From nobody Fri Apr 1 12:43:27 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A996B12D634 for ; Fri, 1 Apr 2016 12:43:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nzeMBV5M3P5B for ; Fri, 1 Apr 2016 12:43:25 -0700 (PDT) Received: from mail-qg0-x22e.google.com (mail-qg0-x22e.google.com [IPv6:2607:f8b0:400d:c04::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E90A12D5E4 for ; Fri, 1 Apr 2016 12:43:25 -0700 (PDT) Received: by mail-qg0-x22e.google.com with SMTP id y89so105112807qge.2 for ; Fri, 01 Apr 2016 12:43:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-transfer-encoding:mime-version:subject:message-id:date :cc:to; bh=fSt6OdYw8c/jnE7yEESfl2Iyens+mA1QC9JEMHIiyrY=; b=iJxnMAOf/+4HzQwf2abkwRCIu91ZoVGNop/EHqY1KZaQYTxi/mgyHErJC4nOr7Vn7r J6vH+K4vwxK1qUJvOtSsbP2aGwz8QFylwBMIsFToxv2eq2Bq5Xvj6gZ1bC92n3QPj1b+ 8eTVeQHmHa9L3ymylnz+rvJUm1GxOPWhHBszDfOM84XHlRQF1jLKhnN9aZRfarmMepIZ BCQX6yqJ3xoRHJr9YYukBNB4EvI9rfZ+L1LdM+luyo7CHlV/OPQDJVuOXEeydw67YpAI 0TqlUf/gfRIrEaCcq5kziEPVIbT+4vDs+sJOF/cbWmn7DVQQ3ghgOdYHvYRqeymuBNCd QRjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:cc:to; bh=fSt6OdYw8c/jnE7yEESfl2Iyens+mA1QC9JEMHIiyrY=; b=nAwrz/mWVcCDNQvszzo3EuMl7qsLYwF/Qux0LKVXW2raNA4BtmfDDJh7XpsAzInSw7 tQYN8tiVlmHMwoBAkWbkN/ZUDFyAjsR43bmXFKQ9kCaG3++4aL+oWOwtL6gLHugXcrh5 nPKa2naEx3HyILA9iu0jtZH2JICPca5PcHGc7bs5FMj+V7UR/x2Kc6/1ul/MnEN7Jlkt qB/RyyCaFrV5jgQt4E6W3sLvpwZ+M70ldVPfK9LJ0D5WJEhWM4bFfSJrAS+KeHfD9DJY rbE/FB/B3b225uhifC24ih3p3M53PLwBCYqnQQLmYvuAx3orRQk8gf0absgrwZPmbvGk kXWw== X-Gm-Message-State: AD7BkJI3TwE7uZvkcPue7uH5icJv8Io2orlzVbEqax95k0/l4412WqN/f3653Wop644OoQ== X-Received: by 10.140.234.11 with SMTP id f11mr9818790qhc.51.1459539804608; Fri, 01 Apr 2016 12:43:24 -0700 (PDT) Received: from [192.168.1.3] (209-6-124-204.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.124.204]) by smtp.gmail.com with ESMTPSA id w75sm6767114qka.49.2016.04.01.12.43.24 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 01 Apr 2016 12:43:24 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) Message-Id: Date: Fri, 1 Apr 2016 15:43:23 -0400 To: mile@ietf.org X-Mailer: iPhone Mail (12H143) Archived-At: Cc: "stephen. farrell" Subject: [mile] Co-chair volunteers X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 19:43:26 -0000 Hello! With Alexey's transition to AD, we'll need a new co-chair for Take. Please d= rop Stephen & me a message if you are interested. We'll sort through the vo= lunteers and name a new chair soon-ish. Thank you, Kathleen=20 Sent from my iPhone= From nobody Mon Apr 4 13:12:47 2016 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 160E812D14B; Mon, 4 Apr 2016 13:12:45 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.18.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160404201245.15630.59387.idtracker@ietfa.amsl.com> Date: Mon, 04 Apr 2016 13:12:45 -0700 Archived-At: Cc: mile@ietf.org Subject: [mile] I-D Action: draft-ietf-mile-iodef-guidance-05.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Apr 2016 20:12:45 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Managed Incident Lightweight Exchange of the IETF. Title : IODEF Usage Guidance Authors : Mio Suzuki Panos Kampanakis Filename : draft-ietf-mile-iodef-guidance-05.txt Pages : 28 Date : 2016-04-04 Abstract: The Incident Object Description Exchange Format [RFC5070] defines a data representation that provides a framework for sharing information commonly exchanged by Computer Security Incident Response Teams (CSIRTs) about computer security incidents. Since the IODEF model includes a wealth of available options that can be used to describe a security incident or issue, it can be challenging for implementers to develop tools that can Leverage IODEF for incident sharing. This document provides guidelines for IODEF implementers. It will also address how common security indicators can be represented in IODEF and use-cases of how IODEF is being used so far. The goal of this document is to make IODEF's adoption by vendors easier and encourage faster and wider adoption of the model by Computer Security Incident Response Teams (CSIRTs) around the world. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-mile-iodef-guidance-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-iodef-guidance-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Apr 4 13:38:54 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF23112D825; Mon, 4 Apr 2016 13:38:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0QHcNVHRaitR; Mon, 4 Apr 2016 13:38:50 -0700 (PDT) Received: from ns2.nict.go.jp (ns2.nict.go.jp [IPv6:2001:df0:232:300::2]) by ietfa.amsl.com (Postfix) with ESMTP id C03FC12D898; Mon, 4 Apr 2016 13:38:49 -0700 (PDT) Received: from gw2.nict.go.jp (gw2.nict.go.jp [133.243.18.251]) by ns2.nict.go.jp with ESMTP id u34KcmWB022485; Tue, 5 Apr 2016 05:38:48 +0900 (JST) Received: from mail1.nict.go.jp (mail1.nict.go.jp [133.243.18.14]) by gw2.nict.go.jp with ESMTP id u34KcmgB022481; Tue, 5 Apr 2016 05:38:48 +0900 (JST) Received: from [127.0.0.1] (ssh1.nict.go.jp [133.243.3.49]) by mail1.nict.go.jp (NICT Mail Spool Server1) with ESMTP id 139505F7D; Tue, 5 Apr 2016 05:38:44 +0900 (JST) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_1C01352E-D902-493A-856A-005AA3AA1BE0"; protocol="application/pkcs7-signature"; micalg=sha1 From: Mio SUZUKI In-Reply-To: <20160404201245.15630.59387.idtracker@ietfa.amsl.com> Date: Mon, 4 Apr 2016 17:38:42 -0300 Message-Id: <4EC0DE5B-8298-4F29-B8D8-98C2F4EF37AB@nict.go.jp> References: <20160404201245.15630.59387.idtracker@ietfa.amsl.com> To: internet-drafts@ietf.org X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98.7 at zenith2 X-Virus-Status: Clean Archived-At: Cc: mile@ietf.org, i-d-announce@ietf.org Subject: Re: [mile] I-D Action: draft-ietf-mile-iodef-guidance-05.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Apr 2016 20:38:52 -0000 --Apple-Mail=_1C01352E-D902-493A-856A-005AA3AA1BE0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello all, This is Mio from NICT. So sorry for my slow work. Except for examples in =E2=80=9CAppendix=E2=80=9D section, almost all = sections have been filled. Could you please give me all sorts of comments or feedbacks? The summaries of this -05 update are (1) Fix some sentences following Panos-san=E2=80=99s suggestion=20 (2) Changed section title from "Restrictions in IODEF" to "Disclosure = level of IODEF" and added some description (3) Mixed "Recommended classes to implement" section with = "Unnecessary Fields" section into "Minimal IODEF document" section (4) Added description to "Decide what IODEF will be used for" = section, "Implementations" section, and "Security Considerations=E2=80=9D = section To-Do lists are (1) Convert and add examples of spear phishing and watchlist/malware = to "Appendix". (2) Modify examples in "Appendix" to follow the current schema. Following IODEFv2 is better? Currently, only =E2=80=9CMalware = Delivery URL=E2=80=9D sample follows IODEFv2 schema. Regards, mio > 2016/04/04 17:12, internet-drafts@ietf.org: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Managed Incident Lightweight Exchange = of the IETF. >=20 > Title : IODEF Usage Guidance > Authors : Mio Suzuki > Panos Kampanakis > Filename : draft-ietf-mile-iodef-guidance-05.txt > Pages : 28 > Date : 2016-04-04 >=20 > Abstract: > The Incident Object Description Exchange Format [RFC5070] defines a > data representation that provides a framework for sharing = information > commonly exchanged by Computer Security Incident Response Teams > (CSIRTs) about computer security incidents. Since the IODEF model > includes a wealth of available options that can be used to describe = a > security incident or issue, it can be challenging for implementers = to > develop tools that can Leverage IODEF for incident sharing. This > document provides guidelines for IODEF implementers. It will also > address how common security indicators can be represented in IODEF > and use-cases of how IODEF is being used so far. The goal of this > document is to make IODEF's adoption by vendors easier and encourage > faster and wider adoption of the model by Computer Security Incident > Response Teams (CSIRTs) around the world. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-mile-iodef-guidance-05 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-mile-iodef-guidance-05 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile --Apple-Mail=_1C01352E-D902-493A-856A-005AA3AA1BE0 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJqDCCBFkw ggNBoAMCAQICCwQAAAAAATGJxjMGMA0GCSqGSIb3DQEBCwUAMEwxIDAeBgNVBAsTF0dsb2JhbFNp Z24gUm9vdCBDQSAtIFIzMRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu MB4XDTExMDgwMjEwMDAwMFoXDTE5MDgwMjEwMDAwMFowXTELMAkGA1UEBhMCQkUxGTAXBgNVBAoT EEdsb2JhbFNpZ24gbnYtc2ExMzAxBgNVBAMTKkdsb2JhbFNpZ24gUGVyc29uYWxTaWduIDIgQ0Eg LSBTSEEyNTYgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYBOgY+TD0lJ71l 7FcN0/Nzj61Z4eB/NxJMsSxhevgtUUcwxyWYkoHDl+FoQMXe8JSYraOIN7UpZvvDa9fVVpouxlnk 1upfRTHJRpU636SlHTEE5ZnXTYWQ3pTL51oEoPL4fL4OIHHO8Xe0H7X/9nw+N8tNxCCiGKRBMCcH HXuJLeW3pFUISGaVwfc2mye8mjIw+bjIJ6gtjK66WaUW6fWY323qkkS8W9uzdCXKVpGPkZUhsmqW fGlg2msfbx3O8to8LaCk0RqlVvV+g7ZrY7xBwdWGfZKCRd5R1kt2QBYOBtZfRBV7dfPMsjI4XcQU uKyTYpccj7VTvLdaf+B+TZkCAwEAAaOCASkwggElMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8E CDAGAQH/AgEAMB0GA1UdDgQWBBQ/bFdEnlefff1oOcu58RrkuXZQODBHBgNVHSAEQDA+MDwGBFUd IAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5nbG9iYWxzaWduLm5ldC9yb290LXIzLmNybDA+ BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9y b290cjMwHwYDVR0jBBgwFoAUj/BLf6guRSSuTVD6Y5qL3uLdG7wwDQYJKoZIhvcNAQELBQADggEB AGUF26aHSpzgt7hjcu8xUQsY2pcbwzMAS6Eyx+m80XfposXHisFP0qnPEnnbF+GH3/cw2DOFLIXk PBXOeFRSx25VtdtVJPZGQcNeu2Mb2zcDBR950sXb8A/5fd9ZXzGKTf751bAFn4OX1BAYZlcSSILR MiiHpVMQ7rhfC7NChIQoRL7su+oxiIOMHhYkCheGGhnf5kmPDY8f3INUjPlftUpkQ6eBV/yZ0BKp 6w04eK2ha3dSd/GS/f+yoVi2zQGmw4qh8rd9ijsJgjr5qOCK84jRS8Vp7JfKF+RvDk38dzsXdBHu vie5mMmw9DgtzAZ2z93EovkFeQYnWMi6th+PtG0wggVHMIIEL6ADAgECAhEA2O44+rO7W3RMNf9I 71XfpTANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBu di1zYTEzMDEGA1UEAxMqR2xvYmFsU2lnbiBQZXJzb25hbFNpZ24gMiBDQSAtIFNIQTI1NiAtIEcy MB4XDTE1MTExNzA5NDgzOFoXDTE2MTExNzA5NDgzOFowgdAxCzAJBgNVBAYTAkpQMQ4wDAYDVQQI EwVUb2t5bzEQMA4GA1UEBxMHS29nYW5laTFIMEYGA1UEChM/TmF0aW9uYWwgSW5zdGl0dXRlIG9m IEluZm9ybWF0aW9uIGFuZCBDb21tdW5pY2F0aW9ucyBUZWNobm9sb2d5MSEwHwYDVQQLExhDeWJl ciBUYWN0aWNzIExhYm9yYXRvcnkxEzARBgNVBAMTCk1pbyBTdXp1a2kxHTAbBgkqhkiG9w0BCQEW Dm1pb0BuaWN0LmdvLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4utV/H0VcXN6 7AbBrKAtSuWbIGzhss4muPgA7/LqVnnWw6goZGn0Yd9QNQovGoStBeRg5b1syK1IHdjGeQmt9OrF FMP3IbtfRNqMdQwyG6QSnzUG9C5tmzAj3XLXed5wnVr1gbzYyQrCnj+nphIoeSRDELa/qN++YLyc dP/7hz5c7lN8+WcHy+CBkKsKickjahsOIeovSgHd123wSfB0pddcbFCXYqJJ3t3thltwJji6GpWc YgUX8j0y1xXfzK067TokCVnJQEcEuN9Fp53Fj7DQgEd1rfX9UZ8+4rvJthbjczRwAHAWYrqsu1JX g5QUlCpZNmjbvH14LbTMSB8WFQIDAQABo4IBjDCCAYgwDgYDVR0PAQH/BAQDAgWgME0GA1UdIARG MEQwQgYKKwYBBAGgMgEoCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv bS9yZXBvc2l0b3J5LzAZBgNVHREEEjAQgQ5taW9AbmljdC5nby5qcDAJBgNVHRMEAjAAMB0GA1Ud JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDBHBgNVHR8EQDA+MDygOqA4hjZodHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzL2dzcGVyc29uYWxzaWduMnNoYTJnMi5jcmwwWQYIKwYBBQUHAQEETTBL MEkGCCsGAQUFBzAChj1odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3BlcnNv bmFsc2lnbjJzaGEyZzIuY3J0MB0GA1UdDgQWBBT3zxTv7gL4vR1umBxWOn+/8wl9GDAfBgNVHSME GDAWgBQ/bFdEnlefff1oOcu58RrkuXZQODANBgkqhkiG9w0BAQsFAAOCAQEAToO33iX/wJE+Z3WR uLZrJFOeGg04LBeOMSUGeHalVtMonQBIombrcIIJoU5I1wSWxjy7BuZNlCLx5mfodhz3Dsj9az93 dZjnAP8DOHOYFdwbTbexQ/J6ZnzIOpJHmXwEAFFK236i2+8b1cSWZRzUjw+53oCD0TFZNu+OrZIB PE5C0jd28FAsVY4HYgDSPqhsMU1xO6H9vZ2AK4tmz3qYYAXOdPHW4ZyducAygQuHV1mQW4S5esl7 VHkMeCqGCbiXFS7Fh05SLPjwH0QYH2pUSw4BIuciIajhj8EpHyxr+KsvrkXuig5Czowk/o/ZguF3 l8QmUqHgIV4B9wJb4UtTQzGCAwQwggMAAgEBMHIwXTELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEds b2JhbFNpZ24gbnYtc2ExMzAxBgNVBAMTKkdsb2JhbFNpZ24gUGVyc29uYWxTaWduIDIgQ0EgLSBT SEEyNTYgLSBHMgIRANjuOPqzu1t0TDX/SO9V36UwCQYFKw4DAhoFAKCCAWcwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNDA0MjAzODQzWjAjBgkqhkiG9w0BCQQx FgQUMmQCHECq5U116WIicPSLuLY5TF0wgYEGCSsGAQQBgjcQBDF0MHIwXTELMAkGA1UEBhMCQkUx GTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExMzAxBgNVBAMTKkdsb2JhbFNpZ24gUGVyc29uYWxT aWduIDIgQ0EgLSBTSEEyNTYgLSBHMgIRANjuOPqzu1t0TDX/SO9V36UwgYMGCyqGSIb3DQEJEAIL MXSgcjBdMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEzMDEGA1UEAxMq R2xvYmFsU2lnbiBQZXJzb25hbFNpZ24gMiBDQSAtIFNIQTI1NiAtIEcyAhEA2O44+rO7W3RMNf9I 71XfpTANBgkqhkiG9w0BAQEFAASCAQAE8u6r1+qteNDwN8zupsiwQnQ9M0uWRUWAc7AJ8oiIyBZM 64SwzXx9/zVN2528LSCGLIdYs0K6bYPUNslC5tSKblty3i5Cf6MBv3QlZt5ImRJvy2gwMx74jaY0 56adYnnTl0vkquzQUWy+L0ykA3dXePvS99cbCQdN6OPGjjaKCsBFUh7ojaEYwwWWYAe4K9/jsUEV TvK0ih7s/gLHV1OLxXtLqgPuzY8FRl958H5lNC3oSnuXxxINs3fH1qkt9nQ7e21zYrt0aGRrrDan 2M4qfIoKmZVe+tZ/SdtgrYZflQJp+bE5fwsROjaJ0qcrLVfAxVwp1oEeyHxTxIk6eSdfAAAAAAAA --Apple-Mail=_1C01352E-D902-493A-856A-005AA3AA1BE0-- From nobody Mon Apr 4 20:56:26 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0C1012D153 for ; Mon, 4 Apr 2016 20:56:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.012 X-Spam-Level: X-Spam-Status: No, score=-0.012 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bnKi_idApEGV for ; Mon, 4 Apr 2016 20:56:22 -0700 (PDT) Received: from ns1.nict.go.jp (ns1.nict.go.jp [IPv6:2001:df0:232:300::1]) by ietfa.amsl.com (Postfix) with ESMTP id 25DF512D09F for ; Mon, 4 Apr 2016 20:56:22 -0700 (PDT) Received: from gw1.nict.go.jp (gw1.nict.go.jp [133.243.18.250]) by ns1.nict.go.jp with ESMTP id u353uK3Q007148 for ; Tue, 5 Apr 2016 12:56:20 +0900 (JST) Received: from TakeVaioVJP13 (ssh1.nict.go.jp [133.243.3.49]) by gw1.nict.go.jp with ESMTP id u353uIPT007136 for ; Tue, 5 Apr 2016 12:56:19 +0900 (JST) From: "Takeshi Takahashi" To: Date: Tue, 5 Apr 2016 00:56:28 -0300 Message-ID: <058a01d18eef$22e70b30$68b52190$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdGO7whm9Kg/Nms+TemfdkO8p/GnHw== Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith1 X-Virus-Status: Clean Archived-At: Subject: [mile] notetake and jabber scribe X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 03:56:25 -0000 Hello all, The MILE session today will be held at the Quebracho A from 17:40 today The agenda and meeting material for today's session is available online. https://datatracker.ietf.org/meeting/95/agenda.html We are looking for volunteers who could serve as either note takers or jabber scribe for today's session. If you could assist us on this, please kindly let us know; we appreciate that very much. Thank you. Take From nobody Mon Apr 4 21:52:35 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AC8012D0FD for ; Mon, 4 Apr 2016 21:52:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c3Y2jAfBVbgr for ; Mon, 4 Apr 2016 21:52:31 -0700 (PDT) Received: from ns1.nict.go.jp (ns1.nict.go.jp [IPv6:2001:df0:232:300::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F81412D09F for ; Mon, 4 Apr 2016 21:52:31 -0700 (PDT) Received: from gw1.nict.go.jp (gw1.nict.go.jp [133.243.18.250]) by ns1.nict.go.jp with ESMTP id u354qLJi042322; Tue, 5 Apr 2016 13:52:21 +0900 (JST) Received: from TakeVaioVJP13 (ssh1.nict.go.jp [133.243.3.49]) by gw1.nict.go.jp with ESMTP id u354qIiw042271; Tue, 5 Apr 2016 13:52:19 +0900 (JST) From: "Takeshi Takahashi" To: "'Robert Moskowitz'" , "'Nancy Cam-Winget \(ncamwing\)'" , "'Panos Kampanakis \(pkampana\)'" , , References: <56F166CC.4020103@htt-consult.com> <56F17DC8.8000800@yaanatech.com> <56F183BB.1020306@htt-consult.com> <653a830eff764cf382a3ea10b0b90273@XCH-ALN-010.cisco.com> <56F2140F.9020706@htt-consult.com> <56F53423.7050005@htt-consult.com> In-Reply-To: <56F53423.7050005@htt-consult.com> Date: Tue, 5 Apr 2016 01:52:28 -0300 Message-ID: <075301d18ef6$f66c0b70$e3442250$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIwtAXOjQ/CnXa4TkqPkCaJ6jszzAI0jRkkAtt/I+YBhvs5eAEVuONhAXvmTRUB9JyBRZ5jlLfw Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith1 X-Virus-Status: Clean Archived-At: Subject: Re: [mile] Security alert reporting - the firstMILE X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 04:52:34 -0000 Hi Bob and all, My understanding on netconf is rather shallow, but netconf is another XML-based messaging, and it could be interesting to see how the model (developed by the XMPP draft) will be applied to the netconf messages. By the way, in Section 3 (whose title is "Problem Space") of the draft, = you identified the following problem. "It is recognized that many of these alerts are too detailed to be actionable. Some implementations of the alert monitor will include = analytic tools to select the actionable information from the alerts. Alerts = which are too detailed to be actionable or alerts which include analytical = tools are outside of any standardizing process." IMHO, it is a viable concern, and I am wondering how deeply you are = trying to work on this issue in this draft. FYI, we have an draft that provides the guideline of the usage of IODEF document. https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/ Current version of the guidance draft does not cope with the issue you raised. If you are trying to provide some solution, the guidance draft could = refer your draft. But if you are trying to provide only a couple of sentences, the = guidance draft could address this issue. Take > -----Original Message----- > From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Robert = Moskowitz > Sent: Friday, March 25, 2016 9:51 AM > To: Nancy Cam-Winget (ncamwing) ; Panos Kampanakis > (pkampana) ; tony@yaanatech.com; mile@ietf.org > Subject: Re: [mile] Security alert reporting - the firstMILE >=20 > Past two days I have been busy with the holiday of Purim; next week is = my youngest > son's wedding, so responses from me until IETF will be scattered (physically > as well as mentally!). >=20 > On 03/24/2016 06:51 PM, Nancy Cam-Winget (ncamwing) wrote: > > Hi Bob, > > > > The general architecture of the xmpp-draft can cover other protocols > > (like Netconf or TAXII), but as we are defining it in MILE, the = draft > > speaks to the applicability for IODEF. > > > > >From your draft, am not sure if you=B9re creating yet another = pub/sub > > mechanism? If so, would like to see it compared to others (most of > > which could be adapted to carry different data models). >=20 > I was leaving MOST of the higher layer stuff alone for first. Only = Sub is > partially done using NETCONF and that is Sue Hares' contribution from = work being > done elsewhere like in I2RS. >=20 > So taking your work on XMPP and changing the transport model to UDP = and the > security to SSLS, is of interest to me. Over in DOTS we have = discussed > extensively messaging challenges during attacks. MILE would also = benefit from > that design work. >=20 > Plus the NETCONF for sub has a lot to consider. >=20 > As I said, I have a personal bias concerning XMPP; but if the shoe fits.... > Just want to fix up its soles a bit! So to speak. >=20 >=20 > > > > Regards, Nancy > > > > On 3/22/16, 8:57 PM, "mile on behalf of Robert Moskowitz" > > wrote: > > > >> Which is a more complete effort than firstMILE and covers some more > >> areas, but has the challenge of TCP during congestion attacks. = Does not > >> leverage NETCONF for configuration. Has a registration function... > >> > >> Maybe I just have an historical bias with XMPP as I go back to the > >> origin of MQ series from IBM and where they lifted it from work we = did > >> at Chrysler... ;)' > >> > >> But I will read through that draft again. > >> > >> On 03/22/2016 11:24 PM, Panos Kampanakis (pkampana) wrote: > >>> Also overlaps with the XMPP pub/sub model suggested in > >>> https://tools.ietf.org/html/draft-appala-mile-xmpp-grid-00 specifically > >>> for IODEF. > >>> > >>> > >>> > >>> -----Original Message----- > >>> From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Robert Moskowitz > >>> Sent: Tuesday, March 22, 2016 1:41 PM > >>> To: tony@yaanatech.com; mile@ietf.org > >>> Subject: Re: [mile] Security alert reporting - the firstMILE > >>> > >>> My reading of ROLLE here, or the limited information I can find > >>> googling TAXII is that neither address the start of the incident = at the > >>> firewall/IPS/IDS/router. > >>> > >>> firstMILE is to get the attack event into the monitoring systems. There > >>> analytics and/or an admin will determine if mitigation action is needed > >>> and then start action in RID/ROLLE/TAXII. > >>> > >>> Or that is my take on reading existing documents and conversations = at > >>> the past two IETFs. > >>> > >>> On 03/22/2016 01:15 PM, Tony Rutkowski wrote: > >>>> Hi Bob, > >>>> > >>>> There is a lot of puzzlement to go around. > >>>> In trying to track all the parallel universes, are you creating = an > >>>> alternative to TAXII here? > >>>> Or ROLLE come to life? > >>>> > >>>> How would you differentiate firstMILE? > >>>> > >>>> -t > >>>> > >>>> > >>>> On 2016-03-22 11:37 AM, Robert Moskowitz wrote: > >>>>> I have been puzzled by the lack of a standardized security alert > >>>>> reporting process. After a few discussions and a lot of thought = on > >>>>> the problem, I have come up with firstMILE: > >>>> > >>>> > >>> _______________________________________________ > >>> mile mailing list > >>> mile@ietf.org > >>> https://www.ietf.org/mailman/listinfo/mile > >>> > >> _______________________________________________ > >> mile mailing list > >> mile@ietf.org > >> https://www.ietf.org/mailman/listinfo/mile > > >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile From nobody Tue Apr 5 12:51:51 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7883912D6FD for ; Tue, 5 Apr 2016 12:51:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rQh5fLjcDJhh for ; Tue, 5 Apr 2016 12:51:46 -0700 (PDT) Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [50.253.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FE0E12D644 for ; Tue, 5 Apr 2016 12:51:46 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id 0757D6222F; Tue, 5 Apr 2016 15:51:43 -0400 (EDT) X-Virus-Scanned: amavisd-new at htt-consult.com Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 022-GdNxMQa1; Tue, 5 Apr 2016 15:51:28 -0400 (EDT) Received: from lx120e.htt-consult.com (dhcp-a3c1.meeting.ietf.org [31.133.163.193]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id 58E7F6222C; Tue, 5 Apr 2016 15:51:24 -0400 (EDT) To: Takeshi Takahashi , "'Nancy Cam-Winget (ncamwing)'" , "'Panos Kampanakis (pkampana)'" , tony@yaanatech.com, mile@ietf.org References: <56F166CC.4020103@htt-consult.com> <56F17DC8.8000800@yaanatech.com> <56F183BB.1020306@htt-consult.com> <653a830eff764cf382a3ea10b0b90273@XCH-ALN-010.cisco.com> <56F2140F.9020706@htt-consult.com> <56F53423.7050005@htt-consult.com> <075301d18ef6$f66c0b70$e3442250$@nict.go.jp> From: Robert Moskowitz Message-ID: <57041738.309@htt-consult.com> Date: Tue, 5 Apr 2016 16:51:20 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <075301d18ef6$f66c0b70$e3442250$@nict.go.jp> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [mile] Security alert reporting - the firstMILE X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 19:51:49 -0000 On 04/05/2016 01:52 AM, Takeshi Takahashi wrote: > Hi Bob and all, > > My understanding on netconf is rather shallow, but netconf is another > XML-based messaging, and it could be interesting to see how the model > (developed by the XMPP draft) will be applied to the netconf messages. It is YANG which can work with what the defense device can use to model what reporting it has. What the pub side is may probably not be YANG. Even though the IETF pub/sub used elsewhere in the IETF is YANG based, or so it seems to what I have been told. > By the way, in Section 3 (whose title is "Problem Space") of the draft, you > identified the following problem. > > "It is recognized that many of these alerts are too detailed to be > actionable. Some implementations of the alert monitor will include analytic > tools to select the actionable information from the alerts. Alerts which > are too detailed to be actionable or alerts which include analytical tools > are outside of any standardizing process." > > IMHO, it is a viable concern, and I am wondering how deeply you are trying > to work on this issue in this draft. Not really. It moves elsewhere into the I2NSF environment to do the analytics to then perhaps result in a message. I don't want to get buried in what and how to analyze alerts. > FYI, we have an draft that provides the guideline of the usage of IODEF > document. > https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/ > > Current version of the guidance draft does not cope with the issue you > raised. > If you are trying to provide some solution, the guidance draft could refer > your draft. > But if you are trying to provide only a couple of sentences, the guidance > draft could address this issue. This is work to be done. But it comes down to how does actionable items enter the MILE environment? Sometimes it is obvious to the attacked system. Othertimes it will take analysis across a number of attacked systems to see that there is an attack. > > Take > >> -----Original Message----- >> From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Robert Moskowitz >> Sent: Friday, March 25, 2016 9:51 AM >> To: Nancy Cam-Winget (ncamwing) ; Panos Kampanakis >> (pkampana) ; tony@yaanatech.com; mile@ietf.org >> Subject: Re: [mile] Security alert reporting - the firstMILE >> >> Past two days I have been busy with the holiday of Purim; next week is my > youngest >> son's wedding, so responses from me until IETF will be scattered > (physically >> as well as mentally!). >> >> On 03/24/2016 06:51 PM, Nancy Cam-Winget (ncamwing) wrote: >>> Hi Bob, >>> >>> The general architecture of the xmpp-draft can cover other protocols >>> (like Netconf or TAXII), but as we are defining it in MILE, the draft >>> speaks to the applicability for IODEF. >>> >>> >From your draft, am not sure if youčre creating yet another pub/sub >>> mechanism? If so, would like to see it compared to others (most of >>> which could be adapted to carry different data models). >> I was leaving MOST of the higher layer stuff alone for first. Only Sub is >> partially done using NETCONF and that is Sue Hares' contribution from work > being >> done elsewhere like in I2RS. >> >> So taking your work on XMPP and changing the transport model to UDP and > the >> security to SSLS, is of interest to me. Over in DOTS we have discussed >> extensively messaging challenges during attacks. MILE would also benefit > from >> that design work. >> >> Plus the NETCONF for sub has a lot to consider. >> >> As I said, I have a personal bias concerning XMPP; but if the shoe > fits.... >> Just want to fix up its soles a bit! So to speak. >> >> >>> Regards, Nancy >>> >>> On 3/22/16, 8:57 PM, "mile on behalf of Robert Moskowitz" >>> wrote: >>> >>>> Which is a more complete effort than firstMILE and covers some more >>>> areas, but has the challenge of TCP during congestion attacks. Does > not >>>> leverage NETCONF for configuration. Has a registration function... >>>> >>>> Maybe I just have an historical bias with XMPP as I go back to the >>>> origin of MQ series from IBM and where they lifted it from work we did >>>> at Chrysler... ;)' >>>> >>>> But I will read through that draft again. >>>> >>>> On 03/22/2016 11:24 PM, Panos Kampanakis (pkampana) wrote: >>>>> Also overlaps with the XMPP pub/sub model suggested in >>>>> https://tools.ietf.org/html/draft-appala-mile-xmpp-grid-00 > specifically >>>>> for IODEF. >>>>> >>>>> >>>>> >>>>> -----Original Message----- >>>>> From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Robert > Moskowitz >>>>> Sent: Tuesday, March 22, 2016 1:41 PM >>>>> To: tony@yaanatech.com; mile@ietf.org >>>>> Subject: Re: [mile] Security alert reporting - the firstMILE >>>>> >>>>> My reading of ROLLE here, or the limited information I can find >>>>> googling TAXII is that neither address the start of the incident at > the >>>>> firewall/IPS/IDS/router. >>>>> >>>>> firstMILE is to get the attack event into the monitoring systems. > There >>>>> analytics and/or an admin will determine if mitigation action is > needed >>>>> and then start action in RID/ROLLE/TAXII. >>>>> >>>>> Or that is my take on reading existing documents and conversations at >>>>> the past two IETFs. >>>>> >>>>> On 03/22/2016 01:15 PM, Tony Rutkowski wrote: >>>>>> Hi Bob, >>>>>> >>>>>> There is a lot of puzzlement to go around. >>>>>> In trying to track all the parallel universes, are you creating an >>>>>> alternative to TAXII here? >>>>>> Or ROLLE come to life? >>>>>> >>>>>> How would you differentiate firstMILE? >>>>>> >>>>>> -t >>>>>> >>>>>> >>>>>> On 2016-03-22 11:37 AM, Robert Moskowitz wrote: >>>>>>> I have been puzzled by the lack of a standardized security alert >>>>>>> reporting process. After a few discussions and a lot of thought on >>>>>>> the problem, I have come up with firstMILE: >>>>>> >>>>> _______________________________________________ >>>>> mile mailing list >>>>> mile@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/mile >>>>> >>>> _______________________________________________ >>>> mile mailing list >>>> mile@ietf.org >>>> https://www.ietf.org/mailman/listinfo/mile >> _______________________________________________ >> mile mailing list >> mile@ietf.org >> https://www.ietf.org/mailman/listinfo/mile > From nobody Tue Apr 5 16:36:49 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBE6712D5FD for ; Tue, 5 Apr 2016 16:36:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1gPJaw_4TVkn for ; Tue, 5 Apr 2016 16:36:46 -0700 (PDT) Received: from ns1.nict.go.jp (ns1.nict.go.jp [IPv6:2001:df0:232:300::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9CB5E12D0EE for ; Tue, 5 Apr 2016 16:36:46 -0700 (PDT) Received: from gw1.nict.go.jp (gw1.nict.go.jp [133.243.18.250]) by ns1.nict.go.jp with ESMTP id u35Naj52001047 for ; Wed, 6 Apr 2016 08:36:45 +0900 (JST) Received: from TakeVaioVJP13 (ssh1.nict.go.jp [133.243.3.49]) by gw1.nict.go.jp with ESMTP id u35NahtO001009 for ; Wed, 6 Apr 2016 08:36:45 +0900 (JST) From: "Takeshi Takahashi" To: Date: Tue, 5 Apr 2016 20:36:54 -0300 Message-ID: <008e01d18f94$0ace2970$206a7c50$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdGPk/szW2vWH2qPSyCUvYqAkS4qlw== Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith1 X-Virus-Status: Clean Archived-At: Subject: [mile] WGLC on draft-ietf-mile-implementreport-06.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 23:36:48 -0000 Dear MILE participants, This starts 2 weeks WGLC on draft-ietf-mile-implementreport-06 (MILE Implementation Report). Please send your comments and/or statement of support by April 22nd. Thank you, Take, as co-chair From nobody Mon Apr 18 18:22:30 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B07812D9C8 for ; Mon, 18 Apr 2016 18:22:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.497 X-Spam-Level: X-Spam-Status: No, score=-2.497 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lq5--7D7RO_q for ; Mon, 18 Apr 2016 18:22:26 -0700 (PDT) Received: from ns1.nict.go.jp (ns1.nict.go.jp [IPv6:2001:df0:232:300::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DE4312EAC1 for ; Mon, 18 Apr 2016 18:22:26 -0700 (PDT) Received: from gw1.nict.go.jp (gw1.nict.go.jp [133.243.18.250]) by ns1.nict.go.jp with ESMTP id u3J1MNVv059190 for ; Tue, 19 Apr 2016 10:22:23 +0900 (JST) Received: from VAIO (ssh1.nict.go.jp [133.243.3.49]) by gw1.nict.go.jp with ESMTP id u3J1MNZt059185 for ; Tue, 19 Apr 2016 10:22:23 +0900 (JST) From: "Takeshi Takahashi" To: Date: Tue, 19 Apr 2016 10:22:25 +0900 Message-ID: <012a01d199d9$ee201d10$ca605730$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdGZ2Qpaie/o7ZR6Syqx7KOubymymQ== Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith1 X-Virus-Status: Clean Archived-At: Subject: [mile] implementation of RFC5070-bis X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 01:22:28 -0000 Hello all, I am wondering if anybody knows the implementation of RFC5070-bis, or if anybody is interested in implementing it, please kindly let us know about that. We already know that an implementation already support RFC5070-bis, as mentioned in the draft-ietf-mile-implementreport-06 draft, but it would be helpful to know more of such implementations. Thank you, Take From nobody Tue Apr 19 15:33:22 2016 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 759F612E192; Tue, 19 Apr 2016 15:33:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160419223320.31545.47617.idtracker@ietfa.amsl.com> Date: Tue, 19 Apr 2016 15:33:20 -0700 Archived-At: Cc: mile@ietf.org Subject: [mile] I-D Action: draft-ietf-mile-xmpp-grid-00.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 22:33:20 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Managed Incident Lightweight Exchange of the IETF. Title : XMPP Protocol Extensions for Use with IODEF Authors : Nancy Cam-Winget Syam Appala Scott Pope Filename : draft-ietf-mile-xmpp-grid-00.txt Pages : 45 Date : 2016-04-06 Abstract: This document describes the extensions made to Extensible Messaging and Presence Protocol (XMPP) [RFC6120]that enables the use of XMPP as a transport protocol for collecting and distributing any security telemetry information between and among network platforms, endpoints, and most any network connected device. Specifically, this document will focus on how these extensions can be used to transport the Incident Object Description Exchange Format (IODEF) information. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-xmpp-grid/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-mile-xmpp-grid-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Apr 20 07:26:36 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9498612EE03 for ; Wed, 20 Apr 2016 07:26:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bZOXqo_-qicT for ; Wed, 20 Apr 2016 07:26:29 -0700 (PDT) Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8736A12EC9C for ; Wed, 20 Apr 2016 07:26:29 -0700 (PDT) Received: by mail-vk0-x22e.google.com with SMTP id e185so60800644vkb.1 for ; Wed, 20 Apr 2016 07:26:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=hx4oHmgDl1Y72D/Cyf9UvgLlC3lJS6kd1eY9cqEJWy0=; b=ZpESmug0XdP9LQIb62V0cjVTfFRKo+EtVvwuO6cAYJwGI3p2exaMcUNmb38N0iVhS4 bOb1h1v1PEQo+PWFv3BdxHDta48U++PqFjGQ7tCyw/Zkz86VFe9L6pvYRf0UqTEBfmJ5 gLk4/jpvTzYirHezJtYOXSdbu53yfnfMtgioFtIJliWrxcgD6JPTiULpfvBl7PFJ7kgn Sy/wQF9ijF2d3fTm7g5RDM8wg+So+Sy7KTfWlOFERycBYeiNeXEsRp5e/laXt5gI823n VpJxWOeOQyntqkcheKNEpiDpqlsahxlaF+I0XiRdHnz13qwQbQRVtSR/3NI5kxSxeueB jr/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=hx4oHmgDl1Y72D/Cyf9UvgLlC3lJS6kd1eY9cqEJWy0=; b=OKUnnFDBNAw90ALHL7tGRPmKj2opSvKOV2mzxWYiD1JeB1EaSmh+pv1eQeGpTUURTG whJk92xPyMF2KGFJMhka3JQMq7MDnm1ADg5q8dWKRdfOtm6k4adPL0Fz+DTq70QP7awq qvXQGl3uQfqixM2BjKi1aYZnkSTLwDFZ7VMDcLtAtlOOvWLSRiNoX7b7WXUs70gZV3mK /pBAKVcL1KBHmBnUSp/dvOgmQyOLfdR1Gm97lM1LY+KlRbEiWp5nVcPmEWkEXXhfZw/0 O3X52j1CKgV1VKVF/LHi2uBNxbaF8rcKt490HCydwd6cQafUhatKNNQ7ceaqDphPidcW XcEw== X-Gm-Message-State: AOPr4FVe+BSauR9QWs7pTJ3RPvgcr1rz7+sff7lAEyjJnwEUnOyx0YcicE6Q4enks/ZL5BBz45TApahz3RQ0kQ== MIME-Version: 1.0 X-Received: by 10.31.5.71 with SMTP id 68mr4869955vkf.25.1461162388687; Wed, 20 Apr 2016 07:26:28 -0700 (PDT) Received: by 10.159.54.161 with HTTP; Wed, 20 Apr 2016 07:26:28 -0700 (PDT) Date: Wed, 20 Apr 2016 10:26:28 -0400 Message-ID: From: Kathleen Moriarty To: MILE IETF Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [mile] MILE Co-chair X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Apr 2016 14:26:35 -0000 Thank you very much to all the folks that volunteered! It was great to see so many good people step up and we'll keep them in mind for other working groups. Nancy Cam-Winget will replace Alexey as chair now that he has become an AD again. Thank you Nancy for volunteering and a very big thank you to Alexey for co-chairing the MILE WG for the last 2 years! -- Best regards, Kathleen & Stephen From nobody Thu Apr 21 13:05:22 2016 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 44DC612E145; Thu, 21 Apr 2016 13:05:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160421200520.19546.86546.idtracker@ietfa.amsl.com> Date: Thu, 21 Apr 2016 13:05:20 -0700 Archived-At: Cc: mile@ietf.org Subject: [mile] I-D Action: draft-ietf-mile-rfc5070-bis-19.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Apr 2016 20:05:20 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Managed Incident Lightweight Exchange of the IETF. Title : The Incident Object Description Exchange Format v2 Author : Roman Danyliw Filename : draft-ietf-mile-rfc5070-bis-19.txt Pages : 163 Date : 2016-04-21 Abstract: The Incident Object Description Exchange Format (IODEF) defines a data representation for security incident reports and cyber indicators commonly exchanged by operational security teams for mitigation and watch and warning. This document describes an updated information model for the IODEF and provides an associated data model specified with XML Schema. This new information and data model obsoletes [RFC5070]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-rfc5070-bis/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-mile-rfc5070-bis-19 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-rfc5070-bis-19 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Apr 24 17:03:43 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C74C12D19F for ; Sun, 24 Apr 2016 17:03:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.197 X-Spam-Level: X-Spam-Status: No, score=-0.197 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nj6MdQ_M7WwL for ; Sun, 24 Apr 2016 17:03:41 -0700 (PDT) Received: from ns2.nict.go.jp (ns2.nict.go.jp [IPv6:2001:df0:232:300::2]) by ietfa.amsl.com (Postfix) with ESMTP id D6E1312D18F for ; Sun, 24 Apr 2016 17:03:40 -0700 (PDT) Received: from gw2.nict.go.jp (gw2.nict.go.jp [133.243.18.251]) by ns2.nict.go.jp with ESMTP id u3P03cpF006892 for ; Mon, 25 Apr 2016 09:03:38 +0900 (JST) Received: from TakeVaioVJP13 (ssh1.nict.go.jp [133.243.3.49]) by gw2.nict.go.jp with ESMTP id u3P03cHK006889 for ; Mon, 25 Apr 2016 09:03:38 +0900 (JST) From: "Takeshi Takahashi" To: References: <015301d19003$1282f910$3788eb30$@nict.go.jp> In-Reply-To: <015301d19003$1282f910$3788eb30$@nict.go.jp> Date: Mon, 25 Apr 2016 09:03:44 +0900 Message-ID: <005401d19e85$eea69ab0$cbf3d010$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQDHrYSjFNhCW9fHD+5FYikkPAi9fqGtr3VA Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith2 X-Virus-Status: Clean Archived-At: Subject: Re: [mile] WGLC on draft-ietf-mile-implementreport-06.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Apr 2016 00:03:42 -0000 Dear MILE participants, The time for WGLC comments is now over. The co-chairs will proceed to writeup and submit draft-ietf-mile-implementreport-06.txt to the IESG. Thank you. Take > -----Original Message----- > From: Takeshi Takahashi [mailto:takeshi_takahashi@nict.go.jp] > Sent: Wednesday, April 6, 2016 8:37 AM > To: mile@ietf.org > Subject: WGLC on draft-ietf-mile-implementreport-06.txt > > Dear MILE participants, > > This starts 2 weeks WGLC on draft-ietf-mile-implementreport-06 (MILE > Implementation Report). > Please send your comments and/or statement of support by April 22nd. > > Thank you, > Take, as co-chair From nobody Tue Apr 26 09:16:40 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B725612D510 for ; Tue, 26 Apr 2016 09:16:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.517 X-Spam-Level: X-Spam-Status: No, score=-15.517 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 50bY0I5SYXNc for ; Tue, 26 Apr 2016 09:16:35 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3722112D13A for ; Tue, 26 Apr 2016 09:16:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=18274; q=dns/txt; s=iport; t=1461687395; x=1462896995; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=QWCEzCUZyQ8R5j0gr/2fqs+eug4gP+W0hK1AobVmReQ=; b=fT3pXksda/XLQXbDuC7lVexGS5UBz9pEpW/WyKNIiSoYo8/IniZEeq2W cElQeU90pFg1RQ6GPU0NZIVLEgE1g+CQ2yJehfo5iB5tsO0bz6AdSYiNM 67Awxwiz5CiH1YmKYwN9nf4Y14Qif6wpknAs4w0DFZoR8MUBNksaF4SoY M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AOAgBNkx9X/4UNJK1egzhTfQa5eQENg?= =?us-ascii?q?XQXC4I8gzACHIEgOBQBAQEBAQEBZSeEQQEBAQMBAQEBIAQNOgQHBQcEAgEGAhE?= =?us-ascii?q?EAQEDAiMDAgICJQsUAQgIAgQBDQUIiBoIDpVvnReRIQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAREEfIUlhEuEGQ6DGIJWBY1UhTgThHEBhXuIFIFuhE2DKXuEOY8vAR4?= =?us-ascii?q?BAUKCBRuBS2yHQj9/AQEB?= X-IronPort-AV: E=Sophos;i="5.24,537,1454976000"; d="scan'208";a="265647495" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 26 Apr 2016 16:16:34 +0000 Received: from XCH-ALN-009.cisco.com (xch-aln-009.cisco.com [173.36.7.19]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id u3QGGYve007027 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 26 Apr 2016 16:16:34 GMT Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-ALN-009.cisco.com (173.36.7.19) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 26 Apr 2016 11:16:33 -0500 Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1104.009; Tue, 26 Apr 2016 11:16:33 -0500 From: "Panos Kampanakis (pkampana)" To: "Roman D. Danyliw" , "mile@ietf.org" Thread-Topic: Review of rfc5070bis and schema Thread-Index: AQHRFdcLj611UqhPTkePeRKNT4Py159lD3TggDhx/6A= Date: Tue, 26 Apr 2016 16:16:33 +0000 Message-ID: <53ad8503f96c496297396cb7d8aa726a@XCH-ALN-010.cisco.com> References: <359EC4B99E040048A7131E0F4E113AFCD96ECFC8@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFCD96ECFC8@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.150.32.95] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [mile] Review of rfc5070bis and schema X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2016 16:16:38 -0000 SGkgUm9tYW4sDQoNClNvcnJ5IHRoYXQgSSBoYXZlbid0IHJldmlld2VkIHRoZSBiaXMgZG9jIHJl Y2VudGx5Lg0KDQpBcyB3ZSB3ZXJlIHJldmFtcGluZyB0aGUgZ3VpZGFuY2UgZG9jIGh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW1pbGUtaW9kZWYtZ3VpZGFuY2UtMDUgd2Ug cmVhbGl6ZWQgdGhhdCB0aGUgd2F0Y2hsaXN0IGVsZW1lbnRzIGhhdmUgYmVlbiByZW1vdmVkIGZy b20gdGhlIGJpcyBkb2N1bWVudCBhZnRlciB0aGUgZHJhZnQtaWV0Zi1taWxlLXJmYzUwNzAtYmlz LTA2IHZlcnNpb24uIFRoZSB3YXRjaGxpc3RzIHdlcmUgdXNlZCBpbiB0aGUgcHJlZGljYXRlIGxv Z2ljIGZvciBpbmRpY2F0b3JzIG9mIHRoZSBzYW1lIGluY2lkZW50LiANCg0KRG8geW91IHJlbWVt YmVyIGlmIHRoZXJlIHdhcyBhIGRlY2lzaW9uIHRvIHJlbW92ZSB0aGUgd2F0Y2hsaXN0IGF0dHJp YnV0ZXMgZnJvbSB0aGUgY2xhc3Nlcz8gSSBjb3VsZG4ndCBmaW5kIG1vcmUgaW5mb3JtYXRpb24g aW4gdGhlIGFyY2hpdmVzIGFuZCBJIGRvbid0IHJlbWVtYmVyIGlmIHRoZXJlIHdhcyBhIGRpc2N1 c3Npb24gaW4gdGhlIGxpc3QuDQoNClBhbm9zDQoNCg0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQpGcm9tOiBtaWxlIFttYWlsdG86bWlsZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhh bGYgT2YgUm9tYW4gRC4gRGFueWxpdw0KU2VudDogTW9uZGF5LCBNYXJjaCAyMSwgMjAxNiA1OjA4 IFBNDQpUbzogV2FsdGVybWlyZSwgRGF2aWQgQS4gPGRhdmlkLndhbHRlcm1pcmVAbmlzdC5nb3Y+ OyBtaWxlQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW21pbGVdIFJldmlldyBvZiByZmM1MDcwYmlz IGFuZCBzY2hlbWENCg0KSGkgRGF2aWQhDQoNClRoYW5rcyBhZ2FpbiBmb3IgdGhpcyByZXZpZXcu ICBBbG1vc3QgYWxsIGhhdmUgYmVlbiBhZGRyZXNzIGluIHZlcnNpb25zIC0xNiB0byAtMTguICBJ bmxpbmUgaXMgYSByZXNwb25zZSB0byBlYWNoIGl0ZW0uDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCj4gRnJvbTogbWlsZSBbbWFpbHRvOm1pbGUtYm91bmNlc0BpZXRmLm9yZ10gT24g QmVoYWxmIE9mIFdhbHRlcm1pcmUsIA0KPiBEYXZpZA0KPiBTZW50OiBNb25kYXksIE5vdmVtYmVy IDAyLCAyMDE1IDg6MjkgUE0NCltzbmlwXQ0KDQo+IFNlY3Rpb24gMi40Og0KPiANCj4gVGhlIGZv bGxvd2luZyB0ZXh0IGlzIGRpZmZlY3VsdCB0byBwYXJzZS4gQ29uc2lkZXIgcmVwaHJhc2luZzoN Cj4gDQo+IFRoaXMgcmVsYXRpb25zaGlwIGJldHdlZW4gbXVsdGlwbGUNCj4gY2xhc3NlcyBiZWlu ZyB0cmFuc2xhdGVkIGluc3RhbmNlcyBvZiB0aGUgc2FtZSB0ZXh0IGlzIGluZGljYXRlZCBieSBh IA0KPiBjb21tb24gaWRlbnRpZmllciBzZXQgaW4gdGhlIHRyYW5zbGF0aW9uLWlkIGF0dHJpYnV0 ZS4NCg0KUmV3cml0dGVuLg0KIA0KPiBTZWN0aW9uIDIuMTI6DQo+IA0KPiBJc24ndCB0aGlzIGlt cGxlbWVudGVkIGFzIHRoZSBQb3N0YWxBZGRyZXNzVHlwZSBpbiB0aGUgc2NoZW1hIG5vdCB4czpz dHJpbmc/DQoNClllcy4gIEZpeGVkLg0KDQo+IFNlY3Rpb24gMi4xNjoNCj4gDQo+IFRoZXJlIGlz IGEgY3Jvc3MgcmVmZXJlbmNlIGZvciB0aGUgdGV4dCAiU2VjdGlvbiAzLjMuOCIgdGhhdCBsb29r cyANCj4gbGlrZSBpdCBpcyBpbmNvcnJlY3QuDQoNCk5vLCB0aGUgY3Jvc3MgcmVmZXJlbmNlIGlz IHJpZ2h0LiAgU2VjdGlvbiAzLjMuOCBvZiBodHRwczovL3d3dy53My5vcmcvVFIveG1sc2NoZW1h LTIvLg0KDQo+IEdlbmVyYWwgc2NoZW1hIENvbW1lbnRzOg0KPiAtIFRoZSBzY2hlbWEgaXMgbWlz c2luZyBhbiBYTUwgZGVjbGFyYXRpb24gYXQgdGhlIGJlZ2lubmluZy4NCg0KRml4ZWQuDQoNCj4g LSBTb21lIHR5cGUgbmFtZXMgYXJlIGluY29uc2lzdGFudCB3aXRoIHRoZSBvdmVyYWxsIHR5cGUg bmFtaW5nIHNjaGVtZSANCj4gKGUuZy4sIHN5c3RlbWltcGFjdC10eXBlLXR5cGUpDQoNClRoYXQn cyBpbnRlbnRpb25hbC4gIFRoZSBjb252ZW50aW9uIHRvIG5hbWUgdGhlIHR5cGVzIGlzICI8ZWxl bWVudCBuYW1lPiAtZGFzaC0gPGF0dHJpYnV0ZSBuYW1lPiAtdHlwZS0iLiAgVGhlcmUgYXJlIHNl dmVyYWwgYXR0cmlidXRlcyBuYW1lZCB0eXBlIHNvIHRoYXQncyB3aHkgaXQgbG9va3Mgb2RkLg0K DQo+IC0gVGhlIHR5cGUgInllcy1uby10eXBlIiBpcyBub3QgcmVmZXJlbmNlZCBpbiB0aGUgc2No ZW1hLg0KDQpSZW1vdmVkLg0KDQo+IC0gVGhlIG91dGxpbmUgbnVtYmVyaW5nIGhhcyBtYW55IHNp bmd1bGFyIHN1YnNlY3Rpb25zIChlLmcuLCAzLjEzLjEpLiANCj4gVGhpcyBpc3N1ZSBtYXkgZ2V0 IHJhaXNlZCBieSB0aGUgUkZDIGVkaXRvciBhbmQgc2hvdWxkIHByb2JhYmx5IGdldCANCj4gZml4 ZWQvY2xhcmlmaWVkIGJlZm9yZSB0aGVuLg0KDQpUaGVyZSBhcmUgZmV3ZXIgbm93LiAgSSBkb24n dCBrbm93IGhvdyBlYXNpbHkgZml4IHRoYXQgYW5kIGtlZXAgdGhlIGRvY3VtZW50IGZsb3cuDQoN Cj4gLSBTY2hlbWEgdHlwZXMgZm9yIHRoZSBSRUFMIGkvZCB0eXBlIHZhcnkgYmV0d2VlbiBmbG9h dCBhbmQgZG91YmxlLiBJcyANCj4gdGhlcmUgYSByZWFzb24gZm9yIHRoaXMgKGUuZy4sIENvdW50 ZXIgLT4geHM6ZG91YmxlKT8gSWYgc28sIGl0IG1heSANCj4gbWFrZSBzZW5zZSB0byBoYXZlIHNw ZWNpZmljIHR5cGVzIGluIHRoZSBpL2QgdG8gcmVmbGVjdCB0aGUgZGlzdGluY3Rpb24uDQoNCkZp eGVkLiAgUkVBTCBpcyBub3cgY29uc2lzdGVudGx5IHhzOmZsb2F0Lg0KDQo+IC0gVGhlIHByZWZp eGVzIHVzZWQgaW4gc2VjdGlvbiAzIGFuZCBzdWJzZWN0aW9ucyAoZS5nLiwgZHMsIHhtbCkgDQo+ IHNob3VsZCBiZSBkb2N1bWVudGVkIGF0IHRoZSBiZWdpbm5pbmcgb2Ygc2VjdGlvbiAzIGZvciBj bGFyaXR5Lg0KDQpDb3VsZCB5b3UgcGxlYXNlIGNsYXJpZnkuICBEbyB5b3UgbWVhbiB3aGVyZSBh IG5hbWVzcGFjZSBpcyB1c2VkIGluIFNlY3Rpb24gMywgaXQgc2hvdWxkIGV4cGxhaW5lZCAoZS5n LiwgeG1sOmxhbmcgb3IgZHM6RGlnZXN0QWxnb3JpdGhtKT8NCg0KPiBTZWN0aW9uIDMuMjoNCj4g DQo+IC0gVGhlIGNhcmRpbmFsaXR5IG9mIEluZGljYXRvckRhdGEgaW4gdGhlIHNjaGVtYSBpcyAw Li4xIHdoaWxlIGluIHRoZSANCj4gaS9kIGl0IGlzIDAuLioNCg0KRml4ZWQuDQoNCj4gLSBUaGUg b2JzZXJ2YWJsZS1pZCBhdHRyaWJ1dGUgaXMgbWFya2VkIGFzIHRoZSBTVFJJTkcgdHlwZSwgYnV0 IGlzIGFuIA0KPiB4czpJRCB0eXBlIGluIHRoZSBzY2hlbWEuIEFsbCBpbnN0YW5jZXMgb2YgeHM6 SUQgYXJlIHJlcXVpcmVkIHRvIGJlIA0KPiB1bmlxdWUgaW4gYW4gWE1MIGluc3RhbmNlLiBGb3Ig dGhpcyByZWFzb24gaXQgc2hvdWxkIGJlIG1hcmtlZCBhcyBhbiANCj4gSUQgdHlwZSBpbiB0aGUg aS9kLiBUaGlzIG1lYW5zIHdlIG5lZWQgYSBkYXRhdHlwZSBmb3IgSUQgaW4gc2VjdGlvbiAyLg0K DQpGaXhlZC4gIElEIGlzIGEgdHlwZSBpbiBTZWN0aW9uIDIuICBDdXJyZW50bHksIFNlY3Rpb24g Mi4xNC4NCg0KPiAtIFRoZSBkZWZpbml0aW9uIGZvciBzdGF0dXMgLT4gZXh0LXZhbHVlIHVzZXMg dGhlIHRlcm1pbm9sb2d5ICJBbiANCj4gZXNjYXBlIHZhbHVlIHVzZWQgdG8gZXh0ZW5kIHRoaXMg YXR0cmlidXRlIi4gSSByZWNvbW1lbmQgYWdhaW5zdCB1c2luZyANCj4gdGhlIHRlcm0gImVzY2Fw ZSIgaGVyZSB0byBhdm9pZCBjb25mdXNpb24gd2l0aCBlc2NhcGluZy4gUGVyaGFwcyBpdCANCj4g d291bGQgYmUgYmV0dGVyIHRvIHVzZSAiQSB2YWx1ZSB1c2VkIHRvIGluZGljYXRlIHRoYXQgdGhp cyBhdHRyaWJ1dGUgDQo+IGlzIGV4dGVuZGVkIGFuZCB0aGUgYWN0dWFsIHZhbHVlIGlzIHByb3Zp ZGVkIHVzaW5nIHRoZSBleHQtc3RhdHVzIGF0dHJpYnV0ZS4iDQoNCkZpeGVkLg0KDQo+IFNlY3Rp b24gMy4zOg0KPiAtIFRoZSBjb2xvcnMgdmFsdWVzIGluIHRoZSByZXN0cmljdGlvbiBjbGFzcyBw cm92aWRlIG1hcHBpbmdzIHRvIG90aGVyIA0KPiBwcm92aWRlZCB2YWx1ZXMsIGJ1dCB0aGV5IGRv IG5vdCBkZWZpbmUgdGhlIG1lYW5pbmcgb2YgdGhlIGNvbG9ycy4gDQo+IFRoZXkgc2VlbSB0byBy ZWxhdGUgdG8gVExQLiBQZXJoYXBzIHdlIHNob3VsZCByZWZlcmVuY2UgdGhlIHJlbGF0ZWQgVUsg VExQIHdvcms/DQoNCkl0IGlzIGEgcmVmZXJlbmNlIHRvIHRoZSBVSy4gIEkgd2Fzbid0IGFibGUg dG8gZmluZCBhIHJlZmVyZW5jZS4gIENhbiB5b3UgaGVscD8NCg0KPiBTZWN0aW9uIDMuNjoNCj4g LSBUaGUgY2FyZGluYWxpdHkgb2YgSW5jaWRlbnRJZCwgVVJMLCBUaHJlYXRBY3RvciwgYW5kIENh bXBhaWduIGluIHRoZSANCj4gc2NoZW1hIGFyZSAxLi4qLiBJbiB0aGUgaS9kIHRoaXMgbWF0Y2hl cyBpbiB0aGUgVU1MIHRleHQsIGJ1dCBub3QgaW4gDQo+IHRoZSBkaWFncmFtcyB3aGVyZSB0aGV5 IGFyZSAwLi4qLiBUaGUgY2FyZGluYWxpdHkgb24gdGhlIHBhcmVudCBjaG9pY2UgDQo+ICgxLi4q KSBzaG91bGQgYWxsb3cgdGhlIGluZGl2aWR1YWwgZWxlbWVudHMgdG8gYmUgMS4uMS4gTGV0IG1l IGtub3cgaWYgDQo+IHlvdSBoYXZlIGFueSBxdWVzdGlvbnMgb24gdGhpcy4NCg0KRml4ZWQuDQoN Cj4gU2VjdGlvbiAzLjc6DQo+IC0gVGhyZWF0QWN0b3IgLT4gVGhyZWF0QWN0b3JJZCBpcyBpbmNv bnNpc3RhbnQgaW4gdGhlIHNjaGVtYSAoMS4uMSksIA0KPiBkaWFncmFtICgwLi4xKSwgYW5kIHRl eHQgKDEuLiopLg0KPiAtIFRocmVhdEFjdG9yIC0+IERlc2NyaXB0aW9uIGlzIGluY29uc2lzdGFu dCBpbiB0aGUgc2NoZW1hIGFuZCBkaWFncmFtIA0KPiAoMC4uKiksIGFuZCB0ZXh0ICgxLi4qKS4N Cg0KRml4ZWQuDQoNCj4gU2VjdGlvbiAzLjgNCj4gLSBDYW1wYWlnbiAtPiBDYW1wYWlnbklEIGFu ZCBEZXNjcmlwdGlvbiBhcmUgaW5jb25zaXN0YW50IGluIHRoZSANCj4gc2NoZW1hIGFuZCBkaWFn cmFtICgwLi4xKSwgYW5kIHRleHQgKDEuLiopLg0KDQpGaXhlZA0KDQo+IFNlY3Rpb24gMy45DQo+ IC0gVGhlIHNjaGVtYSBpcyBtaXNzaW5nIHRoZSBleHQtZHR5cGUgYXR0cmlidXRlIGRvY3VtZW50 ZWQgaW4gdGhlIGkvZC4NCg0KRml4ZWQNCg0KPiBTZWN0aW9uIDMuMTANCj4gLSBJcyB0aGVyZSBh IHJlYXNvbiB0aGF0IEZheCBpcyBsaW1pdGVkIHRvIDAuLjE/IEkgd291bGQgZ3Vlc3Mgc29tZSAN Cj4gb3JnYW5pemF0aW9ucyBtYXkgaGF2ZSBtb3JlIHRoYW4gb25lIEZheCAjLg0KDQpGaXhlZC4N Cg0KPiBTZWN0aW9uIDMuMTAuMg0KPiAtIFRoZSBhdHRyaWJ1dGUgJ3RyYW5zbGF0aW9uLWlkJyBp cyBtaXNzaW5nIGluIHRoZSBpL2QgZGlhZ3JhbSBhbmQgdGV4dC4NCg0KRml4ZWQuICBNTF9TVFJJ TkcgY2xhc3NlcyBhcmUgbm93IG9ubHkgZGVwaWN0ZWQgb25jZSBpbiB0aGUgZG9jdW1lbnQuDQoN Cj4gU2VjdGlvbiAzLjEyLjENCj4gLSBUaGUgcmVxdWlyZW1lbnQgZm9yIGF0IGxlYXN0IG9uZSBv ZiBEZXNjcmlwdGlvbiBvciANCj4gRGV0ZWN0aW9uQ29uZmlndXJhdGlvbiBjYW4gYmUgbW9kZWxl ZCBhIHhzOmNob2ljZSB3aXRoIDEuLiogDQo+IGNhcmRpbmFsaXR5IGluIHRoZSBzY2hlbWEuIE90 aGVyIGNsYXNzZXMgY2FuIHByb2JhYmx5IGJlIGltcHJvdmVkIGluIHRoZSBzYW1lIHdheS4NCg0K VHJ1ZS4gIEkgbWVudGlvbmVkIHRoaXMgaW4gUHJhZ3VlICg/KS4gIEkgdGhvdWdodCB0aGUgV0cg d2Fzbid0IGNvbmNlcm5lZCBhYm91dCB0aGlzIGFzIGxvbmcgYXMgdGhlIHRleHQgcHJvdmlkZWQg dGhlIGNsYXJpdHkuICANCg0KV0c6IGRpc2FncmVlPw0KDQo+IFNlY3Rpb24gMy4xMzoNCj4gLSBU aGUgZWxlbWVudCAnZW51bTpSZWZlcmVuY2UnIGluIHRoZSBpL2QgaXMgbm90IGluIHRoZSBlbnVt IG5hbWVzcGFjZSANCj4gaW4gdGhlIHNjaGVtYS4NCj4NCj4gU2VjdGlvbiAzLjEzLjE6DQo+IC0g VGhlIGVsZW1lbnQgJ1JlZmVyZW5jZU5hbWUnIHNob3VsZCBiZSAnZW51bTpSZWZlcmVuY2VOYW1l JyBpbiB0aGUgDQo+IGkvZCB0ZXh0Lg0KPiAtIFRoZSB0ZXh0IHN0YXJ0aW5nIHdpdGggIkF0IGxl YXN0IG9uZSBvZiB0aGVzZSBjbGFzc2VzIE1VU1QgYmUgcHJlc2VudC4iDQo+IGFwcGVhcnMgdG8g YmUgaW1wcm9wZXJseSBuZXN0ZWQgaW4gdGhlIGkvZC4NCj4gDQo+IFNlY3Rpb24gMy4xNDoNCj4g LSBUaGUgdGV4dDoNCj4gDQo+IEEgbGVhc3Qgb25lIGluc3RhbmNlIG9mIHRoZSBwb3NzaWJsZSB0 aHJlZSBpbXBhY3QgY2xhc3NlcyAoaS5lLiwgDQo+IEltcGFjdCwgVGltZUltcGFjdCwgb3IgTW9u ZXRhcnlJbXBhY3QpIE1VU1QgYmUgcHJlc2VudC4NCj4gDQo+IFNob3VsZCByZWFkIGFzOg0KPiAN Cj4gQSBsZWFzdCBvbmUgaW5zdGFuY2Ugb2YgdGhlIHBvc3NpYmxlIGZpdmUgaW1wYWN0IGNsYXNz ZXMgKGkuZS4sIA0KPiBTeXN0ZW1JbXBhY3QsIEJ1c2luZXNzSW1wYWN0LCBUaW1lSW1wYWN0LCBN b25ldGFyeUltcGFjdCwgb3INCj4gSW50ZW5kZWRJbXBhY3QpIE1VU1QgYmUgcHJlc2VudC4NCj4g DQo+IC0gVGhlIEludGVuZGVkSW1wYWN0IGNsYXNzIGRvZXNuJ3QgYXBwZWFyIHRvIGJlIGRvY3Vt ZW50ZWQgaW4gdGhpcyBzZWN0aW9uLg0KPiBUaGUgdGV4dCBpcyBjb25mdXNpbmcgb24gdGhpczoN Cj4gDQo+IElkZW50aWNhbGx5IGRlZmluZWQgYXMgU2VjdGlvbiAzLjE0LjIgYnV0IGRlc2NyaWJl cyBpbnRlbnQgcmF0aGVyDQo+IMKgwqDCoMKgwqAgdGhhbiB0aGUgcmVhbGl6ZWQgaW1wYWN0Lg0K PiANCj4gU2hvdWxkIGJlOg0KPiANCj4gSWRlbnRpY2FsIHRvIHRoZSBCdXNpbmVzc0ltcGFjdCBj bGFzcyBkZWZpbmVkIGluIFNlY3Rpb24gMy4xNC4yLCBidXQgDQo+IGRlc2NyaWJlcyB0aGUgaW50 ZW50IHJhdGhlcg0KPiDCoMKgwqDCoMKgIHRoYW4gdGhlIHJlYWxpemVkIGltcGFjdC4NCg0KRml4 ZWQuDQoNCiANCj4gU2VjdGlvbiAzLjE0LjE6DQo+IC0gVGhlIGF0dHJpYnV0ZSAndHlwZScgZG9l cyBub3QgaGF2ZSB0aGUgJ3Vua25vd24nIGRlZmF1bHQgdmFsdWUgDQo+IGRlZmluZWQgaW4gdGhl IHNjaGVtYS4gJ3Vua25vd24nIGlzIG5vdCBhIHZhbGlkIGVudW0gdmFsdWUuDQo+IC0gVGhlIGF0 dHJpYnV0ZSAndHlwZScgYWxsb3cgdGhlIGVudW0gdmFsdWUgYWRtaW4gaW4gdGhlIHNjaGVtYS4g VGhpcyANCj4gdmFsdWUgaXMgbm90IGRvY3VtZW50ZWQgaW4gdGhlIGkvZC4NCj4gDQo+IFNlY3Rp b24gMy4xNC4zOg0KPiAtIFRoZSBzY2hlbWEgaXMgbWlzc2luZyB0aGUgJ2V4dC1tZXRyaWNzJyBh bmQgJ2V4dC1kdXJhdGlvbicgDQo+IGF0dHJpYnV0ZXMgZGVmaW5lZCBpbiB0aGUgaS9kLg0KPiAN Cj4gU2VjdGlvbiAzLjE0LjU6DQo+IA0KPiBUaGUgJ0NvbmZpZGVuY2UnIGNsYXNzIGlzIGRlZmlu ZWQgaW4gdGhlIHNjaG1lIGFzOg0KPiANCj4gwqAgPHhzOmVsZW1lbnQgbmFtZT0iQ29uZmlkZW5j ZSI+DQo+IMKgwqDCoCA8eHM6Y29tcGxleFR5cGUgbWl4ZWQ9InRydWUiPg0KPiDCoMKgwqDCoMKg IDx4czphdHRyaWJ1dGUgbmFtZT0icmF0aW5nIiB1c2U9InJlcXVpcmVkIiANCj4gdHlwZT0iY29u ZmlkZW5jZS1yYXRpbmctIHR5cGUiLz4NCj4gwqDCoMKgIDwveHM6Y29tcGxleFR5cGU+DQo+IMKg IDwveHM6ZWxlbWVudD4NCj4gDQo+IFRvIG1hdGNoIHRoZSBpL2QgaXQgc2hvdWxkIGJlIGRlZmlu ZWQgaW4gdGhlIHNjaGVtYSBhczoNCj4gDQo+IMKgIDx4czplbGVtZW50IG5hbWU9IkNvbmZpZGVu Y2UiPg0KPiDCoMKgwqAgPHhzOmNvbXBsZXhUeXBlPg0KPiDCoMKgwqDCoMKgIDx4czpzaW1wbGVD b250ZW50Pg0KPiDCoMKgwqDCoMKgwqDCoCA8eHM6ZXh0ZW5zaW9uIGJhc2U9ImlvZGVmOlBvc2l0 aXZlRmxvYXRUeXBlIj4NCj4gwqDCoMKgwqDCoMKgwqDCoMKgIDx4czphdHRyaWJ1dGUgbmFtZT0i cmF0aW5nIiB1c2U9InJlcXVpcmVkIiANCj4gdHlwZT0iY29uZmlkZW5jZS1yYXRpbmctIHR5cGUi Lz4NCj4gwqDCoMKgwqDCoMKgwqAgPC94czpleHRlbnNpb24+DQo+IMKgwqDCoMKgwqAgPC94czpz aW1wbGVDb250ZW50Pg0KPiDCoMKgwqAgPC94czpjb21wbGV4VHlwZT4NCj4gwqAgPC94czplbGVt ZW50Pg0KDQpGaXhlZC4NCg0KPiBTZWN0aW9uIDMuMTU6DQo+IC0gVGhlIGNhcmRpbmFsaXR5IGZv ciAnSGlzdG9yeUl0ZW0nIGlzICJPbmUgb3IgbWFueS4iIFRoaXMgaXMgDQo+IGRpZmZlcmVudCB0 aGFuIHRoZSB1c2Ugb2YgIk9uZSBvciBtb3JlLiIgaW4gdGhlIHJlc3Qgb2YgdGhlIGRvY3VtZW50 LiANCj4gVGhpcyBzaG91bGQgYmUgbWFkZSBjb25zaXN0YW50IHdpdGggdGhlIHJlc3Qgb2YgdGhl IGRyYWZ0LiBBbHNvLCBjaGVjayBmb3Igb3RoZXIgY2FzZXMgb2YgdGhpcy4NCg0KRml4ZWQuICBU aGlzIHdhcyBhIHBlcnZhc2l2ZSBwcm9ibGVtLg0KDQo+IFNlY3Rpb24gMy4xOToNCj4gLSBUaGUg c2NoZW1hIGFsbG93cyBOb2RlIHRvIGJlIDEuLiogd2hpbGUgdGhlIGkvZCBkaWFncmFtIGFuZCB0 ZXh0IGlzIDEuLjEuDQoNCkZpeGVkIDE6MS4NCg0KPiBTZWN0aW9uIDMuMjA6DQo+IC0gVGhlIHNj aGVtYSBkZWZpbmVzIGEgTm9kZVJvbGUgZWxlbWVudCB0aGF0IGlzIG5vdCBkb2N1bWVudGVkIGlu IHRoZSBpL2QuDQo+IC0gVGhlIGkvZCBkZWZpbmVzIGEgRGF0ZVRpbWUgZWxlbWVudCB0aGF0IGlz IG5vdCBkZWZpbmVkIGluIHRoZSBzY2hlbWEuDQo+IA0KPiBTZWN0aW9uIDMuMjAuMToNCj4gLSBU aGUgYmFzZSB0eXBlIG9mIHRoaXMgY2xhc3MgaXMgeHM6c3RyaW5nIGluIHRoZSBzY2hlbWEuIFRo ZSBpL2QgDQo+IGRpYWdyYW0gZG9lcyBub3QgcmVmbGVjdCB0aGlzLg0KPiAtIFNob3VsZCB0aGUg ZGVmYXVsdCBmb3IgY2F0ZWdvcnkgYmUgaXB2Ni1hZGRyIGdpdmVuIHRoZSBlbXBoYXNpcyBvbiAN Cj4gdHJhbnNpdGlvbj8NCg0KRml4ZWQuDQoNCj4gU2VjdGlvbiAzLjIwLjI6DQo+IC0gVGhlIGJh c2UgdHlwZSBvZiB0aGlzIGNsYXNzIGlzIE1MU3RyaW5nIGluIHRoZSBzY2hlbWEuIFRoZSBpL2Qg DQo+IGRpYWdyYW0gZG9lcyBub3QgcmVmbGVjdCB0aGlzLg0KDQpGaXhlZC4gIENsYXNzZXMgbm8g bG9uZ2VyIGRlcml2ZSB0aGUgTUxTdHJpbmcgdHlwZS4NCg0KPiAtIFRoZSBpL2QgZGlhZ3JhbSBh bmQgdGV4dCBpcyBhbHNvIG1pc3NpbmcgdGhlIGF0dHJpYnV0ZSB0cmFuc2xhdGlvbi1pZC4NCj4g LSBOb2RlUm9sZSAtPiBDYXRlZ29yeSBpcyBpbmNvbnNpc3RhbnQgd2hlcmUgdGhlIHNjaGVtYSBo YXMgDQo+ICdjMi1zZXJ2ZXInIGFuZCB0aGUgaS9kIGhhcyAnYzInLg0KDQpGaXhlZC4NCg0KPiBT ZWN0aW9uIDMuMjAuMzoNCj4gLSBUaGUgc2NoZW1hIGlzIG1pc3NpbmcgdGhlIGV4dC11bml0IGF0 dHJpYnV0ZS4NCg0KRml4ZWQuDQoNCj4gU2VjdGlvbiAzLjIxLjE6DQo+IC0gVGhlIHZhbHVlcyBm b3IgJ3JlY29yZC10eXBlJyBhcmUgbm90IGRvY3VtZW50ZWQgaW4gdGhlIGkvZC4gVGhlcmUgaXMg DQo+IGEgIlRPRE8iIHBsYWNlaG9sZGVyIGluIHRoZSBpL2QuDQoNCkZpeGVkLiAgUmVsYXRlZERO UyB3YXMgcmVkZWZpbmVkIGFzIGFuIEVYVEVOU0lPTiB0eXBlLg0KDQo+IFNlY3Rpb24gMy4yMS4z Og0KPiAtIFRoZSAnU2FtZURvbWFpbkNvbnRhY3QnIGVsZW1lbnQgaXMgMS4uMSBpbiB0aGUgc2No ZW1hIGFuZCAwLi4xIGluIA0KPiB0aGUgaS9kIGRpYWdyYW0gYW5kIHRleHQuDQoNCk5vLCB0aGUg c2NoZW1hIGlzIHJpZ2h0LiAgVGhlc2UgZWxlbWVudHMgYXJlIGluIGFuIHhzOmNob2ljZSwgbm90 IHhzOnNlcXVlbmNlOg0KDQogICAgICA8eHM6Y2hvaWNlPg0KICAgICAgICA8eHM6ZWxlbWVudCBy ZWY9ImlvZGVmOlNhbWVEb21haW5Db250YWN0Ii8+DQogICAgICAgIDx4czplbGVtZW50IHJlZj0i aW9kZWY6Q29udGFjdCIgDQogICAgICAgICAgICAgICAgICAgIG1pbk9jY3Vycz0iMSIgbWF4T2Nj dXJzPSJ1bmJvdW5kZWQiLz4NCiAgICAgIDwveHM6Y2hvaWNlPg0KDQo+IFNlY3Rpb24gMy4yMjoN Cj4gLSBUaGUgY2hvaWNlIGJldHdlZW4gJ1BvcnQnIGFuZCAnUG9ydGxpc3QnIHNob3VsZCBiZSBj aGFuZ2VkIHRvIGJlIA0KPiAxLi4xIGluIHRoZSBzY2hlbWEgdG8gcmVmbGVjdCB0aGUgcmVxdWly ZW1lbnQgZm9yIG9uZSBvZiB0aGUgdHdvIHRvIGJlIHVzZWQgaW4gdGhlIGkvZC4NCg0KRml4ZWQu DQoNCj4gU2VjdGlvbiAzLjIyLjE6DQo+IC0gVGhlICdJQU5BU2VydmljZScgZWxlbWVudCBpcyAx Li4xIGluIHRoZSBzY2hlbWEgYW5kIDAuLjEgaW4gdGhlIGkvZCANCj4gZGlhZ3JhbSBhbmQgdGV4 dCwNCg0KRml4ZWQuDQoNCj4gU2VjdGlvbiAzLjIyLjI6DQo+IC0gVGhlIGF0dHJpYnV0ZSAncHJv dG8tbmFtZScgaXMgYW4geHM6aW50ZWdlciBpbiB0aGUgc2NoZW1hIGFuZCANCj4geHM6c3RyaW5n IGluIHRoZSBpL2QuIEl0IGxvb2tzIGxpa2UgdGhlIHNjaGVtYSBuZWVkcyB0byBiZSBjaGFuZ2Vk IGJhc2VkIG9uIHRoZSBpL2QgdGV4dC4NCj4+IC0gVGhlIGF0dHJpYnV0ZSAnZXh0LWR0eXBlJyBp cyBtaXNzaW5nIGluIHRoZSBzY2hlbWEuDQo+IC0gdGhlIGF0dHJpYnV0ZSAnZHR5cGUnIGlzIG1p c3NpbmcgdmFsdWVzICJwb3J0bGlzdCIgYW5kICJwYXRoIiBpbiB0aGUgc2NoZW1hLg0KDQpGaXhl ZC4gIE5vdyBvZiB0eXBlIEVYVEVOU0lPTi4NCg0KID4gU2VjdGlvbiAzLjIyLjQ6DQo+IC0gVGhl IGF0dHJpYnV0ZSBoYXMgdGhlIG5hbWUgJ2V4dC1kdHlwZScgaW4gdGhlIHNjaGVtYSBhbmQgDQo+ ICdlbnVtLWR0eXBlJyBpbiB0aGUgaS9kIGRpYWdyYW0uDQo+IC0gU29mdHdhcmVSZWZlcmVuY2Ug LT4gc3BlYy1uYW1lIC0+IHN3aWQgZW50cnkgbmVlZHMgdG8gaGF2ZSB0aGUgDQo+IGFjdHVhbCBy ZWZlcmVuY2UgcHJvdmlkZWQuIExvb2sgZm9yICJmaXggbWUuIg0KDQpGaXhlZC4NCg0KPiBTZWN0 aW9uIDMuMjQ6DQo+IC0gVGhlIGNhcmRuYWxpdGllcyBvZiBFbWFpbEhlYWRlckZpZWxkLCBIYXNo RGF0YSwgYW5kIFNpZ25hdHVyZURhdGEgDQo+IGFyZSAwLi4qIGluIHRoZSBpL2QgZGlhZ3JhbSBh bmQgMC4uMSBpbiB0aGUgc2NoZW1hIGFuZCBpL2QgdGV4dC4NCg0KRml4ZWQuDQoNCj4gU2VjdGlv biAzLjI1LjE6DQo+IC0gVGhlICdSZWNvcmRJdGVtJyBlbGVtZW50IGlzIDEuLiogaW4gdGhlIHNj aGVtYSBhbmQgMC4uKiBpbiB0aGUgaS9kIA0KPiBkaWFncmFtIGFuZCB0ZXh0Lg0KDQpGaXhlZC4N Cg0KPiBTZWN0aW9uIDMuMjYuMToNCj4gLSBUaGUgYXR0cmlidXRlICdvYnNlcnZhYmxlLWlkJyBp cyBtaXNzaW5nIGluIHRoZSBzY2hlbWEuDQoNCkZpeGVkLg0KDQo+IFNlY3Rpb24gMy4yNy4xOg0K PiAtIFRoZSBlbGVtZW50ICdkczogWDUwOURhdGEnIGhhcyBhIHNwYWNlIGluIHRoZSBpL2QgZGlh Z3JhbSB0aGF0IA0KPiBzaG91bGQgYmUgcmVtb3ZlZC4NCg0KRml4ZWQuDQoNCj4gU2VjdGlvbiAz LjI4LjE6DQo+IC0gVGhlIGVsZW1lbnQgJ0ZpbGVUeXBlJyBoYXMgdGhlIHR5cGUgeHM6aW50ZWdl ciBpbiB0aGUgc2NoZW1hIGFuZCANCj4geHM6c3RyaW5nIGluIHRoZSBpL2QuIFRoZSBzY2hlbWEg c2hvdWxkIGJlIGNoYW5nZWQgdG8geHM6c3RyaW5nIGJhc2VkIG9uIHRoZSBpL2QgdGV4dC4NCj4g LSBUaGUgZWxlbWVudHMgJ1NpZ25hdHVyZURhdGEnIGFuZCAnQXNzb2NpYXRlZFNvZnR3YXJlJyBp biB0aGUgaS9kIGFyZSANCj4gbmFtZWQgZGlmZmVyZW50bHkgaW4gdGhlIHNjaGVtYS4NCg0KRml4 ZWQuDQoNCj4gU2VjdGlvbiAzLjI5Og0KPiAtIFRoZSBhdHRyaWJ1dGUgJ2V4dC1zY29wZScsIHdo aWNoIGlzIGRlZmluZWQgaW4gdGhlIHNjaGVtYSwgaXMgDQo+IG1pc3NpbmcgaW4gdGhlIGkvZCBk aWFncmFtLg0KDQpGaXhlZC4NCg0KPiBTZWN0aW9uIDMuMjkuMToNCj4gLSBUaGUgZWxlbWVudCAn ZHM6Q2Fubm9uaWNhbGl6YXRpb25NZXRob2QnIGlzIDAuLjEgaW4gdGhlIGkvZCBhbmQgMS4uMSAN Cj4gaW4gdGhlIHNjaGVtYS4NCg0KRml4ZWQuICAwLi4xDQoNCj4gU2VjdGlvbiAzLjI5LjI6DQo+ IC0gVGhlIGVsZW1lbnQgQWRkaXRpb25hbERhdGEgaXMgMC4uKiBpbiB0aGUgaS9kIGFuZCAxLi4x IGluIHRoZSBzY2hlbWEuDQoNCkZpeGVkLg0KDQo+IFNlY3Rpb24gMy4zMjoNCj4gLSBUaGUgZWxl bWVudCAnQWx0ZXJuYXRpdmVJbmRpY2F0b3JJRCcgaXMgMC4uKiBpbiB0aGUgc2NoZW1hIGFuZCAw Li4xIGluIHRoZSBpL2QuDQo+IC0gVGhlIGVsZW1lbnQgJ0FkZGl0aW9uYWxEYXRhJyBpcyBtaXNz aW5nIGluIHRoZSBzY2hlbWEuDQoNCkZpeGVkLg0KDQo+IFNlY3Rpb24gMy4zMi4zOg0KPiAtIFRo ZSBhdHRyaWJ1dGVzICdyZXN0cmljdGlvbicgYW5kICdleHQtcmVzdHJpY3Rpb24nIGFyZSBkZWZp bmVkIGluIA0KPiB0aGUgc2NoZW1hIGFuZCBhcmUgbWlzc2luZyBpbiB0aGUgaS9kLg0KPiAtIFRo ZSBlbGVtZW50ICdTZXJ2aWNlJyBpcyBtaXNzaW5nIGluIHRoZSBzY2hlbWEuDQo+IC0gVGhlIGVs ZW1lbnQgJ0FkZGl0aW9uYWxEYXRhJyBpcyAwLi4xIGluIHRoZSBzY2hlbWEgYW5kIDAuLiogaW4g dGhlIGkvZC4NCj4gLSBBIGNob2ljZSBzaG91bGQgYmUgdXNlZCB0byBtb2RlbCB0aGUgImV4dGFj dGx5IG9uZSIgcmVxdWlyZW1lbnQuDQoNCkZpeGVkLg0KDQo+IFNlY3Rpb24gMy4zMi4zLjE6DQo+ IC0gVGhlIGVsZW1lbnQgJ0J1bGtPYnNlcnZhYmxlTGlzdCcgaXMgMC4uMSBpbiB0aGUgc2NoZW1h IGFuZCAxLi4xIGluIHRoZSBpL2QuDQo+IC0gVGhlIGVsZW1lbnQgJ0FkZGl0aW9uYWxEYXRhJyBp cyAwLi4xIGluIHRoZSBzY2hlbWEgYW5kIDAuLiogaW4gdGhlIGkvZC4NCg0KRml4ZWQuDQoNCj4g U2VjdGlvbiAzLjMyLjQ6DQo+IC0gVGhlIGNhcmRpbmFsaXR5IG9mIHRoZSBlbGVtZW50cyBkbyBu b3QgbWF0Y2ggaW4gdGhlIHNjaGVtYSBhbmQgaS9kLg0KDQpGaXhlZC4NCg0KPiBTZWN0aW9uIDMu MzIuNjoNCj4gLSBJdCBpcyBub3QgY2xlYXIgd2hhdCB0aGUgdHlwZSAiRU1QVFkiIG1lYW5zIGhl cmUuDQo+IC0gSSBkb24ndCByZWNhbGwgaWYgdGhlICJJRFJFRiIgZGF0YSB0eXBlIHdhcyBkZWZp bmVkIGluIHNlY3Rpb24gMi4NCg0KRml4ZWQuICBZZXMsIElEUkVGIGlzIGEgdHlwZSBpbiBTZWN0 aW9uIDIuDQoNCj4gU2VjdGlvbiAzLjMyLjc6DQo+IC0gSXQgaXMgbm90IGNsZWFyIHdoYXQgdGhl IHR5cGUgIkVNUFRZIiBtZWFucyBoZXJlLg0KPiAtIEkgZG9uJ3QgcmVjYWxsIGlmIHRoZSAiSURS RUYiIGRhdGEgdHlwZSB3YXMgZGVmaW5lZCBpbiBzZWN0aW9uIDIuDQoNCkZpeGVkLiAgWWVzLCBJ RFJFRiBpcyBhIHR5cGUgaW4gU2VjdGlvbiAyLg0KIA0KVGhhbmsgeW91IGFnYWluIQ0KUm9tYW4N Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQptaWxlIG1h aWxpbmcgbGlzdA0KbWlsZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9taWxlDQo= From nobody Tue Apr 26 09:27:45 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FAD212D50E for ; Tue, 26 Apr 2016 09:27:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.516 X-Spam-Level: X-Spam-Status: No, score=-15.516 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VirBXWW3fOVj for ; Tue, 26 Apr 2016 09:27:42 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0FE5E12B05A for ; Tue, 26 Apr 2016 09:27:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1222; q=dns/txt; s=iport; t=1461688062; x=1462897662; h=from:to:subject:date:message-id:mime-version; bh=fopAcFEA6rQhLFVEczD92dMXl3lzqnoeAKm2zvcK2fE=; b=i07ZE/5bCpvf1/BWIgdZxgK7Mk1qbgWmNIYIs68nst4wDQcfxW5WAgIj G91gA2QhrSJxftxe3QzHtAIINLk1zb/w6ikh10/S26ep+Zdg60SRmO3uv any5DoidQNsyTmyn5U47HRyU2yQGwrCbJ0t8pWe0JLaRm1gHQ3/mXjzEq 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AcAgDflR9X/5RdJa1egmxMU4EDtQaEc?= =?us-ascii?q?wENgXQihWyBPjgUAQEBAQEBAWUcC4Q4EIELAQsBdCcEiD0OozWgfQEBAQcBAQE?= =?us-ascii?q?BARcEj1iFKQWODIoEAYEthE6IG4FnhE2IXY8vAR4BAUKCBRuBS4htfwEBAQ?= X-IronPort-AV: E=Sophos;i="5.24,537,1454976000"; d="scan'208,217";a="101517830" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 26 Apr 2016 16:27:41 +0000 Received: from XCH-RTP-012.cisco.com (xch-rtp-012.cisco.com [64.101.220.152]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id u3QGReXZ003906 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 26 Apr 2016 16:27:41 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-012.cisco.com (64.101.220.152) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 26 Apr 2016 12:27:40 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1104.009; Tue, 26 Apr 2016 12:27:40 -0400 From: "Nancy Cam-Winget (ncamwing)" To: "mile@ietf.org" Thread-Topic: Please provide comments to draft-ietf-mile-xmpp-grid Thread-Index: AQHRn9iNpZhh1iQrsUKo2hnaYXPTVw== Date: Tue, 26 Apr 2016 16:27:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.2.160219 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.150.163.72] Content-Type: multipart/alternative; boundary="_000_D344E509169F8Cncamwingciscocom_" MIME-Version: 1.0 Archived-At: Subject: [mile] Please provide comments to draft-ietf-mile-xmpp-grid X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2016 16:27:43 -0000 --_000_D344E509169F8Cncamwingciscocom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Colleagues, I've posted the draft in https://datatracker.ietf.org/doc/draft-ietf-mile-x= mpp-grid/ so that we can get comments and continue to move this forward. Thanks, nancy --_000_D344E509169F8Cncamwingciscocom_ Content-Type: text/html; charset="iso-8859-1" Content-ID: <47649D264E923F44B44D8E9C3F471787@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
Colleagues,

I’ve posted the draft in https://datatracker.ietf.org/doc/draft= -ietf-mile-xmpp-grid/  so that we can get comments and continue to= move this forward.

Thanks, nancy
--_000_D344E509169F8Cncamwingciscocom_-- From nobody Tue Apr 26 10:51:28 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44AFF12D552 for ; Tue, 26 Apr 2016 10:51:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.69 X-Spam-Level: X-Spam-Status: No, score=-2.69 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D9lyAEK5Gk3N for ; Tue, 26 Apr 2016 10:51:25 -0700 (PDT) Received: from mail-yw0-x235.google.com (mail-yw0-x235.google.com [IPv6:2607:f8b0:4002:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D08B12D52E for ; Tue, 26 Apr 2016 10:51:25 -0700 (PDT) Received: by mail-yw0-x235.google.com with SMTP id j74so23715132ywg.1 for ; Tue, 26 Apr 2016 10:51:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=fZVklAPG0jN7wx/8WPNtup6u14IqqbmhFpdzhwqpXdU=; b=BJdrA+WMnmWmurl89tAuO3mOvn9VNwnfvfHGY3XHQqzbRre6kwY9R/Ia2qJl8SFKhf 0xpwpTvheMmLA+IkQhoNzP5AWBoZT5wwMMxhRRUTX4+lgs4KHy9kQSmaRF7FtICs7Tj8 iD203xl8Ob5bS0d2lZwLLGY603si84ckPqOv+NRS10XCrWwXz0Wr/Xb5C2CsJAlTx5V+ p1j1dC9ukh/0+x3Ojm6ZCytxbQ7wjnu9vEOpGmHF9bUsDa8reW5i+U5sNsTodAUco0nC cT2uIf6+NaGCly9RAFcptA+57jSR5ry24ovy9wANQZV2ty6T1ZTyz7d6t+Wp+6Y6A+b9 rKjw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=fZVklAPG0jN7wx/8WPNtup6u14IqqbmhFpdzhwqpXdU=; b=UrQuPH+vxPDqPXyo1paiquny0zNwg5jfOCZiHdcswPXhuFszP7SF4OmaAcMtVJcYrg 3QcswqiZL178A9Fj3yUOsTyctmB5RdjS0AW+fZKJMlLTKC3Bq37rZVMGY6+4Gp6bsfXC XTL9BBPTCgMNMZnRLH0sGv4JtP3xNNR+RJUVzGeBb9y9qGrscPt9xDqLbAWXskKSAoMf xYlNm6nKoYJNtFulCSq0UpoPtWy9s/+UMZzNO+jB4S5U/uMQKFoVIw9VN8+UeHSpP4Dk D5V3xj8n3dH4uaYildDUgJV8l6uFVGvYCQrAvEj7KPWzTG1XB0vL5Wr7yXWh1kRRKRv3 5Lhg== X-Gm-Message-State: AOPr4FXwKcA2TJCkOQzV7HGdY2zpdsxefONeC2tw+wk5djOq5zbU8X/f3YcD9/IOisEVNWH0IHyyZtgSchjJNA== MIME-Version: 1.0 X-Received: by 10.159.36.148 with SMTP id 20mr1800660uar.156.1461693084562; Tue, 26 Apr 2016 10:51:24 -0700 (PDT) Received: by 10.159.54.231 with HTTP; Tue, 26 Apr 2016 10:51:24 -0700 (PDT) Date: Tue, 26 Apr 2016 13:51:24 -0400 Message-ID: From: Kathleen Moriarty To: MILE IETF Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [mile] AD Review of RFC5070-bis IODEFv2 X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2016 17:51:27 -0000 Thank you very much for your work on this draft! It's a complex document and it reads very well. I have a mix of comments and nits to be addressed before this goes to IESG review. I also see that the IANA changes are requested to be done in the RFC editor queue, can we do that sooner to prevent multiple reviewers from commenting on the same thing? I can find someone to help if needed. In the introduction, there should be a summary of changes from RFC5070. Change logs are usually deleted upon publication and last call reviewers usually look for this in the introduction. A pointer to section 4.4 would be good as well here. Section 3.3.1 Did the WG discuss (sorry if I missed it), just replacing the values for TLP with what is there now? Or are there other groups using what was there in v1? Having duplication means that applications have to program in the equivalence, which is fine, just one more thing to do or that could cause confusion. Section 3.9 Contact class I noticed that nothing is required and wanted to make sure that is what the WG wanted for this class. The class can be used with no required elements. 3.18.2 the category list is impressive! Section 3.19 Shouldn't this be TimeDomainWasChecked? DateDomainWasChecked Zero or one. DATETIME. A timestamp of when the domain listed in the Name class was resolved. I had to read the description to realize it was a full timestamp, which is good as that's what incident handlers need. 3.26 I like the improvements to the HashData class! 3.29.5 The new way to represent expressions is pretty clear/easy to understand, which is good! Especially for those that don't read. Security Considerations section: First paragraph - please explicitly mention that the data can be both security and privacy sensitive here. Details can come later in a privacy section that needs to be added. The privacy section should to include options for handling data in sensitive fields, such as using role based contact information instead of individuals contact info as well as protecting sensitive data with encryption (object level and transport MUST - but is covered in a transport). Contact info (email, telephone, postalAddress, etc.), IPs, target/source information, any identifiers that can be linked to individuals. RFC6973 is a great resource and a quick read. Nits: Section 2.15.1, "a" is repeated twice at the end of the flowing text: spec-name Required. ENUM. Identifies the format and semantics of the element body of this class. Formal standards and specifications can be referenced as well as a free-form text description with a a Section 3.10.1 change describes to described in the last line of the first paragraph: From: "to be describes in either free-form or machine readable form." To: "to be described in either free-form or machine readable form." Section 3.14, 4th line, EvenData should be EventData "recursive definition of EvenData allows for the grouping of related" Section 5, line 4, change "ad" to "add" There is support to ad additional enumerated values and new classes. Schema/UML comparison There is a mismatch between PostalAddress in the UML and the Schema in the Contact class. The UML has it as 0-1 and the schema has it as 0-unbounded DomainData Class - This isn't an error, just a point of inconsistency. MaxOccurs value is explicitly set here and not in other places since 1 is the default. Thank you! -- Best regards, Kathleen From nobody Wed Apr 27 06:49:56 2016 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13CB512D5AC for ; Wed, 27 Apr 2016 06:49:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.29 X-Spam-Level: X-Spam-Status: No, score=-4.29 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, T_FILL_THIS_FORM_SHORT=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sq5zlP6KGoDd for ; Wed, 27 Apr 2016 06:49:53 -0700 (PDT) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1ACE12D1E1 for ; Wed, 27 Apr 2016 06:49:53 -0700 (PDT) Received: from pawpaw.sei.cmu.edu (pawpaw.sei.cmu.edu [10.64.21.22]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u3RDnqua011573; Wed, 27 Apr 2016 09:49:52 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1461764992; bh=E/j+EhrF6cdTBiBQrLWVMR1m0628rcwIahIVLckFwuI=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:Content-Transfer-Encoding:MIME-Version:Sender: Reply-To; b=PvY/InGmucuZIojlEcqYNphghhJj6JpOnO0QexVhtnZSOEV13SNSbsr6yhnEIh3wW 19bRsytReNMc/wHqN2EiJma70CU+vceYdLJGBYLSPm6WXugYHWiHxKzyI7nYBIrdAL a50qmGZH+1dDzQppNLO00X+KOL4Xk0j1Y92BcVY8= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by pawpaw.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u3RDnp5o019667; Wed, 27 Apr 2016 09:49:51 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0279.002; Wed, 27 Apr 2016 09:49:51 -0400 From: "Roman D. Danyliw" To: Kathleen Moriarty Thread-Topic: [mile] AD Review of RFC5070-bis IODEFv2 Thread-Index: AQHRn+RJNF8xVzLT20a1VP1fCDq0jZ+d142u Date: Wed, 27 Apr 2016 13:49:50 +0000 Message-ID: <139CF3DE-EE09-4583-8C7C-4D92F29C51BE@cert.org> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: MILE IETF Subject: Re: [mile] AD Review of RFC5070-bis IODEFv2 X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Apr 2016 13:49:56 -0000 Thanks for this detailed review! I'll make the necessary changes. Roman > On Apr 26, 2016, at 1:51 PM, Kathleen Moriarty wrote: >=20 > Thank you very much for your work on this draft! It's a complex > document and it reads very well. I have a mix of comments and nits to > be addressed before this goes to IESG review. I also see that the > IANA changes are requested to be done in the RFC editor queue, can we > do that sooner to prevent multiple reviewers from commenting on the > same thing? I can find someone to help if needed. >=20 > In the introduction, there should be a summary of changes from > RFC5070. Change logs are usually deleted upon publication and last > call reviewers usually look for this in the introduction. A pointer > to section 4.4 would be good as well here. >=20 > Section 3.3.1 > Did the WG discuss (sorry if I missed it), just replacing the values > for TLP with what is there now? Or are there other groups using what > was there in v1? Having duplication means that applications have to > program in the equivalence, which is fine, just one more thing to do > or that could cause confusion. >=20 > Section 3.9 Contact class >=20 > I noticed that nothing is required and wanted to make sure that is > what the WG wanted for this class. The class can be used with no > required elements. >=20 > 3.18.2 > the category list is impressive! >=20 > Section 3.19 > Shouldn't this be TimeDomainWasChecked? > DateDomainWasChecked > Zero or one. DATETIME. A timestamp of when the domain listed in > the Name class was resolved. >=20 > I had to read the description to realize it was a full timestamp, > which is good as that's what incident handlers need. >=20 > 3.26 > I like the improvements to the HashData class! >=20 > 3.29.5 > The new way to represent expressions is pretty clear/easy to > understand, which is good! Especially for those that don't read. >=20 > Security Considerations section: >=20 > First paragraph - please explicitly mention that the data can be both > security and privacy sensitive here. Details can come later in a > privacy section that needs to be added. >=20 > The privacy section should to include options for handling data in > sensitive fields, such as using role based contact information instead > of individuals contact info as well as protecting sensitive data with > encryption (object level and transport MUST - but is covered in a > transport). >=20 > Contact info (email, telephone, postalAddress, etc.), IPs, > target/source information, any identifiers that can be linked to > individuals. >=20 > RFC6973 is a great resource and a quick read. >=20 > Nits: >=20 > Section 2.15.1, "a" is repeated twice at the end of the flowing text: > spec-name > Required. ENUM. Identifies the format and semantics of the > element body of this class. Formal standards and specifications > can be referenced as well as a free-form text description with a a >=20 > Section 3.10.1 > change describes to described in the last line of the first paragraph: > From: "to be describes in either free-form or machine readable form." > To: "to be described in either free-form or machine readable form." >=20 > Section 3.14, 4th line, EvenData should be EventData > "recursive definition of EvenData allows for the grouping of related" >=20 > Section 5, line 4, change "ad" to "add" > There is support to ad additional enumerated values and new classes. >=20 > Schema/UML comparison >=20 > There is a mismatch between PostalAddress in the UML and the Schema in > the Contact class. The UML has it as 0-1 and the schema has it as > 0-unbounded >=20 > > > > minOccurs=3D"0" maxOccurs=3D"unbounded"/> > minOccurs=3D"0" maxOccurs=3D"unbounded"/> > minOccurs=3D"0" maxOccurs=3D"unbounded"/> > minOccurs=3D"0" maxOccurs=3D"unbounded"/> > minOccurs=3D"0" maxOccurs=3D"unbounded"/> >=20 > DomainData Class - > This isn't an error, just a point of inconsistency. MaxOccurs value > is explicitly set here and not in other places since 1 is the default. >=20 >=20 > Thank you! > --=20 >=20 > Best regards, > Kathleen >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile >=20