From nobody Mon Jul 3 14:48:36 2017 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E402812EBFA; Mon, 3 Jul 2017 14:48:19 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: mile@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.55.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <149911849989.22770.10659367995892751708@ietfa.amsl.com> Date: Mon, 03 Jul 2017 14:48:19 -0700 Archived-At: Subject: [mile] I-D Action: draft-ietf-mile-xmpp-grid-03.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 21:48:20 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Managed Incident Lightweight Exchange of the IETF. Title : Using XMPP Protocol and its Extensions for Use with IODEF Authors : Nancy Cam-Winget Syam Appala Scott Pope Filename : draft-ietf-mile-xmpp-grid-03.txt Pages : 24 Date : 2017-07-03 Abstract: This document describes how the Extensible Messaging and Presence Protocol (XMPP) [RFC7590] can be used as the framework as transport protocol for collecting and distributing any security telemetry information between any network connected device. As an example, this document describes how XMPP can be used to transport the Incident Object Description Exchange Format (IODEF) information. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-xmpp-grid/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-mile-xmpp-grid-03 https://datatracker.ietf.org/doc/html/draft-ietf-mile-xmpp-grid-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-xmpp-grid-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 3 14:48:52 2017 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FA1D13156E; Mon, 3 Jul 2017 14:48:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.55.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <149911850005.22770.15196649874956899967.idtracker@ietfa.amsl.com> Date: Mon, 03 Jul 2017 14:48:20 -0700 Archived-At: Subject: [mile] New Version Notification - draft-ietf-mile-xmpp-grid-03.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 21:48:20 -0000 A new version (-03) has been submitted for draft-ietf-mile-xmpp-grid: https://www.ietf.org/internet-drafts/draft-ietf-mile-xmpp-grid-03.txt The IETF datatracker page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-xmpp-grid/ Diff from previous version: https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-xmpp-grid-03 Please note that it may take a couple of minutes from the time of submission until the diff is available at tools.ietf.org. IETF Secretariat. From nobody Mon Jul 3 15:17:10 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCA1C129ACD for ; Mon, 3 Jul 2017 15:17:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.521 X-Spam-Level: X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lWF8e-vN77Gn for ; Mon, 3 Jul 2017 15:17:06 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E364131683 for ; Mon, 3 Jul 2017 15:17:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4042; q=dns/txt; s=iport; t=1499120225; x=1500329825; h=from:to:subject:date:message-id:mime-version; bh=ODoCg3s+4RCrCepw/9CVl/5rdeomaQu4oaTopAdkAkg=; b=RmjX1TTdtC6iiEJUi1houyDKbfSJeqqpieQpbpuLtrlvvcOZz8lwa8ls 9nqLd2ueSdxtz8j7QXZCAQMUu579/EXQKAmd0xr4IpyW5zl6x0qoVhbKQ qh4XMD1bFOLR/Q/jOpRz+Zfbadyr76EEyPsqDetkgutcF4wfkk9ATYPHs c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CDAgD8wVpZ/5xdJa1cHAEBBAEBCgEBg?= =?us-ascii?q?m9qY4EVjX6RUZB0hSuCESyGDIJhPxgBAgEBAQEBAQFrHQuFQmgBDD4CBDAnBIl?= =?us-ascii?q?eZBCvTYImKYseAQEBAQEBAQMBAQEBAQEBAQEBGQWDJ4UtKwuKazCCMQWefwKHR?= =?us-ascii?q?Yw6kh2VLwEfOD9LdRVbAYUAHIFmiHWBDQEBAQ?= X-IronPort-AV: E=Sophos;i="5.40,305,1496102400"; d="scan'208,217";a="263388038" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 Jul 2017 22:17:04 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v63MH46T030349 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 3 Jul 2017 22:17:04 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 3 Jul 2017 18:17:03 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Mon, 3 Jul 2017 18:17:03 -0400 From: "Nancy Cam-Winget (ncamwing)" To: "mile@ietf.org" Thread-Topic: XMPP-Grid new draft posted Thread-Index: AQHS9EoZI+WNJKx60Eq8ChbGIaD+PA== Date: Mon, 3 Jul 2017 22:17:03 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.86.247.211] Content-Type: multipart/alternative; boundary="_000_C6E75419E63D4196BFF1F66D67CA7AFFciscocom_" MIME-Version: 1.0 Archived-At: Subject: [mile] XMPP-Grid new draft posted X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2017 22:17:08 -0000 --_000_C6E75419E63D4196BFF1F66D67CA7AFFciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkkgaGF2ZSBwb3N0ZWQgYSBuZXcgdmVyc2lvbiBvZiB0aGUgWE1QUC1HcmlkIHdpdGgg bWFqb3IgcmV2aXNpb25zIHRvIGFkZHJlc3MgY29tbWVudHMgcmVjZWl2ZWQuDQpNYW55IHRoYW5r cyB0byBhbGwgd2hvIHByb3ZpZGVkIGZlZWRiYWNrIQ0KDQpUaGUgZHJhZnQgaXMgaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1taWxlLXhtcHAtZ3JpZC8NCg0KUmVn YXJkcywgTmFuY3kNCg== --_000_C6E75419E63D4196BFF1F66D67CA7AFFciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eTpDYWxpYnJpO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9z dHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5IaSw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkkgaGF2ZSBwb3N0ZWQgYSBu ZXcgdmVyc2lvbiBvZiB0aGUgWE1QUC1HcmlkIHdpdGggbWFqb3IgcmV2aXNpb25zIHRvIGFkZHJl c3MgY29tbWVudHMgcmVjZWl2ZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPk1hbnkgdGhhbmtzIHRvIGFs bCB3aG8gcHJvdmlkZWQgZmVlZGJhY2shPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5UaGUgZHJhZnQgaXMgPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi1taWxlLXhtcHAtZ3JpZC8iPg0KaHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1taWxlLXhtcHAtZ3JpZC88L2E+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5SZWdhcmRzLCBOYW5jeTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_C6E75419E63D4196BFF1F66D67CA7AFFciscocom_-- From nobody Wed Jul 5 20:06:17 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EF29127977 for ; Wed, 5 Jul 2017 20:06:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A3kY6KFlk9v2 for ; Wed, 5 Jul 2017 20:06:04 -0700 (PDT) Received: from ns2.nict.go.jp (ns2.nict.go.jp [IPv6:2001:df0:232:300::2]) by ietfa.amsl.com (Postfix) with ESMTP id 6F3B112EC4D for ; Wed, 5 Jul 2017 20:06:04 -0700 (PDT) Received: from gw2.nict.go.jp (gw2.nict.go.jp [133.243.18.251]) by ns2.nict.go.jp with ESMTP id v66363pF060205 for ; Thu, 6 Jul 2017 12:06:03 +0900 (JST) Received: from mail1.nict.go.jp (mail1.nict.go.jp [133.243.18.14]) by gw2.nict.go.jp with ESMTP id v66363VZ060145 for ; Thu, 6 Jul 2017 12:06:03 +0900 (JST) Received: from LAPTOP9DLCDU5S (unknown [133.243.30.248]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail1.nict.go.jp (NICT Mail Spool Server1) with ESMTPS id C086DB1AF for ; Thu, 6 Jul 2017 12:06:03 +0900 (JST) From: "Takeshi Takahashi" To: Date: Thu, 6 Jul 2017 12:06:05 +0900 Message-ID: <1309c01d2f604$cef3c530$6cdb4f90$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdL2BLuLaujppczATl2LkkgBnhkBow== Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith2 X-Virus-Status: Clean Archived-At: Subject: [mile] Haclathon X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Jul 2017 03:06:09 -0000 Hello all, We will be working on building some MILE-related tools at the IETF99 Hachathon. Please feel free to join us if you are interested in the work. Regards, Take https://www.ietf.org/registration/MeetingWiki/wiki/99hackathon ---------------------------------------------------------------------------- # MILE ## Champion(s) - Takeshi Takahashi - Mio Suzuki ## Project(s) - Managed Incident Lightweight Exchange (MILE): The aim of MILE is to develop a set of standards and protocols for efficiently exchanging incident-related information among parties in order to prepare and/or mitigate assorted cyber incidents. - We develop PoCs and tools for improve the usability of MILE specifications. For instance, the following tools will be developed before and during the Hachathon. - develop a converter between IODEF and STIX - develop PoC code, which generates an IODEFv2 document from a darknet monitoring system ## Specifications - https://datatracker.ietf.org/doc/rfc7970/ - https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/ ## Implementation - The code will be available at [will be opened soon] From nobody Thu Jul 6 12:17:58 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD0211315F6 for ; Thu, 6 Jul 2017 12:17:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M4M_qhuS7EIg for ; Thu, 6 Jul 2017 12:17:54 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 9CF71126C3D for ; Thu, 6 Jul 2017 12:17:54 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id F0E1C6C040F for ; Thu, 6 Jul 2017 15:17:53 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id E36DA6C0102 for ; Thu, 6 Jul 2017 15:17:53 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Thu, 6 Jul 2017 15:17:53 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5 via Frontend Transport; Thu, 6 Jul 2017 15:17:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RjckIJ57FuYBGwjt7Jzdw+4Chot9YWnXWkPixI3vLoI=; b=d4N/pqB/d/3Q13xJ7iqsYXUEZZ76krZlwOhkWksfaYuCVtLCAYCl6rpLj820/lY74bSo/2nhkUnh94c4XqsMhBM08WdttObo6QVDKaB4eWatFZsoxP621CrERh4S3d+bORSMqcCyZItQmy1/PSfLxgdcyjV1GgEZL2VCGGvT8NU= Received: from BN6PR09MB1186.namprd09.prod.outlook.com (10.172.17.144) by BN6PR09MB1186.namprd09.prod.outlook.com (10.172.17.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1240.13; Thu, 6 Jul 2017 19:17:51 +0000 Received: from BN6PR09MB1186.namprd09.prod.outlook.com ([10.172.17.144]) by BN6PR09MB1186.namprd09.prod.outlook.com ([10.172.17.144]) with mapi id 15.01.1240.013; Thu, 6 Jul 2017 19:17:51 +0000 From: "Schmidt, Charles M." To: "mile@ietf.org" Thread-Topic: Comments on ROLIE draft draft-ietf-mile-rolie-07 Thread-Index: AdL2h9N8/7EmnSvAQWaqQtf5DEr0pA== Date: Thu, 6 Jul 2017 19:17:51 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.160.51.88] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR09MB1186; 7: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 x-ms-office365-filtering-correlation-id: 4625ad6d-7510-4fe3-e920-08d4c4a3b227 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:BN6PR09MB1186; x-ms-traffictypediagnostic: BN6PR09MB1186: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(133145235818549)(236129657087228)(192374486261705)(247924648384137); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(5005006)(8121501046)(3002001)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(6055026)(6041248)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123560025)(20161123564025)(20161123555025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BN6PR09MB1186; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BN6PR09MB1186; x-forefront-prvs: 03607C04F0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39860400002)(39850400002)(39400400002)(39410400002)(39840400002)(39450400003)(2351001)(189998001)(8676002)(33656002)(14454004)(230783001)(1730700003)(81166006)(7696004)(86362001)(478600001)(2900100001)(77096006)(25786009)(3660700001)(7736002)(74316002)(305945005)(5660300001)(2501003)(8936002)(66066001)(38730400002)(53936002)(110136004)(6506006)(6916009)(3280700002)(6116002)(55016002)(102836003)(9686003)(2906002)(3846002)(50986999)(54356999)(6436002)(99286003)(5640700003); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR09MB1186; H:BN6PR09MB1186.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jul 2017 19:17:51.2144 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR09MB1186 X-OriginatorOrg: mitre.org Archived-At: Subject: [mile] Comments on ROLIE draft draft-ietf-mile-rolie-07 X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Jul 2017 19:17:57 -0000 Hello, I was part of a group that did a normative text review of the ROLIE draft a= nd we had some feedback on the -07 draft of the spec. Section 5.1.2, bullet 3 & Section 6.1.1, bullet 2: Both of these state that= an atom: category element with a "scheme" attribute that is not "urn:ietf= :params:rolie:category:information-type" MUST NOT be considered a ROLIE Col= lection. (5.1.2 says that it MUST be considered not a ROLIE collection, whi= le 6.1.1 says it MUST NOT be considered a ROLIE collection). In addition to= be redundant, I don't believe the spec speaks about the implications of a = collection not being a ROLIE collection (which makes the normative requirem= ent that it be categorized as such seem odd). Is this just meant to imply t= hat the processing outlined in the ROLIE specification MUST NOT be applied = to them? Section 5.3, paragraph 3: "The server MUST support certificate-based client= authentication. The implementation MAY use any TLS cipher suite that suppo= rts mutual authentication." The second sentence seems ambiguous in its impl= ications. Does it mean that one may use any mutual authentication suite but= are not allowed to use suites that do not support mutual authentication? O= r is it just emphasizing that you may support mutual authentication suites = but may also support non-mutual authentication suites (in which case the st= atement seems vacuous)? Section 5.3, paragraph 5: "Client implementations SHOULD support an equival= ent certificate validation approach to the what is defined in Section 6 of = [RFC5280], but MAY supplement that algorithm with other validation methods = that achieve equivalent levels of verification (such as comparing the serve= r certificate against a local store of already-verified certificates and id= entity bindings)." My confusion is with "supplement that algorithm ... to a= chieve equivalent verification". If you are "supplementing" the recommended= algorithm, then you should be going beyond the level of verification the a= lgorithm provides, right? Is the second clause just a restatement of the fi= rst in saying that validation algorithms *equivalent* to RFC5280 are allowe= d? And if so, then this is actually triply redundant since RFC5280 itself s= tates that algorithms equivalent to the one it defines are compliant with t= he standard. Section 5.5, paragraph 1: "If the "/" resource is supported the following b= ehavior MUST be also supported:" The specification then goes on to list req= uirements, but all requirements are "SHOULD" and "MAY". I'm not sure what i= t means to say you MUST support a MAY requirement. I recommend removing the= MUST from this sentence and restating it in a non-normative way. Section 7.1, paragraph 3: "Any category whose "scheme" attribute uses this = as a prefix MUST be considered private use. Implementations encountering su= ch a category MUST parse the content without error, but MAY otherwise ignor= e the element." I am confused by the statement that the category "MUST be p= arsed" but "MAY be ignored". I spoke to Stephen and he suggested that "pars= ed" might be better replaced with "validated", which makes more sense to me= . Section 7.4, paragraph 3: "Any category whose "scheme" attribute uses this = as a prefix MUST be considered private use. Implementations encountering su= ch a category MUST parse the content without error, but MAY otherwise ignor= e the element." Same comment and potential solution as 7.1. =20 Section 9, paragraph 2: "All security measures SHOULD be enforced at the so= urce, that is, a provider SHOULD NOT return any Feed content or member Entr= y content for which the client identity has not been specifically authentic= ated, authorized, and audited." This makes it sound like enforcing security= mechanisms is recommended but not required. I hope this helps. Charles From nobody Tue Jul 11 20:24:17 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 659BD126D05 for ; Tue, 11 Jul 2017 20:24:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.303 X-Spam-Level: X-Spam-Status: No, score=-2.303 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mar-eleDsLgA for ; Tue, 11 Jul 2017 20:24:14 -0700 (PDT) Received: from ns2.nict.go.jp (ns2.nict.go.jp [IPv6:2001:df0:232:300::2]) by ietfa.amsl.com (Postfix) with ESMTP id 5035B126B6E for ; Tue, 11 Jul 2017 20:24:14 -0700 (PDT) Received: from gw2.nict.go.jp (gw2.nict.go.jp [133.243.18.251]) by ns2.nict.go.jp with ESMTP id v6C3OD9N066350 for ; Wed, 12 Jul 2017 12:24:13 +0900 (JST) Received: from LAPTOP9DLCDU5S (ssh1.nict.go.jp [133.243.3.49]) by gw2.nict.go.jp with ESMTP id v6C3OCVA066342 for ; Wed, 12 Jul 2017 12:24:13 +0900 (JST) From: "Takeshi Takahashi" To: Date: Wed, 12 Jul 2017 12:24:17 +0900 Message-ID: <000001d2fabe$58955e80$09c01b80$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdL6vfNt5F7f1y8ORoCZRQ3XEIrjrg== Content-Language: ja X-Virus-Scanned: clamav-milter 0.98.7 at zenith2 X-Virus-Status: Clean Archived-At: Subject: [mile] call for agenda items@IETF99 X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Jul 2017 03:24:16 -0000 Hello all, =A0 We will have the=A0MILE=A0meeting in Prague. The session will be held on Monday 15:50-17:20. https://datatracker.ietf.org/meeting/99/agenda.html If you would like to present your work, please let us know. Based on that, we will build the agenda. At the same time, we also would like to have several volunteers who = could be the note taker and jabber scribe. If you could handle one of these works, please kindly let us know. We appreciate that very much. Take From nobody Wed Jul 12 15:18:05 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3079012ECCE for ; Wed, 12 Jul 2017 15:18:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QOeZWvdhcGDC for ; Wed, 12 Jul 2017 15:18:02 -0700 (PDT) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0119.outbound.protection.outlook.com [23.103.200.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0048912ECB5 for ; Wed, 12 Jul 2017 15:18:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=wvtNitQZbUl+4WUOOuv3B7N0S6LgIZ4fxlKZL9UGNoY=; b=iC7bNFy0QTsruswfNV3xBNy9Og1JLMv8EdH1Rny1bKez2hGqTLvSoCyUMFcAVcsa3gE6wz6fLR0gryHPmU5/xz3k06Tegsbtida1gBsZPD2O7m9eMIjWuHb4kSKY27KV66cuP0b3Hwn3czdFRF+7bz6T9hDGBOoYibEAmRVhcJs= Received: from MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) by MWHPR09MB1437.namprd09.prod.outlook.com (10.173.50.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1220.11; Wed, 12 Jul 2017 22:18:00 +0000 Received: from MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) by MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) with mapi id 15.01.1220.015; Wed, 12 Jul 2017 22:18:00 +0000 From: "Waltermire, David A. (Fed)" To: Takeshi Takahashi , "mile@ietf.org" Thread-Topic: [mile] Haclathon Thread-Index: AdL2BLuLaujppczATl2LkkgBnhkBowFV3KOA Date: Wed, 12 Jul 2017 22:18:00 +0000 Message-ID: References: <1309c01d2f604$cef3c530$6cdb4f90$@nict.go.jp> In-Reply-To: <1309c01d2f604$cef3c530$6cdb4f90$@nict.go.jp> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: nict.go.jp; dkim=none (message not signed) header.d=none;nict.go.jp; dmarc=none action=none header.from=nist.gov; x-originating-ip: [129.6.224.58] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR09MB1437; 7:YQaLuO0XAw++vz9q05nyjKV3zfpIYoV0iZ9YNC0FNAxPI0o0brRs2ZIy6QdFQQyTgVgzy71m/WUXdjjz0KWFzZhlE7zMsK/rgyfdSBy+sk68D/73+gscLfttns5d1zpjuWJLgsM5bTAaJWUkLCjroxDT8ZF7t6qTxwLA3vATYlO5A7m8gmbpOFT7/itXy+o4T/LjFQX6QxNWTkNBEKTCoNqP89Osueigl1fmVUUQkngVuQldojUpDSob224KIGMiRUlFz7iJp7zFY2dJ6sUT+cEcQdHR1pxVbbCNsPVy77meueOfybZ6knIhdGK8NOdTYBxKuAa3r9FYW3Wlz7Yd2Aubs6N2T0kDNAEMxRNdrA8q7gZv0+IJt9MX3kFdxSXFP3kH6h8olGM5MAYqeox9NzfCeAFSxrhmg/MStlMfscuz/+fcfw/EK3Fh2uGfY4No4oTt6PFC2f+MiyW5xLRXhipBBCANQTVpwQL9Fd0Z8CzdAqU1vBE5Itpan47HD8urcrEPzjLFJECBcCzSqoF5MSauk1T35eodOeniZnyJcKSj3/GFoz03v+VWH2gysfylUCL23s9GP/TJnI9IKiKY5Gz+54pYsUPTu30ePQOdWb2O5aDu0+81jdp2WKIe0FAG0mUKdSOvk0i8uiYbRY2iosjaB/ECSS2V5sb6CIMsYkVTcAH3g67Pwdrs9UrLUwOd8OTqnDRgOLs8xo3pYrJIv+1dKTxYHh7CAxvIxtF/C/FX4nPNptZjqZADJ+LW5C/pYjYLZRYCp4vVsHklG/b7kbunfbCGT7Q3IH0j0w9k3V4= x-ms-office365-filtering-correlation-id: 868d346e-02b1-4de6-6acd-08d4c973db73 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(300000503095)(300135400095)(48565401081)(2017052603031)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:MWHPR09MB1437; x-ms-traffictypediagnostic: MWHPR09MB1437: x-exchange-antispam-report-test: UriScan:(278178393323532)(72170088055959)(120809045254105)(236129657087228); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(5005006)(2017060910075)(8121501046)(93006095)(93001095)(10201501046)(100000703101)(100105400095)(3002001)(6055026)(6041248)(20161123562025)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123555025)(20161123558100)(20161123560025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:MWHPR09MB1437; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:MWHPR09MB1437; x-forefront-prvs: 036614DD9C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39450400003)(39850400002)(39400400002)(39410400002)(39840400002)(377454003)(53754006)(13464003)(69234005)(2906002)(6116002)(77096006)(54356999)(33656002)(76176999)(14454004)(229853002)(50986999)(53546010)(3660700001)(189998001)(478600001)(3280700002)(2501003)(2950100002)(74316002)(6436002)(966005)(55016002)(6506006)(66066001)(8676002)(3846002)(25786009)(81166006)(53936002)(305945005)(6246003)(2900100001)(86362001)(7736002)(8936002)(6306002)(7696004)(5660300001)(99286003)(38730400002)(9686003)(102836003)(11634002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR09MB1437; H:MWHPR09MB1440.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jul 2017 22:18:00.2996 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1437 Archived-At: Subject: Re: [mile] Haclathon X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Jul 2017 22:18:04 -0000 FYI, we will be using a ROLIE implementation in the SACM hackathon efforts.= This is more MILE-related work for which you are free to join or play arou= nd with if interested. Regards, Dave > -----Original Message----- > From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Takeshi Takahashi > Sent: Wednesday, July 05, 2017 11:06 PM > To: mile@ietf.org > Subject: [mile] Haclathon >=20 > Hello all, >=20 > We will be working on building some MILE-related tools at the IETF99 > Hachathon. > Please feel free to join us if you are interested in the work. >=20 > Regards, > Take >=20 >=20 > https://www.ietf.org/registration/MeetingWiki/wiki/99hackathon >=20 > -------------------------------------------------------------------------= --- > # MILE >=20 > ## Champion(s) >=20 > - Takeshi Takahashi > - Mio Suzuki >=20 > ## Project(s) >=20 > - Managed Incident Lightweight Exchange (MILE): The aim of MILE is to > develop a set of standards and protocols for efficiently exchanging incid= ent- > related information among parties in order to prepare and/or mitigate > assorted cyber incidents. > - We develop PoCs and tools for improve the usability of MILE specifica= tions. > For instance, the following tools will be developed before and during the > Hachathon. > - develop a converter between IODEF and STIX > - develop PoC code, which generates an IODEFv2 document from a darkne= t > monitoring system >=20 > ## Specifications >=20 > - https://datatracker.ietf.org/doc/rfc7970/ > - https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/ >=20 > ## Implementation >=20 > - The code will be available at [will be opened soon] >=20 >=20 >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile From nobody Mon Jul 17 03:34:54 2017 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 97B3B13189C; Mon, 17 Jul 2017 03:34:52 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: mile@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.56.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150028769259.14920.14013960468241717824@ietfa.amsl.com> Date: Mon, 17 Jul 2017 03:34:52 -0700 Archived-At: Subject: [mile] I-D Action: draft-ietf-mile-rolie-08.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 10:34:52 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Managed Incident Lightweight Exchange of the IETF. Title : Resource-Oriented Lightweight Information Exchange Authors : John P. Field Stephen A. Banghart David Waltermire Filename : draft-ietf-mile-rolie-08.txt Pages : 45 Date : 2017-07-17 Abstract: This document defines a resource-oriented approach for security automation information publication, discovery, and sharing. Using this approach, producers may publish, share, and exchange representations of software descriptors, security incidents, attack indicators, software vulnerabilities, configuration checklists, and other security automation information as web-addressable resources. Furthermore, consumers and other stakeholders may access and search this security information as needed, establishing a rapid and on- demand information exchange network for restricted internal use or public access repositories. This specification extends the Atom Publishing Protocol and Atom Syndication Format to transport and share security automation resource representations. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-rolie/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-mile-rolie-08 https://datatracker.ietf.org/doc/html/draft-ietf-mile-rolie-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-rolie-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 17 03:35:07 2017 Return-Path: X-Original-To: mile@ietf.org Delivered-To: mile@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A5CF81319B4; Mon, 17 Jul 2017 03:34:52 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: , , "Nancy Cam-Winget" X-Test-IDTracker: no X-IETF-IDTracker: 6.56.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150028769267.14920.13008854233837016326.idtracker@ietfa.amsl.com> Date: Mon, 17 Jul 2017 03:34:52 -0700 Archived-At: Subject: [mile] New Version Notification - draft-ietf-mile-rolie-08.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 10:34:53 -0000 A new version (-08) has been submitted for draft-ietf-mile-rolie: https://www.ietf.org/internet-drafts/draft-ietf-mile-rolie-08.txt The IETF datatracker page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-rolie/ Diff from previous version: https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-rolie-08 Please note that it may take a couple of minutes from the time of submission until the diff is available at tools.ietf.org. IETF Secretariat. From nobody Mon Jul 17 04:38:26 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CDC91288B8 for ; Mon, 17 Jul 2017 04:38:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ioFNaYSu_kB for ; Mon, 17 Jul 2017 04:38:22 -0700 (PDT) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0120.outbound.protection.outlook.com [23.103.201.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25FE513146C for ; Mon, 17 Jul 2017 04:38:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CzkrpYDJVtgVysdYlwlqDIbXGItmpY6ErA2UOIQHTYQ=; b=FZYRWJOTJe1Iqgz6wXL4+Q4yO+zTgTtATv8NGdGVGa+GkC27GpU21PtqX+mJbBdJlZ4qCY6xS8GBe9OqGeToT4yqGz8QIpurAaPwViM20Wmd2eMMB/sa93k+xyU6WT3txLbtJ8yOEDQZhiNhsF9yHQpVsrFwD4X1Zzu2tkUBo3g= Received: from BN6PR09MB1427.namprd09.prod.outlook.com (10.173.202.15) by BN6PR09MB1428.namprd09.prod.outlook.com (10.173.202.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.13; Mon, 17 Jul 2017 11:38:20 +0000 Received: from BN6PR09MB1427.namprd09.prod.outlook.com ([10.173.202.15]) by BN6PR09MB1427.namprd09.prod.outlook.com ([10.173.202.15]) with mapi id 15.01.1261.022; Mon, 17 Jul 2017 11:38:20 +0000 From: "Waltermire, David A. (Fed)" To: "mile@ietf.org" Thread-Topic: New Version Notification for draft-ietf-mile-rolie-08.txt Thread-Index: AQHS/uha5ik96mZLX066IrJfaV/wyqJX5JDM Date: Mon, 17 Jul 2017 11:38:20 +0000 Message-ID: References: <150028769274.14920.8977997779899103547.idtracker@ietfa.amsl.com> In-Reply-To: <150028769274.14920.8977997779899103547.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=nist.gov; x-originating-ip: [70.197.4.60] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN6PR09MB1428; 7:O+wucmphVpuDlJW+xJk6kLr7HOUHKiMBHzGhuMh0kkCf9OvR/KYHAfYijzjzCvVC3dFv/s8iYARf21hLPKvbNEwLBToP9SdvLz0pkJCbDw+AaEwxIpDVOMr04bhh2Z1ulFgd/1p8mvBUfPdZEI7slzxcm3qPWt+iDJAVFmqcadmhrfBe7y7nHNKcXmVW7NTvbLxrzTYoK+bsk0H9bye4qXZ8MpzTAOa6igYUE55oDtPt7FVtQlH2/rtzy4pxf5ucXYjbBXj7o7/WuSO/EPZdoGkXBtvirfVWky/oqAGkEEdWPXryvj9u7720JosCdm0+7uDpRBVLxKD55BMoCPeyZ3hRyFW+8mXJlIy0kfjnpm5JGfTfd5pQGk11shF4sJLBNMxy1BP9ehp+vKwHGxTwRWEiWkx+HYd6wEqEjrjQhbX/yCn8XBSsDgcwW9VZ0pmQkxsFBe1XA/Ynm7m0Q9mzN8NGadI4hZf1hx8QKKtnxWY3Efj+12sx6n1JWOqpcfGhJ8A17oB3OLTnoJtjBC7PnDJxo9VzZgJ+cbTyjLFaMaxK4Qj/tv60Xm2KlXCZwIJECXuFk0zllI+WPkdt+PkHM+8cFw/5I8Mh9zLHAaS8Mz1jn5uz9kO74igQBibfoNqTIha38JJ+kuKtN0TKww2Av3oSEtGrtYSDYjTO5uW0q+CAZ1zdTkFpe4LePo6jbTOkcn6bsMdEhEjB0Y4c4MYah/CKXHUHhsn4YEFbPHMCWx2kNpIJSqNE/k/JdlZcU1ye56bZSSUx5xF3LHbFDDR7FlVcQWEVz+ueeZL+SdKciTw= x-ms-office365-filtering-correlation-id: daa58e78-5afd-4c2c-41e9-08d4cd085347 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:BN6PR09MB1428; x-ms-traffictypediagnostic: BN6PR09MB1428: x-exchange-antispam-report-test: UriScan:(278178393323532)(158342451672863)(65766998875637)(120809045254105)(26388249023172)(236129657087228)(192374486261705)(199457065432035)(148574349560750); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(2017060910075)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123560025)(20161123562025)(20161123555025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BN6PR09MB1428; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BN6PR09MB1428; x-forefront-prvs: 0371762FE7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39850400002)(39840400002)(39450400003)(39400400002)(39410400002)(13464003)(377424004)(377454003)(33646002)(8676002)(2900100001)(81166006)(6246003)(54356999)(76176999)(38730400002)(189998001)(66066001)(95246002)(966005)(606006)(1730700003)(478600001)(229853002)(14454004)(86362001)(110136004)(2906002)(50986999)(25786009)(5640700003)(6306002)(2950100002)(63666004)(6512007)(9686003)(15650500001)(3846002)(3280700002)(99286003)(2501003)(53936002)(5660300001)(6436002)(54896002)(6116002)(53546010)(2351001)(51650200002)(102836003)(7736002)(6506006)(230783001)(6916009)(77096006)(6486002)(3660700001)(8936002)(236005); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR09MB1428; H:BN6PR09MB1427.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_j5ik9gngjwr52m998xvv24j41500291497531emailandroidcom_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2017 11:38:20.4975 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR09MB1428 Archived-At: Subject: Re: [mile] New Version Notification for draft-ietf-mile-rolie-08.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 11:38:24 -0000 --_000_j5ik9gngjwr52m998xvv24j41500291497531emailandroidcom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable This draft addresses all WGLC comments received so far. We, the authors, be= lieve this is ready for publication. Thanks, Dave -------- Original Message -------- From: internet-drafts@ietf.org Date: Mon, July 17, 2017 12:35 PM +0200 To: "Waltermire, David A. (Fed)" , John Field , "John P. Field" , "Banghart, Stephen = A. (Fed)" , "Banghart, Stephen A. (Fed)" Subject: New Version Notification for draft-ietf-mile-rolie-08.txt A new version of I-D, draft-ietf-mile-rolie-08.txt has been successfully submitted by David Waltermire and posted to the IETF repository. Name: draft-ietf-mile-rolie Revision: 08 Title: Resource-Oriented Lightweight Information Exchange Document date: 2017-07-17 Group: mile Pages: 45 URL: https://www.ietf.org/internet-drafts/draft-ietf-mile-rolie-= 08.txt Status: https://datatracker.ietf.org/doc/draft-ietf-mile-rolie/ Htmlized: https://tools.ietf.org/html/draft-ietf-mile-rolie-08 Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-mile-rolie= -08 Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-mile-rolie-0= 8 Abstract: This document defines a resource-oriented approach for security automation information publication, discovery, and sharing. Using this approach, producers may publish, share, and exchange representations of software descriptors, security incidents, attack indicators, software vulnerabilities, configuration checklists, and other security automation information as web-addressable resources. Furthermore, consumers and other stakeholders may access and search this security information as needed, establishing a rapid and on- demand information exchange network for restricted internal use or public access repositories. This specification extends the Atom Publishing Protocol and Atom Syndication Format to transport and share security automation resource representations. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --_000_j5ik9gngjwr52m998xvv24j41500291497531emailandroidcom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
This draft addresses all WGLC comments received so far. We, the author= s, believe this is ready for publication.

Thanks,
Dave

-------- Original Message --------
From: internet-drafts@ietf.org
Date: Mon, July 17, 2017 12:35 PM +0200
To: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>= ;, John Field <jfield@pivotal.io>, "John P. Field" <jfie= ld@pivotal.io>, "Banghart, Stephen A. (Fed)" <stephen.bangh= art@nist.gov>, "Banghart, Stephen A. (Fed)" <stephen.bangha= rt@nist.gov>
Subject: New Version Notification for draft-ietf-mile-rolie-08.txt


A new version of I-D, draft-ietf-mile-rolie-08.txt
has been successfully submitted by David Waltermire and posted to the
IETF repository.

Name:           draft-iet= f-mile-rolie
Revision:       08
Title:          Resource-Orien= ted Lightweight Information Exchange
Document date:  2017-07-17
Group:          mile
Pages:          45
URL:            https://www.ietf.org/internet-drafts/draft-ietf-mile-rolie-08.txt
Status:         https://datatracker.ietf.org/doc/draft-ietf-mile-rolie/
Htmlized:       https://tools.ietf.org/html/draft-ietf-= mile-rolie-08
Htmlized:       https://datatracker.ietf.org/doc/html/draft-ietf-mile-rolie-08
Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-mile-rolie-08

Abstract:
   This document defines a resource-oriented approach for securit= y
   automation information publication, discovery, and sharing.&nb= sp; Using
   this approach, producers may publish, share, and exchange
   representations of software descriptors, security incidents, a= ttack
   indicators, software vulnerabilities, configuration checklists= , and
   other security automation information as web-addressable resou= rces.
   Furthermore, consumers and other stakeholders may access and s= earch
   this security information as needed, establishing a rapid and = on-
   demand information exchange network for restricted internal us= e or
   public access repositories.  This specification extends t= he Atom
   Publishing Protocol and Atom Syndication Format to transport a= nd
   share security automation resource representations.

            &nb= sp;            =             &nb= sp;            =             &nb= sp;            =       


Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

 --_000_j5ik9gngjwr52m998xvv24j41500291497531emailandroidcom_-- From nobody Mon Jul 17 08:57:24 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5580F12EC42 for ; Mon, 17 Jul 2017 08:57:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.501 X-Spam-Level: X-Spam-Status: No, score=-0.501 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEIZmM_PeV7w for ; Mon, 17 Jul 2017 08:57:20 -0700 (PDT) Received: from ns1.nict.go.jp (ns1.nict.go.jp [IPv6:2001:df0:232:300::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A7BD131C78 for ; Mon, 17 Jul 2017 08:57:20 -0700 (PDT) Received: from gw1.nict.go.jp (gw1.nict.go.jp [133.243.18.250]) by ns1.nict.go.jp with ESMTP id v6HFvJZu083241 for ; Tue, 18 Jul 2017 00:57:19 +0900 (JST) Received: from LAPTOP9DLCDU5S (ssh1.nict.go.jp [133.243.3.49]) by gw1.nict.go.jp with ESMTP id v6HFvIHv083238 for ; Tue, 18 Jul 2017 00:57:19 +0900 (JST) From: "Takeshi Takahashi" To: Date: Tue, 18 Jul 2017 00:57:19 +0900 Message-ID: <001a01d2ff15$5f6ed1e0$1e4c75a0$@nict.go.jp> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: ja Thread-Index: AdL/FQuQkltgy3LOS5ShIWJPWrkNYw== X-Virus-Scanned: clamav-milter 0.98.7 at zenith1 X-Virus-Status: Clean Archived-At: Subject: [mile] Working group last call for XMPP-grid X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 15:57:22 -0000 Hello all, Based on the discussion at the MILE session in Prague, let us = re-initiate the WGLC=A0for draft-ietf-mile-xmpp-grid. The version to be reviewed is https://tools.ietf.org/id/draft-ietf-mile-xmpp-grid-03.txt We will have 1 month for this call. Please provide comments before August 18th and provide your support and/ = or raise any issue you feel are yet to be addressed. Thank you. Take From nobody Mon Jul 17 09:11:22 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0E5D12EC01 for ; Mon, 17 Jul 2017 09:11:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.72 X-Spam-Level: X-Spam-Status: No, score=-2.72 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=stpeter.im header.b=KcTYjWlW; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=dFezADkc Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ObVTHY17pIBc for ; Mon, 17 Jul 2017 09:11:19 -0700 (PDT) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B029128BC8 for ; Mon, 17 Jul 2017 09:11:19 -0700 (PDT) Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id C75CA20A27; Mon, 17 Jul 2017 12:11:18 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute2.internal (MEProxy); Mon, 17 Jul 2017 12:11:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stpeter.im; h= content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=R+Ukra++6lfFJTfUmg KWhmmdB4ZZFQSei5SsuLYu4Zw=; b=KcTYjWlWr56KsHO12ik5SqJhxHBt8p60Q/ jtbL7BoRzuiGi/iPW1nw1COzT1kXa7IzmPK+H5LGlGwluxwv0foM2GEcg604yjMo xI/Ig+j2Ek997Xx+r8dUPYecCkymxvGppf/g7vxbT8dnqRxJ/0E2u1kRLxCqk1tM zNUW5j+xyLPIAHiAUxVTzHng43A4DcyNmZHX0Cw+OroqEEfBVYw3Cq/Slq4Z4T6/ qgSE/hXzyg4ZWk80BaAyD1ty8KbxmZhGDf6jUJHx+iN8kMTD4/kQOb3pk4sJ9UGl 6B2ytZ1idDJCzJ6crjnZx5YUW3Fd9ryJfIBez4wNJmqL03l7r+MQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= fm1; bh=R+Ukra++6lfFJTfUmgKWhmmdB4ZZFQSei5SsuLYu4Zw=; b=dFezADkc /uV/Mb50h95Tx/hg3PWiQPTH2T1urEdm9hVYrEHi9jLCo5zw156g+W6OulDHgK22 9QYr5t6Ew2zsI+mZOSBR+DaQT44vsQdC7m1m+bVyIyI/JIGkflI2Mjc3EGcyuhjE vDZgey0q3S1ElHa4G/8ZzjwzIeRsjpKl76WUcjgQOYGprsRAkC2UtuE+d+Yw5kbw 5Qw6NaMi2MbFDKxjJVAKa/qk5WeXQiPNJN2LvJ2+kVBHZgEARN3b2up+fLX2P3b7 PdiEe+AfZTDOoxf8bMHTruMDu37PlIlLbHf0Nlx7x24IiC2pVDvs1BLLBCEGEBAX /K/3vSTDETyV3Q== X-ME-Sender: X-Sasl-enc: XL0T64U5OuUr+8gBksk13M+8P6Ex9nL1G1UtbwlWEok5 1500307878 Received: from aither.local (unknown [76.25.4.24]) by mail.messagingengine.com (Postfix) with ESMTPA id 0BE5924606; Mon, 17 Jul 2017 12:11:17 -0400 (EDT) To: Takeshi Takahashi , mile@ietf.org References: <001a01d2ff15$5f6ed1e0$1e4c75a0$@nict.go.jp> From: Peter Saint-Andre Message-ID: <32a3001d-e392-8c81-d66d-4c00fd6d148b@stpeter.im> Date: Mon, 17 Jul 2017 10:11:17 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <001a01d2ff15$5f6ed1e0$1e4c75a0$@nict.go.jp> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [mile] Working group last call for XMPP-grid X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 16:11:21 -0000 On 7/17/17 9:57 AM, Takeshi Takahashi wrote: > Hello all, > > Based on the discussion at the MILE session in Prague, let us re-initiate > the WGLC for draft-ietf-mile-xmpp-grid. > The version to be reviewed is > https://tools.ietf.org/id/draft-ietf-mile-xmpp-grid-03.txt Unfortunately the diffs are basically unreadable: https://tools.ietf.org/rfcdiff?url2=draft-ietf-mile-xmpp-grid-03.txt Therefore, those who are interested in this work are best advised to re-read the entire document. Peter From nobody Mon Jul 17 13:15:14 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 786D1131B17 for ; Mon, 17 Jul 2017 13:15:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.521 X-Spam-Level: X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5XIvmMX_OIdp for ; Mon, 17 Jul 2017 13:15:12 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D488C131B12 for ; Mon, 17 Jul 2017 13:15:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5462; q=dns/txt; s=iport; t=1500322511; x=1501532111; h=from:to:subject:date:message-id:mime-version; bh=xcQQ5wKcUauoNYQbKnYW3N6o7DPXzyfopF4TGEDc+Vg=; b=PPIPgqP+5UvFqDBxHJJsJtQsQJX+QxXVfDrFqU760nvpPr3EQ8BRrnRR kkO9k1rv0LfOX9+aCmkhYZ3UHqHHyJVZrYKXriGLAK0r3qpSN+8zGxFDk 7jED9FZMW2IqYN7bs+3gDK/7NfO+Ly82dUK/IyaEmegRb6NigvUjlrM3M w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DSAQC8GW1Z/5tdJa1cGwEBAQMBAQEJA?= =?us-ascii?q?QEBgm9rZIEbjgSRQJB6hSyCESyFN4MtPxgBAgEBAQEBAQFrHQuFQmgBDD4CBDA?= =?us-ascii?q?nBIleZBCvWIImJ4pgAQEBAQEBAQMBAQEBAQEBAQEaBYMohS4rC4JuhEaDNzCCM?= =?us-ascii?q?QWfNAKBZoVijEyCDIVPilSJRowQAR84P0t1FVsBhwOHQ4EygQ0BAQE?= X-IronPort-AV: E=Sophos;i="5.40,375,1496102400"; d="scan'208,217";a="269283446" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Jul 2017 20:15:11 +0000 Received: from XCH-RTP-012.cisco.com (xch-rtp-012.cisco.com [64.101.220.152]) by rcdn-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v6HKFARm024891 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 17 Jul 2017 20:15:11 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-012.cisco.com (64.101.220.152) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 17 Jul 2017 16:15:09 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Mon, 17 Jul 2017 16:15:09 -0400 From: "Nancy Cam-Winget (ncamwing)" To: "mile@ietf.org" Thread-Topic: Review and Support for ROLIE CSIRT draft Thread-Index: AQHS/zlj5elfQNUROEy0LWrOXTt1LA== Date: Mon, 17 Jul 2017 20:15:09 +0000 Message-ID: <0C6BAED5-2F36-4460-B794-066E08BC4DF4@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.86.251.94] Content-Type: multipart/alternative; boundary="_000_0C6BAED52F364460B794066E08BC4DF4ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [mile] Review and Support for ROLIE CSIRT draft X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 20:15:13 -0000 --_000_0C6BAED52F364460B794066E08BC4DF4ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCldlIGhhZCBhbiB1cGRhdGUgb24gdGhlIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1iYW5naGFydC1taWxlLXJvbGllLWNzaXJ0LTAxDQpEcmFmdCBhdCB0b2RheeKAmXMg ZjJmIE1JTEUgc2Vzc2lvbi4gIEl0IHdhcyBmb2xsb3dlZCBieSB0aGUgcXVlc3Rpb24gb2Ygd2hl dGhlciBNSUxFIHNob3VsZCBhZG9wdCBpdCBhcyBhIFdHIGl0ZW0uDQoNCkdpdmVuIHRoYXQgaXQg aGFzIGhhZCBsaW1pdGVkIHJldmlldywgYSBjb3VwbGUgaW4gdGhlIHJvb20gdm9sdW50ZWVyZWQg YnV0IHdlICh0aGUgY2hhaXJzKSB3b3VsZCBsaWtlIHRvIGEgZ2V0IGF0IGxlYXN0IG9uZSBvciB0 d28gbW9yZSByZXZpZXdlcnMuICBJZiB5b3UgYXJlIGludGVyZXN0ZWQgaW4gcmV2aWV3aW5nLCBw bGVhc2UgcmVzcG9uZCBpbiBraW5kLg0KDQpXZSB3aWxsIGJlIGFza2luZyB0aGUg4oCcc2hvdWxk IE1JTEUgYWRvcHQgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJhbmdoYXJ0LW1p bGUtcm9saWUtY3NpcnQtMDEgYXMgYSB3b3JraW5nIGdyb3VwIGRyYWZ04oCdIGluIGEgY291cGxl IG9mIHdlZWtzIG9uY2Ugd2XigJl2ZSBoYWQgc29tZSByZXZpZXcgZmVlZGJhY2suDQoNClRoYW5r cywgTmFuY3kNCg== --_000_0C6BAED52F364460B794066E08BC4DF4ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eTpDYWxpYnJpO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9z dHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5IaSw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPldlIGhhZCBhbiB1cGRhdGUg b24gdGhlIDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iYW5naGFy dC1taWxlLXJvbGllLWNzaXJ0LTAxIj4NCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1iYW5naGFydC1taWxlLXJvbGllLWNzaXJ0LTAxPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5EcmFm dCBhdCB0b2RheeKAmXMgZjJmIE1JTEUgc2Vzc2lvbi4mbmJzcDsgSXQgd2FzIGZvbGxvd2VkIGJ5 IHRoZSBxdWVzdGlvbiBvZiB3aGV0aGVyIE1JTEUgc2hvdWxkIGFkb3B0IGl0IGFzIGEgV0cgaXRl bS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkdpdmVuIHRoYXQg aXQgaGFzIGhhZCBsaW1pdGVkIHJldmlldywgYSBjb3VwbGUgaW4gdGhlIHJvb20gdm9sdW50ZWVy ZWQgYnV0IHdlICh0aGUgY2hhaXJzKSB3b3VsZCBsaWtlIHRvIGEgZ2V0IGF0IGxlYXN0IG9uZSBv ciB0d28gbW9yZSByZXZpZXdlcnMuJm5ic3A7IElmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiByZXZp ZXdpbmcsIHBsZWFzZSByZXNwb25kIGluIGtpbmQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij5XZSB3aWxsIGJlIGFza2luZyB0aGUg4oCcc2hvdWxkIE1JTEUgYWRv cHQNCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iYW5naGFydC1t aWxlLXJvbGllLWNzaXJ0LTAxIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYmFu Z2hhcnQtbWlsZS1yb2xpZS1jc2lydC0wMTwvYT4gYXMgYSB3b3JraW5nIGdyb3VwIGRyYWZ04oCd IGluIGEgY291cGxlIG9mIHdlZWtzIG9uY2Ugd2XigJl2ZSBoYWQgc29tZSByZXZpZXcgZmVlZGJh Y2suPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGFua3MsIE5h bmN5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_0C6BAED52F364460B794066E08BC4DF4ciscocom_-- From nobody Mon Jul 17 13:17:56 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F0B3126E64 for ; Mon, 17 Jul 2017 13:17:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tx8e0k6vIqio for ; Mon, 17 Jul 2017 13:17:53 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EC0C1250B8 for ; Mon, 17 Jul 2017 13:17:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4176; q=dns/txt; s=iport; t=1500322673; x=1501532273; h=from:to:subject:date:message-id:mime-version; bh=4VnVj+dU+hsAB9tKoNnp4a6TQlclnofGxloCraUWAAg=; b=TGwtNSBNpbsv7monzMrIesnhPGmUHYA2WHLhv+Bm/uAln0NQI8OQBKUs XOgqcsvc9Mfsx+baDCwCL4YEoPfB0Gb8uJEXxcOLJCr/AP1kKpDpipFMx W3kV+Y4i+ft+aaM50u94UGnK510YphE7PK3jn2WasjyErGGJiijdvCj7t Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B2BADIGm1Z/5tdJa1cHAEBBAEBCgEBg?= =?us-ascii?q?m9rZIEbsD6FLIIRhWODLUEWAQIBAQEBAQEBax0LhUJoAQw+AgQwJwSJXmSvaoI?= =?us-ascii?q?mJ4pgAQEBAQEBBAEBAQEBAQEBIIMohS4rhzQRAgGDLjCCMQWfNAKBZpIuggyFT?= =?us-ascii?q?4pUlVYBJgEwP0ALdRVbAYcDiHWBDQEBAQ?= X-IronPort-AV: E=Sophos;i="5.40,375,1496102400"; d="scan'208,217";a="269284355" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Jul 2017 20:17:52 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id v6HKHqB3026268 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 17 Jul 2017 20:17:52 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 17 Jul 2017 16:17:51 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1210.000; Mon, 17 Jul 2017 16:17:51 -0400 From: "Nancy Cam-Winget (ncamwing)" To: "mile@ietf.org" Thread-Topic: Support for IODEF using JSON? Thread-Index: AQHS/znETLwq1lMIeEespNpEmryzTQ== Date: Mon, 17 Jul 2017 20:17:51 +0000 Message-ID: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.86.251.94] Content-Type: multipart/alternative; boundary="_000_9324FA98280A4EACA7DB952A1E075696ciscocom_" MIME-Version: 1.0 Archived-At: Subject: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 20:17:55 -0000 --_000_9324FA98280A4EACA7DB952A1E075696ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkF0IHRvZGF54oCZcyBmMmYgTUlMRSBzZXNzaW9uLCB0aGVyZSB3YXMgcm91Z2ggY29u c2Vuc3VzIHRvIHN1cHBvcnQgSU9ERUYgd2l0aCBKU09OLg0KDQpXZSAodGhlIGNoYWlycykgd291 bGQgbGlrZSB0byBjb25maXJtIHRoaXMgdGhyb3VnaCB0aGUgbWFpbCBncm91cCBhcyB3ZWxsLiAg UGxlYXNlIHJlc3BvbmQgdG8gdGhpcyBlbWFpbA0KSWYgeW91IGJlbGlldmUgTUlMRSBzaG91bGQg b3Igc2hvdWxkIG5vdCBhZGQgdGhpcyBhcyBhIFdHIGl0ZW0uDQoNClRoYW5rcywgTmFuY3kNCg0K --_000_9324FA98280A4EACA7DB952A1E075696ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eTpDYWxpYnJpO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLm1zb0lucw0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lOw0KCWNvbG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9z dHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5IaSw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkF0IHRvZGF54oCZcyBmMmYg TUlMRSBzZXNzaW9uLCB0aGVyZSB3YXMgcm91Z2ggY29uc2Vuc3VzIHRvIHN1cHBvcnQgSU9ERUYg d2l0aCBKU09OLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2Ug KHRoZSBjaGFpcnMpIHdvdWxkIGxpa2UgdG8gY29uZmlybSB0aGlzIHRocm91Z2ggdGhlIG1haWwg Z3JvdXAgYXMgd2VsbC4mbmJzcDsgUGxlYXNlIHJlc3BvbmQgdG8gdGhpcyBlbWFpbA0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPklmIHlvdSBiZWxpZXZlIE1JTEUgc2hvdWxkIG9yIHNob3VsZCBub3QgYWRk IHRoaXMgYXMgYSBXRyBpdGVtLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+VGhhbmtzLCBOYW5jeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_9324FA98280A4EACA7DB952A1E075696ciscocom_-- From nobody Mon Jul 17 13:40:15 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51B5612ECC6 for ; Mon, 17 Jul 2017 13:40:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pivotal-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9pyNxrMovAse for ; Mon, 17 Jul 2017 13:40:08 -0700 (PDT) Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com [IPv6:2607:f8b0:4003:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B1991300BC for ; Mon, 17 Jul 2017 13:40:08 -0700 (PDT) Received: by mail-oi0-x22c.google.com with SMTP id 191so1026925oii.2 for ; Mon, 17 Jul 2017 13:40:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pivotal-io.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zLgir10p2wdKDhtpbAaDcAiHP+oS/NkN0u0VzGTeNSo=; b=XHTsEdiF1SUcVxxr3yPVFvoTXYSVTdb2lKDqd5sTwNLFfuvLsoG1aUpsGxrXq0MDcN EZJjlO0VAA0A56M2+oB2ZTQN5OBxgFU4xTDw+uug5/dbKrgmvxYYIHYjyJJlvBbrxkkm dTM/9/YUXar70jXkSwW09z3n0r5Ix+c7zjeh2C8exdPMMJz2iEeVaLx6cGmZ5Zegum+r utT+LRipy19rJ3VnAm6iR1oomh7U2I00HKsu0jufoO8gsbUIZZSXuWxf1mKzRRHzMdsm P89Xg6ZBp6Q2Op2KWKenUzcOJkNIVzYfKIFHIzcnEN0RnHLKCWpiRf2Ob+H+0wRFFP0n XnRQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zLgir10p2wdKDhtpbAaDcAiHP+oS/NkN0u0VzGTeNSo=; b=n0xduWMq5XOFDJIQUHHCJvdRB5z563+A027GfJ0rDxoSfc6st+4ZrntgSrYA4ltgEX 3P9mAYB1Zkj6FjRGDSlBNt4Xl4lQOyyxq35Yie/SqQeANZgGcEbAAswogPZHmHI4RMp4 JgGGWFOxlsJTd5pu1ilUzw4odcjmZWIO2bjPabQL0fsEq3GfmxwmnrNWUpgK0XAYlob4 UKHYZvoKE32+b73CXg7MXhihe47b06SCLUUGkdriZQzww/waj27IQgIUvvti0b9ZKvpu WNBmV4NWg2+V8zBVJTlnrPVam5KoE0eAyWuvJo6tYG8nyzgT1jel5DwndnNz+gkTpzkK o25g== X-Gm-Message-State: AIVw1101C7+/vHP5VhyyTbgYUiHOt/7ENmYZKzfFI1FGFBqiKE0s6kzo GRamff2uc6TROYVmqW06djpXbiglM3gI X-Received: by 10.202.8.14 with SMTP id 14mr17533874oii.68.1500324007861; Mon, 17 Jul 2017 13:40:07 -0700 (PDT) MIME-Version: 1.0 Received: by 10.182.246.166 with HTTP; Mon, 17 Jul 2017 13:40:07 -0700 (PDT) In-Reply-To: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> References: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> From: John Field Date: Mon, 17 Jul 2017 16:40:07 -0400 Message-ID: To: "Nancy Cam-Winget (ncamwing)" Cc: "mile@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c13050e8983920554896765" Archived-At: Subject: Re: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 20:40:11 -0000 --94eb2c13050e8983920554896765 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks for posting the question. I believe we SHOULD support IODEF with JSON. Regards, John On Mon, Jul 17, 2017 at 4:17 PM, Nancy Cam-Winget (ncamwing) < ncamwing@cisco.com> wrote: > Hi, > > > > At today=E2=80=99s f2f MILE session, there was rough consensus to support= IODEF > with JSON. > > > > We (the chairs) would like to confirm this through the mail group as > well. Please respond to this email > > If you believe MILE should or should not add this as a WG item. > > > > Thanks, Nancy > > > > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile > > --=20 John P. Field | Security PM | Pivotal Direct: (908) 962-3394 | jfield@ pivotal.io --94eb2c13050e8983920554896765 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks for posting the question. =C2=A0=C2=A0

I believe we SHOULD support IODEF with JSON.

Rega= rds,
John

On Mon, Jul 17, 2017 at 4:17 PM, Nancy Cam-Winget (ncam= wing) <ncamwing@cisco.com> wrote:

Hi,

=C2=A0

At today=E2=80=99s = f2f MILE session, there was rough consensus to support IODEF with JSON.<= /u>

=C2=A0

We (the chairs) wou= ld like to confirm this through the mail group as well.=C2=A0 Please respon= d to this email

If you believe MILE= should or should not add this as a WG item.

=C2=A0

Thanks, Nancy

=C2=A0


_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile




--
=

John= P. Field |=C2=A0Security PM |=C2=A0Pivotal= =C2=A0

Direct: (908) 962-3394 | jfield@pivo= tal.io=C2=A0=C2=A0

--94eb2c13050e8983920554896765-- From nobody Mon Jul 17 22:12:29 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A405128C81 for ; Mon, 17 Jul 2017 22:12:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5h1iim5TcDqv for ; Mon, 17 Jul 2017 22:12:26 -0700 (PDT) Received: from mail-it0-x233.google.com (mail-it0-x233.google.com [IPv6:2607:f8b0:4001:c0b::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31E64120227 for ; Mon, 17 Jul 2017 22:12:26 -0700 (PDT) Received: by mail-it0-x233.google.com with SMTP id a62so14820864itd.1 for ; Mon, 17 Jul 2017 22:12:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=aG/Ha63QLYlRKydHDK4zOqLEaiu1+xCd/ZlboAZFaQU=; b=eZmpvx24CAq5tQAquK5qM+D/t6y3h4E5C77iGNBfFp+Vgc0WFsCNntbXqSbBmGIooL wVVx+E6PoOaEFbFaJUNG6wN0Z96pWK5es5rW1pywu4HUv3FfDlo3eSDNcku/Zv8u+O2T u7HduIsUt3OggMTymSncy8NgiZKkwndruchwcLy+WAC/0qO9q4PO8dkpVtC5PxqTg1kq zCCrpbIPi5NoBpwGaQGudT7dHzR0XhTyQHEe3DQu4+ntpGDu0Is5QdV4Xl2FuU5RjDf5 0kidJfuDLUs3VbQl6OiMvh782QBrRRa/7FpYTQATXWMdao36U+uiMPdkqL7skK7YopjD BX/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=aG/Ha63QLYlRKydHDK4zOqLEaiu1+xCd/ZlboAZFaQU=; b=c3Q+TjkJM4v+KcKdZgvL2nGl93z74KVOghylR6CyZIoUw/UG2a+91/gMbsd8+OEXns Pzev+kE/j61ij953foMIU+fhll7ztRits7dydsVL/HL3zFQpbzRCsNhpDz8JStHR0AwY hQ8uxjntemk0en6oCP5SF84lVL2NLZWU8GpRhf+jeurByBlP6kZ1nwmhws9r7tZe8Xhs gypKhWEZYBeQDpJsQc1cfHWi/6qTZ2KATnJAWahOPZwH8pKGxUrhVt0uUs7A6Bx2zUEm rkbokNVNDhSHwrv2MOOtauFVWpS9V//8Q3pwy07P18P7p9IdXDLVXqB04jEFjZv/mSah R7Lg== X-Gm-Message-State: AIVw112W11LxKDBmejyYwL8uWqvQr4aYzEfSuZF882J+2uTHiNLuuLOL ZsC190+lF5X1o1IEsPYDtTLwJJovCw== X-Received: by 10.36.131.10 with SMTP id d10mr828309ite.126.1500354745502; Mon, 17 Jul 2017 22:12:25 -0700 (PDT) MIME-Version: 1.0 References: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> In-Reply-To: From: Adam Montville Date: Tue, 18 Jul 2017 05:12:15 +0000 Message-ID: To: John Field , "Nancy Cam-Winget (ncamwing)" Cc: "mile@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c118822a4965a0554908f44" Archived-At: Subject: Re: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 05:12:28 -0000 --94eb2c118822a4965a0554908f44 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable +1 On Mon, Jul 17, 2017 at 10:40 PM John Field wrote: > Thanks for posting the question. > > I believe we SHOULD support IODEF with JSON. > > Regards, > John > > On Mon, Jul 17, 2017 at 4:17 PM, Nancy Cam-Winget (ncamwing) < > ncamwing@cisco.com> wrote: > >> Hi, >> >> >> >> At today=E2=80=99s f2f MILE session, there was rough consensus to suppor= t IODEF >> with JSON. >> >> >> >> We (the chairs) would like to confirm this through the mail group as >> well. Please respond to this email >> >> If you believe MILE should or should not add this as a WG item. >> >> >> >> Thanks, Nancy >> >> >> >> _______________________________________________ >> mile mailing list >> mile@ietf.org >> https://www.ietf.org/mailman/listinfo/mile >> >> > > > -- > > John P. Field | Security PM | Pivotal > > Direct: (908) 962-3394 | jfield@ pivotal.io > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile > --94eb2c118822a4965a0554908f44 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable +1
On Mon, Jul 17, 2017 at 1= 0:40 PM John Field <jfield@pivotal.= io> wrote:
= Thanks for posting the question. =C2=A0=C2=A0

I believe = we SHOULD support IODEF with JSON.

Regards,
Jo= hn

On Mon, Jul 17, 2017 at 4:17 PM, Nancy = Cam-Winget (ncamwing) <ncamwing@cisco.com> wrote:

Hi,

=C2=A0

At today=E2=80=99s = f2f MILE session, there was rough consensus to support IODEF with JSON.<= /u>

=C2=A0

We (the chairs) wou= ld like to confirm this through the mail group as well.=C2=A0 Please respon= d to this email

If you believe MILE= should or should not add this as a WG item.

=C2=A0

Thanks, Nancy

=C2=A0


_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile




--

John P. Field |=C2=A0Security PM |=C2=A0Pivotal=C2=A0

Direct: (908) 962= -3394 | jfield@pivotal.io=C2=A0=C2= =A0

_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile
--94eb2c118822a4965a0554908f44-- From nobody Tue Jul 18 00:01:08 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B454131D3A for ; Tue, 18 Jul 2017 00:01:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1TdJcbTPYlYD for ; Tue, 18 Jul 2017 00:01:05 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6ADA131678 for ; Tue, 18 Jul 2017 00:01:04 -0700 (PDT) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id v6I711j6016769; Tue, 18 Jul 2017 03:01:01 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu v6I711j6016769 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1500361261; bh=PX5iB23cMmTIYURb3CwBBacBYx36sqRmEPgDQ9X0FX8=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=FUy1zWXYmmMHxXkKuLvbI66kxlRF25qhV25lkyswFoa1GsKWhnwTORiO2WG39R2yf H1axVZKy7O+Z3L0+DF6dbDpgpHE5IpoaySsy8YeCniWBNQNyusVFvHtMW1XhHTnihm LT3gqOPv9XyO6XVL5rY7qX6Mn3F9hXMUsba604QU= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id v6I70wdf012472; Tue, 18 Jul 2017 03:00:58 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0351.000; Tue, 18 Jul 2017 03:00:57 -0400 From: Roman Danyliw To: Adam Montville , John Field , "Nancy Cam-Winget (ncamwing)" CC: "mile@ietf.org" Thread-Topic: [mile] Support for IODEF using JSON? Thread-Index: AQHS/znETLwq1lMIeEespNpEmryzTaJYvlqAgACPF4D//9svkA== Date: Tue, 18 Jul 2017 07:00:56 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104F9E3D1@marathon> References: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: multipart/alternative; boundary="_000_359EC4B99E040048A7131E0F4E113AFC0104F9E3D1marathon_" MIME-Version: 1.0 Archived-At: Subject: Re: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 07:01:06 -0000 --_000_359EC4B99E040048A7131E0F4E113AFC0104F9E3D1marathon_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWdyZWVkLiArMS4NCg0KUm9tYW4NCg0KRnJvbTogbWlsZSBbbWFpbHRvOm1pbGUtYm91bmNlc0Bp ZXRmLm9yZ10gT24gQmVoYWxmIE9mIEFkYW0gTW9udHZpbGxlDQpTZW50OiBUdWVzZGF5LCBKdWx5 IDE4LCAyMDE3IDE6MTIgQU0NClRvOiBKb2huIEZpZWxkIDxqZmllbGRAcGl2b3RhbC5pbz47IE5h bmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPg0KQ2M6IG1pbGVA aWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbbWlsZV0gU3VwcG9ydCBmb3IgSU9ERUYgdXNpbmcgSlNP Tj8NCg0KKzENCk9uIE1vbiwgSnVsIDE3LCAyMDE3IGF0IDEwOjQwIFBNIEpvaG4gRmllbGQgPGpm aWVsZEBwaXZvdGFsLmlvPG1haWx0bzpqZmllbGRAcGl2b3RhbC5pbz4+IHdyb3RlOg0KVGhhbmtz IGZvciBwb3N0aW5nIHRoZSBxdWVzdGlvbi4NCg0KSSBiZWxpZXZlIHdlIFNIT1VMRCBzdXBwb3J0 IElPREVGIHdpdGggSlNPTi4NCg0KUmVnYXJkcywNCkpvaG4NCg0KT24gTW9uLCBKdWwgMTcsIDIw MTcgYXQgNDoxNyBQTSwgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpIDxuY2Ftd2luZ0BjaXNj by5jb208bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbT4+IHdyb3RlOg0KSGksDQoNCkF0IHRvZGF5 4oCZcyBmMmYgTUlMRSBzZXNzaW9uLCB0aGVyZSB3YXMgcm91Z2ggY29uc2Vuc3VzIHRvIHN1cHBv cnQgSU9ERUYgd2l0aCBKU09OLg0KDQpXZSAodGhlIGNoYWlycykgd291bGQgbGlrZSB0byBjb25m aXJtIHRoaXMgdGhyb3VnaCB0aGUgbWFpbCBncm91cCBhcyB3ZWxsLiAgUGxlYXNlIHJlc3BvbmQg dG8gdGhpcyBlbWFpbA0KSWYgeW91IGJlbGlldmUgTUlMRSBzaG91bGQgb3Igc2hvdWxkIG5vdCBh ZGQgdGhpcyBhcyBhIFdHIGl0ZW0uDQoNClRoYW5rcywgTmFuY3kNCg0KDQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KbWlsZSBtYWlsaW5nIGxpc3QNCm1p bGVAaWV0Zi5vcmc8bWFpbHRvOm1pbGVAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL21pbGUNCg0KDQoNCi0tDQoNCkpvaG4gUC4gRmllbGQgfCBTZWN1cml0 eSBQTSB8IFBpdm90YWwNCg0KRGlyZWN0OiAoOTA4KSA5NjItMzM5NCB8IGpmaWVsZEA8bWFpbHRv OmpmaWVsZEBnb3Bpdm90YWwuY29tPnBpdm90YWwuaW88aHR0cDovL3Bpdm90YWwuaW8+DQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KbWlsZSBtYWlsaW5n IGxpc3QNCm1pbGVAaWV0Zi5vcmc8bWFpbHRvOm1pbGVAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL21pbGUNCg== --_000_359EC4B99E040048A7131E0F4E113AFC0104F9E3D1marathon_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0K CW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4u RW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1 bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+QWdyZWVkLiAmIzQz OzEuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5Sb21hbjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5k Q29tcG9zZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvYT48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IG1pbGUgW21haWx0bzptaWxlLWJv dW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkFkYW0gTW9udHZpbGxlPGJyPg0K PGI+U2VudDo8L2I+IFR1ZXNkYXksIEp1bHkgMTgsIDIwMTcgMToxMiBBTTxicj4NCjxiPlRvOjwv Yj4gSm9obiBGaWVsZCAmbHQ7amZpZWxkQHBpdm90YWwuaW8mZ3Q7OyBOYW5jeSBDYW0tV2luZ2V0 IChuY2Ftd2luZykgJmx0O25jYW13aW5nQGNpc2NvLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IG1p bGVAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFttaWxlXSBTdXBwb3J0IGZvciBJ T0RFRiB1c2luZyBKU09OPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiYjNDM7MTxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5PbiBNb24sIEp1bCAxNywgMjAxNyBhdCAxMDo0MCBQTSBKb2huIEZpZWxkICZsdDs8 YSBocmVmPSJtYWlsdG86amZpZWxkQHBpdm90YWwuaW8iPmpmaWVsZEBwaXZvdGFsLmlvPC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzIGZvciBwb3N0aW5nIHRoZSBxdWVzdGlvbi4gJm5ic3A7 Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGJl bGlldmUgd2UgU0hPVUxEIHN1cHBvcnQgSU9ERUYgd2l0aCBKU09OLjxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpvaG48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBNb24sIEp1bCAx NywgMjAxNyBhdCA0OjE3IFBNLCBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgJmx0OzxhIGhy ZWY9Im1haWx0bzpuY2Ftd2luZ0BjaXNjby5jb20iIHRhcmdldD0iX2JsYW5rIj5uY2Ftd2luZ0Bj aXNjby5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPkhpLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PkF0IHRvZGF54oCZcyBmMmYgTUlMRSBzZXNzaW9uLCB0aGVyZSB3YXMgcm91Z2ggY29uc2Vuc3Vz IHRvIHN1cHBvcnQgSU9ERUYgd2l0aCBKU09OLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPldlICh0aGUgY2hhaXJzKSB3b3VsZCBsaWtlIHRvIGNvbmZpcm0g dGhpcyB0aHJvdWdoIHRoZSBtYWlsIGdyb3VwIGFzIHdlbGwuJm5ic3A7IFBsZWFzZSByZXNwb25k IHRvIHRoaXMgZW1haWwNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPklmIHlvdSBiZWxpZXZlIE1JTEUg c2hvdWxkIG9yIHNob3VsZCBub3QgYWRkIHRoaXMgYXMgYSBXRyBpdGVtLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rcywgTmFuY3k8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+DQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCm1pbGUg bWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOm1pbGVAaWV0Zi5vcmciIHRhcmdldD0i X2JsYW5rIj5taWxlQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vbWlsZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vbWlsZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyIGNsZWFyPSJhbGwi Pg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pi0tIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkpvaG4gUC4gRmllbGQgfCZuYnNw O1NlY3VyaXR5IFBNIHwmbmJzcDtQaXZvdGFsJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkRpcmVjdDogKDkwOCkgOTYyLTMzOTQgfA0K PGEgaHJlZj0ibWFpbHRvOmpmaWVsZEBnb3Bpdm90YWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+amZp ZWxkQDwvYT48YSBocmVmPSJodHRwOi8vcGl2b3RhbC5pbyIgdGFyZ2V0PSJfYmxhbmsiPnBpdm90 YWwuaW88L2E+Jm5ic3A7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxi cj4NCm1pbGUgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOm1pbGVAaWV0Zi5vcmci IHRhcmdldD0iX2JsYW5rIj5taWxlQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbWlsZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbWlsZTwvYT48bzpwPjwvbzpwPjwvcD4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4N Cg== --_000_359EC4B99E040048A7131E0F4E113AFC0104F9E3D1marathon_-- From nobody Tue Jul 18 01:37:41 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A6A2131A76 for ; Tue, 18 Jul 2017 01:37:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.699 X-Spam-Level: X-Spam-Status: No, score=-4.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u20XB9b2UDdh for ; Tue, 18 Jul 2017 01:37:37 -0700 (PDT) Received: from mout.kundenserver.de (mout.kundenserver.de [217.72.192.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94792131D9F for ; Tue, 18 Jul 2017 01:37:32 -0700 (PDT) Received: from weemac2.home ([31.50.217.39]) by mrelayeu.kundenserver.de (mreue102 [212.227.15.179]) with ESMTPSA (Nemesis) id 0MC1MO-1dOcYw10wS-008qPL; Tue, 18 Jul 2017 10:37:18 +0200 From: Patrick Curry Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_9FFBC7DE-1C6E-4360-81BA-3F6B804B9DE7" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Tue, 18 Jul 2017 09:37:14 +0100 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0104F9E3D1@marathon> Cc: Adam Montville , John Field , "Nancy Cam-Winget (ncamwing)" , "mile@ietf.org" To: Roman Danyliw References: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> <359EC4B99E040048A7131E0F4E113AFC0104F9E3D1@marathon> X-Mailer: Apple Mail (2.3273) X-Provags-ID: V03:K0:wn4DEH8PS+4LTvFyih4kljwEvUIXvEdWDtSXHTwK1n1QYkoIo5U VOGSh4SeruXFnwdqjVqNq0IrQBLsfOiw0+ifrPH2WW8512dLUx85N8iM7OfjD3/K5rfcN5F vUvi2nBQiKwVnBe+PglFCnjhoIbhrRqjgFYsRb2q0LStWstEfDauu1VOxExFuO2YrlH+ZoS 6VNigCJ4ksam7oadhikFQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:c5e1pE80O/s=:SeV4AwOzvPlL1aaF3TeYq+ k3AFi6z17pPJuIKJzLZswjw2Vg1H0FXS4STXeizY92D80b4p0uhEzUo1nwfTlCAKtIoVWCBhp zIorgISrktMIuXmCr4QodgmNxZW/x8tS4BWkcd71tAfhIJQ0IhVmKk/b9NSiHqaDr9prtx+YL zhjfMcFmPnDxatdlqmCVuI+SVVv3hpAXCCvk/K6BKciqAR6eiN+dtulliAgrkinLF97bwqjE3 nzR7neB2Vi0Lp9q5lahR3TX2lFGq/4i69y2q1U7CzDO6M3uc2cgnVWY52bJeCuEawttCdFZdK USR6b/I7/D4y25Gv4VT9uho1tfk2JAc7JeRn7F4q6PY9x+ucZLP5bROeQE4q40DioWcaTRLOa ISbS4d0RqkFF+7SHeEUXmUntRC7iu0PmO8CzGEs6V+50QreNM9sCBIOf91bmTdupInvh4xZ1i dLyRPqvUvwkuJEfLZr6QxCEb6Fgdb5PWnYmSkZt9dueYb/j4UYKXR8OuGPyGXq8iGaJ692RUf QxGkJbOMNzNpYfk2imXQ59WswShgiLYiiAmkY0+3eAJ+vQlPYwpHKT+I6wXqmCD8izyLdNAt6 ozVhaANMQhAAERfv7YCjeWZKapSTELe6hyM02iCkqt9DXuV/gYpjcl6DL/NhnN5N6MhXcLLCZ fAMyuScE3aOAFmu+2EO9G8+dT5j+gkkO62VbSfj6hdoWxgrP5Zl/jjH7pt2sIci2D02UaQvHm sblHJd00XfJ+W3KL2bcbngVh+AnmcKOWaa8vMsRE9khagQO2Umn3PS02rag= Archived-At: Subject: Re: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 08:37:39 -0000 --Apple-Mail=_9FFBC7DE-1C6E-4360-81BA-3F6B804B9DE7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 +1 Thanks. Patrick Curry Director British Business Federation Authority - BBFA Ltd M: +44 786 024 9074 T: +44 1980 620606 patrick.curry@bbfa.info SkypeID patrickcurry123 www.bbfa.info =E2=80=93 a not-for-profit, self-regulating body =20 On 18 Jul 2017, at 08:00, Roman Danyliw wrote: Agreed. +1. =20 Roman =C2=A0 <> From: mile [mailto:mile-bounces@ietf.org ] = On Behalf Of Adam Montville Sent: Tuesday, July 18, 2017 1:12 AM To: John Field >; Nancy = Cam-Winget (ncamwing) > Cc: mile@ietf.org Subject: Re: [mile] Support for IODEF using JSON? =20 +1 On Mon, Jul 17, 2017 at 10:40 PM John Field > wrote: Thanks for posting the question. =20 =20 I believe we SHOULD support IODEF with JSON. =20 Regards, John =20 On Mon, Jul 17, 2017 at 4:17 PM, Nancy Cam-Winget (ncamwing) = > wrote: Hi, =20 At today=E2=80=99s f2f MILE session, there was rough consensus to = support IODEF with JSON. =20 We (the chairs) would like to confirm this through the mail group as = well. Please respond to this email If you believe MILE should or should not add this as a WG item. =20 Thanks, Nancy =20 _______________________________________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile = =20 --=20 John P. Field | Security PM | Pivotal=20 Direct: (908) 962-3394 | jfield@ pivotal.io = =20 _______________________________________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile = ______________________________= _________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile = --Apple-Mail=_9FFBC7DE-1C6E-4360-81BA-3F6B804B9DE7 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 +1
Thanks.



Patrick Curry
Director

British Business = Federation Authority - BBFA Ltd
M: +44 786 024 = 9074
T:   +44 1980 620606
patrick.curry@bbfa.info
SkypeID patrickcurry123
www.bbfa.info =E2=80=93 a = not-for-profit, self-regulating body   



On 18 Jul 2017, at 08:00, Roman = Danyliw <rdd@cert.org> wrote:

Agreed. +1.
 
Roman
 
From: mile [mailto:mile-bounces@ietf.org] On Behalf = Of Adam = Montville
Sent: Tuesday, July 18, 2017 1:12 = AM
To: John Field <jfield@pivotal.io>; Nancy = Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: mile@ietf.org
Subject: Re: [mile] Support for = IODEF using JSON?
 
+1
On = Mon, Jul 17, 2017 at 10:40 PM John Field <jfield@pivotal.io> = wrote:
Thanks for posting the question.   
 
I believe we SHOULD support IODEF with = JSON.
 
Regards,
John
 
On Mon, Jul 17, 2017 at 4:17 PM, Nancy Cam-Winget (ncamwing) = <ncamwing@cisco.com> wrote:
Hi,
 
At today=E2=80=99s f2f MILE = session, there was rough consensus to support IODEF with = JSON.
 
We (the chairs) would like to = confirm this through the mail group as well.  Please respond to = this email
If you believe = MILE should or should not add this as a WG item.
 
Thanks, Nancy
 


_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile



 
-- 

John P. Field | Security PM = | Pivotal 

Direct: (908) 962-3394 | jfield@pivotal.io  

_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile
_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile

= --Apple-Mail=_9FFBC7DE-1C6E-4360-81BA-3F6B804B9DE7-- From nobody Tue Jul 18 10:30:01 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE3FE131BA5 for ; Tue, 18 Jul 2017 10:29:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aNib1xaniqBz for ; Tue, 18 Jul 2017 10:29:56 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D47612EC18 for ; Tue, 18 Jul 2017 10:29:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5792; q=dns/txt; s=iport; t=1500398996; x=1501608596; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=ByAfb7+CxFl7PcU75HZgXUuQlB2QJxnBUFmYc/Jzhow=; b=al+mn0HjYpemifZXpCRyQ9/C3B2nsdfFW3fpJgXl2PlYviTmi/SvdGL5 x6JdKrL+jTSbwfFg88uHyGt1onB7hHoo5N8BUoJIxXVMdVkfAkYZIp68w OzA7erUWQUWO087rJcwSAmQw38m2cbsl+n9qvzpwr/P6894TftYL4Noyh Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DuAgDxRG5Z/4QNJK1bGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgm9rZIEUB59qkFiFLIIRhUcCGoM3QBcBAgEBAQEBAQFrKIUYAQEBAQM?= =?us-ascii?q?jClwCAQgRBAEBKAMCAgIwFAkIAgQBEgiJQ2SvUIImJ4pYAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBHYMog02BYYMkhDsRAgFRgl2CYQWfNAKUC4IVhU+KVJVWASEBNT9?= =?us-ascii?q?AC3UVh192h0YBgQwBAQE?= X-IronPort-AV: E=Sophos; i="5.40,378,1496102400"; d="scan'208,217"; a="53582378" Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 18 Jul 2017 17:29:55 +0000 Received: from XCH-ALN-011.cisco.com (xch-aln-011.cisco.com [173.36.7.21]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v6IHTtwb023941 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 18 Jul 2017 17:29:55 GMT Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-ALN-011.cisco.com (173.36.7.21) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 18 Jul 2017 12:29:55 -0500 Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1210.000; Tue, 18 Jul 2017 12:29:54 -0500 From: "Panos Kampanakis (pkampana)" To: "Nancy Cam-Winget (ncamwing)" , "mile@ietf.org" Thread-Topic: Support for IODEF using JSON? Thread-Index: AQHS/znETLwq1lMIeEespNpEmryzTaJZ2HEw Date: Tue, 18 Jul 2017 17:29:54 +0000 Message-ID: References: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> In-Reply-To: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [64.102.56.151] Content-Type: multipart/alternative; boundary="_000_aba45c0de3be4ce1a249c10005a2bf7fXCHALN010ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jul 2017 17:29:59 -0000 --_000_aba45c0de3be4ce1a249c10005a2bf7fXCHALN010ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T25lIG1vcmUgKzEuDQoNCg0KRnJvbTogbWlsZSBbbWFpbHRvOm1pbGUtYm91bmNlc0BpZXRmLm9y Z10gT24gQmVoYWxmIE9mIE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKQ0KU2VudDogTW9uZGF5 LCBKdWx5IDE3LCAyMDE3IDQ6MTggUE0NClRvOiBtaWxlQGlldGYub3JnDQpTdWJqZWN0OiBbbWls ZV0gU3VwcG9ydCBmb3IgSU9ERUYgdXNpbmcgSlNPTj8NCg0KSGksDQoNCkF0IHRvZGF54oCZcyBm MmYgTUlMRSBzZXNzaW9uLCB0aGVyZSB3YXMgcm91Z2ggY29uc2Vuc3VzIHRvIHN1cHBvcnQgSU9E RUYgd2l0aCBKU09OLg0KDQpXZSAodGhlIGNoYWlycykgd291bGQgbGlrZSB0byBjb25maXJtIHRo aXMgdGhyb3VnaCB0aGUgbWFpbCBncm91cCBhcyB3ZWxsLiAgUGxlYXNlIHJlc3BvbmQgdG8gdGhp cyBlbWFpbA0KSWYgeW91IGJlbGlldmUgTUlMRSBzaG91bGQgb3Igc2hvdWxkIG5vdCBhZGQgdGhp cyBhcyBhIFdHIGl0ZW0uDQoNClRoYW5rcywgTmFuY3kNCg0K --_000_aba45c0de3be4ce1a249c10005a2bf7fXCHALN010ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4 cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIx MDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJn Y29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIi Pg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPk9uZSBtb3JlICYjNDM7MS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+IG1pbGUgW21haWx0bzptaWxlLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhh bGYgT2YgPC9iPk5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKTxicj4NCjxiPlNlbnQ6PC9iPiBN b25kYXksIEp1bHkgMTcsIDIwMTcgNDoxOCBQTTxicj4NCjxiPlRvOjwvYj4gbWlsZUBpZXRmLm9y Zzxicj4NCjxiPlN1YmplY3Q6PC9iPiBbbWlsZV0gU3VwcG9ydCBmb3IgSU9ERUYgdXNpbmcgSlNP Tj88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij5BdCB0b2RheeKAmXMgZjJmIE1JTEUgc2Vzc2lvbiwgdGhlcmUgd2FzIHJv dWdoIGNvbnNlbnN1cyB0byBzdXBwb3J0IElPREVGIHdpdGggSlNPTi48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPldlICh0aGUgY2hhaXJzKSB3b3VsZCBsaWtlIHRv IGNvbmZpcm0gdGhpcyB0aHJvdWdoIHRoZSBtYWlsIGdyb3VwIGFzIHdlbGwuJm5ic3A7IFBsZWFz ZSByZXNwb25kIHRvIHRoaXMgZW1haWwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JZiB5b3UgYmVsaWV2 ZSBNSUxFIHNob3VsZCBvciBzaG91bGQgbm90IGFkZCB0aGlzIGFzIGEgV0cgaXRlbS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rcywgTmFuY3k8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+ DQo8L2h0bWw+DQo= --_000_aba45c0de3be4ce1a249c10005a2bf7fXCHALN010ciscocom_-- From nobody Wed Jul 19 23:42:13 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC4AF1289B0 for ; Wed, 19 Jul 2017 23:42:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fl02QUzWo3Qw for ; Wed, 19 Jul 2017 23:42:11 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4E15127866 for ; Wed, 19 Jul 2017 23:42:10 -0700 (PDT) Received: from 172.18.7.190 (EHLO LHREML712-CAH.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DRP10963; Thu, 20 Jul 2017 06:42:08 +0000 (GMT) Received: from DGGEML406-HUB.china.huawei.com (10.3.17.50) by LHREML712-CAH.china.huawei.com (10.201.108.35) with Microsoft SMTP Server (TLS) id 14.3.301.0; Thu, 20 Jul 2017 07:42:07 +0100 Received: from DGGEML502-MBX.china.huawei.com ([169.254.2.84]) by dggeml406-hub.china.huawei.com ([10.3.17.50]) with mapi id 14.03.0301.000; Thu, 20 Jul 2017 14:41:57 +0800 From: "Xialiang (Frank)" To: "Nancy Cam-Winget (ncamwing)" CC: "mile@ietf.org" Thread-Topic: Support for IODEF using JSON? Thread-Index: AQHS/znETLwq1lMIeEespNpEmryzTaJcSAig Date: Thu, 20 Jul 2017 06:41:56 +0000 Message-ID: References: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> In-Reply-To: <9324FA98-280A-4EAC-A7DB-952A1E075696@cisco.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.73.101] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12BB25205DGGEML502MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.597050C1.000C, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.84, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: fd390e2249ec5efaaadb83882a1bc096 Archived-At: Subject: Re: [mile] Support for IODEF using JSON? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2017 06:42:13 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12BB25205DGGEML502MBXchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 U3VwcG9ydC4NCg0KRnJvbTogbWlsZSBbbWFpbHRvOm1pbGUtYm91bmNlc0BpZXRmLm9yZ10gT24g QmVoYWxmIE9mIE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKQ0KU2VudDogTW9uZGF5LCBKdWx5 IDE3LCAyMDE3IDEwOjE4IFBNDQpUbzogbWlsZUBpZXRmLm9yZw0KU3ViamVjdDogW21pbGVdIFN1 cHBvcnQgZm9yIElPREVGIHVzaW5nIEpTT04/DQoNCkhpLA0KDQpBdCB0b2RheeKAmXMgZjJmIE1J TEUgc2Vzc2lvbiwgdGhlcmUgd2FzIHJvdWdoIGNvbnNlbnN1cyB0byBzdXBwb3J0IElPREVGIHdp dGggSlNPTi4NCg0KV2UgKHRoZSBjaGFpcnMpIHdvdWxkIGxpa2UgdG8gY29uZmlybSB0aGlzIHRo cm91Z2ggdGhlIG1haWwgZ3JvdXAgYXMgd2VsbC4gIFBsZWFzZSByZXNwb25kIHRvIHRoaXMgZW1h aWwNCklmIHlvdSBiZWxpZXZlIE1JTEUgc2hvdWxkIG9yIHNob3VsZCBub3QgYWRkIHRoaXMgYXMg YSBXRyBpdGVtLg0KDQpUaGFua3MsIE5hbmN5DQoNCg== --_000_C02846B1344F344EB4FAA6FA7AF481F12BB25205DGGEML502MBXchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5 cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6 d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMx RjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ Zm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5 Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNl Y3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNv IDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAv Pg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxh eW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwv bzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9 IndoaXRlIiBsYW5nPSJaSC1DTiIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEIj5TdXBwb3J0Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IG1pbGUgW21haWx0bzptaWxlLWJvdW5jZXNAaWV0 Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPk5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKTxi cj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIEp1bHkgMTcsIDIwMTcgMTA6MTggUE08YnI+DQo8Yj5U bzo8L2I+IG1pbGVAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW21pbGVdIFN1cHBvcnQg Zm9yIElPREVGIHVzaW5nIEpTT04/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhpLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BdCB0b2RheeKAmXMgZjJm IE1JTEUgc2Vzc2lvbiwgdGhlcmUgd2FzIHJvdWdoIGNvbnNlbnN1cyB0byBzdXBwb3J0IElPREVG IHdpdGggSlNPTi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2UgKHRoZSBjaGFpcnMpIHdvdWxkIGxpa2UgdG8gY29u ZmlybSB0aGlzIHRocm91Z2ggdGhlIG1haWwgZ3JvdXAgYXMgd2VsbC4mbmJzcDsgUGxlYXNlIHJl c3BvbmQgdG8gdGhpcyBlbWFpbA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JZiB5 b3UgYmVsaWV2ZSBNSUxFIHNob3VsZCBvciBzaG91bGQgbm90IGFkZCB0aGlzIGFzIGEgV0cgaXRl bS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+VGhhbmtzLCBOYW5jeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F12BB25205DGGEML502MBXchi_-- From nobody Thu Jul 20 00:14:02 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7FA512EB2B for ; Thu, 20 Jul 2017 00:13:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZlL0DfgPPgT6 for ; Thu, 20 Jul 2017 00:13:58 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9BA2127735 for ; Thu, 20 Jul 2017 00:13:57 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml705-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DRP16054; Thu, 20 Jul 2017 07:13:55 +0000 (GMT) Received: from DGGEML402-HUB.china.huawei.com (10.3.17.38) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.301.0; Thu, 20 Jul 2017 08:13:54 +0100 Received: from DGGEML502-MBX.china.huawei.com ([169.254.2.84]) by DGGEML402-HUB.china.huawei.com ([fe80::fca6:7568:4ee3:c776%31]) with mapi id 14.03.0301.000; Thu, 20 Jul 2017 15:13:51 +0800 From: "Xialiang (Frank)" To: "mile@ietf.org" Thread-Topic: Hello, my comments on draft-banghart-mile-rolie-csirt-01: Thread-Index: AdMBJ737fe7WDE1lSVyC0xwwfBCgbw== Date: Thu, 20 Jul 2017 07:13:51 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.73.101] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12BB2527CDGGEML502MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090204.59705833.0058, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.2.84, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: e806121b8d7a0ce95eeb2a418cf73c30 Archived-At: Subject: [mile] Hello, my comments on draft-banghart-mile-rolie-csirt-01: X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2017 07:14:00 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12BB2527CDGGEML502MBXchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi authors, I have reviewed this draft, it's a useful extension of ROLIE for CSIRT team= for security information sharing. Right now, I can see that this draft is generally not complicated so that i= n a good shape and well written. I just have several comments on it as foll= ows: 1. Table 1~3 have the same title causing the difficulty to know what = they are respectively for, it would be helpful to have more specific title = for each table; 2. Current draft covers two primary types of information: incidents a= nd indicators. Is there plan to add more types in future, given IODEF actua= lly has more types of security related information that can be referenced? 3. For people who are not CSIRT experts, they may not be clear why yo= u propose current information elements required for the CSIRT exchange in S= ection 6. Is it helpful to have some background information for explaining? Generally, I think this draft is useful and in a good direction, but I stil= l find there are some parts missed or not fully described. So go ahead and = encourage more discussions in WG~~ B.R. Frank --_000_C02846B1344F344EB4FAA6FA7AF481F12BB2527CDGGEML502MBXchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi authors,

I have reviewed this draft, it&= #8217;s a useful extension of ROLIE for CSIRT team for security information= sharing.

Right now, I can see that this = draft is generally not complicated so that in a good shape and well written= . I just have several comments on it as follows:

1= .   &= nbsp;   Table 1~3 have the same= title causing the difficulty to know what they are respectively for, it wo= uld be helpful to have more specific title for each table;

2= .   &= nbsp;   Current draft covers tw= o primary types of information: incidents and indicators. Is there plan to = add more types in future, given IODEF actually has more types of security r= elated information that can be referenced?

3= .   &= nbsp;   For people who are not = CSIRT experts, they may not be clear why you propose current information el= ements required for the CSIRT exchange in Section 6. Is it helpful to have = some background information for explaining?

 

Generally, I think this draft i= s useful and in a good direction, but I still find there are some parts mis= sed or not fully described. So go ahead and encourage more discussions in W= G~~

 

B.R.

Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F12BB2527CDGGEML502MBXchi_-- From nobody Thu Jul 20 08:06:10 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C08D51252BA for ; Thu, 20 Jul 2017 08:06:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FScQPxc3F8XC for ; Thu, 20 Jul 2017 08:06:01 -0700 (PDT) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0110.outbound.protection.outlook.com [23.103.201.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13D48131CCA for ; Thu, 20 Jul 2017 08:06:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=6u7Jc2uXOSwRUBnAjM95nQc4z1UlAvl2148FIZJ9tJ0=; b=W0eYFbz5nyElTglllYsI9B0QKQW4pIkwC0rAB9JRkGL9YF0kQlOuF7AwiKFzGrqSqVdHg1w9bvh2T3f0x9bS6V/kZeHO/C/8m9fiShLxbfU0GvxeCs6jGzvgyetLfII8rCws4O7T2hCVS20bXWVFv8mxASKzGrqWzEiAwcjqPgM= Received: from MWHPR09MB1440.namprd09.prod.outlook.com (10.173.50.14) by MWHPR09MB1438.namprd09.prod.outlook.com (10.173.50.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1261.13; Thu, 20 Jul 2017 15:05:59 +0000 Received: from MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) by MWHPR09MB1440.namprd09.prod.outlook.com ([10.173.50.14]) with mapi id 15.01.1261.024; Thu, 20 Jul 2017 15:05:59 +0000 From: "Waltermire, David A. (Fed)" To: "Xialiang (Frank)" , "mile@ietf.org" Thread-Topic: Hello, my comments on draft-banghart-mile-rolie-csirt-01: Thread-Index: AdMBJ737fe7WDE1lSVyC0xwwfBCgbwAQamZw Date: Thu, 20 Jul 2017 15:05:59 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=nist.gov; x-originating-ip: [2001:67c:370:128:b5a6:c156:31d7:2673] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR09MB1438; 7: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 x-ms-office365-filtering-correlation-id: 61f88555-7ca0-4359-7273-08d4cf80d494 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(300000503095)(300135400095)(48565401081)(2017052603031)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:MWHPR09MB1438; x-ms-traffictypediagnostic: MWHPR09MB1438: x-exchange-antispam-report-test: UriScan:(236129657087228)(192374486261705)(131327999870524)(50582790962513)(48057245064654)(148574349560750)(209349559609743)(256282310955234); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(2017060910075)(3002001)(10201501046)(93006095)(93001095)(100000703101)(100105400095)(6055026)(6041248)(20161123560025)(20161123562025)(20161123555025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123564025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:MWHPR09MB1438; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:MWHPR09MB1438; x-forefront-prvs: 0374433C81 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39410400002)(39400400002)(39850400002)(39450400003)(39840400002)(377454003)(229853002)(478600001)(54896002)(2501003)(81166006)(5660300001)(6246003)(6606003)(54356999)(77096006)(33656002)(53546010)(7736002)(8676002)(8936002)(7696004)(102836003)(189998001)(2900100001)(53936002)(3660700001)(6116002)(25786009)(14454004)(9686003)(19627405001)(76176999)(99286003)(50986999)(55016002)(2950100002)(86362001)(38730400002)(6436002)(224903001)(230783001)(2906002)(3280700002)(74316002)(6506006); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR09MB1438; H:MWHPR09MB1440.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_MWHPR09MB1440133640271A5E94FDF696F0A70MWHPR09MB1440namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2017 15:05:59.2688 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR09MB1438 Archived-At: Subject: Re: [mile] Hello, my comments on draft-banghart-mile-rolie-csirt-01: X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2017 15:06:08 -0000 --_000_MWHPR09MB1440133640271A5E94FDF696F0A70MWHPR09MB1440namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Frank, Your feedback is greatly appreciated. Thank you. Would you be interested in= contributing any text to the draft based on your feedback? Also, with regards to your #2 comment, what other information types do you = think would be useful to add? Thanks, Dave ________________________________ From: mile on behalf of Xialiang (Frank) Sent: Thursday, July 20, 2017 3:13 AM To: mile@ietf.org Subject: [mile] Hello, my comments on draft-banghart-mile-rolie-csirt-01: Hi authors, I have reviewed this draft, it=92s a useful extension of ROLIE for CSIRT te= am for security information sharing. Right now, I can see that this draft is generally not complicated so that i= n a good shape and well written. I just have several comments on it as foll= ows: 1. Table 1~3 have the same title causing the difficulty to know what = they are respectively for, it would be helpful to have more specific title = for each table; 2. Current draft covers two primary types of information: incidents a= nd indicators. Is there plan to add more types in future, given IODEF actua= lly has more types of security related information that can be referenced? 3. For people who are not CSIRT experts, they may not be clear why yo= u propose current information elements required for the CSIRT exchange in S= ection 6. Is it helpful to have some background information for explaining? Generally, I think this draft is useful and in a good direction, but I stil= l find there are some parts missed or not fully described. So go ahead and = encourage more discussions in WG~~ B.R. Frank --_000_MWHPR09MB1440133640271A5E94FDF696F0A70MWHPR09MB1440namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Frank,


Your feedback is greatly appreciated. Thank you. Would you = be interested in contributing any text to the draft based on your feedback?


Also, with regards to your #2 comment, what other information types do y= ou think would be useful to add?


Thanks,

Dave


From: mile <mile-bounc= es@ietf.org> on behalf of Xialiang (Frank) <frank.xialiang@huawei.com= >
Sent: Thursday, July 20, 2017 3:13 AM
To: mile@ietf.org
Subject: [mile] Hello, my comments on draft-banghart-mile-rolie-csir= t-01:
 

Hi authors,

I have reviewed this draft, it=92s a useful extension = of ROLIE for CSIRT team for security information sharing.

Right now, I can see that this draft is generally not = complicated so that in a good shape and well written. I just have several c= omments on it as follows:

1.  &= nbsp;    Table 1~3 have the same title cau= sing the difficulty to know what they are respectively for, it would be hel= pful to have more specific title for each table;

2.  &= nbsp;    Current draft covers two primary = types of information: incidents and indicators. Is there plan to add more t= ypes in future, given IODEF actually has more types of security related inf= ormation that can be referenced?

3.  &= nbsp;    For people who are not CSIRT expe= rts, they may not be clear why you propose current information elements req= uired for the CSIRT exchange in Section 6. Is it helpful to have some backg= round information for explaining?

 

Generally, I think this draft is useful and in a good = direction, but I still find there are some parts missed or not fully descri= bed. So go ahead and encourage more discussions in WG~~

 

B.R.

Frank

--_000_MWHPR09MB1440133640271A5E94FDF696F0A70MWHPR09MB1440namp_-- From nobody Sun Jul 23 21:33:53 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29642126E64 for ; Sun, 23 Jul 2017 21:33:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGh7jcHcbIbE for ; Sun, 23 Jul 2017 21:33:49 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2984F1200ED for ; Sun, 23 Jul 2017 21:33:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9486; q=dns/txt; s=iport; t=1500870829; x=1502080429; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=jC6XXxUKb0GrAkwnfueLOJdsALPkl3Gvk5HGr6ai7Tw=; b=EGGCSff0vtI9kI+Tf5+7nwR9S34AGc7ywCC7LdXjMTQcQkMVjIV2o1c7 n/HlpPcHnFz5Eys1KGyxUFy2xkunMrIAvdFKb3QffriaSYPKw7E0hUbOT Fo8O+OG4EEvxBCyNymUsGhB428PhXgbb6aQemnJhYOirve0xQhzK8MtKL Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CdAADKd3VZ/5RdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9rZIEUB44FkWaQWYUsghIshRsCGoNkPxgBAgEBAQEBAQFrKIU?= =?us-ascii?q?YAQEBAQMjClwCAQgRBAEBKAMCAgIwFAkIAgQBEgiJQ2QQrxuCJieLCQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBARgFgyiDTYFhgySER1qCXYJhBZ9OAodMjEeCFYVQilu?= =?us-ascii?q?JSowZAR84P0t1FYdfdod2gTKBDgEBAQ?= X-IronPort-AV: E=Sophos;i="5.40,404,1496102400"; d="scan'208,217";a="271801859" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Jul 2017 04:33:48 +0000 Received: from XCH-RCD-013.cisco.com (xch-rcd-013.cisco.com [173.37.102.23]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v6O4Xl9D022316 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 24 Jul 2017 04:33:47 GMT Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-RCD-013.cisco.com (173.37.102.23) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 23 Jul 2017 23:33:47 -0500 Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1210.000; Sun, 23 Jul 2017 23:33:47 -0500 From: "Panos Kampanakis (pkampana)" To: "Nancy Cam-Winget (ncamwing)" , "mile@ietf.org" Thread-Topic: Review and Support for ROLIE CSIRT draft Thread-Index: AQHS/zlj5elfQNUROEy0LWrOXTt1LKJia3XA Date: Mon, 24 Jul 2017 04:33:47 +0000 Message-ID: <54a1af5571d84c6cbe1d16d0ba892661@XCH-ALN-010.cisco.com> References: <0C6BAED5-2F36-4460-B794-066E08BC4DF4@cisco.com> In-Reply-To: <0C6BAED5-2F36-4460-B794-066E08BC4DF4@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.82.232.111] Content-Type: multipart/alternative; boundary="_000_54a1af5571d84c6cbe1d16d0ba892661XCHALN010ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [mile] Review and Support for ROLIE CSIRT draft X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jul 2017 04:33:51 -0000 --_000_54a1af5571d84c6cbe1d16d0ba892661XCHALN010ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVhZGluZyB0aGlzIGRyYWZ0LCBJIGhhdmUgdHdvIGNvbmNlcm5zOg0KLSBIb3cgbXVjaCBvZiB0 aGlzIGRyYWZ0IGlzIG5lY2Vzc2FyeSBmb3Igc29tZW9uZSB0byBiZSBhYmxlIHRvIHVzZSBJT0RF RiB3aXRoIFJPTElFPyBJIGFtIHdvbmRlcmluZyBpZiB0aGVzZSBhcmUgbW9zdGx5IGJlc3QgcHJh Y3RpY2VzIHRoYXQgYXkgUk9MSUUgaW1wbGVtZW50ZXIgY291bGQgYWRkcmVzcyBieSBqdXN0IHVz aW5nIHRoZSBST0xJRSBkb2N1bWVudC4NCi0gR2l2ZW4gdGhlIGNoYXJ0ZXIgb2YgdGhlIE1JTEUg V0csIEkgdGhpbmsgdGhpcyBkb2N1bWVudCBpcyBvdXQgb2Ygc2NvcGUuIEV2ZW4gSU9ERUYgd2l0 aCBKU09OIGlzIG91dCBvZiBzY29wZSBiYXNlZCBvbiB0aGUgV0cgY2hhcnRlciwgZXZlbiB0aG91 Z2ggbW9zdCBvZiB1cyBzZWUgdGhlIHZhbHVlIG9mIEpTT04gd2l0aCBJT0RFRi4gR2l2ZW4gdGhl IHBhcnRpY2lwYXRpb24gaXQgaGFzIGJlZW4gc2VlaW5nIGZvciB0aGUgbGFzdCBjb3VwbGUgb2Yg eWVhcnMsIEkgYW0gbm90IHN1cmUgdGhpcyBXRyBjYW4gc3VjY2Vzc2Z1bGx5IGRyaXZlIHR3byBt b3JlIGRyYWZ0cyB0byBjb21wbGV0aW9uIHdpdGggYWRlcXVhdGUgcGFydGljaXBhdGlvbiBhbmQg aW50ZXJlc3QuDQoNClRoYW5rIHlvdSwNClBhbm9zDQoNCg0KRnJvbTogbWlsZSBbbWFpbHRvOm1p bGUtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIE5hbmN5IENhbS1XaW5nZXQgKG5jYW13 aW5nKQ0KU2VudDogTW9uZGF5LCBKdWx5IDE3LCAyMDE3IDQ6MTUgUE0NClRvOiBtaWxlQGlldGYu b3JnDQpTdWJqZWN0OiBbbWlsZV0gUmV2aWV3IGFuZCBTdXBwb3J0IGZvciBST0xJRSBDU0lSVCBk cmFmdA0KDQpIaSwNCg0KV2UgaGFkIGFuIHVwZGF0ZSBvbiB0aGUgaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWJhbmdoYXJ0LW1pbGUtcm9saWUtY3NpcnQtMDENCkRyYWZ0IGF0IHRv ZGF54oCZcyBmMmYgTUlMRSBzZXNzaW9uLiAgSXQgd2FzIGZvbGxvd2VkIGJ5IHRoZSBxdWVzdGlv biBvZiB3aGV0aGVyIE1JTEUgc2hvdWxkIGFkb3B0IGl0IGFzIGEgV0cgaXRlbS4NCg0KR2l2ZW4g dGhhdCBpdCBoYXMgaGFkIGxpbWl0ZWQgcmV2aWV3LCBhIGNvdXBsZSBpbiB0aGUgcm9vbSB2b2x1 bnRlZXJlZCBidXQgd2UgKHRoZSBjaGFpcnMpIHdvdWxkIGxpa2UgdG8gYSBnZXQgYXQgbGVhc3Qg b25lIG9yIHR3byBtb3JlIHJldmlld2Vycy4gIElmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiByZXZp ZXdpbmcsIHBsZWFzZSByZXNwb25kIGluIGtpbmQuDQoNCldlIHdpbGwgYmUgYXNraW5nIHRoZSDi gJxzaG91bGQgTUlMRSBhZG9wdCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYmFu Z2hhcnQtbWlsZS1yb2xpZS1jc2lydC0wMSBhcyBhIHdvcmtpbmcgZ3JvdXAgZHJhZnTigJ0gaW4g YSBjb3VwbGUgb2Ygd2Vla3Mgb25jZSB3ZeKAmXZlIGhhZCBzb21lIHJldmlldyBmZWVkYmFjay4N Cg0KVGhhbmtzLCBOYW5jeQ0K --_000_54a1af5571d84c6cbe1d16d0ba892661XCHALN010ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4 cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIx MDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJn Y29sb3I9IndoaXRlIiBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIi Pg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPlJlYWRpbmcgdGhpcyBkcmFm dCwgSSBoYXZlIHR3byBjb25jZXJuczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0OTdEIj4t IEhvdyBtdWNoIG9mIHRoaXMgZHJhZnQgaXMgbmVjZXNzYXJ5IGZvciBzb21lb25lIHRvIGJlIGFi bGUgdG8gdXNlIElPREVGIHdpdGggUk9MSUU/IEkgYW0gd29uZGVyaW5nIGlmIHRoZXNlIGFyZSBt b3N0bHkgYmVzdCBwcmFjdGljZXMgdGhhdCBheSBST0xJRSBpbXBsZW1lbnRlciBjb3VsZCBhZGRy ZXNzIGJ5IGp1c3QgdXNpbmcgdGhlDQogUk9MSUUgZG9jdW1lbnQuIDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2NvbG9yOiMxRjQ5N0QiPi0gR2l2ZW4gdGhlIGNoYXJ0ZXIgb2YgdGhlIE1JTEUgV0csIEkgdGhp bmsgdGhpcyBkb2N1bWVudCBpcyBvdXQgb2Ygc2NvcGUuIEV2ZW4gSU9ERUYgd2l0aCBKU09OIGlz IG91dCBvZiBzY29wZSBiYXNlZCBvbiB0aGUgV0cgY2hhcnRlciwgZXZlbiB0aG91Z2ggbW9zdCBv ZiB1cyBzZWUgdGhlIHZhbHVlIG9mIEpTT04gd2l0aCBJT0RFRi4NCiBHaXZlbiB0aGUgcGFydGlj aXBhdGlvbiBpdCBoYXMgYmVlbiBzZWVpbmcgZm9yIHRoZSBsYXN0IGNvdXBsZSBvZiB5ZWFycywg SSBhbSBub3Qgc3VyZSB0aGlzIFdHIGNhbiBzdWNjZXNzZnVsbHkgZHJpdmUgdHdvIG1vcmUgZHJh ZnRzIHRvIGNvbXBsZXRpb24gd2l0aCBhZGVxdWF0ZSBwYXJ0aWNpcGF0aW9uIGFuZCBpbnRlcmVz dC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2NvbG9yOiMxRjQ5N0QiPlRoYW5rIHlvdSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMUY0 OTdEIj5QYW5vczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij4gbWlsZSBbbWFpbHRvOm1pbGUtYm91bmNlc0BpZXRmLm9yZ10N CjxiPk9uIEJlaGFsZiBPZiA8L2I+TmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpPGJyPg0KPGI+ U2VudDo8L2I+IE1vbmRheSwgSnVseSAxNywgMjAxNyA0OjE1IFBNPGJyPg0KPGI+VG86PC9iPiBt aWxlQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFttaWxlXSBSZXZpZXcgYW5kIFN1cHBv cnQgZm9yIFJPTElFIENTSVJUIGRyYWZ0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhpLDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2UgaGFkIGFuIHVwZGF0ZSBvbiB0 aGUgPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJhbmdoYXJ0LW1p bGUtcm9saWUtY3NpcnQtMDEiPg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJh bmdoYXJ0LW1pbGUtcm9saWUtY3NpcnQtMDE8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkRyYWZ0IGF0 IHRvZGF54oCZcyBmMmYgTUlMRSBzZXNzaW9uLiZuYnNwOyBJdCB3YXMgZm9sbG93ZWQgYnkgdGhl IHF1ZXN0aW9uIG9mIHdoZXRoZXIgTUlMRSBzaG91bGQgYWRvcHQgaXQgYXMgYSBXRyBpdGVtLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+R2l2ZW4gdGhhdCBpdCBo YXMgaGFkIGxpbWl0ZWQgcmV2aWV3LCBhIGNvdXBsZSBpbiB0aGUgcm9vbSB2b2x1bnRlZXJlZCBi dXQgd2UgKHRoZSBjaGFpcnMpIHdvdWxkIGxpa2UgdG8gYSBnZXQgYXQgbGVhc3Qgb25lIG9yIHR3 byBtb3JlIHJldmlld2Vycy4mbmJzcDsgSWYgeW91IGFyZSBpbnRlcmVzdGVkIGluIHJldmlld2lu ZywgcGxlYXNlIHJlc3BvbmQgaW4ga2luZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPldlIHdpbGwgYmUgYXNraW5nIHRoZSDigJxzaG91bGQgTUlMRSBhZG9wdA0K PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJhbmdoYXJ0LW1pbGUt cm9saWUtY3NpcnQtMDEiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iYW5naGFy dC1taWxlLXJvbGllLWNzaXJ0LTAxPC9hPiBhcyBhIHdvcmtpbmcgZ3JvdXAgZHJhZnTigJ0gaW4g YSBjb3VwbGUgb2Ygd2Vla3Mgb25jZSB3ZeKAmXZlIGhhZCBzb21lIHJldmlldyBmZWVkYmFjay48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rcywgTmFuY3k8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_54a1af5571d84c6cbe1d16d0ba892661XCHALN010ciscocom_-- From nobody Sun Jul 30 06:04:30 2017 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4607124207 for ; Sun, 30 Jul 2017 06:04:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YpByrJEb6EUr for ; Sun, 30 Jul 2017 06:04:26 -0700 (PDT) Received: from mail-io0-x234.google.com (mail-io0-x234.google.com [IPv6:2607:f8b0:4001:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 089BD1241F5 for ; Sun, 30 Jul 2017 06:04:25 -0700 (PDT) Received: by mail-io0-x234.google.com with SMTP id c74so102783669iod.4 for ; Sun, 30 Jul 2017 06:04:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=4fbixpbT0QW/LG1OaMLspNdhs/FCM0ZyxTGdCo3C+9U=; b=g91AU4jMdRlz3FBQw5qVzWfgHE8yNI9PrOM8nuYxNPbKtgobS7IYLvqPuLAfL0xdSx QUmCT2G71B7gCJIs+ZvgcaOFcCxAunAU95uLZ4d2xixMmRn9WSIQ2JviZt1/gf2VOE8g u/ngfOaLzS3EPhM1nLADSaCDza0UOa0k+hlum60vYiDFR6aDL7R5OJPekzIU743wrNIY XYjYPuhFcgZyAChuHnQbnLjj6TwAqnHTjuTLKdc1DoI071KPOI9dO3crLG3lHwR+VWDl 54BMfr+JoFHWekhlkh1UaMSG7e/1gzp2Mwsb/J6w424ZQbKq2ooP4/g62CvIJ1ehozFg R6vQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=4fbixpbT0QW/LG1OaMLspNdhs/FCM0ZyxTGdCo3C+9U=; b=Yy9AXW8Bb4P/lvDGZ5NM2n548FHQa/YC8D9w1znSROO1wM3sf6foa+Tb2d3+Ta3z47 cg13LxOU91WbdutuUpCuePrzbtR7aunNtxeU3VhnDGP0mhOk2+kBU3Be/QnFiD/GI1D4 8K23INEiyD3srZl13qFhYtDUZFkbDyEj4doAxlPBFTtrIZzXMAQPh6ETjEjkms1pS+13 tl7vXVVrCw/Qlv6A68yyJThz1VGXCUOXBIMhp872jvy94EPx7avfoGWhJrEOjKOKtx26 qMDdwGAGxIl+je49e1g5rS2MZShfSxVo9Ri4UcQCmKG/QwUyFn9/UAp2tEJyqNAnclVK 8nJQ== X-Gm-Message-State: AIVw110H6cAASBZTuImDOWJfmrDW8TUObNg5Ot1fkvwvg/GZ25gdQf2l cl6Ov2bnwTa5HNvVvDoKRd6SHCkPYQ== X-Received: by 10.107.153.65 with SMTP id b62mr12385608ioe.142.1501419864995; Sun, 30 Jul 2017 06:04:24 -0700 (PDT) MIME-Version: 1.0 References: <001a01d2ff15$5f6ed1e0$1e4c75a0$@nict.go.jp> In-Reply-To: <001a01d2ff15$5f6ed1e0$1e4c75a0$@nict.go.jp> From: Adam Montville Date: Sun, 30 Jul 2017 13:04:14 +0000 Message-ID: To: Takeshi Takahashi , mile@ietf.org Content-Type: multipart/alternative; boundary="001a1140f3c0b6454b0555888db8" Archived-At: Subject: Re: [mile] Working group last call for XMPP-grid X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Jul 2017 13:04:29 -0000 --001a1140f3c0b6454b0555888db8 Content-Type: text/plain; charset="UTF-8" Take (and everyone), I have read through this latest revision of the draft and find that I am still somewhat confused - not about the intent of the draft, I think, but of how it qualifies as something that is standards track (I could be speaking from ignorance here, so please educate me where necessary). To me, the draft is at heart an XMPP configuration guide, to put it simply. For example, I don't see too much I would need to implement (aside from a deferred XEP for IODEF - see my last comment below), but I do see many requirements pertaining to the configuration/operation of, say, ejabberd in my enterprise. I feel like the real meat of the problem is punted, and perhaps that is intentional given the narrow IODEF-specific scope. To me, the harder problem is gaining industry-wide understanding of the discoverable capabilities within the ecosystem XMPP-grid (I presume) seeks to enable. Without this, there's very little hope of "plug and play" security infrastructure in a given enterprise. The following are my current specific comments on this draft (more may follow, but this seems like a bit for now): - At several points the draft talks about "telemetry", and I remember someone (I think it may have been Henk) describing to me that this has special meaning avoiding real-time-ish or event-ish information. First, is there a need to define what is meant by "telemetry"? Second, is there a reason to limit to "telemetry" given this is a draft seeking to establish the communications infrastructure for a security program's ecosystem? (Maybe that's not the intent of the draft, but if it's not, then there's a whole front-end of activities on the orchestration or command and control fronts that still need to be addressed in this space, and I would question the utility of any approach unconcerned with the full breadth of security program communications needs.) - Is there a reason we couldn't replace "transport and communication" for "messaging"? This seems cleaner, and removes any of the ambiguity around "transport" when we're at a context that may sometimes be on the network level and sometimes not. (See, for example, the first sentence of the first paragraph of the Introduction.) - In the terminology, the way "capability provider" and "publisher" are defined, they seem synonymous. It's clear that "publisher" is being set up as a subclass of "capability provider" (i.e. "publisher is a capability provider that..."), but beyond that there's no clear qualification that would make an instance "publisher" distinct from some other instance of "capability provider". I'm not sure how to fix this, but recommend that you ask what would come after "that" in the following sentence fragment: "A publisher is a capability provider that..." - Proposed text for "subscriber" definition: An entity participating in XMPP-Grid by consuming information on a subscription basis from one or more publishers also participating in the XMPP-Grid. - The XMPP-Grid Controller is simply an XMPP Server by my read. Is there a compelling reason not to simply call it such? - This is a draft about communicating IODEF information over an XMPP infrastructure, and as such it points to (as a normative reference) XEP-0268 (see https://xmpp.org/extensions/xep-0268.html). Unfortunately, that normatively references a XEP containing a clear warning: "WARNING: This document has been automatically Deferred after 12 months of inactivity in its previous Experimental state. Implementation of the protocol described herein is not recommended for production systems. However, exploratory implementations are encouraged to resume the standards process." I'm not an expert, but I wouldn't want this draft to proceed by effectively standardizing something that was experimental, but has been deferred for inactivity, which tells me that it's effectively dead (XSF folks may have a different opinion, and I'll obviously defer to them, as I'm not too knowledgable of the XSF process). I want to see standardization of a communications infrastructure supporting an ecosystem of software and tools commonly used in the implementation of a security program. It's not clear to me how this draft furthers that goal. Either the draft simply doesn't accomplish that for lack of specification, or it's not clear enough (to me) to see how that enablement happens (even for IODEF given the "non-normative normative" reference to XEP-0268). Therefore, it's not clear to me how this draft could proceed as standards track, though I hope there is a way we can see this happen (I'm not sure an informational draft would be as well-received nor helpful). Kind regards, Adam On Mon, Jul 17, 2017 at 10:57 AM Takeshi Takahashi < takeshi_takahashi@nict.go.jp> wrote: > Hello all, > > Based on the discussion at the MILE session in Prague, let us re-initiate > the WGLC for draft-ietf-mile-xmpp-grid. > The version to be reviewed is > https://tools.ietf.org/id/draft-ietf-mile-xmpp-grid-03.txt > > We will have 1 month for this call. > Please provide comments before August 18th and provide your support and/ or > raise any issue you feel are yet to be addressed. > > Thank you. > Take > > > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile > --001a1140f3c0b6454b0555888db8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Take (and everyone),=C2=A0

I have read = through this latest revision of the draft and find that I am still somewhat= confused - not about the intent of the draft, I think, but of how it quali= fies as something that is standards track (I could be speaking from ignoran= ce here, so please educate me where necessary).=C2=A0

To= me, the draft is at heart an XMPP configuration guide, to put it simply. F= or example, I don't see too much I would need to implement (aside from = a deferred XEP for IODEF - see my last comment below), but I do see many re= quirements pertaining to the configuration/operation of, say, ejabberd in m= y enterprise.=C2=A0

I feel like the real meat of the pro= blem is punted, and perhaps that is intentional given the narrow IODEF-spec= ific scope. To me, the harder problem is gaining industry-wide understandin= g of the discoverable capabilities within the ecosystem XMPP-grid (I presum= e) seeks to enable. Without this, there's very little hope of "plu= g and play" security infrastructure in a given enterprise.
<= br>
The following are my current specific comments on this draft = (more may follow, but this seems like a bit for now):
  • At = several points the draft talks about "telemetry", and I remember = someone (I think it may have been Henk) describing to me that this has spec= ial meaning avoiding real-time-ish or event-ish information. First, is ther= e a need to define what is meant by "telemetry"? Second, is there= a reason to limit to "telemetry" given this is a draft seeking t= o establish the communications infrastructure for a security program's = ecosystem? (Maybe that's not the intent of the draft, but if it's n= ot, then there's a whole front-end of activities on the orchestration o= r command and control fronts that still need to be addressed in this space,= and I would question the utility of any approach unconcerned with the full= breadth of security program communications needs.)
  • Is there a = reason we couldn't replace "transport and communication" for = "messaging"? This seems cleaner, and removes any of the ambiguity= around "transport" when we're at a context that may sometime= s be on the network level and sometimes not. (See, for example, the first s= entence of the first paragraph of the Introduction.)
  • In the termino= logy, the way "capability provider" and "publisher" are= defined, they seem synonymous. It's clear that "publisher" i= s being set up as a subclass of "capability provider" (i.e. "= ;publisher is a capability provider that..."), but beyond that there&#= 39;s no clear qualification that would make an instance "publisher&quo= t; distinct from some other instance of "capability provider". I&= #39;m not sure how to fix this, but recommend that you ask what would come = after "that" in the following sentence fragment: "A publishe= r is a capability provider that..."=C2=A0
  • Proposed text for &q= uot;subscriber" definition: An entity participating in XMPP-Grid by co= nsuming information on a subscription basis from one or more publishers als= o participating in the XMPP-Grid.
  • The XMPP-Grid Controller is simpl= y an XMPP Server by my read. Is there a compelling reason not to simply cal= l it such?
  • This is a draft about communicating IODEF information ov= er an XMPP infrastructure, and as such it points to (as a normative referen= ce) XEP-0268 (see=C2=A0https://xmpp.org/extensions/xep-0268.html). Unfortunately, that norma= tively references a XEP containing a clear warning: "WARNING: This doc= ument has been automatically Deferred after 12 months of inactivity in its = previous Experimental state. Implementation of the protocol described herei= n is not recommended for production systems. However, exploratory implement= ations are encouraged to resume the standards process." I'm not an= expert, but I wouldn't want this draft to proceed by effectively stand= ardizing something that was experimental, but has been deferred for inactiv= ity, which tells me that it's effectively dead (XSF folks may have a di= fferent opinion, and I'll obviously defer to them, as I'm not too k= nowledgable of the XSF process).

I want = to see standardization of a communications infrastructure supporting an eco= system of software and tools commonly used in the implementation of a secur= ity program. It's not clear to me how this draft furthers that goal. Ei= ther the draft simply doesn't accomplish that for lack of specification= , or it's not clear enough (to me) to see how that enablement happens (= even for IODEF given the "non-normative normative" reference to X= EP-0268).

Therefore, it's not clear to me how = this draft could proceed as standards track, though I hope there is a way w= e can see this happen (I'm not sure an informational draft would be as = well-received nor helpful).


Kind re= gards,

Adam



On Mon, Jul 17, 2017 at 10:57 AM Tak= eshi Takahashi <takeshi_= takahashi@nict.go.jp> wrote:
Hello all,

Based on the discussion at the MILE session in Prague, let us re-initiate the WGLC=C2=A0for draft-ietf-mile-xmpp-grid.
The version to be reviewed is
https://tools.ietf.org/id/draft-ietf-mile= -xmpp-grid-03.txt

We will have 1 month for this call.
Please provide comments before August 18th and provide your support and/ or=
raise any issue you feel are yet to be addressed.

Thank you.
Take


_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile
--001a1140f3c0b6454b0555888db8--