From nobody Wed Mar 2 09:16:19 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65E701B2CC2; Wed, 2 Mar 2016 09:16:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.906 X-Spam-Level: X-Spam-Status: No, score=-1.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.006] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sBTDr8SYLPoN; Wed, 2 Mar 2016 09:16:17 -0800 (PST) Received: from nagasaki.bogus.com (nagasaki.bogus.com [IPv6:2001:418:1::81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 321331B2CA4; Wed, 2 Mar 2016 09:16:14 -0800 (PST) Received: from mb-2.local ([8.18.217.194]) (authenticated bits=0) by nagasaki.bogus.com (8.14.9/8.14.9) with ESMTP id u22HG3px055226 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 2 Mar 2016 17:16:04 GMT (envelope-from joelja@bogus.com) To: Fernando Gont , Zhoutianran , "opsawg@ietf.org" , "opsec@ietf.org" References: <56D6258F.8030104@si6networks.com> From: joel jaeggli Message-ID: <4ace042c-ddc8-5d29-bc1e-2c270ad4a6b2@bogus.com> Date: Wed, 2 Mar 2016 09:16:02 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.0 MIME-Version: 1.0 In-Reply-To: <56D6258F.8030104@si6networks.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="KrWJMLNV5iHQLk1bIXbQQuL99817oGG3d" Archived-At: Subject: Re: [OPSEC] [OPSAWG] Call for Agenda Items for Buenos Aires X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:16:18 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KrWJMLNV5iHQLk1bIXbQQuL99817oGG3d Content-Type: multipart/mixed; boundary="mp75S2t3d2aM3npmdMkW7mIbdbTdGTeFW" From: joel jaeggli To: Fernando Gont , Zhoutianran , "opsawg@ietf.org" , "opsec@ietf.org" Message-ID: <4ace042c-ddc8-5d29-bc1e-2c270ad4a6b2@bogus.com> Subject: Re: [OPSAWG] Call for Agenda Items for Buenos Aires References: <56D6258F.8030104@si6networks.com> In-Reply-To: <56D6258F.8030104@si6networks.com> --mp75S2t3d2aM3npmdMkW7mIbdbTdGTeFW Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable opsec? On 3/1/16 3:28 PM, Fernando Gont wrote: > Folks, >=20 > We'd like a slot to discuss this I-D: >=20 > Title: "On Firewalls in Network Security" > Filename: draft-gont-opsawg-firewalls-analysis > Presenter: Fernando Gont > Slot: 20'? >=20 > Thanks! >=20 > Best regards, > Fernando >=20 >=20 >=20 >=20 > On 02/29/2016 10:17 PM, Zhoutianran wrote: >> Greetings WG, >> >> Our meeting in Buenos Aires is fast approaching. We have requested a s= lot for the joint OpsAWG / OpsArea meeting. >> >> Please send over requests for agenda time.=20 >> >> Please remember that we give time to drafts that have already received= significant discussion on list. >> >> >> Thanks, >> >> Scott, Warren & Tianran >> >> _______________________________________________ >> OPSAWG mailing list >> OPSAWG@ietf.org >> https://www.ietf.org/mailman/listinfo/opsawg >> >=20 >=20 --mp75S2t3d2aM3npmdMkW7mIbdbTdGTeFW-- --KrWJMLNV5iHQLk1bIXbQQuL99817oGG3d Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 Comment: GPGTools - http://gpgtools.org iEYEARECAAYFAlbXH9MACgkQ8AA1q7Z/VrJPyQCfVlMkt1xoXMEf0iByIuhV9rQH e50An2z4WAPDVWkWE1PX7D32M2ADfscy =Mjwc -----END PGP SIGNATURE----- --KrWJMLNV5iHQLk1bIXbQQuL99817oGG3d-- From nobody Thu Mar 3 01:19:53 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 841521A6FB2; Thu, 3 Mar 2016 01:19:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YJsY5MqpDKYA; Thu, 3 Mar 2016 01:19:48 -0800 (PST) Received: from smtp-fr.alcatel-lucent.com (fr-hpgre-esg-02.alcatel-lucent.com [135.245.210.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 333A81A6FA6; Thu, 3 Mar 2016 01:19:48 -0800 (PST) Received: from fr711umx2.dmz.alcatel-lucent.com (unknown [135.245.210.39]) by Websense Email Security Gateway with ESMTPS id 02E703B7157C; Thu, 3 Mar 2016 09:19:44 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr711umx2.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u239JjvE019106 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 3 Mar 2016 09:19:45 GMT Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u239Ja2x005299 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 3 Mar 2016 10:19:44 +0100 Received: from FR711WXCHMBA06.zeu.alcatel-lucent.com ([169.254.2.137]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0195.001; Thu, 3 Mar 2016 10:19:42 +0100 From: "Van De Velde, Gunter (Nokia - BE)" To: joel jaeggli , Fernando Gont , Zhoutianran , "opsawg@ietf.org" , "opsec@ietf.org" , "fred@cisco.com" Thread-Topic: [OPSEC] [OPSAWG] Call for Agenda Items for Buenos Aires Thread-Index: AQHRdKdI1qHGZVPVxke2BTBf8BEn4J9HclIA Date: Thu, 3 Mar 2016 09:19:41 +0000 Message-ID: References: <56D6258F.8030104@si6networks.com> <4ace042c-ddc8-5d29-bc1e-2c270ad4a6b2@bogus.com> In-Reply-To: <4ace042c-ddc8-5d29-bc1e-2c270ad4a6b2@bogus.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.38] Content-Type: text/plain; charset="utf-8" Content-ID: <4DF1C0D354975740AF118D4E3619E990@exchange.lucent.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [OPSEC] [OPSAWG] Call for Agenda Items for Buenos Aires X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 09:19:50 -0000 WWVzLCBjb250ZW50IGlzIHN1YmplY3Qgd2l0aGluIHRoZSBPUFNFQyByZWFsbSBpbmRlZWQuDQpJ 4oCZbSBvayB0byBnaXZlIHRoaXMgZG9jdW1lbnQgYSBwbGFjZSBvbiB0aGUgT1BTRUMgSUVURjk1 IGFnZW5kYS4NCg0KRmVybmFuZG8sIHdpbGwgeW91IGRlbGl2ZXIgdGhlIHNsb3Qgb3Igd2lsbCBG cmVkPw0KDQpHLw0KDQoNCg0KDQpPbiAwMi8wMy8xNiAxODoxNiwgIk9QU0VDIG9uIGJlaGFsZiBv ZiBqb2VsIGphZWdnbGkiIDxvcHNlYy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBqb2Vs amFAYm9ndXMuY29tPiB3cm90ZToNCg0KPm9wc2VjPw0KPg0KPg0KPk9uIDMvMS8xNiAzOjI4IFBN LCBGZXJuYW5kbyBHb250IHdyb3RlOg0KPj4gRm9sa3MsDQo+PiANCj4+IFdlJ2QgbGlrZSBhIHNs b3QgdG8gZGlzY3VzcyB0aGlzIEktRDoNCj4+IA0KPj4gVGl0bGU6ICJPbiBGaXJld2FsbHMgaW4g TmV0d29yayBTZWN1cml0eSINCj4+IEZpbGVuYW1lOiBkcmFmdC1nb250LW9wc2F3Zy1maXJld2Fs bHMtYW5hbHlzaXMNCj4+IFByZXNlbnRlcjogRmVybmFuZG8gR29udA0KPj4gU2xvdDogMjAnPw0K Pj4gDQo+PiBUaGFua3MhDQo+PiANCj4+IEJlc3QgcmVnYXJkcywNCj4+IEZlcm5hbmRvDQo+PiAN Cj4+IA0KPj4gDQo+PiANCj4+IE9uIDAyLzI5LzIwMTYgMTA6MTcgUE0sIFpob3V0aWFucmFuIHdy b3RlOg0KPj4+IEdyZWV0aW5ncyBXRywNCj4+Pg0KPj4+IE91ciBtZWV0aW5nIGluIEJ1ZW5vcyBB aXJlcyBpcyBmYXN0IGFwcHJvYWNoaW5nLiBXZSBoYXZlIHJlcXVlc3RlZCBhIHNsb3QgZm9yIHRo ZSBqb2ludCBPcHNBV0cgLyBPcHNBcmVhIG1lZXRpbmcuDQo+Pj4NCj4+PiBQbGVhc2Ugc2VuZCBv dmVyIHJlcXVlc3RzIGZvciBhZ2VuZGEgdGltZS4gDQo+Pj4NCj4+PiBQbGVhc2UgcmVtZW1iZXIg dGhhdCB3ZSBnaXZlIHRpbWUgdG8gZHJhZnRzIHRoYXQgaGF2ZSBhbHJlYWR5IHJlY2VpdmVkIHNp Z25pZmljYW50IGRpc2N1c3Npb24gb24gbGlzdC4NCj4+Pg0KPj4+DQo+Pj4gVGhhbmtzLA0KPj4+ DQo+Pj4gU2NvdHQsIFdhcnJlbiAmIFRpYW5yYW4NCj4+Pg0KPj4+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4gT1BTQVdHIG1haWxpbmcgbGlzdA0K Pj4+IE9QU0FXR0BpZXRmLm9yZw0KPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vb3BzYXdnDQo+Pj4NCj4+IA0KPj4gDQo+DQo+DQo= From nobody Thu Mar 3 02:47:02 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B0481A8984; Thu, 3 Mar 2016 02:47:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oR8vVH7Bmfjk; Thu, 3 Mar 2016 02:46:58 -0800 (PST) Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 747491A8981; Thu, 3 Mar 2016 02:46:58 -0800 (PST) Received: from [10.54.138.136] (unknown [88.128.81.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 32759803B5; Thu, 3 Mar 2016 11:46:53 +0100 (CET) To: "Van De Velde, Gunter (Nokia - BE)" , joel jaeggli , Zhoutianran , "opsawg@ietf.org" , "opsec@ietf.org" , "fred@cisco.com" References: <56D6258F.8030104@si6networks.com> <4ace042c-ddc8-5d29-bc1e-2c270ad4a6b2@bogus.com> From: Fernando Gont X-Enigmail-Draft-Status: N1110 Message-ID: <56D81532.4070102@si6networks.com> Date: Thu, 3 Mar 2016 07:42:58 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [OPSEC] [OPSAWG] Call for Agenda Items for Buenos Aires X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 10:47:01 -0000 Folks, I'm fine with presenting this in opsec -- the reason we were "targeting" opsawg was because Fred's early document on firewalls was target and adoped on such wg. I guess it might make sense to also give a short preso in opsawg to let the wg how we updated the document in response to the comments from the last meeting... but that's upto the ads/wg chairs. Regarding the presentation in opsec, here's the info: Title: "On Firewalls in Network Security" Filename: draft-gont-opsawg-firewalls-analysis Presenter: Fernando Gont Slot: 20'? I'll check with Fred if he'll be there too. Thanks! Cheers, Fernando On 03/03/2016 06:19 AM, Van De Velde, Gunter (Nokia - BE) wrote: > Yes, content is subject within the OPSEC realm indeed. > I’m ok to give this document a place on the OPSEC IETF95 agenda. > > Fernando, will you deliver the slot or will Fred? > > G/ > > > > > On 02/03/16 18:16, "OPSEC on behalf of joel jaeggli" wrote: > >> opsec? >> >> >> On 3/1/16 3:28 PM, Fernando Gont wrote: >>> Folks, >>> >>> We'd like a slot to discuss this I-D: >>> >>> Title: "On Firewalls in Network Security" >>> Filename: draft-gont-opsawg-firewalls-analysis >>> Presenter: Fernando Gont >>> Slot: 20'? >>> >>> Thanks! >>> >>> Best regards, >>> Fernando >>> >>> >>> >>> >>> On 02/29/2016 10:17 PM, Zhoutianran wrote: >>>> Greetings WG, >>>> >>>> Our meeting in Buenos Aires is fast approaching. We have requested a slot for the joint OpsAWG / OpsArea meeting. >>>> >>>> Please send over requests for agenda time. >>>> >>>> Please remember that we give time to drafts that have already received significant discussion on list. >>>> >>>> >>>> Thanks, >>>> >>>> Scott, Warren & Tianran >>>> >>>> _______________________________________________ >>>> OPSAWG mailing list >>>> OPSAWG@ietf.org >>>> https://www.ietf.org/mailman/listinfo/opsawg >>>> >>> >>> >> >> -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Mar 3 03:07:32 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54EA41A8A8E for ; Thu, 3 Mar 2016 03:07:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sedT_MnzcCpa for ; Thu, 3 Mar 2016 03:07:26 -0800 (PST) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4D731A8A95 for ; Thu, 3 Mar 2016 03:07:23 -0800 (PST) Received: from [10.54.138.136] (unknown [88.128.81.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id DB72780D52; Thu, 3 Mar 2016 12:07:21 +0100 (CET) To: "Van De Velde, Gunter (Nokia - BE)" , "'opsec@ietf.org'" References: From: Fernando Gont X-Enigmail-Draft-Status: N1110 Message-ID: <56D81A7E.3080709@si6networks.com> Date: Thu, 3 Mar 2016 08:05:34 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Cc: draft-gont-opsec-icmp-ingress-filtering@tools.ietf.org Subject: Re: [OPSEC] IETF95 - Update your drafts & slots requests X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 11:07:31 -0000 Folks, I'd like to request a slot at the next opsec meeting for presenting: * Filename: draft-gont-opsec-icmp-ingress-filtering * Title: "Network Ingress Filtering: Defeating Attacks which employ Forged ICMP/ ICMPv6 Error Messages" * Presenter: Fernando Gont * Slot: 10'-15' FYI, we'll be posting a rev'ed document this weekend, that addresses the comments we received off-list and at the last opse meeting. Thanks! Best regards, Fernando On 02/22/2016 05:42 AM, Van De Velde, Gunter (Nokia - BE) wrote: > Hi All, > > IETF95 is approaching fast. First important date is 21 March, by which > drafts need to be updated for consumption during IETF95 according: > https://www.ietf.org/meeting/important-dates-2016.html > > To help plan for the IETF95 OPSEC slot agenda, can we ask if you want to > discuss a topic or draft during the OPSEC WG meeting. > > Kind Regards, > Gunter & Eric > > > > > > > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec > -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Sat Mar 12 00:44:42 2016 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B784D12DD6B; Fri, 11 Mar 2016 15:05:21 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.16.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160311230521.15028.73934.idtracker@ietfa.amsl.com> Date: Fri, 11 Mar 2016 15:05:21 -0800 Archived-At: X-Mailman-Approved-At: Sat, 12 Mar 2016 00:44:41 -0800 Cc: opsec@ietf.org Subject: [OPSEC] opsec - Requested session has been scheduled for IETF 95 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2016 23:05:22 -0000 Dear Eric Vyncke, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. opsec Session 1 (1:00:00) Tuesday, Afternoon Session II 1620-1720 Room Name: Quebracho A size: 75 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Operational Security Capabilities for IP Network Infrastructure Area Name: Operations and Management Area Session Requester: Eric Vyncke Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 30 Conflicts to Avoid: First Priority: saag v6ops Second Priority: 6man acme opsarea opsawg sidr Third Priority: dnsop dnssd homenet mif Special Requests: --------------------------------------------------------- From nobody Wed Mar 16 12:25:11 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AF1B12D6CC; Wed, 16 Mar 2016 12:25:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.923 X-Spam-Level: X-Spam-Status: No, score=-106.923 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3nadDYIVEune; Wed, 16 Mar 2016 12:25:05 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 629EF12D6AD; Wed, 16 Mar 2016 12:25:05 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 6000) id 4565218046B; Wed, 16 Mar 2016 12:24:27 -0700 (PDT) Date: Wed, 16 Mar 2016 12:24:27 -0700 From: RFC Editor To: ietf-announce@ietf.org Message-ID: <20160316192427.GD23558@rfc-editor.org> References: <20160309202133.6D6BF180205@rfc-editor.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20160309202133.6D6BF180205@rfc-editor.org> User-Agent: Mutt/1.5.21 (2010-09-15) Archived-At: Cc: drafts-update-ref@iana.org, opsec@ietf.org Subject: Re: [OPSEC] RFC 7707 on Network Reconnaissance in IPv6 Networks X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Mar 2016 19:25:07 -0000 As suggested by https://mailarchive.ietf.org/arch/msg/ietf-announce/JKvBKTnlJAq8j-AGlZJHOhVRMfg, this RFC announcement is being resent. On Wed, Mar 09, 2016 at 12:21:33PM -0800, RFC Editor wrote: > A new Request for Comments is now available in online RFC libraries. > > > RFC 7707 > > Title: Network Reconnaissance in IPv6 Networks > Author: F. Gont, T. Chown > Status: Informational > Stream: IETF > Date: March 2016 > Mailbox: fgont@si6networks.com, > tim.chown@jisc.ac.uk > Pages: 38 > Characters: 88281 > Obsoletes: RFC 5157 > > I-D Tag: draft-ietf-opsec-ipv6-host-scanning-08.txt > > URL: https://www.rfc-editor.org/info/rfc7707 > > DOI: http://dx.doi.org/10.17487/RFC7707 > > IPv6 offers a much larger address space than that of its IPv4 > counterpart. An IPv6 subnet of size /64 can (in theory) accommodate > approximately 1.844 * 10^19 hosts, thus resulting in a much lower host > density (#hosts/#addresses) than is typical in IPv4 networks, where a > site typically has 65,000 or fewer unique addresses. As a result, it > is widely assumed that it would take a tremendous effort to perform > address-scanning attacks against IPv6 networks; therefore, IPv6 > address-scanning attacks have been considered unfeasible. This > document formally obsoletes RFC 5157, which first discussed this > assumption, by providing further analysis on how traditional > address-scanning techniques apply to IPv6 networks and exploring some > additional techniques that can be employed for IPv6 network > reconnaissance. > > This document is a product of the Operational Security Capabilities for IP Network Infrastructure Working Group of the IETF. > > > INFORMATIONAL: This memo provides information for the Internet community. > It does not specify an Internet standard of any kind. Distribution of > this memo is unlimited. > > This announcement is sent to the IETF-Announce and rfc-dist lists. > To subscribe or unsubscribe, see > https://www.ietf.org/mailman/listinfo/ietf-announce > https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist > > For searching the RFC series, see https://www.rfc-editor.org/search > For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk > > Requests for special distribution should be addressed to either the > author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless > specifically noted otherwise on the RFC itself, all RFCs are for > unlimited distribution. > > > The RFC Editor Team > Association Management Solutions, LLC > From nobody Thu Mar 17 04:49:35 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23E3012D566; Thu, 17 Mar 2016 04:49:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, WEIRD_PORT=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mScGijoglRSE; Thu, 17 Mar 2016 04:49:28 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [158.64.1.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7002A12D525; Thu, 17 Mar 2016 04:49:28 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id EDDA543AE8; Thu, 17 Mar 2016 12:49:26 +0100 (CET) To: IETF OOPSAWG , IETF OPSEC From: Stefan Winter Openpgp: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Message-ID: <56EA99C6.2080600@restena.lu> Date: Thu, 17 Mar 2016 12:49:26 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="6vTkxpWimfBruok3Mm49lgL7jaDpKdkUx" Archived-At: Subject: [OPSEC] leaf device network configuration format (was draft-winter-opsawg-eap-metadata) X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Mar 2016 11:49:31 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --6vTkxpWimfBruok3Mm49lgL7jaDpKdkUx Content-Type: multipart/mixed; boundary="oQWURxkrA5Q2KXe1icLfNl5ih9mPm3WfI" From: Stefan Winter To: IETF OOPSAWG , IETF OPSEC Message-ID: <56EA99C6.2080600@restena.lu> Subject: leaf device network configuration format (was draft-winter-opsawg-eap-metadata) --oQWURxkrA5Q2KXe1icLfNl5ih9mPm3WfI Content-Type: multipart/mixed; boundary="------------070902090005070801090009" This is a multi-part message in MIME format. --------------070902090005070801090009 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, over the past few IETFs, I talked about draft-winter-opsawg-eap-metadata.= In a nutshell: end users get EAP configuration wrong because it's too complex, and as a result they are vulnerable to many badnesses out there in the Wi-Fi world. A common config format would settle all the complex pieces automatically for them, and make the internet a safer place for th= em. I got many good comments on the mic regarding the draft. I recall Hannes Tschofenig commenting that the scope should be larger than EAP properties: it should also configure the actual network context around the EAP credentials, namely the SSID etc., along with its various properties to fully configure (encryption level...). Phillip Hallam-Baker commented that the file format should be usable across all kinds of devices, like a smartwatch, for those devices do not have a good UI to configure manually. I've factored in all this and am going to submit a draft with a new name just before the cut-off (when else :-) ). It's probably going to be draft-winter-opsec-netconfig-metadata-00 because I believe that opsec is the better place to discuss this: it has an operations dimension - config needs to be moved around - but it also has a security dimension because failure to get a good config may make it appear like things work, while actually putting users at risk (e.g. if server certs are not checked while they should be). With the previous, EAP-only approach we already have very good results in our EAP-based Wi-Fi roaming consortium eduroam: there's an Android app that can consume the settings, and it makes the security posture change from Android's default "don't validate, don't bother user, just send password" to the gold-standard "validate cert chain, server name, pin EAP method". People are using it, and happily so (within the limitations of Android; talk to me for anecdotes :-) ). There is also a Linux app that can consume the same file format. With the expansion of scope to actual network defs, the file format becomes much more useful, and I believe this has a real chance of becoming more wide-spread. So, even though I haven't been to opsec before - I'd like to request a meeting slot for IETF95 there to discuss this new draft. All this with the hope for WG adoption of course :-) Please let me know if it's possible to allocate, say, 10 minutes for the draft? Greetings, Stefan Winter --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Education= Nationale et de la Recherche 2, avenue de l'Universit=C3=A9 L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------070902090005070801090009 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------070902090005070801090009-- --oQWURxkrA5Q2KXe1icLfNl5ih9mPm3WfI-- --6vTkxpWimfBruok3Mm49lgL7jaDpKdkUx Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJW6pnGAAoJEMDeajWKOdxmLCcQAIzhMjSrIqPd0aECg7tKID8Y CWe1lYvS19pew8NOCcYuQNUvjhUWGJ+/UBQlECOp/lmjom5CHdFYT0cZ/l6F55W2 o9CWoa6O0R4BAXlu6HnajGZvN9HXoawOsnOy/dNQka7FbWu3XH0Hx0OkHfddsLCZ aVkL/Buucl6DyDjxIfjy9uSfI6nmVy+mMvRP4Z72klQSAIpTwUartMxPUCUYXv/U 8HH4N9Mb8KzqTWwp8fFmslP1dHoZgbUbGpbaGcscnU42T1P2kmIjkzUn1xkx7CAz ks9RVFcE1kiJRKvAJtWuqwvHaSUSycX1FgETYcPrW8Z4+RiA8lXE8SSlYcnh6B/E 6ZGX04hWMiMO51uE1xwrH8+45fNfitSuEK3WNawZpyH2+Dc4tdVlA+xToGoYg3G0 iclUnkvxhSxjT9IVlZTrkRTVq26fEc8hRRhOXUGu1acAiWmNInMTp6QEABQpJaYb yLLjlCat9KTJgFc/nWZpMudUDLJH0nHy2szInGDDrGARsOv6dFRa+dGXFK0nJavQ +FCiLh2kY37eCrCHrP+w7j9wCVJvVzuGyQkF7V0N7MGOpynHs0G9ENT/Y/lnf3hJ XOr6GuK4uyl6ptxPlN4eDwpVrEjLlQJoZv71BUlcJPVRNBjPwZwzJNI0pjCEJRdV mVGYZxFI4FM6h/0ws1+0 =ksoO -----END PGP SIGNATURE----- --6vTkxpWimfBruok3Mm49lgL7jaDpKdkUx-- From nobody Mon Mar 21 02:30:27 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 844C812D5C2; Mon, 21 Mar 2016 02:30:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1nsCdW-nGXLH; Mon, 21 Mar 2016 02:30:24 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [158.64.1.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA4A312D53F; Mon, 21 Mar 2016 02:30:23 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 3729243ADF; Mon, 21 Mar 2016 10:30:22 +0100 (CET) References: <20160321092737.6013.75371.idtracker@ietfa.amsl.com> To: IETF OPSEC From: Stefan Winter Openpgp: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 X-Forwarded-Message-Id: <20160321092737.6013.75371.idtracker@ietfa.amsl.com> Message-ID: <56EFBF2D.5090904@restena.lu> Date: Mon, 21 Mar 2016 10:30:21 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <20160321092737.6013.75371.idtracker@ietfa.amsl.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Vt8p7CqgAjnW7GVCd4HDlGJ4Ae8R8HAB1" Archived-At: Cc: "opsawg@ietf.org" Subject: [OPSEC] Fwd: New Version Notification for draft-winter-opsec-netconfig-metadata-00.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 09:30:26 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Vt8p7CqgAjnW7GVCd4HDlGJ4Ae8R8HAB1 Content-Type: multipart/mixed; boundary="Gj0vPEO7xIfsU86893Jvln2qLpii0p7mj" From: Stefan Winter To: IETF OPSEC Cc: "opsawg@ietf.org" Message-ID: <56EFBF2D.5090904@restena.lu> Subject: Fwd: New Version Notification for draft-winter-opsec-netconfig-metadata-00.txt References: <20160321092737.6013.75371.idtracker@ietfa.amsl.com> In-Reply-To: <20160321092737.6013.75371.idtracker@ietfa.amsl.com> --Gj0vPEO7xIfsU86893Jvln2qLpii0p7mj Content-Type: multipart/mixed; boundary="------------080400000403050804020609" This is a multi-part message in MIME format. --------------080400000403050804020609 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, this is the draft corresponding to my agenda slot request from last week.= Greetings, Stefan Winter -------- Weitergeleitete Nachricht -------- Betreff: New Version Notification for draft-winter-opsec-netconfig-metadata-00.txt Datum: Mon, 21 Mar 2016 02:27:37 -0700 Von: internet-drafts@ietf.org An: Stefan Winter A new version of I-D, draft-winter-opsec-netconfig-metadata-00.txt has been successfully submitted by Stefan Winter and posted to the IETF repository. Name: draft-winter-opsec-netconfig-metadata Revision: 00 Title: A Configuration File Format for Network Services on Leaf Devices Document date: 2016-03-18 Group: Individual Submission Pages: 22 URL: https://www.ietf.org/internet-drafts/draft-winter-opsec-netconfig-metadat= a-00.txt Status: https://datatracker.ietf.org/doc/draft-winter-opsec-netconfig-metadata/ Htmlized: https://tools.ietf.org/html/draft-winter-opsec-netconfig-metadata-00 Abstract: This document specifies a YANG module for transfering configuration information of deployments of network services towards leaf nodes (hosts) on the internet. Such configuration files are meant to be discovered, consumed and used by configuration agents on the host to achieve correct and secure setup of these services on the consuming device. This iteration of the I-D concentrates on Wi-Fi network setup and EAP credentials, but is extensible to cover a wide range including VPN, E-Mail and other services. Please note that it may take a couple of minutes from the time of submiss= ion until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --------------080400000403050804020609 Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------080400000403050804020609-- --Gj0vPEO7xIfsU86893Jvln2qLpii0p7mj-- --Vt8p7CqgAjnW7GVCd4HDlGJ4Ae8R8HAB1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJW778uAAoJEMDeajWKOdxmca8P/2Nw0o2q9YMWYsixZWX6M9DR OhlCBAq7olZMP7bD8kM8wDpnqk5nkPyEJf5b0DO5eJ076hFbQvxfUWuCPlsjlJHN fVNj+SKM5X2U5zKFz2GoQF+Mg6X7fp+XeXOV4gdlOP3q9dIIrEByzdznzCZBJvsr vCWF0zO3HxOpOFqCOJQiCisuI200vmAZrOWE0dB8ZnIaaIdOWFsnhzHVbJjn72LF PqHSFcTPHB0PUCjXqBY2A9O7gfsruhF9DplUVBaPdNCrx2blBjm1LutaDNNgDzes 0lhz2xq7q4jWxM3F0yt6fNTQYRKTVpi5e9v3UqLOLY/wCVHS5+FkpyrfruvDpA98 IHAyZt2QyseUfUd7qqdH8aj/yG91iJcTqMEuEb9ZxW4qeGuv49G+GEBkr8mi1qo1 BuMQfuJ8KQjpJ5a1VXLeJIRxQ8Yp38hq0+OiqfXZfVEQtQ1yGdKvywiPNIwNI5kW YIsuZcjiDoF/YKYhPo3irrPMxZx30o4e1n6r0/0JMdv6N1XsgTT3aukd3NgfI0+a KnvPv3HT7ECh3KeuQsoSzCjNEsmd1UZfYKt5XC+nmWdLRIyWL86B9o3BCTL3D0VE hxIiGVZctcN6H5JUZcMB5wnjEKkQ3U177iMkK+0nAH3qE4h6NDGahx1MFbG8wlKw y7SicPca7A2lOYbi1aeO =lw4T -----END PGP SIGNATURE----- --Vt8p7CqgAjnW7GVCd4HDlGJ4Ae8R8HAB1-- From nobody Mon Mar 21 07:07:29 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC55F12D84E for ; Mon, 21 Mar 2016 07:07:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zyd03Gr2YbkO for ; Mon, 21 Mar 2016 07:07:26 -0700 (PDT) Received: from mailrelay21.naist.jp (mailrelay21.naist.jp [IPv6:2001:200:16a:50::71]) by ietfa.amsl.com (Postfix) with ESMTP id 7904C12D844 for ; Mon, 21 Mar 2016 07:07:26 -0700 (PDT) Received: from mailpost21.naist.jp (mailscan21.naist.jp [163.221.80.58]) by mailrelay21.naist.jp (Postfix) with ESMTP id A53F9F1F for ; Mon, 21 Mar 2016 23:07:24 +0900 (JST) Received: from [192.168.11.3] (dn158-103.naist.jp [163.221.158.103]) by mailpost21.naist.jp (Postfix) with ESMTP id 7D624F1E for ; Mon, 21 Mar 2016 23:07:24 +0900 (JST) To: opsec@ietf.org From: Marius Georgescu Message-ID: <56F00044.9050602@is.naist.jp> Date: Mon, 21 Mar 2016 23:08:04 +0900 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------090801060009010901090800" X-TM-AS-MML: No X-TM-AS-Product-Ver: IMSS-7.1.0.1392-8.0.0.1202-22206.007 X-TM-AS-Result: No-1.929-5.0-31-10 X-imss-scan-details: No-1.929-5.0-31-10 X-TMASE-MatchedRID: KuSTdJaiyY1jyIn1sobvhavnfoenSIXeRphO9iDI3+V+fF8y5Vr34sYw oG0ouPR1+KgiyLtJrSCyd65qZFFPk1QEvOpj8DvQq1lYAFDTJEYHwP5zLNLkyUlF0P1WRh2cma6 DzXaohvM2vbWaKPnQ23IHC5PJi0h0F96K8VYbySiEKDqjmbJvvQnsVcTUQNQ4pP667dqcNA2t0s UUpHt26fT+ANO7JYDk9Lvdesbm87B0KOaTEWsYkqRGASDuetHK660+DqvfilMzQNFQFwpyNDTR2 TFg0xG3nTcLR8+TzEr5N0o2THGRZALVL/qx/ph4Z44QlzJNyMs1WQtpGNQTQxOWVZmIHOkgWCjD JRYeAZ0l3afZehJEWdyiWU1wNj3SGPFoVk17KVDi8zVgXoAlttVnSDvjSUv5Op72f+ltAYcwziK hrKXi3XnVOpTXYxvaykf0QrY0rL6rvtPKKgnMGIE+gFSPCklwnJ09HETdtWZMvihrceH2nO+kUf Gyy5HQQHdSdwEVJKkwhbWWv1flEqfjoMFKLavvG0efJns6xE07DPz6e8wSfBUeLCND+PlJ6hRMI 7+K/B1KZFuEx51gX/fVijsvoGGcBaIqASAfdRawtFwZarmonruUwtMSnAfAPf5AVMHwRqvltrfM YjdxvVXK9tOD+u6c Archived-At: Subject: [OPSEC] A Threat Model for IPv6 Transition Technologies X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 14:07:28 -0000 This is a multi-part message in MIME format. --------------090801060009010901090800 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Dear OPSEC Members, Following the presentation in SAAG from IETF94 (https://www.ietf.org/proceedings/94/slides/slides-94-saag-3.pdf ), I've written the following draft attempting to describe a threat model for IPv6 transition technologies. https://tools.ietf.org/html/draft-georgescu-opsec-ipv6-trans-tech-threat-model-00 If time allows, your feedback would be very appreciated. Best regards, Marius Georgescu 　(マリウス ジョルジェスク) Internet Engineering Laboratory Nara Institute of Science and Technology IPv6NET Project: http://www.ipv6net.ro/ --------------090801060009010901090800 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit Dear OPSEC Members,

Following the presentation in SAAG from IETF94 (https://www.ietf.org/proceedings/94/slides/slides-94-saag-3.pdf ), I've written the following draft attempting to describe a threat model for IPv6 transition technologies.

https://tools.ietf.org/html/draft-georgescu-opsec-ipv6-trans-tech-threat-model-00

If time allows, your feedback would be very appreciated.

Best regards,
Marius Georgescu 　(マリウス ジョルジェスク)
Internet Engineering Laboratory 
Nara Institute of Science and Technology 
IPv6NET Project: http://www.ipv6net.ro/



--------------090801060009010901090800-- From nobody Mon Mar 21 08:55:53 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E2E212D8FF for ; Mon, 21 Mar 2016 08:55:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id epZ99B9xFsp3 for ; Mon, 21 Mar 2016 08:55:46 -0700 (PDT) Received: from nagasaki.bogus.com (nagasaki.bogus.com [IPv6:2001:418:1::81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C58CA12D8F3 for ; Mon, 21 Mar 2016 08:55:17 -0700 (PDT) Received: from mb-2.local ([8.18.217.194]) (authenticated bits=0) by nagasaki.bogus.com (8.14.9/8.14.9) with ESMTP id u2LFtFld046461 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 21 Mar 2016 15:55:16 GMT (envelope-from joelja@bogus.com) To: Marius Georgescu , opsec@ietf.org References: <56F00044.9050602@is.naist.jp> From: joel jaeggli Message-ID: Date: Mon, 21 Mar 2016 08:55:13 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.0 MIME-Version: 1.0 In-Reply-To: <56F00044.9050602@is.naist.jp> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="bpJFre9KxRLXwNLpviLdIeKCv61Q2shIc" Archived-At: Subject: Re: [OPSEC] A Threat Model for IPv6 Transition Technologies X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 15:55:47 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --bpJFre9KxRLXwNLpviLdIeKCv61Q2shIc Content-Type: multipart/mixed; boundary="GDVJdspoQeFfMS8Jai0Jlg05hirp6wE23" From: joel jaeggli To: Marius Georgescu , opsec@ietf.org Message-ID: Subject: Re: [OPSEC] A Threat Model for IPv6 Transition Technologies References: <56F00044.9050602@is.naist.jp> In-Reply-To: <56F00044.9050602@is.naist.jp> --GDVJdspoQeFfMS8Jai0Jlg05hirp6wE23 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable A very superficial reading suggests that in addition to a general introduction to STIRDE that an informative reference is probably warrante= d. thanks for doing this. joel On 3/21/16 7:08 AM, Marius Georgescu wrote: > Dear OPSEC Members, >=20 > Following the presentation in SAAG from IETF94 > (https://www.ietf.org/proceedings/94/slides/slides-94-saag-3.pdf ), I'v= e > written the following draft attempting to describe a threat model for > IPv6 transition technologies. >=20 > https://tools.ietf.org/html/draft-georgescu-opsec-ipv6-trans-tech-threa= t-model-00 >=20 > If time allows, your feedback would be very appreciated. >=20 > Best regards, > Marius Georgescu =E3=80=80(=E3=83=9E=E3=83=AA=E3=82=A6=E3=82=B9 =E3=82=B8= =E3=83=A7=E3=83=AB=E3=82=B8=E3=82=A7=E3=82=B9=E3=82=AF) > Internet Engineering Laboratory=20 > Nara Institute of Science and Technology=20 > IPv6NET Project: http://www.ipv6net.ro/ >=20 >=20 >=20 >=20 >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec >=20 --GDVJdspoQeFfMS8Jai0Jlg05hirp6wE23-- --bpJFre9KxRLXwNLpviLdIeKCv61Q2shIc Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 Comment: GPGTools - http://gpgtools.org iEYEARECAAYFAlbwGWEACgkQ8AA1q7Z/VrLSZgCfcl1XW4C+kfeGzngrdfJrzBnr 3gIAoIgKdStFH34cRoevFPflRbPJgBu+ =rmJB -----END PGP SIGNATURE----- --bpJFre9KxRLXwNLpviLdIeKCv61Q2shIc-- From nobody Mon Mar 21 12:33:54 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79B9412DA45; Mon, 21 Mar 2016 12:03:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TdjjZdS7FTnu; Mon, 21 Mar 2016 12:03:29 -0700 (PDT) Received: from mail.networkradius.com (mail.networkradius.com [62.210.147.122]) by ietfa.amsl.com (Postfix) with ESMTP id 4F35012DA8D; Mon, 21 Mar 2016 12:01:53 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.networkradius.com (Postfix) with ESMTP id 952AB121C; Mon, 21 Mar 2016 19:01:52 +0000 (UTC) Received: from mail.networkradius.com ([127.0.0.1]) by localhost (mail-server.vmhost2.networkradius.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id grtc5xTdp5mO; Mon, 21 Mar 2016 19:01:52 +0000 (UTC) Received: from [192.168.20.14] (69-196-165-104.dsl.teksavvy.com [69.196.165.104]) by mail.networkradius.com (Postfix) with ESMTPSA id F3D9CCF9; Mon, 21 Mar 2016 19:01:50 +0000 (UTC) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\)) From: Alan DeKok In-Reply-To: <56EA99C6.2080600@restena.lu> Date: Mon, 21 Mar 2016 15:02:00 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <2764C5A6-F563-4E79-A702-C9A0C06DB932@deployingradius.com> References: <56EA99C6.2080600@restena.lu> To: Winter Stefan X-Mailer: Apple Mail (2.3112) Archived-At: X-Mailman-Approved-At: Mon, 21 Mar 2016 12:33:53 -0700 Cc: IETF OOPSAWG , IETF OPSEC Subject: Re: [OPSEC] [OPSAWG] leaf device network configuration format (was draft-winter-opsawg-eap-metadata) X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 19:03:31 -0000 On Mar 17, 2016, at 7:49 AM, Stefan Winter = wrote: > In a nutshell: end users get EAP configuration wrong because it's too > complex, and as a result they are vulnerable to many badnesses out = there > in the Wi-Fi world. A common config format would settle all the = complex > pieces automatically for them, and make the internet a safer place for = them. I'll have a short presentation at the end of RADEXT which addresses = this problem directly. And shows how easy it is for bad actors to = confuse naive users. I'll post a link to the presentation here when it's ready. In short, there is no practical way to onboard users securely via the = method of "connect to an SSID, and click through the prompts". The = configuration MUST be provided to the user signed, and/or via an out of = band method. Alan DeKok. From nobody Mon Mar 21 13:24:35 2016 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9251312D71E; Mon, 21 Mar 2016 13:24:34 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.17.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160321202434.12215.95019.idtracker@ietfa.amsl.com> Date: Mon, 21 Mar 2016 13:24:34 -0700 Archived-At: Cc: opsec@ietf.org Subject: [OPSEC] I-D Action: draft-ietf-opsec-v6-08.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 20:24:34 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure of the IETF. Title : Operational Security Considerations for IPv6 Networks Authors : Kiran K. Chittimaneni Merike Kaeo Eric Vyncke Filename : draft-ietf-opsec-v6-08.txt Pages : 44 Date : 2016-03-21 Abstract: Knowledge and experience on how to operate IPv4 securely is available: whether it is the Internet or an enterprise internal network. However, IPv6 presents some new security challenges. RFC 4942 describes the security issues in the protocol but network managers also need a more practical, operations-minded document to enumerate advantages and/or disadvantages of certain choices. This document analyzes the operational security issues in all places of a network (enterprises, service providers and residential users) and proposes technical and procedural mitigations techniques. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-opsec-v6-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-v6-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Mar 21 18:24:51 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F59A12D147 for ; Mon, 21 Mar 2016 18:24:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N_jA-eZ5mX1N for ; Mon, 21 Mar 2016 18:24:47 -0700 (PDT) Received: from mailrelay21.naist.jp (mailrelay21.naist.jp [IPv6:2001:200:16a:50::71]) by ietfa.amsl.com (Postfix) with ESMTP id 1581312D149 for ; Mon, 21 Mar 2016 18:24:46 -0700 (PDT) Received: from mailpost21.naist.jp (mailscan21.naist.jp [163.221.80.58]) by mailrelay21.naist.jp (Postfix) with ESMTP id A378B631; Tue, 22 Mar 2016 10:24:44 +0900 (JST) Received: from naist-wavenet124-189.naist.jp (naist-wavenet124-189.naist.jp [163.221.124.189]) by mailpost21.naist.jp (Postfix) with ESMTPSA id 8B22C62D; Tue, 22 Mar 2016 10:24:44 +0900 (JST) Content-Type: multipart/alternative; boundary="Apple-Mail=_78564951-51ED-4959-966B-18BE4FFA076B" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Marius Georgescu In-Reply-To: Date: Tue, 22 Mar 2016 10:24:54 +0900 Message-Id: References: <56F00044.9050602@is.naist.jp> To: joel jaeggli X-Mailer: Apple Mail (2.2104) X-TM-AS-MML: No X-TM-AS-Product-Ver: IMSS-7.1.0.1392-8.0.0.1202-22208.003 X-TM-AS-Result: No--13.371-5.0-31-10 X-imss-scan-details: No--13.371-5.0-31-10 X-TMASE-MatchedRID: u/RYTrz+LRk7MwFDNigBPqOCzEVIgcGWZHw9CgHdgui6+E4LDxkgtOuE 2+PTEY9BuyXwa/V5eQpVnniKh7YTCwvxMaV6x4s8ayjbe4qUImNHhD2m7ZUbGp8A3KznAiErFFv 923/INGJOqr2g39A2sp1U1lojafr/QZXZg2I8Jab86OQ9+3Ibct9t4QQv6YsAuDwPAc9Y8uPKC2 3jcto4nob9nCjzCXr+swYYz6WWwUtpmrYvyizXTaySIIYMCJaYVrJPSu1ZdcfCnxsdaJC7RrJNv oGKICSEjQnNOlGH6eMwo+sXt0rnswuK1hIitSIHcz+QLRdPlxHzTu35URal5iBkhyrvdMSlklPO PDP4bOi8ih7St+/rAu7KTDtx8CggM9g+YfdqJKHDv5dDcuT2eWUIbfbNvAi8GmCPA8eIKhKoqSV iIzJatrUdr5swZ2TTDB+ErBr0bAORPMCAcbl40jpnHdhQ1BMbaVZG+f8zyBiSJhE4d63tvbUOrY S3CkoiFiO+ln+3Y/KPnpohp8ng0RwMMtF4a3g9+ZQPGkWiBBejxYyRBa/qJegL5WVEeE7IAHBjX ozyw6tGONWF/6P/CuunGEBqPil+pEmIv6Iva055zdAzex5xZhJ0ps+T9NqyOjaLcHe7Xvi6pWb8 0RmkWRpoPOF0uV60ojz52yvfsk/jgquz2PTDBWOrXluc6n+lzqChHVH/eKs7oaKS+ukkLX7cGd1 9dSFd Archived-At: Cc: opsec@ietf.org Subject: Re: [OPSEC] A Threat Model for IPv6 Transition Technologies X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Mar 2016 01:24:49 -0000 --Apple-Mail=_78564951-51ED-4959-966B-18BE4FFA076B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thank you very much for your comment. I will make sure there is a = reference in the next version. Best regards, Marius > On Mar 22, 2016, at 00:55, joel jaeggli wrote: >=20 > A very superficial reading suggests that in addition to a general > introduction to STIRDE that an informative reference is probably = warranted. >=20 > thanks for doing this. >=20 > joel > On 3/21/16 7:08 AM, Marius Georgescu wrote: >> Dear OPSEC Members, >>=20 >> Following the presentation in SAAG from IETF94 >> (https://www.ietf.org/proceedings/94/slides/slides-94-saag-3.pdf ), = I've >> written the following draft attempting to describe a threat model for >> IPv6 transition technologies. >>=20 >> = https://tools.ietf.org/html/draft-georgescu-opsec-ipv6-trans-tech-threat-m= odel-00 >>=20 >> If time allows, your feedback would be very appreciated. >>=20 >> Best regards, >> Marius Georgescu =E3=80=80(=E3=83=9E=E3=83=AA=E3=82=A6=E3=82=B9 = =E3=82=B8=E3=83=A7=E3=83=AB=E3=82=B8=E3=82=A7=E3=82=B9=E3=82=AF) >> Internet Engineering Laboratory=20 >> Nara Institute of Science and Technology=20 >> IPv6NET Project: >http://www.ipv6net.ro/ >>=20 >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> OPSEC mailing list >> OPSEC@ietf.org >> https://www.ietf.org/mailman/listinfo/opsec = --Apple-Mail=_78564951-51ED-4959-966B-18BE4FFA076B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thank you very much for your comment. I will make sure there = is a reference in the next version.

Best regards,
Marius


On Mar 22, 2016, at 00:55, joel jaeggli <joelja@bogus.com> = wrote:

A very superficial reading suggests that in = addition to a general
introduction to STIRDE = that an informative reference is probably warranted.

thanks for doing this.

joel
On 3/21/16 7:08 AM, Marius = Georgescu wrote:
Dear OPSEC Members,

Following the presentation in SAAG from IETF94
(https://www.ietf.org/proceedings/94/slides/slides-94-saag-3.pdf= ), I've
written the following draft attempting to = describe a threat model for
IPv6 transition = technologies.

https://tools.ietf.org/html/draft-georgescu-opsec-ipv6-trans-te= ch-threat-model-00

If time allows, your = feedback would be very appreciated.

Best = regards,
Marius Georgescu =E3=80=80(=E3=83=9E=E3=83=AA=E3=82= =A6=E3=82=B9 =E3=82=B8=E3=83=A7=E3=83=AB=E3=82=B8=E3=82=A7=E3=82=B9=E3=82=AF= )
Internet Engineering Laboratory 
Nara = Institute of Science and Technology 
IPv6NET = Project: <http://www.ipv6net.ro/>http://www.ipv6net.ro/




_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/opsec

= --Apple-Mail=_78564951-51ED-4959-966B-18BE4FFA076B-- From nobody Wed Mar 23 05:43:23 2016 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CF6512D97E; Tue, 22 Mar 2016 14:17:02 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Meeting Session Request Tool\"" To: X-Test-IDTracker: no X-IETF-IDTracker: 6.17.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160322211702.4043.19082.idtracker@ietfa.amsl.com> Date: Tue, 22 Mar 2016 14:17:02 -0700 Archived-At: X-Mailman-Approved-At: Wed, 23 Mar 2016 05:43:20 -0700 Cc: opsec@ietf.org, opsec-chairs@ietf.org, smccammon@amsl.com Subject: [OPSEC] opsec - Update to a Meeting Session Request for IETF 95 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Mar 2016 21:17:02 -0000 An update to a meeting session request has just been submitted by Stephanie McCammon, on behalf of the opsec working group. --------------------------------------------------------- Working Group Name: Operational Security Capabilities for IP Network Infrastructure Area Name: Operations and Management Area Session Requester: Stephanie McCammon Number of Sessions: 2 Length of Session(s): 1 Hour, 1.5 Hours Number of Attendees: 30 Conflicts to Avoid: First Priority: saag v6ops Second Priority: 6man acme opsarea opsawg sidr Third Priority: dnsop dnssd homenet mif Special Requests: --------------------------------------------------------- From nobody Wed Mar 23 13:08:46 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7593412D7D6 for ; Wed, 23 Mar 2016 13:08:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2xVtmrT7coOC for ; Wed, 23 Mar 2016 13:08:42 -0700 (PDT) Received: from st13p11im-asmtp004.me.com (st13p11im-asmtp004.me.com [17.164.40.219]) (using TLSv1.2 with cipher DHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6912712D74A for ; Wed, 23 Mar 2016 13:08:42 -0700 (PDT) Received: from [10.214.90.112] (147.168-179-91.adsl-dyn.isp.belgacom.be [91.179.168.147]) by st13p11im-asmtp004.me.com (Oracle Communications Messaging Server 7.0.5.36.0 64bit (built Sep 8 2015)) with ESMTPSA id <0O4I00HPODAD2P10@st13p11im-asmtp004.me.com> for opsec@ietf.org; Wed, 23 Mar 2016 20:08:40 +0000 (GMT) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-03-23_10:,, signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 clxscore=1015 suspectscore=5 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1510270003 definitions=main-1603230309 From: Gunter Van De Velde Content-type: multipart/alternative; boundary="Apple-Mail=_E011D109-9F60-4434-8817-0E749750D6C7" Date: Wed, 23 Mar 2016 21:08:37 +0100 Message-id: <22274872-C86E-4BF3-A033-63F81E638D35@icloud.com> To: opsec@ietf.org MIME-version: 1.0 (Mac OS X Mail 9.2 \(3112\)) X-Mailer: Apple Mail (2.3112) Archived-At: Cc: "Gunter Van De Velde," Subject: [OPSEC] IETF-95 agenda topics X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 20:08:44 -0000 --Apple-Mail=_E011D109-9F60-4434-8817-0E749750D6C7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi All, The agenda for OPSEC for IETF-95 has been uploaded. Please let Eric and = I know (by responding to this email) if you asked for a presentation slot, and = we did not include you in the agenda.=20 Latest agenda to be found at:=20 https://www.ietf.org/proceedings/95/agenda/agenda-95-opsec = Kind Regards, Eric & Gunter= --Apple-Mail=_E011D109-9F60-4434-8817-0E749750D6C7 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
Hi All,

The agenda for OPSEC for IETF-95 has been uploaded.  Please let Eric and I know
(by responding to this email) if you asked for a presentation slot, and we
did not include you in the agenda. 

Latest agenda to be found at: 

Kind Regards,
Eric & Gunter
--Apple-Mail=_E011D109-9F60-4434-8817-0E749750D6C7-- From nobody Thu Mar 31 00:44:35 2016 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 709DF12D8E6 for ; Thu, 31 Mar 2016 00:44:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.92 X-Spam-Level: X-Spam-Status: No, score=-6.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BElM3_XtvIMb for ; Thu, 31 Mar 2016 00:44:32 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B3EE12D0ED for ; Thu, 31 Mar 2016 00:44:32 -0700 (PDT) Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id DC5BC9F740523; Thu, 31 Mar 2016 07:44:28 +0000 (GMT) Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id u2V7iUE0003111 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 31 Mar 2016 07:44:30 GMT Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id u2V7iR3G032207 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 31 Mar 2016 09:44:29 +0200 Received: from FR711WXCHMBA06.zeu.alcatel-lucent.com ([169.254.2.80]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.03.0195.001; Thu, 31 Mar 2016 09:44:28 +0200 From: "Van De Velde, Gunter (Nokia - BE)" To: Gunter Van De Velde , "opsec@ietf.org" Thread-Topic: [OPSEC] IETF-95 agenda topics Thread-Index: AQHRiyEnAp2X6cx6+k2GNADT5DsO5A== Date: Thu, 31 Mar 2016 07:44:27 +0000 Message-ID: <81BEE34E-C8EE-4840-B63D-74B5689A98BE@alcatel-lucent.com> References: <22274872-C86E-4BF3-A033-63F81E638D35@icloud.com> In-Reply-To: <22274872-C86E-4BF3-A033-63F81E638D35@icloud.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.239.27.39] Content-Type: multipart/alternative; boundary="_000_81BEE34EC8EE4840B63D74B5689A98BEalcatellucentcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [OPSEC] IETF-95 agenda topics X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Mar 2016 07:44:34 -0000 --_000_81BEE34EC8EE4840B63D74B5689A98BEalcatellucentcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBBbGwsDQoNClBsZWFzZSBmaW5kIGJlbG93IHRoZSBsYXRlc3QgdXBkYXRlZCBhZ2VuZGEg b2YgdGhlIE9QU0VDIFdHIG1lZXRpbmcgYXQgSUVURjk1Lg0KDQpDYW4gdGhlIGNvbmZpcm1lZCBz cGVha2VycyBwcm92aWRlIHRoZSBjaGFpcnMgd2l0aCBzbGlkZXMgYmVmb3JlIEVPQiBTdW5kYXkg MyBBcHJpbCAyMDE2LCB0byBtYWtlIHN1cmUgYWxsIGlzIHBvc3RlZCB0aW1lbHkgYW5kIG1hZGUg YXZhaWxhYmxlIGZvciB0aGUgYXR0ZW5kZWVzLg0KDQpLaW5kIFJlZ2FyZHMsDQpFcmljICYgR3Vu dGVyDQoNCkZyb206IE9QU0VDIDxvcHNlYy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpvcHNlYy1i b3VuY2VzQGlldGYub3JnPj4gb24gYmVoYWxmIG9mIEd1bnRlciBWYW4gRGUgVmVsZGUgPGd1bnRl cnZhbmRldmVsZGVjY0BpY2xvdWQuY29tPG1haWx0bzpndW50ZXJ2YW5kZXZlbGRlY2NAaWNsb3Vk LmNvbT4+DQpEYXRlOiBXZWRuZXNkYXkgMjMgTWFyY2ggMjAxNiBhdCAyMTowOA0KVG86ICJvcHNl Y0BpZXRmLm9yZzxtYWlsdG86b3BzZWNAaWV0Zi5vcmc+IiA8b3BzZWNAaWV0Zi5vcmc8bWFpbHRv Om9wc2VjQGlldGYub3JnPj4NCkNjOiBHdW50ZXIgVmFuIGRlIFZlbGRlIDxndW50ZXIudmFuX2Rl X3ZlbGRlQGFsY2F0ZWwtbHVjZW50LmNvbTxtYWlsdG86Z3VudGVyLnZhbl9kZV92ZWxkZUBhbGNh dGVsLWx1Y2VudC5jb20+Pg0KU3ViamVjdDogW09QU0VDXSBJRVRGLTk1IGFnZW5kYSB0b3BpY3MN Cg0KSGkgQWxsLA0KDQpUaGUgYWdlbmRhIGZvciBPUFNFQyBmb3IgSUVURi05NSBoYXMgYmVlbiB1 cGxvYWRlZC4gIFBsZWFzZSBsZXQgRXJpYyBhbmQgSSBrbm93DQooYnkgcmVzcG9uZGluZyB0byB0 aGlzIGVtYWlsKSBpZiB5b3UgYXNrZWQgZm9yIGEgcHJlc2VudGF0aW9uIHNsb3QsIGFuZCB3ZQ0K ZGlkIG5vdCBpbmNsdWRlIHlvdSBpbiB0aGUgYWdlbmRhLg0KDQpMYXRlc3QgYWdlbmRhIHRvIGJl IGZvdW5kIGF0Og0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTUvYWdlbmRhL2Fn ZW5kYS05NS1vcHNlYw0KDQpLaW5kIFJlZ2FyZHMsDQpFcmljICYgR3VudGVyDQo= --_000_81BEE34EC8EE4840B63D74B5689A98BEalcatellucentcom_ Content-Type: text/html; charset="utf-8" Content-ID: <416B5428A24431469CC650A9F81AFF87@exchange.lucent.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj4NCjxkaXY+RGVh ciBBbGwsPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5QbGVhc2UgZmluZCBiZWxvdyB0 aGUgbGF0ZXN0IHVwZGF0ZWQgYWdlbmRhIG9mIHRoZSBPUFNFQyBXRyBtZWV0aW5nIGF0IElFVEY5 NS48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkNhbiB0aGUgY29uZmlybWVkIHNwZWFr ZXJzIHByb3ZpZGUgdGhlIGNoYWlycyB3aXRoIHNsaWRlcyBiZWZvcmUgRU9CIFN1bmRheSAzIEFw cmlsIDIwMTYsIHRvIG1ha2Ugc3VyZSBhbGwgaXMgcG9zdGVkIHRpbWVseSBhbmQgbWFkZSBhdmFp bGFibGUgZm9yIHRoZSBhdHRlbmRlZXMuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5L aW5kIFJlZ2FyZHMsPC9kaXY+DQo8ZGl2PkVyaWMgJmFtcDsgR3VudGVyPC9kaXY+DQo8ZGl2Pg0K PGRpdiBpZD0iTUFDX09VVExPT0tfU0lHTkFUVVJFIj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIj4NCjxkaXYg c3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMnB0OyB0ZXh0LWFsaWduOmxl ZnQ7IGNvbG9yOmJsYWNrOyBCT1JERVItQk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9SREVSLUxFRlQ6 IG1lZGl1bSBub25lOyBQQURESU5HLUJPVFRPTTogMGluOyBQQURESU5HLUxFRlQ6IDBpbjsgUEFE RElORy1SSUdIVDogMGluOyBCT1JERVItVE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsgQk9SREVSLVJJ R0hUOiBtZWRpdW0gbm9uZTsgUEFERElORy1UT1A6IDNwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC13 ZWlnaHQ6Ym9sZCI+RnJvbTogPC9zcGFuPk9QU0VDICZsdDs8YSBocmVmPSJtYWlsdG86b3BzZWMt Ym91bmNlc0BpZXRmLm9yZyI+b3BzZWMtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IG9uIGJlaGFs ZiBvZiBHdW50ZXIgVmFuIERlIFZlbGRlICZsdDs8YSBocmVmPSJtYWlsdG86Z3VudGVydmFuZGV2 ZWxkZWNjQGljbG91ZC5jb20iPmd1bnRlcnZhbmRldmVsZGVjY0BpY2xvdWQuY29tPC9hPiZndDs8 YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RGF0ZTogPC9zcGFuPldlZG5lc2Rh eSAyMyBNYXJjaCAyMDE2IGF0IDIxOjA4PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJv bGQiPlRvOiA8L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOm9wc2VjQGlldGYub3JnIj5vcHNl Y0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpvcHNlY0BpZXRmLm9yZyI+ b3BzZWNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xk Ij5DYzogPC9zcGFuPkd1bnRlciBWYW4gZGUgVmVsZGUgJmx0OzxhIGhyZWY9Im1haWx0bzpndW50 ZXIudmFuX2RlX3ZlbGRlQGFsY2F0ZWwtbHVjZW50LmNvbSI+Z3VudGVyLnZhbl9kZV92ZWxkZUBh bGNhdGVsLWx1Y2VudC5jb208L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpi b2xkIj5TdWJqZWN0OiA8L3NwYW4+W09QU0VDXSBJRVRGLTk1IGFnZW5kYSB0b3BpY3M8YnI+DQo8 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBi cmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazog YWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+SGkgQWxsLDwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhl IGFnZW5kYSBmb3IgT1BTRUMgZm9yIElFVEYtOTUgaGFzIGJlZW4gdXBsb2FkZWQuICZuYnNwO1Bs ZWFzZSBsZXQgRXJpYyBhbmQgSSBrbm93PGJyIGNsYXNzPSIiPg0KKGJ5IHJlc3BvbmRpbmcgdG8g dGhpcyBlbWFpbCkgaWYgeW91IGFza2VkIGZvciBhIHByZXNlbnRhdGlvbiBzbG90LCBhbmQgd2U8 YnIgY2xhc3M9IiI+DQpkaWQgbm90IGluY2x1ZGUgeW91IGluIHRoZSBhZ2VuZGEuJm5ic3A7PGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KTGF0ZXN0IGFnZW5kYSB0byBiZSBmb3VuZCBhdDom bmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcv cHJvY2VlZGluZ3MvOTUvYWdlbmRhL2FnZW5kYS05NS1vcHNlYyIgY2xhc3M9IiI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTUvYWdlbmRhL2FnZW5kYS05NS1vcHNlYzwvYT48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KS2luZCBSZWdhcmRzLDwvZGl2Pg0KPGRp diBjbGFzcz0iIj5FcmljICZhbXA7IEd1bnRlcjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvc3Bh bj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_81BEE34EC8EE4840B63D74B5689A98BEalcatellucentcom_--