From nobody Thu Jun  1 07:42:08 2017
Return-Path: <adam.w.montville@gmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F6DE129B8C; Thu,  1 Jun 2017 07:42:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id padfrpoBEqVP; Thu,  1 Jun 2017 07:41:58 -0700 (PDT)
Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5581F1293F3; Thu,  1 Jun 2017 07:41:58 -0700 (PDT)
Received: by mail-io0-x22a.google.com with SMTP id o12so37732536iod.3; Thu, 01 Jun 2017 07:41:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:from:date:message-id:subject:to; bh=e5MakWZ6s96ae+f4/EamhKCglI/hiF0EiL/ePAKf2uE=; b=aRyjzCjnLoNmjJs7KmmoH8plOB80jV9eaM4F7iCl5W2dXm36RA3sh4O03pCnQ/CfHw Cfnn7GoKbCqj3fOWP9zmKwRYI/rZQy1mErwjZS2OBjaXoSjdMeXsFmndMTXFPi3WezkB WoSXp6wo3Izt0VfEoFsphIETkvw4yOnl2pzPhg4G2Hu0Q1MqEsWlQTSDvu7IogI/tSaG uB0JYtiG2bmzJrDclEu8NqL3JwacvNRASK9iJIfbG9wnl/auHQLq8fNEbLjvQlpBmCUM Zv9aL++AfJu+z8KNhu8eh/bTAozZJbWFSKTvgJBERFlcV2yxU8vC2zP9m4/bQPFK0nMc 5+5g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=e5MakWZ6s96ae+f4/EamhKCglI/hiF0EiL/ePAKf2uE=; b=cJc6LJcg3ycDbUNtRX7NV7VX14bLN6SI/Adqivb1DL1lRbGB+UyF20Got1sk5F975p 44a9Ux9vsBumTTDWhrUpK0KNCu6MwsAHR3FEAL/4USTAcZihD49i8BbJZVnULgbMB5uo MTNgmE07HcVujV42O9zUfSAPzAXQCVcA/mnsf3b7eoWU+HGSvlXgSTSnUZuF/ebsoNQS vY8oLQn40D03TvAaov/xcizNDqCA4VaNUw2JVOVPqek+tP1JjZWR0Cjt2PyUOfabTEmM kMvLrp0RXxIWwcqX+KTviPuKRJDeO9M7IxivQ5LLQOeQvB5D8R0OG2OuVtWrxge/Ptm/ aTFg==
X-Gm-Message-State: AODbwcC4f9vnomM+S5HP48QwG2ps0gzW2C2PQRD1Ue5iKSTpaIexHAU6 YQLn29AtNzBlLmt+HS8GJDBDXjbUULwX
X-Received: by 10.107.176.131 with SMTP id z125mr1441334ioe.161.1496328117324;  Thu, 01 Jun 2017 07:41:57 -0700 (PDT)
MIME-Version: 1.0
From: Adam Montville <adam.w.montville@gmail.com>
Date: Thu, 01 Jun 2017 14:41:46 +0000
Message-ID: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com>
To: "sacm@ietf.org" <sacm@ietf.org>, "<mile@ietf.org>" <mile@ietf.org>
Content-Type: multipart/alternative; boundary="001a114532bae6adc70550e709da"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/f-xkzlIvMqbmKGFecWlqH-1r1oU>
Subject: [mile] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jun 2017 14:42:00 -0000

--001a114532bae6adc70550e709da
Content-Type: text/plain; charset="UTF-8"

Wondering if anyone is working on a ROLIE extension for vulnerability
detection data? Specifically for OVAL vulnerability definitions.

Thanks,

Adam

--001a114532bae6adc70550e709da
Content-Type: text/html; charset="UTF-8"

<div dir="ltr">Wondering if anyone is working on a ROLIE extension for vulnerability detection data? Specifically for OVAL vulnerability definitions.<div><br></div><div>Thanks,</div><div><br></div><div>Adam</div></div>

--001a114532bae6adc70550e709da--


From nobody Thu Jun  1 09:53:13 2017
Return-Path: <david.waltermire@nist.gov>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03A3012EA74; Thu,  1 Jun 2017 09:53:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xhrLXjzx0g8q; Thu,  1 Jun 2017 09:53:02 -0700 (PDT)
Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0129.outbound.protection.outlook.com [23.103.200.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2F16129540; Thu,  1 Jun 2017 09:53:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fQbs3z+ZciibBWXIyhKL7qEXu2bfkaLmIGuY5+N2pH0=; b=K50qOdV6Qfyj90MpEg++Yk4IoS+Cuttq7iQPo89a24QkMWX4Wmk9aykBSPpeZR+31cU9Gy4sbZtF+5pCoV8hafZZLVDyn00ve9+xkPSHkSkDHA8SvXsTav9Hz5dJjrtP734HeQXZ70RasnnO2LUtsxwRiJ4ZSSdUVSo/5eYsRdo=
Received: from MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) by MWHPR09MB1439.namprd09.prod.outlook.com (10.173.50.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1124.9; Thu, 1 Jun 2017 16:53:01 +0000
Received: from MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) by MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) with mapi id 15.01.1124.020; Thu, 1 Jun 2017 16:53:01 +0000
From: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
To: Adam Montville <adam.w.montville@gmail.com>, "sacm@ietf.org" <sacm@ietf.org>, "<mile@ietf.org>" <mile@ietf.org>
Thread-Topic: [sacm] ROLIE vulnerability extension
Thread-Index: AQHS2uU99syK6mL0p06yscygpvOvt6IQOMlw
Date: Thu, 1 Jun 2017 16:53:01 +0000
Message-ID: <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
References: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com>
In-Reply-To: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.224.58]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; MWHPR09MB1439; 7:PsVTqIiR5Nxt7kEkVkz+L1Wl/tAA0UY2vy/Uacm+NryUO1YqZ8WNfiLX+WBTIIMJnmauDMqFbs4tXVaBa9DPHXONXo9i/Fc/a3VCeywGCQxuJmlejBK6lFEXy520thciZwXbBFrw9Ai0+LgQ1r4zACRb+R4lJg+c1viZ0pIgL2IPMXUJ2+Jlv6hDA+YlswS/DUHVBMolkEa32Vxn4N2zplYsrbC4Nd4R93DrMzvcyDv8WWVI1XEo3bu7GNiz79I5aL/Y2Y+DTLHCWeDPGKVKFmEvPzdixDXcM4Ic8ps40AuZgEAjtZLXAire2lAfKhkn0KlZidXTc9xa4SW4W+LDDw==
x-ms-traffictypediagnostic: MWHPR09MB1439:
x-ms-office365-filtering-correlation-id: 7322a594-f952-4c39-7f83-08d4a90ea9f7
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081);  SRVR:MWHPR09MB1439; 
x-microsoft-antispam-prvs: <MWHPR09MB1439DCB4A241370D12473087F0F60@MWHPR09MB1439.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(10201501046)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123558100)(20161123564025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123555025)(20161123560025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:MWHPR09MB1439; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:MWHPR09MB1439; 
x-forefront-prvs: 0325F6C77B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(6009001)(39840400002)(39850400002)(39400400002)(39410400002)(39450400003)(39860400002)(377454003)(7696004)(38730400002)(790700001)(6246003)(102836003)(478600001)(2950100002)(3846002)(6116002)(14454004)(50986999)(53546009)(6436002)(86362001)(53936002)(25786009)(8676002)(77096006)(6506006)(76176999)(81166006)(54356999)(54896002)(3660700001)(2501003)(74316002)(3280700002)(9686003)(8936002)(99286003)(7736002)(66066001)(6306002)(229853002)(2906002)(55016002)(5660300001)(39060400002)(33656002)(189998001)(2900100001)(122556002)(491001)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR09MB1439; H:MWHPR09MB1440.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60MWHPR09MB1440namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jun 2017 16:53:01.1194 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1439
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/tmpsKVE0enrgjU0sX6PAxHb4hkg>
Subject: Re: [mile] [sacm] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jun 2017 16:53:06 -0000

--_000_MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60MWHPR09MB1440namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60MWHPR09MB1440namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60MWHPR09MB1440namp_--


From nobody Thu Jun  1 09:58:48 2017
Return-Path: <adam.w.montville@gmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63A8312EB0B; Thu,  1 Jun 2017 09:58:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.698
X-Spam-Level: 
X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0rZSfPgFnolp; Thu,  1 Jun 2017 09:58:45 -0700 (PDT)
Received: from mail-it0-x231.google.com (mail-it0-x231.google.com [IPv6:2607:f8b0:4001:c0b::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C20B31296CD; Thu,  1 Jun 2017 09:58:45 -0700 (PDT)
Received: by mail-it0-x231.google.com with SMTP id m47so43439201iti.1; Thu, 01 Jun 2017 09:58:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to;  bh=O+4mpF5n9SDiJz61ZK8ijePZE/F7bcmC7PZyOYqkV6s=; b=Ysix3P6SyFsxu7rvruidxIvSBVbpKmJw4UaOBowV3TtlBpuA21+h3Q6Ivii2BS1C4M NfLcPVFRxEL/zktx+ZjTEjf0q1amer1RrrQdCalo9e7IOxtkhwWJgQblQbBIc6EE3Hy7 A42tdDdybXFChTlOKo6gwY9HPMUnCKWg7iww0gm45Ig4flif8t7GKzqZAJtE92JWu+mN j81rVH86fEB7wAh4MggAoqyWZ69DdHpNHKXTTaly9x6R9KvPdL0PdxGirO7SgMorR/l4 ws4Mhie2U/f/dYp3D4c//1r1bbMqJLYv9MAzRolnlH8kNf2lWi5OP9LYUdMNyz7YgU+s RRCQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=O+4mpF5n9SDiJz61ZK8ijePZE/F7bcmC7PZyOYqkV6s=; b=T76rPkYwf/8reAzzhX/NI5nrFatsv4B3WE7LaGhSpAI6UGy5+G3cwPLShb96ug1b3g 0kTuAJA/D1EaPhtiFs25Kdcx0LoiF6AAwANqP3PPDyJOACvgtNtNWsV1aEE93Mocj1d0 2mBe3LLF9iTbfLY0S6wkKVW3wzRLPhf3yqrEDouqvhpAh2VDf8dPc9aQOWPr/rpeT8/B QGun/JMKw1YTWCGPetz0r0mJPAO+1QS6ECNNoxti9uFxKXIoGg70JuqwsVZVzlDMF1ft i2bzu6hVwtNawaYdWXaDJemtjdF7aJaPQMmD1RNhrUsQOCUvNRX4XNrCACmhPIMvzrdP tYvg==
X-Gm-Message-State: AODbwcDolik4lFa4aBKf0BLSXBWX5tdfhV9yiFNMf8nV7eCR/cf4pzn1 RFDh00FDi/3WfRCE/1uHYObsKNVFUA==
X-Received: by 10.36.88.18 with SMTP id f18mr223574itb.60.1496336325108; Thu, 01 Jun 2017 09:58:45 -0700 (PDT)
MIME-Version: 1.0
References: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com> <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
In-Reply-To: <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
From: Adam Montville <adam.w.montville@gmail.com>
Date: Thu, 01 Jun 2017 16:58:34 +0000
Message-ID: <CACknUNVBWvOdXZ_2hWupd8Cmt3VdzFfBNPjk3HaC2hOShWbTKQ@mail.gmail.com>
To: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>, "sacm@ietf.org" <sacm@ietf.org>, "<mile@ietf.org>" <mile@ietf.org>
Content-Type: multipart/alternative; boundary="001a114064661f822f0550e8f3aa"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/c9QtpgjQrmcZMeVxWAMRJwL08GM>
Subject: Re: [mile] [sacm] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jun 2017 16:58:47 -0000

--001a114064661f822f0550e8f3aa
Content-Type: text/plain; charset="UTF-8"

Is there anything already defined that would suit the more general need? In
other words, while it's true that ROLIE doesn't have a vulnerability record
or vulnerability detection data extension at this point, is there a
non-ROLIE capability filling that need already?

On Thu, Jun 1, 2017 at 11:53 AM Waltermire, David A. (Fed) <
david.waltermire@nist.gov> wrote:

> Not yet. I am also interested in addressing vulnerability records, but I
> have been waiting for the outcome of the OASIS CVRF/CSAF work first.
>
>
>
> We could collaborate if you are interested.
>
>
>
> Regards,
>
> Dave
>
>
>
> *From:* sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam Montville
> *Sent:* Thursday, June 01, 2017 10:42 AM
> *To:* sacm@ietf.org; <mile@ietf.org> <mile@ietf.org>
> *Subject:* [sacm] ROLIE vulnerability extension
>
>
>
> Wondering if anyone is working on a ROLIE extension for vulnerability
> detection data? Specifically for OVAL vulnerability definitions.
>
>
>
> Thanks,
>
>
>
> Adam
>

--001a114064661f822f0550e8f3aa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Is there anything already defined that would suit the more=
 general need? In other words, while it&#39;s true that ROLIE doesn&#39;t h=
ave a vulnerability record or vulnerability detection data extension at thi=
s point, is there a non-ROLIE capability filling that need already?=C2=A0</=
div><br><div class=3D"gmail_quote"><div dir=3D"ltr">On Thu, Jun 1, 2017 at =
11:53 AM Waltermire, David A. (Fed) &lt;<a href=3D"mailto:david.waltermire@=
nist.gov">david.waltermire@nist.gov</a>&gt; wrote:<br></div><blockquote cla=
ss=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pa=
dding-left:1ex">





<div lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"m_8778302365054015833WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">Not yet. I am also interested in addressing vulnera=
bility records, but I have been waiting for the outcome of the OASIS CVRF/C=
SAF work first.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">We could collaborate if you are interested.<u></u><=
u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">Regards,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">Dave<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<div style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in =
4.0pt">
<div>
<div style=3D"border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> sacm [mailto:<a href=3D"mailto=
:sacm-bounces@ietf.org" target=3D"_blank">sacm-bounces@ietf.org</a>]
<b>On Behalf Of </b>Adam Montville<br>
<b>Sent:</b> Thursday, June 01, 2017 10:42 AM<br>
<b>To:</b> <a href=3D"mailto:sacm@ietf.org" target=3D"_blank">sacm@ietf.org=
</a>; &lt;<a href=3D"mailto:mile@ietf.org" target=3D"_blank">mile@ietf.org<=
/a>&gt; &lt;<a href=3D"mailto:mile@ietf.org" target=3D"_blank">mile@ietf.or=
g</a>&gt;<br>
<b>Subject:</b> [sacm] ROLIE vulnerability extension<u></u><u></u></span></=
p>
</div>
</div></div></div></div><div lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F=
72"><div class=3D"m_8778302365054015833WordSection1"><div style=3D"border:n=
one;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal">Wondering if anyone is working on a ROLIE extension =
for vulnerability detection data? Specifically for OVAL vulnerability defin=
itions.<u></u><u></u></p>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Adam<u></u><u></u></p>
</div>
</div>
</div></div></div></blockquote></div>

--001a114064661f822f0550e8f3aa--


From nobody Thu Jun  1 11:14:30 2017
Return-Path: <david.waltermire@nist.gov>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB326126E01; Thu,  1 Jun 2017 11:14:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6s74wKIFBkhF; Thu,  1 Jun 2017 11:14:20 -0700 (PDT)
Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0121.outbound.protection.outlook.com [23.103.201.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 296B31200E5; Thu,  1 Jun 2017 11:14:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=jO6uJIpYGwEbtqXIZwXfQNsTtnlXg6r/2LtaZxIH/9g=; b=phxCGZzdggZjL+SKot9dP/gDyU3Ez3uKoEjaEI9zog8RE0EwV4HYC6Wmialy909afWH5SzBNpUUdyg1Af2MytNa+14ZPV2pIlD6CK+I+4OS0t55LyIyya5ZNMz0meeBHkus2gxegtn1pCgBH9ktZZizfFmg5we3gv6fdf7kBJ6U=
Received: from MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) by MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1124.9; Thu, 1 Jun 2017 18:14:18 +0000
Received: from MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) by MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) with mapi id 15.01.1124.020; Thu, 1 Jun 2017 18:14:18 +0000
From: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
To: Adam Montville <adam.w.montville@gmail.com>, "sacm@ietf.org" <sacm@ietf.org>, "<mile@ietf.org>" <mile@ietf.org>
Thread-Topic: [sacm] ROLIE vulnerability extension
Thread-Index: AQHS2uU99syK6mL0p06yscygpvOvt6IQOMlwgAACCACAABIdgA==
Date: Thu, 1 Jun 2017 18:14:18 +0000
Message-ID: <MWHPR09MB14407DBB92CD13200AE91A7FF0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
References: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com> <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com> <CACknUNVBWvOdXZ_2hWupd8Cmt3VdzFfBNPjk3HaC2hOShWbTKQ@mail.gmail.com>
In-Reply-To: <CACknUNVBWvOdXZ_2hWupd8Cmt3VdzFfBNPjk3HaC2hOShWbTKQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.224.58]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; MWHPR09MB1440; 7:yLs8Vi2qi35/jkk/ftfL9vAdm/RwM7C1v2KxPOcSjRTEr59K6AH+yAJGNfLT0amk6MaGhMOCLuJO5QetWcInmW3392SkHJyVkepNndm8gIKrldHHkDXqmJzCSd1dM20RxoWSPXjUJFm/504IVq8AJGW1N26p8YybyLrMuL9U9fhKIHnQfn5SknCzz/mudjsPkRee2f5/5q6DMbYmiBmvD1Wvjs0xdCHWmYifFm65x4LhtbBc7dIQdxY3HjyyDKr55eN+2BSIiB6C39ttexbiUiN/xVWv56v0l/896K30QTUWDiPaJlG65iqmOK2S5YTJtf8Rs9mE7y1s9dkBbnQSNA==
x-ms-traffictypediagnostic: MWHPR09MB1440:
x-ms-office365-filtering-correlation-id: a64168a0-727b-4557-bd08-08d4a91a04d8
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081)(201702281549075); SRVR:MWHPR09MB1440; 
x-microsoft-antispam-prvs: <MWHPR09MB144003FC7DE5E132665E7801F0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(65766998875637)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(100000703101)(100105400095)(10201501046)(3002001)(6055026)(6041248)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123555025)(20161123560025)(20161123558100)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:MWHPR09MB1440; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:MWHPR09MB1440; 
x-forefront-prvs: 0325F6C77B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39400400002)(39850400002)(39450400003)(39840400002)(39410400002)(39860400002)(377454003)(24454002)(229853002)(6116002)(3846002)(53936002)(6306002)(39060400002)(74316002)(236005)(55016002)(54896002)(99286003)(9686003)(19609705001)(7736002)(478600001)(3280700002)(81166006)(8936002)(14454004)(5660300001)(3660700001)(8676002)(2906002)(77096006)(2950100002)(6506006)(790700001)(2900100001)(86362001)(76176999)(54356999)(6436002)(50986999)(25786009)(7696004)(38730400002)(2501003)(53546009)(33656002)(189998001)(66066001)(6246003)(122556002)(102836003)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR09MB1440; H:MWHPR09MB1440.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_MWHPR09MB14407DBB92CD13200AE91A7FF0F60MWHPR09MB1440namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jun 2017 18:14:18.0389 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1440
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/r9DkyeVvCXs4zB03zO_qvFwny2A>
Subject: Re: [mile] [sacm] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jun 2017 18:14:23 -0000

--_000_MWHPR09MB14407DBB92CD13200AE91A7FF0F60MWHPR09MB1440namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SSBhbSBub3QgYXdhcmUgb2YgYW55dGhpbmcgdGhhdCBpcyBwcm92aWRpbmcgYSBzeW5kaWNhdGlv
biBhcHByb2FjaCBmb3IgdnVsbmVyYWJpbGl0eSBpbmZvcm1hdGlvbi4gSSBhbSBhbHNvIG5vdCBh
d2FyZSBvZiBhIGdlbmVyYWwgc3RhbmRhcmRpemVkIG1vZGVsIGZvciB2dWxuZXJhYmlsaXRpZXMg
dGhhdCBjYW4gYmUgdXNlZCBjcmFkbGUgdG8gZ3JhdmUgZm9yIGEgdnVsbmVyYWJpbGl0eS4gVGhp
cyBpcyBzb21ldGhpbmcgd2UgaGF2ZSBiZWVuIGRpc2N1c3NpbmcgaW4gT0FTSVMgQ1NBRi4gQXQg
TklTVCB3ZSBoYXZlIGEgdnVsbmVyYWJpbGl0eSBtb2RlbCB3ZSB1c2Ugd2l0aCB0aGUgTmF0aW9u
YWwgVnVsbmVyYWJpbGl0eSBEYXRhYmFzZSwgYnV0IGl0IGlzbuKAmXQgYW55dGhpbmcgbmVhciBh
IHN0YW5kYXJkIGF0IHRoaXMgcG9pbnQuDQoNCk9uZSB3YXkgdG8gYXBwcm9hY2ggdGhlIGZhY3Qg
dGhhdCB3ZSBkb27igJl0IGhhdmUgYSBzdGFuZGFyZGl6ZWQgZm9ybWF0IGlzIHRvIG5vdCBhdHRl
bXB0IHRvIHBpY2sgYW55IGF0IHRoaXMgdGltZS4gVGhlIFJPTElFIHZ1bG5lcmFiaWxpdHkgZXh0
ZW5zaW9uIGNhbiBkZWZpbmUgYSBudW1iZXIgb2YgaW5mb3JtYXRpb24gdHlwZXMgdGhhdCByZWxh
dGUgdG8gdnVsbmVyYWJpbGl0aWVzIChlLmcuLCB2dWxuZXJhYmlsaXR5IHJlY29yZHMsIHZ1bG5l
cmFiaWxpdHkgY2hlY2tzLCBldGMuKSBhbmQgdGhlbiBzdGF5IHNpbGVudCBvbiB0aGUgdXNlIG9m
IHRoZSBST0xJRSBmb3JtYXQgZWxlbWVudCB3aGljaCBjYW4gYmUgdXNlZCB0byBzcGVjaWZ5IHdo
aWNoIG1vZGVsIChlLmcuLCBDVlJGLCBDU0FGLCBTVElYLCBPVkFMLCBldGMuKSBpcyB1c2VkIGZv
ciBhIGdpdmVuIGVudHJ5LiBEZWZpbmluZyBpbmZvcm1hdGlvbiB0eXBlcyBpbiB0aGlzIHdheSBw
cm92aWRlcyBhIGdvb2QgZGVncmVlIG9mIHZhbHVlIGJ5IGFsbG93aW5nIG9yZ2FuaXphdGlvbnMg
dG8gcHVibGlzaCB2dWxuZXJhYmlsaXR5IGluZm9ybWF0aW9uIHVzaW5nIFJPTElFLiBEbyB5b3Ug
dGhpbmsgdGhhdCB0aGlzIG1heSBiZSBlbm91Z2ggdG8gc3RhcnQgd2l0aCBmb3Igbm93Pw0KDQpS
ZWdhcmRzLA0KRGF2ZQ0KDQpGcm9tOiBBZGFtIE1vbnR2aWxsZSBbbWFpbHRvOmFkYW0udy5tb250
dmlsbGVAZ21haWwuY29tXQ0KU2VudDogVGh1cnNkYXksIEp1bmUgMDEsIDIwMTcgMTI6NTkgUE0N
ClRvOiBXYWx0ZXJtaXJlLCBEYXZpZCBBLiAoRmVkKSA8ZGF2aWQud2FsdGVybWlyZUBuaXN0Lmdv
dj47IHNhY21AaWV0Zi5vcmc7IDxtaWxlQGlldGYub3JnPiA8bWlsZUBpZXRmLm9yZz4NClN1Ympl
Y3Q6IFJlOiBbc2FjbV0gUk9MSUUgdnVsbmVyYWJpbGl0eSBleHRlbnNpb24NCg0KSXMgdGhlcmUg
YW55dGhpbmcgYWxyZWFkeSBkZWZpbmVkIHRoYXQgd291bGQgc3VpdCB0aGUgbW9yZSBnZW5lcmFs
IG5lZWQ/IEluIG90aGVyIHdvcmRzLCB3aGlsZSBpdCdzIHRydWUgdGhhdCBST0xJRSBkb2Vzbid0
IGhhdmUgYSB2dWxuZXJhYmlsaXR5IHJlY29yZCBvciB2dWxuZXJhYmlsaXR5IGRldGVjdGlvbiBk
YXRhIGV4dGVuc2lvbiBhdCB0aGlzIHBvaW50LCBpcyB0aGVyZSBhIG5vbi1ST0xJRSBjYXBhYmls
aXR5IGZpbGxpbmcgdGhhdCBuZWVkIGFscmVhZHk/DQoNCk9uIFRodSwgSnVuIDEsIDIwMTcgYXQg
MTE6NTMgQU0gV2FsdGVybWlyZSwgRGF2aWQgQS4gKEZlZCkgPGRhdmlkLndhbHRlcm1pcmVAbmlz
dC5nb3Y8bWFpbHRvOmRhdmlkLndhbHRlcm1pcmVAbmlzdC5nb3Y+PiB3cm90ZToNCk5vdCB5ZXQu
IEkgYW0gYWxzbyBpbnRlcmVzdGVkIGluIGFkZHJlc3NpbmcgdnVsbmVyYWJpbGl0eSByZWNvcmRz
LCBidXQgSSBoYXZlIGJlZW4gd2FpdGluZyBmb3IgdGhlIG91dGNvbWUgb2YgdGhlIE9BU0lTIENW
UkYvQ1NBRiB3b3JrIGZpcnN0Lg0KDQpXZSBjb3VsZCBjb2xsYWJvcmF0ZSBpZiB5b3UgYXJlIGlu
dGVyZXN0ZWQuDQoNClJlZ2FyZHMsDQpEYXZlDQoNCkZyb206IHNhY20gW21haWx0bzpzYWNtLWJv
dW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnNhY20tYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBP
ZiBBZGFtIE1vbnR2aWxsZQ0KU2VudDogVGh1cnNkYXksIEp1bmUgMDEsIDIwMTcgMTA6NDIgQU0N
ClRvOiBzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3JnPjsgPG1pbGVAaWV0Zi5vcmc8
bWFpbHRvOm1pbGVAaWV0Zi5vcmc+PiA8bWlsZUBpZXRmLm9yZzxtYWlsdG86bWlsZUBpZXRmLm9y
Zz4+DQpTdWJqZWN0OiBbc2FjbV0gUk9MSUUgdnVsbmVyYWJpbGl0eSBleHRlbnNpb24NCg0KV29u
ZGVyaW5nIGlmIGFueW9uZSBpcyB3b3JraW5nIG9uIGEgUk9MSUUgZXh0ZW5zaW9uIGZvciB2dWxu
ZXJhYmlsaXR5IGRldGVjdGlvbiBkYXRhPyBTcGVjaWZpY2FsbHkgZm9yIE9WQUwgdnVsbmVyYWJp
bGl0eSBkZWZpbml0aW9ucy4NCg0KVGhhbmtzLA0KDQpBZGFtDQo=

--_000_MWHPR09MB14407DBB92CD13200AE91A7FF0F60MWHPR09MB1440namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_MWHPR09MB14407DBB92CD13200AE91A7FF0F60MWHPR09MB1440namp_--


From nobody Thu Jun  1 23:04:24 2017
Return-Path: <jerome.athias@protonmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91C1A127137; Thu,  1 Jun 2017 23:04:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=protonmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a-z6spc-f1fP; Thu,  1 Jun 2017 23:04:12 -0700 (PDT)
Received: from mail2.protonmail.ch (mail2.protonmail.ch [185.70.40.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EAF1127B52; Thu,  1 Jun 2017 23:04:10 -0700 (PDT)
Date: Fri, 02 Jun 2017 02:03:57 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=default; t=1496383443; bh=AiW3IoFzxpycEHlPjmzIyh/EPqzOskih01PL/ETpkkc=; h=To:From:Cc:Reply-To:Subject:In-Reply-To:References:Feedback-ID: From; b=WFu6+5AOQlhjhnJUcLZ8BpSaKgWMHvFBZJ1YwIexDiMpeQGXjJT/rDMAYyTEjVpET aHbC02aRzA4OsunSoZ+VFgV5r6RHMtyCb6n0CcRUX4ioXYMnTI+jy+74QBFV6oStq1 zBXx0qrrgqZPJtRvQ6RSPhJv2HVahFpnQvuIuonc=
To: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
From: Jerome Athias <jerome.athias@protonmail.com>
Cc: Adam Montville <adam.w.montville@gmail.com>, "sacm@ietf.org" <sacm@ietf.org>, "mile@ietf.org" <mile@ietf.org>
Reply-To: Jerome Athias <jerome.athias@protonmail.com>
Message-ID: <IOMDA9-7fwzyW-wIHtJtYB5xaM9YiPzRXHZ4C9aTrcWoSoIQvUerj_ajUJkXQyl6tuuAX2oUhnusk_Vf-VsMw_6xmXJYnXUEUHO5jxpu6hw=@protonmail.com>
In-Reply-To: <MWHPR09MB14407DBB92CD13200AE91A7FF0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
References: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com> <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com> <CACknUNVBWvOdXZ_2hWupd8Cmt3VdzFfBNPjk3HaC2hOShWbTKQ@mail.gmail.com> <MWHPR09MB14407DBB92CD13200AE91A7FF0F60@MWHPR09MB1440.namprd09.prod.outlook.com>
Feedback-ID: 0pNaUpQyJcJ_FqKgvRh59kNH9tw1YU9Hb7-41TF1UFya4DA0ft6-ejYSrPjLLQWz-KcGUoHsZH8z6Hzy-ZW3EA==:Ext:ProtonMail
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_ae9edec8d4227e6129c95025f990cb0a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/tx-jcClXub8n_fERpcB44ARKsGg>
Subject: Re: [mile] [sacm] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Jun 2017 06:04:16 -0000

This is a multi-part message in MIME format.

--b1_ae9edec8d4227e6129c95025f990cb0a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64
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--b1_ae9edec8d4227e6129c95025f990cb0a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
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--b1_ae9edec8d4227e6129c95025f990cb0a--


From nobody Fri Jun  2 04:29:53 2017
Return-Path: <adam.w.montville@gmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18AAE12EB40; Fri,  2 Jun 2017 04:29:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WJVxoo-P5OOC; Fri,  2 Jun 2017 04:29:44 -0700 (PDT)
Received: from mail-it0-x232.google.com (mail-it0-x232.google.com [IPv6:2607:f8b0:4001:c0b::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0B1C12025C; Fri,  2 Jun 2017 04:29:43 -0700 (PDT)
Received: by mail-it0-x232.google.com with SMTP id m62so4251507itc.0; Fri, 02 Jun 2017 04:29:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=c4SQVG2UlwNfStJgDh1buLntdmSydzlfB33ICo7Pas0=; b=c7LDEWkY4EtiBkGcuyhk8mMnAV+vh7IC/U3z0tryQ12Jv5mASCJoqp089xEx5zxezL KmPX2lCa8j1Bv2w4znblHlBcH7t0naJ59hrpK2dyV8XMjeUqBLTrzwe1UfmCzAodOtlt xh2KVm1eP46h3KpucuLobrViAdyH3ntgbLKReUTbGkFkHQI/HpdJbydGvjd2IlrLYzob CmR+h5dLTbO9iRA3tXi+aRDI5cbU9IW5GlUBPSXlWSNgWzVXYh+D8TIrxYCGWZXin/YK kuQ9sI4De3s+uebK2vvMygYxr2V4YYTlOhWZDRR+b8MPVW/1xgZWvqMbJqRc9wB4K/Xw k+sw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=c4SQVG2UlwNfStJgDh1buLntdmSydzlfB33ICo7Pas0=; b=l8J211UXTTNYEN0r8h9XjyPJEkLuRhwEFCK97wTGzh68yIVczwdfxhfJdpdLwT2JHC fXDhWUJFcvBMpI7mSUSkxU3JDW0ZrqGuc2V9l8vfSam+cmh4eDAOVf+KJfrRdW5udYiZ kCjaRrkXauFWyXoQ/fzlEBkdoZyrqzh3Pt/NMoTVTjah1DdBWtiAfcjsw7s1AexRR3NC LG8dPDTFyGshSH5EwYaQFPYyleXXVMH/gbx4NepiQkm+x3D/Eki9dDgK48GDSmSx6mur GMdFvN+iah2Yxht6yv6w83mA27V+xjwALQFQPzw55mKr9k1ToGPbGmhMm4o+C5Nti7nf A5TA==
X-Gm-Message-State: AODbwcBa3Op7tFjy4zKZh/bHOApTiFtJpfdftQrPDcF4eBpauzJeInhz 617M2ZYTDHLd8W1pOfpKwVgZH6eUU4Vb
X-Received: by 10.36.54.212 with SMTP id l203mr4020507itl.81.1496402983236; Fri, 02 Jun 2017 04:29:43 -0700 (PDT)
MIME-Version: 1.0
References: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com> <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com> <CACknUNVBWvOdXZ_2hWupd8Cmt3VdzFfBNPjk3HaC2hOShWbTKQ@mail.gmail.com> <MWHPR09MB14407DBB92CD13200AE91A7FF0F60@MWHPR09MB1440.namprd09.prod.outlook.com> <IOMDA9-7fwzyW-wIHtJtYB5xaM9YiPzRXHZ4C9aTrcWoSoIQvUerj_ajUJkXQyl6tuuAX2oUhnusk_Vf-VsMw_6xmXJYnXUEUHO5jxpu6hw=@protonmail.com>
In-Reply-To: <IOMDA9-7fwzyW-wIHtJtYB5xaM9YiPzRXHZ4C9aTrcWoSoIQvUerj_ajUJkXQyl6tuuAX2oUhnusk_Vf-VsMw_6xmXJYnXUEUHO5jxpu6hw=@protonmail.com>
From: Adam Montville <adam.w.montville@gmail.com>
Date: Fri, 02 Jun 2017 11:29:32 +0000
Message-ID: <CACknUNUuGGZ5W_X_rMST=mWMvkKQJM7Oo=La0F3EVza_jyzeGQ@mail.gmail.com>
To: Jerome Athias <jerome.athias@protonmail.com>,  "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
Cc: "sacm@ietf.org" <sacm@ietf.org>, "mile@ietf.org" <mile@ietf.org>
Content-Type: multipart/alternative; boundary="001a113ce24241bbf70550f87859"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/XCjb9nzAbyXzi4TCYEt4qkuayEM>
Subject: Re: [mile] [sacm] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Jun 2017 11:29:46 -0000

--001a113ce24241bbf70550f87859
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Thanks for your perspective, Jerome. When I originally asked the question,
I was asking with an eye toward STIX and more specifically, TAXII. It seems
that TAXII doesn't have the syndication that ROLIE does, but that it may
(I'm not a TAXII expert) provide an appropriate mechanism. That's not to
say ROLIE wouldn't need something, but I did want to understand how high a
priority it was to start looking at this type of ROLIE extension.

Adam

On Fri, Jun 2, 2017 at 1:04 AM Jerome Athias <jerome.athias@protonmail.com>
wrote:

> Yes, we are in 2017 and the industry still not yet cam up with a
> standardized common model for Vulnerability...
>
> I could be ok with David proposed approach.
>
> Just to point out how it was envisioned in STIX v1
> https://stixproject.github.io/data-model/1.2/indicator/TestMechanismsType=
/
>
> 3. OVAL: The OVAL test mechanism allows for the specification of an OVAL
> definition through importing the OVAL schemas. The type is named
> OVALTestMechanismType and is in the
> http://stix.mitre.org/extensions/TestMechanism#OVAL-1 namespace. The
> extension is defined in the file
> extensions/test_mechanism/oval-5.10.1_test_mechanism.xsd or at the URL
> http://stix.mitre.org/XMLSchema/extensions/test_mechanism/oval-5.10.1/1.2=
/oval-5.10.1_test_mechanism.xsd
> .
>
>
>
> -------- Original Message --------
> Subject: Re: [sacm] ROLIE vulnerability extension
>
> Local Time: June 1, 2017 9:14 PM
> UTC Time: June 1, 2017 6:14 PM
> From: david.waltermire@nist.gov
> To: Adam Montville <adam.w.montville@gmail.com>, sacm@ietf.org <
> sacm@ietf.org>, mile@ietf.org
>
>
> I am not aware of anything that is providing a syndication approach for
> vulnerability information. I am also not aware of a general standardized
> model for vulnerabilities that can be used cradle to grave for a
> vulnerability. This is something we have been discussing in OASIS CSAF. A=
t
> NIST we have a vulnerability model we use with the National Vulnerability
> Database, but it isn=E2=80=99t anything near a standard at this point.
>
>
>
> One way to approach the fact that we don=E2=80=99t have a standardized fo=
rmat is
> to not attempt to pick any at this time. The ROLIE vulnerability extensio=
n
> can define a number of information types that relate to vulnerabilities
> (e.g., vulnerability records, vulnerability checks, etc.) and then stay
> silent on the use of the ROLIE format element which can be used to specif=
y
> which model (e.g., CVRF, CSAF, STIX, OVAL, etc.) is used for a given entr=
y.
> Defining information types in this way provides a good degree of value by
> allowing organizations to publish vulnerability information using ROLIE. =
Do
> you think that this may be enough to start with for now?
>
>
>
> Regards,
>
> Dave
>
>
>
> *From:* Adam Montville [mailto:adam.w.montville@gmail.com]
> *Sent:* Thursday, June 01, 2017 12:59 PM
> *To:* Waltermire, David A. (Fed) <david.waltermire@nist.gov>;
> sacm@ietf.org; <mile@ietf.org> <mile@ietf.org>
> *Subject:* Re: [sacm] ROLIE vulnerability extension
>
>
>
> Is there anything already defined that would suit the more general need?
> In other words, while it's true that ROLIE doesn't have a vulnerability
> record or vulnerability detection data extension at this point, is there =
a
> non-ROLIE capability filling that need already?
>
>
>
> On Thu, Jun 1, 2017 at 11:53 AM Waltermire, David A. (Fed) <
> david.waltermire@nist.gov> wrote:
>
> Not yet. I am also interested in addressing vulnerability records, but I
> have been waiting for the outcome of the OASIS CVRF/CSAF work first.
>
>
>
> We could collaborate if you are interested.
>
>
>
> Regards,
>
> Dave
>
>
>
> *From:* sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam Montville
> *Sent:* Thursday, June 01, 2017 10:42 AM
> *To:* sacm@ietf.org; <mile@ietf.org> <mile@ietf.org>
> *Subject:* [sacm] ROLIE vulnerability extension
>
>
>
> Wondering if anyone is working on a ROLIE extension for vulnerability
> detection data? Specifically for OVAL vulnerability definitions.
>
>
>
> Thanks,
>
>
>
> Adam
>
>

--001a113ce24241bbf70550f87859
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thanks for your perspective, Jerome. When I originally ask=
ed the question, I was asking with an eye toward STIX and more specifically=
, TAXII. It seems that TAXII doesn&#39;t have the syndication that ROLIE do=
es, but that it may (I&#39;m not a TAXII expert) provide an appropriate mec=
hanism. That&#39;s not to say ROLIE wouldn&#39;t need something, but I did =
want to understand how high a priority it was to start looking at this type=
 of ROLIE extension.<div><br></div><div>Adam</div></div><br><div class=3D"g=
mail_quote"><div dir=3D"ltr">On Fri, Jun 2, 2017 at 1:04 AM Jerome Athias &=
lt;<a href=3D"mailto:jerome.athias@protonmail.com">jerome.athias@protonmail=
.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Yes, we ar=
e in 2017 and the industry still not yet cam up with a standardized common =
model for Vulnerability...<br></div><div><br></div><div>I could be ok with =
David proposed approach.<br></div><div><br></div><div>Just to point out how=
 it was envisioned in STIX v1<br></div><div><a href=3D"https://stixproject.=
github.io/data-model/1.2/indicator/TestMechanismsType/" target=3D"_blank">h=
ttps://stixproject.github.io/data-model/1.2/indicator/TestMechanismsType/</=
a><br></div><div><br></div><div>3. OVAL: The OVAL test mechanism allows for=
 the specification of an OVAL
 definition through importing the OVAL schemas. The type is named=20
OVALTestMechanismType and is in the <a href=3D"http://stix.mitre.org/extens=
ions/TestMechanism#OVAL-1" target=3D"_blank">http://stix.mitre.org/extensio=
ns/TestMechanism#OVAL-1</a> namespace. The=20
extension is defined in the file=20
extensions/test_mechanism/oval-5.10.1_test_mechanism.xsd or at the URL <a h=
ref=3D"http://stix.mitre.org/XMLSchema/extensions/test_mechanism/oval-5.10.=
1/1.2/oval-5.10.1_test_mechanism.xsd" target=3D"_blank">http://stix.mitre.o=
rg/XMLSchema/extensions/test_mechanism/oval-5.10.1/1.2/oval-5.10.1_test_mec=
hanism.xsd</a>.<br></div><div class=3D"m_-5603958231537483944protonmail_sig=
nature_block m_-5603958231537483944protonmail_signature_block-empty"><div c=
lass=3D"m_-5603958231537483944protonmail_signature_block-user m_-5603958231=
537483944protonmail_signature_block-empty"><div><br></div></div><div class=
=3D"m_-5603958231537483944protonmail_signature_block-proton m_-560395823153=
7483944protonmail_signature_block-empty"><br></div></div><div><br></div><bl=
ockquote class=3D"m_-5603958231537483944protonmail_quote" type=3D"cite"></b=
lockquote><blockquote class=3D"m_-5603958231537483944protonmail_quote" type=
=3D"cite"><div>-------- Original Message --------<br></div><div>Subject: Re=
: [sacm] ROLIE vulnerability extension<br></div></blockquote><blockquote cl=
ass=3D"m_-5603958231537483944protonmail_quote" type=3D"cite"><div>Local Tim=
e: June 1, 2017 9:14 PM<br></div><div>UTC Time: June 1, 2017 6:14 PM<br></d=
iv><div>From: <a href=3D"mailto:david.waltermire@nist.gov" target=3D"_blank=
">david.waltermire@nist.gov</a><br></div><div>To: Adam Montville &lt;<a hre=
f=3D"mailto:adam.w.montville@gmail.com" target=3D"_blank">adam.w.montville@=
gmail.com</a>&gt;, <a href=3D"mailto:sacm@ietf.org" target=3D"_blank">sacm@=
ietf.org</a> &lt;<a href=3D"mailto:sacm@ietf.org" target=3D"_blank">sacm@ie=
tf.org</a>&gt;, <a href=3D"mailto:mile@ietf.org" target=3D"_blank">mile@iet=
f.org</a><br></div><div><br></div><div> <br></div><div class=3D"m_-56039582=
31537483944WordSection1"><p class=3D"MsoNormal"><span class=3D"m_-560395823=
1537483944font" style=3D"font-family:Calibri,sans-serif"><span class=3D"m_-=
5603958231537483944size" style=3D"font-size:11pt">I am not aware of anythin=
g that is providing a syndication approach for vulnerability information. I=
 am also not aware of a general standardized model for vulnerabilities that
 can be used cradle to grave for a vulnerability. This is something we have=
 been discussing in OASIS CSAF. At NIST we have a vulnerability model we us=
e with the National Vulnerability Database, but it isn=E2=80=99t anything n=
ear a standard at this point.</span></span><br></p><p class=3D"MsoNormal"><=
span class=3D"m_-5603958231537483944font" style=3D"font-family:Calibri,sans=
-serif"><span class=3D"m_-5603958231537483944size" style=3D"font-size:11pt"=
>=C2=A0</span></span><br></p><p class=3D"MsoNormal"><span class=3D"m_-56039=
58231537483944font" style=3D"font-family:Calibri,sans-serif"><span class=3D=
"m_-5603958231537483944size" style=3D"font-size:11pt">One way to approach t=
he fact that we don=E2=80=99t have a standardized format is to not attempt =
to pick any at this time. The ROLIE vulnerability extension can define a nu=
mber of information
 types that relate to vulnerabilities (e.g., vulnerability records, vulnera=
bility checks, etc.) and then stay silent on the use of the ROLIE format el=
ement which can be used to specify which model (e.g., CVRF, CSAF, STIX, OVA=
L, etc.) is used for a given entry.
 Defining information types in this way provides a good degree of value by =
allowing organizations to publish vulnerability information using ROLIE. Do=
 you think that this may be enough to start with for now?</span></span><br>=
</p><p class=3D"MsoNormal"><span class=3D"m_-5603958231537483944font" style=
=3D"font-family:Calibri,sans-serif"><span class=3D"m_-5603958231537483944si=
ze" style=3D"font-size:11pt">=C2=A0</span></span><br></p><p class=3D"MsoNor=
mal"><span class=3D"m_-5603958231537483944font" style=3D"font-family:Calibr=
i,sans-serif"><span class=3D"m_-5603958231537483944size" style=3D"font-size=
:11pt">Regards,</span></span><br></p><p class=3D"MsoNormal"><span class=3D"=
m_-5603958231537483944font" style=3D"font-family:Calibri,sans-serif"><span =
class=3D"m_-5603958231537483944size" style=3D"font-size:11pt">Dave</span></=
span><br></p><p class=3D"MsoNormal"><span class=3D"m_-5603958231537483944fo=
nt" style=3D"font-family:Calibri,sans-serif"><span class=3D"m_-560395823153=
7483944size" style=3D"font-size:11pt">=C2=A0</span></span><br></p><div styl=
e=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt"><d=
iv><div style=3D"border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0=
in 0in 0in"><p class=3D"MsoNormal"><b><span class=3D"m_-5603958231537483944=
font" style=3D"font-family:Calibri,sans-serif"><span class=3D"m_-5603958231=
537483944size" style=3D"font-size:11pt">From:</span></span></b><span class=
=3D"m_-5603958231537483944font" style=3D"font-family:Calibri,sans-serif"><s=
pan class=3D"m_-5603958231537483944size" style=3D"font-size:11pt"> Adam Mon=
tville [mailto:<a href=3D"mailto:adam.w.montville@gmail.com" target=3D"_bla=
nk">adam.w.montville@gmail.com</a>] <br> <b>Sent:</b> Thursday, June 01, 20=
17 12:59 PM<br> <b>To:</b> Waltermire, David A. (Fed) &lt;<a href=3D"mailto=
:david.waltermire@nist.gov" target=3D"_blank">david.waltermire@nist.gov</a>=
&gt;; <a href=3D"mailto:sacm@ietf.org" target=3D"_blank">sacm@ietf.org</a>;=
 &lt;<a href=3D"mailto:mile@ietf.org" target=3D"_blank">mile@ietf.org</a>&g=
t; &lt;<a href=3D"mailto:mile@ietf.org" target=3D"_blank">mile@ietf.org</a>=
&gt;<br> <b>Subject:</b> Re: [sacm] ROLIE vulnerability extension</span></s=
pan></p></div></div><p class=3D"MsoNormal">=C2=A0<br></p><div><p class=3D"M=
soNormal">Is there anything already defined that would suit the more genera=
l need? In other words, while it&#39;s true that ROLIE doesn&#39;t have a v=
ulnerability record or vulnerability detection data extension at this point=
, is there a non-ROLIE capability
 filling that need already?=C2=A0<br></p></div><p class=3D"MsoNormal">=C2=
=A0<br></p><div><div><p class=3D"MsoNormal">On Thu, Jun 1, 2017 at 11:53 AM=
 Waltermire, David A. (Fed) &lt;<a href=3D"mailto:david.waltermire@nist.gov=
" rel=3D"noreferrer nofollow noopener" target=3D"_blank">david.waltermire@n=
ist.gov</a>&gt; wrote:<br></p></div><blockquote style=3D"border:none;border=
-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margi=
n-right:0in"><div><div><p class=3D"MsoNormal"><span class=3D"m_-56039582315=
37483944font" style=3D"font-family:Calibri,sans-serif"><span class=3D"m_-56=
03958231537483944size" style=3D"font-size:11pt">Not yet. I am also interest=
ed in addressing vulnerability records, but I have been waiting for the out=
come of the
 OASIS CVRF/CSAF work first.</span></span><br></p><p class=3D"MsoNormal"><s=
pan class=3D"m_-5603958231537483944font" style=3D"font-family:Calibri,sans-=
serif"><span class=3D"m_-5603958231537483944size" style=3D"font-size:11pt">=
=C2=A0</span></span><br></p><p class=3D"MsoNormal"><span class=3D"m_-560395=
8231537483944font" style=3D"font-family:Calibri,sans-serif"><span class=3D"=
m_-5603958231537483944size" style=3D"font-size:11pt">We could collaborate i=
f you are interested.</span></span><br></p><p class=3D"MsoNormal"><span cla=
ss=3D"m_-5603958231537483944font" style=3D"font-family:Calibri,sans-serif">=
<span class=3D"m_-5603958231537483944size" style=3D"font-size:11pt">=C2=A0<=
/span></span><br></p><p class=3D"MsoNormal"><span class=3D"m_-5603958231537=
483944font" style=3D"font-family:Calibri,sans-serif"><span class=3D"m_-5603=
958231537483944size" style=3D"font-size:11pt">Regards,</span></span><br></p=
><p class=3D"MsoNormal"><span class=3D"m_-5603958231537483944font" style=3D=
"font-family:Calibri,sans-serif"><span class=3D"m_-5603958231537483944size"=
 style=3D"font-size:11pt">Dave</span></span><br></p><p class=3D"MsoNormal">=
<span class=3D"m_-5603958231537483944font" style=3D"font-family:Calibri,san=
s-serif"><span class=3D"m_-5603958231537483944size" style=3D"font-size:11pt=
">=C2=A0</span></span><br></p><div style=3D"border:none;border-left:solid b=
lue 1.5pt;padding:0in 0in 0in 4.0pt"><div><div style=3D"border:none;border-=
top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class=3D"MsoNormal"><=
b><span class=3D"m_-5603958231537483944font" style=3D"font-family:Calibri,s=
ans-serif"><span class=3D"m_-5603958231537483944size" style=3D"font-size:11=
pt">From:</span></span></b><span class=3D"m_-5603958231537483944font" style=
=3D"font-family:Calibri,sans-serif"><span class=3D"m_-5603958231537483944si=
ze" style=3D"font-size:11pt"> sacm [mailto:<a href=3D"mailto:sacm-bounces@i=
etf.org" rel=3D"noreferrer nofollow noopener" target=3D"_blank">sacm-bounce=
s@ietf.org</a>] <b>On Behalf Of </b>Adam Montville<br> <b>Sent:</b> Thursda=
y, June 01, 2017 10:42 AM<br> <b>To:</b> <a href=3D"mailto:sacm@ietf.org" r=
el=3D"noreferrer nofollow noopener" target=3D"_blank">sacm@ietf.org</a>; &l=
t;<a href=3D"mailto:mile@ietf.org" rel=3D"noreferrer nofollow noopener" tar=
get=3D"_blank">mile@ietf.org</a>&gt; &lt;<a href=3D"mailto:mile@ietf.org" r=
el=3D"noreferrer nofollow noopener" target=3D"_blank">mile@ietf.org</a>&gt;=
<br> <b>Subject:</b> [sacm] ROLIE vulnerability extension</span></span></p>=
</div></div></div></div></div><div><div><div style=3D"border:none;border-le=
ft:solid blue 1.5pt;padding:0in 0in 0in 4.0pt"><p class=3D"MsoNormal">=C2=
=A0<br></p><div><p class=3D"MsoNormal">Wondering if anyone is working on a =
ROLIE extension for vulnerability detection data? Specifically for OVAL vul=
nerability definitions.<br></p><div><p class=3D"MsoNormal">=C2=A0<br></p></=
div><div><p class=3D"MsoNormal">Thanks,<br></p></div><div><p class=3D"MsoNo=
rmal">=C2=A0<br></p></div><div><p class=3D"MsoNormal">Adam<br></p></div></d=
iv></div></div></div></blockquote></div></div></div></blockquote></blockquo=
te></div>

--001a113ce24241bbf70550f87859--


From nobody Fri Jun  2 05:36:17 2017
Return-Path: <jerome.athias@protonmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 125A6129AEE; Fri,  2 Jun 2017 05:36:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=protonmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xneg_sRnCP8G; Fri,  2 Jun 2017 05:36:11 -0700 (PDT)
Received: from mail1.protonmail.ch (mail1.protonmail.ch [185.70.40.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F683129515; Fri,  2 Jun 2017 05:36:10 -0700 (PDT)
Date: Fri, 02 Jun 2017 08:35:52 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=default; t=1496406959; bh=2oPXs87mkZk0mKE4QOV6hMricb0QjRBCCg419uyfsPQ=; h=To:From:Cc:Reply-To:Subject:In-Reply-To:References:Feedback-ID: From; b=gdxtIpwi2Yvl8hK0DEJ/MWUXypfLk5Kh0gV6Qrah0UN7O8sGh8GObko0zI5oK5F79 yX+hIoQnohpQiyn3zyNzSsPw2IVihynP8aqcZZf+DutJLmm7yHfnl+fQHGLIb919ED KwxharHwWREMzFIPYNYBo8V68Bunu4VUBJ28CDiI=
To: Adam Montville <adam.w.montville@gmail.com>
From: Jerome Athias <jerome.athias@protonmail.com>
Cc: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>, "sacm@ietf.org" <sacm@ietf.org>, "mile@ietf.org" <mile@ietf.org>
Reply-To: Jerome Athias <jerome.athias@protonmail.com>
Message-ID: <7wsktnBIfqkKaSPXVBaF4fAPI3zk1prh8vXncLeCosmbb6D5UY6Kt7RyhhBvYDVApS0Wn6DTrwOryMSPxdja9BCZgI66uEjfO0G17qB88R4=@protonmail.com>
In-Reply-To: <CACknUNUuGGZ5W_X_rMST=mWMvkKQJM7Oo=La0F3EVza_jyzeGQ@mail.gmail.com>
References: <CACknUNWTJS-_VOaMebmX3RGGkGGxnR0L2gFt2H_k0KQr-GoVWA@mail.gmail.com> <MWHPR09MB1440BD6D2DCDDA986E2EE9DFF0F60@MWHPR09MB1440.namprd09.prod.outlook.com> <CACknUNVBWvOdXZ_2hWupd8Cmt3VdzFfBNPjk3HaC2hOShWbTKQ@mail.gmail.com> <MWHPR09MB14407DBB92CD13200AE91A7FF0F60@MWHPR09MB1440.namprd09.prod.outlook.com> <IOMDA9-7fwzyW-wIHtJtYB5xaM9YiPzRXHZ4C9aTrcWoSoIQvUerj_ajUJkXQyl6tuuAX2oUhnusk_Vf-VsMw_6xmXJYnXUEUHO5jxpu6hw=@protonmail.com> <CACknUNUuGGZ5W_X_rMST=mWMvkKQJM7Oo=La0F3EVza_jyzeGQ@mail.gmail.com>
Feedback-ID: 0pNaUpQyJcJ_FqKgvRh59kNH9tw1YU9Hb7-41TF1UFya4DA0ft6-ejYSrPjLLQWz-KcGUoHsZH8z6Hzy-ZW3EA==:Ext:ProtonMail
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_531d39bb0a73bfccf3270c4a1dc72c1e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/O40SaGB4QMMeK-Du49WiXUwm2iU>
Subject: Re: [mile] [sacm] ROLIE vulnerability extension
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Jun 2017 12:36:15 -0000

This is a multi-part message in MIME format.

--b1_531d39bb0a73bfccf3270c4a1dc72c1e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64
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--b1_531d39bb0a73bfccf3270c4a1dc72c1e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
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--b1_531d39bb0a73bfccf3270c4a1dc72c1e--


From nobody Fri Jun  2 12:58:30 2017
Return-Path: <pkampana@cisco.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85E7E124BE8 for <mile@ietfa.amsl.com>; Fri,  2 Jun 2017 12:58:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.523
X-Spam-Level: 
X-Spam-Status: No, score=-14.523 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Efd2GAlCWgPh for <mile@ietfa.amsl.com>; Fri,  2 Jun 2017 12:58:26 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B89B0128DF2 for <mile@ietf.org>; Fri,  2 Jun 2017 12:58:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6360; q=dns/txt; s=iport; t=1496433505; x=1497643105; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=g4uPHAA+c84hWmaDcUjMh/zI8kjO68bRUn5cVV7NhuU=; b=FsQ184QtQ/BnrnKzY0OAfk7GrtCFgLD/iby7+EsGGPIBDKdHnDCajchk 6olo06PU4pnMKUKltE6NW0dhvA8Hy1MX3+vD7vlUE/mJbOcPQiqihAYl5 frFNndgdwVPExzoEINX+psDucC4vjrOuIQAtABkwuMpjXPkLyXIpUQ5RH 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C5AAB9wjFZ/5RdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1higQ0Hg2yKGJF6lXyCDyELhXgCGoJiPxgBAgEBAQEBAQFrKIU?= =?us-ascii?q?YAQEBAQMBASEROgsMBAIBCBEDAQEBAwIjAwICAiULFAEICAIEAQ0FCIoiEK8yg?= =?us-ascii?q?iaLFQEBAQEBAQEBAQEBAQEBAQEBAQEBAR2BC4VWgWCDH4MmgVuCe4JgBZ4vAYc?= =?us-ascii?q?gjAGCD1WEZ4o4lFsBHziBCnQVHCqFBhyBY3aIZgGBDAEBAQ?=
X-IronPort-AV: E=Sophos;i="5.39,286,1493683200"; d="scan'208";a="433232009"
Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jun 2017 19:58:24 +0000
Received: from XCH-RCD-015.cisco.com (xch-rcd-015.cisco.com [173.37.102.25]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v52JwOZQ017659 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 2 Jun 2017 19:58:24 GMT
Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-RCD-015.cisco.com (173.37.102.25) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 2 Jun 2017 14:58:24 -0500
Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1210.000; Fri, 2 Jun 2017 14:58:24 -0500
From: "Panos Kampanakis (pkampana)" <pkampana@cisco.com>
To: "Charles Eckel (eckelcu)" <eckelcu@cisco.com>, "Nancy Cam-Winget (ncamwing)" <ncamwing@cisco.com>, Takeshi Takahashi <takeshi_takahashi@nict.go.jp>
CC: "mile@ietf.org" <mile@ietf.org>
Thread-Topic: [mile] I-D Action: draft-ietf-mile-iodef-guidance-10.txt
Thread-Index: AQHS0xbsJ4uXqpsDSkeVJf8XEvB2oaIA3VkAgAABmACAES1LsA==
Date: Fri, 2 Jun 2017 19:58:24 +0000
Message-ID: <518d25e269574d1f974791427b59633c@XCH-ALN-010.cisco.com>
References: <149546982360.22141.8822534408920138135@ietfa.amsl.com> <31873030dd764236ace2d5eff92b5b78@XCH-ALN-010.cisco.com> <953AB7AC-0BD4-4B27-9EDB-4345BF4BCC4A@cisco.com>
In-Reply-To: <953AB7AC-0BD4-4B27-9EDB-4345BF4BCC4A@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [64.102.56.138]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/tkMuAWbEcqupO5rkX54OrX8KrzY>
Subject: Re: [mile] I-D Action: draft-ietf-mile-iodef-guidance-10.txt
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Jun 2017 19:58:28 -0000
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From nobody Fri Jun 23 17:13:20 2017
Return-Path: <agenda@ietf.org>
X-Original-To: mile@ietf.org
Delivered-To: mile@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ADFCD12EB1D; Fri, 23 Jun 2017 17:07:10 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "\"IETF Secretariat\"" <agenda@ietf.org>
To: <takeshi_takahashi@nict.go.jp>, <mile-chairs@ietf.org>
Cc: mile@ietf.org, Kathleen.Moriarty.ietf@gmail.com
X-Test-IDTracker: no
X-IETF-IDTracker: 6.55.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149826283070.7840.9632464808881767402.idtracker@ietfa.amsl.com>
Date: Fri, 23 Jun 2017 17:07:10 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/dSI1Gohx9tXd0diUyeUmfKA_5o8>
Subject: [mile] mile - Requested session has been scheduled for IETF 99
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 24 Jun 2017 00:07:11 -0000

Dear Takeshi Takahashi,

The session(s) that you have requested have been scheduled.
Below is the scheduled session information followed by
the original request. 

mile Session 1 (1:30:00)
    Monday, Afternoon Session II 1550-1720
    Room Name: Karlin III size: 60
    ---------------------------------------------
    


Request Information:


---------------------------------------------------------
Working Group Name: Managed Incident Lightweight Exchange
Area Name: Security Area
Session Requester: Takeshi Takahashi

Number of Sessions: 1
Length of Session(s):  1.5 Hours
Number of Attendees: 30
Conflicts to Avoid: 
 First Priority: anima core dots i2nsf ipwave ipsecme saag sacm
 Second Priority: 6tisch appsawg httpbis tls



People who must be present:
  David Waltermire
  Nancy Cam-Winget
  Kathleen Moriarty
  Takeshi Takahashi

Resources Requested:

Special Requests:
  
---------------------------------------------------------


From nobody Wed Jun 28 08:09:06 2017
Return-Path: <stephen.banghart@nist.gov>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B169129B33 for <mile@ietfa.amsl.com>; Wed, 28 Jun 2017 08:09:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J-dEltRXGead for <mile@ietfa.amsl.com>; Wed, 28 Jun 2017 08:09:01 -0700 (PDT)
Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0126.outbound.protection.outlook.com [23.103.200.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0F46126CF6 for <mile@ietf.org>; Wed, 28 Jun 2017 08:09:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=FPhzoEps+xrfpKJ1watVqU2TmJYbrPnj1xRcafmdDGI=; b=v18G3qilDTDPAIpZB4V9KV2Vdsr60D4w5n6GvkoP6DVsNOynZ8KF1g1ee52+g+gYnJqaRNGZnWH/S3D/eefOe8MCDBe4HxtP2ObV1HegxTqZTHeJR/FUtIWA83g16KeJsOLhq2ryDGlix6gX77hv+9f9yJ284HfMSMyfhfmmjgU=
Received: from DM5PR09MB1307.namprd09.prod.outlook.com (10.172.34.141) by DM5PR09MB1307.namprd09.prod.outlook.com (10.172.34.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1199.15; Wed, 28 Jun 2017 15:09:00 +0000
Received: from DM5PR09MB1307.namprd09.prod.outlook.com ([10.172.34.141]) by DM5PR09MB1307.namprd09.prod.outlook.com ([10.172.34.141]) with mapi id 15.01.1199.019; Wed, 28 Jun 2017 15:08:59 +0000
From: "Banghart, Stephen A. (Fed)" <stephen.banghart@nist.gov>
To: "mile@ietf.org" <mile@ietf.org>
Thread-Topic: ROLIE IANA Extensions
Thread-Index: AdLwHy9ZYSJ+SJyCT72Tb1Cd0n8nkQ==
Date: Wed, 28 Jun 2017 15:08:59 +0000
Message-ID: <DM5PR09MB13070AD06EB17AC64B946BCFF0DD0@DM5PR09MB1307.namprd09.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.251.1]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM5PR09MB1307; 7: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
x-ms-office365-filtering-correlation-id: 81f51a1f-d88e-4b58-5d47-08d4be379b0e
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:DM5PR09MB1307; 
x-ms-traffictypediagnostic: DM5PR09MB1307:
x-microsoft-antispam-prvs: <DM5PR09MB1307E297816C7118AB28A34FF0DD0@DM5PR09MB1307.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(151999592597050)(278178393323532)(26388249023172)(236129657087228)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(100000703101)(100105400095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123560025)(20161123555025)(20161123558100)(20161123562025)(20161123564025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:DM5PR09MB1307; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:DM5PR09MB1307; 
x-forefront-prvs: 03524FBD26
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39450400003)(39410400002)(39400400002)(39840400002)(39850400002)(39860400002)(6306002)(5640700003)(54896002)(9686003)(55016002)(99286003)(6436002)(38730400002)(53936002)(110136004)(3846002)(790700001)(102836003)(6116002)(66066001)(5660300001)(25786009)(6916009)(2501003)(6506006)(14454004)(7696004)(74316002)(77096006)(81156014)(7736002)(8936002)(2906002)(86362001)(54356999)(50986999)(7116003)(81166006)(2351001)(3660700001)(3280700002)(478600001)(2900100001)(8676002)(1730700003)(33656002)(3480700004)(189998001)(5630700001)(217873001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR09MB1307; H:DM5PR09MB1307.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_DM5PR09MB13070AD06EB17AC64B946BCFF0DD0DM5PR09MB1307namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jun 2017 15:08:59.8877 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR09MB1307
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/kcMH_7ckYYJ_IZKK9XI_6_HiuLA>
Subject: [mile] ROLIE IANA Extensions
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jun 2017 15:09:04 -0000

--_000_DM5PR09MB13070AD06EB17AC64B946BCFF0DD0DM5PR09MB1307namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

All,

After working with the SACM WG on building a Checklist ROLIE Extension, we'=
ve found that there would be some additional rolie:property IANA registrati=
ons that would be valuable in the ROLIE core draft. These properties are: c=
ontent-id, content-version, and content-published-date. These are general p=
urpose properties that would allow for exposure of basic characterization d=
ata from the content.

These additions would cause no changes to the document other than expanding=
 the IANA registration table in the IANA considerations section. Would ther=
e be any opposition to making this change?

Thanks,
Stephen Banghart

--_000_DM5PR09MB13070AD06EB17AC64B946BCFF0DD0DM5PR09MB1307namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">All,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">After working with the SACM WG on building a Checkli=
st ROLIE Extension, we&#8217;ve found that there would be some additional r=
olie:property IANA registrations that would be valuable in the ROLIE core d=
raft. These properties are: content-id,
 content-version, and content-published-date. These are general purpose pro=
perties that would allow for exposure of basic characterization data from t=
he content.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">These additions would cause no changes to the docume=
nt other than expanding the IANA registration table in the IANA considerati=
ons section. Would there be any opposition to making this change?<o:p></o:p=
></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Thanks,<o:p></o:p></p>
<p class=3D"MsoNormal">Stephen Banghart<o:p></o:p></p>
</div>
</body>
</html>

--_000_DM5PR09MB13070AD06EB17AC64B946BCFF0DD0DM5PR09MB1307namp_--


From nobody Wed Jun 28 09:00:32 2017
Return-Path: <stephen.banghart@nist.gov>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8470B12EC4D for <mile@ietfa.amsl.com>; Wed, 28 Jun 2017 09:00:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UVG-VB6fa3s6 for <mile@ietfa.amsl.com>; Wed, 28 Jun 2017 09:00:26 -0700 (PDT)
Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0097.outbound.protection.outlook.com [23.103.200.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C407912EC5A for <mile@ietf.org>; Wed, 28 Jun 2017 09:00:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=QveOOn314/gz3KjjaWmhsY1LBKT3KQg+D8+2KIJz8NM=; b=oFksii4OmRdmKY+z0/jyCqwdz9Es3lHbAzdjtGj8T57XSjBFtw2dmwq2rRUACrOiM3yYLsVehMtISbs28evEQ6Ur8KpLQf/S4NiVbn03N+G3JiL18cMQ5CMWsJ8VOfL5ZmfIChcH2KqX7kUmX/J19Ku3uZy/FL5lPJ8ksvdSenc=
Received: from DM5PR09MB1307.namprd09.prod.outlook.com (10.172.34.141) by DM5PR09MB1306.namprd09.prod.outlook.com (10.172.34.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1199.15; Wed, 28 Jun 2017 16:00:22 +0000
Received: from DM5PR09MB1307.namprd09.prod.outlook.com ([10.172.34.141]) by DM5PR09MB1307.namprd09.prod.outlook.com ([10.172.34.141]) with mapi id 15.01.1199.019; Wed, 28 Jun 2017 16:00:22 +0000
From: "Banghart, Stephen A. (Fed)" <stephen.banghart@nist.gov>
To: "mile@ietf.org" <mile@ietf.org>
Thread-Topic: [sacm] Fwd: New Version Notification for draft-mandm-sacm-rolie-configuration-checklist-00.txt
Thread-Index: AQHS5rQS7l6/Wl8HBU6Ybkl/tSUp1qI6c7MA
Date: Wed, 28 Jun 2017 16:00:21 +0000
Message-ID: <DM5PR09MB1307894D9221B0497441BF96F0DD0@DM5PR09MB1307.namprd09.prod.outlook.com>
References: <149762565589.572.11869428600141425823.idtracker@ietfa.amsl.com> <CACknUNVyMWSmF=gpjwEsyPdyTtNBmJnRfSLMmMGAgMc4=8Dg_A@mail.gmail.com>
In-Reply-To: <CACknUNVyMWSmF=gpjwEsyPdyTtNBmJnRfSLMmMGAgMc4=8Dg_A@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=nist.gov;
x-originating-ip: [129.6.251.1]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM5PR09MB1306; 7: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
x-ms-office365-filtering-correlation-id: 4b22a517-108b-4d4b-a486-08d4be3ec818
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:DM5PR09MB1306; 
x-ms-traffictypediagnostic: DM5PR09MB1306:
x-microsoft-antispam-prvs: <DM5PR09MB1306E79A82B6E3084CEE09F3F0DD0@DM5PR09MB1306.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(151999592597050)(278178393323532)(120809045254105)(26388249023172)(236129657087228)(192374486261705)(788757137089)(48057245064654)(148574349560750)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123560025)(20161123558100)(20161123555025)(20161123564025)(20161123562025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:DM5PR09MB1306; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:DM5PR09MB1306; 
x-forefront-prvs: 03524FBD26
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39410400002)(39850400002)(39450400003)(39860400002)(39840400002)(39400400002)(377424004)(22974007)(377454003)(3660700001)(6246003)(6436002)(76176999)(50986999)(2351001)(74316002)(54356999)(478600001)(5630700001)(966005)(19609705001)(2950100002)(15650500001)(2501003)(38730400002)(236005)(55016002)(14454004)(110136004)(53936002)(5640700003)(54906002)(9686003)(7696004)(6916009)(33656002)(6506006)(53386004)(39060400002)(99286003)(6306002)(54896002)(53546010)(5660300001)(4326008)(8936002)(7110500001)(189998001)(2906002)(6116002)(14971765001)(25786009)(3280700002)(2900100001)(81166006)(1730700003)(8676002)(230783001)(77096006)(3846002)(229853002)(2420400007)(102836003)(7736002)(790700001)(10710500007)(86362001)(66066001)(606006); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR09MB1306; H:DM5PR09MB1307.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; 
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_DM5PR09MB1307894D9221B0497441BF96F0DD0DM5PR09MB1307namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jun 2017 16:00:21.8670 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR09MB1306
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/UcEEuIYmoLstzFiUe-wlElCZ_O8>
Subject: Re: [mile] [sacm] Fwd: New Version Notification for draft-mandm-sacm-rolie-configuration-checklist-00.txt
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jun 2017 16:00:30 -0000

--_000_DM5PR09MB1307894D9221B0497441BF96F0DD0DM5PR09MB1307namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_DM5PR09MB1307894D9221B0497441BF96F0DD0DM5PR09MB1307namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_DM5PR09MB1307894D9221B0497441BF96F0DD0DM5PR09MB1307namp_--


From nobody Wed Jun 28 12:43:56 2017
Return-Path: <adam.w.montville@gmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E675012EAC2 for <mile@ietfa.amsl.com>; Wed, 28 Jun 2017 12:43:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MrDqxX6sqAiF for <mile@ietfa.amsl.com>; Wed, 28 Jun 2017 12:43:51 -0700 (PDT)
Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F547126DC2 for <mile@ietf.org>; Wed, 28 Jun 2017 12:43:51 -0700 (PDT)
Received: by mail-io0-x22b.google.com with SMTP id r36so41869663ioi.1 for <mile@ietf.org>; Wed, 28 Jun 2017 12:43:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=UaVkYJo4G6WTnMJVYWlgyiRats8SLylBOq8YLnae9qY=; b=kacHZ5bJrWSZPEF5gxN/s/2t2qeBvbjqWzyoJ7itWNE4J++rekBY9XESETe93JLtvr gDHQJh70vNFE/bpxnAP/enht2uRvjzMIefLEYc0H5QoauwiL3j17NUM+Z1jYNbqrttuZ FHA8HYbAqy2MMGC28/foVFUhuJTYMEdFR4l3pIl7OHcj4AJ534zndI40BqDbkUBIgl0z gxyD5POE1pO9CpSXu8wkvvoCx5Y8bARLlfEIFgfC8WHdx61yCQK+12b7RXZr/bFeyhyM EzIbsr1ESBUg4KgI9I7S9JQt+zMtuxQsLWo52Z0h/C9/5ZmEi5FPhq0Y3ZJoHt4IdyZI jMZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=UaVkYJo4G6WTnMJVYWlgyiRats8SLylBOq8YLnae9qY=; b=mpW+fFSJ5xr0pcAMKSkz7cpcZEp9cTtaHcHFaJT9NFPLYSfFQnC8QIAM7dNS978U7S Dz7brBYIhE24dqOmLTPfQt6tba7TUQbQRIdWO9ctKp2UcD/wTwTCftz9y971xOlVuZCe eCMJjs6+QIp3VBI6czmQG70gzy4rp/geK/+43E4QMp0rxfsTSeWvmRPLcQrEyBBsHWUZ 7YZKRKsxGqv2AjbAkBWkqqqbQOShEX7E3QwWmfGCNn0UmDrcq/HpT+3QmphOf+GGlqzf PGIqc6D8raPwUQ+W7TTje2Sy+s4Wvrb2WDARn6rh/V+k8VjzFUoRa34ctgb/E9yzij8w BpFA==
X-Gm-Message-State: AKS2vOygg/nIC7OWZtiN1KEzR7ipRAp6fQzeIDEKVI5cCFEVC/7q32Ye Vaio8RPzxTdSk69NEMTyvz+J9epC/xT+
X-Received: by 10.107.188.3 with SMTP id m3mr13669650iof.113.1498679030633; Wed, 28 Jun 2017 12:43:50 -0700 (PDT)
MIME-Version: 1.0
References: <149762565589.572.11869428600141425823.idtracker@ietfa.amsl.com> <CACknUNVyMWSmF=gpjwEsyPdyTtNBmJnRfSLMmMGAgMc4=8Dg_A@mail.gmail.com> <DM5PR09MB1307894D9221B0497441BF96F0DD0@DM5PR09MB1307.namprd09.prod.outlook.com>
In-Reply-To: <DM5PR09MB1307894D9221B0497441BF96F0DD0@DM5PR09MB1307.namprd09.prod.outlook.com>
From: Adam Montville <adam.w.montville@gmail.com>
Date: Wed, 28 Jun 2017 19:43:39 +0000
Message-ID: <CACknUNXjLnSpwbpRXyeX_4ZOXPqn9gTHkFEpBZiqT2HwBBf-CA@mail.gmail.com>
To: "Banghart, Stephen A. (Fed)" <stephen.banghart@nist.gov>, "mile@ietf.org" <mile@ietf.org>
Content-Type: multipart/alternative; boundary="94eb2c0763d840fd5905530a6732"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/GUG0P-xscU4kDmxAak435_YseJU>
Subject: Re: [mile] [sacm] Fwd: New Version Notification for draft-mandm-sacm-rolie-configuration-checklist-00.txt
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jun 2017 19:43:55 -0000

--94eb2c0763d840fd5905530a6732
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Thanks, Stephen.

With respect to producing a standard template for ROLIE extensions, I think
that could be useful, either as a separate draft or, perhaps, as an
appendix in ROLIE proper.

We'll get to your other comments as soon as possible.

Kind regards,

Adam

On Wed, Jun 28, 2017 at 11:00 AM Banghart, Stephen A. (Fed) <
stephen.banghart@nist.gov> wrote:

> All,
>
>
>
> I finished my review of this document and had some personal feedback/woul=
d
> like to start some discussion. I=E2=80=99d also like to pose a question t=
o the
> group/authors: would it be valuable to produce a standard template for
> ROLIE Extensions? We could create a template that would enumerate the
> required and optional sections, and discuss the intended content of each
> section. If this would provide value to anyone I=E2=80=99d be willing to =
put it
> together.
>
>
>
> *Introduction:*
>
>
>
> How would ROLIE fit into the checklist ecosystem you describe here? I
> understood your explanation of how these checklists may be used in genera=
l,
> but not how they may be used/published/downloaded from a ROLIE repository=
.
>
>
>
> *New information-types*
>
>
>
> I had a hard time trying to pin down what exactly would fall under the
> =E2=80=9Cconfiguration-checklist=E2=80=9D information type given the desc=
ription here. I
> think the list of configuration checklist components threw me off. For
> example: =E2=80=98 A =E2=80=9CValue=E2=80=9D =E2=80=99. What is the defin=
ition of value here? Is a
> standalone =E2=80=9CValue=E2=80=9D a valid configuration-checklist inform=
ation type? Some
> of these things seem like valid checklist content, like rules and profile=
s,
> but I didn=E2=80=99t see where the rest fit the definition given at the h=
ead of the
> section.
>
>
>
> In ROLIE SWD and ROLIE CSIRT, we provide a list of example information
> that could be, if placed into <content> by themselves, classified as the
> information type in question, rather than the components that make up tha=
t
> information type. That approach may make it easier for me to understand t=
he
> configuration checklist information type at a higher level.
>
>
>
> *Usage of Configuration Checklist Information in the Atom Publishing*
>
> *    Protocol*
>
>
>
> The first paragraph talks about =E2=80=9Cthese requirements=E2=80=9D but =
no requirements
> are listed in this section. I may have misunderstood the XML snippet at t=
he
> bottom of this section, however.
>
>
>
> *The 'atom:content' Element*
>
>
>
> The serialization type is provided as a MIME type in the content element,
> so it doesn=E2=80=99t need to be declared in the specification. If a seri=
alization
> has some bearing on other requirements, the MIME type should probably be
> referenced so that your requirement is machine enforceable.
>
>
>
> *The 'rolie:format' Element=E2=80=99*
>
>
>
> The format element describes the data model in use, not the serialization=
.
> If I understand correctly (I may not), at it stands today the relevant da=
ta
> model for this information-type is XCCDF and maybe OVAL, which could be
> serialized in XML, JSON, and if you=E2=80=99re really creative, even Exce=
l, Word,
> and PDF. Discussing these data models would probably help me pin down wha=
t
> the configuration checklist information type entails as well.
>
>
>
> *Configuration checklist metadata included in the 'rolie:property'*
>
> *      Element*
>
>
>
> So after looking through these we=E2=80=99ve realized that some of them w=
ould be
> valuable to include in the ROLIE core specification. I=E2=80=99ve sent an=
 email to
> the MILE list to request the addition of =E2=80=9Ccontent-version=E2=80=
=9D, =E2=80=9Ccontent-id=E2=80=9D,
> and =E2=80=9Ccontent-published-date=E2=80=9D. These would replace your =
=E2=80=9Cchecklist version=E2=80=9D,
> =E2=80=9Dtitle=E2=80=9D, and =E2=80=9Cpublication date=E2=80=9D propertie=
s, respectively. We also already
> have a =E2=80=9Ccontent-author=E2=80=9D property, so you needn=E2=80=99t =
register =E2=80=9Cauthor=E2=80=9D.
>
>
>
> For the rest of the properties, I would note that property names can=E2=
=80=99t
> have spaces in them, as they form a URN (e.g.
> urn:ietf:params:rolie:property:content-author-name).
>
>
>
> Is the product category property intended for human or machine
> consumption? A non-standardized open world plain text description seems
> dangerously vague for machine consumption. If this is something that is
> important to this extension, a new IANA table where each of these
> categories are enumerated and described would be a good solution.
>
>
>
> Depending on how these product categories are used, also consider
> registering them as categories instead of properties. I=E2=80=99m not sur=
e if these
> values are more commonly used as organizing buckets or just as additional
> identifying information.
>
>
>
> *Atom:link Registrations*
>
>
>
> You can have 0..n of any given link element.
>
>
>
> These registrations would take place at
> https://www.iana.org/assignments/link-relations/link-relations.xhtml,
> which is designed to hold general purpose link relations. As described in
> the ROLIE core link extension point section, domain specific link relatio=
ns
> shouldn=E2=80=99t be registered to this table.
>
>
>
> It would be helpful for me if you explicitly defined what you mean by
> =E2=80=9Cconformance=E2=80=9D. Is this implementation or usage conformanc=
e?
>
>
>
> *IANA Considerations*
>
>
>
> I=E2=80=99m unclear on what the =E2=80=9CNew IANA table for "ROLIE Entry =
Format"=E2=80=9D block of
> text is meant to be. Is this a new table registration? ROLIE core doesn=
=E2=80=99t
> establish a table for registering formats. CVRF and CVE are probably not
> relevant formats for configuration checklists regardless right? I would
> imagine those are formats used to describe some future =E2=80=9Cvulnerabi=
lity=E2=80=9D
> information type.
>
>
>
> The reference field of the information type registration should contain a
> reference to =E2=80=9Cthis document=E2=80=9D, to satisfy the registration=
 requirement. The
> registrations for links, properties, and categories will have to be liste=
d
> here at some point as well.
>
>
>
> Thanks,
>
> Stephen Banghart
>
>
>
> *From:* sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam Montville
> *Sent:* Friday, June 16, 2017 11:20 AM
> *To:* sacm@ietf.org
> *Subject:* [sacm] Fwd: New Version Notification for
> draft-mandm-sacm-rolie-configuration-checklist-00.txt
>
>
>
> Not necessarily for immediate review, but we've submitted a ROLIE
> extension for configuration checklists. This is intended to get the
> conversation started at some point.
>
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org>
> Date: Fri, Jun 16, 2017 at 10:07 AM
> Subject: New Version Notification for
> draft-mandm-sacm-rolie-configuration-checklist-00.txt
> To: Bill Munyan <bill.munyan.ietf@gmail.com>, Adam Montville <
> adam.w.montville@gmail.com>
>
>
>
>
> A new version of I-D, draft-mandm-sacm-rolie-configuration-checklist-00.t=
xt
> has been successfully submitted by Adam Montville and posted to the
> IETF repository.
>
> Name:           draft-mandm-sacm-rolie-configuration-checklist
> Revision:       00
> Title:          Definition of the ROLIE configuration checklist Extension
> Document date:  2017-06-16
> Group:          Individual Submission
> Pages:          10
> URL:
> https://www.ietf.org/internet-drafts/draft-mandm-sacm-rolie-configuration=
-checklist-00.txt
> Status:
> https://datatracker.ietf.org/doc/draft-mandm-sacm-rolie-configuration-che=
cklist/
> Htmlized:
> https://tools.ietf.org/html/draft-mandm-sacm-rolie-configuration-checklis=
t-00
> Htmlized:
> https://datatracker.ietf.org/doc/html/draft-mandm-sacm-rolie-configuratio=
n-checklist-00
>
>
> Abstract:
>    This document extends the Resource-Oriented Lightweight Information
>    Exchange (ROLIE) core by defining a new information-type to ROLIE's
>    atom:category pertaining to security configuration checklists.
>    Additional supporting requirements are also defined which describe
>    the use of specific formats and link relations pertaining to the new
>    information-type.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>

--94eb2c0763d840fd5905530a6732
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thanks, Stephen. =C2=A0<div><br></div><div>With respect to=
 producing a standard template for ROLIE extensions, I think that could be =
useful, either as a separate draft or, perhaps, as an appendix in ROLIE pro=
per.<div><br></div><div>We&#39;ll get to your other comments as soon as pos=
sible.</div><div><br></div><div>Kind regards,</div><div><br></div><div>Adam=
<br><br><div class=3D"gmail_quote"><div dir=3D"ltr">On Wed, Jun 28, 2017 at=
 11:00 AM Banghart, Stephen A. (Fed) &lt;<a href=3D"mailto:stephen.banghart=
@nist.gov">stephen.banghart@nist.gov</a>&gt; wrote:<br></div><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;p=
adding-left:1ex">





<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"m_1870895090496998060WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">All,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">I finished my review of this document and had some =
personal feedback/would like to start some discussion. I=E2=80=99d also lik=
e to pose a question to the group/authors: would it be
 valuable to produce a standard template for ROLIE Extensions? We could cre=
ate a template that would enumerate the required and optional sections, and=
 discuss the intended content of each section. If this would provide value =
to anyone I=E2=80=99d be willing to put
 it together.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">Introduction:<u></u><u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">How would ROLIE fit into the checklist ecosystem yo=
u describe here? I understood your explanation of how these checklists may =
be used in general, but not how they may be used/published/downloaded
 from a ROLIE repository.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">New information-types<u></u><u></u></span></b></=
p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">I had a hard time trying to pin down what exactly w=
ould fall under the =E2=80=9Cconfiguration-checklist=E2=80=9D information t=
ype given the description here. I think the list of configuration
 checklist components threw me off. For example: =E2=80=98 A =E2=80=9CValue=
=E2=80=9D =E2=80=99. What is the definition of value here? Is a standalone =
=E2=80=9CValue=E2=80=9D a valid configuration-checklist information type? S=
ome of these things seem like valid checklist content, like rules and profi=
les,
 but I didn=E2=80=99t see where the rest fit the definition given at the he=
ad of the section.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">In ROLIE SWD and ROLIE CSIRT, we provide a list of =
example information that could be, if placed into &lt;content&gt; by themse=
lves, classified as the information type in question,
 rather than the components that make up that information type. That approa=
ch may make it easier for me to understand the configuration checklist info=
rmation type at a higher level.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">Usage of Configuration Checklist Information in =
the Atom Publishing<u></u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">=C2=A0=C2=A0=C2=A0 Protocol<u></u><u></u></span>=
</b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The first paragraph talks about =E2=80=9Cthese requ=
irements=E2=80=9D but no requirements are listed in this section. I may hav=
e misunderstood the XML snippet at the bottom of this section,
 however.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">The &#39;atom:content&#39; Element<u></u><u></u>=
</span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The serialization type is provided as a MIME type i=
n the content element, so it doesn=E2=80=99t need to be declared in the spe=
cification. If a serialization has some bearing on other
 requirements, the MIME type should probably be referenced so that your req=
uirement is machine enforceable.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">The &#39;rolie:format&#39; Element=E2=80=99<u></=
u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The format element describes the data model in use,=
 not the serialization. If I understand correctly (I may not), at it stands=
 today the relevant data model for this information-type
 is XCCDF and maybe OVAL, which could be serialized in XML, JSON, and if yo=
u=E2=80=99re really creative, even Excel, Word, and PDF. Discussing these d=
ata models would probably help me pin down what the configuration checklist=
 information type entails as well.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">Configuration checklist metadata included in the=
 &#39;rolie:property&#39;<u></u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Element<u></u><u>=
</u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">So after looking through these we=E2=80=99ve realiz=
ed that some of them would be valuable to include in the ROLIE core specifi=
cation. I=E2=80=99ve sent an email to the MILE list to request
 the addition of =E2=80=9Ccontent-version=E2=80=9D, =E2=80=9Ccontent-id=E2=
=80=9D, and =E2=80=9Ccontent-published-date=E2=80=9D. These would replace y=
our =E2=80=9Cchecklist version=E2=80=9D, =E2=80=9Dtitle=E2=80=9D, and =E2=
=80=9Cpublication date=E2=80=9D properties, respectively. We also already h=
ave a =E2=80=9Ccontent-author=E2=80=9D property, so you needn=E2=80=99t reg=
ister
 =E2=80=9Cauthor=E2=80=9D.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">For the rest of the properties, I would note that p=
roperty names can=E2=80=99t have spaces in them, as they form a URN (e.g.
</span><span style=3D"color:black">urn:ietf:params:rolie:property:content-a=
uthor-name).<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Is the product category =
property intended for human or machine consumption? A non-standardized open=
 world plain text description seems dangerously vague for machine consumpti=
on. If this is something that is important
 to this extension, a new IANA table where each of these categories are enu=
merated and described would be a good solution.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Depending on how these p=
roduct categories are used, also consider registering them as categories in=
stead of properties. I=E2=80=99m not sure if these values are more commonly=
 used as organizing buckets or just as additional
 identifying information.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black">Atom:link Registratio=
ns</span></b><span style=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">You can have 0..n of any=
 given link element.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">These registrations woul=
d take place at
<a href=3D"https://www.iana.org/assignments/link-relations/link-relations.x=
html" target=3D"_blank">https://www.iana.org/assignments/link-relations/lin=
k-relations.xhtml</a>, which is designed to hold general purpose link relat=
ions. As described in the ROLIE core link extension
 point section, domain specific link relations shouldn=E2=80=99t be registe=
red to this table.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">It would be helpful for =
me if you explicitly defined what you mean by =E2=80=9Cconformance=E2=80=9D=
. Is this implementation or usage conformance?<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black">IANA Considerations<u=
></u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black"><u></u>=C2=A0<u></u><=
/span></b></p>
<p class=3D"MsoNormal"><span style=3D"color:black">I=E2=80=99m unclear on w=
hat the =E2=80=9CNew IANA table for &quot;ROLIE Entry Format&quot;=E2=80=9D=
 block of text is meant to be. Is this a new table registration? ROLIE core=
 doesn=E2=80=99t establish a table for registering formats. CVRF and CVE ar=
e probably
 not relevant formats for configuration checklists regardless right? I woul=
d imagine those are formats used to describe some future =E2=80=9Cvulnerabi=
lity=E2=80=9D information type.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">The reference field of t=
he information type registration should contain a reference to =E2=80=9Cthi=
s document=E2=80=9D, to satisfy the registration requirement. The registrat=
ions for links, properties, and categories will have
 to be listed here at some point as well.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Thanks,<u></u><u></u></s=
pan></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Stephen Banghart<u></u><=
u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<div style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in =
4.0pt">
<div>
<div style=3D"border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> sacm [mailto:<a href=3D"mailto=
:sacm-bounces@ietf.org" target=3D"_blank">sacm-bounces@ietf.org</a>]
<b>On Behalf Of </b>Adam Montville<br>
<b>Sent:</b> Friday, June 16, 2017 11:20 AM<br>
<b>To:</b> <a href=3D"mailto:sacm@ietf.org" target=3D"_blank">sacm@ietf.org=
</a><br>
<b>Subject:</b> [sacm] Fwd: New Version Notification for draft-mandm-sacm-r=
olie-configuration-checklist-00.txt<u></u><u></u></span></p>
</div>
</div></div></div></div><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">=
<div class=3D"m_1870895090496998060WordSection1"><div style=3D"border:none;=
border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Not necessarily for i=
mmediate review, but we&#39;ve submitted a ROLIE extension for configuratio=
n checklists. This is intended to get the conversation started at some poin=
t.<u></u><u></u></p>
<div>
<div>
<p class=3D"MsoNormal">---------- Forwarded message ---------<br>
From: &lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">int=
ernet-drafts@ietf.org</a>&gt;<br>
Date: Fri, Jun 16, 2017 at 10:07 AM<br>
Subject: New Version Notification for draft-mandm-sacm-rolie-configuration-=
checklist-00.txt<br>
To: Bill Munyan &lt;<a href=3D"mailto:bill.munyan.ietf@gmail.com" target=3D=
"_blank">bill.munyan.ietf@gmail.com</a>&gt;, Adam Montville &lt;<a href=3D"=
mailto:adam.w.montville@gmail.com" target=3D"_blank">adam.w.montville@gmail=
.com</a>&gt;<u></u><u></u></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
<br>
<br>
A new version of I-D, draft-mandm-sacm-rolie-configuration-checklist-00.txt=
<br>
has been successfully submitted by Adam Montville and posted to the<br>
IETF repository.<br>
<br>
Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-mandm-sacm-rolie-config=
uration-checklist<br>
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A000<br>
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Definition of the ROLIE configurat=
ion checklist Extension<br>
Document date:=C2=A0 2017-06-16<br>
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission<br>
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 10<br>
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"https://www.ietf.o=
rg/internet-drafts/draft-mandm-sacm-rolie-configuration-checklist-00.txt" t=
arget=3D"_blank">
https://www.ietf.org/internet-drafts/draft-mandm-sacm-rolie-configuration-c=
hecklist-00.txt</a><br>
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.iet=
f.org/doc/draft-mandm-sacm-rolie-configuration-checklist/" target=3D"_blank=
">https://datatracker.ietf.org/doc/draft-mandm-sacm-rolie-configuration-che=
cklist/</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://tools.ietf.org/html/=
draft-mandm-sacm-rolie-configuration-checklist-00" target=3D"_blank">https:=
//tools.ietf.org/html/draft-mandm-sacm-rolie-configuration-checklist-00</a>=
<br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.ietf.org=
/doc/html/draft-mandm-sacm-rolie-configuration-checklist-00" target=3D"_bla=
nk">https://datatracker.ietf.org/doc/html/draft-mandm-sacm-rolie-configurat=
ion-checklist-00</a><br>
<br>
<br>
Abstract:<br>
=C2=A0 =C2=A0This document extends the Resource-Oriented Lightweight Inform=
ation<br>
=C2=A0 =C2=A0Exchange (ROLIE) core by defining a new information-type to RO=
LIE&#39;s<br>
=C2=A0 =C2=A0atom:category pertaining to security configuration checklists.=
<br>
=C2=A0 =C2=A0Additional supporting requirements are also defined which desc=
ribe<br>
=C2=A0 =C2=A0the use of specific formats and link relations pertaining to t=
he new<br>
=C2=A0 =C2=A0information-type.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org" target=3D"_blank">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<u></u><u></u></p>
</div>
</div>
</div></div></div></blockquote></div></div></div></div>

--94eb2c0763d840fd5905530a6732--


From nobody Wed Jun 28 13:12:08 2017
Return-Path: <adam.w.montville@gmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 194A912EAF3; Wed, 28 Jun 2017 13:12:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r-lEgURkOEVN; Wed, 28 Jun 2017 13:12:02 -0700 (PDT)
Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D03912EAEF; Wed, 28 Jun 2017 13:12:02 -0700 (PDT)
Received: by mail-io0-x229.google.com with SMTP id h134so42345066iof.2; Wed, 28 Jun 2017 13:12:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:references:in-reply-to:from:date:message-id:subject:to;  bh=EqHdv4l/U0WQNfv9mlBIV+Rbb87gMcxPMT/UjqEeuaQ=; b=bxHdD0Tjo2Fyp4YEP5i7W9fNZ5wgM/R4ZZYNcPJUKvZ1njdVAoa/GsEkrB8dLSQuox LmnsOFQ2B8+yMZe2wgUFBPWOfsiJSsCiZ9EqTdG+tccl07A5+T/rocrGPHhtljYhAJ8/ m4rDCskHCDbqO1p6U8qTJZwoyDPATg7PUJxc+eKhD4LUknX4bM4of2SZhxm20IUyE0PG trXzmfftZ85MNWyn2zS2SA9potd+sVyOo4ZTzXddS5+QbZ02J+szywMB11oRce9ZwMEU wI5pNcq8mB/OX1sGHcA27ReR2yXc7pH9QVRrn/hpqJMiyaHb6CFFF2xOJnt+qp5HL4aU egcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=EqHdv4l/U0WQNfv9mlBIV+Rbb87gMcxPMT/UjqEeuaQ=; b=hA+0cVD+ND8NNp/NMMnkVN9SFYgAojHi/vrwMEuGtfxQV7JWJ+fZqHpyaeGd1XDozm MxSGCGtUQiV04w2qsxUbv8n45PUBPlDBoxHljBZZy+1CqgInMFGhaiWNtRI53wJYOXca ZIWV/pNL47Uwn0Cjbv/CX40OcpIXUbliGVjETpoQSmC4mwTbpAazdr+jHte3guizX4jl 4nn1yEeRPA9QqW778govf7BqNfsh64WGrU+c7EEarBsvbiwpYXOge2kTzSpLKuFLvQI2 Rt2XpaoE9kGA/smNjJbZipvgsF0nlynonabA6FDzely6S2peEyoR6P+Y8pE44XhG0RFf gd4Q==
X-Gm-Message-State: AKS2vOyasVQ0GH/wRXwrYyoJAL9n79uMXqee1Ae6LOwORFF5hUDc0ZqM buIIXKoHG5iREy7M8+JLr09yq+I05w==
X-Received: by 10.107.9.96 with SMTP id j93mr12928125ioi.161.1498680721327; Wed, 28 Jun 2017 13:12:01 -0700 (PDT)
MIME-Version: 1.0
References: <149762565589.572.11869428600141425823.idtracker@ietfa.amsl.com> <CACknUNVyMWSmF=gpjwEsyPdyTtNBmJnRfSLMmMGAgMc4=8Dg_A@mail.gmail.com> <DM5PR09MB1307894D9221B0497441BF96F0DD0@DM5PR09MB1307.namprd09.prod.outlook.com> <CACknUNXjLnSpwbpRXyeX_4ZOXPqn9gTHkFEpBZiqT2HwBBf-CA@mail.gmail.com>
In-Reply-To: <CACknUNXjLnSpwbpRXyeX_4ZOXPqn9gTHkFEpBZiqT2HwBBf-CA@mail.gmail.com>
From: Adam Montville <adam.w.montville@gmail.com>
Date: Wed, 28 Jun 2017 20:11:50 +0000
Message-ID: <CACknUNUUvavTmdYabqrHZEiBZ0FNhEWGrLPr4j0B6ssF0Bn3Jw@mail.gmail.com>
To: "Banghart, Stephen A. (Fed)" <stephen.banghart@nist.gov>, "mile@ietf.org" <mile@ietf.org>, "sacm@ietf.org" <sacm@ietf.org>
Content-Type: multipart/alternative; boundary="001a113fc30206cdee05530acc27"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/ElKP2mei1NoxswGQxRTsv0IYD_I>
Subject: Re: [mile] [sacm] Fwd: New Version Notification for draft-mandm-sacm-rolie-configuration-checklist-00.txt
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jun 2017 20:12:06 -0000

--001a113fc30206cdee05530acc27
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Stephen,

I have comments/responses/questions inline. Let's try to carve some time
out in Prague (I'm assuming your'e going to be there) to really go over
this. We can probably help with that template you mentioned in another
thread as well.

Thanks again for your feedback.

Kind regards,

Adam

On Wed, Jun 28, 2017 at 2:43 PM Adam Montville <adam.w.montville@gmail.com>
wrote:

> Thanks, Stephen.
>
> With respect to producing a standard template for ROLIE extensions, I
> think that could be useful, either as a separate draft or, perhaps, as an
> appendix in ROLIE proper.
>
> We'll get to your other comments as soon as possible.
>
> Kind regards,
>
> Adam
>
> On Wed, Jun 28, 2017 at 11:00 AM Banghart, Stephen A. (Fed) <
> stephen.banghart@nist.gov> wrote:
>
>> All,
>>
>>
>>
>> I finished my review of this document and had some personal
>> feedback/would like to start some discussion. I=E2=80=99d also like to p=
ose a
>> question to the group/authors: would it be valuable to produce a standar=
d
>> template for ROLIE Extensions? We could create a template that would
>> enumerate the required and optional sections, and discuss the intended
>> content of each section. If this would provide value to anyone I=E2=80=
=99d be
>> willing to put it together.
>>
>>
>>
>> *Introduction:*
>>
>>
>>
>> How would ROLIE fit into the checklist ecosystem you describe here? I
>> understood your explanation of how these checklists may be used in gener=
al,
>> but not how they may be used/published/downloaded from a ROLIE repositor=
y.
>>
>
[AWM] I'm not following this question. This is a ROLIE extension, so it is
defining a checklist information type that can be shared. I wouldn't think
the extension should be where the ROLIE functions are explained (i.e.
published, downloaded, etc.). ROLIE provides collections of resources that
are interacted with using AtomPub and linked resources. So, I guess I'm not
really understanding what you're after here.


>
>>
>> *New information-types*
>>
>>
>>
>> I had a hard time trying to pin down what exactly would fall under the
>> =E2=80=9Cconfiguration-checklist=E2=80=9D information type given the des=
cription here. I
>> think the list of configuration checklist components threw me off. For
>> example: =E2=80=98 A =E2=80=9CValue=E2=80=9D =E2=80=99. What is the defi=
nition of value here? Is a
>> standalone =E2=80=9CValue=E2=80=9D a valid configuration-checklist infor=
mation type? Some
>> of these things seem like valid checklist content, like rules and profil=
es,
>> but I didn=E2=80=99t see where the rest fit the definition given at the =
head of the
>> section.
>>
>
>>
>> In ROLIE SWD and ROLIE CSIRT, we provide a list of example information
>> that could be, if placed into <content> by themselves, classified as the
>> information type in question, rather than the components that make up th=
at
>> information type. That approach may make it easier for me to understand =
the
>> configuration checklist information type at a higher level.
>>
>

[AWM] Would it help if we were to first describe what a configuration
checklist is? I think I see your point here. We launch straight into the
mechanics of it all, presuming that the reader is already steeped in our
lingo. So, we could start with something that literally defines
configuration checklists. I'll look at the SWID and CSIRT examples, thanks
for mentioning them.


>
>>
>> *Usage of Configuration Checklist Information in the Atom Publishing*
>>
>> *    Protocol*
>>
>>
>>
>> The first paragraph talks about =E2=80=9Cthese requirements=E2=80=9D but=
 no requirements
>> are listed in this section. I may have misunderstood the XML snippet at =
the
>> bottom of this section, however.
>>
>
[AWM] I think this may be a numbering issue. It may make more sense if 4
were the parent to 5, which really starts all the requirements. We'll take
a look at the numbering again.


>
>>
>> *The 'atom:content' Element*
>>
>>
>>
>> The serialization type is provided as a MIME type in the content element=
,
>> so it doesn=E2=80=99t need to be declared in the specification. If a ser=
ialization
>> has some bearing on other requirements, the MIME type should probably be
>> referenced so that your requirement is machine enforceable.
>>
>
[AWM] Ok. I recall that we had a question about this, and were not sure how
to handle it. Bill, do you remember what it was?


>
>>
>> *The 'rolie:format' Element=E2=80=99*
>>
>>
>>
>> The format element describes the data model in use, not the
>> serialization. If I understand correctly (I may not), at it stands today
>> the relevant data model for this information-type is XCCDF and maybe OVA=
L,
>> which could be serialized in XML, JSON, and if you=E2=80=99re really cre=
ative, even
>> Excel, Word, and PDF. Discussing these data models would probably help m=
e
>> pin down what the configuration checklist information type entails as we=
ll.
>>
>
[AWM] I think I see what you're saying. For the sake of discussion, let's
say we've got an Ubuntu Benchmark. Further, let's say that it exists in PDF
and XCCDF forms. Then, for each form, what would the 'atom:content' and
'rolie:format' elements be? I think for the XCCDF form it would be
'atom:content' is the XML mime type, then the 'rolie:format' would be
XCCDF. But for PDF?


>
>>
>> *Configuration checklist metadata included in the 'rolie:property'*
>>
>> *      Element*
>>
>>
>>
>> So after looking through these we=E2=80=99ve realized that some of them =
would be
>> valuable to include in the ROLIE core specification. I=E2=80=99ve sent a=
n email to
>> the MILE list to request the addition of =E2=80=9Ccontent-version=E2=80=
=9D, =E2=80=9Ccontent-id=E2=80=9D,
>> and =E2=80=9Ccontent-published-date=E2=80=9D. These would replace your =
=E2=80=9Cchecklist version=E2=80=9D,
>> =E2=80=9Dtitle=E2=80=9D, and =E2=80=9Cpublication date=E2=80=9D properti=
es, respectively. We also already
>> have a =E2=80=9Ccontent-author=E2=80=9D property, so you needn=E2=80=99t=
 register =E2=80=9Cauthor=E2=80=9D.
>>
>
[AWM] Will look to the MILE list and make some changes.


>
>>
>> For the rest of the properties, I would note that property names can=E2=
=80=99t
>> have spaces in them, as they form a URN (e.g.
>> urn:ietf:params:rolie:property:content-author-name).
>>
>
[AWM] Thanks for the hint. I think we were just enumerating.


>
>>
>> Is the product category property intended for human or machine
>> consumption? A non-standardized open world plain text description seems
>> dangerously vague for machine consumption. If this is something that is
>> important to this extension, a new IANA table where each of these
>> categories are enumerated and described would be a good solution.
>>
>
[AWM] We lifted these straight out of what the National Checklist Program
requests us (CIS) to enter when we share a new benchmark (configuration
checklist) with them. :-) I'm betting human consumption, but NIST would be
the authoritative answer. But, it could be something that helps automated
categorization?


>
>>
>> Depending on how these product categories are used, also consider
>> registering them as categories instead of properties. I=E2=80=99m not su=
re if these
>> values are more commonly used as organizing buckets or just as additiona=
l
>> identifying information.
>>
>
[AWM] That's a possibility.


>
>>
>> *Atom:link Registrations*
>>
>>
>>
>> You can have 0..n of any given link element.
>>
>
[AWM] Ok, that's good, thanks.


>
>>
>> These registrations would take place at
>> https://www.iana.org/assignments/link-relations/link-relations.xhtml,
>> which is designed to hold general purpose link relations. As described i=
n
>> the ROLIE core link extension point section, domain specific link relati=
ons
>> shouldn=E2=80=99t be registered to this table.
>>
>>
>>
>> It would be helpful for me if you explicitly defined what you mean by
>> =E2=80=9Cconformance=E2=80=9D. Is this implementation or usage conforman=
ce?
>>
>
[AWM] I believe implementation. The idea here is to put some guidelines
around how checklists can be related to each other and other properties.
But whether implementation or use depends on perspective. Maybe we need to
learn more about this.


>
>>
>> *IANA Considerations*
>>
>>
>>
>> I=E2=80=99m unclear on what the =E2=80=9CNew IANA table for "ROLIE Entry=
 Format"=E2=80=9D block
>> of text is meant to be. Is this a new table registration? ROLIE core
>> doesn=E2=80=99t establish a table for registering formats. CVRF and CVE =
are
>> probably not relevant formats for configuration checklists regardless
>> right? I would imagine those are formats used to describe some future
>> =E2=80=9Cvulnerability=E2=80=9D information type.
>>
>
[AWM] We had another enum ref type of draft, and I wonder if htat's not
needed here. Bill, do you remember?


>
>>
>> The reference field of the information type registration should contain =
a
>> reference to =E2=80=9Cthis document=E2=80=9D, to satisfy the registratio=
n requirement. The
>> registrations for links, properties, and categories will have to be list=
ed
>> here at some point as well.
>>
>
[AWM] Ok, thanks.


>
>>
>> Thanks,
>>
>> Stephen Banghart
>>
>>
>>
>> *From:* sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Adam Montvill=
e
>> *Sent:* Friday, June 16, 2017 11:20 AM
>> *To:* sacm@ietf.org
>> *Subject:* [sacm] Fwd: New Version Notification for
>> draft-mandm-sacm-rolie-configuration-checklist-00.txt
>>
>>
>>
>> Not necessarily for immediate review, but we've submitted a ROLIE
>> extension for configuration checklists. This is intended to get the
>> conversation started at some point.
>>
>> ---------- Forwarded message ---------
>> From: <internet-drafts@ietf.org>
>> Date: Fri, Jun 16, 2017 at 10:07 AM
>> Subject: New Version Notification for
>> draft-mandm-sacm-rolie-configuration-checklist-00.txt
>> To: Bill Munyan <bill.munyan.ietf@gmail.com>, Adam Montville <
>> adam.w.montville@gmail.com>
>>
>>
>>
>>
>> A new version of I-D,
>> draft-mandm-sacm-rolie-configuration-checklist-00.txt
>> has been successfully submitted by Adam Montville and posted to the
>> IETF repository.
>>
>> Name:           draft-mandm-sacm-rolie-configuration-checklist
>> Revision:       00
>> Title:          Definition of the ROLIE configuration checklist Extensio=
n
>> Document date:  2017-06-16
>> Group:          Individual Submission
>> Pages:          10
>> URL:
>> https://www.ietf.org/internet-drafts/draft-mandm-sacm-rolie-configuratio=
n-checklist-00.txt
>> Status:
>> https://datatracker.ietf.org/doc/draft-mandm-sacm-rolie-configuration-ch=
ecklist/
>> Htmlized:
>> https://tools.ietf.org/html/draft-mandm-sacm-rolie-configuration-checkli=
st-00
>> Htmlized:
>> https://datatracker.ietf.org/doc/html/draft-mandm-sacm-rolie-configurati=
on-checklist-00
>>
>>
>> Abstract:
>>    This document extends the Resource-Oriented Lightweight Information
>>    Exchange (ROLIE) core by defining a new information-type to ROLIE's
>>    atom:category pertaining to security configuration checklists.
>>    Additional supporting requirements are also defined which describe
>>    the use of specific formats and link relations pertaining to the new
>>    information-type.
>>
>>
>>
>>
>> Please note that it may take a couple of minutes from the time of
>> submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>
>> The IETF Secretariat
>>
>

--001a113fc30206cdee05530acc27
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Stephen,<div><br></div><div>I have comments/responses/ques=
tions inline. Let&#39;s try to carve some time out in Prague (I&#39;m assum=
ing your&#39;e going to be there) to really go over this. We can probably h=
elp with that template you mentioned in another thread as well.</div><div><=
br></div><div>Thanks again for your feedback.</div><div><br></div><div>Kind=
 regards,</div><div><br></div><div>Adam<br><br><div class=3D"gmail_quote"><=
div dir=3D"ltr">On Wed, Jun 28, 2017 at 2:43 PM Adam Montville &lt;<a href=
=3D"mailto:adam.w.montville@gmail.com">adam.w.montville@gmail.com</a>&gt; w=
rote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex=
;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Thanks, Step=
hen. =C2=A0<div><br></div><div>With respect to producing a standard templat=
e for ROLIE extensions, I think that could be useful, either as a separate =
draft or, perhaps, as an appendix in ROLIE proper.<div><br></div><div>We&#3=
9;ll get to your other comments as soon as possible.</div><div><br></div><d=
iv>Kind regards,</div><div><br></div><div>Adam<br><br><div class=3D"gmail_q=
uote"></div></div></div></div><div dir=3D"ltr"><div><div><div class=3D"gmai=
l_quote"><div dir=3D"ltr">On Wed, Jun 28, 2017 at 11:00 AM Banghart, Stephe=
n A. (Fed) &lt;<a href=3D"mailto:stephen.banghart@nist.gov" target=3D"_blan=
k">stephen.banghart@nist.gov</a>&gt; wrote:<br></div></div></div></div></di=
v><div dir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">





<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"m_-6463985224811269868m_1870895090496998060WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">All,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">I finished my review of this document and had some =
personal feedback/would like to start some discussion. I=E2=80=99d also lik=
e to pose a question to the group/authors: would it be
 valuable to produce a standard template for ROLIE Extensions? We could cre=
ate a template that would enumerate the required and optional sections, and=
 discuss the intended content of each section. If this would provide value =
to anyone I=E2=80=99d be willing to put
 it together.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">Introduction:<u></u><u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">How would ROLIE fit into the checklist ecosystem yo=
u describe here? I understood your explanation of how these checklists may =
be used in general, but not how they may be used/published/downloaded
 from a ROLIE repository.</span></p></div></div></blockquote></div></div></=
div></div></blockquote><div><br></div><div>[AWM] I&#39;m not following this=
 question. This is a ROLIE extension, so it is defining a checklist informa=
tion type that can be shared. I wouldn&#39;t think the extension should be =
where the ROLIE functions are explained (i.e. published, downloaded, etc.).=
 ROLIE provides collections of resources that are interacted with using Ato=
mPub and linked resources. So, I guess I&#39;m not really understanding wha=
t you&#39;re after here.</div><div>=C2=A0</div><blockquote class=3D"gmail_q=
uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e=
x"><div dir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=
=3D"m_-6463985224811269868m_1870895090496998060WordSection1"><p class=3D"Ms=
oNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,sa=
ns-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">New information-types<u></u><u></u></span></b></=
p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">I had a hard time trying to pin down what exactly w=
ould fall under the =E2=80=9Cconfiguration-checklist=E2=80=9D information t=
ype given the description here. I think the list of configuration
 checklist components threw me off. For example: =E2=80=98 A =E2=80=9CValue=
=E2=80=9D =E2=80=99. What is the definition of value here? Is a standalone =
=E2=80=9CValue=E2=80=9D a valid configuration-checklist information type? S=
ome of these things seem like valid checklist content, like rules and profi=
les,
 but I didn=E2=80=99t see where the rest fit the definition given at the he=
ad of the section.</span>=C2=A0</p></div></div></blockquote></div></div></d=
iv></div></blockquote><blockquote class=3D"gmail_quote" style=3D"margin:0 0=
 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div>=
<div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang=3D=
"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-6463985224811269868=
m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><span style=3D"fo=
nt-size:11.0pt;font-family:&quot;Calibri&quot;,sans-serif"><u></u><u></u></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">In ROLIE SWD and ROLIE CSIRT, we provide a list of =
example information that could be, if placed into &lt;content&gt; by themse=
lves, classified as the information type in question,
 rather than the components that make up that information type. That approa=
ch may make it easier for me to understand the configuration checklist info=
rmation type at a higher level.</span></p></div></div></blockquote></div></=
div></div></div></blockquote><div><br></div><div><br class=3D"inbox-inbox-A=
pple-interchange-newline">[AWM] Would it help if we were to first describe =
what a configuration checklist is? I think I see your point here. We launch=
 straight into the mechanics of it all, presuming that the reader is alread=
y steeped in our lingo. So, we could start with something that literally de=
fines configuration checklists. I&#39;ll look at the SWID and CSIRT example=
s, thanks for mentioning them.<br></div><div>=C2=A0</div><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div dir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockq=
uote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc =
solid;padding-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">=
<div class=3D"m_-6463985224811269868m_1870895090496998060WordSection1"><p c=
lass=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Calibr=
i&quot;,sans-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">Usage of Configuration Checklist Information in =
the Atom Publishing<u></u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">=C2=A0=C2=A0=C2=A0 Protocol<u></u><u></u></span>=
</b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The first paragraph talks about =E2=80=9Cthese requ=
irements=E2=80=9D but no requirements are listed in this section. I may hav=
e misunderstood the XML snippet at the bottom of this section,
 however.</span></p></div></div></blockquote></div></div></div></div></bloc=
kquote><div><br></div><div>[AWM] I think this may be a numbering issue. It =
may make more sense if 4 were the parent to 5, which really starts all the =
requirements. We&#39;ll take a look at the numbering again.</div><div>=C2=
=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;borde=
r-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div><div><div cla=
ss=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang=3D"EN-US" link=
=3D"blue" vlink=3D"purple"><div class=3D"m_-6463985224811269868m_1870895090=
496998060WordSection1"><p class=3D"MsoNormal"><span style=3D"font-size:11.0=
pt;font-family:&quot;Calibri&quot;,sans-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">The &#39;atom:content&#39; Element<u></u><u></u>=
</span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The serialization type is provided as a MIME type i=
n the content element, so it doesn=E2=80=99t need to be declared in the spe=
cification. If a serialization has some bearing on other
 requirements, the MIME type should probably be referenced so that your req=
uirement is machine enforceable.</span></p></div></div></blockquote></div><=
/div></div></div></blockquote><div><br></div><div>[AWM] Ok. I recall that w=
e had a question about this, and were not sure how to handle it. Bill, do y=
ou remember what it was?</div><div>=C2=A0</div><blockquote class=3D"gmail_q=
uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e=
x"><div dir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=
=3D"m_-6463985224811269868m_1870895090496998060WordSection1"><p class=3D"Ms=
oNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,sa=
ns-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">The &#39;rolie:format&#39; Element=E2=80=99<u></=
u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">The format element describes the data model in use,=
 not the serialization. If I understand correctly (I may not), at it stands=
 today the relevant data model for this information-type
 is XCCDF and maybe OVAL, which could be serialized in XML, JSON, and if yo=
u=E2=80=99re really creative, even Excel, Word, and PDF. Discussing these d=
ata models would probably help me pin down what the configuration checklist=
 information type entails as well.</span></p></div></div></blockquote></div=
></div></div></div></blockquote><div><br></div><div>[AWM] I think I see wha=
t you&#39;re saying. For the sake of discussion, let&#39;s say we&#39;ve go=
t an Ubuntu Benchmark. Further, let&#39;s say that it exists in PDF and XCC=
DF forms. Then, for each form, what would the &#39;atom:content&#39; and &#=
39;rolie:format&#39; elements be? I think for the XCCDF form it would be &#=
39;atom:content&#39; is the XML mime type, then the &#39;rolie:format&#39; =
would be XCCDF. But for PDF?</div><div>=C2=A0</div><blockquote class=3D"gma=
il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=
t:1ex"><div dir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;p=
adding-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div cl=
ass=3D"m_-6463985224811269868m_1870895090496998060WordSection1"><p class=3D=
"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;=
,sans-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">Configuration checklist metadata included in the=
 &#39;rolie:property&#39;<u></u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Element<u></u><u>=
</u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></b></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">So after looking through these we=E2=80=99ve realiz=
ed that some of them would be valuable to include in the ROLIE core specifi=
cation. I=E2=80=99ve sent an email to the MILE list to request
 the addition of =E2=80=9Ccontent-version=E2=80=9D, =E2=80=9Ccontent-id=E2=
=80=9D, and =E2=80=9Ccontent-published-date=E2=80=9D. These would replace y=
our =E2=80=9Cchecklist version=E2=80=9D, =E2=80=9Dtitle=E2=80=9D, and =E2=
=80=9Cpublication date=E2=80=9D properties, respectively. We also already h=
ave a =E2=80=9Ccontent-author=E2=80=9D property, so you needn=E2=80=99t reg=
ister
 =E2=80=9Cauthor=E2=80=9D.</span></p></div></div></blockquote></div></div><=
/div></div></blockquote><div><br></div><div>[AWM] Will look to the MILE lis=
t and make some changes.</div><div>=C2=A0</div><blockquote class=3D"gmail_q=
uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e=
x"><div dir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=
=3D"m_-6463985224811269868m_1870895090496998060WordSection1"><p class=3D"Ms=
oNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,sa=
ns-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif">For the rest of the properties, I would note that p=
roperty names can=E2=80=99t have spaces in them, as they form a URN (e.g.
</span><span style=3D"color:black">urn:ietf:params:rolie:property:content-a=
uthor-name).</span></p></div></div></blockquote></div></div></div></div></b=
lockquote><div><br></div><div>[AWM] Thanks for the hint. I think we were ju=
st enumerating.</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div d=
ir=3D"ltr"><div><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_=
quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1=
ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-646=
3985224811269868m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><=
span style=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Is the product category =
property intended for human or machine consumption? A non-standardized open=
 world plain text description seems dangerously vague for machine consumpti=
on. If this is something that is important
 to this extension, a new IANA table where each of these categories are enu=
merated and described would be a good solution.</span></p></div></div></blo=
ckquote></div></div></div></div></blockquote><div><br></div><div>[AWM] We l=
ifted these straight out of what the National Checklist Program requests us=
 (CIS) to enter when we share a new benchmark (configuration checklist) wit=
h them. :-) I&#39;m betting human consumption, but NIST would be the author=
itative answer. But, it could be something that helps automated categorizat=
ion?</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">=
<div><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div la=
ng=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-64639852248112=
69868m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><span style=
=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Depending on how these p=
roduct categories are used, also consider registering them as categories in=
stead of properties. I=E2=80=99m not sure if these values are more commonly=
 used as organizing buckets or just as additional
 identifying information.</span></p></div></div></blockquote></div></div></=
div></div></blockquote><div><br></div><div>[AWM] That&#39;s a possibility.<=
/div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0=
 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div>=
<div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang=3D=
"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-6463985224811269868=
m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><span style=3D"co=
lor:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black">Atom:link Registratio=
ns</span></b><span style=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">You can have 0..n of any=
 given link element.</span></p></div></div></blockquote></div></div></div><=
/div></blockquote><div><br></div><div>[AWM] Ok, that&#39;s good, thanks.</d=
iv><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0=
 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div><d=
iv><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"ma=
rgin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang=3D"E=
N-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-6463985224811269868m_=
1870895090496998060WordSection1"><p class=3D"MsoNormal"><span style=3D"colo=
r:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">These registrations woul=
d take place at
<a href=3D"https://www.iana.org/assignments/link-relations/link-relations.x=
html" target=3D"_blank">https://www.iana.org/assignments/link-relations/lin=
k-relations.xhtml</a>, which is designed to hold general purpose link relat=
ions. As described in the ROLIE core link extension
 point section, domain specific link relations shouldn=E2=80=99t be registe=
red to this table.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">It would be helpful for =
me if you explicitly defined what you mean by =E2=80=9Cconformance=E2=80=9D=
. Is this implementation or usage conformance?</span></p></div></div></bloc=
kquote></div></div></div></div></blockquote><div><br></div><div>[AWM] I bel=
ieve implementation. The idea here is to put some guidelines around how che=
cklists can be related to each other and other properties. But whether impl=
ementation or use depends on perspective. Maybe we need to learn more about=
 this.</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr=
"><div><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div =
lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-646398522481=
1269868m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><span styl=
e=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black">IANA Considerations<u=
></u><u></u></span></b></p>
<p class=3D"MsoNormal"><b><span style=3D"color:black"><u></u>=C2=A0<u></u><=
/span></b></p>
<p class=3D"MsoNormal"><span style=3D"color:black">I=E2=80=99m unclear on w=
hat the =E2=80=9CNew IANA table for &quot;ROLIE Entry Format&quot;=E2=80=9D=
 block of text is meant to be. Is this a new table registration? ROLIE core=
 doesn=E2=80=99t establish a table for registering formats. CVRF and CVE ar=
e probably
 not relevant formats for configuration checklists regardless right? I woul=
d imagine those are formats used to describe some future =E2=80=9Cvulnerabi=
lity=E2=80=9D information type.</span></p></div></div></blockquote></div></=
div></div></div></blockquote><div><br></div><div>[AWM] We had another enum =
ref type of draft, and I wonder if htat&#39;s not needed here. Bill, do you=
 remember?</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D=
"ltr"><div><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote=
" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><=
div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-64639852=
24811269868m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><span =
style=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">The reference field of t=
he information type registration should contain a reference to =E2=80=9Cthi=
s document=E2=80=9D, to satisfy the registration requirement. The registrat=
ions for links, properties, and categories will have
 to be listed here at some point as well.</span></p></div></div></blockquot=
e></div></div></div></div></blockquote><div><br></div><div>[AWM] Ok, thanks=
.</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0=
 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><di=
v><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lan=
g=3D"EN-US" link=3D"blue" vlink=3D"purple"><div class=3D"m_-646398522481126=
9868m_1870895090496998060WordSection1"><p class=3D"MsoNormal"><span style=
=3D"color:black"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:black"><u></u>=C2=A0<u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Thanks,<u></u><u></u></s=
pan></p>
<p class=3D"MsoNormal"><span style=3D"color:black">Stephen Banghart<u></u><=
u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<div style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in =
4.0pt">
<div>
<div style=3D"border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> sacm [mailto:<a href=3D"mailto=
:sacm-bounces@ietf.org" target=3D"_blank">sacm-bounces@ietf.org</a>]
<b>On Behalf Of </b>Adam Montville<br>
<b>Sent:</b> Friday, June 16, 2017 11:20 AM<br>
<b>To:</b> <a href=3D"mailto:sacm@ietf.org" target=3D"_blank">sacm@ietf.org=
</a><br>
<b>Subject:</b> [sacm] Fwd: New Version Notification for draft-mandm-sacm-r=
olie-configuration-checklist-00.txt<u></u><u></u></span></p>
</div>
</div></div></div></div><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">=
<div class=3D"m_-6463985224811269868m_1870895090496998060WordSection1"><div=
 style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0p=
t">
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Not necessarily for i=
mmediate review, but we&#39;ve submitted a ROLIE extension for configuratio=
n checklists. This is intended to get the conversation started at some poin=
t.<u></u><u></u></p>
<div>
<div>
<p class=3D"MsoNormal">---------- Forwarded message ---------<br>
From: &lt;<a href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">int=
ernet-drafts@ietf.org</a>&gt;<br>
Date: Fri, Jun 16, 2017 at 10:07 AM<br>
Subject: New Version Notification for draft-mandm-sacm-rolie-configuration-=
checklist-00.txt<br>
To: Bill Munyan &lt;<a href=3D"mailto:bill.munyan.ietf@gmail.com" target=3D=
"_blank">bill.munyan.ietf@gmail.com</a>&gt;, Adam Montville &lt;<a href=3D"=
mailto:adam.w.montville@gmail.com" target=3D"_blank">adam.w.montville@gmail=
.com</a>&gt;<u></u><u></u></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
<br>
<br>
A new version of I-D, draft-mandm-sacm-rolie-configuration-checklist-00.txt=
<br>
has been successfully submitted by Adam Montville and posted to the<br>
IETF repository.<br>
<br>
Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-mandm-sacm-rolie-config=
uration-checklist<br>
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A000<br>
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Definition of the ROLIE configurat=
ion checklist Extension<br>
Document date:=C2=A0 2017-06-16<br>
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission<br>
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 10<br>
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"https://www.ietf.o=
rg/internet-drafts/draft-mandm-sacm-rolie-configuration-checklist-00.txt" t=
arget=3D"_blank">
https://www.ietf.org/internet-drafts/draft-mandm-sacm-rolie-configuration-c=
hecklist-00.txt</a><br>
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.iet=
f.org/doc/draft-mandm-sacm-rolie-configuration-checklist/" target=3D"_blank=
">https://datatracker.ietf.org/doc/draft-mandm-sacm-rolie-configuration-che=
cklist/</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://tools.ietf.org/html/=
draft-mandm-sacm-rolie-configuration-checklist-00" target=3D"_blank">https:=
//tools.ietf.org/html/draft-mandm-sacm-rolie-configuration-checklist-00</a>=
<br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.ietf.org=
/doc/html/draft-mandm-sacm-rolie-configuration-checklist-00" target=3D"_bla=
nk">https://datatracker.ietf.org/doc/html/draft-mandm-sacm-rolie-configurat=
ion-checklist-00</a><br>
<br>
<br>
Abstract:<br>
=C2=A0 =C2=A0This document extends the Resource-Oriented Lightweight Inform=
ation<br>
=C2=A0 =C2=A0Exchange (ROLIE) core by defining a new information-type to RO=
LIE&#39;s<br>
=C2=A0 =C2=A0atom:category pertaining to security configuration checklists.=
<br>
=C2=A0 =C2=A0Additional supporting requirements are also defined which desc=
ribe<br>
=C2=A0 =C2=A0the use of specific formats and link relations pertaining to t=
he new<br>
=C2=A0 =C2=A0information-type.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org" target=3D"_blank">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<u></u><u></u></p>
</div>
</div>
</div></div></div></blockquote></div></div></div></div></blockquote></div><=
/div></div>

--001a113fc30206cdee05530acc27--