822; Final-Recipient: LOCAL; Action: failed Status: 4.0.0 --_===239018826====mfe2.prod.danger.com===_ Content-Type: text/rfc822-headers Received: from [10.253.33.100] (HELO mta4.prod1.dngr.net) by mfe2.prod.danger.com (CommuniGate Pro SMTP 5.1.8) with ESMTP id 239018825; Wed, 14 May 2008 00:38:49 -0700 Received: from 219.64.78.110.HYD-CDMA.dialup.vsnl.net.in (unknown [219.64.78.110]) by px02.prod1.dngr.org (Postfix) with ESMTP id 88F45719655; Wed, 14 May 2008 00:37:59 -0700 (PDT) Received: from unknown [219.64.78.110] by 172.23.135.200; 14 May 2008 12:56:14 +0530 Received: from [10.0.20.135] by 219.64.78.110.HYD-CDMA.dialup.vsnl.net.in id 0j1RlE13Bkrn; Wed, 14 May 2008 10:36:46 +0400 Message-ID: <00bb01c8b58c$d8f45800$8714000a@219.64.78.110.HYD-CDMA.dialup.vsnl.net.in> From: "Kerstin" To: "Mike" Subject: the huge joy Date: Wed, 14 May 2008 10:36:46 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 080514-0, 05/14/2008), Outbound message X-Antivirus-Status: Clean --_===239018826====mfe2.prod.danger.com===_-- From MAILER-DAEMON Wed May 14 00:39:58 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 38C553A682A for ; Wed, 14 May 2008 00:39:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.15 X-Spam-Level: X-Spam-Status: No, score=-2.15 tagged_above=-999 required=5 tests=[AWL=0.448, BAYES_00=-2.599, NORMAL_HTTP_TO_IP=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YZt3LGHYMFv9 for ; Wed, 14 May 2008 00:39:57 -0700 (PDT) Received: from mta2.prod1.dngr.net (mta8.prod1.dngr.net [216.220.209.218]) by core3.amsl.com (Postfix) with ESMTP id 614613A67A2 for ; Wed, 14 May 2008 00:39:57 -0700 (PDT) Received: from prod.danger.com (unknown [10.253.33.100]) by px08.prod1.dngr.org (Postfix) with ESMTP id 9EDB1309A0C for ; Wed, 14 May 2008 00:38:49 -0700 (PDT) Subject: Undeliverable mail: the huge joy From: To: Date: Wed, 14 May 2008 00:38:49 -0700 Message-ID: X-MAPI-Message-Class: REPORT.IPM.Note.NDR MIME-Version: 1.0 Content-Type: multipart/report; report-type="delivery-status"; boundary="_===188974804====mfe7.prod.danger.com===_" --_===188974804====mfe7.prod.danger.com===_ Content-Type: text/plain; charset="utf-8" Failed to deliver to 'soniakathykolacz@tmail.com' LOCAL module(account soniakathykolacz@tmail.com) reports: mail receiving disabled --_===188974804====mfe7.prod.danger.com===_ Content-Type: message/delivery-status Reporting-MTA: dns; mfe7.prod.danger.com Original-Recipient: rfc822; Final-Recipient: LOCAL; Action: failed Status: 4.0.0 --_===188974804====mfe7.prod.danger.com===_ Content-Type: text/rfc822-headers Received: from [10.253.33.100] (HELO mta2.prod1.dngr.net) by mfe7.prod.danger.com (CommuniGate Pro SMTP 5.1.8) with ESMTP id 188974803; Wed, 14 May 2008 00:38:49 -0700 Received: from p548CE24F.dip.t-dialin.net (p548CE24F.dip.t-dialin.net [84.140.226.79]) by px03.prod1.dngr.org (Postfix) with ESMTP id 294C010F2847; Wed, 14 May 2008 00:38:46 -0700 (PDT) Received: from [10.0.20.135] by 219.64.78.110.HYD-CDMA.dialup.vsnl.net.in id 0j1RlE13Bkrn; Wed, 14 May 2008 10:36:46 +0400 Message-ID: <00bb01c8b58c$d8f45800$8714000a@219.64.78.110.HYD-CDMA.dialup.vsnl.net.in> From: "Kerstin" To: "Mike" Subject: the huge joy Date: Wed, 14 May 2008 10:36:46 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit --_===188974804====mfe7.prod.danger.com===_-- From mary7trump@hotmail.com Wed May 14 15:22:15 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E6C893A686A; Wed, 14 May 2008 15:22:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -69.457 X-Spam-Level: X-Spam-Status: No, score=-69.457 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_CPE=0.5, HOST_EQ_CPE=0.979, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_BAYES_5x7=0.6, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5iI47JniSpye; Wed, 14 May 2008 15:22:14 -0700 (PDT) Received: from cpe-024-031-105-232.sc.res.rr.com (cpe-024-031-105-232.sc.res.rr.com [24.31.105.232]) by core3.amsl.com (Postfix) with SMTP id 641A43A63D3; Wed, 14 May 2008 15:22:09 -0700 (PDT) X-Originating-IP: 106.66.97.0 by smtp.24.31.105.232; Wed, 14 May 2008 18:22:13 -0500 Message-ID: From: "Patricia Battle" Reply-To: "Patricia Battle" To: discuss-bounces@ietf.org Subject: April promo on watches Date: Wed, 14 May 2008 18:22:13 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is a one of a kind store: the online place where you can find the highest quality replica watches at the best prices in the world! Forget about flying to China to get a mockup Cartier watch... You can now get European quality Cartier replicas at deeply discounted prices at Prestige Replicas! The best part is that our watches are so finely crafted that even the most experienced connoisseur would have a hard time telling our watches from the real deal. http://fizicihu87502.blogspot.com/ Visit Prestige Replicas today and discover a wide range of top quality Cartier replica watches offered at unbelievable prices, with a 15% discount when you buy two! http://fizicihu87502.blogspot.com/ From owner-namedroppers@ops.ietf.org Thu May 15 13:10:15 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3A12F3A68D0; Thu, 15 May 2008 13:10:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.5 X-Spam-Level: X-Spam-Status: No, score=-3.5 tagged_above=-999 required=5 tests=[AWL=-3.005, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A+ISR6MbDjgI; Thu, 15 May 2008 13:10:14 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 1B2BD3A6895; Thu, 15 May 2008 13:10:06 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JwjbO-000Fkn-E5 for namedroppers-data@psg.com; Thu, 15 May 2008 19:58:58 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jwjay-000FhH-GQ for namedroppers@ops.ietf.org; Thu, 15 May 2008 19:58:46 +0000 Received: from mail.ogud.com (localhost [127.0.0.1]) by ogud.com (8.13.1/8.13.1) with ESMTP id m4FJwS8N088340 for ; Thu, 15 May 2008 15:58:29 -0400 (EDT) (envelope-from namedroppers@mail.ogud.com) Received: (from namedroppers@localhost) by mail.ogud.com (8.13.1/8.13.1/Submit) id m4FJt5mT088281 for namedroppers@ops.ietf.org; Thu, 15 May 2008 15:55:05 -0400 (EDT) (envelope-from namedroppers) Received: from [171.68.10.87] (helo=sj-iport-5.cisco.com) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JwdCI-000ElB-21 for namedroppers@ops.ietf.org; Thu, 15 May 2008 13:08:55 +0000 X-IronPort-AV: E=Sophos;i="4.27,491,1204531200"; d="jpg'145?scan'145,208,145";a="27203063" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-5.cisco.com with ESMTP; 15 May 2008 06:08:32 -0700 Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id m4FD8W8L022701; Thu, 15 May 2008 06:08:32 -0700 Received: from xbh-rtp-211.amer.cisco.com (xbh-rtp-211.cisco.com [64.102.31.102]) by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id m4FD8DUm025027; Thu, 15 May 2008 13:08:32 GMT Received: from xfe-rtp-202.amer.cisco.com ([64.102.31.21]) by xbh-rtp-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 15 May 2008 09:08:26 -0400 Received: from rtp-townsley-vpn5.cisco.com ([10.83.1.102]) by xfe-rtp-202.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 15 May 2008 09:08:24 -0400 Message-ID: <482C35C6.3010701@cisco.com> Date: Thu, 15 May 2008 15:08:22 +0200 From: Mark Townsley User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421) MIME-Version: 1.0 To: IETF DNSEXT WG CC: Jari Arkko Subject: Please welcome Andrew Sullivan as DNSEXT Co-Chair Content-Type: multipart/mixed; boundary="------------010307060308070300060006" X-OriginalArrivalTime: 15 May 2008 13:08:24.0445 (UTC) FILETIME=[C1E07AD0:01C8B68C] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=27228; t=1210856912; x=1211720912; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=townsley@cisco.com; z=From:=20Mark=20Townsley=20 |Subject:=20Please=20welcome=20Andrew=20Sullivan=20as=20DNS EXT=20Co-Chair |Sender:=20; bh=h9lem1SUXc7YFzlj3ibq4j39AJLAMnPjtsNaxk/8Q9U=; b=VGEpH4waNg4eLhYWXyO0yihv0UjzGZgLJzq2gZPuEpj/L+3WEdlN6KtThQ /0aL1REo40UlPCiJdHTlSen67pA0AnzBKWqvbHklSNtYdNN4hoznBLayX3fz muzFtPaU3dhQbWlh8OxocLX5hCbRkzfcZceQK8kS8E5dDcSjYu9Qw=; Authentication-Results: sj-dkim-1; header.From=townsley@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); X-Scanned-By: MIMEDefang 2.63 on 66.92.146.160 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion [ Moderators note: Post was moderated, either because it was posted by a non-subscriber, or because it was over 20K. With the massive amount of spam, it is easy to miss and therefore delete relevant posts by non-subscribers. Please fix your subscription addresses. ] This is a multi-part message in MIME format. --------------010307060308070300060006 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit It became clear to me at the last IETF meeting that perhaps DNSEXT is not as "dormant" as we expected it was going to be. Olafur needs a co-chair, and after a call for volunteers and painful decision process among highly qualified candidates, Jari and I have selected Andrew Sullivan to sit alongside Olafur in chairing the group. If you don't know what Andrew looks like, I took the liberty of including this headshot. Andrew can be reached at ajs@commandprompt.com Thanks, - Mark --------------010307060308070300060006 Content-Type: image/jpeg; name="ajs-head.jpg" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="ajs-head.jpg" /9j/4AAQSkZJRgABAQEASABIAAD/4hEsSUNDX1BST0ZJTEUAAQEAABEcYXBwbAIAAABtbnRy UkdCIFhZWiAH2AABAAMAFgARAABhY3NwQVBQTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 9tYAAQAAAADTLWFwcGwQXEW91WWpfBUTXaNb/hWzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAA5yWFlaAAABLAAAABRnWFlaAAABQAAAABRiWFlaAAABVAAAABR3dHB0AAABaAAA ABRjaGFkAAABfAAAACxyVFJDAAABqAAAAA5nVFJDAAABuAAAAA5iVFJDAAAByAAAAA52Y2d0 AAAB2AAABhJuZGluAAAH7AAABj5kZXNjAAAOLAAAAGRkc2NtAAAOkAAAAj5tbW9kAAAQ0AAA AChjcHJ0AAAQ+AAAACRYWVogAAAAAAAAW3wAADTHAAAGs1hZWiAAAAAAAABzxQAAs0QAAB70 WFlaIAAAAAAAACeUAAAYEAAArX5YWVogAAAAAAAA81IAAQAAAAEWz3NmMzIAAAAAAAEMQgAA Bd7///MmAAAHkgAA/ZH///ui///9owAAA9wAAMBsY3VydgAAAAAAAAABAc0AAGN1cnYAAAAA AAAAAQHNAABjdXJ2AAAAAAAAAAEBzQAAdmNndAAAAAAAAAAAAAMBAAACAAABhQMaBKYGMQe5 CUYK0QxcDewPbxD4EoMUExWaFyQYqxo0G7cdPB7DIEchxiNIJMQmRie/KTkqsCwoLZovDTB6 MeUzTzSzNhk3dzjUOi87hTzaPiw/eEDBQgpDUESQRc5HC0hDSXtKr0viTRFOP09rUJVRvlLl VAtVMFZTV3VYllm2WtZb810RXi9fS2BoYYNinmO5ZNJl7GcFaB5pNmpNa2Vse22RbqVvuXDM cd5y73P/dQ12G3cneDJ5O3pDe0p8T31RflN/U4BRgU2CR4NAhDeFLYYghxKIA4jyid+Ky4u2 jJ+Nh45uj1OQN5EakfyS3pO+lJ2Ve5ZZlzWYEZjsmceaoZt6nFOdKp4Cntmfr6CFoVqiLqMC o9akqaV8pk6nIKfyqMOplKpjqzOsA6zSraGub689sAuw2LGmsnOzQLQMtNi1pLZwtzu4B7jS uZ26Z7syu/y8x72Rvlq/I7/twLbBfsJHww/D18SfxWfGLsb1x7zIgslIyg7K08uYzF3NIc3l zqnPbNAv0PLRtdJ30zjT+tS71XzWPNb917zYfNk72fvautt43Dfc9t203nPfMt/x4LHhceIy 4vPjteR45T3mAubJ55LoXOkn6fXqxeuX7GztQ+4c7vfv1vC38ZvygvNr9Ff1RfY19yj4HPkT +gz7BvwA/Pv9+v76//8AAAFbAvMEbAXtB2kI4wpXC9UNSw7IED4RtxMtFKkWGxeTGQgafxvz HWUe1SBJIbUjJCSPJfgnYCjGKisriizpLkYvnTDzMkYzlzTjNi43dDi3OfU7MjxsPaE+00AE QTBCWkN/RKNFxUbjR/9JGkoyS0dMW01sTnxPjFCZUaZSsVO9VMZVzlbXV99Y5lnuWvRb+l0B XgZfDGASYRhiHWMiZCdlLGYyZzZoOmk/akNrRmxJbUtuTm9PcFBxUHJPc050THVIdkR3P3g5 eTF6KHsffBR9CH37fu1/3oDOgb2Cq4OXhIOFbYZWhz+IJokMifKK14u6jJ6NgI5hj0KQIZEA kd6SvJOZlHWVUZYslwaX4Ji5mZKaaptCnBmc8J3Hnp2fc6BJoR6h9KLJo56kcqVHphym8KfF qJmpbqpCqxar66zArZSuaK89sBKw5rG7spCzZbQ6tRC15ba6t5C4Zrk9uhO66rvAvJe9b75H vx+/+MDSwazChsNhxD3FGcX2xtTHssiSyXLKU8s1zBjM/M3hzsfPrtCW0X/SadNU1EDVLtYc 1wvX+9js2d/a0tvG3LrdsN6m35zgk+GK4oHjeORv5WbmXOdR6EbpOuos6x7sDuz87eju0u+6 8J/xg/Jk80L0H/T59c/2pPd2+Eb5FPng+qn7cPw3/P39wf6D/0P//wAAAQMCLAM/BFUFbQaK B6EIuQnPCucMAg0XDi0PQBBYEW0SgROTFKgVuxbNF94Y7xn/Gw0cGx0oHjIfOSBBIUkiSyNO JFAlTiZKJ0UoPSk0KicrGCwJLPQt3y7HL60wkTFzMlMzMDQKNOM1uzaQN2Q4ODkHOdY6pDtx PD49Bz3QPpk/YUApQO9BtUJ7Q0FEBUTKRY9GU0cXR9xIoElkSilK7kuyTHdNPU4BTsZPjFBT URhR3lKlU2xUM1T6VcFWiVdRWBlY4VmqWnJbO1wEXM1dll5gXypf9GC+YYliU2MeY+pktmWC Zk5nGmfnaLRpgWpPaxxr6my4bYZuVG8ib/Fwv3GOcltzKXP3dMV1k3Zgdy13+XjFeZF6XXsn e/F8u32Ffk1/FX/dgKSBaoIwgvWDuoR+hUKGBYbHh4qIS4kNic6Kj4tPjA+Mzo2Ojk6PDY/N kIyRTJILksuTipRKlQqVy5aMl02YDpjQmZOaVpsZm92coZ1nni2e9J+7oIOhTKIWouGjrKR5 pUemFqbmp7eoiqleqjSrC6vkrL+tnK58r1+wQ7ErshazBbP4tO+167bst/O5AboVuzC8U71+ vrK/8cE6wo3D7MVYxs7IVcnmy4jNOc730MTSotSP1ovYl9qz3NvfFeFd47HmEuiB6vjte/AH 8p/1M/fS+nv9Mv//AABuZGluAAAAAAAABjYAAJeRAABYuAAAVUEAAIwVAAAoVwAAFqgAAFAN AABUOQAC8KMAArXCAAGo9QADAQAAAgAAAAEABQAKABEAGQAjAC8AOwBJAFkAaQB7AI4AogC4 AM8A5wEAARoBNQFSAW8BjgGuAc8B8QIVAjkCXwKFAq0C1gMAAywDWAOGA7UD5AQWBEgEfASx BOcFHgVXBZEFzAYJBkgGhwbIBwsHTweUB9wIJAhvCLsJCQlYCakJ/ApRCqgLAQtbC7cMFgx2 DNkNPQ2kDgwOdw7jD1IPwxA2EKsRIhGbEhYSkxMSE5MUFhSbFSIVqxY1FsIXURfhGHMZBxmc GjQazRtoHAUcpB1EHeYeih8wH9gggSEtIdoiiiM7I+8kpSVdJhcm1CeTKFQpGSnfKqkrdSxE LRYt7C7EL58wfjFgMkYzLzQcNQw2ADb4N/M48jn1Ovs8Bj0UPiY/O0BVQXJCkkO3RN9GCkc5 SGxJokrcTBlNWU6dT+VRL1J9U89VJFZ8V9hZN1qZW/9daF7VYERhuGMuZKdmJGelaShqr2w4 bcVvVXDpcn90GHW1d1R493qdfEZ98X+ggVKDCITAhnyIO4n9i8KNi49XkSeS+pTRlqyYippr nFGeOqAnohekDKYEqACqAKwErguwF7ImtDi2TrhouoS8o77EwOfDC8Uwx1bJe8ufzcHP4dH9 1BfWLdg+2krcUd5U4FLiSuQ+5i3oF+n+6+Dtv++b8XXzTPUg9vL4yPqb/Gv+Of//AAAAAgAF AAsAEgAcACYAMgBAAE8AYAByAIUAmgCwAMcA4AD6ARUBMgFPAW4BjwGwAdMB9wIcAkICagKT Ar0C6QMVA0MDcwOjA9UECAQ9BHMEqgTjBR0FWQWWBdUGFQZXBpsG4AcnB28HuggGCFQIpAj2 CUoJoQn5ClMKsAsPC3AL0ww5DKENDA15DegOWg7PD0YPvxA7ELoROxG/EkUSzRNYE+UUdRUG FZoWMRbJF2QYABifGT8Z4hqHGy0b1hyAHSwd2h6KHzwf8CClIVwiFiLRI44kTSUPJdImmCdf KCko9SnEKpUraCw+LRct8i7QL7EwlTF8MmUzUjRCNTU2KzckOCA5IDojOyk8Mz1APlA/ZEB7 QZVCs0PURPhGIEdLSHpJrErhTBpNVk6VT9hRHlJnU7RVBFZXV61ZBlpiW8FdI16HX+9hWWLG ZDVlp2cbaJJqC2uHbQRuhHAHcYtzEnSbdiZ3s3lCetN8Zn38f5OBK4LGhGKGAIegiUCK4oyG jiqPz5F1kxyUw5ZrmBSZvZtmnQ+euKBhogqjs6VcpwWorapWq/6tpa9NsPSym7RCtem3j7k2 ut28hL4sv9TBfcMnxNLGf8guyd7Lkc1Hzv/Qu9J71D/WB9fV2ajbgt1i30rhOeMw5S/nN+lK 62Xtiu+58fH0M/Z++M37Jf2I//8AAAADAAkAEwAgADAAQgBXAG8AiQCmAMUA5gEKATABWQGD AbAB3wIRAkUCegKzAu0DKgNpA6oD7gQ0BHwExwUVBWUFtwYNBmUGvwcdB34H4ghJCLMJIQmS CgYKfwr7C3sL/wyHDRMNpA45DtIPcBASELgRZBITEscTfxQ8FP0VwhaLF1gYKRj9GdYasRuR HHMdWR5CHy0gHCEOIgIi+iP0JPAl8CbyJ/Yo/SoHKxQsIy00LkgvXzB4MZQysjPTNPU2GzdD OG05mTrHO/g9Kz5gP5dA0EIMQ0pEikXNRxJIWUmjSu9MP02RTuZQPlGZUvhUWlW/VyhYlVoF W3pc8l5vX+9hdGL9ZIpmG2exaUtq6GyKbjBv2XGHczh07HakeF56HHvcfZ9/ZYEsgvaEwYaO iFyKLIv9jc+PopF1k0iVHZbxmMWampxunkGgFKHmo7elh6dVqSGq66yzrnewN7H0s621YbcP uLi6W7v3vY2/G8CiwiHDmMUIxnDH0ckqynrLws0EzkDPdNCg0cfS6dQC1RfWJ9cw2DXZNdow 2yjcGt0K3fTe3N+/4KHhfuJZ4zDkBuTX5ajmdedC6Ano0umW6lrrHOvc7JztWO4V7s/viPBB 8Pjxr/Jk8xjzzPR+9TH14PaQ90H38/il+VT6BPqz+2D8Dvy6/WT+Dv61/1r//wAAZGVzYwAA AAAAAAAKQ29sb3IgTENEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1sdWMAAAAAAAAAEgAA AAxuYk5PAAAAEgAAAOhwdFBUAAAAFgAAAPpzdlNFAAAAEAAAARBmaUZJAAAAEAAAASBkYURL AAAAHAAAATB6aENOAAAADAAAAUxmckZSAAAAEgAAAVhqYUpQAAAADgAAAWplblVTAAAAEgAA AXhwbFBMAAAAEgAAAYpwdEJSAAAAGAAAAZxlc0VTAAAAEgAAAbR6aFRXAAAADgAAAcZydVJV AAAAJAAAAdRrb0tSAAAADAAAAfhkZURFAAAAEAAAAgRubE5MAAAAFgAAAhRpdElUAAAAFAAA AioARgBhAHIAZwBlAC0ATABDAEQATABDAEQAIABhACAAQwBvAHIAZQBzAEYA5AByAGcALQBM AEMARABWAOQAcgBpAC0ATABDAEQATABDAEQALQBmAGEAcgB2AGUAcwBrAOYAcgBtX2mCcgAg AEwAQwBEAMkAYwByAGEAbgAgAEwAQwBEMKsw6TD8ACAATABDAEQAQwBvAGwAbwByACAATABD AEQASwBvAGwAbwByACAATABDAEQATABDAEQAIABDAG8AbABvAHIAaQBkAG8ATABDAEQAIABj AG8AbABvAHJfaYJybbJmdphveTpWaAQmBDIENQRCBD0EPgQ5ACAEFgQaAC0ENAQ4BEEEPwQ7 BDUEOc7st+wAIABMAEMARABGAGEAcgBiAC0ATABDAEQASwBsAGUAdQByAGUAbgAtAEwAQwBE AEwAQwBEACAAYwBvAGwAbwByAGkAAG1tb2QAAAAAAAAGEAAAnF8AAAAAwB1lgAAAAAAAAAAA AAAAAAAAAAB0ZXh0AAAAAENvcHlyaWdodCBBcHBsZSwgSW5jLiwgMjAwOAD/4QDkRXhpZgAA TU0AKgAAAAgACAESAAMAAAABAAEAAAEaAAUAAAABAAAAbgEbAAUAAAABAAAAdgEoAAMAAAAB AAIAAAExAAIAAAAQAAAAfgEyAAIAAAAUAAAAjgE8AAIAAAAQAAAAoodpAAQAAAABAAAAsgAA AAAAAABIAAAAAQAAAEgAAAABUXVpY2tUaW1lIDcuNC4xADIwMDg6MDI6MjggMTM6MDY6NTIA TWFjIE9TIFggMTAuNS4yAAADkAAABwAAAAQwMjIwoAIABAAAAAEAAAFAoAMABAAAAAEAAAFA AAAAAP/bAEMABgQFBgUEBgYFBgcHBggKEAoKCQkKFA4PDBAXFBgYFxQWFhodJR8aGyMcFhYg LCAjJicpKikZHy0wLSgwJSgpKP/bAEMBBwcHCggKEwoKEygaFhooKCgoKCgoKCgoKCgoKCgo KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKP/AABEIAUABQAMBIgACEQEDEQH/ xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0B AgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4 OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOk paanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/ xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncA AQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3 ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqi o6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/ 2gAMAwEAAhEDEQA/APcX9qqymrDnNV5eau51pFd2BqB/epZODVZzUspIifFV5DUrtUDng5qW WiJ6hapX6VE9QWiFumaY2PSnsOtRt7UhjDTW/SnnimNSGiNuaY3b0p574pjDjOOKQxh5FRsO elSHpUbDmgYgxnpS4pF4p2aRSExRmg0lAyaHqOKtxDnmqkWQR1q1EfmoQNF6L1xWhbgYHFZ8 PT61ftvuitEZS2NCGtGE5UdxWZD1rRgPyAfnWhhIvQnPBq0h7CqUZ9KsxnirSMZFpSMCpY2H FVgamjNXYzZY6UtMHSl3ZoEOHTpQSPSmg0E0AKT+VJ703PJpM0xDifaoyaCaYT+dFgDPXNNY gAUmajZiTTsBlyGq8h4qRnz0xVeRuKwZ2JEctVXNTOwqu5/OkykiCTg5qF6lkqu5pMpIY9Rt TmNRsakojamGnMaYTzSAa3TpTW6U/GRnpUb4CZB+f9BQo3HcjYqM7mAqJ5UPGQMdqguLy3hL GZlUD36msjUddtmizEv/AALHOauNJsXMbpZccsM1GWGcAgmuIutQlfaY5Du3AZz61Qm1rULd /lkLDkDPan7Bhzo9EBHUihiBtycelcDY+LpkUmYZZeGxzit7TvEVpd7RvVWK5wan2TW5XMns b+4t6A+hNQXc6QWV1LLOsAjiZlY8ktjgD8apTXyyQK4xjGSfpWDrDLdWQUuWU9vTHNawpRTT ZEpuzSOHtPFWvwymVb6fcTkqx3D6YrpNN+J2oQ4F9aQXK46r8jVjXGkIjIkIVRnJzmoholqZ wGlcrjketVLlb2JUmkem6R8TdBucC78+yfofMXcv5iu70jU7HUI1axu4JweRtcZ/Kvn+XSrS O3328SmQcop6mqEaX6Ox3PGAOHBxg9vep5I9Cm2fU0ZIIyDWhA3y+9fM2leMfE+lJiHUGnVR krP86/rXZ6B8ZpBhNb0lSO8trJz/AN8n/Gq5OzM3FnuMZ9KsxmuG0b4i+GNT2qmopbSH+G6/ dn8+ldnaTR3EYkgkSWM8hkYMD+VUotGEvMug+1SxmqwyB6H3qVDVJGTLIbmlBqINSg0WESg8 0pPtUeecUuaVgFJ60maaTTN1Owh7NyaYWprNimFqdgFZqiY0M3NRMc96dhnjz69e2zZSViPQ 1PD41nTAnjDe4rn5n65rLmducp+VW4xlujvSseiweMrGX/WZjNaMGs2VyB5VwnPvXjczrk9R 9apPLIpzHIQRzkGs5UI9A5j3ZpFflWDfQ1A55rxCPX9TtDmK4f8AE5rRtviJfwYFxGsijrWT oS6aj5kj1pj+VRs1cJZfEnTpcLdRPEfUdK6Cy8TaTegeTeR5PZjisnTkt0UmmbBPFIo3Nz0F NidJRlHVhjqDmtPRYQ90ZHA8uIZGR1btUxV2NuyK9xp8hYxhsPj7oHNZsmmFmYSElV5c9h7V 2l1GqLy2Gfl3PXn0rlfEt8IIGjt9oQnnHOe1dcKaZhzs43XWtYEkMShyDt2r0FcgtxJNlARy xA+uKu63erb2zqRu+bkA+tYulXCSOmeHMuFq2uwJ3LU4cTLGhyVZdx9MU+5jzaTyEElmO0fh VG+uhFfOoJJVmyfVqW6vt0OB2Xk0MSbauYEUqiQs/BwRgdyKjW6kiAAbAzniq7uzRqqjDM5A qpfvsKonJ7/4VIX6nT2WqyxQsNzFSpwalg1YvGqMeDyRXOh9gjjOchOfrTFl2uozgA1Nytjq bu9Uzo4JPpj8qqxSOLkLu4X37ViG5GwckkH1qxHd5Zj3OBnNK4aGrdXRV4/Xp1p0lyjRMHwQ e1c494QhY9vmH1qt/aLFVy2ck8mk0wUjp4ZkB2lVBx0pRHayZ/dLvJ965ddUUkbiSfTNX7TV oy2CB171m4tFKSNOXTyw/dtyf4T0qK01HVtEmD6bfXVk69opCo/LpWjZzJPHmIjP92i5txKo A70QqyiynHQ6XQfjb4osNkd8LTUoR185Nrkf7y/4V6JoHx10C7wur2V5p0h43KBKn6c/pXzr eWzRucJzVPD55XHrzXSqye6MHTiz7c0XxToWuKp0rV7O4J/gEgDD8DzW2c9cHHrXwQrbG3Ak P6g4NdLoPj/xPohQWGtXaxr/AMspX8xT+DZq04S62M3S7M+0g3NLur5w0P4+6rCwTWtLtbtO heFjG/5HIr2nwN4ss/GOhLqmnwzQxmRomjlxlWHXpQ6btdbGcouO50paoi3NMZvSoy1SkQSF u1NLUwn0phNOw0OZqYTTWPFNJoA8CkkyTWhb6cs9srk4JFYLy7jiuy05QbKEH0FY1JWR6iMG 70V9pIAasG+0eVScxt+Feiy4xgDiqUkQbOazVaSE0up5dPYyr91iPY1lXUU653R7h7V67LYw yD5kUn6Vyuv2kEQjaFdu7P6VpCtfSwKkpaI86lKgkOjL+FQZwcxyY9McV1z2qOSCuR9KpzaT byg7kx9OK0VVEyoSRFpes6nYWuy1uJTLM47k4UdvxNe3+A9R1JtOsFvF82RmLucY3f8A6q87 8F+DWmmFzuZYwMc9FHfHua9TsIz5D29sBGBhC+eiDqo/qadk9bEu8dGdLqN2rwMxUMw55PA9 K4jxRPa2cCiefdKB5jqvc9hWjqWpR29s6RklgMcdFArxfxVrRkM5ZjvYnnParjoZNWMnXNYe 6u5ld+XOQAOBjtVKzujFdwFSRs+YCufuJi1wrgk1saXC948cy9j19qUvd1FTu3ZFi4nkNwGB JJctk+9XDubSolPMjyZY+1WP7PIwcdKsx2f3FYZrB1EdUaTtqZsNmGdnZciMHH1qmumtJOZC vA5rrIbbbCqbfmZuaf8AZFQAYHNYyqmsaBxdxaMsob0NV5YGDDI5PSuzmsFKgkc9MVWfTQzo MfMKXthOgcvFaFs5zn7xOOKuw6exIUDPGTXSRaeqSliOOlW4rNQdxHFQ6xccP3OVfSB5WCON uK5zUbCSDIAO0V6fOi7NoUk47Vz2p2Q2kHH0NOFV9SatBW0PPAmGwVI9getXICy8bPm6VNe2 /lSHYPxNRwTLlRJg8cE103ucPLZmrYXRVwVYqR1rprK489AQw3DrXIKQoVwNynHPf860bSQo A8TbhjkelYTRtFm5cQrKSx4asG7iCs4Rh1/EVv28yTxgkYPr6Vn6jYpKd2zDc5I7j0pQkEl2 MNPljII+eo8DcnPHeoLmzmhmPlyvtB43c8VH5tyoy0aSDuVODW6Mr9y4CSOeor6T/Znm3eBb 2MH/AFd84/MCvmIXa7vmR0+or6N/ZhnD+FNXUcqL3IPY5UV00n7kkY1LOx7Uz1GzVGXqMvg/ WhIxZKXxTd/aoGkzQrc9abQkyctTS1R7qY0gHU80iz5xWTdKoHrivQbM7beNT/dFea2jbryM Huwr0ZJAqrxniuSs9bHprSJadqh4/rTWnBGOnemrICeOa52CEZwOBxmuV8WuPtUKdNqZrqGc M3IGa4zxTLv1Z1yMKoFXT3NqKvIWzUJpxkCbmz0NLpVub2/RWVdv8RxgCrenKPsMSn+IV0Gg acJpgE2iPPzE+gq4vUym3zN3Oj0qALBBHCpMfKxxqPvt6/QetaT24trXLFRLjgrS20ixFjGQ ruPKU9Nid/zqDWpkjYojZULgkdvauqKMG2zzzxhqQgaWNJPmA5IOea8d1K8E124zuHO413Xi 12e5uN3yg56dBXAM1vFMVH7xj/COgq7mb1G6Xp51G6VEycHJx2r07TNDSC2AVVUYx0q38MvD H2ho3aJVzySR2rrNXt0t5pEQAKhwCO9clWTlqd+HpKOnU4qeExNtZc44yB2qsFCTD5cH+db8 0Ywc4zVCSFSQSORXI5nb7LqVEyW9COlPwWIJGc1N5fzcDinBOMCocilArOM446U7ZuHAGam8 s9OtKFGKm5ViBYS30PWniI5J4qbGBRknHHFK4cqZWZcMS3frWPqCNIcAfLW/MAV4FZ868HgU 4yIlA4TWbUJyo4HWubnypBxxnFd3rEPy5A471yOowbX46Nx0rtpyueXiIWZFp1wI5PKl5Ruo q5GxgkxGx2E9R2rHwQwJ6g5qys5WQ4OQ3OKto50zpLK+wTnA9R6+9a4kWaNcHJ9a5GKXeuVO D+orT0+8Y/ITg55rKUbGsZFnUIOrHgdCP61hyxmNyOxrqSUniyeWHBrEvISm6Nh05B9RVwl0 FNIzlHrX0r+ztMv/AArtUUKCl3KCQMZ5zXzUTtPFfQH7OE+fB2oR5/1d836qK7aOsWctVdj2 Bnzmoi/TNQtJ7ioHmC9TWiRgy2ZMe9IJQO9Zct4ADg1Tkv8Arg0SskVCLbNuS7Ve9Upr0DvW LNfE5+aqct7k8GuadVI6o0jyTRz5mqwDr81ejxtx/SvLtHufs98spGQvauwg8RwHh1ZRWFVN vQ7Ywcom9JnPQZNJGfLySOTVGHVrWY/LOucZwakadJQdjKQfQ1h6i5WWztbB4rhNebdq1yfR sV10O7cuVI/GuH1KTzL+5b1c1pTNqCs2X1vHEccUfXgCu+s7mKw04SO+3aoH1NecachM8cjD Cg9+9b2oXLT3MUbEFFH+TW0Ukzld3ub1zrgCSO7HccKidznqaff3jpAryEb3xtXPQYrndyyX 8Q6qnQY4Y/4VZ8RXKw6fJMWy7gjPc49PQVrzX0J6XPPPHeo7pmhViCx+Y+wrC8G2DaprCoFy uRkdao6zLJPcPI7Esx/L2r1L4A6IJbiW8lUYTgZq5/DYilHmnfsex6FYx6LoRdh+9K8YrkdX n3zuWxjOa63xNdgQCNMBV9K8+vZMuec89a4cRLlXKj1cPBv3mQTvnNVXPNPdgcHNQuwAriOt ig88fWkJ6Uin8KAw6g0ibjgcdTSE96QdfU0YwOaBXsGQceo9KC3I60oAHFMxk8HmkNA7dj0q rOemPpVo8DPaq0wyBimgaMbUk3REY7Vx2pxnbg13V6oIyR9RXHa1FiQntXRSZw4iJzTYLEdG 75obKEMRkd6WdcufUUkb7BtflfX0rquea1Ysx84aJhx2PUVajuuNsq7SP4x1/GqKKF+ZTkeq 1YRgy8YJ9SKljVzd0+5xjJBB4OKs38PmKCpB/un+lYNjKIWVZlA/2h0roLZkeErvBQ8g+lRe zNFqjn5FAJIBAJ/I+lez/s73ATTNbhyMCdHA+q15Xe2pDEqPY/412XwWu/sl9rMRON0aN+RN dmHktTnqxdj3ae9VQeazLnUevzYrBudTznLCsyfUCeM1rKokRGkbtxqHX5qptf5P3q5+S8LM eaalwSRzXLUq3OinBG691kdajack9azvNz34pyvmuSU2zpUTza0kwWx7Crckm2MkHJqjbD5D 2JqSVsRH+tdjd2a0rpBHdYE5bcGKbRioI76VXJjmcbfetOzSCRFJZQMZbJqsmnwmN5A+Q/TH ajmXU55NvqaelatesoUzscLTbaM3MtyNwzGu76knFUrfTZfnaJyoXgH1p0JntZZPm+YjDe46 1DS1saU6ko2Rqwo63siF9wgODWjHJmcuRkBM/Sufglma4dsnfM2W4rZs0aSRgnzDoSKvYTcn 8RoeYiDzjwAuFHqTWD4pvHbToow2XJJPsKm1K/jl1AW0PEdumGI6E1halKZJCzk4PAHtVR0M ZO60OVuk3OR2r6F+Fdl/ZnhKIgHzZuenc14b9kM1xAqg/O4z+dfROlsLTQ7a3jGGRAKU56o3 w9PRsp6xPgunXB6+9cvcNyQDzWpeM8ruMnryTWLc/e6V51WXMz1KasiBiCcZ6VE7EnAzilPB phYk46VmhvQAT60o3dMjFN4PGaUMAKCbk8LYbBHJHWpCRjng1XTtz1pQcA+opCJWHpzUbHoQ BTd/Od2fagnqTSBMVjuHaoRjHvUn86jbgL655oKKl0uVbjtXK6rFvU8CutusEVg6jEQm78a1 puxzVldHAXybZDkkEdDUEZJ68fStDU0Alcds8CsfcUfBFdq2PJqaMupmM7lOP1FTrtfHOw+o 9aqLOewwe+aeJlz8y7T6g0rCTReiMgbDYcdiK0LGbawUHA9DWGk68ZYqexFaEFxl039D0YdP xqWjRM6fAlTI6/Wr/g6QWmr3G0YMkWPyNYuny8bSTjpWpY4W8EoPO0g4pQnysuUbo7CW8Jzz VV7gnvWeZSec0oc1Tm2QlYt+cTU0MmWrPVuaswH5qzk9C1uaqN+VTIaqxGrEZrJm6PLR5y8R ycdqa09wq7WANW59BvI87QfWqM1nexdn/KvRTTOa7Qw3J53RsB9asWuqm3iMa8KTxntVJmuF yGTP4VEZ+MPH3qrXJ5mdLp3iBYA6yESIxzjpULawZZ5HMYCt6H8q51pYT94EH6VHmLJ2yED6 4o5EPnOmj1tLaZ1aNixHHPf2rrNLujLbtbWLATSL8xPXPcfSvM4F3zRneGAPrXo/gbSZQJNV 1JXhgRdsSHgufU+1JxSHGbe4q6QlsJHupo8sCSc965zUJImlCIcqOh9a0fExLMzEkKDkLmuI +1t9pQ5OVbHPSmosls7nQrQS6zpUQGd0m417HcuiWxRTjHHFeWfD9ftPi20BPESO+MdOK9Hv icgc8nPNc0j0KK0My6OAT/KsS5GZM9K1rudSGC9fWsefBYZ5HvXDN6nfHYrnnI7Uwn8qkk5H y9qpyMQwwc1KBk2ecGkPyjpmmqckc1Jxmhk2DPIx24pxz/D196AyFhjtUgUZ60risQBGLnml fd2XmpCcEVGy5OSfxpXAaMnk8UOQAMdaSTPUHNM7CmgZFKQR6ms/Uo/3BweavO+P/rVTvfnh OR1FXF6mU9jz/VU/fMOelYDjccA9K6PWG/esCOxB4rmVIY9cNXfDY8atvYeuem7Hsak3Sr1U MvtzSKN/cB/fvQHMbYOc+lMxWgnmA5ByAeo9KnglZF4OcHBBqB5FkH3QCKIid/qCKCk7HV6Z cZQHPHTntW7Ztlg6/QiuO0qTY5J5FdPYy8ZycdcVhJWZ1Rd0bSuc4B4qZWqijcj0P6VYjbcO vI4pJhJFkNzVqA8iqKtzVmE/MKGJPU14TxVlD05qnC2RVpKzZ0Iuy2YPYVTlsEYZ2g/UV0LR 47VC0YzyBV3Mzlp9IhYcxDOazp/D1ux/1eK7V4RUDwA1SmxNHAXHheE/c4rLufCrc+WwJ969 Me2Ug1UmthnpWkasl1JcEzz6w8O/ZZkd9ryk8H+GMDq3ufSu6N+pgMaMwjWPagY8L7n1NU9S h8q0kfBwoycelcXfapNvxLFMkWPlIU4reMnJXI0irFnUbqa8eTZkwr/Ee9ZKxW3nIZo2wDkb OOatS6gi2JPlOiAdW4Ga5WfUpZJQkJxk+vWrs3qZuSR7X8ELKS/8V6jMFzBBbY3nsWbp+Qr0 /XYrSNZFDjcBjrk1yvw3tk8K+DIy+JL69/e3TA57fKo9eKzdV1hZ53YNgH+EGsqrSR30Bb7H JU/TFZE0+Dzmmz3pKkk/hWe9wr9+K89rU9FTRfE3vioS44J6VVW4B5BFNMwznOfalYXMi6GA NK8gDYzVETYPzEYpPPU4JIzS5Q5i+rDcMZzU4kJHpWXHcJuwSN3oTUwvF+g9fSk0NyuX88c0 7advX3ql9sVjhTxSrdfvGDYPHFKzJukWGTGcnj2qFztx6UfaVIGSPSmyurjKmhIGV3Oc56Cq 0zZQ84qYn5T+XNVblwowTzVJGbascP4gUJO/PBB5rlGPzZrrPFC4GR1xmuSxk13Q+E8PE/EW YpkICzA+xFTAqSMMHHoeDVEqAPvDNCuVOQaqxip23LUkeTwCD2oiyDyMVLbTFh8wBqw1v5il ojhgM7aVzZRvqiaz4bBOAe5roLGTaoz0IxXMR5JwTjHFbdtKYwgP3G71lNXOim7HQpMpI7f1 qzbyZcj1rFhmHysDkdc/41pWkgkmBjOVA59M1CKlsaSmrUJ5HaqaE1ZizmqIRrQH5RVuM9jV G35Aq5HxWLOiJ1Z96jIqRiKYf0qySJhmmMOlSmmNTEQMo7VBKmasmopOc4poDPmiBJB5Ge9c V49hKSRyJkLDA0hVeATnjNdhc30KsyltrZwQa5vxLeRyWd0gAZpISmDyCOtb0tJamc02jz68 u9RmWG4vbsgzjcI0UDCj9KhzHIVWS5lQ9QWjDCrWuQ7INPlxw0AUfhVq300/ZtztGqlcs7MM gew9a6uZdTnUXexu2Oo+I7vR3lttZguLa3xHslj2bfSs+V/ECqX2W8mecxzA/oa1vCNmlppz 3U7qtq7YKv8AxgdDj61m6vI881xOm9IVyyr3rKSvqdKtFbsz31vUoB++tJgO/GRUS+JV37Zl kjPuKwm1K5MhzM2OvJq1Fdy3UTCULIo6gqKl011M415N2izeg1qN2GJVx6Hg1fjv9w4fJPau HvYQyeZCApXqB/SoGuZ7bBimb5hmodFPYv63KL95HoUt4QNwxVN79i2S+MVw76neSja0749M 1p2+kuYhJezOCedi9fzqPZpblRxTm/dRuzamqkASqT65qH+2TniZeO2cVmC0s4mIFuzj1dzn 9KPKswcy20Sg9sn/ABo5Ile0qM14NddG3GZAM45YGtKHX7UkedOgPqCK5Z/7Phj3NZZXOM8/ 1NMhm0d+HtitJ0kyfbzWl0dqmt2WSGu4tp77hUkmrWqqp+0RKSMjc2Mj1rk47LTptvkQowP+ 0QT+tOOkWFwCA1xFIBjDtnH/ANas/ZxNfa1eljq4dRjnwIpEfHXYwNMmk3nJIrgtR0250oCe CbdGD95eCv1qVfEN7MEjBRD3dV5NP2N/hM/rVtJqzNfxF5YidpXUAjGCefwriH+8cZArWktp rkebcsyyMc5flsfSqNxblJiiZOBnJreMeVanFWm6j2KuM1JHEzAkA4FXLS28x+Rx61cMaIuF Ge2e1DYo0L6spIjx7Smd2MkCr9vPHMQMbJfUcA1HuWOPzM5Yn9KjuUCyrJGOG5qdzdLl2LEs QF0MAgn+dWvtKrlDwFO05qASZhWSTlk/PFMlXzYdyjO7mlvuVeyNCJio+RiBnOT0NammXyQy hOfn4JPTNcgsrxkoSfoKv2ZbcpDMSD0xQ42BSvoego2T61ZiPzCsvSt7QZfHPvWjF1FQV1Ni 2Pygc1cjNZ9qePWr0dZM3idWeD0ppPNKxycmmE1VyBT0J7VE5pzHio3b8qEFxpOKjbrzSsaj Y1SEZGr6ZHebiDsk7MK4bWrdtPulhuZASy5Ge4NejSn5sV5p8RMSa9CCTxEOB161vT1M5OxN ocVvqkejrcIrLDcmORW5HGSB/Kut8Q+FLfUJvOgfyM/eQL8tcN4aljt9SnsLtzAlyBJA7HhZ R0r1S0uGurNXIxMBhx6MKU7xd0OLTVyK18Pwy+FbpPLG9JFRWPQADnFcDqNmba8mhJBA+Vg3 evXNJlL+DlVUG95nL54zhsf0rz/xYkhv/NMW3eOhFazlaJuoXeq0POr3RCZcw7Nv+11FSRaa sMBUOcnqcda6B4yTngH6VC1uWPQmsfath7CEXdI5i/tDBDLM0ob5eR+lLpPhm71G0SaT5EI+ XPcVqX9g1xe2NgMs877nA7IOtd/HGsSLHGoEajaPpUVK7jZIKWEVWTctkeRa1oN1o4jnfa8W 7qO31rppES5tkkj/AIlDfnXTa9bR3enTQOMhxgfX1rkPDM+Fayn4lgbYQe69jSVRzjcj2Co1 OXox89nKYMrjf2B6fWspbScTESYbscda665tsDCdu/pWU9u2dwBznpTjO5q4LZlDVrD7RYJ5 ILSRnJHrXPxWkksixRgswJAATB/Gu0hRg2DjPYEVbVN4UFVyOMiqjVtujnlhVKV7mDJYC1so YYxuuRjcy9B+NTxB1BE2D79q2RDh8dQeAMUya3GzBGOcYrNzubqlyrQozxrNZShgGjZeQe9c 9pQRQSkSBufmxkiuhuY2toJHyWRVJxn2rmbCea4uVgsoAHc8Z5x71dN2VzkxC95Fwo8sixQq Xnk4Vf6n2qS+00WsOCwZz99j3PtXT6Po8dgjEEyTty8jdT9PQVT8SpsjGMVLq8zsjojhuSHN Lc40MUc9SuMfSrUVuZosoc+w6inxxFpDhQQPWr1vD9nZSvCtwc1TkKnTuc9OSpZD26VJBMvl +XJjjoTVjWYgt4WH3WANZJ5Y4q1qjlqXhI1GZNu1SQppq+bGWU/d6/X3p9lAZFER6sOPrVqO L7RajPEsfyke1TctRbIki3hflBPpitjSdPy+77q1mW0TAc9R0rqNLbNqp4yRmk2UtNTQhUIo Aq3Hx0OapoTVmI9KkDVtDV+M9OazrM/Wr8Z6VmzohsdU7c01j1pGPNMLcUzMUnpUbnmlznFR MeaYAx5qNmoJqJm60xXIZDya8x+ITf8AFQKBncI15r0uRvm4ry/x++fEbAE42Jmt6e5EhYlS 7sGtzFvbrubsfWtfQ31u3e3t7O7Wcu2xY5uMf8CrnNCutrvC3J6j6V2/h5j/AGpYOoBJkxTl K2hVOPNJI1l8QeIdKt2trzSo5ETJzCQwP4//AFqw9S8UNeKTdac0WPUnj9K7vVLYJG28FmbJ rlbyyXtkc1k60Vo0ej9Wl0ZyMuvWqkkxk+2Sf6VH/wAJLGVPk2E0jdgBxW/d2KtkZNVYtLV5 o44ly7tjms+eHYh0qq6j/AtlNdS3utagmyRx5UKH+EdyK6KRgud3AqyUjtbdLaL7qDH41Wkw cAcmueb5pXOynT9nCxRucsCMcVwuv2s9jqCapapnHEijuK7q5IXOelVJUjkBVgMEVcJcpz4i l7RaFHStVsdQjBhmXceqMcEGp7m2RuVwDnsay77wzbTt5kQWNj3XjmqTaHfRjEd3OV6fMdw/ WqtHdMw/eLdG1HbYIyM8+vSrC23yjHX61zwstTiAxP0P/PP/AOvS/ZtUJBF8y47bD/jT36jT l/KdCYSmR39aa8BK5IyaxUg1JhhtRP8A36yf51KNLmlULc6ldup4Kp8mamy7l+90iUfFuoQ2 9g1pEyvcy8EKc7R71d8IaT9ksVeRcXE2GYnqB2FXLTQ9OtSrRW4eT++53EfnW3GNqjA5olNW 5UKGHfP7SYIm1DgfWuc8SbSuMDpXT8bSK5XXz87A9B6+lTDc0q/CZViiGz35GS+Dn0FTSKtx LhBwo7U3SbSVxhB8oOTWvc25tYg4AUkc4q+ZXsZwjaNzitaf/SNg7cVStYR5mW+4O/rUmsSg 3rKpyF4J9T3pkcwdtrcAj8q6VseZOSlNl+1m2zndgjOQQOlaEnyXqOvSUfN6ViRZ3gVqkk+R u+6AalrUuLuiZozHKAo3Bulb9pGYoEU9uOKy9MlxKMpkjp7CttnB2hQABSHIkU+lWYTVVOtT xGglGpaHpWjGcAVl2hwRWnEc1lI6IHTMaYWpHbmmZpmaHluBUTnmgmo2amFxC2RUTnrTmNRO etNAQSHn6V5b47YHxHJ7Bf5V6e5FeU+N3z4jmx7D9K3pmU3Yp6TKsd55jqSm0jgV3Pgu7L6z Yq4xGZcDPUVwdqxXGwZPpXXeCJPL1aOSTICsOp75onsXQ0mj0/XLoLI4U5rnJpdx5qfVrgm8 kHYGsyR8j3rgnqz6CLSiMuHAUnINaGh2xiiF/NhRICIgfT+9WDdszcA/lW9eajDc2tnHA2Ck YUoR0Ip8vukXTYSPukO4g5PanZAAyvWssTfN1xUxusDBqLDciPUFOMDOSaz5o5AQxB4NaalJ Ml2C/U01kUoRnPvVXsZ2uUra4XBVjyKtRHeOO/esiPBnlX0Yir1s+Bt7ilJDjYvFARgUrQ7e QopY5AVAIPHNTbs4HGMiouzTlRCsIP8ACMe9II17KKsAjGBUWeeuaEJ2REy47c04cdevvSkb h3zSkY5qiJMa5IjOODXJ60zPKR3rqnO5McmsOWxkk1B2YDZgYzVROaeo7Q4ytq7A5boaZrt0 ltYSvKeg+X3PpWZdeIYtEvJbMwGRQAcq2OTXKa1rM+qzZf5Il+6gPArSFN3uzGriqcKfKndm axLuzHqTk1NGhbpwRzUKk9qlWdxxnpXUeRFrqXrOMpIGkOB3qzLcq5UKeB2rKM2SNxzUkMm9 sc5pWN1NbI6jTJ93HHTrWuh9K5/Ro2L7mJwB0rfj7VBTLKH1xU8Z5qspqaM4PWhgjTtTz2rT iP8AKsi2PzAVqwngVlJG8DoWbk00k80jNzTGNMzHFuKjY0hPemFs00ApOKiY8GlJ9aikbIOa YETda8s8SeXJr980xA2ycDPtXp5PzV474i/e+I7stjHmH9K3p9TGe6Ea+VTthQn3FdJoEot7 d7uRTu449ec1y6yxoy7ADiungvTeWw3QJGF6hV2g+9ORVOyd2zt79hMY7hc7ZUD/AJ1SdjjA q1ZOl1oFtImSFTbn6cVCIxtLGuKe57cJaFMx5PINVLhGEgeMkEelaBGTlTTHj+br9ai42jOa 6kA/ej8QKbLevsxH948ZxVu4jULnAwfaqiIu4YHerTREr7Iy7m2nlO87mcdDuNXbK5vYoxCU /wCBM2cVfWME5wRinKgUjoc0OVyYXT3Ft4SiAH72alKbcNz+FMBPbg+tWVIC4LcHsazbNb2H REgYJ59anRgMcH8ahQAHk/SpeQPaoZrzEyt/9amnFIpIXcT0oPzc9sdKEQ3cVScCmvzxmgNn GCKCcc4qjOTE6D3qGYAAHnmrIPHHWq1weODTRDPLvFIefxDcqi5IIGB9KxypVipyD6V22i2f 27xHqMjcgNtBrL8X6UbC+UquEk6EDvXZGS2PDqQbbkc50p0ak9KNpUnPapkYRx5x8x6VoZpa 6ixxZkAIzipdgW446in2Cjy3kYfSn2S+bKd2Kls3jFaHRWW5ZYhj5Gjzx61qJ1FVEGx7f0KY qyvBqE7oue5YXtU8dVl+tWIiOnegEX7U8itWHtWPbn5q1oTwPpWcjaBuk/rTSeM0hP1prNQZ gWpmaRjzxTSaYCtxULng05jULng00BGzc147qDeZrl4RzmRv5169IcBiOwrxqZt2pXL5/ib+ dbQ2ZlJ+8izpcI+3sCBjYGGa3Q5VcHp3rH0r/j8kz2jUVsHOMYptisdl4TlR9IkgXko549jz Vi6Hlx4PBrB8IzmO/eHtIufxFdDqoAPtiuWotT18PLmijJadE6nHvUiSLIAykHPoahEQl69C abcWUsYElm209MdjWWjOlJtXJpRmMjHFUoI2EpyOPyqpJqV3bybbm2LAdWSpf7bs9pOSCeTk EYos9gcU3c0gAGPXNMKAsS3Ss5datCQPNHuanGq2bY/frjr0os0TYuIgYYA2/wBakAbcMgEe 9ZU2swKQImMh9FUmrFlqEM3Kkj1B7UmmSrGiACQQQD6VIjHBG7kVGGXHygZ/KgJxkHnHSpHe xO/seKRj8vtTQcAbscUo4z3B5oAcuPSnc564B9KbgA4HWlJ2rg9qCWBOSf5VUvJAqMT2Gam3 85yM1l6y5aDygfnl+UfjVIiTshvgG0LQy3GPmmkZwfbNdB4k0KLU9OeFxhxyj/3W7GrvhPTl ttPhRVwqj866KSAMnIq1LW5xOCasfN1/ZS2t1JDOmyVDhh2PuKouuGweRXsXjfw0t2hmjUJc JkqwHX2NeWPEUlZJkw6nFdMZXRyyhrYfbx7bfGevaiwUpc7m6E9qcnXA69B7VdSH/Ulf4TzS uaxibUbK3lg8Nmp168VmTMRPBg/KWFaSsSevNKOwp7kyYzipo+tQJU0Z596LCRegPIrWgOQK x4D8wrWtvujNRI2gbZPNMY8UjGmk8UzG4pPrTTSE0wmgLgx4qJzxTmNQuTimMhnOIpPZTXjW Q1zMc9Sa9bv7iKK2m3zRqdh4LD0rnfBHw11DXrV9SvpfsGmEna7DLyf7o9Pc1vTj7rZm7ykr HMaIP307dsCt22GZeRwK69PAOl2CssF1eOx6u+Bn8Kz5/Cuqxbxp1xbSJ1AlXDZ/lUNqTsmb ewnFXaM+0imF0stqQHjYEg9CO9dRqmXgWQD5TXK2vhbxhdXLhRDbKOPMMgAP0xXb6T4YvYNI ittV1GF5kYnegLcenNRUg11NsNJrQw7Vc5B6VbkYLBtGPStyPQdPixuvJm78ACoL3RdPlTCz 3IYng5Fc7iluz1IVLLY5O4G5ucGqclnE5JKDJ6nFbl34ctNzMLi7Uk8DfxWbPptxAMwyEjPG 7mhPswlO+6KK6dEG/wBWvPcCrEWlxkPlEGeho33cS5li4H8Sc06DUI2+UMN3p3ocpE+6y1BY QRDCoue9Rz2qq+UUA+tTJNvGehpWcc7jk9qi7bBpEETMRgjmrobjgc/WqeCDnpmp4Hyuc0WM 7k+T1I6ULJnGeBTWDDrxQCTnbgY7UCuTnrkD2qJ269DTXk29OtQ7sgsfWhITkK7BQST061m6 eG1LX9qDMNuu4k9Nx4FP1K5EULE46GtrwXpjQaR9qlH768lDc9lA4qtlcym76HbaXCFhUY7V pCIkDioNPT5Fx1rSCelSjGRlXdqsqEMuRXmfjPwQ00r3mn5WTHKdmr2AxZqCW1B4IyK1jKzM 5RufMTQy287xXCGOVOqsK0bMlowe+c49RXrvjPwdHrFi/wBmCx3icxtjr6qfY1x2leDrmN18 84AHOOx9K1bTVyUraGFp2lX+p3CCwtzLh8HJAArt7PwBrE2DJLawD3JY/pXWeC9Oj021JkjA LcZHWuiadfMxvULjpUqpbQfJfU4GP4b3x+9qNqP+AGph8Ob9TxqVofYqRXZLcAly0mSOAKdD MWY5Jb0rRVI9hez8zjo/h/qwYAXNmR65P+Falv4D1AKN13aj8DXVwXQjbY+7J6Vdiu4yOWwf ejni+g1FrY8wYnmqd1qFpbLme4jT6mvKNR8VaxqG7Ejxp1/djHFYcz3MrFpZGJPPJrX2Ftzj dbsj1a88aaVBkI7zH/ZFYV18QQM/ZrUexY/0rhEtXfnrUqWnc4x71aoxIdaRv3PjrU5c+WUj B6YWsufXtVuiQ9zLg+jEVAkCg811PgzwxP4g1eC0hUiM4eWTHCqDz+NWoJAnKbtc6P4R+BB4 ouDqniEyLpNqRnnm4b+79PevYvEGqJsSCwtvJt4htRVGAAOldLo+j2dhpMVqmyC1gT5R0z71 zOt6lbxMUt0Vh64rKtO0bNnqYemoOyOTubmRmO5s4pkdwSMMAD6ipLuVZ2JZQPdRiq4jb+Ah h9a4L9jsv3LKzyrypDDrxTlvX43hh7mqXKsdwIp3nlUxg0cwFmadGz8uTVOeQbgYzgeh5FK9 xER8yEe4ppEb9CCPalJ9y0QNcqxwQMjqCaY2xjj7p/SobuzzypP4VTladQDjdj+VZ8vYtPuX 5bRD0HPfFZV/pUchBKAMOhA5q/aXm8ZB+oNTvMmQOKSbQ3C5y2yW3Yq53J64qSNu5YHPStye BJBnAJ6VkTQCB9uOOxq1qZTvEA27gj2qZcoBgA46UyMYHOSetSq2ecd8UzO5ITuG6mAHJNKh Icj8aSR+cng0E9BkuFGc5+tQPJt54PtSyOQazNRutihUO6RjtVR1Jp2uTe2pJbxNqepCL/lk nzSf0FelrEIUsoFAHlxDI9M1znhXSzbxJERulchpW9/Suodk+0zXM8ixQA7VLdTj0oa1Jv1Z tWQAQADmtAEVz1tr+mggK8rgcZ21o22s6fMeJXX03LQkQzSwDzTttJCyTKGikRwf7pqUAjim SRGH6VmalZhNsigKjHDH3rbXB4NMmhWaN42ztYYpiMRXVUCL0FVpSM+rVHcF4pTbgHepwatW sB4L4zRYYttbksGf0q8ihADihBgUFwRyeaBpD5uSrAcinbx19RUDvwMGhMsaLAfPGqvBEIki VV/0Yg4GMnNYt20MsMeMBwOtV72782RSeoXbVKR817M6iex462Jw5XkED6UhuH6E/jVYORU0 MXmuMdO+axvroO9zQ0y3lvZ40iUu7NhVHVj6V9OfDrw+nhzQ4zdhReTDfMcdD2H4Vw3wX8HC KFNc1KLC7c20bjqf7xrute1QqCiMR2xWdWpyo9HC0dLsl8R62zZijkJTODiuRluSxIPWoZp2 dvmY81FnHXivNnJyd2emkoqyJPMBUgjrSBsD5Saj3Ag45pQdxxmpGTfaHC7WwR6GmGVD0+U/ pUTA5wetMIGB607hZEzKr55x64qpIjxtlentSOGUnaafHMX4kGMe1AX7hBdgnZIMH1onXHzc YqJ4kPzY49qfASd0THOOn0pFGHfTCDUAqnAdc057xdypkbj79qp+KbUSPExGCpOCOorHhtZI 5TJEzEjrk5yK1UE1cj2tmdlZzqRtYjn1pt5GGHrWJaXjB/mBXHUHtWrBdrJjfgH1NZ25Wb6T WhCPkAHORS559T3q3KqyKTkcelQqoU8DPFNanLUi4sbklcL+dMlbZy3DdafM6RR/O2361yes a+gYx253kcZHSqjFvYzlJRWpoajqMcKNvI56Uvg6yl1bU/tky/uYThFPc+tcpbpdajfRwgEy SEKDjO2vavDejJZ2UMK8hRyR3q5JRRjzOWpq6HBHBA8sikhAWY1j3iXGqXIUDA6DHRRXVz22 LNbeMgFjlzjoB2ogto4VwgAx1qUKTOfi0doEHA49qjnjMXGDn1rqGUYx2qjfRoykMg/wqkyd jmhdyQPmORkbOeDitbTvFd3E4S5UTp78NVSaxQ5ODnPFQHTzjK09GNSO80zWLPUABFJsk/uP wa1FHr1ryz7NNCQ6g5B4INdHofiKSFlgv8unZz1H1qeVj0Zv6paqZknC/MRtaq68fhWpdMkl mXUgrjIIrGaT5sUgLBf5ahZs1GWJPFSIM80WGOjXe1Wo48c+1JAntUo4PNAHx65yRUZNByc0 g+avSPGFHJr0/wCEfgxtbu/tl4n/ABLYSCW/vn+79K5TwR4Yu/EWqRwQwsYM4kk/hQe5r6Xs bWz0LSIbGxURRRLgD+8e5NE3yLzOrD0XJ3ZY1K9SC28qFVjjQbQq8YA9K4fUboyOT+uavape B2xlup+lYkvOccntXnVZ8x7EVyoaCSBn6U4kjnIOO2ag3hCNx+WlluYY2C7wr9RznNY3NI6k c77QJEPHcVFJdiHZKCSpODTZpQXJB4PBrOupo0hkRjhT+lVa43JI3jMrYI78/WlWQEdK5aw1 mArsklQOvGGYZq2NXiVhsZZGPQKcmhxDnTN1zjp0pjsPIcj0qtbXTTR/vFCgjI55qO5bZC2D wfShCZbX/VqwPaobNzJcyse2BUpx5CnOOKp2LbLiYeuMUt0PVuwmuQhoyT3GfpWCJYYlBlkV F9ScV0eonMYye+KhuPD0Wo2yq0WRjr7+tawehjV0MRZIJRuhKufXIxU8Sujfd+lUrz4f3kYL 2kxUZ4Df41zl/o2tWWfNSZgD1VyavlTOdV5Q6HatdxxL++mji+rCsu+8UWsIK22Zn6HHA/Ou HuEnVszrIpP98EZ/Ouh8NeFrvWCGWN0gJwXK8/hR7NLch4iU2UL7VLzVJAGZgDwscff/ABrq vCfw8vdSCz6hm0tzzgj52/wrtND8NWOkFDHAplxy7DLGushkuPLUQRhQO79T+FNytpEizesm YEHhe0066t4LKEAKu93PJb6muij/AHXyQANIPyWpDDLJJumdRkYOwdamjRUHyjHrxWbfc0vp oJEpC5c5Y9T60pGCfejHQ9qa5wPepFa4yRsdOtU5CCTnk1PMT2NVnxtJNO47EEn65pnVu5p7 NliM0Rx7iKdwFUDuKDapJ1XB9asxQjPJwKkKdNpo5gsWdGlZdPlgkJ3KcDPpTim5+KZF8o46 +tTqOc0hgE79D6VMi8ikQVKBigZLGPlPpSHhvekXOOvNMYkUAfICoZGCqCWPQDqa9k+G3wik vY49R8SxtHbkBo7XOGceregrs/hv8MbTw95Vzqkcd1rB5weUh+nqfevQdTu1tYlT+LvXtcqg jyoU3J2Zki0sNJiFvptvDbxKMFY1Arn9VvMNjNXNQvsAliMk4zXK3k+5zzzntXmV6jkz16MO RIZNIeRmqjuwziiRz1wKiZs8nArlSNb6kV0WGG9etU7iMToAwOR39KtSMevGCKgyScgGnYuO xg6jPdWETsrCWMc4PWuT1HWru8UoSEQ9lrq/FMmywfn5mGBXEW8W9ueT0rogla7OWs5N8qKo Dsx5Oa7Xw0g+zoRgMRye+azLSwQAfL81bOmxvAwaPlc8rU1Ndi6NF09WdLbJhQe/pRdsAqrn kkAUkMoKZ5U+hquZRNeAgAonA+tY2Z0vU1s/u+OnSqVs2LuY44yBUskoRCxIAAyaz7CRm3s/ 8RzStoO+po3DbkOCK7SF9NtLKPz7uIMFBKqdx6egrhI90xCjIGelbFtZReWWZVJ9a0hoYVnq XL3Vbef93ZwyS5/iY7R+VEazJD5i20ERP8WMk/nUtjbr95gAK0JtkkHlqRkEEU3oYNtlNLUX cG26tobhFIJDqDite3jDLsjRI4x/CBjFNsoykTBvlB9Kmg+SXAwd3bNZpu1mEoLcbCsMXCgb upJqwHHGD+NU7jAmbnBzQhZcYJxVGexf3cf19KaWz1qsrk53YIqQHk5pFIcx6dKjZsH60Enr ntUbvx2pILjZWXBqrI2QevWnTScc1CDvbpkUxsfChY+1XUjHXnio4VxyAKn3Dj1oYh3FNySa jLdRTlOSOaCixEM98irCjmooR1NTLgDrTsBKg5z0FP7VGM561IvH0pAOFNftjrTgfpUcrYB6 0Bc//9k= --------------010307060308070300060006-- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From zunigaendore2792322@gmail.com Thu May 15 15:55:33 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AAD163A67A3; Thu, 15 May 2008 15:55:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -68.613 X-Spam-Level: X-Spam-Status: No, score=-68.613 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_IPADDR=2.426, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f4BGpg-0-Hc2; Thu, 15 May 2008 15:55:33 -0700 (PDT) Received: from pc-153-102-214-201.cm.vtr.net (pc-153-102-214-201.cm.vtr.net [201.214.102.153]) by core3.amsl.com (Postfix) with SMTP id C09A43A6821; Thu, 15 May 2008 15:55:20 -0700 (PDT) X-Originating-IP: 250.149.88.26 by smtp.201.214.102.153; Thu, 15 May 2008 18:55:17 -0500 Message-ID: From: "Judith Vaughan" Reply-To: "Judith Vaughan" To: discuss-bounces@ietf.org Subject: New replica watches delivered fast Date: Thu, 15 May 2008 18:55:17 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Since 1884 Bvlgari watches have drawn inspiration from the timeless beauty of Greek and Roman art. The time pieces that they produce are as much works of art, as a way to tell time, and now you can possess one of these splendid time pieces for a very affordable price, at Prestige Replicas. http://hugyrahy04026.blogspot.com/ This store has the finest collection of Bvlgari replica watches, and you will be astounded at the difference in price as well as amazed at the quality of their timepieces. Prestige Replicas works hard to make sure that your purchase is shipped as fast as your order is processed, and also that your private information is protected. And with the new redesign of the Prestige Replicas website, we are offering 15% off on your purchase of watches! http://hugyrahy04026.blogspot.com/ From readcombretaceae5556458@yahoo.com Fri May 16 00:50:36 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 54DB428C161; Fri, 16 May 2008 00:50:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -69.282 X-Spam-Level: X-Spam-Status: No, score=-69.282 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_MODEMCABLE=0.768, HELO_EQ_MX=0.535, HOST_EQ_MODEMCABLE=1.368, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LazqX-mmaWYO; Fri, 16 May 2008 00:50:34 -0700 (PDT) Received: from 201-167-12-240-cable.cybercable.net.mx (201-167-12-240-cable.cybercable.net.mx [201.167.12.240]) by core3.amsl.com (Postfix) with SMTP id 0697728C158; Fri, 16 May 2008 00:50:23 -0700 (PDT) X-Originating-IP: 168.200.247.80 by smtp.201.167.12.240; Fri, 16 May 2008 03:50:20 -0500 Message-ID: From: "Elma Cantrell" Reply-To: "Elma Cantrell" To: discuss-bounces@ietf.org Subject: Classy, new and inexpensive watches Date: Fri, 16 May 2008 03:50:20 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is now bigger and better than ever before! I'm sure you're familiar with this popular replica store, so I'm glad to announce that Prestige Replicas has been completely redesigned and now offers not only the highest quality replica watches but also handbags and jewelry! In addition, they're running a 15% special these days when you buy two watches! There's never been a better time to buy a replica watch, especially a Tag Heuer! With prices as low as $200, and the store unmatched privacy assurance guarantee, I'm sure you won't want to wait to get your superior quality Tag Heuer replica! http://bapehuge02305.blogspot.com/ From ca59bf56@spruengli.ch Fri May 16 13:40:54 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C0C8B28C2B2; Fri, 16 May 2008 13:40:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -77.176 X-Spam-Level: X-Spam-Status: No, score=-77.176 tagged_above=-999 required=5 tests=[BAYES_60=1, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7bAaAaA6NxSQ; Fri, 16 May 2008 13:40:54 -0700 (PDT) Received: from 104-110-235-201.fibertel.com.ar (104-110-235-201.fibertel.com.ar [201.235.110.104]) by core3.amsl.com (Postfix) with SMTP id 2CECA28C2B0; Fri, 16 May 2008 13:40:28 -0700 (PDT) X-Originating-IP: 165.164.183.189 by smtp.201.235.110.104; Fri, 16 May 2008 16:40:25 -0500 Message-ID: From: "Harold Holt" Reply-To: "Harold Holt" To: discuss-bounces@ietf.org Subject: Inexpensive IWC watches Date: Fri, 16 May 2008 16:40:25 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit The new Porsche Design watches originated from the novel Titanium Chronograph from the 1970's, an absolutely unique creation due to the perfection of its workmanship. Based on its design, the Porsche Design Company developed an appealing, stylish, sporty and highly accurate watch. Unfortunately, these timepieces come with a high price tag. http://sosepyfy14556.blogspot.com/ That's why a clever group of European manufacturers decided to offer the same exact functionality and style at greatly reduced prices: the Porsche Design replica watches. These replicas are so similar to the brand name pieces that it is practically impossible to tell them apart, other than by their price. They look the same, they function the same and they definitely don't have the same prices :) How would you like to browse through an amazing collection of these watches and marvel yourself with their low prices? Visit Prestige Replicas and see for yourself why sometimes replicas are so much better than the originals! http://sosepyfy14556.blogspot.com/ From cabins@moosewallow.com Sat May 17 01:37:25 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E5DB63A6A05; Sat, 17 May 2008 01:37:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -76.058 X-Spam-Level: X-Spam-Status: No, score=-76.058 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FB_QUALITY_REPLICA=10.357, FH_RELAY_NODNS=1.451, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n8euIxRVQx7C; Sat, 17 May 2008 01:37:24 -0700 (PDT) Received: from corporat200-069121081.sta.etb.net.co (unknown [200.69.121.81]) by core3.amsl.com (Postfix) with SMTP id 7E3A03A69ED; Sat, 17 May 2008 01:37:13 -0700 (PDT) X-Originating-IP: 10.192.46.110 by smtp.200.69.121.81; Sat, 17 May 2008 04:37:09 -0500 Message-ID: From: "Ronda Ybarra" Reply-To: "Ronda Ybarra" To: discuss-bounces@ietf.org Subject: Spring quality watches offer Date: Sat, 17 May 2008 04:37:09 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is now bigger and better than ever before! I'm sure you're familiar with this popular replica store, so I'm glad to announce that Prestige Replicas has been completely redesigned and now offers not only the highest quality replica watches but also handbags and jewelry! In addition, they're running a 15% special these days when you buy two watches! There's never been a better time to buy a replica watch, especially a Tag Heuer! With prices as low as $200, and the store unmatched privacy assurance guarantee, I'm sure you won't want to wait to get your superior quality Tag Heuer replica! http://gukitine48330.blogspot.com/ From cacosta@bawtsa.com Sun May 18 08:10:29 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D7AF63A6A4E; Sun, 18 May 2008 08:10:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -86.649 X-Spam-Level: X-Spam-Status: No, score=-86.649 tagged_above=-999 required=5 tests=[FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_PBL=0.509, RDNS_NONE=0.1, SARE_RECV_SPEEDY_AR=0.808, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.617, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2SGrzSbYpSzE; Sun, 18 May 2008 08:10:27 -0700 (PDT) Received: from 190-50-118-62.speedy.com.ar (unknown [190.50.118.62]) by core3.amsl.com (Postfix) with SMTP id 45DD03A67A9; Sun, 18 May 2008 08:10:04 -0700 (PDT) X-Originating-IP: 86.152.210.70 by smtp.190.50.118.62; Sun, 18 May 2008 11:10:04 -0500 Message-ID: From: "Imogene Macdonald" Reply-To: "Imogene Macdonald" To: discuss-bounces@ietf.org Subject: Why get an original watch? Date: Sun, 18 May 2008 11:10:04 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Prestige Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://xatuvutu10673.blogspot.com/ As you are probably aware of, Prestige Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Prestige Replicas today! http://xatuvutu10673.blogspot.com/ From BilliecoercibleLord@countercurrents.org Sun May 18 12:15:06 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60E6D28C56D; Sun, 18 May 2008 12:15:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.679 X-Spam-Level: *** X-Spam-Status: No, score=3.679 tagged_above=-999 required=5 tests=[HOST_EQ_MODEMCABLE=1.368, HOST_MISMATCH_COM=0.311, HS_BOBAX_MID_2=1, RDNS_DYNAMIC=0.1, SARE_DIPLOMA2=0.9] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zXRAKb2WGKaa; Sun, 18 May 2008 12:15:05 -0700 (PDT) Received: from bluedc64c2e106.belkin (cpc1-clyd2-0-0-cust324.renf.cable.ntl.com [86.15.1.69]) by core3.amsl.com (Postfix) with SMTP id 8C02528C555; Sun, 18 May 2008 12:15:03 -0700 (PDT) Received: from 13263112337054451.12904114384858870.17862099431804105.16905636296407755 (HELO localhost.localdomain) (12035435181419746.13998392716071398.18634513653183719.10574199582984547) by 17235338375752390.18767213402174185.18688066647793337.11348647176063730 with SMTP; Sun, 18 May 2008 20:14:30 +0000 Date: Sun, 18 May 2008 20:14:30 +0000 Message-Id: <1IX484EJXVWDA119@countercurrents.org> X-Mailer: MIME::Lite 3.01 (F2.72; A1.62; B3.01; Q3.01) X-Header-CompanyDBUserName: hpccm X-Header-MasterId: 100368 X-Header-Versions: Hewlett-Packard.7t6bn5nd5.fk@us.newsgram.hp.com X-FID: 06E71DBC-1018-23AF-B3E7-75CDEA32DCB7 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Cc: , " Subject: Fast online degree from your home or office You don't have to spend 40k on a college degree today NO time for classes? Earn your online degree fast Call.... For US: 1-309-415-3595 Outside US: +1-309-415-3595 From c.grobe@unimatic-co.de Sun May 18 22:16:54 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AD8343A6AC6; Sun, 18 May 2008 22:16:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -13.086 X-Spam-Level: X-Spam-Status: No, score=-13.086 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DIALUP=0.862, HELO_EQ_DSL=1.129, HOST_EQ_DIALUP=0.862, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yXKwzZv7oZIl; Sun, 18 May 2008 22:16:54 -0700 (PDT) Received: from r190-135-141-86.dialup.adsl.anteldata.net.uy (r190-135-141-86.dialup.adsl.anteldata.net.uy [190.135.141.86]) by core3.amsl.com (Postfix) with SMTP id B39963A6E13; Sun, 18 May 2008 22:16:29 -0700 (PDT) X-Originating-IP: 136.96.210.192 by smtp.190.135.141.86; Mon, 19 May 2008 01:16:30 -0500 Message-ID: From: "Tracy Lott" Reply-To: "Tracy Lott" To: discuss-bounces@ietf.org Subject: Why replica watches are better Date: Mon, 19 May 2008 01:16:30 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Tag Heuer watch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Prestige Replicas, the web's most comprehensive collection of brand name replica watches. In Prestige Replicas, any Tag Heuer is available for just over $200. http://gumytasu71817.shheus.com/ For those of us who have always dreamed of wearing a Tag Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Prestige Replicas. Here you will find the most prestigious replica Tag Heuers, at an unbeatable price. Come inside now... your Tag Heuer watch is waiting for you at Prestige Replicas. http://gumytasu71817.shheus.com/ From cabelmont@sanmartindelosandes.com Mon May 19 12:13:41 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6D6663A690B; Mon, 19 May 2008 12:13:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -70.423 X-Spam-Level: X-Spam-Status: No, score=-70.423 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, HOST_EQ_USERONOCOM=1.444, J_CHICKENPOX_24=0.6, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id crMMjSRzmGmu; Mon, 19 May 2008 12:13:40 -0700 (PDT) Received: from 85.137.102.80.dyn.user.ono.com (85.137.102.80.dyn.user.ono.com [85.137.102.80]) by core3.amsl.com (Postfix) with SMTP id 054F23A687D; Mon, 19 May 2008 12:12:58 -0700 (PDT) X-Originating-IP: 192.9.104.64 by smtp.85.137.102.80; Mon, 19 May 2008 15:12:59 -0500 Message-ID: From: "Nona Reyna" Reply-To: "Nona Reyna" To: discuss-bounces@ietf.org Subject: Watches for him, her and you Date: Mon, 19 May 2008 15:12:59 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Bvlgari watch is an extraordinary masterpiece that is born from the marriage of watch making and jewelry expertise. Only the most discriminating and sophisticated watch users dare put a Bv1gari on their wrists, but once the metal touches their skin, they are bound forever... How would you like to become one of the lucky few that have experienced the pleasure of sporting a Bvlgari timepiece? Now you can, and at a very reduced cost! Prestige Replicas offers a tremendous collection of Bvlgari replicas starting just a little above $200... So now there is no reason why you can't have your very own Bvlgari today! http://zicalupyfyn28.blogspot.com/ From cacf@cadillacfoundation.org Tue May 20 02:24:46 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D6A7A3A6A0A; Tue, 20 May 2008 02:24:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -22.902 X-Spam-Level: X-Spam-Status: No, score=-22.902 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_IPADDR2=4.395, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_DSBL=0.961, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_RECV_SPEEDY_AR=0.808, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0TgOtI38oQFI; Tue, 20 May 2008 02:24:45 -0700 (PDT) Received: from 190-49-221-22.speedy.com.ar (unknown [190.49.221.22]) by core3.amsl.com (Postfix) with SMTP id E78E03A6951; Tue, 20 May 2008 02:24:22 -0700 (PDT) X-Originating-IP: 14.254.218.84 by smtp.190.49.221.22; Tue, 20 May 2008 05:24:23 -0500 Message-ID: From: "Salvatore England" Reply-To: "Salvatore England" To: discuss-bounces@ietf.org Subject: Save thousands... no one will know Date: Tue, 20 May 2008 05:24:23 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Prestige Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://www.ssedkke.com/ As you are probably aware of, Prestige Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Prestige Replicas today! http://www.ssedkke.com/ From c.schneider@s-p.at Tue May 20 05:55:27 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 938EE3A685C; Tue, 20 May 2008 05:55:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.15 X-Spam-Level: X-Spam-Status: No, score=-29.15 tagged_above=-999 required=5 tests=[BAYES_95=3, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_NJABL_PROXY=1.643, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j1QMza2TfmUT; Tue, 20 May 2008 05:55:22 -0700 (PDT) Received: from 201-255-110-17.mrse.com.ar (unknown [201.255.110.17]) by core3.amsl.com (Postfix) with SMTP id CD36A3A6881; Tue, 20 May 2008 05:55:11 -0700 (PDT) X-Originating-IP: 51.20.96.128 by smtp.201.255.110.17; Tue, 20 May 2008 08:55:11 -0500 Message-ID: From: "Traci Fitch" Reply-To: "Traci Fitch" To: discuss-web-archive@ietf.org Subject: Replicas will save you thousands Date: Tue, 20 May 2008 08:55:11 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit The new Porsche Design watches originated from the novel Titanium Chronograph from the 1970's, an absolutely unique creation due to the perfection of its workmanship. Based on its design, the Porsche Design Company developed an appealing, stylish, sporty and highly accurate watch. Unfortunately, these timepieces come with a high price tag. http://www.annsidn.com/ That's why a clever group of European manufacturers decided to offer the same exact functionality and style at greatly reduced prices: the Porsche Design replica watches. These replicas are so similar to the brand name pieces that it is practically impossible to tell them apart, other than by their price. They look the same, they function the same and they definitely don't have the same prices :) How would you like to browse through an amazing collection of these watches and marvel yourself with their low prices? Visit Prestige Replicas and see for yourself why sometimes replicas are so much better than the originals! http://www.annsidn.com/ From cac@chinacac.net Tue May 20 20:59:58 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 59DD53A7026; Tue, 20 May 2008 20:59:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.125 X-Spam-Level: X-Spam-Status: No, score=-7.125 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_IPADDR=2.426, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 82zxc2tCIhIL; Tue, 20 May 2008 20:59:55 -0700 (PDT) Received: from client-201.240.138.230.speedy.net.pe (unknown [201.240.138.230]) by core3.amsl.com (Postfix) with SMTP id D0AA928EA42; Tue, 20 May 2008 15:08:06 -0700 (PDT) X-Originating-IP: 176.124.59.36 by smtp.201.240.138.230; Tue, 20 May 2008 18:08:09 -0500 Message-ID: From: "Kim White" Reply-To: "Kim White" To: discuss-bounces@ietf.org Subject: April promo on watches Date: Tue, 20 May 2008 18:08:09 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Tag Heuer watch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Prestige Replicas, the web's most comprehensive collection of brand name replica watches. In Prestige Replicas, any Tag Heuer is available for just over $200. http://www.oidoido.com/ For those of us who have always dreamed of wearing a Tag Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Prestige Replicas. Here you will find the most prestigious replica Tag Heuers, at an unbeatable price. Come inside now... your Tag Heuer watch is waiting for you at Prestige Replicas. http://www.oidoido.com/ From owner-namedroppers@ops.ietf.org Tue May 20 21:06:31 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7B6083A6F15; Tue, 20 May 2008 21:06:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.195 X-Spam-Level: X-Spam-Status: No, score=-0.195 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SvWMczOPVNIm; Tue, 20 May 2008 21:06:30 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 4C5E828CE70; Tue, 20 May 2008 08:03:18 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JyTBr-000AiX-Tw for namedroppers-data@psg.com; Tue, 20 May 2008 14:51:47 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JyTBh-000AgR-6J for namedroppers@ops.ietf.org; Tue, 20 May 2008 14:51:42 +0000 Received: from Puki.ogud.com (ns.md.ogud.com [10.20.30.6]) by ogud.com (8.13.1/8.13.1) with ESMTP id m4KEpPA7057381 for ; Tue, 20 May 2008 10:51:31 -0400 (EDT) (envelope-from ogud@ogud.com) Message-Id: <200805201451.m4KEpPA7057381@ogud.com> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Tue, 20 May 2008 10:49:39 -0400 To: namedroppers@ops.ietf.org From: =?iso-8859-1?Q?=D3lafur?= =?iso-8859-1?Q?_Gu=F0mundsson?= /DNSEXT chair Subject: Meeting at IETF-71 in Dublin Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Scanned-By: MIMEDefang 2.63 on 10.20.30.6 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion DNSEXT will meet, please send in agenda requests. Olafur & Andrew -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Wed May 21 03:20:54 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8D3683A6971; Wed, 21 May 2008 03:20:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9+R03IjmTUvk; Wed, 21 May 2008 03:20:49 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 0E5933A6898; Wed, 21 May 2008 03:20:49 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JylHE-000HZp-7a for namedroppers-data@psg.com; Wed, 21 May 2008 10:10:32 +0000 Received: from [2001:41d0:1:6d55:211:5bff:fe98:d51e] (helo=givry.fdupont.fr) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JylGy-000HXL-9f for namedroppers@ops.ietf.org; Wed, 21 May 2008 10:10:26 +0000 Received: from givry.fdupont.fr (localhost [127.0.0.1]) by givry.fdupont.fr (8.13.8/8.13.8) with ESMTP id m4LAA9j6084978; Wed, 21 May 2008 12:10:10 +0200 (CEST) (envelope-from dupont@givry.fdupont.fr) Message-Id: <200805211010.m4LAA9j6084978@givry.fdupont.fr> From: Francis Dupont To: =?iso-8859-1?Q?=D3lafur?= =?iso-8859-1?Q?_Gu=F0mundsson?= /DNSEXT chair cc: namedroppers@ops.ietf.org Subject: Re: Meeting at IETF-71 in Dublin In-reply-to: Your message of Tue, 20 May 2008 10:49:39 EDT. <200805201451.m4KEpPA7057381@ogud.com> Date: Wed, 21 May 2008 12:10:09 +0200 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion In your previous mail you wrote: DNSEXT will meet, please send in agenda requests. => about draft-dupont-dnsext-tsig-md5-deprecated-00.txt: - no presentation if you don't require one (there should be nothing to say to people who read it, and only "please read it" to others :-) - WG item question, next steps, etc Thanks Francis.Dupont@fdupont.fr PS: I have an improved version (better wording, no new technical thing). I can wait for an answer to the WG item question or publish it. BTW we have still a lot of times (more than one month). PPS: wellcome to the new co-chair! -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From c.graef@ufar.de Wed May 21 06:18:07 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EB6FF3A6A18; Wed, 21 May 2008 06:18:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.546 X-Spam-Level: X-Spam-Status: No, score=-5.546 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a-UNacS+nsfH; Wed, 21 May 2008 06:18:06 -0700 (PDT) Received: from 111-108-22-190.adsl.tie.cl (111-108-22-190.adsl.tie.cl [190.22.108.111]) by core3.amsl.com (Postfix) with SMTP id 148F728C1D9; Wed, 21 May 2008 06:17:57 -0700 (PDT) X-Originating-IP: 120.202.160.196 by smtp.190.22.108.111; Wed, 21 May 2008 09:18:01 -0500 Message-ID: From: "Shauna Pereira" Reply-To: "Shauna Pereira" To: discuss-bounces@ietf.org Subject: You can save 80% Date: Wed, 21 May 2008 09:18:01 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit The new Porsche Design watches originated from the novel Titanium Chronograph from the 1970's, an absolutely unique creation due to the perfection of its workmanship. Based on its design, the Porsche Design Company developed an appealing, stylish, sporty and highly accurate watch. Unfortunately, these timepieces come with a high price tag. http://www.adieks.com/ That's why a clever group of European manufacturers decided to offer the same exact functionality and style at greatly reduced prices: the Porsche Design replica watches. These replicas are so similar to the brand name pieces that it is practically impossible to tell them apart, other than by their price. They look the same, they function the same and they definitely don't have the same prices :) How would you like to browse through an amazing collection of these watches and marvel yourself with their low prices? Visit Prestige Replicas and see for yourself why sometimes replicas are so much better than the originals! http://www.adieks.com/ From fedex_008@live.com Thu May 22 02:44:08 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 70FD428C0EE; Thu, 22 May 2008 02:44:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -94.579 X-Spam-Level: X-Spam-Status: No, score=-94.579 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, BAYES_50=0.001, FRT_BELOW2=2.154, J_CHICKENPOX_61=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PFReu05kQ4QW; Thu, 22 May 2008 02:44:07 -0700 (PDT) Received: from sa8.bezeqint.net (sa8.bezeqint.net [192.115.104.22]) by core3.amsl.com (Postfix) with ESMTP id 4CF263A6941; Thu, 22 May 2008 02:44:07 -0700 (PDT) Received: from localhost (unknown [127.0.0.1]) by sa8.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id ED45633C53; Thu, 22 May 2008 12:42:10 +0300 (IDT) Received: from sa8.bezeqint.net ([127.0.0.1]) by localhost (sa8.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16121-10; Thu, 22 May 2008 12:42:09 +0300 (IDT) Received: from localhost (webmail1.actcom.net.il [192.114.47.22]) by sa8.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP; Thu, 22 May 2008 12:42:08 +0300 (IDT) Received: from 196-220-11-210.netcomng.com (196-220-11-210.netcomng.com [196.220.11.210]) by webmail.actcom.net.il (IMP) with HTTP for ; Thu, 22 May 2008 12:44:08 +0300 Message-ID: <1211449448.48354068eb51d@webmail.actcom.net.il> Date: Thu, 22 May 2008 12:44:08 +0300 From: "(FEDEX COURIER SERVICE)" Reply-to: fedex_courierservice008@live.com Subject: ATTENTION CUSTOMER:(PARCEL DELIVERY)Contact Person: Mr. Donald White MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 196.220.11.210 X-Organization: ACTCOM - Internet Services in Israel 1-800-300-123 info@actcom.net.il X-Virus-Scanned: amavisd-new at bezeqint.net To: undisclosed-recipients:; Greetings, I am Mrs Mary Powell,a staff of the FEDEX COURIER SERVICE here in west Africa,.We have been waiting for you since to contact us for your Confirmable Bank Draft of $800.000.00 United States Dollars that was deposited with our company, but we did not hear from you since that time.I will be traveling out from the country for two Months Course and I will not come back till end of April. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date. For your information, the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country has already been paid for.The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($365.00 US) Dollars only being Security Keeping Fee of the Courier Company so far.Again, don't be deceived by anybody to pay any other money except $365.00US Dollars. You have to contact the FEDEX COURIER SERVICE now for the delivery of your Draft with this information bellow; Contact Person: Mr. Donald White Email Address: fedex_courierservice008@live.com Telephone :+234-7032072725 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address.Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay of extra demurrage and remember to pay them their Security Keeping fee of $365.00 US Dollars for their immediate action. You should also let me know through email as Soon as you receive your Draft. Yours Faithfully, Mary Powell From fedex_008@live.com Thu May 22 03:26:39 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 38F7E28C154; Thu, 22 May 2008 03:26:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -94.579 X-Spam-Level: X-Spam-Status: No, score=-94.579 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, BAYES_50=0.001, FRT_BELOW2=2.154, J_CHICKENPOX_61=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KKe0iTaL0y8N; Thu, 22 May 2008 03:26:38 -0700 (PDT) Received: from sa2.bezeqint.net (sa2.bezeqint.net [192.115.104.16]) by core3.amsl.com (Postfix) with ESMTP id CF65628C0DD; Thu, 22 May 2008 03:26:00 -0700 (PDT) Received: from localhost (sa2 [127.0.0.1]) by sa2.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id 220CC16C101; Thu, 22 May 2008 12:32:58 +0300 (IDT) X-Virus-Scanned: amavisd-new at bezeqint.net Received: from sa2.bezeqint.net ([127.0.0.1]) by localhost (sa2.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yErzrQR561c4; Thu, 22 May 2008 12:32:57 +0300 (IDT) Received: from localhost (webmail1.actcom.net.il [192.114.47.22]) by sa2.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP; Thu, 22 May 2008 12:32:56 +0300 (IDT) Received: from 196-220-11-210.netcomng.com (196-220-11-210.netcomng.com [196.220.11.210]) by webmail.actcom.net.il (IMP) with HTTP for ; Thu, 22 May 2008 12:48:52 +0300 Message-ID: <1211449732.48354184cbafc@webmail.actcom.net.il> Date: Thu, 22 May 2008 12:48:52 +0300 From: "(FEDEX COURIER SERVICE)" Reply-to: fedex_courierservice008@live.com Subject: ATTENTION CUSTOMER:(PARCEL DELIVERY)Contact Person: Mr. Donald White MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 196.220.11.210 X-Organization: ACTCOM - Internet Services in Israel 1-800-300-123 info@actcom.net.il To: undisclosed-recipients:; Greetings, I am Mrs Mary Powell,a staff of the FEDEX COURIER SERVICE here in west Africa,.We have been waiting for you since to contact us for your Confirmable Bank Draft of $800.000.00 United States Dollars that was deposited with our company, but we did not hear from you since that time.I will be traveling out from the country for two Months Course and I will not come back till end of April. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date. For your information, the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country has already been paid for.The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($365.00 US) Dollars only being Security Keeping Fee of the Courier Company so far.Again, don't be deceived by anybody to pay any other money except $365.00US Dollars. You have to contact the FEDEX COURIER SERVICE now for the delivery of your Draft with this information bellow; Contact Person: Mr. Donald White Email Address: fedex_courierservice008@live.com Telephone :+234-7032072725 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address.Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay of extra demurrage and remember to pay them their Security Keeping fee of $365.00 US Dollars for their immediate action. You should also let me know through email as Soon as you receive your Draft. Yours Faithfully, Mary Powell From fedex_008@live.com Thu May 22 03:45:49 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 898663A6831; Thu, 22 May 2008 03:45:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -94.429 X-Spam-Level: X-Spam-Status: No, score=-94.429 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, AWL=-0.150, BAYES_50=0.001, FRT_BELOW2=2.154, J_CHICKENPOX_61=0.6, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cbJIlvi4cH3J; Thu, 22 May 2008 03:45:48 -0700 (PDT) Received: from sa15.bezeqint.net (sa15.bezeqint.net [192.115.104.30]) by core3.amsl.com (Postfix) with ESMTP id 377AF3A6A4B; Thu, 22 May 2008 03:45:48 -0700 (PDT) Received: from localhost (localhost.localdomain [127.0.0.1]) by sa15.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id 6FD6C283ED; Thu, 22 May 2008 13:48:47 +0300 (IDT) X-Virus-Scanned: amavisd-new at bezeqint.net Received: from sa15.bezeqint.net ([127.0.0.1]) by localhost (sa15.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h3VvZIBoLy2z; Thu, 22 May 2008 13:48:41 +0300 (IDT) Received: from localhost (webmail1.actcom.net.il [192.114.47.22]) by sa15.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP; Thu, 22 May 2008 13:48:40 +0300 (IDT) Received: from 196-220-11-210.netcomng.com (196-220-11-210.netcomng.com [196.220.11.210]) by webmail.actcom.net.il (IMP) with HTTP for ; Thu, 22 May 2008 13:45:43 +0300 Message-ID: <1211453143.48354ed7c0c22@webmail.actcom.net.il> Date: Thu, 22 May 2008 13:45:43 +0300 From: "(FEDEX COURIER SERVICE)" Reply-to: fedex_courierservice008@live.com Subject: ATTENTION CUSTOMER:(PARCEL DELIVERY)Contact Person: Mr. Donald =?iso-8859-1?b?V2hpdGX+?= MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 196.220.11.210 X-Organization: ACTCOM - Internet Services in Israel 1-800-300-123 info@actcom.net.il To: undisclosed-recipients:; Greetings, I am Mrs Mary Powell,a staff of the FEDEX COURIER SERVICE here in west Africa,.We have been waiting for you since to contact us for your Confirmable Bank Draft of $800.000.00 United States Dollars that was deposited with our company, but we did not hear from you since that time.I will be traveling out from the country for two Months Course and I will not come back till end of April. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date. For your information, the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country has already been paid for.The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($365.00 US) Dollars only being Security Keeping Fee of the Courier Company so far.Again, don't be deceived by anybody to pay any other money except $365.00US Dollars. You have to contact the FEDEX COURIER SERVICE now for the delivery of your Draft with this information bellow; Contact Person: Mr. Donald White Email Address: fedex_courierservice008@live.com Telephone :+234-7032072725 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address.Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay of extra demurrage and remember to pay them their Security Keeping fee of $365.00 US Dollars for their immediate action. You should also let me know through email as Soon as you receive your Draft. Yours Faithfully, Mary Powell From fedex_008@live.com Thu May 22 03:54:43 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8E3DC3A6941 for ; Thu, 22 May 2008 03:54:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -94.429 X-Spam-Level: X-Spam-Status: No, score=-94.429 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, AWL=-0.150, BAYES_50=0.001, FRT_BELOW2=2.154, J_CHICKENPOX_61=0.6, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 46kbzuyJ2ypv for ; Thu, 22 May 2008 03:54:43 -0700 (PDT) Received: from sa5.bezeqint.net (sa5.bezeqint.net [192.115.104.19]) by core3.amsl.com (Postfix) with ESMTP id E5FC928C23D for ; Thu, 22 May 2008 03:54:42 -0700 (PDT) Received: from localhost (sa5 [127.0.0.1]) by sa5.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id 218B930140; Thu, 22 May 2008 13:42:45 +0300 (IDT) X-Virus-Scanned: amavisd-new at bezeqint.net Received: from sa5.bezeqint.net ([127.0.0.1]) by localhost (sa5.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZDx74bB6EWIj; Thu, 22 May 2008 13:42:43 +0300 (IDT) Received: from localhost (webmail1.actcom.net.il [192.114.47.22]) by sa5.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP; Thu, 22 May 2008 13:42:43 +0300 (IDT) Received: from 196-220-11-210.netcomng.com (196-220-11-210.netcomng.com [196.220.11.210]) by webmail.actcom.net.il (IMP) with HTTP for ; Thu, 22 May 2008 13:54:44 +0300 Message-ID: <1211453684.483550f4e3214@webmail.actcom.net.il> Date: Thu, 22 May 2008 13:54:44 +0300 From: "(FEDEX COURIER SERVICE)" Reply-to: fedex_courierservice008@live.com Subject: ATTENTION CUSTOMER:(PARCEL DELIVERY)Contact Person: Mr. Donald =?iso-8859-1?b?V2hpdGX+?= MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 196.220.11.210 X-Organization: ACTCOM - Internet Services in Israel 1-800-300-123 info@actcom.net.il To: undisclosed-recipients:; Greetings, I am Mrs Mary Powell,a staff of the FEDEX COURIER SERVICE here in west Africa,.We have been waiting for you since to contact us for your Confirmable Bank Draft of $800.000.00 United States Dollars that was deposited with our company, but we did not hear from you since that time.I will be traveling out from the country for two Months Course and I will not come back till end of April. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date. For your information, the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country has already been paid for.The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($365.00 US) Dollars only being Security Keeping Fee of the Courier Company so far.Again, don't be deceived by anybody to pay any other money except $365.00US Dollars. You have to contact the FEDEX COURIER SERVICE now for the delivery of your Draft with this information bellow; Contact Person: Mr. Donald White Email Address: fedex_courierservice008@live.com Telephone :+234-7032072725 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address.Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay of extra demurrage and remember to pay them their Security Keeping fee of $365.00 US Dollars for their immediate action. You should also let me know through email as Soon as you receive your Draft. Yours Faithfully, Mary Powell From fedex_008@live.com Thu May 22 04:32:28 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0AA1B28C12E; Thu, 22 May 2008 04:32:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -94.379 X-Spam-Level: X-Spam-Status: No, score=-94.379 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, AWL=-0.100, BAYES_50=0.001, FRT_BELOW2=2.154, J_CHICKENPOX_61=0.6, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 43BXvTB1kEkZ; Thu, 22 May 2008 04:32:27 -0700 (PDT) Received: from sa14.bezeqint.net (sa14.bezeqint.net [192.115.104.29]) by core3.amsl.com (Postfix) with ESMTP id 9310E28C0DE; Thu, 22 May 2008 04:32:26 -0700 (PDT) Received: from localhost (localhost.localdomain [127.0.0.1]) by sa14.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id 0BEE4283D4; Thu, 22 May 2008 13:56:21 +0300 (IDT) X-Virus-Scanned: amavisd-new at bezeqint.net Received: from sa14.bezeqint.net ([127.0.0.1]) by localhost (sa14.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kpmdiGjqZQM6; Thu, 22 May 2008 13:56:20 +0300 (IDT) Received: from localhost (webmail1.actcom.net.il [192.114.47.22]) by sa14.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP; Thu, 22 May 2008 13:56:19 +0300 (IDT) Received: from 196-220-11-210.netcomng.com (196-220-11-210.netcomng.com [196.220.11.210]) by webmail.actcom.net.il (IMP) with HTTP for ; Thu, 22 May 2008 13:53:39 +0300 Message-ID: <1211453619.483550b39c4e9@webmail.actcom.net.il> Date: Thu, 22 May 2008 13:53:39 +0300 From: "(FEDEX COURIER SERVICE)" Reply-to: fedex_courierservice008@live.com Subject: ATTENTION CUSTOMER:(PARCEL DELIVERY)Contact Person: Mr. Donald =?iso-8859-1?b?V2hpdGX+?= MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 196.220.11.210 X-Organization: ACTCOM - Internet Services in Israel 1-800-300-123 info@actcom.net.il To: undisclosed-recipients:; Greetings, I am Mrs Mary Powell,a staff of the FEDEX COURIER SERVICE here in west Africa,.We have been waiting for you since to contact us for your Confirmable Bank Draft of $800.000.00 United States Dollars that was deposited with our company, but we did not hear from you since that time.I will be traveling out from the country for two Months Course and I will not come back till end of April. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date. For your information, the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country has already been paid for.The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($365.00 US) Dollars only being Security Keeping Fee of the Courier Company so far.Again, don't be deceived by anybody to pay any other money except $365.00US Dollars. You have to contact the FEDEX COURIER SERVICE now for the delivery of your Draft with this information bellow; Contact Person: Mr. Donald White Email Address: fedex_courierservice008@live.com Telephone :+234-7032072725 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address.Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay of extra demurrage and remember to pay them their Security Keeping fee of $365.00 US Dollars for their immediate action. You should also let me know through email as Soon as you receive your Draft. Yours Faithfully, Mary Powell From fedex_008@live.com Thu May 22 04:32:46 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 666AB28C0DE for ; Thu, 22 May 2008 04:32:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -94.379 X-Spam-Level: X-Spam-Status: No, score=-94.379 tagged_above=-999 required=5 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, AWL=-0.100, BAYES_50=0.001, FRT_BELOW2=2.154, J_CHICKENPOX_61=0.6, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id reAkyWjC6SM5 for ; Thu, 22 May 2008 04:32:46 -0700 (PDT) Received: from sa2.bezeqint.net (sa2.bezeqint.net [192.115.104.16]) by core3.amsl.com (Postfix) with ESMTP id 9C1063A6864 for ; Thu, 22 May 2008 04:32:45 -0700 (PDT) Received: from localhost (sa2 [127.0.0.1]) by sa2.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id 220CC16C101; Thu, 22 May 2008 12:32:58 +0300 (IDT) X-Virus-Scanned: amavisd-new at bezeqint.net Received: from sa2.bezeqint.net ([127.0.0.1]) by localhost (sa2.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yErzrQR561c4; Thu, 22 May 2008 12:32:57 +0300 (IDT) Received: from localhost (webmail1.actcom.net.il [192.114.47.22]) by sa2.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP; Thu, 22 May 2008 12:32:56 +0300 (IDT) Received: from 196-220-11-210.netcomng.com (196-220-11-210.netcomng.com [196.220.11.210]) by webmail.actcom.net.il (IMP) with HTTP for ; Thu, 22 May 2008 12:48:52 +0300 Message-ID: <1211449732.48354184cbafc@webmail.actcom.net.il> Date: Thu, 22 May 2008 12:48:52 +0300 From: "(FEDEX COURIER SERVICE)" Reply-to: fedex_courierservice008@live.com Subject: ATTENTION CUSTOMER:(PARCEL DELIVERY)Contact Person: Mr. Donald White MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 196.220.11.210 X-Organization: ACTCOM - Internet Services in Israel 1-800-300-123 info@actcom.net.il To: undisclosed-recipients:; Greetings, I am Mrs Mary Powell,a staff of the FEDEX COURIER SERVICE here in west Africa,.We have been waiting for you since to contact us for your Confirmable Bank Draft of $800.000.00 United States Dollars that was deposited with our company, but we did not hear from you since that time.I will be traveling out from the country for two Months Course and I will not come back till end of April. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date. For your information, the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country has already been paid for.The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($365.00 US) Dollars only being Security Keeping Fee of the Courier Company so far.Again, don't be deceived by anybody to pay any other money except $365.00US Dollars. You have to contact the FEDEX COURIER SERVICE now for the delivery of your Draft with this information bellow; Contact Person: Mr. Donald White Email Address: fedex_courierservice008@live.com Telephone :+234-7032072725 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address.Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay of extra demurrage and remember to pay them their Security Keeping fee of $365.00 US Dollars for their immediate action. You should also let me know through email as Soon as you receive your Draft. Yours Faithfully, Mary Powell From owner-namedroppers@ops.ietf.org Thu May 22 09:39:46 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D55093A677C; Thu, 22 May 2008 09:39:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.048 X-Spam-Level: X-Spam-Status: No, score=-1.048 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TkB8+lMVTUu1; Thu, 22 May 2008 09:39:42 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 8696B3A6BEA; Thu, 22 May 2008 09:39:36 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JzDcF-000IdT-Cv for namedroppers-data@psg.com; Thu, 22 May 2008 16:26:07 +0000 Received: from [129.6.16.227] (helo=smtp.nist.gov) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JzDas-000IOn-Dr for namedroppers@ops.ietf.org; Thu, 22 May 2008 16:25:01 +0000 Received: from 98-140.antd.nist.gov (98-140.antd.nist.gov [129.6.140.98]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id m4MGOWL5026186; Thu, 22 May 2008 12:24:32 -0400 Message-ID: <48359E3F.6070508@nist.gov> Date: Thu, 22 May 2008 12:24:31 -0400 From: Scott Rose Organization: NIST User-Agent: Thunderbird 2.0.0.6 (X11/20070728) MIME-Version: 1.0 To: Francis Dupont CC: namedroppers@ops.ietf.org Subject: Re: Meeting at IETF-71 in Dublin References: <200805211010.m4LAA9j6084978@givry.fdupont.fr> In-Reply-To: <200805211010.m4LAA9j6084978@givry.fdupont.fr> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: scottr@nist.gov Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion For what it's worth, I support this draft becoming a WG document. Two comments for the Security Considerations section: 1. From the security folk I've talked too, HMAC-SHA1 is still considered "good enough" beyond 2010, which is the time SHA-1 is considered weak for digital signatures. Something about the shared secret makes up for the potential weakness in SHA-1. No, I don't fully understand either but they assure me it's acceptable. 2. Would it be a good idea to give some guidance on length of the HMAC-SHAXXX shared secret? I've always referred to the NIST Special Publication 800-57 part 1 dealing with security strengths. The rule of thumb there is 80 bits now until 2010, then 112 bits. The string can be longer, but must contain at least 80 bits of "randomness". I don't remember in which document there are suggestions for TSIG shared secret length, so why not here? Scott Francis Dupont wrote: > In your previous mail you wrote: > > DNSEXT will meet, please send in agenda requests. > > => about draft-dupont-dnsext-tsig-md5-deprecated-00.txt: > - no presentation if you don't require one (there should be > nothing to say to people who read it, and only "please read it" > to others :-) > - WG item question, next steps, etc > > Thanks > > Francis.Dupont@fdupont.fr > > PS: I have an improved version (better wording, no new technical thing). > I can wait for an answer to the WG item question or publish it. BTW > we have still a lot of times (more than one month). > PPS: wellcome to the new co-chair! > > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > -- ---------------------------------------- Scott Rose Computer Scientist NIST ph: +1 301-975-8439 scott.rose@nist.gov http://www-x.antd.nist.gov/dnssec http://www.dnsops.gov/ ----------------------------------------- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Thu May 22 11:32:23 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6348A3A677E; Thu, 22 May 2008 11:32:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.495 X-Spam-Level: X-Spam-Status: No, score=-4.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0n1rf6qiU1hk; Thu, 22 May 2008 11:32:19 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id EF1BD3A6835; Thu, 22 May 2008 11:31:58 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JzFQV-0007SJ-8b for namedroppers-data@psg.com; Thu, 22 May 2008 18:22:07 +0000 Received: from [216.82.250.131] (helo=mail128.messagelabs.com) by psg.com with smtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JzFPy-0007Nv-CZ for namedroppers@ops.ietf.org; Thu, 22 May 2008 18:21:52 +0000 X-VirusChecked: Checked X-Env-Sender: Donald.Eastlake@motorola.com X-Msg-Ref: server-7.tower-128.messagelabs.com!1211480053!2904410!1 X-StarScan-Version: 5.5.12.14.2; banners=-,-,- X-Originating-IP: [129.188.136.8] Received: (qmail 4244 invoked from network); 22 May 2008 18:14:13 -0000 Received: from motgate8.mot.com (HELO motgate8.mot.com) (129.188.136.8) by server-7.tower-128.messagelabs.com with SMTP; 22 May 2008 18:14:13 -0000 Received: from il06exr01.mot.com (il06exr01.mot.com [129.188.137.131]) by motgate8.mot.com (8.12.11/Motorola) with ESMTP id m4MIE7e0000047 for ; Thu, 22 May 2008 11:14:12 -0700 (MST) Received: from il06vts01.mot.com (il06vts01.mot.com [129.188.137.141]) by il06exr01.mot.com (8.13.5/Vontu) with SMTP id m4MIE6k5015473 for ; Thu, 22 May 2008 13:14:06 -0500 (CDT) Received: from de01exm64.ds.mot.com (de01exm64.am.mot.com [10.176.8.15]) by il06exr01.mot.com (8.13.5/8.13.0) with ESMTP id m4MIE50l015466 for ; Thu, 22 May 2008 13:14:05 -0500 (CDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: Meeting at IETF-71 in Dublin Date: Thu, 22 May 2008 14:14:04 -0400 Message-ID: <3870C46029D1F945B1472F170D2D979003D4FB99@de01exm64.ds.mot.com> In-Reply-To: <48359E3F.6070508@nist.gov> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Meeting at IETF-71 in Dublin thread-index: Aci8LFVTxxOveiKpQ2StL+igH7MVlgACPlbg References: <200805211010.m4LAA9j6084978@givry.fdupont.fr> <48359E3F.6070508@nist.gov> From: "Eastlake III Donald-LDE008" To: "Scott Rose" , "Francis Dupont" Cc: X-CFilter-Loop: Reflected Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion HMAC involves a double application of SHA-1, the output of the first feeding into the second; this is the key to why it's stronger than a single application of SHA-1. The length of the shared secret should be at least as long as the output of the basic hash function according to the original TSIG RFC, RFC 2845. That RFC just refers to RFC 1750, now obsoleted by RFC 4086, for discussions of the amount of randomness or entropy. RFC 4635 talks about allowable truncation. Possibly if the required minimum entropy is being upped to 112 bits in 2010, consideration should be given to upping the required minimum truncation size (currently specified in RFC 4635) to 112 bits at that time... Thanks, Donald -----Original Message----- From: owner-namedroppers@ops.ietf.org [mailto:owner-namedroppers@ops.ietf.org] On Behalf Of Scott Rose Sent: Thursday, May 22, 2008 12:25 PM To: Francis Dupont Cc: namedroppers@ops.ietf.org Subject: Re: Meeting at IETF-71 in Dublin For what it's worth, I support this draft becoming a WG document. Two comments for the Security Considerations section: 1. From the security folk I've talked too, HMAC-SHA1 is still considered "good enough" beyond 2010, which is the time SHA-1 is considered weak=20 for digital signatures. Something about the shared secret makes up for=20 the potential weakness in SHA-1. No, I don't fully understand either=20 but they assure me it's acceptable. 2. Would it be a good idea to give some guidance on length of the=20 HMAC-SHAXXX shared secret? I've always referred to the NIST Special=20 Publication 800-57 part 1 dealing with security strengths. The rule of=20 thumb there is 80 bits now until 2010, then 112 bits. The string can be longer, but must contain at least 80 bits of "randomness". I don't=20 remember in which document there are suggestions for TSIG shared secret=20 length, so why not here? Scott Francis Dupont wrote: > In your previous mail you wrote: >=20 > DNSEXT will meet, please send in agenda requests. > =20 > =3D> about draft-dupont-dnsext-tsig-md5-deprecated-00.txt: > - no presentation if you don't require one (there should be > nothing to say to people who read it, and only "please read it" > to others :-) > - WG item question, next steps, etc >=20 > Thanks >=20 > Francis.Dupont@fdupont.fr >=20 > PS: I have an improved version (better wording, no new technical thing). > I can wait for an answer to the WG item question or publish it. BTW > we have still a lot of times (more than one month). > PPS: wellcome to the new co-chair! >=20 > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 --=20 ---------------------------------------- Scott Rose Computer Scientist NIST ph: +1 301-975-8439 scott.rose@nist.gov http://www-x.antd.nist.gov/dnssec http://www.dnsops.gov/ ----------------------------------------- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From c.strauch@antz-assekuranz.de Thu May 22 19:44:59 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4BCC53A6B94; Thu, 22 May 2008 19:44:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -57.028 X-Spam-Level: X-Spam-Status: No, score=-57.028 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EZVg6MuVRVTR; Thu, 22 May 2008 19:44:58 -0700 (PDT) Received: from 201-255-112-17.mrse.com.ar (unknown [201.255.112.17]) by core3.amsl.com (Postfix) with SMTP id 586663A69AD; Thu, 22 May 2008 19:44:48 -0700 (PDT) X-Originating-IP: 132.209.111.38 by smtp.201.255.112.17; Thu, 22 May 2008 22:44:48 -0500 Message-ID: From: "Emory Bailey" Reply-To: "Emory Bailey" To: discuss-bounces@ietf.org Subject: Replicas will save you thousands Date: Thu, 22 May 2008 22:44:48 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Prestige Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://lyhyfawyxog37.blogspot.com/ Prestige Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://lyhyfawyxog37.blogspot.com/ From caaron@fnbga.com Mon May 26 01:02:51 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CECB33A68DB; Mon, 26 May 2008 01:02:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.535 X-Spam-Level: X-Spam-Status: No, score=-16.535 tagged_above=-999 required=5 tests=[BAYES_60=1, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_DYNAMIC=1.144, HTTP_ESCAPED_HOST=0.134, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mH7zuS1V+wcL; Mon, 26 May 2008 01:02:45 -0700 (PDT) Received: from 25.pool85-49-184.dynamic.orange.es (25.pool85-49-184.dynamic.orange.es [85.49.184.25]) by core3.amsl.com (Postfix) with SMTP id 934233A68BE; Mon, 26 May 2008 01:02:36 -0700 (PDT) X-Originating-IP: 192.38.184.56 by smtp.85.49.184.25; Mon, 26 May 2008 04:02:42 -0500 Message-ID: From: "Emory Irwin" Reply-To: "Emory Irwin" To: discuss-web-archive@ietf.org Subject: Why get an original watch? Date: Mon, 26 May 2008 04:02:42 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Everybody knows that a Cartier watch is a silent statement of wealth and luxury. But we all know as well that the price of putting one of them on your wrist is for the most unaffordable by the average Joe. That's why replica Cartier watches are becoming more and more popular by the day. They're actually the affordable solution to this dilemma. And thanks to the internet, there is now a place where the highest quality Cartier replicas are available: Prestige Replicas. So, why not take a look at the extensive inventory that this site has to offer? After all, browsing through their hundreds of Cartier watches is absolutely free, and buying the one of your dreams is simply inexpensive. http://www%2Essedkke%2Ecom/ From owner-namedroppers@ops.ietf.org Mon May 26 13:37:04 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 232983A6BD1; Mon, 26 May 2008 13:37:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.495 X-Spam-Level: X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BqoybDw1PHgm; Mon, 26 May 2008 13:37:03 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 2365828C1C4; Mon, 26 May 2008 13:36:59 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0jDC-0008jA-Uv for namedroppers-data@psg.com; Mon, 26 May 2008 20:22:30 +0000 Received: from [207.173.203.159] (helo=lists.commandprompt.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0jCj-0008g5-Sy for namedroppers@ops.ietf.org; Mon, 26 May 2008 20:22:16 +0000 Received: from commandprompt.com (227-54-222-209.mycybernet.net [209.222.54.227]) (authenticated bits=0) by lists.commandprompt.com (8.13.8/8.13.8) with ESMTP id m4QKNFkt024045 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 26 May 2008 13:23:18 -0700 Date: Mon, 26 May 2008 16:21:56 -0400 From: Andrew Sullivan To: namedroppers@ops.ietf.org Subject: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? Message-ID: <20080526202156.GQ21327@commandprompt.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.17 (2007-11-01) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (lists.commandprompt.com [207.173.203.159]); Mon, 26 May 2008 13:23:19 -0700 (PDT) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion Dear colleagues, This message starts a seven-day request to the Working Group asking whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a working group item. You can find the text of the draft at . Please respond to the call by 21:00 UTC on 2008-06-02 if you wish that the draft be adopted, or if you wish that it not be adopted. Please state your reasons, especially if you are in opposition. We note that there was already one comment in support of adopting it, at . We'll consider that an expression of support for the purposes of deciding. Best regards, Olafur & Andrew -- Andrew Sullivan ajs@commandprompt.com +1 503 667 4564 x104 http://www.commandprompt.com/ -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Mon May 26 14:04:22 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 10D5428C1D2; Mon, 26 May 2008 14:04:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_UK=1.749, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g3Y3T5z8c6Dg; Mon, 26 May 2008 14:04:20 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 4FA0F3A6BD1; Mon, 26 May 2008 14:04:20 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0jn7-000CLn-Ka for namedroppers-data@psg.com; Mon, 26 May 2008 20:59:37 +0000 Received: from [213.248.199.24] (helo=mx4.nominet.org.uk) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0jmf-000CJ0-7f for namedroppers@ops.ietf.org; Mon, 26 May 2008 20:59:23 +0000 DomainKey-Signature: s=main.dk.nominet.selector; d=nominet.org.uk; c=nofws; q=dns; h=X-IronPort-AV:Received:In-Reply-To:References:To:Cc: Subject:MIME-Version:X-Mailer:Message-ID:From:Date: X-MIMETrack:Content-Type; b=Xzd35Uy22bWLYr/TEAwFMmeErC+DAtbPcAoTVYcDyFJZwH2peXHy+nR1 VXKV/kBwqf0vIEVj0qC38jkMzYzXQUaDU4Tp9A+wzN9TPBTgfg4UcwwlB uIIRO+lhoXEgvNK; DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nominet.org.uk; i=roy@nominet.org.uk; q=dns/txt; s=main.dkim.nominet.selector; t=1211835549; x=1243371549; h=from:sender:reply-to:subject:date:message-id:to:cc: mime-version:content-transfer-encoding:content-id: content-description:resent-date:resent-from:resent-sender: resent-to:resent-cc:resent-message-id:in-reply-to: references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; z=From:=20"Roy=20Arends"=20|Subject: =20Re:=20Adopt=20draft-dupont-dnsext-tsig-md5-deprecated =20as=20WG=20draft?|Date:=20Mon,=2026=20May=202008=2022:5 9:06=20+0200|Message-ID:=20|To:=20Andrew =20Sullivan=20|Cc:=20namedroppers@ ops.ietf.org|MIME-Version:=201.0|In-Reply-To:=20<20080526 202156.GQ21327@commandprompt.com>|References:=20<20080526 202156.GQ21327@commandprompt.com>; bh=CoDNcdo3hDe9EC3E1xotSeLoWgwuWwzLtyRCYuyHuG8=; b=dAZfgmvbI9u5Rit2x7VcNJsnc9qzG68xAdpNa4NEgBH9MyiyTmgGtJpn JKfvsozVDIOlNBL+d8b7bl3y3QCRs8X1u0XP4uWRG3h4FGM0IVTrudb3P fUglqeubhrDVwP7; X-IronPort-AV: E=Sophos;i="4.27,543,1204502400"; d="scan'208";a="1372264" Received: from notes1.nominet.org.uk ([213.248.197.128]) by mx4.nominet.org.uk with ESMTP; 26 May 2008 21:59:07 +0100 In-Reply-To: <20080526202156.GQ21327@commandprompt.com> References: <20080526202156.GQ21327@commandprompt.com> To: Andrew Sullivan Cc: namedroppers@ops.ietf.org Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? MIME-Version: 1.0 X-Mailer: Lotus Notes Build VMac_Beta85_20080115_MM2 January 15, 2008 Message-ID: From: "Roy Arends" Date: Mon, 26 May 2008 22:59:06 +0200 X-MIMETrack: Serialize by Router on notes1/Nominet(Release 7.0.1FP1 | May 25, 2006) at 26/05/2008 09:59:07 PM, Serialize complete at 26/05/2008 09:59:07 PM Content-Type: text/plain; charset="US-ASCII" Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion Andrew Sullivan wrote on 05/26/2008 10:21:56 PM: > Dear colleagues, > > This message starts a seven-day request to the Working Group asking > whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a > working group item. > > You can find the text of the draft at > . > > Please respond to the call by 21:00 UTC on 2008-06-02 if you wish that > the draft be adopted, or if you wish that it not be adopted. Please > state your reasons, especially if you are in opposition. > > We note that there was already one comment in support of adopting it, > at > . > We'll consider that an expression of support for the purposes of > deciding. I support the adoption of draft-dupont-dnsext-tsig-md5-deprecated. Roy Arends Nominet UK -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From JudsonburiedDelaney@novell.com Mon May 26 17:25:23 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BCF983A6C12; Mon, 26 May 2008 17:25:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -50.968 X-Spam-Level: X-Spam-Status: No, score=-50.968 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_REPLICA_ROLEX=3.157, FH_HOST_EQ_D_D_D_D=0.765, GB_ROLEX=5, HOST_MISMATCH_COM=0.311, HS_BOBAX_MID_2=1, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, REPLICA_WATCH=3.396, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_BUY=1.666, SARE_SPEC_ROLEX_REP=1.666, URIBL_BLACK=20, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QcbAsjmJpAn7; Mon, 26 May 2008 17:25:22 -0700 (PDT) Received: from fl0118b.src.col (host86-168-242-217.range86-168.btcentralplus.com [86.168.242.217]) by core3.amsl.com (Postfix) with SMTP id B18E73A6C0B; Mon, 26 May 2008 17:25:21 -0700 (PDT) Received: from 14135777551826462.18821395406195046.19939821005891641.15527647171558364 (HELO localhost.localdomain) (12634409624650763.12186199525155102.17126557033367001.11676831492007485) by 16780841163706252.17272301003026559.13281583378509572.12757075497847999 with SMTP; Tue, 27 May 2008 01:24:07 +0000 Date: Tue, 27 May 2008 01:24:07 +0000 Message-Id: <7IX824EJXVWDA037@novell.com> X-Mailer: MIME::Lite 3.01 (F2.72; A1.62; B3.01; Q3.01) X-Header-CompanyDBUserName: hpccm X-Header-MasterId: 507000 X-Header-Versions: Hewlett-Packard.3t0bn0nd8.fk@us.newsgram.hp.com X-FID: 14E24DBC-2728-76AF-B4E2-61CDEA76DCB7 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: , " Subject: Cartier Roadster Watches Buy replica Rolex watches online from our online store and save HUGE money. We guarantee the lowest prices!!! http://diazopepeve.com/ From owner-namedroppers@ops.ietf.org Mon May 26 17:27:51 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A5FE3A6C10; Mon, 26 May 2008 17:27:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AK0F7qh83cSJ; Mon, 26 May 2008 17:27:50 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 282F33A6942; Mon, 26 May 2008 17:27:50 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0mu3-00044Q-0N for namedroppers-data@psg.com; Tue, 27 May 2008 00:18:59 +0000 Received: from [2001:470:1f00:820:214:22ff:fed9:fbdc] (helo=drugs.dv.isc.org) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0mtZ-00041E-Ef for namedroppers@ops.ietf.org; Tue, 27 May 2008 00:18:44 +0000 Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.2/8.14.2) with ESMTP id m4R0ILTd020743; Tue, 27 May 2008 10:18:22 +1000 (EST) (envelope-from marka@drugs.dv.isc.org) Message-Id: <200805270018.m4R0ILTd020743@drugs.dv.isc.org> To: Andrew Sullivan Cc: namedroppers@ops.ietf.org From: Mark Andrews Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? In-reply-to: Your message of "Mon, 26 May 2008 16:21:56 -0400." <20080526202156.GQ21327@commandprompt.com> Date: Tue, 27 May 2008 10:18:21 +1000 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion > Dear colleagues, > > This message starts a seven-day request to the Working Group asking > whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a > working group item. > > You can find the text of the draft at > . > > Please respond to the call by 21:00 UTC on 2008-06-02 if you wish that > the draft be adopted, or if you wish that it not be adopted. Please > state your reasons, especially if you are in opposition. > > We note that there was already one comment in support of adopting it, > at > . > We'll consider that an expression of support for the purposes of > deciding. > > Best regards, > Olafur & Andrew > > -- > Andrew Sullivan > ajs@commandprompt.com > +1 503 667 4564 x104 > http://www.commandprompt.com/ > > -- > to unsubscribe send a message to namedroppers-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: I support the adoption of draft-dupont-dnsext-tsig-md5-deprecated. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From c70c6b0a@jch.co.za Mon May 26 21:18:43 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9BE753A6942; Mon, 26 May 2008 21:18:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.752 X-Spam-Level: X-Spam-Status: No, score=0.752 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_DSL=1.129, HTTP_ESCAPED_HOST=0.134, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r3yEtQ+TqWuG; Mon, 26 May 2008 21:18:36 -0700 (PDT) Received: from adsl190-24114104.dyn.etb.net.co (unknown [190.24.114.104]) by core3.amsl.com (Postfix) with SMTP id D4FD53A6846; Mon, 26 May 2008 21:17:25 -0700 (PDT) X-Originating-IP: 120.228.165.119 by smtp.190.24.114.104; Tue, 27 May 2008 00:17:40 -0500 Message-ID: From: "Patti Sheffield" Reply-To: "Patti Sheffield" To: discuss-bounces@ietf.org Subject: Why replica watches are better Date: Tue, 27 May 2008 00:17:40 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit An IWC watch is a uniquely handcrafted time piece that combines a classical element with a timeless elegance. Its appeal comes from their traditional beauty and their superb performance. But this sophistication has always come with a high price tag. Except of course, when you buy an IWC replica. And Prestige Replicas has dozens of IWC replica watches at prices so incredibly low that you can rest assured they won't last long! So, why not head over to Prestige Replicas right now and take a look at their IWC watches? After all, isn't it time you wore a splendid wristwatch without having to spend a fortune? http://www%2Essedkke%2Ecom/ From owner-namedroppers@ops.ietf.org Mon May 26 23:30:39 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD75B3A6C24; Mon, 26 May 2008 23:30:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.577 X-Spam-Level: X-Spam-Status: No, score=-102.577 tagged_above=-999 required=5 tests=[AWL=0.023, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E5LlhxhLck8u; Mon, 26 May 2008 23:30:39 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id D8A523A6C25; Mon, 26 May 2008 23:30:32 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0sY9-000EW8-E7 for namedroppers-data@psg.com; Tue, 27 May 2008 06:20:45 +0000 Received: from [2001:7b8:206:1::1] (helo=open.nlnetlabs.nl) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0sXy-000EUv-Dy for namedroppers@ops.ietf.org; Tue, 27 May 2008 06:20:40 +0000 Received: from [IPv6:2001:888:1243::21b:63ff:fec4:a963] ([IPv6:2001:888:1243:0:21b:63ff:fec4:a963]) (authenticated bits=0) by open.nlnetlabs.nl (8.14.2/8.14.2) with ESMTP id m4R6KMoR035294 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Tue, 27 May 2008 08:20:22 +0200 (CEST) (envelope-from olaf@NLnetLabs.nl) Cc: namedroppers@ops.ietf.org Message-Id: <1A9D3A12-D065-4E71-ACAA-4379F35AFB5C@NLnetLabs.nl> From: Olaf Kolkman To: Andrew Sullivan In-Reply-To: <20080526202156.GQ21327@commandprompt.com> Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Apple-Mail-4--513700675" Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? Date: Tue, 27 May 2008 08:20:16 +0200 References: <20080526202156.GQ21327@commandprompt.com> X-Pgp-Agent: GPGMail d52 (v52, Leopard) X-Mailer: Apple Mail (2.919.2) X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-3.0 (open.nlnetlabs.nl [IPv6:2001:7b8:206:1::53]); Tue, 27 May 2008 08:20:23 +0200 (CEST) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --Apple-Mail-4--513700675 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit On May 26, 2008, at 10:21 PM, Andrew Sullivan wrote: > This message starts a seven-day request to the Working Group asking > whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a > working group item. support --Olaf --Apple-Mail-4--513700675 content-type: application/pgp-signature; x-mac-type=70674453; name=PGP.sig content-description: This is a digitally signed message part content-disposition: inline; filename=PGP.sig content-transfer-encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: This message is locally signed. iEYEARECAAYFAkg7qCAACgkQtN/ca3YJIocGmgCg1XhGv3hcGu1a1H+aFFaX4YMx 3wIAnjF3pEfU8iw0s9HB6jDu9likfpWJ =QZiI -----END PGP SIGNATURE----- --Apple-Mail-4--513700675-- -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Tue May 27 00:03:43 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DDD973A67DD; Tue, 27 May 2008 00:03:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.195 X-Spam-Level: X-Spam-Status: No, score=-4.195 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nzurlnIGqp8x; Tue, 27 May 2008 00:03:43 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id EAD1D3A67A1; Tue, 27 May 2008 00:03:42 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0t7H-000IbO-O2 for namedroppers-data@psg.com; Tue, 27 May 2008 06:57:03 +0000 Received: from [144.254.224.140] (helo=ams-iport-1.cisco.com) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0t6m-000IWu-Ib for namedroppers@ops.ietf.org; Tue, 27 May 2008 06:56:49 +0000 X-IronPort-AV: E=Sophos;i="4.27,547,1204498800"; d="scan'208";a="9948387" Received: from ams-dkim-1.cisco.com ([144.254.224.138]) by ams-iport-1.cisco.com with ESMTP; 27 May 2008 08:56:18 +0200 Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id m4R6uIkc005592; Tue, 27 May 2008 08:56:18 +0200 Received: from xbh-ams-332.emea.cisco.com (xbh-ams-332.cisco.com [144.254.231.87]) by ams-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id m4R6uIee000165; Tue, 27 May 2008 06:56:18 GMT Received: from xfe-ams-331.emea.cisco.com ([144.254.231.72]) by xbh-ams-332.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 27 May 2008 08:56:18 +0200 Received: from [192.168.1.135] ([10.61.66.30]) by xfe-ams-331.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 27 May 2008 08:56:18 +0200 Cc: namedroppers@ops.ietf.org Message-Id: <2464D8D5-DB36-4753-B95F-EE5643E9F936@cisco.com> From: =?ISO-8859-1?Q?Patrik_F=E4ltstr=F6m?= To: Andrew Sullivan In-Reply-To: <20080526202156.GQ21327@commandprompt.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? Date: Tue, 27 May 2008 08:56:17 +0200 References: <20080526202156.GQ21327@commandprompt.com> X-Mailer: Apple Mail (2.919.2) X-OriginalArrivalTime: 27 May 2008 06:56:18.0320 (UTC) FILETIME=[C36D2900:01C8BFC6] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=590; t=1211871378; x=1212735378; c=relaxed/simple; s=amsdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=paf@cisco.com; z=From:=20=3D?ISO-8859-1?Q?Patrik_F=3DE4ltstr=3DF6m?=3D=20

|Subject:=20Re=3A=20Adopt=20draft-dupont-dnsext-tsig-md5-de precated=20as=20WG=20draft? |Sender:=20; bh=3Z20Whx4OT2mUuv+zuTCxoU3F3rcbQ+YQlCHe/uor34=; b=NPoct+EBRuadwqtZqr5F371ov8UuwVFwHpKe+pzbmLMkDrrUuXjmCPhCcL aMEIMSbNDzOcgsOf8HNCTVqxe19F/bz9xEVkhEDHS2BrlEO8PckeM+4hyzm3 cQn8Jj4F5b; Authentication-Results: ams-dkim-1; header.From=paf@cisco.com; dkim=pass ( sig from cisco.com/amsdkim1002 verified; ); Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On 26 maj 2008, at 22.21, Andrew Sullivan wrote: > This message starts a seven-day request to the Working Group asking > whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a > working group item. > > You can find the text of the draft at > >. > > Please respond to the call by 21:00 UTC on 2008-06-02 if you wish that > the draft be adopted, or if you wish that it not be adopted. Please > state your reasons, especially if you are in opposition. I support this. Patrik -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Tue May 27 07:42:05 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 383A63A69F8; Tue, 27 May 2008 07:42:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.048 X-Spam-Level: X-Spam-Status: No, score=-1.048 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DlpgLNHyKYac; Tue, 27 May 2008 07:42:04 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id ECD0C3A68F8; Tue, 27 May 2008 07:42:03 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K10AS-000DTe-DY for namedroppers-data@psg.com; Tue, 27 May 2008 14:28:48 +0000 Received: from [199.212.90.4] (helo=monster.hopcount.ca) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K10A1-000DRa-Ti for namedroppers@ops.ietf.org; Tue, 27 May 2008 14:28:35 +0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=monster; d=ca.afilias.info; h=Received:Cc:Message-Id:From:To:In-Reply-To:Content-Type:Content-Transfer-Encoding:Mime-Version:Subject:Date:References:X-Mailer; b=dNHNLnY5+cNCM8A3dq5A3pJHeSj/4ufIiqPtr3ibdzcDqBmW0kHbcJ6+7fWeUUCRZxmtIKQJFGxjltBuVwr6luQWpIH+uiT0MYYz88xBW/fcsVpOKFZV3Z2+5lfQep71; Received: from [196.200.216.47] (helo=dhcp-216-47.wifi.ws.afnog.org) by monster.hopcount.ca with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K10DW-000PbC-QG; Tue, 27 May 2008 14:31:59 +0000 Cc: namedroppers@ops.ietf.org Message-Id: <721B082B-DC1E-4E28-BBA2-F20DEFF81EF1@ca.afilias.info> From: Joe Abley To: Andrew Sullivan In-Reply-To: <20080526202156.GQ21327@commandprompt.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? Date: Tue, 27 May 2008 14:28:14 +0000 References: <20080526202156.GQ21327@commandprompt.com> X-Mailer: Apple Mail (2.919.2) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On 26 May 2008, at 20:21, Andrew Sullivan wrote: > This message starts a seven-day request to the Working Group asking > whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a > working group item. I have read this document, and support its adoption by the working group. Joe -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Tue May 27 08:08:54 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BA4913A69C5; Tue, 27 May 2008 08:08:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.105 X-Spam-Level: ** X-Spam-Status: No, score=2.105 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vp5xpgRpvvM3; Tue, 27 May 2008 08:08:50 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 3F70E28C231; Tue, 27 May 2008 08:08:49 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K10fV-000HVg-6w for namedroppers-data@psg.com; Tue, 27 May 2008 15:00:53 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K10f9-000HS5-Jm for namedroppers@ops.ietf.org; Tue, 27 May 2008 15:00:39 +0000 Received: from mail.ogud.com (localhost [127.0.0.1]) by ogud.com (8.13.1/8.13.1) with ESMTP id m4RF0KeN074621 for ; Tue, 27 May 2008 11:00:20 -0400 (EDT) (envelope-from namedroppers@mail.ogud.com) Received: (from namedroppers@localhost) by mail.ogud.com (8.13.1/8.13.1/Submit) id m4REmEBh074414 for namedroppers@ops.ietf.org; Tue, 27 May 2008 10:48:14 -0400 (EDT) (envelope-from namedroppers) Received: from [81.91.160.182] (helo=office.denic.de) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K0vqi-000BFz-P1 for namedroppers@ops.ietf.org; Tue, 27 May 2008 09:52:15 +0000 Received: from denic.de ([10.122.65.99]) by office.denic.de with esmtp id 1K0vqf-00065w-0d; Tue, 27 May 2008 11:52:06 +0200 Received: by unknown.office.denic.de (Postfix, from userid 501) id A353E64063A; Tue, 27 May 2008 11:52:22 +0200 (CEST) Date: Tue, 27 May 2008 11:52:22 +0200 From: Peter Koch To: IETF DNSEXT WG Subject: Review of draft-ietf-dnsext-forgery-resilience-03.txt Message-ID: <20080527095222.GC25686@unknown.office.denic.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion [ Moderators note: Post was moderated, either because it was posted by a non-subscriber, or because it was over 20K. With the massive amount of spam, it is easy to miss and therefore delete relevant posts by non-subscribers. Please fix your subscription addresses. ] Hello, this is a review of draft-ietf-dnsext-forgery-resilience-03.txt. I think this document fulfills a useful purpose, but is not ready yet for WGLC and does not belong on the standards track. Find some general remarks after the walk through. > DNS Extensions (DNSEXT) A. Hubert > Internet-Draft Netherlabs Computer Consulting BV. > Updates: 1034 (if approved) R. van Mook The draft isn't clear where it actually updates 1034 and in fact I believe it shouldn't even try to. > Intended status: Standards Track Virtu The document does not change on the wire behaviour and thus should be aiming at BCP instad of standards track. Elevation of this document could not really be measured based on interoperability. > 1. Requirements and definitions > > 1.1. Definitions > > This document uses the following definitions: > > Client: typically a 'stub-resolver' on an end-user's computer > > Resolver: a nameserver performing recursive service for clients, > also known as a caching server Instead of introducing new definitions and thus contributing to language confusion, the document could borrow (with references) from earlier publications. This beast is either a "resolver" (per RFC 1034), a "full- service resolver (as per RFC 1123, 6.1.3.1) or a "recursive name server" (as per RFC 4033). > Stub resolver: a very limited Resolver on a client computer, that > leaves most of the recursing work to a full resolver See above. Why only "most of the recursing work"? > Question: a question sent out by a resolver, typically in a UDP > packet > > Answer: the answer sent back by an authoritative nameserver, > typically in a UDP packet Again, the usual terminology is "query" and "response", where "question" most often refers to the actual question section in the packet (see RFC 1034). > Third party: any host other than the resolver or the intended > recipient of a question. The third party may have access to an > arbitrary authoritative nameserver, but has no access to packets > transmitted by the Resolver or authoritative server The resolver isn't defined as a host but as a piece of software above, so "third party" is any entity different from the resolver or authoritative name server. > Authentic answer: the answer that would be accepted if no third > party interferes That's true, but kind of a reverse definition. The authentic response is the one that originates from the true/real host using the target IP address of the query. It should carry authentic data, but that's a subtly different issue. > Target domain: domain for which the attacker wishes to spoof in an > answer This phrase is used only once more in the draft, so it might not even be necessary. In any case, since the target is a particular node in the hierarchy rather than a subtree, I'd use 'target domain name' here. > 2. Introduction > The words below are aimed at authors of resolvers: it is up to > operators to decide which nameserver implementation to use, or which > options to enable. Operational constraints may override the security > concerns described below. However, implementations are expected to > allow an operator to enable functionality described in this document. The operational considerations need to be discussed somewhere! > This document expands on some of the risks mentioned in RFC 3833, > especially those outlined in the sections on 'ID Guessing and Query > Prediction' and 'Name Chaining'. Furthermore, it emphasises a number > of existing rules and guidelines embodied in the relevant STDs and > RFCs. The following also specifies new requirements to make sure the > Domain Name System can be relied upon until a more secure protocol > has been standardised and deployed. Since "STDs" are a subset of "RFCs", "relevant DNS protocol specifications" should suffice, maybe with a list of references already given here. > 3. Description of DNS spoofing > > When certain steps are taken it is feasible to 'spoof' the current > deployed majority of caching resolvers with carefully crafted and "caching resolvers" isn't among the list of defined terms. > timed DNS packets. Once spoofed, a caching server will repeat the > data it wrongfully accepted, and make its clients contact the wrong, > and possibly malicious, servers. > > To understand how this process works it is important to know what > makes a resolver (and more specifically a caching server) accept an > answer. The definitions section claims that "resolver" and "caching server" are equivalent. > The following sentence in section 5.3.3 of [RFC1034] presaged the > present problem: > > The resolver should be highly paranoid in its parsing of responses. > It should also check that the response matches the query it sent > using the ID field in the response. > > DNS data is to be accepted by a resolver if and only if: Now is this "normative" or the "emphasis" mentioned earlier? > 1. The question section of the reply packet is equivalent to that of > a question packet currently waiting for an answer > > 2. The ID field of the reply packet matches that of the question > packet RFC 1034, section 5.3.3 > 3. The answer comes from the same network address the question was > sent to RFC 2181, section 4. (2181 is missing from the normative references) > 4. The answer comes in on the same network address, including port > number, as the question was sent from RFC 2181, section 4.2 > If a third party succeeds in meeting the four conditions before the > answer from the authentic answer does so, it is in a position to feed "from the authentic _name server_"? > 4. Details I'd suggest a more descriptive headline: "Detailed Description of Spoofing Scenarios" or something along that line. > 4.1. Forcing a question > > Formally, there is no need for a nameserver to perform service except > for its operator, its customers or more generally its users. > Recently, open recursing nameservers have been used to amplify denial > of service attacks. A reference to [draft-ietf-dnsop-reflectors-are-evil-05.txt] might help here. > In spite of this, many resolvers perform at least partial service for > the whole world. This is partially out of lack of concern, and is > reminiscent of the open relay SMTP service the net enjoyed up to the > early 1990s. Some access providers may serve so many subnets that it > is hard to enumerate these all in the DNS configuration. > > Providing full service enables the third party to send the target > resolver a question for the domain name it intends to spoof. On > receiving this question, and not finding the answer in its cache, the > resolver will transmit questions to relevant authoritative > nameservers. This opens up a window of opportunity for getting fake > answer data accepted. The two preceding paragraphs appear a bit verbose to me without completely addressing the attack scenarios. It is important to state that even if recursive service is restricted to "local" clients, a remote attacker can induce DNS queries by other levels of indirection, e.g. using SMTP dialogues, inline images in websites etc. > Some operators restrict access by not recursing for unauthorised IP > addresses, but only respond with data from the cache. This makes > spoofing harder for a third party as it cannot then force the exact > moment a question will be asked. It is still possible however to > determine a time range when this will happen, because nameservers > helpfully publish the decreasing TTL of entries in the cache, which > indicate from which absolute time onwards a new query could be sent > to refresh the expired entry. > > The time to live of the 'target domain' determines how often a window "of the target domain name's RRSets" > of opportunity is available, which implies that a short TTL makes > spoofing far more viable. > 4.2. Matching the question section > > DNS packets, both queries and answers, contain a question section. > Incoming answers should be verified to have a question section that > is equivalent to that of the outgoing query. This is what can be read from the examples in RFC 1034, since they all repeat the original question in the question section. "Equivalent" obviously means that there is no bitwise comparison, which I consider a "Good Thing" for reasons of protocol consistency. > 4.3. Matching the ID field > > The DNS ID field is 16 bits wide, meaning that if full use is made of > all these bits, and if their contents are truly random, it will > require on average 32768 attempts to guess. Anecdotal evidence > suggests there are implementations utilising only 14 bits, meaning on > average 8192 attempts will suffice. I'd suggest a bit more defensive wording here, since this is but one implementation: Weaknesses in implementations might reduce the necessary effort by not utilizing the full ID space (e.g. only 14 bits, leading to 8192 attempts on average) or by producing predictable ID sequences. > 4.4. Matching the source address of the authentic answer > > Most domains have two or three authoritative nameservers, which make s/most domains/many zones/; > matching the source address of the authentic answer very likely with > even a naive choice having a double digit success rate. The DNS specification requires at least two name servers per zone and many zones actually do not extend beyond this number. This makes matching ... > It should be noted that meeting this condition entails being able to > transmit packets on behalf of the address of the authoritative > nameserver. While two Best Current Practice documents ([RFC2827] and > [RFC3013] specifically) direct Internet access providers to prevent > their customers from assuming IP addresses that are not assigned to > them, these recommendations are not universally (nor even widely) > implemented. This is a basic premise that IMHO should be elevated to the top of this section. Without being able to spoof the source address, the odds of hitting the right one are irrelevant. > 4.5. Matching the destination address of the authentic answer This is more about the destination port than the destination address, isn't it? > Note that the destination address of the authentic answer is the > source address of the original question. > > The actual address of a recursing nameserver is generally known; the That's true for the address accepting the stubs' queries, not necessarily for the address used to generate the resolver's queries. Of course, the latter can be eaasily determined. > If multiple ports are used for sending questions, this enlarges the > effective address space by a factor equal to the number of ports > used. s/effective address space/effective ID space/ > It should be noted that a firewall will not prevent the matching of > this address, as it will accept answers that (appear) to come from > the correct address, offering no additional security. This assumes a stateless packet filter? It might be worth mentioning NAT explicitly here since port rewriting at the NAT might actually reduce the effect of port randomization (RFC 4787). > 4.6. Have the answer arrive before the authentic answer > > Once any packet has matched the previous four conditions (plus > possible additional conditions), no further answers are generally > accepted. > > This means that the third party has a limited time in which to inject > its spoofed answer, typically in the order of at most 100ms > (depending on the network distance to the authentic authoritative > nameserver). This figure comes out of the blue? > This time period can be far longer if the authentic authoritative > nameservers are (briefly) overloaded by queries, perhaps by the > attacker. > 5. Birthday attacks > > The so called birthday paradox implies that a group of 23 people > suffices to have a more than even chance of having two or more > members of the group share a birthday. > > An attacker can benefit from this exact phenomenon if it can force > the target resolver to have multiple equivalent outstanding questions > at any one time to the same authoritative server. Only if these queries use different IDs, so "equivalent" needs to be specified more clearly. > Any packet the attacker sends then has a much higher chance of being > accepted because it only has to match any of the outstanding queries > for that single domain. Compared to the birthday analogy above, of > the group composed of questions and answers, the chance of having any > of these share an ID rises quickly. > > As long as small numbers of questions are sent out, the chance of > successfully spoofing an answer rises linearly with the number of > outstanding questions for the exact domain and nameserver. > > For larger numbers this effect is less pronounced. > > More details are available in US-CERT [vu-457875]. Now, section 5 is only descriptive without any obvious connclusions. First, I'd rather see this in an appendix and the "thou shalt not have multiple outstanding queries with QNAME/QTYPE/QCLASS to the same name server share the query ID or source port number" made explicit. > 6. Accepting only in-zone answers in-domain (see below). > Answers from authoritative nameservers often contain information that > is not part of the zone for which we deem it authoritative. As an > example, a query for the MX record of a domain might get as its > answer a mail exchanger in another domain, and additionally the IP > address of this mail exchanger. > > If accepted uncritically, the resolver stands the chance of accepting > data from an untrusted source. Care must be taken to only accept > data if it is known that the originator is authoritative for that > data. Since the resolver doesn't and shouldn't know about zone cuts, you can't determine this. So, it's "authoritative for that zone containing the data or for any parent". > One very simple way to achieve this is to only accept data if it is > part of the domain we asked the question for. Correct here. However, this whole section is independent of the rest, so I'd suggest to re-order a bit (which will be done by moving 7 and 8 to the appendix, see below). Also, this recommendation is the one that aims at "name chaining", so it might want to explicitly say that. Also, some example could help here: ;; QUESTION SECTION: ;Example.NET. IN MX ;; ANSWER SECTION: Example.NET. 86400 IN MX 10 mx1.example.org. ;; AUTHORITY SECTION: Example.NET. 86400 IN NS ns3.example.org. Example.NET. 86400 IN NS ns2.example.com. Example.NET. 86400 IN NS ns1.Example.NET. ;; ADDITIONAL SECTION: mx1.example.org. 86400 IN A 192.0.2.16 ns1.Example.NET. 86400 IN A 192.0.2.32 ns2.example.com. 86400 IN A 192.0.2.64 ns3.example.org. 86400 IN AAAA 2001:DB8::53 The resolver SHOULD/MAY ignore all RRSets not owned at or below Example.NET. > 7. Combined difficulty > > Given a known or static destination port, matching ID field, source > and destination address requires on average in the order of 2 * 2^15 > = 65000 packets, assuming a domain has 2 authoritative nameservers. s/domain/zone/ > If the window of opportunity available is around 100ms, as assumed > above, an attacker would need to be able to briefly transmit 650000 > packets/s to have a 50% chance to get spoofed data accepted on the > first attempt. [...] This whole section I'd also rather see in an appendix, otherwise it distracts from the actual recommendations. > 8. Discussion > > The calculations above indicate the relative ease with which DNS data > can be spoofed. For example, using the formula derived earlier on a > domain with a 3600 second TTL, an attacker sending 7000 fake answer s/domain/RRSet/ > packets/s (a rate of 4.5Mb/s), stands a 10% chance of spoofing a > record in the first 24 hours, which rises to 50% after a week. > > For a domain with a TTL of 60 seconds, the 10% level is hit after 24 s/domain/RRSet/ > minutes, 50% after less than 3 hours, 90% after around 9 hours. > > Note that the attacks mentioned above can be detected by watchful > server operators - an unexpected incoming stream of 4.5mbit/s of > packets might be noticed. > > An important assumption however in these calculations is a known or > static destination port of the authentic answer. > > If that port number is unknown and needs to be guessed as well, the > problem space expands by a factor of 64000, leading the attacker to > need in excess of 285Gb/s to achieve similar success rates. > > Such bandwidth is not generally available, nor expected to be so in > the foreseeable future. This whole section 8 also should go into an appendix, since it is a calculation example based on figures estimated around tghe time of writing. While it supports the claim that spoofing is doable, there's no immediate recommendation following. > Note that some firewalls may need reconfiguring if they are currently > setup to only allow outgoing queries from a single DNS source port. This important operational consideration needs to be more prominently adddressed (see below). > 9. Countermeasures More explicit: "Recommendations" or "Recommended Countermeasures" > Given the above, a resolver implementation MUST match answers to the > following attributes of the question: > > o Remote address > > o Local address More precisely: The response source IP address MUST match the query's destination IP address and the response destination IP address MUST match the query's source IP address. > o Query port would this include UDP source (whatever that's worth) and destination ports? > o Query ID > > o Question name (compared case-insensitively) > > o Question class and type Use QNAME, QCLASS and QTYPE here. > before applying DNS trustworthiness rules. A mismatch should be > considered a format error, and the answer invalid. So, instead of ignoring the fake response, will see a FORMERR or a SERVFAIL? > Resolver implementations MUST have the ability to: > > o Use an unpredictable source port for outgoing queries from a range > (53, or > 1024) of ports that is as large as possible and > practicable; Maybe use >= 1024 and give some reasoning for the choice to avoid "privileged" ports discussion. Some ports are definitely bad choices (e.g. the "daytime" port) anyway, so starting at 1024 is OK, but needs and explanation. > o Use multiple different source ports simultaneously in case of > multiple outstanding questions; Shouldn't this be independent of the number of active queries? > o Use an unpredictable query ID for outgoing queries, utilizing the > full range available (0-65535); Mention already here that the port number needs to be "unpredictable". > In case these abilities are enabled, the implementation MUST strive > to have its choices of source port and question ID remain > unpredictable, even if an attacker has knowledge of its > (pseudo-)random generator. "MUST strive to" is a strange use of normative language. > If a resolver is multihomed or otherwise has the ability to transmit > and receive datagrams using more than one IP source address, then an > IP address can be chosen at random in order to increase an attacker's > difficulty in guessing what address to flood. Subject to address selection guidelines at least for IPv6 ... > If a resolver sends out multiple equivalent questions to any > authoritative server, before receiving an answer, all MUST have > identical ID, source address and source port. See above, "equivalent" is really "identical" here. > Resolvers SHOULD favour authoritative nameservers with which a trust > relation has been established; That would need an explanation ... > Stub-resolvers SHOULD be able to use > TSIG ([RFC2845]) or IPSEC ([RFC2401]) when communicating with their > recursive resolver. This is out of the scope of this document, isn't it? > In case a cryptographic verification of answer validity is available, > resolver implementations MAY waive above rules, and rely on this > guarantee instead. Why not name "cryptographic verification" DNSSEC? However, "answer validity" isn't what DNSSEC delivers. ``In case data origin authetication can be assured by means of DNSSEC, resolvers MAY waive above rules.'' > 10. Security Considerations > > This document provides clarification of the DNS specification to > decrease the probability that DNS answers can be successfully forged. > Recommendations found above should be considered complementary to > possible cryptographical enhancements of the domain name system. (nit: use caps) > A resolver that does not implement the recommendations outlined above > can easily be forced to accept spoofed answers, which in turn are > passed on to client computers - misdirecting (user) traffic to > possibly malicious entities. > > This document directly impacts the security of the Domain Name > System, implementers are urged to follow its recommendations. > > Most security considerations can be found in Section 5, while > proposed countermeasures are described in Section 9. > > For brevity's sake, in lieu of repeating the security considerations > references, the reader is referred to these sections. delete these 2 lines. > Nothing in this document specifies specific algorithms for operators > to use; it does specify algorithms implementations SHOULD or MUST > support. Well, the lack of operational considerations is a gap in need of filling. That said, it's difficult to find these "algorithms" and the wording should probably not use the 2119 keywords ("specifies mandatory to implement algorithms"). > The above notwithstanding, it should be noted that using a low Time > To Live for DNS records raises the chances of an attacker spoofing a > resolver. Now, is this an operational recommendation? > 12. Normative References > > [RFC1034] Mockapetris, P., "Domain names - concepts and facilities", > STD 13, RFC 1034, November 1987. > > [RFC1035] Mockapetris, P., "Domain names - implementation and > specification", STD 13, RFC 1035, November 1987. > > [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate > Requirement Levels", BCP 14, RFC 2119, March 1997. RFC 2181 missing here as normative reference. > [RFC2401] Kent, S. and R. Atkinson, "Security Architecture for the > Internet Protocol", RFC 2401, November 1998. move to informative, same for probably all of the remaining references Concluding remarks: The document should be more clear who the target audience is (resolver vendors and operators) and which recommendation aims at which part of that audience. That is, independent of the required abilities of the resolvers we need recommendations for default settings (@vendors) and good configurations (@ops). The document also needs to address issues that arise from port number randomizations, especially in the context of NAT and firewalls/packet filters: a wide range of source ports may open up the host to port scanning and may need interaction with a packet filter. NAT boxes may reduce the effectiveness of port randomization. Wide(r) adoption of port randomization may increase the number of packet flows for both the operators of resolvers _and_ of authoritative servers. In general, while the document provides lots of useful information and more or less agreed upon advice, it needs more structure to seperate the detailed tutorial style information from the actual implementation (and configuration) specifications. Also, it should be more explicit as to what the actual novelty is, probably right away in the Security Considerations: ``This document recommends the use of UDP source port number randomization to extend the effective DNS transaction ID beyond the available 16 bits.'' -Peter -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From c.mcfadden@fbuberkshire.co.uk Tue May 27 11:06:57 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0AB3A3A6877; Tue, 27 May 2008 11:06:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.032 X-Spam-Level: X-Spam-Status: No, score=-14.032 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HTTP_ESCAPED_HOST=0.134, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SUBJECT_FUZZY_TION=0.156, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OS1Tq2uS3CpG; Tue, 27 May 2008 11:06:50 -0700 (PDT) Received: from corporat201-245000169.sta.etb.net.co (unknown [201.245.0.169]) by core3.amsl.com (Postfix) with SMTP id 73E193A6A6A; Tue, 27 May 2008 11:06:14 -0700 (PDT) X-Originating-IP: 68.252.48.162 by smtp.201.221.149.220; Tue, 27 May 2008 14:05:42 -0500 Message-ID: From: "Esperanza Hardy" Reply-To: "Esperanza Hardy" To: discuss-bounces@ietf.org Subject: Inexpensive Louis Vuitton bags Date: Tue, 27 May 2008 14:05:42 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Breitling watch is a statement not just of wealth, but of sophistication... it's a way to show the world that you are a man in charge of your life and that you know exactly what you want. Surely, among those things you do want is a bigger budget. So, why not kill two birds with one stone? Getting a replica Breitling wristwatch and keeping your budget practically untouched! http://www%2Eoidoido%2Ecom/ Thanks to Prestige Replicas it is now possible! With an astonishing collection of replica Breitling timepieces at rock bottom prices, Selissia will make the delights of quality watches lovers. It offers excellent quality timepieces at unsurpassed prices; a privacy-assured guarantee, incomparable customer service, and what's better: 15% off when you buy two watches! http://www%2Eoidoido%2Ecom/ From c.esteves@lesitedumariage.com Tue May 27 11:14:59 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E438E3A67F3; Tue, 27 May 2008 11:14:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.392 X-Spam-Level: X-Spam-Status: No, score=-8.392 tagged_above=-999 required=5 tests=[BAYES_80=2, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HTTP_ESCAPED_HOST=0.134, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HAEbROZZNEuL; Tue, 27 May 2008 11:14:50 -0700 (PDT) Received: from ppp-124-121-112-245.revip2.asianet.co.th (ppp-124-121-112-245.revip2.asianet.co.th [124.121.112.245]) by core3.amsl.com (Postfix) with SMTP id 47BF13A6A32; Tue, 27 May 2008 11:13:54 -0700 (PDT) X-Originating-IP: 128.12.137.116 by smtp.124.121.112.245; Tue, 27 May 2008 14:14:10 -0500 Message-ID: From: "Gail Kim" Reply-To: "Gail Kim" To: discuss-bounces@ietf.org Subject: Spring quality watches offer Date: Tue, 27 May 2008 14:14:10 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Everybody knows that a Cartier watch is a silent statement of wealth and luxury. But we all know as well that the price of putting one of them on your wrist is for the most unaffordable by the average Joe. That's why replica Cartier watches are becoming more and more popular by the day. They're actually the affordable solution to this dilemma. And thanks to the internet, there is now a place where the highest quality Cartier replicas are available: Prestige Replicas. So, why not take a look at the extensive inventory that this site has to offer? After all, browsing through their hundreds of Cartier watches is absolutely free, and buying the one of your dreams is simply inexpensive. http://www%2Eacoskke%2Ecom/ From owner-namedroppers@ops.ietf.org Wed May 28 09:16:08 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A91F73A69F3; Wed, 28 May 2008 09:16:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.495 X-Spam-Level: X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f+mOFb5ucDKD; Wed, 28 May 2008 09:16:03 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id D046C3A6808; Wed, 28 May 2008 09:15:59 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1O9f-000Jrb-Vj for namedroppers-data@psg.com; Wed, 28 May 2008 16:05:35 +0000 Received: from [157.185.61.2] (helo=M4.sparta.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1O96-000JmY-0Q for namedroppers@ops.ietf.org; Wed, 28 May 2008 16:05:17 +0000 Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id m4SG4upa015652 for ; Wed, 28 May 2008 11:04:58 -0500 Received: from garak.ads.sparta.com (garak.sparta.com [157.185.63.81]) by Beta5.sparta.com (8.12.11/8.13.1) with ESMTP id m4SG4smn023105; Wed, 28 May 2008 11:04:54 -0500 Received: from mailbin2.ads.sparta.com ([157.185.85.6]) by garak.ads.sparta.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 28 May 2008 11:04:54 -0500 Received: from [192.168.1.2] ([70.21.21.3]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959); Wed, 28 May 2008 12:12:11 -0400 Mime-Version: 1.0 (Apple Message framework v753) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Suresh Krishnaswamy Subject: DNSSEC Validator API Draft - 06 Date: Wed, 28 May 2008 12:04:45 -0400 To: IETF DNSEXT WG X-Mailer: Apple Mail (2.753) X-OriginalArrivalTime: 28 May 2008 16:12:11.0234 (UTC) FILETIME=[95B9B420:01C8C0DD] X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (M4.sparta.com [157.185.61.2]); Wed, 28 May 2008 11:04:58 -0500 (CDT) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion Folks, A revised version of the DNSSEC validator API is posted at: http://tools.ietf.org/id/draft-hayatnagarkar-dnsext-validator-api-06.txt The functions in this API are broadly structured into three categories -- the first set contains replacement functions for currently used DNS resolver functions; the second set contains functions that allows applications to inspect detailed results of DNSSEC validation (if they require this information); the third set contains functions that enable a user to control validator behavior through local policy. There's a broad list of error codes that are defined, and these are mostly extracted from the list that was generated during various brainstorming sessions at previous IETF meetings. However, instead of directly using these error codes applications can also use a set of wrapper functions to easily determine if a particular response is valid or no. I believe that there are applications that will benefit from being able to view the results of DNSSEC validation. The sooner we have a standardized way of expressing the API between the application and a stub resolver, the easier it will be for application developers who want to quickly add DNSSEC support to their applications. I'd encourage folks to take a moment to review this API and provide comments if any. Regards, Suresh -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Wed May 28 10:04:55 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 31C4F28C126; Wed, 28 May 2008 10:04:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.495 X-Spam-Level: X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dF8vrQSSIVFC; Wed, 28 May 2008 10:04:54 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id E1E053A6944; Wed, 28 May 2008 10:04:41 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1OxR-0002Rv-0v for namedroppers-data@psg.com; Wed, 28 May 2008 16:57:01 +0000 Received: from [217.147.82.63] (helo=mail.avalus.com) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1Owk-0002IQ-P8 for namedroppers@ops.ietf.org; Wed, 28 May 2008 16:56:30 +0000 Received: from [192.168.100.3] (localhost [127.0.0.1]) by mail.avalus.com (Postfix) with ESMTP id 23194C2DA3; Wed, 28 May 2008 17:56:09 +0100 (BST) Date: Wed, 28 May 2008 17:56:07 +0100 From: Alex Bligh Reply-To: Alex Bligh To: Suresh Krishnaswamy , IETF DNSEXT WG cc: Alex Bligh Subject: Re: DNSSEC Validator API Draft - 06 Message-ID: <7EDE11DA608E3BAD49DFF002@Ximines.local> In-Reply-To: References: X-Mailer: Mulberry/4.0.8 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion --On 28 May 2008 12:04:45 -0400 Suresh Krishnaswamy wrote: > A revised version of the DNSSEC validator API is posted at: > http://tools.ietf.org/id/draft-hayatnagarkar-dnsext-validator-api-06.txt A quick search on google suggests #include might not be a good idea. How about #include You might want to consider whether there is any potential for namespace collisions for some of the other things that file defines. I realise there are ways around collisions but there seems little reason to create problems for existing applications. Alex -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Wed May 28 10:53:16 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AB77A3A6C85; Wed, 28 May 2008 10:53:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.048 X-Spam-Level: X-Spam-Status: No, score=-1.048 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zSb37UYCOKkr; Wed, 28 May 2008 10:53:11 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id EC7923A6AE4; Wed, 28 May 2008 10:53:10 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1PkB-000CEO-Pu for namedroppers-data@psg.com; Wed, 28 May 2008 17:47:23 +0000 Received: from [199.212.90.4] (helo=monster.hopcount.ca) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1Pjk-000C9A-LI for namedroppers@ops.ietf.org; Wed, 28 May 2008 17:47:11 +0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=monster; d=ca.afilias.info; h=Received:Cc:Message-Id:From:To:In-Reply-To:Content-Type:Content-Transfer-Encoding:Mime-Version:Subject:Date:References:X-Mailer; b=dacV/PCApoQOd0O9aU30hunMkstTRKOyo4U//AoD4Glu8ngAQ59PMNRweoTRxzLsDcD+9m4sB6NZiTjyBf3E+A+TMakNZtqBn+OP2nFHvMhA5/7R+6lganRAz7D7G5es; Received: from [196.200.216.47] (helo=dhcp-216-47.wifi.ws.afnog.org) by monster.hopcount.ca with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1PQA-000FAJ-38; Wed, 28 May 2008 17:26:43 +0000 Cc: Suresh Krishnaswamy , IETF DNSEXT WG Message-Id: <97A3C1D6-CEA0-4C15-A607-4F6987213B4C@ca.afilias.info> From: Joe Abley To: Alex Bligh In-Reply-To: <7EDE11DA608E3BAD49DFF002@Ximines.local> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Subject: Re: DNSSEC Validator API Draft - 06 Date: Wed, 28 May 2008 17:22:57 +0000 References: <7EDE11DA608E3BAD49DFF002@Ximines.local> X-Mailer: Apple Mail (2.919.2) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On 28 May 2008, at 16:56, Alex Bligh wrote: > --On 28 May 2008 12:04:45 -0400 Suresh Krishnaswamy > wrote: > >> A revised version of the DNSSEC validator API is posted at: >> http://tools.ietf.org/id/draft-hayatnagarkar-dnsext-validator-api-06.txt > > A quick search on google suggests > #include > might not be a good idea. How about > #include or even #include > You might want to consider whether there is any potential for > namespace > collisions for some of the other things that file defines. I realise > there are ways around collisions but there seems little reason to > create problems for existing applications. Joe -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Wed May 28 20:26:35 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 84F603A692C; Wed, 28 May 2008 20:26:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.474 X-Spam-Level: X-Spam-Status: No, score=-1.474 tagged_above=-999 required=5 tests=[AWL=-0.776, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_EQ_FR=0.35, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9zK89aNulLxm; Wed, 28 May 2008 20:26:34 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 27B653A6CE0; Wed, 28 May 2008 20:26:07 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1YbG-000NCu-40 for namedroppers-data@psg.com; Thu, 29 May 2008 03:14:46 +0000 Received: from [91.121.26.85] (helo=givry.fdupont.fr) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1Yb4-000NB2-Um for namedroppers@ops.ietf.org; Thu, 29 May 2008 03:14:40 +0000 Received: from givry.fdupont.fr (localhost [127.0.0.1]) by givry.fdupont.fr (8.13.8/8.13.8) with ESMTP id m4PKpQ8w009427; Sun, 25 May 2008 22:51:26 +0200 (CEST) (envelope-from dupont@givry.fdupont.fr) Message-Id: <200805252051.m4PKpQ8w009427@givry.fdupont.fr> From: Francis Dupont To: Scott Rose cc: namedroppers@ops.ietf.org Subject: Re: Meeting at IETF-71 in Dublin In-reply-to: Your message of Thu, 22 May 2008 12:24:31 EDT. <48359E3F.6070508@nist.gov> Date: Sun, 25 May 2008 22:51:26 +0200 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion In your previous mail you wrote: For what it's worth, I support this draft becoming a WG document. => fine, thanks! Two comments for the Security Considerations section: 1. From the security folk I've talked too, HMAC-SHA1 is still considered "good enough" beyond 2010, which is the time SHA-1 is considered weak for digital signatures. Something about the shared secret makes up for the potential weakness in SHA-1. No, I don't fully understand either but they assure me it's acceptable. => there were some bad things discovered about SHA-1, this is why the recommendation is to go to SHA-256 (note SHA-224 is enough but it was not mandatory to support). 2. Would it be a good idea to give some guidance on length of the HMAC-SHAXXX shared secret? I've always referred to the NIST Special Publication 800-57 part 1 dealing with security strengths. The rule of thumb there is 80 bits now until 2010, then 112 bits. The string can be longer, but must contain at least 80 bits of "randomness". I don't remember in which document there are suggestions for TSIG shared secret length, so why not here? => this is common knowledge (or should be :-). The shared secret should have a least half of the bits (so SHA-1 -> 80, SHA-224 -> 112) and when it is longer than the number of the hash it is hashed before to be used, so longer than the hash gives no more entropy. BTW this is only bound to hash algorithms, not to TSIG, so we can consider the right guidelines are already included into the references (if it is not the case it has to be fixed by the security area directors (if no reference is available) or with their help (if a reference is available but not pointed to)). Thanks Francis.Dupont@fdupont.fr -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Wed May 28 21:03:54 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 923763A6CE3; Wed, 28 May 2008 21:03:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.6 X-Spam-Level: X-Spam-Status: No, score=-3.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_INFO=1.448, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zgqKSjBuGVAh; Wed, 28 May 2008 21:03:49 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 077A63A6B32; Wed, 28 May 2008 21:03:49 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1ZFA-00031u-Cy for namedroppers-data@psg.com; Thu, 29 May 2008 03:56:00 +0000 Received: from [207.219.45.62] (helo=mx4.ca.afilias.info) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1ZEz-00030M-Hc for namedroppers@ops.ietf.org; Thu, 29 May 2008 03:55:54 +0000 Received: from briand-vpn.int.libertyrms.com ([10.1.7.90]) by mx4.ca.afilias.info with esmtp (Exim 4.22) id 1K1ZEy-0004r9-Uv for namedroppers@ops.ietf.org; Wed, 28 May 2008 23:55:48 -0400 Message-ID: <483E293A.2080001@ca.afilias.info> Date: Wed, 28 May 2008 23:55:38 -0400 From: Brian Dickson User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: namedroppers@ops.ietf.org Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? References: <20080526202156.GQ21327@commandprompt.com> <721B082B-DC1E-4E28-BBA2-F20DEFF81EF1@ca.afilias.info> In-Reply-To: <721B082B-DC1E-4E28-BBA2-F20DEFF81EF1@ca.afilias.info> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-SA-Exim-Mail-From: briand@ca.afilias.info X-SA-Exim-Scanned: No; SAEximRunCond expanded to false Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On 26 May 2008, at 20:21, Andrew Sullivan wrote: > This message starts a seven-day request to the Working Group asking > whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a > working group item. I have read this document, and support its adoption by the working group. Brian -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Thu May 29 08:57:09 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5C5C828C263; Thu, 29 May 2008 08:57:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.495 X-Spam-Level: X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PrV1c6lXFpwn; Thu, 29 May 2008 08:57:08 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id C8E423A6C0C; Thu, 29 May 2008 08:54:16 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1kJd-000FlM-40 for namedroppers-data@psg.com; Thu, 29 May 2008 15:45:21 +0000 Received: from [66.92.146.160] (helo=ogud.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1kJ8-000Fgb-3r for namedroppers@ops.ietf.org; Thu, 29 May 2008 15:45:06 +0000 Received: from [10.31.201.14] (mail.md.ogud.com [10.20.30.6]) by ogud.com (8.13.1/8.13.1) with ESMTP id m4TFiduW002158; Thu, 29 May 2008 11:44:40 -0400 (EDT) (envelope-from Ed.Lewis@neustar.biz) Mime-Version: 1.0 Message-Id: In-Reply-To: <20080526202156.GQ21327@commandprompt.com> References: <20080526202156.GQ21327@commandprompt.com> Date: Thu, 29 May 2008 11:44:24 -0400 To: Andrew Sullivan From: Edward Lewis Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? Cc: namedroppers@ops.ietf.org Content-Type: text/plain; charset="us-ascii" ; format="flowed" X-Scanned-By: MIMEDefang 2.63 on 10.20.30.6 Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion At 16:21 -0400 5/26/08, Andrew Sullivan wrote: >Dear colleagues, > >This message starts a seven-day request to the Working Group asking >whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a >working group item. > >You can find the text of the draft at >. Sure, adopt it. I have a request (for the editor) - can the security considerations reference material with greater detail on why MD5 is a bad idea? No need to write more there, just some references to material that goes into the crypto-gunk reasons. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Edward Lewis +1-571-434-5468 NeuStar Never confuse activity with progress. Activity pays more. -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Thu May 29 12:16:27 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E28E33A69E2; Thu, 29 May 2008 12:16:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.25 X-Spam-Level: X-Spam-Status: No, score=-3.25 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 39l1BO6rIHUQ; Thu, 29 May 2008 12:16:26 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 9BE5B3A684D; Thu, 29 May 2008 12:16:26 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1nUG-000EcC-Jw for namedroppers-data@psg.com; Thu, 29 May 2008 19:08:32 +0000 Received: from [81.91.160.182] (helo=office.denic.de) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1nTr-000EYd-J8 for namedroppers@ops.ietf.org; Thu, 29 May 2008 19:08:19 +0000 Received: from denic.de ([10.122.65.99]) by office.denic.de with esmtp id 1K1nTn-0006am-Qi; Thu, 29 May 2008 21:08:05 +0200 Received: by unknown.office.denic.de (Postfix, from userid 501) id B9288643D74; Thu, 29 May 2008 21:08:20 +0200 (CEST) Date: Thu, 29 May 2008 21:08:20 +0200 From: Peter Koch To: IETF DNSEXT WG Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? Message-ID: <20080529190820.GA27248@unknown.office.denic.de> References: <20080526202156.GQ21327@commandprompt.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20080526202156.GQ21327@commandprompt.com> User-Agent: Mutt/1.4.2.1i Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On Mon, May 26, 2008 at 04:21:56PM -0400, Andrew Sullivan wrote: > Please respond to the call by 21:00 UTC on 2008-06-02 if you wish that > the draft be adopted, or if you wish that it not be adopted. Please > state your reasons, especially if you are in opposition. favoring adoption does not necessarily mean agreeing with the draft, so here's my "yes" vote. For the reason of making this distinction see the review below: > Internet-Draft ISC > Intended status: Standards Track May 11, 2008 Updates: RFC 2930, RFC 2845, RFC 4635 > Deprecated HMAC MD5 in TSIG Deprecation of HMAC MD5 in the DNS TSIG and TKEY Resource Records > But it failed to deprecate the HMAC MD5 algorithm. This document is > targeted to correct this point, in details: This was a conscious decision at that time, IIRC, wasn't it? > 2. IANA Considerations Move this to the end. > In the registry of TSIG algorithm names, add this comment > "(deprecated, see hmac-sha256)" in the HMAC-MD5.SIG-ALG.REG.INT > entry. > > This is copied from the registry of DNSSEC algorithm numbers which > was updated by [RFC3110]. Strictly procedurally I do not think a comment in the registry is a good idea. I'd rather have "this" document added to the references list of "HMAC-MD5.SIG-ALG.REG.INT". RFC 3110 set a precedent, but that registry "DNSSEC Algorithm Numbers" already had a "Description" field. An implementer would have to consult the requirements levels anyway, which are part of neither of these registries. (The second sentence above isn't really necessary ;-) > 3. Implementation Requirements > > The table of section 3 of [RFC4635] is updated into: > > +-------------------+--------------------------+ > | Requirement Level | Algorithm Name | > +-------------------+--------------------------+ > | Optional | HMAC-MD5.SIG-ALG.REG.INT | > | Optional | gss-tsig | > | Mandatory | hmac-sha1 | > | Optional | hmac-sha224 | > | Mandatory | hmac-sha256 | > | Optional | hmac-sha384 | > | Optional | hmac-sha512 | > +-------------------+--------------------------+ There's no reference in RFC 4635 explaining what "Optional" and "Mandatory" actually mean, so why not label HMAC-MD5.SIG-ALG.REG.INT "Deprecated" here? > Implementations that support TSIG MUST also implement HMAC SHA1 and > HMAC SHA256 and MAY implement gss-tsig and the other algorithms > listed above. ... MUST implement the algorithms marked Mandatory and MAY implement those marked Optional or Deprecated. > 4. TKEY keying material derivation > > When the TKEY [RFC2930] uses a Diffie-Hellman exchange, the keying > material is derived from the shared secret and TKEY resource record > data using MD5 [RFC1321] at the end of section 4.1 page 8. nit: top of page 9, but better just refer to the section anyway > This is amended into: > > keying material = > XOR ( DH value, SHA256 ( query data | DH value ) | > SHA256 ( server data | DH value ) ) > > using the same conventions. A normative reference to RFC 4634 for SHA256 (well, "SHA-256") is needed here. What would "amended into" mean? are both algorithms now equally available (and distinguished by length)? Or should SHA256 replace MD5 and if yes, wouldn't that be a backwards compatibility issue? > 5. Security Considerations > > The use of MD5 and HMAC MD5 is NOT RECOMMENDED in TSIG and related > specifications (i.e., TKEY). > > But SHA-1 seems to be vulnerable too, so the use of at least SHA256 > is RECOMMENDED. As implementations which support TSIG are REQUIRED This normative language (As .. "REQUIRED") confuses me. > to implement HMAC SHA256, in particular the hmac-sha256 algorithm is > RECOMMENDED for default use in TSIG. Agree with Ed here that a reason for the deprecation of HMAC-MD5 must be given, especially since we've heard that this particular use would not be susceptible to the same attacks as MD5 in digital signatures. >From Francis' earlier message I understand the reason was less cryptographic but pragmatic, expecting the removal of md5 from crypto libraries or enabling the implementor to remove it from their product. And that's why I'm not sure I agree with the draft's recommendation. There's also an operational issue with migration from MD5 to SHA-256 through SHA-1, when MD5 capable software needs to cooperate with products following this advice. One might argue they should at least be able to use SHA-1, but then deprecating SHA-1 is around the corner, as well. Maybe it should be explicitly recommended against its use as of now? > 6. Acknowledgments > Olafur Gudmundsson kindly helped in the procedure to deprecate the > MD5 usage in TSIG, i.e., the procedure which gave this memo. What conspiracy was this? :-) > 7. References > > 7.1. Normative References see above for SHA-256. -Peter -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-namedroppers@ops.ietf.org Thu May 29 13:06:10 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8FAC93A6AD3; Thu, 29 May 2008 13:06:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.518 X-Spam-Level: X-Spam-Status: No, score=-1.518 tagged_above=-999 required=5 tests=[AWL=-1.081, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LS2egeITVIJM; Thu, 29 May 2008 13:06:04 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id B9F0C3A68B6; Thu, 29 May 2008 13:06:04 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1oCG-000K7s-2Z for namedroppers-data@psg.com; Thu, 29 May 2008 19:54:00 +0000 Received: from [76.96.30.32] (helo=QMTA03.emeryville.ca.mail.comcast.net) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K1oBl-000K3z-PZ for namedroppers@ops.ietf.org; Thu, 29 May 2008 19:53:46 +0000 Received: from OMTA14.emeryville.ca.mail.comcast.net ([76.96.30.60]) by QMTA03.emeryville.ca.mail.comcast.net with comcast id XXsl1Z0011HpZEsA300800; Thu, 29 May 2008 19:53:26 +0000 Received: from MIKES-LAPTOM.comcast.net ([69.140.151.110]) by OMTA14.emeryville.ca.mail.comcast.net with comcast id XXtM1Z0092P9w058a00000; Thu, 29 May 2008 19:53:24 +0000 X-Authority-Analysis: v=1.0 c=1 a=6g575_-8RwsA:10 a=R9c_r-XTVJIA:10 a=48vgC7mUAAAA:8 a=10CFcY03AAAA:8 a=qm_S_lIxgHkd46tL9DsA:9 a=R6W7hVjr-4Nq8ZaEYF0A:7 a=kNIwnM42PxX160zn66he2Y2GPpAA:4 a=iyt2JYO3dpYA:10 a=GEO3fhvhlRQA:10 a=gx5bkW9XiUAA:10 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Thu, 29 May 2008 15:53:20 -0400 To: Andrew Sullivan ,namedroppers@ops.ietf.org From: Michael StJohns Subject: Re: Adopt draft-dupont-dnsext-tsig-md5-deprecated as WG draft? In-Reply-To: <20080526202156.GQ21327@commandprompt.com> References: <20080526202156.GQ21327@commandprompt.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion Message-Id: Support adoption and suggest immediate referral to WG last call for publication as an RFC. At 04:21 PM 5/26/2008, Andrew Sullivan wrote: >Dear colleagues, > >This message starts a seven-day request to the Working Group asking >whether we want to adopt draft-dupont-dnsext-tsig-md5-deprecated as a >working group item. > >You can find the text of the draft at >. > >Please respond to the call by 21:00 UTC on 2008-06-02 if you wish that >the draft be adopted, or if you wish that it not be adopted. Please >state your reasons, especially if you are in opposition. > >We note that there was already one comment in support of adopting it, >at >. >We'll consider that an expression of support for the purposes of >deciding. > >Best regards, >Olafur & Andrew > >-- >Andrew Sullivan >ajs@commandprompt.com >+1 503 667 4564 x104 >http://www.commandprompt.com/ > >-- >to unsubscribe send a message to namedroppers-request@ops.ietf.org with >the word 'unsubscribe' in a single line as the message text body. >archive: -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From MAILER-DAEMON Fri May 30 05:24:57 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 328153A698A for ; Fri, 30 May 2008 05:24:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -68.61 X-Spam-Level: X-Spam-Status: No, score=-68.61 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, URIBL_BLACK=20, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7a-QGa8Xtnoc for ; Fri, 30 May 2008 05:24:56 -0700 (PDT) Received: from smtp06-02.prod.mesa1.secureserver.net (smtp06-02.prod.mesa1.secureserver.net [64.202.189.21]) by core3.amsl.com (Postfix) with ESMTP id 02DC43A697B for ; Fri, 30 May 2008 05:24:55 -0700 (PDT) Received: (qmail 1939 invoked for bounce); 30 May 2008 12:24:55 -0000 Date: 30 May 2008 12:24:55 -0000 From: MAILER-DAEMON@smtp06-02.prod.mesa1.secureserver.net To: dnsext-archive@lists.ietf.org Subject: failure notice Message-Id: <20080530122456.02DC43A697B@core3.amsl.com> We're sorry. There's a problem with the e-mail address(es) you're trying to send to. Please verify the address(es) and try again. If you continue to have problems, please contact Customer Support at (480) 624-2500. : child status 100...The e-mail message could not be delivered because there are no users here by that name. --- Below this line is a copy of the message. Return-Path: Received: (qmail 1916 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO pre-smtp30-01.prod.mesa1.secureserver.net) ([10.0.19.130]) (envelope-sender ) by smtp06-02.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for ; 30 May 2008 12:24:55 -0000 Received: (qmail 28572 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO 124.133.148.141) ([124.133.148.141]) (envelope-sender ) by pre-smtp30-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with SMTP for ; 30 May 2008 12:24:53 -0000 Received: from 192.168.75.120 ([192.168.75.120] helo=kPnzgTq) by segment-124-7.sify.net with asmtp (Exim 4.24) id LAyHtl-000ciV-eq; Fri, 30 May 2008 15:24:42 +0400 Message-ID: <00c301c8c247$b24e4680$d213000a@kPnzgTq> From: "Elenna" To: "sxy1gurl23" Subject: You must be looking for me...... Date: Fri, 30 May 2008 15:24:42 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 7bit Good day, gentleman! How are you today? Let me introduce myself. I am a nice lady with a big and tender heart. I am looking for my prince to give him joy and happiness and to share my life with. I think you can be the one I am looking for. I am attractive and kind, joyful and open-minded. I want to find the one who can make me happy, I am looking for my second half and I want to learn you better... If you also want to correspond, you can find me here http://www.findyourlovesite.com Have a nice day Elenna From MAILER-DAEMON Fri May 30 05:24:57 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 40A8E3A697B for ; Fri, 30 May 2008 05:24:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -68.24 X-Spam-Level: X-Spam-Status: No, score=-68.24 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, URIBL_BLACK=20, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s2irh37-snx1 for ; Fri, 30 May 2008 05:24:56 -0700 (PDT) Received: from smtp12-01.prod.mesa1.secureserver.net (smtp12-01.prod.mesa1.secureserver.net [64.202.189.197]) by core3.amsl.com (Postfix) with ESMTP id 3B1413A67CC for ; Fri, 30 May 2008 05:24:56 -0700 (PDT) Received: (qmail 4866 invoked for bounce); 30 May 2008 12:24:55 -0000 Date: 30 May 2008 12:24:55 -0000 From: MAILER-DAEMON@smtp12-01.prod.mesa1.secureserver.net To: dnsext-archive@lists.ietf.org Subject: failure notice Message-Id: <20080530122456.3B1413A67CC@core3.amsl.com> We're sorry. There's a problem with the e-mail address(es) you're trying to send to. Please verify the address(es) and try again. If you continue to have problems, please contact Customer Support at (480) 624-2500. : child status 100...The e-mail message could not be delivered because there are no users here by that name. --- Below this line is a copy of the message. Return-Path: Received: (qmail 4863 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO pre-smtp30-01.prod.mesa1.secureserver.net) ([10.0.19.130]) (envelope-sender ) by smtp12-01.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for ; 30 May 2008 12:24:55 -0000 Received: (qmail 28572 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO 124.133.148.141) ([124.133.148.141]) (envelope-sender ) by pre-smtp30-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with SMTP for ; 30 May 2008 12:24:53 -0000 Received: from 192.168.75.120 ([192.168.75.120] helo=kPnzgTq) by segment-124-7.sify.net with asmtp (Exim 4.24) id LAyHtl-000ciV-eq; Fri, 30 May 2008 15:24:42 +0400 Message-ID: <00c301c8c247$b24e4680$d213000a@kPnzgTq> From: "Elenna" To: "sxy1gurl23" Subject: You must be looking for me...... Date: Fri, 30 May 2008 15:24:42 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 7bit Good day, gentleman! How are you today? Let me introduce myself. I am a nice lady with a big and tender heart. I am looking for my prince to give him joy and happiness and to share my life with. I think you can be the one I am looking for. I am attractive and kind, joyful and open-minded. I want to find the one who can make me happy, I am looking for my second half and I want to learn you better... If you also want to correspond, you can find me here http://www.findyourlovesite.com Have a nice day Elenna From MAILER-DAEMON Fri May 30 05:24:58 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 33DDB3A697B for ; Fri, 30 May 2008 05:24:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -52.37 X-Spam-Level: X-Spam-Status: No, score=-52.37 tagged_above=-999 required=5 tests=[AWL=15.870, BAYES_20=-0.74, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, URIBL_BLACK=20, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oZCTUrRaiTRL for ; Fri, 30 May 2008 05:24:57 -0700 (PDT) Received: from smtp08-02.prod.mesa1.secureserver.net (smtp08-02.prod.mesa1.secureserver.net [64.202.189.25]) by core3.amsl.com (Postfix) with ESMTP id 665D23A67CC for ; Fri, 30 May 2008 05:24:57 -0700 (PDT) Received: (qmail 25453 invoked for bounce); 30 May 2008 12:24:55 -0000 Date: 30 May 2008 12:24:55 -0000 From: MAILER-DAEMON@smtp08-02.prod.mesa1.secureserver.net To: dnsext-archive@lists.ietf.org Subject: failure notice Message-Id: <20080530122457.665D23A67CC@core3.amsl.com> We're sorry. There's a problem with the e-mail address(es) you're trying to send to. Please verify the address(es) and try again. If you continue to have problems, please contact Customer Support at (480) 624-2500. : child status 100...The e-mail message could not be delivered because there are no users here by that name. --- Below this line is a copy of the message. Return-Path: Received: (qmail 25449 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO pre-smtp30-01.prod.mesa1.secureserver.net) ([10.0.19.130]) (envelope-sender ) by smtp08-02.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for ; 30 May 2008 12:24:55 -0000 Received: (qmail 28572 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO 124.133.148.141) ([124.133.148.141]) (envelope-sender ) by pre-smtp30-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with SMTP for ; 30 May 2008 12:24:53 -0000 Received: from 192.168.75.120 ([192.168.75.120] helo=kPnzgTq) by segment-124-7.sify.net with asmtp (Exim 4.24) id LAyHtl-000ciV-eq; Fri, 30 May 2008 15:24:42 +0400 Message-ID: <00c301c8c247$b24e4680$d213000a@kPnzgTq> From: "Elenna" To: "sxy1gurl23" Subject: You must be looking for me...... Date: Fri, 30 May 2008 15:24:42 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 7bit Good day, gentleman! How are you today? Let me introduce myself. I am a nice lady with a big and tender heart. I am looking for my prince to give him joy and happiness and to share my life with. I think you can be the one I am looking for. I am attractive and kind, joyful and open-minded. I want to find the one who can make me happy, I am looking for my second half and I want to learn you better... If you also want to correspond, you can find me here http://www.findyourlovesite.com Have a nice day Elenna From MAILER-DAEMON Fri May 30 05:25:02 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 210E53A6959 for ; Fri, 30 May 2008 05:25:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -71.11 X-Spam-Level: X-Spam-Status: No, score=-71.11 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, URIBL_BLACK=20, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FRDtbISyF29d for ; Fri, 30 May 2008 05:24:56 -0700 (PDT) Received: from smtp10-02.prod.mesa1.secureserver.net (smtp10-02.prod.mesa1.secureserver.net [64.202.189.194]) by core3.amsl.com (Postfix) with ESMTP id A541C3A697D for ; Fri, 30 May 2008 05:24:56 -0700 (PDT) Received: (qmail 5003 invoked for bounce); 30 May 2008 12:24:55 -0000 Date: 30 May 2008 12:24:55 -0000 From: MAILER-DAEMON@smtp10-02.prod.mesa1.secureserver.net To: dnsext-archive@lists.ietf.org Subject: failure notice Message-Id: <20080530122456.A541C3A697D@core3.amsl.com> We're sorry. There's a problem with the e-mail address(es) you're trying to send to. Please verify the address(es) and try again. If you continue to have problems, please contact Customer Support at (480) 624-2500. : child status 100...The e-mail message could not be delivered because there are no users here by that name. --- Below this line is a copy of the message. Return-Path: Received: (qmail 4997 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO pre-smtp30-01.prod.mesa1.secureserver.net) ([10.0.19.130]) (envelope-sender ) by smtp10-02.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for ; 30 May 2008 12:24:55 -0000 Received: (qmail 28572 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO 124.133.148.141) ([124.133.148.141]) (envelope-sender ) by pre-smtp30-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with SMTP for ; 30 May 2008 12:24:53 -0000 Received: from 192.168.75.120 ([192.168.75.120] helo=kPnzgTq) by segment-124-7.sify.net with asmtp (Exim 4.24) id LAyHtl-000ciV-eq; Fri, 30 May 2008 15:24:42 +0400 Message-ID: <00c301c8c247$b24e4680$d213000a@kPnzgTq> From: "Elenna" To: "sxy1gurl23" Subject: You must be looking for me...... Date: Fri, 30 May 2008 15:24:42 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 7bit Good day, gentleman! How are you today? Let me introduce myself. I am a nice lady with a big and tender heart. I am looking for my prince to give him joy and happiness and to share my life with. I think you can be the one I am looking for. I am attractive and kind, joyful and open-minded. I want to find the one who can make me happy, I am looking for my second half and I want to learn you better... If you also want to correspond, you can find me here http://www.findyourlovesite.com Have a nice day Elenna From MAILER-DAEMON Fri May 30 05:25:04 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0038C3A694C for ; Fri, 30 May 2008 05:25:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -85.069 X-Spam-Level: X-Spam-Status: No, score=-85.069 tagged_above=-999 required=5 tests=[AWL=-14.330, BAYES_20=-0.74, URIBL_BLACK=20, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v8VMcfc-YVuk for ; Fri, 30 May 2008 05:24:58 -0700 (PDT) Received: from smtp01-01.prod.mesa1.secureserver.net (smtp01-01.prod.mesa1.secureserver.net [64.202.189.3]) by core3.amsl.com (Postfix) with ESMTP id 8C2C13A67CC for ; Fri, 30 May 2008 05:24:58 -0700 (PDT) Received: (qmail 30064 invoked for bounce); 30 May 2008 12:24:55 -0000 Date: 30 May 2008 12:24:55 -0000 From: MAILER-DAEMON@smtp01-01.prod.mesa1.secureserver.net To: dnsext-archive@lists.ietf.org Subject: failure notice Message-Id: <20080530122458.8C2C13A67CC@core3.amsl.com> We're sorry. There's a problem with the e-mail address(es) you're trying to send to. Please verify the address(es) and try again. If you continue to have problems, please contact Customer Support at (480) 624-2500. : child status 100...The e-mail message could not be delivered because there are no users here by that name. --- Below this line is a copy of the message. Return-Path: Received: (qmail 30044 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO pre-smtp30-01.prod.mesa1.secureserver.net) ([10.0.19.130]) (envelope-sender ) by smtp01-01.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for ; 30 May 2008 12:24:55 -0000 Received: (qmail 28572 invoked from network); 30 May 2008 12:24:55 -0000 Received: from unknown (HELO 124.133.148.141) ([124.133.148.141]) (envelope-sender ) by pre-smtp30-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with SMTP for ; 30 May 2008 12:24:53 -0000 Received: from 192.168.75.120 ([192.168.75.120] helo=kPnzgTq) by segment-124-7.sify.net with asmtp (Exim 4.24) id LAyHtl-000ciV-eq; Fri, 30 May 2008 15:24:42 +0400 Message-ID: <00c301c8c247$b24e4680$d213000a@kPnzgTq> From: "Elenna" To: "sxy1gurl23" Subject: You must be looking for me...... Date: Fri, 30 May 2008 15:24:42 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 7bit Good day, gentleman! How are you today? Let me introduce myself. I am a nice lady with a big and tender heart. I am looking for my prince to give him joy and happiness and to share my life with. I think you can be the one I am looking for. I am attractive and kind, joyful and open-minded. I want to find the one who can make me happy, I am looking for my second half and I want to learn you better... If you also want to correspond, you can find me here http://www.findyourlovesite.com Have a nice day Elenna From owner-namedroppers@ops.ietf.org Fri May 30 07:05:09 2008 Return-Path: X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3BE7428C0F9; Fri, 30 May 2008 07:05:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.174 X-Spam-Level: X-Spam-Status: No, score=-4.174 tagged_above=-999 required=5 tests=[AWL=0.524, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id liLlJR6OMIGy; Fri, 30 May 2008 07:05:08 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id E64403A68F4; Fri, 30 May 2008 07:05:04 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K254S-0009bZ-4Z for namedroppers-data@psg.com; Fri, 30 May 2008 13:55:04 +0000 Received: from [192.134.4.11] (helo=mx2.nic.fr) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1K254H-0009Zr-3f for namedroppers@ops.ietf.org; Fri, 30 May 2008 13:54:58 +0000 Received: from mx2.nic.fr (localhost [127.0.0.1]) by mx2.nic.fr (Postfix) with SMTP id 97F1B1C0104; Fri, 30 May 2008 15:54:47 +0200 (CEST) Received: from relay1.nic.fr (relay1.nic.fr [192.134.4.162]) by mx2.nic.fr (Postfix) with ESMTP id 9274B1C0099; Fri, 30 May 2008 15:54:47 +0200 (CEST) Received: from bortzmeyer.nic.fr (batilda.nic.fr [192.134.4.69]) by relay1.nic.fr (Postfix) with ESMTP id 8FA2DA1DAA2; Fri, 30 May 2008 15:54:47 +0200 (CEST) Date: Fri, 30 May 2008 15:54:47 +0200 From: Stephane Bortzmeyer To: Peter Koch Cc: IETF DNSEXT WG Subject: Re: Review of draft-ietf-dnsext-forgery-resilience-03.txt Message-ID: <20080530135447.GA25553@nic.fr> References: <20080527095222.GC25686@unknown.office.denic.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20080527095222.GC25686@unknown.office.denic.de> X-Operating-System: Debian GNU/Linux lenny/sid X-Kernel: Linux 2.6.24-1-686 i686 Organization: NIC France X-URL: http://www.nic.fr/ User-Agent: Mutt/1.5.17+20080114 (2008-01-14) Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-id: DNSEXT discussion On Tue, May 27, 2008 at 11:52:22AM +0200, Peter Koch wrote a message of 624 lines which said: > > before applying DNS trustworthiness rules. A mismatch should be > > considered a format error, and the answer invalid. > > So, instead of ignoring the fake response, will see a FORMERR or a > SERVFAIL? I am not sure I understand the sentence. You mean to send a FORMERR or SERVFAIL to the original requestor? If that case, it would be easy to DOS the clients of a recursor just by sending fake answers. > > The above notwithstanding, it should be noted that using a low Time > > To Live for DNS records raises the chances of an attacker spoofing a > > resolver. > > Now, is this an operational recommendation? IMHO, no, because there are valid reasons to use low TTL. This sentence is just to be sure that DNS zone managers are aware of the consequences. -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From MAILER-DAEMON Fri May 30 17:33:43 2008 Return-Path: <> X-Original-To: ietfarch-dnsext-archive@core3.amsl.com Delivered-To: ietfarch-dnsext-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A41363A69DC for ; Fri, 30 May 2008 17:33:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4BsBKCULZGAx for ; Fri, 30 May 2008 17:33:42 -0700 (PDT) Received: from mx07.mem.interq.net (mx07.mem.interq.net [210.157.1.53]) by core3.amsl.com (Postfix) with ESMTP id 397373A699F for ; Fri, 30 May 2008 17:33:42 -0700 (PDT) Received: from localhost (localhost) by mx07.mem.interq.net id m4V0Xf6C005752; Sat, 31 May 2008 09:33:41 +0900 (JST) Date: Sat, 31 May 2008 09:33:41 +0900 (JST) From: Mail Delivery Subsystem Message-Id: <200805310033.m4V0Xf6C005752@mx07.mem.interq.net> To: MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="m4V0Xf6C005752.1212194021/mx07.mem.interq.net" Subject: Returned mail: see transcript for details Auto-Submitted: auto-generated (failure) This is a MIME-encapsulated message --m4V0Xf6C005752.1212194021/mx07.mem.interq.net The original message was received at Sat, 31 May 2008 09:33:34 +0900 (JST) from 89-180-36-158.net.novis.pt [89.180.36.158] ----- The following addresses had permanent fatal errors ----- (reason: Can't create output) (reason: Can't create output) ----- Transcript of session follows ----- 550 5.0.0 ... Can't create output 550 5.0.0 ... Can't create output --m4V0Xf6C005752.1212194021/mx07.mem.interq.net Content-Type: message/delivery-status Reporting-MTA: dns; mx07.mem.interq.net Received-From-MTA: DNS; 89-180-36-158.net.novis.pt Arrival-Date: Sat, 31 May 2008 09:33:34 +0900 (JST) Final-Recipient: RFC822; joy@sun.interq.or.jp X-Actual-Recipient: RFC822; me243638@mx07.mem.interq.net Action: failed Status: 5.3.0 Diagnostic-Code: X-Unix; 73 Last-Attempt-Date: Sat, 31 May 2008 09:33:39 +0900 (JST) Final-Recipient: RFC822; jps@sun.interq.or.jp X-Actual-Recipient: RFC822; me246195@mx07.mem.interq.net Action: failed Status: 5.3.0 Diagnostic-Code: X-Unix; 73 Last-Attempt-Date: Sat, 31 May 2008 09:33:40 +0900 (JST) --m4V0Xf6C005752.1212194021/mx07.mem.interq.net Content-Type: text/rfc822-headers Return-Path: Received: from 89-180-36-158.net.novis.pt (89-180-36-158.net.novis.pt [89.180.36.158]) by mx07.mem.interq.net with ESMTP id m4V0XE6C004945; Sat, 31 May 2008 09:33:34 +0900 (JST) Received: from [10.0.29.109] by DSL217-132-22-126.bb.netvision.net.il id r7QGBgC2fb3o; Sat, 31 May 2008 03:33:34 +0400 Message-ID: <006e01c8c2ad$9087aa80$6d1d000a@DSL217-132-22-126.bb.netvision.net.il> From: "Lenny" To: "Philipp" Subject: give me a chance Date: Sat, 31 May 2008 03:33:34 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit --m4V0Xf6C005752.1212194021/mx07.mem.interq.net--