From nobody Tue Oct 9 00:45:37 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648821311FB; Tue, 9 Oct 2018 00:45:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2_gYwP8wVqKp; Tue, 9 Oct 2018 00:45:32 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 702E41311F5; Tue, 9 Oct 2018 00:45:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3936; q=dns/txt; s=iport; t=1539071132; x=1540280732; h=from:to:cc:subject:date:message-id:mime-version; bh=oY5Dc2V37oWNNdu7HA2LWXLwO9+6GpIruchQmikcVWE=; b=Q0Bwz97oDxYPjfnRtVerF3kOc7gvdxIpHH5hg9xTBxKb6BSpyHxTsBsC 2YDaTDQ1MufjJHOcLA6giBu+cblCPWugpS0xQHBT4useNbkjkYLNOOMPZ P1K760t8zDtugPGTvTSZ/Y00LmcyYy+jyU3/ohQr11cZDBqOzFYUgppM0 o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BgAABcXLxb/4UNJK1kGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBZYEPd2Z/KAqDa5RHgWiRVIVUgWYLAQGEbBmELiE4FgEDAQE?= =?us-ascii?q?CAQECbR0LhV0GVhIBDDsDAgQwFBMEDgWDIQGBHWSjf4EuhHeFIos5F4FBP4E?= =?us-ascii?q?5DBOEDYMFgzkxgiYCjhIVj08JApBIF4FOhGeJSpVQAhEUgSU0IYFVcBVlAYJ?= =?us-ascii?q?BgjKOI2+LM4EfAQE?= X-IronPort-AV: E=Sophos;i="5.54,359,1534809600"; d="scan'208,217";a="182671356" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Oct 2018 07:45:18 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id w997jHTT024250 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 9 Oct 2018 07:45:17 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 9 Oct 2018 03:45:17 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Tue, 9 Oct 2018 03:45:17 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" CC: "opsec-chairs@ietf.org" Thread-Topic: IETF-103: call for OPSEC agenda Thread-Index: AQHUX6QFuI3XU43heEaFx4Ewr0vQwg== Date: Tue, 9 Oct 2018 07:45:16 +0000 Message-ID: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.e.1.180613 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.106.210] Content-Type: multipart/alternative; boundary="_000_A54CDCA015364DF7AFC2C0D0EA6AA841ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: [OPSEC] IETF-103: call for OPSEC agenda X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Oct 2018 07:45:35 -0000 --_000_A54CDCA015364DF7AFC2C0D0EA6AA841ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBPUFNFQyBtZW1iZXJzLA0KDQpJZiB5b3Ugd2FudCB0byBwcmVzZW50IGEgZG9jdW1lbnQg ZHVyaW5nIHRoZSBPUFNFQyBXRyBtZWV0aW5nIChjdXJyZW50bHkgc2NoZWR1bGVkIG9uIFR1ZXNk YXkgNiAxMToyMCB0byAxMjoyMCksIHBsZWFzZSBzZW5kIHRvIG9wc2VjLWNoYWlyc0BpZXRmLm9y ZzxtYWlsdG86b3BzZWMtY2hhaXJzQGlldGYub3JnPiA6IHRoZSBzcGVha2VyIG5hbWUsIGRvY3Vt ZW50IElEIGFuZCByZXF1ZXN0ZWQgZHVyYXRpb24uDQoNClNlZSB5b3UgaW4gQmFuZ2tvaw0KDQot w6lyaWMgJiAtcm9uDQoNCg== --_000_A54CDCA015364DF7AFC2C0D0EA6AA841ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <88029540DB69FA4285D143ABEB61AA11@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBw dCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0KZGl2Lldv cmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYg Y2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+RGVhciBPUFNFQyBtZW1iZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+SWYgeW91IHdhbnQgdG8gcHJlc2VudCBhIGRvY3VtZW50 IGR1cmluZyB0aGUgT1BTRUMgV0cgbWVldGluZyAoY3VycmVudGx5IHNjaGVkdWxlZCBvbiBUdWVz ZGF5IDYgMTE6MjAgdG8gMTI6MjApLCBwbGVhc2Ugc2VuZCB0bw0KPGEgaHJlZj0ibWFpbHRvOm9w c2VjLWNoYWlyc0BpZXRmLm9yZyI+b3BzZWMtY2hhaXJzQGlldGYub3JnPC9hPiA6IHRoZSBzcGVh a2VyIG5hbWUsIGRvY3VtZW50IElEIGFuZCByZXF1ZXN0ZWQgZHVyYXRpb24uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5TZWUgeW91IGluIEJhbmdrb2s8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi3DqXJpYyAmYW1wOyAtcm9uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_A54CDCA015364DF7AFC2C0D0EA6AA841ciscocom_-- From nobody Thu Oct 18 15:38:32 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3BC9130E23; Thu, 18 Oct 2018 15:38:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=kaloom.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BUDJoB1afnKg; Thu, 18 Oct 2018 15:38:01 -0700 (PDT) Received: from CAN01-QB1-obe.outbound.protection.outlook.com (mail-eopbgr660135.outbound.protection.outlook.com [40.107.66.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A7A9130E13; Thu, 18 Oct 2018 15:38:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kaloom.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XaSr0sIt7fol78KNasQPuYGsw0AGEav9OwjJFcyFfzk=; b=RdFeyMNguX8hCiBEb4ctwhOEHEPrbtzxEST9fonHzn0pvmUWpfpNDDEUL2/+9shHdykvIWUsCZ0KnSDDeSBUjK3zGenZXdAgRspaIXdseBt+J84oKCAZe4qVr65n15aePuULWUT1lFZf8tNXcTyebqDjkME09YZHlMT03kDoO98= Received: from YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM (10.169.141.148) by YQBPR01MB0033.CANPRD01.PROD.OUTLOOK.COM (10.169.140.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1228.25; Thu, 18 Oct 2018 22:37:59 +0000 Received: from YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM ([fe80::e9af:2ac3:bd40:e2ea]) by YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM ([fe80::e9af:2ac3:bd40:e2ea%3]) with mapi id 15.20.1250.022; Thu, 18 Oct 2018 22:37:59 +0000 From: Suresh Krishnan To: int-area , 6man , dhcwg , V6 Ops List , "opsawg@ietf.org" , "opsec@ietf.org" Thread-Topic: Considering AD sponsoring draft-bi-savi-wlan-15 Thread-Index: AQHUZzM4rr8N7CUdy0qcarmhx6SfhQ== Date: Thu, 18 Oct 2018 22:37:58 +0000 Message-ID: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Suresh@kaloom.com; x-originating-ip: [67.22.228.35] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; YQBPR01MB0033; 6:xHUwhvfXx/SHfYu8Y9IMCvLhLcG2E8C3AkiPrhPskmHcbx86kegwxFKZlZPyGIx4q4lYEki+TLb7b9W7uQY+rWgeY+7dXt7+q0wD6jTSrAx2sdLXuTvf20a9DNNJXwGuNSIwxuL5o+zMtMXYwEBkXv3z6zhd1fbftTjkr+2SmF6t9vuoSGVmmpLGL45SSUYG/YlvBIgzd4T4nPrhqEfxW4DUpqaoOKn3qqKbsRNlyARQ4m9imObTY79MTtmU0cPoSKMdGOtuTfSGfLkgX/TGH6CwClCr3oBdP+6PrAUKQJiBC0fWshDaJmApjiiU9FKsfj5w/fRLgPOsB4B51BkG2vzIZdbUl5ElKiVZfxeRlHSToy2VM7BjYR0tyscBz8qejt0iexgw1Gp0U6haSFnxZC+bYXiBFLMYbAX4YspyK/H+j3VRKL7MwFt7SgOfY32qz8QOl5GgbCNtLPZbpZv3cQ==; 5:C7R8hdiLAViTMYUkjzeFw6HTgHOgyX2wqdUsgtXrjV3TW5vdfouvQhvZPL7jLY1wc/qDK1kLVdJMKwI/Tly+Ii7b7d/dwg37Np08hsvtjI5Y3m+dI8TZetF2T2rDvnWayHCEI29hzsNgmSi9WspsqGlC/qLgLkRZwSAUp/k2RW4=; 7:cLaT9RVgRpYrdpGKwDJTbWQ1IixHsscfqi+qNHvLKfamU/RQqHctq1YsBOJFPFcZU7w+LQLtkhrgl+i60V2am8w62MJgxg15YPHPgIcwNoKNukO7Fbo0scEdNVAqxILaCSMjtiQr/XZwd5Gl3GW2TUPuY3ajG6ACk/0ajz0HIuAjSjNfNeHWJ0iKJEWOHyQNA7MKuDuUgK5LvmKgc13YjjqQxVUeygUAcPQZAKaGosd3O7LbFpzzbV6gYhAhs0Bz x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 3b8c7d4c-629c-4fbf-2f07-08d6354a5b04 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(7021145)(8989299)(5600074)(711020)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(2017052603328)(7153060)(7193020); SRVR:YQBPR01MB0033; x-ms-traffictypediagnostic: YQBPR01MB0033: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(3231355)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(149066)(150057)(6041310)(20161123560045)(2016111802025)(20161123558120)(20161123562045)(20161123564045)(6043046)(201708071742011)(7699051)(76991095); SRVR:YQBPR01MB0033; BCL:0; PCL:0; RULEID:; SRVR:YQBPR01MB0033; x-forefront-prvs: 08296C9B35 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(39830400003)(346002)(376002)(136003)(366004)(53754006)(189003)(199004)(97736004)(81166006)(71190400001)(81156014)(102836004)(450100002)(71200400001)(256004)(83716004)(25786009)(6506007)(66066001)(8936002)(186003)(2201001)(26005)(2906002)(80792005)(86362001)(6436002)(8676002)(99286004)(5660300001)(6486002)(110136005)(68736007)(6306002)(3846002)(106356001)(6116002)(966005)(316002)(2501003)(2616005)(476003)(53936002)(6512007)(486006)(105586002)(36756003)(33656002)(72206003)(508600001)(2900100001)(14454004)(82746002)(5250100002)(7736002)(305945005); DIR:OUT; SFP:1102; SCL:1; SRVR:YQBPR01MB0033; H:YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: kaloom.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: AnzEXmSMLHDeLnkPIk+o+wEgSU8i6PC+GlyntbBlag72vxBgKIesL2gz/pL5SbE15j2Hnk/JjK/EXmaLhpXHxCXVY4r87vAGlnA1mwPaxdvl6+FJHj5gXAOEUr7yerE8UP4ETcqInDrhtXpaiio/mxUrxr88dXpO8SUOO/UYdWOBOSNIzZrQCT4sCHOFQUAyUfmA4CcrB6dSCheXM9Xw3A8KdabRmZM9qeBhWIUf8i61CIErZLhh8ucs91NoVQzM0MgscdhC+pdbA+XP++vq+1D0PeRuW4a1BTROLbYrdSEWo5mUr3Se6VGDB9fpdF/WtYyFfj6yiIgCMTzJFQRwHki9Fb7gQtVB+tdrwJ+psUk= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: kaloom.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3b8c7d4c-629c-4fbf-2f07-08d6354a5b04 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Oct 2018 22:37:58.9419 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 47d58e26-f796-48e8-ac40-1c365c204513 X-MS-Exchange-Transport-CrossTenantHeadersStamped: YQBPR01MB0033 Archived-At: Subject: [OPSEC] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Oct 2018 22:38:05 -0000 Hi all, I am considering AD sponsoring the following draft https://tools.ietf.org/html/draft-bi-savi-wlan-15 that describes a source address validation solution for WLAN. If you have a= ny concerns either with the content of the draft, or about me AD sponsoring it please l= et me know before 2018/11/18. Thanks Suresh NOTE: I have CCed: all the working groups that I thought could be potential= ly interested in this work. If you think I have missed out some WG(s) please l= et me know. From nobody Thu Oct 18 17:07:08 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6BD8130E86 for ; Thu, 18 Oct 2018 17:07:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.501 X-Spam-Level: X-Spam-Status: No, score=-17.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BI9sGL1dRhpH for ; Thu, 18 Oct 2018 17:07:03 -0700 (PDT) Received: from mail-io1-xd35.google.com (mail-io1-xd35.google.com [IPv6:2607:f8b0:4864:20::d35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CAE8130E30 for ; Thu, 18 Oct 2018 17:07:03 -0700 (PDT) Received: by mail-io1-xd35.google.com with SMTP id y10-v6so22047946ioa.10 for ; Thu, 18 Oct 2018 17:07:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Sy1ghWjZptAT/y8Jwbm5IxkhS4gw4nta4dFrK1XnBlY=; b=iPLJAGqvtreRwhTpvxqhPBjbbcrcUSrFzAY+3F3elmkkeJuOsGCiAc4xjbfaMDGJ6+ x3jobC9PcSQ6oRiAL6ttxE+Bmd6FmVN8hcJuP+tfa4HmtUgK+OpaFEGbYr7ycTLe7Mgm QBY36MAGv8d8VNp6L8cBPL7sSANiUCzGgRuKoVKr3HkZRAn9Q/EqrNZjLaTaix4lH16J xu413oD1cunTffGlmpQC1QOJcEC8XyAtxvad8o5HzKqWPbfy1ppDlag00xRibie3SGoV M9mxUM9XdemMBS/vPirJHZPJh/w6aHV3fSqtL5I6TwigVUaESvMDEhvVkBHLLXkX74cZ eqRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Sy1ghWjZptAT/y8Jwbm5IxkhS4gw4nta4dFrK1XnBlY=; b=MB6hawTjRjOJaM4aTYCNRnmQJcmcN7DHN1Dz6mFL7XjKaWBTm0fdqNkxkVOylRxaqB XlBZOkdZWyNNXvZnzDCzfszG7CDcROTsMjSziSE1A/K28GDMmnxxnYOtiC+rE2CWw3JN W16fL4ZTLGB3WGn1dGVxA2/XtyC0e0ERFU6COdfJe6bXmJD1tg2KfJbRgnde8pc8xHqP vOaFyEbyfztYe9u8+/fa5qvRgWtXOvopXcUWDlydb/r+s+7fCh1tadwhC4074MbAa2Mt b/fZ80clJTreLbODvcvMW+ezzub3ngyYNckEy9N5/X2ul6R+ncxXsqupWEHTqzCIMKn/ 8qBg== X-Gm-Message-State: AGRZ1gKz0EHk0HA4v/rnuJpb6wWMYCfxwFe8mJXtTKREX0VpUxKRNuBZ vA5GM0fvAhnrTrGBH0X2yeYV5TKrpWCr761jREdbJg== X-Google-Smtp-Source: AJdET5eTqK8Y3WvOJlWtsCOClRPeHAI0QD9xiRQvuzrm+jqjDZwLxITbAmVAS70rNJ4jpQb/dFzQDQ7rx96WRRRESKA= X-Received: by 2002:a6b:b249:: with SMTP id b70-v6mr1698659iof.252.1539907621990; Thu, 18 Oct 2018 17:07:01 -0700 (PDT) MIME-Version: 1.0 References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> In-Reply-To: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> From: Lorenzo Colitti Date: Fri, 19 Oct 2018 09:06:50 +0900 Message-ID: To: Suresh Krishnan Cc: int-area@ietf.org, IETF IPv6 Mailing List , dhcwg@ietf.org, "v6ops@ietf.org WG" , opsawg@ietf.org, opsec@ietf.org Content-Type: multipart/alternative; boundary="000000000000cc46d7057889ae96" Archived-At: Subject: Re: [OPSEC] [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2018 00:07:06 -0000 --000000000000cc46d7057889ae96 Content-Type: text/plain; charset="UTF-8" On Fri, Oct 19, 2018 at 7:38 AM Suresh Krishnan wrote: > I am considering AD sponsoring the following draft > > https://tools.ietf.org/html/draft-bi-savi-wlan-15 > > that describes a source address validation solution for WLAN. If you have > any concerns > either with the content of the draft, or about me AD sponsoring it please > let me know before 2018/11/18. > I skimmed the draft. It looks well-written, and it addresses an important problem which I think is probably solved in (different?) proprietary ways on various implementations in the field today. I'm not very familiar with the AD sponsorship process, so not sure what the has to happen from a process perspective. But I think the document requires further review, especially given that it's making statements about very widely-deployed scenarios (IPv6 over wifi). Should the document be adopted by a WG such as 6man or v6ops? If not, it should definitely be reviewed by those WGs. As a concrete example, here are some things that need to be resolved before the document advances: 1. The proposed scheme relies on DAD packets to create mapping entries. That means that if a DAD packet is lost (which can happen even though 802.11 employs retransmissions at L2), a station could have an IPv6 address that doesn't work with no indication that it's not working. This is basically a non-recoverable outage. Perhaps the document should specify another solution instead, e.g., it could say that mapping entries could be created when a wired station receives a solicited NA response from a wireless station. 2. The document says that the lifetime of SLAAC addresses is the address lifetime, but the network has no way of knowing what the address lifetime is because it depends on which RA(s) the host has received. Cheers, Lorenzo --000000000000cc46d7057889ae96 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Fri, Oct 19= , 2018 at 7:38 AM Suresh Krishnan <= Suresh@kaloom.com> wrote:
= =C2=A0 =C2=A0I am considering AD sponsoring the following draft

https://tools.ietf.org/html/draft-bi-savi-wlan-15

that describes a source address validation solution for WLAN. If you have a= ny concerns
either with the content of the draft, or about me AD sponsoring it please l= et me know before 2018/11/18.

--000000000000cc46d7057889ae96-- From nobody Fri Oct 19 02:12:42 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A693128CF3; Fri, 19 Oct 2018 02:12:40 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: warren@kumari.net, opsec@ietf.org, opsec-chairs@ietf.org, evyncke@cisco.com X-Test-IDTracker: no X-IETF-IDTracker: 6.87.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153994036020.31893.18232297076972536321.idtracker@ietfa.amsl.com> Date: Fri, 19 Oct 2018 02:12:40 -0700 Archived-At: Subject: [OPSEC] opsec - Cancelling a meeting request for IETF 103 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2018 09:12:40 -0000 A request to cancel a meeting session has just been submitted by Eric Vyncke, a Chair of the opsec working group. From nobody Fri Oct 19 02:17:38 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9416B130ED0; Fri, 19 Oct 2018 02:17:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Fgm_NhyqrJ4; Fri, 19 Oct 2018 02:17:27 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45F38130EA8; Fri, 19 Oct 2018 02:17:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=954; q=dns/txt; s=iport; t=1539940646; x=1541150246; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=L6ElddfUpWDzKvv2NTJVXfvue7zyKUpmwbzn3HPwhy8=; b=Nmn+pXDVrqkheb6ayhIckASi4+ZnMkRzjhRCNMoSgXCnUlDnRWV5m2dv 7d4s0Wcn+CyOPxp3eYuTewxBEY4NBIFYYywoxVDUC7gwLGy/P4uH4qlIy zbVzKimGZsoN+GbJ/xYvP5T/D/7EmI1ajwuLmBryMpIbh2gsHOXZpFqGN E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AEAACFoMlb/4gNJK1jGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBUQUBAQEBCwGCBIFlKAqDa4gYjBuZHIF6CwEBhGwCF4RtITQ?= =?us-ascii?q?NDQEDAQECAQECbR0LhToGIxFFEAIBCBoCJgICAjAVEAIEDgWDIYICpmOBLoU?= =?us-ascii?q?7hGaBC4pEF4FBP4E4H4IeLoEoGQGDPBeCbDGCJgKeQQkCkGoXgUCOaYJik0k?= =?us-ascii?q?CERSBJh04gVVwFWUBgkGCMo4lb4knBIEqgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.54,399,1534809600"; d="scan'208";a="188349097" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Oct 2018 09:17:25 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id w9J9HODN026725 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 19 Oct 2018 09:17:25 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 19 Oct 2018 05:17:24 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Fri, 19 Oct 2018 05:17:24 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" CC: "warren@kumari.net" , "opsec-chairs@ietf.org" Thread-Topic: opsec - Cancelling a meeting request for IETF 103 Thread-Index: AQHUZ4vmaSLYl1cM90eF5XQdKifRRqUmrpUA Date: Fri, 19 Oct 2018 09:17:24 +0000 Message-ID: <8A81AE3B-02C5-4C52-94C7-3C58D6904A51@cisco.com> References: <153994036020.31893.18232297076972536321.idtracker@ietfa.amsl.com> In-Reply-To: <153994036020.31893.18232297076972536321.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.4] Content-Type: text/plain; charset="utf-8" Content-ID: <64EEF1CDA9D37C4EA3A13CEBA5825B0F@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [OPSEC] opsec - Cancelling a meeting request for IETF 103 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2018 09:17:37 -0000 QXMgd2UgaGFkIG9ubHkgb25lIHJlcXVlc3QgdG8gYmUgb24gdGhlIGFnZW5kYSwgUm9uIGFuZCBJ IGhhdmUgZGVjaWRlZCB0byBjYW5jZWwgdGhpcyBtZWV0aW5nLg0KDQpMZXQncyBtZWV0IG5leHQg eWVhciBpbiBQcmFndWUgYW5kIG1lYW53aGlsZSwgYW55IHZvbHVudGVlciBmb3IgdGhlIHBvdGVu dGlhbCBhY3Rpb24gcG9pbnRzIG1lbnRpb25lZCBpbiBNb250cmVhbD8NCg0KLSByZWZyZXNoaW5n IFJGQyA0Nzc4IE9wU2VjIEN1cnJlbnQgUHJhY3RpY2VzIGluIElTUCBuZXR3b3Jrcw0KLSByZWZy ZXNoaW5nIFJGQyA2MTkyIFByb3RlY3RpbmcgdGhlIFJvdXRlciBDb250cm9sIFBsYW5lDQotIHJl LWV4ZWN1dGUgcGVyaW9kaWNhbGx5IHRoZSB0ZXN0IG9mIFJGQyA3ODcyIGFib3V0IGV4dGVuc2lv biBoZWFkZXJzIGFuZCBtYWtlIHRoZW0gcHVibGljDQoNCi3DqXJpYyAmIC1yb24NCg0KDQrvu79P biAxOS8xMC8yMDE4LCAxMToxMiwgIklFVEYgTWVldGluZyBTZXNzaW9uIFJlcXVlc3QgVG9vbCIg PHNlc3Npb24tcmVxdWVzdEBpZXRmLm9yZz4gd3JvdGU6DQoNCiAgICANCiAgICANCiAgICBBIHJl cXVlc3QgdG8gY2FuY2VsIGEgbWVldGluZyBzZXNzaW9uIGhhcyBqdXN0IGJlZW4gc3VibWl0dGVk IGJ5IEVyaWMgVnluY2tlLCBhIENoYWlyIG9mIHRoZSBvcHNlYyB3b3JraW5nIGdyb3VwLg0KICAg IA0KICAgIA0KDQo= From nobody Fri Oct 19 07:45:10 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E495B130EEA; Fri, 19 Oct 2018 07:44:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.563 X-Spam-Level: X-Spam-Status: No, score=-14.563 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.064, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X75IZhWgfhRK; Fri, 19 Oct 2018 07:44:40 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31E60130EB7; Fri, 19 Oct 2018 07:44:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15542; q=dns/txt; s=iport; t=1539960279; x=1541169879; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=17ycnTk4Koiv0aheB1e4vRC+gINEFwhbpUOXT4axNUg=; b=EsByzlUoHwm5kNlj2JNy2Vl51CTZuojdwipAZhRiy/zbFqmvn2rXZXsy dvch1B+3Xk0XienqjG1xcbAqJy58ST1I36pzBKtCyJPzW4sULgcCKqFIY zhYQ5e2BiKcuEfQsIWxbmzpBk9yBgB3rzt0CnrHqzpT+3xhhx6kr+ShuO Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ADAACP7Mlb/4YNJK1kGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBUQQBAQEBAQsBgQ13Zn8oCoNriBiMG4INkUeFSBSBZgs?= =?us-ascii?q?BASOESQIXhG8hNA0NAQMBAQIBAQJtHAyFOQEBAQEDIwpBCxACAQgRBAEBKAM?= =?us-ascii?q?CAgIwFAkIAgQBDQUIE4MHgR1kD6ZrgS6EMAKFYQWLTxeBQT+EI4MbAQEDgSZ?= =?us-ascii?q?GKIJNglcCiQsOhRmQDwkChlyKBh+BT4RziWeMVIlXAhEUgSYdOIFVcBU7gmy?= =?us-ascii?q?LGYU+b4h6K4EBgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.54,400,1534809600"; d="scan'208,217";a="458436405" Received: from alln-core-12.cisco.com ([173.36.13.134]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 19 Oct 2018 14:44:37 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-12.cisco.com (8.15.2/8.15.2) with ESMTPS id w9JEibPx019637 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 19 Oct 2018 14:44:38 GMT Received: from xch-rcd-001.cisco.com (173.37.102.11) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 19 Oct 2018 09:44:37 -0500 Received: from xch-rcd-001.cisco.com ([173.37.102.11]) by XCH-RCD-001.cisco.com ([173.37.102.11]) with mapi id 15.00.1395.000; Fri, 19 Oct 2018 09:44:37 -0500 From: "Pascal Thubert (pthubert)" To: Lorenzo Colitti , Suresh Krishnan CC: "v6ops@ietf.org WG" , IETF IPv6 Mailing List , "opsec@ietf.org" , "dhcwg@ietf.org" , "int-area@ietf.org" , "opsawg@ietf.org" Thread-Topic: [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 Thread-Index: AQHUZzM4rr8N7CUdy0qcarmhx6SfhaUmBK8AgACTkfA= Date: Fri, 19 Oct 2018 14:44:11 +0000 Deferred-Delivery: Fri, 19 Oct 2018 14:43:54 +0000 Message-ID: References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.228.216.26] Content-Type: multipart/alternative; boundary="_000_da54096864fc4b508931eea7203ae8acXCHRCD001ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: alln-core-12.cisco.com Archived-At: Subject: Re: [OPSEC] [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2018 14:44:43 -0000 --_000_da54096864fc4b508931eea7203ae8acXCHRCD001ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBhbGwgOg0KDQpJIGFncmVlIHdpdGggTG9yZW56bywgdGhpcyBzY2hlbWUgaXMgYXQgYSBo aWdoIGxldmVsIHdoYXQgd2UgY2FuIGZpbmQgaW4gY29tbWVyY2lhbCBwcm9kdWN0cywgYW5kIEkg aGF2ZSBmaXJzdC1oYW5kIGV4cGVyaWVuY2Ugb24gdGhhdC4NCg0KQXMgYW4gaW5mb3JtYXRpb25h bCBkb2N1bWVudCwgdGhpcyBSRkMgY291bGQgYmUgYSB1c2VmdWwgcmVmZXJlbmNlIHRvIGNvbnNp ZGVyIGlmIHdlIHdlcmUgdG8gY2hhbmdlIHRoZSBwcm90b2NvbHMgaW4gYSB3YXkgdGhhdCB3b3Vs ZCBpbXBhY3QgdGhvc2UgZXhpc3RpbmcgYW5kIG5vbi1zdGFuZGFyZCBzbm9vcGluZyBiZWhhdmlv cnMuDQpTbm9vcGluZyBoYXMgcHJvdmVuIHRvIGJlIHZlcnkgdXNlZnVsLCBidXQgYXMgb25lIG1h eSBndWVzcywgaXQgaXMgbm90IHJlbGlhYmxlOyBpdCBtYXkgbWlzcyBwYWNrZXRzLCBtYXkgZmFp bCB0byBjcmVhdGUgYmluZGluZ3MsIG1heSBwb2ludCBvbiBhbiBpbmNvcnJlY3QgbG9jYXRpb24g YXMgd2VsbC4NCg0KU28gSeKAmWQgc2F5IHRoYXQgaWYgd2UgcHVibGlzaCBhcyBSRkMsICB3ZSBz aG91bGQgYWxzbyBpbmRpY2F0ZSB0aGF0IHdpdGggZHJhZnQtaWV0Zi02bG8tYXAtbmQsIHdlICh3 aWxsKSBoYXZlIGEgbW9yZSByb2J1c3Qgc29sdXRpb24gZm9yIGRldmljZXMgdGhhdCBhcmUgd2ls bGluZyB0byBhbm5vdW5jZSB0aGVtc2VsdmVzLg0KDQpDaGVlcnMsDQoNClBhc2NhbA0KRnJvbTog aXB2NiA8aXB2Ni1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgTG9yZW56byBDb2xpdHRp DQpTZW50OiB2ZW5kcmVkaSAxOSBvY3RvYnJlIDIwMTggMDI6MDcNClRvOiBTdXJlc2ggS3Jpc2hu YW4gPFN1cmVzaEBrYWxvb20uY29tPg0KQ2M6IHY2b3BzQGlldGYub3JnIFdHIDx2Nm9wc0BpZXRm Lm9yZz47IElFVEYgSVB2NiBNYWlsaW5nIExpc3QgPGlwdjZAaWV0Zi5vcmc+OyBvcHNlY0BpZXRm Lm9yZzsgZGhjd2dAaWV0Zi5vcmc7IGludC1hcmVhQGlldGYub3JnOyBvcHNhd2dAaWV0Zi5vcmcN ClN1YmplY3Q6IFJlOiBbZGhjd2ddIENvbnNpZGVyaW5nIEFEIHNwb25zb3JpbmcgZHJhZnQtYmkt c2F2aS13bGFuLTE1DQoNCk9uIEZyaSwgT2N0IDE5LCAyMDE4IGF0IDc6MzggQU0gU3VyZXNoIEty aXNobmFuIDxTdXJlc2hAa2Fsb29tLmNvbTxtYWlsdG86U3VyZXNoQGthbG9vbS5jb20+PiB3cm90 ZToNCiAgIEkgYW0gY29uc2lkZXJpbmcgQUQgc3BvbnNvcmluZyB0aGUgZm9sbG93aW5nIGRyYWZ0 DQoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iaS1zYXZpLXdsYW4tMTUNCg0K dGhhdCBkZXNjcmliZXMgYSBzb3VyY2UgYWRkcmVzcyB2YWxpZGF0aW9uIHNvbHV0aW9uIGZvciBX TEFOLiBJZiB5b3UgaGF2ZSBhbnkgY29uY2VybnMNCmVpdGhlciB3aXRoIHRoZSBjb250ZW50IG9m IHRoZSBkcmFmdCwgb3IgYWJvdXQgbWUgQUQgc3BvbnNvcmluZyBpdCBwbGVhc2UgbGV0IG1lIGtu b3cgYmVmb3JlIDIwMTgvMTEvMTguDQoNCkkgc2tpbW1lZCB0aGUgZHJhZnQuIEl0IGxvb2tzIHdl bGwtd3JpdHRlbiwgYW5kIGl0IGFkZHJlc3NlcyBhbiBpbXBvcnRhbnQgcHJvYmxlbSB3aGljaCBJ IHRoaW5rIGlzIHByb2JhYmx5IHNvbHZlZCBpbiAoZGlmZmVyZW50PykgcHJvcHJpZXRhcnkgd2F5 cyBvbiB2YXJpb3VzIGltcGxlbWVudGF0aW9ucyBpbiB0aGUgZmllbGQgdG9kYXkuIEknbSBub3Qg dmVyeSBmYW1pbGlhciB3aXRoIHRoZSBBRCBzcG9uc29yc2hpcCBwcm9jZXNzLCBzbyBub3Qgc3Vy ZSB3aGF0IHRoZSBoYXMgdG8gaGFwcGVuIGZyb20gYSBwcm9jZXNzIHBlcnNwZWN0aXZlLiBCdXQg SSB0aGluayB0aGUgZG9jdW1lbnQgcmVxdWlyZXMgZnVydGhlciByZXZpZXcsIGVzcGVjaWFsbHkg Z2l2ZW4gdGhhdCBpdCdzIG1ha2luZyBzdGF0ZW1lbnRzIGFib3V0IHZlcnkgd2lkZWx5LWRlcGxv eWVkIHNjZW5hcmlvcyAoSVB2NiBvdmVyIHdpZmkpLiBTaG91bGQgdGhlIGRvY3VtZW50IGJlIGFk b3B0ZWQgYnkgYSBXRyBzdWNoIGFzIDZtYW4gb3IgdjZvcHM/IElmIG5vdCwgaXQgc2hvdWxkIGRl ZmluaXRlbHkgYmUgcmV2aWV3ZWQgYnkgdGhvc2UgV0dzLg0KDQpBcyBhIGNvbmNyZXRlIGV4YW1w bGUsIGhlcmUgYXJlIHNvbWUgdGhpbmdzIHRoYXQgbmVlZCB0byBiZSByZXNvbHZlZCBiZWZvcmUg dGhlIGRvY3VtZW50IGFkdmFuY2VzOg0KDQogIDEuICBUaGUgcHJvcG9zZWQgc2NoZW1lIHJlbGll cyBvbiBEQUQgcGFja2V0cyB0byBjcmVhdGUgbWFwcGluZyBlbnRyaWVzLiBUaGF0IG1lYW5zIHRo YXQgaWYgYSBEQUQgcGFja2V0IGlzIGxvc3QgKHdoaWNoIGNhbiBoYXBwZW4gZXZlbiB0aG91Z2gg ODAyLjExIGVtcGxveXMgcmV0cmFuc21pc3Npb25zIGF0IEwyKSwgYSBzdGF0aW9uIGNvdWxkIGhh dmUgYW4gSVB2NiBhZGRyZXNzIHRoYXQgZG9lc24ndCB3b3JrIHdpdGggbm8gaW5kaWNhdGlvbiB0 aGF0IGl0J3Mgbm90IHdvcmtpbmcuIFRoaXMgaXMgYmFzaWNhbGx5IGEgbm9uLXJlY292ZXJhYmxl IG91dGFnZS4gUGVyaGFwcyB0aGUgZG9jdW1lbnQgc2hvdWxkIHNwZWNpZnkgYW5vdGhlciBzb2x1 dGlvbiBpbnN0ZWFkLCBlLmcuLCBpdCBjb3VsZCBzYXkgdGhhdCBtYXBwaW5nIGVudHJpZXMgY291 bGQgYmUgY3JlYXRlZCB3aGVuIGEgd2lyZWQgc3RhdGlvbiByZWNlaXZlcyBhIHNvbGljaXRlZCBO QSByZXNwb25zZSBmcm9tIGEgd2lyZWxlc3Mgc3RhdGlvbi4NCiAgMi4gIFRoZSBkb2N1bWVudCBz YXlzIHRoYXQgdGhlIGxpZmV0aW1lIG9mIFNMQUFDIGFkZHJlc3NlcyBpcyB0aGUgYWRkcmVzcyBs aWZldGltZSwgYnV0IHRoZSBuZXR3b3JrIGhhcyBubyB3YXkgb2Yga25vd2luZyB3aGF0IHRoZSBh ZGRyZXNzIGxpZmV0aW1lIGlzIGJlY2F1c2UgaXQgZGVwZW5kcyBvbiB3aGljaCBSQShzKSB0aGUg aG9zdCBoYXMgcmVjZWl2ZWQuDQoNCkNoZWVycywNCkxvcmVuem8NCg== --_000_da54096864fc4b508931eea7203ae8acXCHRCD001ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3 MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNv LWxpc3QtaWQ6NDc3NDk2MjAzOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxNDEwMTE0MjY0O30N Cm9sDQoJe21hcmdpbi1ib3R0b206MGNtO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGNtO30NCi0t Pjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0 PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4 dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4N CjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkRlYXIgYWxsJm5ic3A7OjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSIiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkkgYWdyZWUgd2l0 aCBMb3JlbnpvLCB0aGlzIHNjaGVtZSBpcyBhdCBhIGhpZ2ggbGV2ZWwgd2hhdCB3ZSBjYW4gZmlu ZCBpbiBjb21tZXJjaWFsIHByb2R1Y3RzLCBhbmQgSSBoYXZlIGZpcnN0LWhhbmQgZXhwZXJpZW5j ZSBvbiB0aGF0Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5B cyBhbiBpbmZvcm1hdGlvbmFsIGRvY3VtZW50LCB0aGlzIFJGQyBjb3VsZCBiZSBhIHVzZWZ1bCBy ZWZlcmVuY2UgdG8gY29uc2lkZXIgaWYgd2Ugd2VyZSB0byBjaGFuZ2UgdGhlIHByb3RvY29scyBp biBhIHdheSB0aGF0IHdvdWxkIGltcGFjdCB0aG9zZSBleGlzdGluZyBhbmQNCiBub24tc3RhbmRh cmQgc25vb3BpbmcgYmVoYXZpb3JzLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+U25vb3BpbmcgaGFzIHBy b3ZlbiB0byBiZSB2ZXJ5IHVzZWZ1bCwgYnV0IGFzIG9uZSBtYXkgZ3Vlc3MsIGl0IGlzIG5vdCBy ZWxpYWJsZTsgaXQgbWF5IG1pc3MgcGFja2V0cywgbWF5IGZhaWwgdG8gY3JlYXRlIGJpbmRpbmdz LCBtYXkgcG9pbnQgb24gYW4gaW5jb3JyZWN0IGxvY2F0aW9uDQogYXMgd2VsbC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlNvIEnigJlkIHNheSB0aGF0IGlmIHdl IHB1Ymxpc2ggYXMgUkZDLCAmbmJzcDt3ZSBzaG91bGQgYWxzbyBpbmRpY2F0ZSB0aGF0IHdpdGgg ZHJhZnQtaWV0Zi02bG8tYXAtbmQsIHdlICh3aWxsKSBoYXZlIGEgbW9yZSByb2J1c3Qgc29sdXRp b24gZm9yIGRldmljZXMgdGhhdCBhcmUgd2lsbGluZw0KIHRvIGFubm91bmNlIHRoZW1zZWx2ZXMu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5DaGVlcnMsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5QYXNjYWw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVl IDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBj bSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJv bTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IGlwdjYgJmx0O2lwdjYtYm91bmNlc0BpZXRm Lm9yZyZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+TG9yZW56byBDb2xpdHRpPGJyPg0KPGI+U2Vu dDo8L2I+IHZlbmRyZWRpIDE5IG9jdG9icmUgMjAxOCAwMjowNzxicj4NCjxiPlRvOjwvYj4gU3Vy ZXNoIEtyaXNobmFuICZsdDtTdXJlc2hAa2Fsb29tLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IHY2 b3BzQGlldGYub3JnIFdHICZsdDt2Nm9wc0BpZXRmLm9yZyZndDs7IElFVEYgSVB2NiBNYWlsaW5n IExpc3QgJmx0O2lwdjZAaWV0Zi5vcmcmZ3Q7OyBvcHNlY0BpZXRmLm9yZzsgZGhjd2dAaWV0Zi5v cmc7IGludC1hcmVhQGlldGYub3JnOyBvcHNhd2dAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtkaGN3Z10gQ29uc2lkZXJpbmcgQUQgc3BvbnNvcmluZyBkcmFmdC1iaS1zYXZpLXds YW4tMTU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5PbiBGcmksIE9jdCAxOSwgMjAxOCBhdCA3OjM4IEFNIFN1cmVzaCBL cmlzaG5hbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOlN1cmVzaEBrYWxvb20uY29tIj5TdXJlc2hAa2Fs b29tLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRk aW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwO0kgYW0gY29uc2lkZXJpbmcgQUQg c3BvbnNvcmluZyB0aGUgZm9sbG93aW5nIGRyYWZ0PGJyPg0KPGJyPg0KPGEgaHJlZj0iaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJpLXNhdmktd2xhbi0xNSIgdGFyZ2V0PSJfYmxh bmsiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iaS1zYXZpLXdsYW4tMTU8L2E+ PGJyPg0KPGJyPg0KdGhhdCBkZXNjcmliZXMgYSBzb3VyY2UgYWRkcmVzcyB2YWxpZGF0aW9uIHNv bHV0aW9uIGZvciBXTEFOLiBJZiB5b3UgaGF2ZSBhbnkgY29uY2VybnM8YnI+DQplaXRoZXIgd2l0 aCB0aGUgY29udGVudCBvZiB0aGUgZHJhZnQsIG9yIGFib3V0IG1lIEFEIHNwb25zb3JpbmcgaXQg cGxlYXNlIGxldCBtZSBrbm93IGJlZm9yZSAyMDE4LzExLzE4LjxvOnA+PC9vOnA+PC9wPg0KPC9i bG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBza2ltbWVkIHRoZSBk cmFmdC4mbmJzcDtJdCBsb29rcyB3ZWxsLXdyaXR0ZW4sIGFuZCBpdCBhZGRyZXNzZXMgYW4gaW1w b3J0YW50IHByb2JsZW0gd2hpY2ggSSB0aGluayBpcyBwcm9iYWJseSBzb2x2ZWQgaW4gKGRpZmZl cmVudD8pIHByb3ByaWV0YXJ5IHdheXMgb24gdmFyaW91cyBpbXBsZW1lbnRhdGlvbnMgaW4gdGhl IGZpZWxkIHRvZGF5LiBJJ20gbm90IHZlcnkgZmFtaWxpYXIgd2l0aCB0aGUgQUQgc3BvbnNvcnNo aXANCiBwcm9jZXNzLCBzbyBub3Qgc3VyZSB3aGF0IHRoZSBoYXMgdG8gaGFwcGVuIGZyb20gYSBw cm9jZXNzIHBlcnNwZWN0aXZlLiBCdXQgSSB0aGluayB0aGUgZG9jdW1lbnQgcmVxdWlyZXMgZnVy dGhlciByZXZpZXcsIGVzcGVjaWFsbHkgZ2l2ZW4gdGhhdCBpdCdzIG1ha2luZyBzdGF0ZW1lbnRz IGFib3V0IHZlcnkgd2lkZWx5LWRlcGxveWVkIHNjZW5hcmlvcyAoSVB2NiBvdmVyIHdpZmkpLiBT aG91bGQgdGhlIGRvY3VtZW50IGJlIGFkb3B0ZWQgYnkNCiBhIFdHIHN1Y2ggYXMgNm1hbiBvciB2 Nm9wcz8gSWYgbm90LCBpdCBzaG91bGQgZGVmaW5pdGVseSBiZSByZXZpZXdlZCBieSB0aG9zZSZu YnNwO1dHcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+QXMgYSBjb25jcmV0ZSBleGFtcGxlLCBoZXJlIGFyZSBzb21lIHRoaW5ncyB0aGF0IG5l ZWQgdG8gYmUgcmVzb2x2ZWQgYmVmb3JlIHRoZSBkb2N1bWVudCBhZHZhbmNlczo8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxvbCBzdGFydD0iMSIgdHlwZT0iMSI+DQo8bGkgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NClRoZSBwcm9wb3NlZCBzY2hl bWUgcmVsaWVzIG9uIERBRCBwYWNrZXRzIHRvIGNyZWF0ZSBtYXBwaW5nIGVudHJpZXMuIFRoYXQg bWVhbnMgdGhhdCBpZiBhIERBRCBwYWNrZXQgaXMgbG9zdCAod2hpY2ggY2FuIGhhcHBlbiBldmVu IHRob3VnaCA4MDIuMTEgZW1wbG95cyByZXRyYW5zbWlzc2lvbnMgYXQgTDIpLCBhIHN0YXRpb24g Y291bGQgaGF2ZSBhbiBJUHY2IGFkZHJlc3MgdGhhdCBkb2Vzbid0IHdvcmsgd2l0aCBubyBpbmRp Y2F0aW9uIHRoYXQNCiBpdCdzIG5vdCB3b3JraW5nLiBUaGlzIGlzIGJhc2ljYWxseSBhIG5vbi1y ZWNvdmVyYWJsZSBvdXRhZ2UuIFBlcmhhcHMgdGhlIGRvY3VtZW50IHNob3VsZCBzcGVjaWZ5IGFu b3RoZXIgc29sdXRpb24gaW5zdGVhZCwgZS5nLiwgaXQgY291bGQgc2F5IHRoYXQgbWFwcGluZyBl bnRyaWVzIGNvdWxkIGJlIGNyZWF0ZWQgd2hlbiBhIHdpcmVkIHN0YXRpb24gcmVjZWl2ZXMgYSBz b2xpY2l0ZWQgTkEgcmVzcG9uc2UgZnJvbSBhIHdpcmVsZXNzIHN0YXRpb24uPG86cD48L286cD48 L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KVGhl IGRvY3VtZW50IHNheXMgdGhhdCB0aGUgbGlmZXRpbWUgb2YgU0xBQUMgYWRkcmVzc2VzIGlzIHRo ZSBhZGRyZXNzIGxpZmV0aW1lLCBidXQgdGhlIG5ldHdvcmsgaGFzIG5vIHdheSBvZiBrbm93aW5n IHdoYXQgdGhlIGFkZHJlc3MgbGlmZXRpbWUgaXMgYmVjYXVzZSBpdCBkZXBlbmRzIG9uIHdoaWNo IFJBKHMpIHRoZSBob3N0IGhhcyByZWNlaXZlZC48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNoZWVycyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TG9yZW56bzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_da54096864fc4b508931eea7203ae8acXCHRCD001ciscocom_-- From nobody Fri Oct 19 08:23:03 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1C84130E74; Fri, 19 Oct 2018 08:23:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I6jKaJhbH8h0; Fri, 19 Oct 2018 08:22:59 -0700 (PDT) Received: from mail-ua1-x92d.google.com (mail-ua1-x92d.google.com [IPv6:2607:f8b0:4864:20::92d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16F5B130F17; Fri, 19 Oct 2018 08:22:59 -0700 (PDT) Received: by mail-ua1-x92d.google.com with SMTP id z8so7580406uap.13; Fri, 19 Oct 2018 08:22:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=qtrfN5iM4wJ7WzkelzZm4TMIuU3q/XCVpHF/WXdkV5A=; b=CuEP9Udbr7R0ZJdoy/LTyFGFlKrXDFvLjAoKH8P4icdLUY3mf9+nAnauEBOZMo11+s 8y9XFN8ybs0CVGC/UFK3Xa/RaE5yL7SxL/ctZEINgLPRdUNXHGM5UJ9qrnkp8+J/dwEl RcNzulNMZqT/MH2jzUCkeEOc1cyEhQ/nui1K4QI8NChwqEIKBGyMO6aFEUwM2/FRtRbU tPZlFqgXBX1I9663BPc1uTpF2X91E1yxa18KfoXXzSe8qZ/vM8HwluQW0Mf3tko3fez1 pBJIOeVh6Vp1SDbWrbURXVHS8WJRlok3qmSxI+gVok9Z0XiN9ORBvRndBXjMDp8JgEzd 1IeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=qtrfN5iM4wJ7WzkelzZm4TMIuU3q/XCVpHF/WXdkV5A=; b=YKHiIF0z7mjRGjm3pQ4iB24zh4krtqEcZGkfEx7Qo84NEvhr0KjSZVyGFTDGceTov/ ypQlJfauBj0x4qZfb0BWCL9LAf4nEIMNF18c3dbL4d9LyLf7YLNgWe+BtrJWX3MmvJ9+ cew7S8S9eYoborBK4vZT+oVtwSOgCvuOvCO0IzGAOoA7WTLU2zKk32hC6C8yrq1/lPDn fmVQw3tKj0Bnw/7XvL2f+uBFFihSO+ZwdCTEX3na3ra1XV9iuc0qtDTk2zPEhRfq9rZW TZeDyO73ZxTM/9tGRataJrSSPJphCxB4jghkCiO8AbWbh1bti05C54Ts2Y5JtTiV9LkE umnw== X-Gm-Message-State: ABuFfohaflhZ4Ch8XT0mdqnhZ+TMTHR0jm6E/9oMvod7vghMV+Y56eLF oCkvH7nDU2yyiElczWDYQhUIKHuNoXtpfCbNjNc= X-Google-Smtp-Source: ACcGV632lW6yajkPuFk7Kmqlfz5OqSID030j8jQLfZk6cCGzwJ1hMHbuiDba02WSuBsn7Qgy11Kc96frv+L2DR0GTwQ= X-Received: by 2002:a9f:308a:: with SMTP id j10mr5062731uab.28.1539962577387; Fri, 19 Oct 2018 08:22:57 -0700 (PDT) MIME-Version: 1.0 References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> In-Reply-To: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> From: Bernard Aboba Date: Fri, 19 Oct 2018 08:22:46 -0700 Message-ID: To: Suresh@kaloom.com Cc: int-area@ietf.org, opsawg@ietf.org, opsec@ietf.org, dstanley@arubanetworks.com, Dan Harkins Content-Type: multipart/alternative; boundary="0000000000006487e20578967a04" Archived-At: Subject: Re: [OPSEC] [Int-area] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2018 15:23:02 -0000 --0000000000006487e20578967a04 Content-Type: text/plain; charset="UTF-8" I took a look at the draft and found some fundamental problems. I would suggest review by IEEE 802.11 before proceeding. A few of the issues are noted below. In WLAN, a number of security mechanisms on link layer make MAC address a strong enough binding anchor, for instance, 802.11i, WAPI, WEP. [BA] WAPI and WEP are most certainly *not* "strong enough" for 802.11 security, let alone to be considered a "strong enough" binding mechanism. IEEE 802.11i has long ago been obsoleted by more recent IEEE 802.11 specifications, so I'd be concerned this is also not an appropriate reference. If MAC address has no protection, attackers can spoof MAC address to succeed in validation. [BA] While this statement is true, the inverse statement (that spoofing is prevented by protection) is not true. WLAN security does not prevent one authenticated station from spoofing multicast packets from another authenticated station. An individual procedure handles binding DHCP addresses to MAC addresses. This procedure snoops the DHCP address assignment procedure between attached hosts and DHCP server. DHCP snooping in WLAN is the same as that in wired network specified in RFC7513 [RFC7513 ]. An individual procedure handles binding stateless addresses to MAC addresses. This procedure snoops Duplicate Address Detection procedure. ND snooping in WLAN is the same as that in wired network specified in [RFC6620 ] [RFC6620 ]. [BA] These paragraphs do not mention ARP, so either the draft does not apply to IPv4 at all, or it cannot handle IPv4 static addresses. 2. A host leaves this access point. The entries for all related MAC addresses in MAC-IP table MUST be cleared. [BA] This advice, if implemented would break basic WLAN roaming functionality which allows a station to seamlessly move its point of attachment. On Thu, Oct 18, 2018 at 3:39 PM Suresh Krishnan wrote: > Hi all, > I am considering AD sponsoring the following draft > > https://tools.ietf.org/html/draft-bi-savi-wlan-15 > > that describes a source address validation solution for WLAN. If you have > any concerns > either with the content of the draft, or about me AD sponsoring it please > let me know before 2018/11/18. > > Thanks > Suresh > > NOTE: I have CCed: all the working groups that I thought could be > potentially > interested in this work. If you think I have missed out some WG(s) please > let > me know. > > _______________________________________________ > Int-area mailing list > Int-area@ietf.org > https://www.ietf.org/mailman/listinfo/int-area > --0000000000006487e20578967a04 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I took a look at the draft and found some fundamental prob= lems.=C2=A0 I would suggest review by IEEE 802.11 before proceeding.
A few of the issues are noted below.

= 
   In WLAN, a number of=
 security
   mechanisms on link layer make MAC address a strong enough binding
   anchor, for instance, 802.11i, WAPI, WEP.

[BA] WAPI and WEP are most certainly *not* "strong enoug=
h" for 802.11 security, let alone to be considered a "strong enou=
gh" binding mechanism. 
IEEE 802.11i has long ago been obsoleted by more recent IEEE 802=
.11 specifications, so I'd be concerned this is also not an appropriate=
 reference.

If MAC address has no protection, attackers can spoof MAC a=
ddress to succeed in validation.

[BA] While this statement is=
 true, the inverse statement (that spoofing is prevented by protection) is =
not true. 

WLAN security does not prevent one authenticated stati=
on from spoofing multicast packets from another authenticated station. 

   An individual procedure handles binding DHCP addresses to MAC
   addresses.  This procedure snoops the DHCP address assignment
   procedure between attached hosts and DHCP server.  DHCP snooping in
   WLAN is the same as that in wired network specified in RFC7513
   [RFC7513].

   An individual procedure handles binding stateless addresses to MAC
   addresses.  This procedure snoops Duplicate Address Detection
   procedure.  ND snooping in WLAN is the same as that in wired network
   specified in [RFC6620] [RFC6620].

<=
/pre>
[BA] These paragraphs do not mentio=
n ARP, so either the draft does not apply to IPv4 at all, or it cannot hand=
le IPv4 static addresses.

   2.  A host leaves this access point.=
  The entries for all related MAC
       addresses in MAC-IP table MUST be cleared.

[BA] This advic=
e, if implemented would break basic WLAN roaming functionality which allows=
 a station to seamlessly move its point of attachment.

On Thu, Oct 18, 2018 at= 3:39 PM Suresh Krishnan <Suresh@ka= loom.com> wrote:
Hi all,
=C2=A0 =C2=A0I am considering AD sponsoring the following draft

https://tools.ietf.org/html/draft-bi-savi-wlan-15

that describes a source address validation solution for WLAN. If you have a= ny concerns
either with the content of the draft, or about me AD sponsoring it please l= et me know before 2018/11/18.

Thanks
Suresh

NOTE: I have CCed: all the working groups that I thought could be potential= ly
interested in this work. If you think I have missed out some WG(s) please l= et
me know.

_______________________________________________
Int-area mailing list
Int-area@ietf.org
https://www.ietf.org/mailman/listinfo/int-area
--0000000000006487e20578967a04-- From nobody Sun Oct 21 13:19:33 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E46C8120072; Sun, 21 Oct 2018 13:19:31 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: opsec@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.87.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: opsec@ietf.org Message-ID: <154015317188.10661.14733475489776726002@ietfa.amsl.com> Date: Sun, 21 Oct 2018 13:19:31 -0700 Archived-At: Subject: [OPSEC] I-D Action: draft-ietf-opsec-urpf-improvements-01.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2018 20:19:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure WG of the IETF. Title : Enhanced Feasible-Path Unicast Reverse Path Filtering Authors : Kotikalapudi Sriram Doug Montgomery Jeffrey Haas Filename : draft-ietf-opsec-urpf-improvements-01.txt Pages : 16 Date : 2018-10-21 Abstract: This document identifies a need for improvement of the unicast Reverse Path Filtering techniques (uRPF) [BCP84] for source address validation (SAV) [BCP38]. The strict uRPF is inflexible about directionality, the loose uRPF is oblivious to directionality, and the current feasible-path uRPF attempts to strike a balance between the two [BCP84]. However, as shown in this draft, the existing feasible-path uRPF still has short comings. This document describes an enhanced feasible-path uRPF technique, which aims to be more flexible (in a meaningful way) about directionality than the feasible-path uRPF. It can potentially alleviate ISPs' concerns about the possibility of disrupting service for their customers, and encourage greater deployment of uRPF techniques. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsec-urpf-improvements/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-opsec-urpf-improvements-01 https://datatracker.ietf.org/doc/html/draft-ietf-opsec-urpf-improvements-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-urpf-improvements-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 22 13:31:33 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BABA130DD6; Mon, 22 Oct 2018 13:31:24 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: opsec@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.87.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: opsec@ietf.org Message-ID: <154024028460.13647.10255913381908457700@ietfa.amsl.com> Date: Mon, 22 Oct 2018 13:31:24 -0700 Archived-At: Subject: [OPSEC] I-D Action: draft-ietf-opsec-v6-14.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 20:31:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure WG of the IETF. Title : Operational Security Considerations for IPv6 Networks Authors : Eric Vyncke Kiran K. Chittimaneni Merike Kaeo Enno Rey Filename : draft-ietf-opsec-v6-14.txt Pages : 50 Date : 2018-10-22 Abstract: Knowledge and experience on how to operate IPv4 securely is available: whether it is the Internet or an enterprise internal network. However, IPv6 presents some new security challenges. RFC 4942 describes the security issues in the protocol but network managers also need a more practical, operations-minded document to enumerate advantages and/or disadvantages of certain choices. This document analyzes the operational security issues in several places of a network (enterprises, service providers and residential users) and proposes technical and procedural mitigations techniques. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-opsec-v6-14 https://datatracker.ietf.org/doc/html/draft-ietf-opsec-v6-14 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-v6-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 22 19:29:36 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A53B130E74; Mon, 22 Oct 2018 19:29:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=kaloom.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dt8YLsfCKHvU; Mon, 22 Oct 2018 19:29:07 -0700 (PDT) Received: from CAN01-QB1-obe.outbound.protection.outlook.com (mail-eopbgr660130.outbound.protection.outlook.com [40.107.66.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 090D4130F36; Mon, 22 Oct 2018 19:29:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kaloom.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gviCOrTXnc5P6q0Ry3ezOfze9Fjaz2+HdWP3Lvq4QRw=; b=JsIWn9ZLyj+TQfzr6+1RvA1/PVXHIdez/0SvlM5130cum52Yuo/rp2YxWsLfGZcvpSTuyKQdcO/QkPS+9vStg/aSSZNoRVTrfii9TsFuV4jp73C5RCaTy50MN3gxL3I2Hs/12DI7WJHkITqN2PzC5cP5ZHa0GY9flsvhhCg4pFU= Received: from YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM (10.169.141.148) by YQBPR01MB0162.CANPRD01.PROD.OUTLOOK.COM (10.169.141.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.30; Tue, 23 Oct 2018 02:29:04 +0000 Received: from YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM ([fe80::e9af:2ac3:bd40:e2ea]) by YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM ([fe80::e9af:2ac3:bd40:e2ea%3]) with mapi id 15.20.1250.028; Tue, 23 Oct 2018 02:29:04 +0000 From: Suresh Krishnan To: "Pascal Thubert (pthubert)" , Lorenzo Colitti , Bernard Aboba CC: "v6ops@ietf.org WG" , IETF IPv6 Mailing List , "opsec@ietf.org" , "dhcwg@ietf.org" , "int-area@ietf.org" , "opsawg@ietf.org" Thread-Topic: [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 Thread-Index: AQHUZzM4x98Ypd1MCEKu+GX87R2CxqUlsN0AgAD1IYCABXvvgA== Date: Tue, 23 Oct 2018 02:29:04 +0000 Message-ID: <3BB81D98-E70D-45B4-A99D-94AF29D89526@kaloom.com> References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Suresh@kaloom.com; x-originating-ip: [45.19.110.76] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; YQBPR01MB0162; 6:hKY6EHXUq5fsXAuQ5EDPGM9CMKwPtNNatWHwkRJWvqamtCGxdtoxkhuUBRhxl1gPFeJwCATZ8rgn6PlluRr8k0ayYiY2hNQ+dOyoW+QKZL/XgN125d8kE8+CRDqBTySRYs2G2pICYIUKvYYWADuyjleEO5IDZks9VcqAPyGHd7JFqohrTnYcRDZ8QSdZ0Ig4zol0buiUc/WN8+8DVPtd83C6zvljZzkaxXFrNDLrdwLK/d4VeuhVtl183YuSFIw3goqN4/QNZ3RpCby6RY4Ju+CjYmw8VuBGBOAtf/djyq/druGHuQvJfTSk9f5Cp/to0Rg156/k7p3keehuuPq+QaoN/pLnx5B+eVvhV32BWkarA158RIlSNqYJhFdivlLmezZpsyUedj+VIP2Br8RypuQhlByhi55X4/FHA9OOP9m+sLz7lyTc41ZMiB5+ATuvdHECCeYY7IjdJAf9ONIdtQ==; 5:KUmzyR2uMkFS4Vd8Nq+Y/vgyg5ihl2IuWkRWEGr+UEjGCTKsTEBm/JVNTY3JdsQKWXLoiaXgY1jguA/kNUKJNwPpBVgDSPAA2P+DRtz5m6a5L6c35NV/HZgSErNQnrfwI7bCH0oQTdyzs4dhJoE5UpPBK8YG5l7wZMwad6wyVqs=; 7:U7N5KMT5j/+AVcZfy3b+u/e8GeIEy6rXnUaZydJ/KNxTpL0LYrqoyh/d4rRUafmKEPoTibL6I/XQOORRFxR3hbpGcvOrc6rG+eGPTxyWR0o7H0drJiNkoN81QtVco09MXSvBQge/5W7IMXBcapfMbvJjh/EvyqHniOXnOrtU/Dxd81xoxm6SCvvncWBOByAGGhroevphOD7rX+G4ksVMORTJBeKLT/kpHaSRztDjFSfOPXVJZB4v05S9ygcqFho2 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 89f38d46-92a0-411b-42ae-08d6388f4d07 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:YQBPR01MB0162; x-ms-traffictypediagnostic: YQBPR01MB0162: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(3231355)(944501410)(52105095)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(2016111802025)(6043046)(201708071742011)(7699051)(76991095); SRVR:YQBPR01MB0162; BCL:0; PCL:0; RULEID:; SRVR:YQBPR01MB0162; x-forefront-prvs: 0834BAF534 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(346002)(39840400004)(396003)(366004)(376002)(199004)(189003)(83716004)(54906003)(54896002)(229853002)(508600001)(2900100001)(236005)(80792005)(105586002)(5250100002)(2906002)(71200400001)(476003)(39060400002)(72206003)(256004)(26005)(106356001)(36756003)(71190400001)(102836004)(76176011)(25786009)(4326008)(446003)(11346002)(2616005)(486006)(3846002)(97736004)(6116002)(81166006)(81156014)(6486002)(6436002)(316002)(606006)(6246003)(8676002)(186003)(86362001)(53546011)(99286004)(6506007)(14444005)(33656002)(966005)(14454004)(68736007)(53936002)(66066001)(6512007)(7736002)(8936002)(110136005)(82746002)(5660300001)(6306002); DIR:OUT; SFP:1102; SCL:1; SRVR:YQBPR01MB0162; H:YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: kaloom.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: GgZNIyAbYxucrAcJ7sF1ipgDR2kYGkpYyPyPkDN4Sp9qxHiUPw0arnrV0uPFK5AXJmaV6iV2GM7EjU7lVLiy63m28HKYsR+fUJSyCu+Q1xL+2wpHzG+3VB5GkhEaP15nqTrXHxVCovs16TmFElFmNJcW9F2jrATUkCdRC0wDiH+wAChRvV9UMSTD2cp9BGnox8iYaG2ac4fytCHwOlSE1j+cvaynTePKwCVUgoSa1pCvr45XP0pl49CFIGFv4Ud9gsFMwiogjNtaNXU2RcqgDaXHI/Knrkn6dy6n2gUgrWXsNBAp6jcGR6jRY77PoIirf96c+nIJYEOKbqnlfMr18Cs4/2wa1YlDL0WNsuCg/xQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_3BB81D98E70D45B4A99D94AF29D89526kaloomcom_" MIME-Version: 1.0 X-OriginatorOrg: kaloom.com X-MS-Exchange-CrossTenant-Network-Message-Id: 89f38d46-92a0-411b-42ae-08d6388f4d07 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Oct 2018 02:29:04.2679 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 47d58e26-f796-48e8-ac40-1c365c204513 X-MS-Exchange-Transport-CrossTenantHeadersStamped: YQBPR01MB0162 Archived-At: Subject: Re: [OPSEC] [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 02:29:12 -0000 --_000_3BB81D98E70D45B4A99D94AF29D89526kaloomcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIExvcmVuem8sIFBhc2NhbCBhbmQgQmVybmFyZCBmb3IgeW91ciBjb21tZW50cy4gSSBo YXZlIGFza2VkIHRoZSBhdXRob3JzIHRvIHJlc3BvbmQgdG8geW91ciBjb21tZW50cyBvbiB0aGUg aW50YXJlYSBtYWlsaW5nIGxpc3QuIEFsc28sIEJlcm5hcmQgc3VnZ2VzdGVkIGEgODAyLjExIHJl dmlldyBvZiB0aGlzIGRyYWZ0LCBhbmQgSSBpbnRlbmQgdG8gcHVyc3VlIHRoYXQgYXMgd2VsbCBp ZiB0aGUgZHJhZnQgcHJvZ3Jlc3Nlcy4gSSBjb3VsZCBub3QgZmluZCBhIFdHIHRoYXQgd291bGQg YmUgYSBleGFjdCBmaXQgZm9yIHRoaXMgd29yaywgYW5kIHRoYXQgaXMgd2h5IEkgZGVjaWRlZCB0 byBjYXN0IHRoZSBuZXQgd2lkZSBmb3IgcG90ZW50aWFsbHkgcmVsZXZhbnQgV0dzIGluIHRoZSBo b3BlIG9mIGdldHRpbmcgcmV2aWV3cy4gSSB3aWxsIGJlIGV4dHJlbWVseSBoYXBweSBpZiB0aGlz IGNhbiBiZSBob3N0ZWQgaW4gYSBXRyBpbnN0ZWFkIGFuZCBnZXQgc3VmZmljaWVudCByZXZpZXcg dGhlcmUuDQoNClJlZ2FyZHMNClN1cmVzaA0KDQpPbiBPY3QgMTksIDIwMTgsIGF0IDEwOjQ0IEFN LCBQYXNjYWwgVGh1YmVydCAocHRodWJlcnQpIDxwdGh1YmVydEBjaXNjby5jb208bWFpbHRvOnB0 aHViZXJ0QGNpc2NvLmNvbT4+IHdyb3RlOg0KDQpEZWFyIGFsbCA6DQoNCkkgYWdyZWUgd2l0aCBM b3JlbnpvLCB0aGlzIHNjaGVtZSBpcyBhdCBhIGhpZ2ggbGV2ZWwgd2hhdCB3ZSBjYW4gZmluZCBp biBjb21tZXJjaWFsIHByb2R1Y3RzLCBhbmQgSSBoYXZlIGZpcnN0LWhhbmQgZXhwZXJpZW5jZSBv biB0aGF0Lg0KDQpBcyBhbiBpbmZvcm1hdGlvbmFsIGRvY3VtZW50LCB0aGlzIFJGQyBjb3VsZCBi ZSBhIHVzZWZ1bCByZWZlcmVuY2UgdG8gY29uc2lkZXIgaWYgd2Ugd2VyZSB0byBjaGFuZ2UgdGhl IHByb3RvY29scyBpbiBhIHdheSB0aGF0IHdvdWxkIGltcGFjdCB0aG9zZSBleGlzdGluZyBhbmQg bm9uLXN0YW5kYXJkIHNub29waW5nIGJlaGF2aW9ycy4NClNub29waW5nIGhhcyBwcm92ZW4gdG8g YmUgdmVyeSB1c2VmdWwsIGJ1dCBhcyBvbmUgbWF5IGd1ZXNzLCBpdCBpcyBub3QgcmVsaWFibGU7 IGl0IG1heSBtaXNzIHBhY2tldHMsIG1heSBmYWlsIHRvIGNyZWF0ZSBiaW5kaW5ncywgbWF5IHBv aW50IG9uIGFuIGluY29ycmVjdCBsb2NhdGlvbiBhcyB3ZWxsLg0KDQpTbyBJ4oCZZCBzYXkgdGhh dCBpZiB3ZSBwdWJsaXNoIGFzIFJGQywgIHdlIHNob3VsZCBhbHNvIGluZGljYXRlIHRoYXQgd2l0 aCBkcmFmdC1pZXRmLTZsby1hcC1uZCwgd2UgKHdpbGwpIGhhdmUgYSBtb3JlIHJvYnVzdCBzb2x1 dGlvbiBmb3IgZGV2aWNlcyB0aGF0IGFyZSB3aWxsaW5nIHRvIGFubm91bmNlIHRoZW1zZWx2ZXMu DQoNCkNoZWVycywNCg0KUGFzY2FsDQpGcm9tOiBpcHY2IDxpcHY2LWJvdW5jZXNAaWV0Zi5vcmc8 bWFpbHRvOmlwdjYtYm91bmNlc0BpZXRmLm9yZz4+IE9uIEJlaGFsZiBPZiBMb3JlbnpvIENvbGl0 dGkNClNlbnQ6IHZlbmRyZWRpIDE5IG9jdG9icmUgMjAxOCAwMjowNw0KVG86IFN1cmVzaCBLcmlz aG5hbiA8U3VyZXNoQGthbG9vbS5jb208bWFpbHRvOlN1cmVzaEBrYWxvb20uY29tPj4NCkNjOiB2 Nm9wc0BpZXRmLm9yZzxtYWlsdG86djZvcHNAaWV0Zi5vcmc+IFdHIDx2Nm9wc0BpZXRmLm9yZzxt YWlsdG86djZvcHNAaWV0Zi5vcmc+PjsgSUVURiBJUHY2IE1haWxpbmcgTGlzdCA8aXB2NkBpZXRm Lm9yZzxtYWlsdG86aXB2NkBpZXRmLm9yZz4+OyBvcHNlY0BpZXRmLm9yZzxtYWlsdG86b3BzZWNA aWV0Zi5vcmc+OyBkaGN3Z0BpZXRmLm9yZzxtYWlsdG86ZGhjd2dAaWV0Zi5vcmc+OyBpbnQtYXJl YUBpZXRmLm9yZzxtYWlsdG86aW50LWFyZWFAaWV0Zi5vcmc+OyBvcHNhd2dAaWV0Zi5vcmc8bWFp bHRvOm9wc2F3Z0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbZGhjd2ddIENvbnNpZGVyaW5nIEFE IHNwb25zb3JpbmcgZHJhZnQtYmktc2F2aS13bGFuLTE1DQoNCk9uIEZyaSwgT2N0IDE5LCAyMDE4 IGF0IDc6MzggQU0gU3VyZXNoIEtyaXNobmFuIDxTdXJlc2hAa2Fsb29tLmNvbTxtYWlsdG86U3Vy ZXNoQGthbG9vbS5jb20+PiB3cm90ZToNCiAgIEkgYW0gY29uc2lkZXJpbmcgQUQgc3BvbnNvcmlu ZyB0aGUgZm9sbG93aW5nIGRyYWZ0DQoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1iaS1zYXZpLXdsYW4tMTUNCg0KdGhhdCBkZXNjcmliZXMgYSBzb3VyY2UgYWRkcmVzcyB2YWxp ZGF0aW9uIHNvbHV0aW9uIGZvciBXTEFOLiBJZiB5b3UgaGF2ZSBhbnkgY29uY2VybnMNCmVpdGhl ciB3aXRoIHRoZSBjb250ZW50IG9mIHRoZSBkcmFmdCwgb3IgYWJvdXQgbWUgQUQgc3BvbnNvcmlu ZyBpdCBwbGVhc2UgbGV0IG1lIGtub3cgYmVmb3JlIDIwMTgvMTEvMTguDQoNCkkgc2tpbW1lZCB0 aGUgZHJhZnQuIEl0IGxvb2tzIHdlbGwtd3JpdHRlbiwgYW5kIGl0IGFkZHJlc3NlcyBhbiBpbXBv cnRhbnQgcHJvYmxlbSB3aGljaCBJIHRoaW5rIGlzIHByb2JhYmx5IHNvbHZlZCBpbiAoZGlmZmVy ZW50PykgcHJvcHJpZXRhcnkgd2F5cyBvbiB2YXJpb3VzIGltcGxlbWVudGF0aW9ucyBpbiB0aGUg ZmllbGQgdG9kYXkuIEknbSBub3QgdmVyeSBmYW1pbGlhciB3aXRoIHRoZSBBRCBzcG9uc29yc2hp cCBwcm9jZXNzLCBzbyBub3Qgc3VyZSB3aGF0IHRoZSBoYXMgdG8gaGFwcGVuIGZyb20gYSBwcm9j ZXNzIHBlcnNwZWN0aXZlLiBCdXQgSSB0aGluayB0aGUgZG9jdW1lbnQgcmVxdWlyZXMgZnVydGhl ciByZXZpZXcsIGVzcGVjaWFsbHkgZ2l2ZW4gdGhhdCBpdCdzIG1ha2luZyBzdGF0ZW1lbnRzIGFi b3V0IHZlcnkgd2lkZWx5LWRlcGxveWVkIHNjZW5hcmlvcyAoSVB2NiBvdmVyIHdpZmkpLiBTaG91 bGQgdGhlIGRvY3VtZW50IGJlIGFkb3B0ZWQgYnkgYSBXRyBzdWNoIGFzIDZtYW4gb3IgdjZvcHM/ IElmIG5vdCwgaXQgc2hvdWxkIGRlZmluaXRlbHkgYmUgcmV2aWV3ZWQgYnkgdGhvc2UgV0dzLg0K DQpBcyBhIGNvbmNyZXRlIGV4YW1wbGUsIGhlcmUgYXJlIHNvbWUgdGhpbmdzIHRoYXQgbmVlZCB0 byBiZSByZXNvbHZlZCBiZWZvcmUgdGhlIGRvY3VtZW50IGFkdmFuY2VzOg0KDQogIDEuICBUaGUg cHJvcG9zZWQgc2NoZW1lIHJlbGllcyBvbiBEQUQgcGFja2V0cyB0byBjcmVhdGUgbWFwcGluZyBl bnRyaWVzLiBUaGF0IG1lYW5zIHRoYXQgaWYgYSBEQUQgcGFja2V0IGlzIGxvc3QgKHdoaWNoIGNh biBoYXBwZW4gZXZlbiB0aG91Z2ggODAyLjExIGVtcGxveXMgcmV0cmFuc21pc3Npb25zIGF0IEwy KSwgYSBzdGF0aW9uIGNvdWxkIGhhdmUgYW4gSVB2NiBhZGRyZXNzIHRoYXQgZG9lc24ndCB3b3Jr IHdpdGggbm8gaW5kaWNhdGlvbiB0aGF0IGl0J3Mgbm90IHdvcmtpbmcuIFRoaXMgaXMgYmFzaWNh bGx5IGEgbm9uLXJlY292ZXJhYmxlIG91dGFnZS4gUGVyaGFwcyB0aGUgZG9jdW1lbnQgc2hvdWxk IHNwZWNpZnkgYW5vdGhlciBzb2x1dGlvbiBpbnN0ZWFkLCBlLmcuLCBpdCBjb3VsZCBzYXkgdGhh dCBtYXBwaW5nIGVudHJpZXMgY291bGQgYmUgY3JlYXRlZCB3aGVuIGEgd2lyZWQgc3RhdGlvbiBy ZWNlaXZlcyBhIHNvbGljaXRlZCBOQSByZXNwb25zZSBmcm9tIGEgd2lyZWxlc3Mgc3RhdGlvbi4N CiAgMi4gIFRoZSBkb2N1bWVudCBzYXlzIHRoYXQgdGhlIGxpZmV0aW1lIG9mIFNMQUFDIGFkZHJl c3NlcyBpcyB0aGUgYWRkcmVzcyBsaWZldGltZSwgYnV0IHRoZSBuZXR3b3JrIGhhcyBubyB3YXkg b2Yga25vd2luZyB3aGF0IHRoZSBhZGRyZXNzIGxpZmV0aW1lIGlzIGJlY2F1c2UgaXQgZGVwZW5k cyBvbiB3aGljaCBSQShzKSB0aGUgaG9zdCBoYXMgcmVjZWl2ZWQuDQoNCg0KQ2hlZXJzLA0KTG9y ZW56bw0KDQo= --_000_3BB81D98E70D45B4A99D94AF29D89526kaloomcom_ Content-Type: text/html; charset="utf-8" Content-ID: <767D1F02DBE92B478CDD331395A093C9@CANPRD01.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClRoYW5rcyBMb3JlbnpvLCBQYXNjYWwgYW5kIEJl cm5hcmQgZm9yIHlvdXIgY29tbWVudHMuIEkgaGF2ZSBhc2tlZCB0aGUgYXV0aG9ycyB0byByZXNw b25kIHRvIHlvdXIgY29tbWVudHMgb24gdGhlIGludGFyZWEgbWFpbGluZyBsaXN0LiBBbHNvLCBC ZXJuYXJkIHN1Z2dlc3RlZCBhIDgwMi4xMSByZXZpZXcgb2YgdGhpcyBkcmFmdCwgYW5kIEkgaW50 ZW5kIHRvIHB1cnN1ZSB0aGF0IGFzIHdlbGwgaWYgdGhlIGRyYWZ0IHByb2dyZXNzZXMuIEkgY291 bGQNCiBub3QgZmluZCBhIFdHIHRoYXQgd291bGQgYmUgYSBleGFjdCBmaXQgZm9yIHRoaXMgd29y aywgYW5kIHRoYXQgaXMgd2h5IEkgZGVjaWRlZCB0byBjYXN0IHRoZSBuZXQgd2lkZSBmb3IgcG90 ZW50aWFsbHkgcmVsZXZhbnQgV0dzIGluIHRoZSBob3BlIG9mIGdldHRpbmcgcmV2aWV3cy4gSSB3 aWxsIGJlIGV4dHJlbWVseSBoYXBweSBpZiB0aGlzIGNhbiBiZSBob3N0ZWQgaW4gYSBXRyBpbnN0 ZWFkIGFuZCBnZXQgc3VmZmljaWVudCByZXZpZXcgdGhlcmUuDQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5SZWdhcmRzPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPlN1cmVzaDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPGJs b2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIE9jdCAxOSwg MjAxOCwgYXQgMTA6NDQgQU0sIFBhc2NhbCBUaHViZXJ0IChwdGh1YmVydCkgJmx0OzxhIGhyZWY9 Im1haWx0bzpwdGh1YmVydEBjaXNjby5jb20iIGNsYXNzPSIiPnB0aHViZXJ0QGNpc2NvLmNvbTwv YT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5l Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdl OiBXb3JkU2VjdGlvbjE7IGNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBI ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBs YW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+RGVhciBhbGwmbmJz cDs6PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkZSIiBz dHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsg Y29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwv bzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xh c3M9IiI+SSBhZ3JlZSB3aXRoIExvcmVuem8sIHRoaXMgc2NoZW1lIGlzIGF0IGEgaGlnaCBsZXZl bCB3aGF0IHdlIGNhbiBmaW5kIGluIGNvbW1lcmNpYWwgcHJvZHVjdHMsIGFuZCBJIGhhdmUgZmly c3QtaGFuZCBleHBlcmllbmNlIG9uIHRoYXQuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20g MGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7IiBjbGFzcz0iIj5BcyBhbiBpbmZvcm1hdGlvbmFsIGRvY3VtZW50LCB0aGlzIFJG QyBjb3VsZCBiZSBhIHVzZWZ1bCByZWZlcmVuY2UgdG8gY29uc2lkZXIgaWYgd2Ugd2VyZSB0byBj aGFuZ2UgdGhlIHByb3RvY29scyBpbiBhIHdheSB0aGF0IHdvdWxkIGltcGFjdCB0aG9zZSBleGlz dGluZyBhbmQNCiBub24tc3RhbmRhcmQgc25vb3BpbmcgYmVoYXZpb3JzLjxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv c3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJp ZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+ U25vb3BpbmcgaGFzIHByb3ZlbiB0byBiZSB2ZXJ5IHVzZWZ1bCwgYnV0IGFzIG9uZSBtYXkgZ3Vl c3MsIGl0IGlzIG5vdCByZWxpYWJsZTsgaXQgbWF5IG1pc3MgcGFja2V0cywgbWF5IGZhaWwgdG8g Y3JlYXRlIGJpbmRpbmdzLCBtYXkgcG9pbnQgb24gYW4gaW5jb3JyZWN0IGxvY2F0aW9uDQogYXMg d2VsbC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBy Z2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3Nw YW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7 IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBD YWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPlNv IEnigJlkIHNheSB0aGF0IGlmIHdlIHB1Ymxpc2ggYXMgUkZDLCAmbmJzcDt3ZSBzaG91bGQgYWxz byBpbmRpY2F0ZSB0aGF0IHdpdGggZHJhZnQtaWV0Zi02bG8tYXAtbmQsIHdlICh3aWxsKSBoYXZl IGEgbW9yZSByb2J1c3Qgc29sdXRpb24gZm9yIGRldmljZXMgdGhhdCBhcmUgd2lsbGluZw0KIHRv IGFubm91bmNlIHRoZW1zZWx2ZXMuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAu MDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEy NSk7IiBjbGFzcz0iIj5DaGVlcnMsPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAu MDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEy NSk7IiBjbGFzcz0iIj5QYXNjYWw8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxk aXYgc3R5bGU9ImJvcmRlci1zdHlsZTogbm9uZSBub25lIG5vbmUgc29saWQ7IGJvcmRlci1sZWZ0 LXdpZHRoOiAxLjVwdDsgYm9yZGVyLWxlZnQtY29sb3I6IGJsdWU7IHBhZGRpbmc6IDBjbSAwY20g MGNtIDRwdDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImJvcmRlci1z dHlsZTogc29saWQgbm9uZSBub25lOyBib3JkZXItdG9wLXdpZHRoOiAxcHQ7IGJvcmRlci10b3At Y29sb3I6IHJnYigyMjUsIDIyNSwgMjI1KTsgcGFkZGluZzogM3B0IDBjbSAwY207IiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNz PSIiPg0KPGIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+aXB2NiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlwdjYtYm91bmNlc0BpZXRmLm9yZyIgY2xhc3M9 IiI+aXB2Ni1ib3VuY2VzQGlldGYub3JnPC9hPiZndDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGIgY2xhc3M9IiI+T24NCiBCZWhhbGYgT2Y8c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPkxvcmVuem8gQ29s aXR0aTxiciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJBcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj52ZW5kcmVkaSAxOSBvY3RvYnJlIDIwMTgg MDI6MDc8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5Ubzo8L2I+PHNwYW4gY2xhc3M9IkFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlN1cmVzaCBLcmlzaG5hbiAmbHQ7PGEgaHJl Zj0ibWFpbHRvOlN1cmVzaEBrYWxvb20uY29tIiBjbGFzcz0iIj5TdXJlc2hAa2Fsb29tLmNvbTwv YT4mZ3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJBcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86djZvcHNAaWV0 Zi5vcmciIGNsYXNzPSIiPnY2b3BzQGlldGYub3JnPC9hPiBXRyAmbHQ7PGEgaHJlZj0ibWFpbHRv OnY2b3BzQGlldGYub3JnIiBjbGFzcz0iIj52Nm9wc0BpZXRmLm9yZzwvYT4mZ3Q7OyBJRVRGIElQ djYgTWFpbGluZyBMaXN0ICZsdDs8YSBocmVmPSJtYWlsdG86aXB2NkBpZXRmLm9yZyIgY2xhc3M9 IiI+aXB2NkBpZXRmLm9yZzwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm9wc2VjQGlldGYub3Jn IiBjbGFzcz0iIj5vcHNlY0BpZXRmLm9yZzwvYT47IDxhIGhyZWY9Im1haWx0bzpkaGN3Z0BpZXRm Lm9yZyIgY2xhc3M9IiI+DQpkaGN3Z0BpZXRmLm9yZzwvYT47IDxhIGhyZWY9Im1haWx0bzppbnQt YXJlYUBpZXRmLm9yZyIgY2xhc3M9IiI+aW50LWFyZWFAaWV0Zi5vcmc8L2E+Ow0KPGEgaHJlZj0i bWFpbHRvOm9wc2F3Z0BpZXRmLm9yZyIgY2xhc3M9IiI+b3BzYXdnQGlldGYub3JnPC9hPjxiciBj bGFzcz0iIj4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW2RoY3dnXSBDb25zaWRlcmluZyBBRCBzcG9u c29yaW5nIGRyYWZ0LWJpLXNhdmktd2xhbi0xNTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KT24gRnJp LCBPY3QgMTksIDIwMTggYXQgNzozOCBBTSBTdXJlc2ggS3Jpc2huYW4gJmx0OzxhIGhyZWY9Im1h aWx0bzpTdXJlc2hAa2Fsb29tLmNvbSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+U3VyZXNoQGthbG9vbS5jb208L2E+Jmd0OyB3cm90 ZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyLXN0eWxlOiBub25lIG5vbmUgbm9uZSBzb2xpZDsgYm9yZGVyLWxlZnQtd2lkdGg6IDFw dDsgYm9yZGVyLWxlZnQtY29sb3I6IHJnYigyMDQsIDIwNCwgMjA0KTsgcGFkZGluZzogMGNtIDBj bSAwY20gNnB0OyBtYXJnaW4tbGVmdDogNC44cHQ7IG1hcmdpbi1yaWdodDogMGNtOyIgY2xhc3M9 IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFz cz0iIj4NCiZuYnNwOyAmbmJzcDtJIGFtIGNvbnNpZGVyaW5nIEFEIHNwb25zb3JpbmcgdGhlIGZv bGxvd2luZyBkcmFmdDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1iaS1zYXZpLXdsYW4tMTUiIHRhcmdldD0iX2Js YW5rIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBj bGFzcz0iIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYmktc2F2aS13bGFuLTE1 PC9hPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCnRoYXQgZGVzY3JpYmVzIGEgc291cmNl IGFkZHJlc3MgdmFsaWRhdGlvbiBzb2x1dGlvbiBmb3IgV0xBTi4gSWYgeW91IGhhdmUgYW55IGNv bmNlcm5zPGJyIGNsYXNzPSIiPg0KZWl0aGVyIHdpdGggdGhlIGNvbnRlbnQgb2YgdGhlIGRyYWZ0 LCBvciBhYm91dCBtZSBBRCBzcG9uc29yaW5nIGl0IHBsZWFzZSBsZXQgbWUga25vdyBiZWZvcmUg MjAxOC8xMS8xOC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJp ZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBz ZXJpZjsiIGNsYXNzPSIiPg0KSSBza2ltbWVkIHRoZSBkcmFmdC4mbmJzcDtJdCBsb29rcyB3ZWxs LXdyaXR0ZW4sIGFuZCBpdCBhZGRyZXNzZXMgYW4gaW1wb3J0YW50IHByb2JsZW0gd2hpY2ggSSB0 aGluayBpcyBwcm9iYWJseSBzb2x2ZWQgaW4gKGRpZmZlcmVudD8pIHByb3ByaWV0YXJ5IHdheXMg b24gdmFyaW91cyBpbXBsZW1lbnRhdGlvbnMgaW4gdGhlIGZpZWxkIHRvZGF5LiBJJ20gbm90IHZl cnkgZmFtaWxpYXIgd2l0aCB0aGUgQUQgc3BvbnNvcnNoaXAgcHJvY2Vzcywgc28gbm90DQogc3Vy ZSB3aGF0IHRoZSBoYXMgdG8gaGFwcGVuIGZyb20gYSBwcm9jZXNzIHBlcnNwZWN0aXZlLiBCdXQg SSB0aGluayB0aGUgZG9jdW1lbnQgcmVxdWlyZXMgZnVydGhlciByZXZpZXcsIGVzcGVjaWFsbHkg Z2l2ZW4gdGhhdCBpdCdzIG1ha2luZyBzdGF0ZW1lbnRzIGFib3V0IHZlcnkgd2lkZWx5LWRlcGxv eWVkIHNjZW5hcmlvcyAoSVB2NiBvdmVyIHdpZmkpLiBTaG91bGQgdGhlIGRvY3VtZW50IGJlIGFk b3B0ZWQgYnkgYSBXRyBzdWNoIGFzIDZtYW4NCiBvciB2Nm9wcz8gSWYgbm90LCBpdCBzaG91bGQg ZGVmaW5pdGVseSBiZSByZXZpZXdlZCBieSB0aG9zZSZuYnNwO1dHcy48bzpwIGNsYXNzPSIiPjwv bzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw Y20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNw OzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQpBcyBhIGNvbmNyZXRlIGV4 YW1wbGUsIGhlcmUgYXJlIHNvbWUgdGhpbmdzIHRoYXQgbmVlZCB0byBiZSByZXNvbHZlZCBiZWZv cmUgdGhlIGRvY3VtZW50IGFkdmFuY2VzOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8b2wgc3RhcnQ9IjEiIHR5cGU9IjEiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOiAwY207IiBjbGFzcz0iIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyI+DQpUaGUgcHJvcG9zZWQgc2NoZW1lIHJl bGllcyBvbiBEQUQgcGFja2V0cyB0byBjcmVhdGUgbWFwcGluZyBlbnRyaWVzLiBUaGF0IG1lYW5z IHRoYXQgaWYgYSBEQUQgcGFja2V0IGlzIGxvc3QgKHdoaWNoIGNhbiBoYXBwZW4gZXZlbiB0aG91 Z2ggODAyLjExIGVtcGxveXMgcmV0cmFuc21pc3Npb25zIGF0IEwyKSwgYSBzdGF0aW9uIGNvdWxk IGhhdmUgYW4gSVB2NiBhZGRyZXNzIHRoYXQgZG9lc24ndCB3b3JrIHdpdGggbm8gaW5kaWNhdGlv biB0aGF0DQogaXQncyBub3Qgd29ya2luZy4gVGhpcyBpcyBiYXNpY2FsbHkgYSBub24tcmVjb3Zl cmFibGUgb3V0YWdlLiBQZXJoYXBzIHRoZSBkb2N1bWVudCBzaG91bGQgc3BlY2lmeSBhbm90aGVy IHNvbHV0aW9uIGluc3RlYWQsIGUuZy4sIGl0IGNvdWxkIHNheSB0aGF0IG1hcHBpbmcgZW50cmll cyBjb3VsZCBiZSBjcmVhdGVkIHdoZW4gYSB3aXJlZCBzdGF0aW9uIHJlY2VpdmVzIGEgc29saWNp dGVkIE5BIHJlc3BvbnNlIGZyb20gYSB3aXJlbGVzcyBzdGF0aW9uLjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAw MDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LCBzZXJpZjsiPg0KVGhlIGRvY3VtZW50IHNheXMgdGhhdCB0aGUgbGlmZXRpbWUgb2Yg U0xBQUMgYWRkcmVzc2VzIGlzIHRoZSBhZGRyZXNzIGxpZmV0aW1lLCBidXQgdGhlIG5ldHdvcmsg aGFzIG5vIHdheSBvZiBrbm93aW5nIHdoYXQgdGhlIGFkZHJlc3MgbGlmZXRpbWUgaXMgYmVjYXVz ZSBpdCBkZXBlbmRzIG9uIHdoaWNoIFJBKHMpIHRoZSBob3N0IGhhcyByZWNlaXZlZC48bzpwIGNs YXNzPSIiPjwvbzpwPjwvbGk+PC9vbD4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCkNoZWVycyw8bzpw IGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4N CkxvcmVuem88L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jv ZHk+DQo8L2h0bWw+DQo= --_000_3BB81D98E70D45B4A99D94AF29D89526kaloomcom_-- From nobody Mon Oct 22 21:06:09 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FF9C130F50 for ; Mon, 22 Oct 2018 21:05:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.5 X-Spam-Level: X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EnFAy_POKXsr for ; Mon, 22 Oct 2018 21:05:53 -0700 (PDT) Received: from mail-it1-x129.google.com (mail-it1-x129.google.com [IPv6:2607:f8b0:4864:20::129]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17D3F130F2A for ; Mon, 22 Oct 2018 21:05:44 -0700 (PDT) Received: by mail-it1-x129.google.com with SMTP id k206-v6so316555ite.0 for ; Mon, 22 Oct 2018 21:05:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=k+HzzJJHq6KPCjImtGoJpgG+9AtIknSpNXA3o0FE5sg=; b=nNrwHnf0Rn0UdKqlFgLkuVRCO189oINy6tVP+36T3qNvITeKJdH73rF77uH0lKzOMM +84m6y7ZkiOHC0RADlFKNiKFWkS7pUH5XHYT+erH8SxWIaCDHKqhZNno0EhE5MFMftYA GwZUDQTU1Lr090DRFsnIX8JYpCI5plXAmM5TaSC5VhYzeInEOr7+zAB/CSKe32N2zv3V yZQcnJdUhG9fvvk5FdU5JdYDh/V5Txf2Bz+is2sVck7YhKihRx905vnUH9LwpE8FLIgU r1rVa9tcfUgsnqEYFR/IuaiSM0LUOpf4imF0WoBNqtTd1oW/gwI8iFeRGEvN1woGCOq8 5hBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=k+HzzJJHq6KPCjImtGoJpgG+9AtIknSpNXA3o0FE5sg=; b=Zu2vBqdNBv3ywomQMbeKBE1CLYK0AEylh048qxLIAJIcpad9AlQtVosCKDnzEz7Ln/ IKvuAxvd07M+JXjjCgEXMg4u9S+chqpMouwEHnZrJ/TLdxGjLeJylIqBqHfXffqzrDav XMiQ0y43Bfe3DSlEB1qTWrZqax39bOLqgbl1i183mhRCF6tLiycSI9eGtsH4Sh+URWqH AKOi7ZjnvRdo2hUfoogwgqYHC8dRIju7Hut/XeLN6u4xg8oc3IXKHtJBj2bkGnzKh1Cd OPCIqDK8QKMld8oB8uaP7WctZbRVq1USXEJXCA7pTurWHCLsd88wRVTIJZszL35V22Uy Qkbg== X-Gm-Message-State: AGRZ1gKXyGV3LZf+YRNGjkgZMiqwe7jTld1yiSaXP3FG3zPh8ru+cKVA FyVJ8XRzpQSWfFxmg2DLroyzmJ4Mn1+hBfqbwYtYEA== X-Google-Smtp-Source: AJdET5cqsiLZUUTTOYGJrpL3o/DohDPeDpNgoNveFXJhy1yVSTl/r4dO35soZh/iYkspkdHDq2Hl5uNRPxUyuxmzALU= X-Received: by 2002:a24:cb81:: with SMTP id u123-v6mr1206883itg.24.1540267542958; Mon, 22 Oct 2018 21:05:42 -0700 (PDT) MIME-Version: 1.0 References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> <3BB81D98-E70D-45B4-A99D-94AF29D89526@kaloom.com> In-Reply-To: <3BB81D98-E70D-45B4-A99D-94AF29D89526@kaloom.com> From: Lorenzo Colitti Date: Tue, 23 Oct 2018 13:05:30 +0900 Message-ID: To: Suresh Krishnan Cc: "Pascal Thubert (pthubert)" , lorenzo=40google.com@dmarc.ietf.org, Bernard Aboba , "v6ops@ietf.org WG" , int-area@ietf.org, IETF IPv6 Mailing List , opsec@ietf.org, dhcwg@ietf.org, opsawg@ietf.org Content-Type: multipart/alternative; boundary="000000000000c24be40578dd7b36" Archived-At: Subject: Re: [OPSEC] [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 04:06:03 -0000 --000000000000c24be40578dd7b36 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Isn't v6ops a natural fit for this, since it essentially documents an operational practice that is implemented by real hardware? On Tue, Oct 23, 2018 at 11:29 AM Suresh Krishnan wrote: > Thanks Lorenzo, Pascal and Bernard for your comments. I have asked the > authors to respond to your comments on the intarea mailing list. Also, > Bernard suggested a 802.11 review of this draft, and I intend to pursue > that as well if the draft progresses. I could not find a WG that would be= a > exact fit for this work, and that is why I decided to cast the net wide f= or > potentially relevant WGs in the hope of getting reviews. I will be > extremely happy if this can be hosted in a WG instead and get sufficient > review there. > > Regards > Suresh > > On Oct 19, 2018, at 10:44 AM, Pascal Thubert (pthubert) < > pthubert@cisco.com> wrote: > > Dear all : > > I agree with Lorenzo, this scheme is at a high level what we can find in > commercial products, and I have first-hand experience on that. > > As an informational document, this RFC could be a useful reference to > consider if we were to change the protocols in a way that would impact > those existing and non-standard snooping behaviors. > Snooping has proven to be very useful, but as one may guess, it is not > reliable; it may miss packets, may fail to create bindings, may point on = an > incorrect location as well. > > So I=E2=80=99d say that if we publish as RFC, we should also indicate th= at with > draft-ietf-6lo-ap-nd, we (will) have a more robust solution for devices > that are willing to announce themselves. > > Cheers, > > Pascal > *From:* ipv6 *On Behalf Of *Lorenzo Colitti > *Sent:* vendredi 19 octobre 2018 02:07 > *To:* Suresh Krishnan > *Cc:* v6ops@ietf.org WG ; IETF IPv6 Mailing List < > ipv6@ietf.org>; opsec@ietf.org; dhcwg@ietf.org; int-area@ietf.org; > opsawg@ietf.org > *Subject:* Re: [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 > > On Fri, Oct 19, 2018 at 7:38 AM Suresh Krishnan wrote= : > > I am considering AD sponsoring the following draft > > https://tools.ietf.org/html/draft-bi-savi-wlan-15 > > that describes a source address validation solution for WLAN. If you have > any concerns > either with the content of the draft, or about me AD sponsoring it please > let me know before 2018/11/18. > > > I skimmed the draft. It looks well-written, and it addresses an important > problem which I think is probably solved in (different?) proprietary ways > on various implementations in the field today. I'm not very familiar with > the AD sponsorship process, so not sure what the has to happen from a > process perspective. But I think the document requires further review, > especially given that it's making statements about very widely-deployed > scenarios (IPv6 over wifi). Should the document be adopted by a WG such a= s > 6man or v6ops? If not, it should definitely be reviewed by those WGs. > > As a concrete example, here are some things that need to be resolved > before the document advances: > > 1. The proposed scheme relies on DAD packets to create mapping > entries. That means that if a DAD packet is lost (which can happen eve= n > though 802.11 employs retransmissions at L2), a station could have an = IPv6 > address that doesn't work with no indication that it's not working. Th= is is > basically a non-recoverable outage. Perhaps the document should specif= y > another solution instead, e.g., it could say that mapping entries coul= d be > created when a wired station receives a solicited NA response from a > wireless station. > 2. The document says that the lifetime of SLAAC addresses is the > address lifetime, but the network has no way of knowing what the addre= ss > lifetime is because it depends on which RA(s) the host has received. > > > Cheers, > Lorenzo > > > _______________________________________________ > dhcwg mailing list > dhcwg@ietf.org > https://www.ietf.org/mailman/listinfo/dhcwg > --000000000000c24be40578dd7b36 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Isn't v6ops a natural fit for this, since it essential= ly documents an operational practice that is implemented by real hardware?<= /div>
On Tue, Oct 23, 2018 a= t 11:29 AM Suresh Krishnan <Suresh@= kaloom.com> wrote:
Thanks Lorenzo, Pascal and Bernard for your comments. I have asked the auth= ors to respond to your comments on the intarea mailing list. Also, Bernard = suggested a 802.11 review of this draft, and I intend to pursue that as wel= l if the draft progresses. I could not find a WG that would be a exact fit for this work, and that is why I d= ecided to cast the net wide for potentially relevant WGs in the hope of get= ting reviews. I will be extremely happy if this can be hosted in a WG inste= ad and get sufficient review there.

Regards
Suresh

On Oct 19, 2018, at 10:44 AM, Pascal Thubert (pthubert) <pthubert@cisco.com> wr= ote:

Dear all=C2=A0:
=C2=A0
I agree with Lorenzo, this scheme is at a high level what we can fi= nd in commercial products, and I have first-hand experience on that.=
=C2=A0
As an informational document, this RFC could be a useful reference = to consider if we were to change the protocols in a way that would impact t= hose existing and non-standard snooping behaviors.=C2=A0
Snooping has proven to be very useful, but as one may guess, it is = not reliable; it may miss packets, may fail to create bindings, may point o= n an incorrect location as well.
=C2=A0
So I=E2=80=99d say that if we publish as RFC, =C2=A0we should also = indicate that with draft-ietf-6lo-ap-nd, we (will) have a more robust solut= ion for devices that are willing to announce themselves.
=C2=A0
Cheers,
=C2=A0
Pascal
From:=C2=A0ipv6 <= ipv6-bounces@iet= f.org>= =C2=A0On Behalf Of=C2= =A0Lorenzo Colitti
Sent:=C2= =A0vendredi 19 octobre 2018 02:07
To:=C2= =A0Suresh Krishnan <Suresh@kaloom.com>
Cc:=C2= =A0v6ops@ietf.or= g WG <v6ops@ietf= .org>; IETF IPv6 Mailing List <ipv6@ietf.org>; opsec@ietf.org; dhcwg@ietf.org; = int-area@ietf.org; opsawg@ietf.org Subject:= =C2=A0Re: [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15=
=C2=A0
On Fri, Oct 19, 2018 at 7:38 AM Suresh Krishnan <Suresh@kaloom.com> wrote:
=C2=A0 =C2=A0I am considering AD sponsoring the following draft

https://tools.ietf.or= g/html/draft-bi-savi-wlan-15

that describes a source address validation solution for WLAN. If you have a= ny concerns
either with the content of the draft, or about me AD sponsoring it please l= et me know before 2018/11/18.
=C2=A0
I skimmed the draft.=C2=A0It looks well-written, and it addresses an import= ant problem which I think is probably solved in (different?) proprietary wa= ys on various implementations in the field today. I'm not very familiar= with the AD sponsorship process, so not sure what the has to happen from a process perspective. But I think the do= cument requires further review, especially given that it's making state= ments about very widely-deployed scenarios (IPv6 over wifi). Should the doc= ument be adopted by a WG such as 6man or v6ops? If not, it should definitely be reviewed by those=C2=A0WGs.
=C2=A0
As a concrete example, here are some things that need to be resolved before= the document advances:
  1. The proposed scheme relies on DAD packets to create mapping entries. That m= eans that if a DAD packet is lost (which can happen even though 802.11 empl= oys retransmissions at L2), a station could have an IPv6 address that doesn= 't work with no indication that it's not working. This is basically a non-recoverable outage. Perhaps = the document should specify another solution instead, e.g., it could say th= at mapping entries could be created when a wired station receives a solicit= ed NA response from a wireless station.
  2. The document says that the lifetime of SLAAC addresses is the address lifet= ime, but the network has no way of knowing what the address lifetime is bec= ause it depends on which RA(s) the host has received.
    3. =C2=A0
    Cheers,
Lorenzo

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www.ietf.org/mailman/listinfo/dhcwg
--000000000000c24be40578dd7b36-- From nobody Tue Oct 23 20:13:36 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EB6F130DDA; Tue, 23 Oct 2018 20:13:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=kaloom.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bKvEh6hkz6jC; Tue, 23 Oct 2018 20:13:19 -0700 (PDT) Received: from CAN01-TO1-obe.outbound.protection.outlook.com (mail-eopbgr670107.outbound.protection.outlook.com [40.107.67.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9971D130DD8; Tue, 23 Oct 2018 20:13:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kaloom.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7CLAtRD9slOJjLEP7rdnIZtCLodbbiMUbyR2yL/YcyM=; b=j3iJYUcnhdpCNIkWMQBFbEAk4xEb4eP8opGLvathF+ZK55hyiOXcRFZLhXNyOlLm1omyPsWCpYFHzpdHmt0oezRMYP0kFjDUYdnEMpBGWzerJDbqIRw1uWHsHMBC3W6DcowlSeGnogykYAu2UY0T95TE3IaZtk/2ood9nNCvhLA= Received: from YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM (10.169.141.148) by YQBPR01MB0611.CANPRD01.PROD.OUTLOOK.COM (10.169.144.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.30; Wed, 24 Oct 2018 03:13:17 +0000 Received: from YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM ([fe80::e9af:2ac3:bd40:e2ea]) by YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM ([fe80::e9af:2ac3:bd40:e2ea%4]) with mapi id 15.20.1273.014; Wed, 24 Oct 2018 03:13:17 +0000 From: Suresh Krishnan To: Lorenzo Colitti CC: "Pascal Thubert (pthubert)" , Lorenzo Colitti , Bernard Aboba , "v6ops@ietf.org WG" , int-area , IETF IPv6 Mailing List , "opsec@ietf.org" , dhcwg , "opsawg@ietf.org" , "v6ops-chairs@ietf.org" Thread-Topic: [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 Thread-Index: AQHUZzM4x98Ypd1MCEKu+GX87R2CxqUlsN0AgAD1IYCABXvvgIAAGvIAgAGDvQA= Date: Wed, 24 Oct 2018 03:13:17 +0000 Message-ID: <02B5B763-C10C-4EC9-BD9D-96B6A3F11A33@kaloom.com> References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> <3BB81D98-E70D-45B4-A99D-94AF29D89526@kaloom.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Suresh@kaloom.com; x-originating-ip: [45.19.110.76] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; YQBPR01MB0611; 6:p9pzs2IYJS8yYKRx8obIylSvu9QbjB09bIwjwimorAleMrXQS1LbyTZEt63KDWSe76op+Dw7FqOCarz4hWM3ODCIZOIW7V58AXLJ8dsFm8rN/CPonfteELE49kvg1a2C75nVWu/xyfyOs+/f+t5jb8dnYiCwFYtsgJqgKtHOaHAmKhsLmQmP7+3bNyvacIXWtcRnkUvZTwVnZGg6+94YbjtYzTu2FpXCvioerfIq6RfgciRI1D998pPs3x1SjvnrnNS0OSoI+WZHCtTvh168k4xGBAp2RtpmO8rG/wKUOEuhM0qzkEE6Y8jb1eTrMXbOgXg+P69AjCGKADGXuxnoFOrjkNHPJ1jy2gb06/iKxstJryZPE5cZawiqnhO+6jXBCJz/i0xMeAxW+qKvxdHAxVrI0ZMQYywFSbveWSj38LE5zE3MxJpw7RfWlkGP3uj8j3UqzBtD0uZ99ZLbN4ogoA==; 5:rKq7OVfv2pF8fC58ZzpGPgFyDyVCTG99M8Q5pYQ9OcIZUruVex79eaLrtgsyW+Tt3hxvZ8ApiSZ0u62ejm7rKl420kGRxf4/Jfglr7am/3obNPclNeTFcrGkkA4nZJjg+cs9osINpaUdDD6ir+ursZr5e/CTO1QOop307RK9i+E=; 7:NOdL2pqYtvQcWu57h1X2Wgwer5/bZgWXjHNaq/vhMlolH/dvrmgRVXM2jbIbIsV7k9Dne8EIKb7+Kelc85kcWXpQTC/YJGNl/LR/1C6yZ6f5aJFDkpkSisde2/a19FyowYX5VPGDnmmJxWkwwGlBnxG1Z1pALJuMyLMYUgWhDBvzhDUGQpptR5KWO88yxg7eFbOLFsK/UEADtgBNxVPZHOScxZwWhmIDfqATWJgIv2Ad/rsKAEs6DGTwhSDijNmb x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: ca9c6d2a-b71b-4b98-ce95-08d6395ea4b6 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:YQBPR01MB0611; x-ms-traffictypediagnostic: YQBPR01MB0611: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(211936372134217)(153496737603132); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(3002001)(3231355)(944501410)(52105095)(10201501046)(93006095)(93001095)(148016)(149066)(150057)(6041310)(20161123558120)(2016111802025)(20161123560045)(20161123562045)(20161123564045)(6043046)(201708071742011)(7699051)(76991095); SRVR:YQBPR01MB0611; BCL:0; PCL:0; RULEID:; SRVR:YQBPR01MB0611; x-forefront-prvs: 083526BF8A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(376002)(346002)(396003)(39840400004)(366004)(189003)(199004)(81166006)(81156014)(82746002)(3846002)(83716004)(71190400001)(71200400001)(6916009)(8676002)(508600001)(256004)(6116002)(53936002)(25786009)(8936002)(54906003)(11346002)(93886005)(53546011)(6436002)(66066001)(36756003)(6506007)(76176011)(33656002)(186003)(316002)(6246003)(39060400002)(446003)(26005)(97736004)(229853002)(5660300001)(6486002)(486006)(7416002)(2900100001)(68736007)(4326008)(102836004)(106356001)(86362001)(99286004)(105586002)(6512007)(72206003)(80792005)(2616005)(14454004)(7736002)(476003)(2906002)(5250100002)(305945005); DIR:OUT; SFP:1102; SCL:1; SRVR:YQBPR01MB0611; H:YQBPR01MB0226.CANPRD01.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: kaloom.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: r3aaCA2cFo3Eqyy00ioMP+LuWKeMmoh3V8LVxVzZAwYIbZV9VJjlIV2YfSBQNUDHmNipQdu4UJlLGSHPHVRmq7ZcwPyemLH+7uywPty63D4qjOnlwmDbF1IA2Ixbv5YIZAdDu0piOuq8VBIwxTurTNwBBh/MTkKZe7y4sF2KOGlO0xFR9aY/GYNkDG1kHADJbcN7Gai/l++M8k1lDJxb9lBoWIUfJmkqjzEeR848ZgF+gTyv/WxYJKDEQNoLJ95yg+cDery4S2im130zfCn5zSIZ3kXjhIeTNjk7d5eaOTP64upj751Q9Y8HPkzqe7YDooTZ5ThuqhMeDY1W4ZUFAZ/GgxmXG/la1mdjd5NiJrQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: kaloom.com X-MS-Exchange-CrossTenant-Network-Message-Id: ca9c6d2a-b71b-4b98-ce95-08d6395ea4b6 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2018 03:13:17.1095 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 47d58e26-f796-48e8-ac40-1c365c204513 X-MS-Exchange-Transport-CrossTenantHeadersStamped: YQBPR01MB0611 Archived-At: Subject: Re: [OPSEC] [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 03:13:22 -0000 Hi Lorenzo, > On Oct 23, 2018, at 12:05 AM, Lorenzo Colitti wrote: >=20 > Isn't v6ops a natural fit for this, since it essentially documents an ope= rational practice that is implemented by real hardware? I did think of it, but the draft is also expected to work with IPv4 and tha= t made me reconsider (In fact one of my solicited reviews for the previous = version of this draft was from Fred Baker). Fred/Ron, do you think this dra= ft can fit in v6ops? If so, I will send the authors your way. Thanks Suresh From nobody Tue Oct 23 22:59:26 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F843130DDE for ; Tue, 23 Oct 2018 22:59:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KQf3MnC6Z-EG for ; Tue, 23 Oct 2018 22:59:22 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FC511286E3 for ; Tue, 23 Oct 2018 22:59:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2920; q=dns/txt; s=iport; t=1540360762; x=1541570362; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=aQML5hfo/KP90PrBOCkt9Yls4CNRvreZJ/UcdIzY/IY=; b=Ya9ffpfTc201aa/BT0jM0qw4w1IzskCgjFRNWR3TtPh9ODvPlfrZNjbI 0+PvRl6idhvAEBkNAPoHIpYrLaXDXksiNtomFzV7Kv/dVgG1jr6frvp6y 4NXlmeJIt22MQ3quL8vxW9v9EPUT9WBSwDTTqMqSqxsSTht4UA/XF7maW 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AEAADkCNBb/5ldJa1jGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBUQQBAQEBAQsBgVoqZn8oCoNriBiMHoFoJZcXgXoLAQE?= =?us-ascii?q?YC4RJAheCciE0DQ0BAwEBAgEBAm0cDIU6AQEBAwEBASEROgsQAgEIGAICJgI?= =?us-ascii?q?CAiULFRACBAENBYMhAYF5CA+oGIEuhTuEZgWBC4pXF4FBP4E4DBOCTIMbAQG?= =?us-ascii?q?BVA0XgmwxgiYCnlMJApB2F4FSjmGJLI0iAhEUgSYdOIFVcBU7KgGCQYImF30?= =?us-ascii?q?BCYdVhT5viWGBLIEfAQE?= X-IronPort-AV: E=Sophos;i="5.54,419,1534809600"; d="scan'208";a="190734738" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 05:59:21 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id w9O5xK5w011267 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 24 Oct 2018 05:59:21 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 24 Oct 2018 01:59:19 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Wed, 24 Oct 2018 01:59:20 -0400 From: "Eric Vyncke (evyncke)" To: ShortestPathFirst , Ron Bonica CC: "opsec@ietf.org" Thread-Topic: [OPSEC] New Work Thread-Index: AQHUH3urr+Axj0UKIEiq7ko/qG8IYaUu4wWA Date: Wed, 24 Oct 2018 05:59:19 +0000 Message-ID: References: In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.4] Content-Type: text/plain; charset="utf-8" Content-ID: <4C100D41C5658C4DA382B5D26AA0952F@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.151, xch-rtp-011.cisco.com X-Outbound-Node: rcdn-core-2.cisco.com Archived-At: Subject: Re: [OPSEC] New Work X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 05:59:24 -0000 SGVsbG8gU3RlZmFuLA0KDQpEaWQgeW91IGdldCBhbnkgY2hhbmNlIHRvIGhhdmUgYSBoYWNrIHRv IHRoZSBleGlzdGluZyBSRkMgNjE5MiA/DQoNCi3DqXJpYw0KDQrvu79PbiAxOS8wNy8yMDE4LCAx ODoxNSwgIk9QU0VDIG9uIGJlaGFsZiBvZiBTaG9ydGVzdFBhdGhGaXJzdCIgPG9wc2VjLWJvdW5j ZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHNmb3VhbnRAc2hvcnRlc3RwYXRoZmlyc3QubmV0PiB3 cm90ZToNCg0KICAgIEhpIFJvbiwNCiAgICANCiAgICBJ4oCZZCBiZSBpbnRlcmVzdGVkIGluIHVw ZGF0aW5nIFJGQyA2MTkyLiBEb2VzbuKAmXQgc2VlbSBsaWtlIGl0IHdvdWxkIGJlIHRvbyBpbnZv bHZlZCBhbmQgY291bGQgcHJvYmFibHkgYmUga25vY2tlZCBvdXQgcHJldHR5IHF1aWNrbHkuDQog ICAgDQogICAgU3RlZmFuDQogICAgDQogICAgPiBPbiBKdWwgMTksIDIwMTgsIGF0IDEwOjAzIEFN LCBSb24gQm9uaWNhIDxyYm9uaWNhQGp1bmlwZXIubmV0PiB3cm90ZToNCiAgICA+IA0KICAgID4g Rm9sa3MsDQogICAgPiANCiAgICA+IEkgd291bGQgbGlrZSB0byBwcm9wb3NlIHNvbWUgbmV3IHdv cmsgZm9yIE9QU0VDLiBXb3VsZCBhbnlib2R5IGJlIGludGVyZXN0ZWQgaW4gdGhlIGZvbGxvd2lu ZyB0b3BpY3M/DQogICAgPiANCiAgICA+IC0gVXBkYXRlIFJGQyA2MTkyIC0gUHJvdGVjdGluZyB0 aGUgUm91dGVyIENvbnRyb2wgUGxhbmUNCiAgICA+IA0KICAgID4gU2luY2UgdGhlIHB1YmxpY2F0 aW9uIG9mIDYxOTIsIG1vc3QgdmVuZG9ycyBoYXZlIHVwZ3JhZGVkIHRoZXJlIElQdjYgQUNMIGNh cGFiaWxpdGllcy4gSW4gbGlnaHQgb2YgdGhpcywgd2UgbWlnaHQgd2FudCB0byByZXZpc2l0IFJG QyA2MTkyDQogICAgPiANCiAgICA+IC0gRXhwYW5kIHVwb24gc2VsZWN0ZWQgdG9waWNzIGZyb20g ZHJhZnQtaWV0Zi1vcHNlYy12Ng0KICAgID4gDQogICAgPiBEcmFmdC1pZXRmLW9wc2VjLXY2IGlk ZW50aWZpZXMgc2V2ZXJhbCBpcHY2IHZ1bG5lcmFiaWxpdGllcyAoZS5nLiB2dWxuZXJhYmlsaXRp ZXMgYXNzb2NpYXRlZCB3aXRoIGV4dGVuc2lvbiBoZWFkZXJzKS4gT1BTRUMgbWlnaHQgd2FudCB0 byBzY2FuIHRoZSBkcmFmdCwgbG9va2luZyBmb3IgdnVsbmVyYWJpbGl0aWVzIGF0IGRlc2VydmUg aW4gZGVwdGggYW5hbHlzaXMgYW5kIG1pdGlnYXRpb24uIA0KICAgID4gDQogICAgPiAtIFVwZGF0 ZSBSRkMgNzg3MiAtIE9ic2VydmF0aW9ucyBPbiBEcm9wcGluZyBvZiBQYWNrZXRzIHdpdGggSVB2 NiBFeHRlbnNpb24gSGVhZGVycw0KICAgID4gDQogICAgPiBSRkMgNzg3MiBkZW1vbnN0cmF0ZXMg dGhhdCBtYW55IElQdjYgcGF0aHMgZHJvcCBwYWNrZXRzIHRoYXQgIGNvbnRhaW4gSVB2NiBleHRl bnNpb24gaGVhZGVycy4gRm9sbG93IG9uIHdvcmsgbWlnaHQgdXBkYXRlIHRoZSBleHBlcmltZW50 YWwgbWV0aG9kIHNvIHRoYXQgYSkgKSBpdCBpZGVudGlmaWVzIHRoZSBBdXRvbm9tb3VzIFN5c3Rl bXMgdGhhdCBkcm9wIHBhY2tldHMsIGIpIGl0IGlzIHJlcGVhdGVkIHBlcmlvZGljYWxseSwgYW5k IGMpIGl0IHB1Ymxpc2hlcyBpdHMgcmVzdWx0cyBvbiBhIHdlYiBwYWdlLiBXZSBtaWdodCBhbHNv IHdhbnQgdG8gZmlndXJlIG91dCB3aHkgdGhlc2UgYXV0b25vbW91cyBzeXN0ZW1zIGFyZSBkcm9w cGluZyBwYWNrZXRzIGFuZCBhZGRyZXNzIHRoZSBwcm9ibGVtcyB0aGF0IG1vdGl2YXRlIHRoZW0g dG8gZG8gdGhhdC4NCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSb24NCiAgICA+IA0KICAgID4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+IE9Q U0VDIG1haWxpbmcgbGlzdA0KICAgID4gT1BTRUNAaWV0Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb3BzZWMNCiAgICANCiAgICBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIE9QU0VDIG1haWxpbmcgbGlz dA0KICAgIE9QU0VDQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9vcHNlYw0KICAgIA0KDQo= From nobody Tue Oct 23 23:36:58 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDED512870E for ; Tue, 23 Oct 2018 23:36:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.97 X-Spam-Level: X-Spam-Status: No, score=-14.97 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5kKQr6ouyoWP for ; Tue, 23 Oct 2018 23:36:54 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9EED130DEF for ; Tue, 23 Oct 2018 23:36:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=12186; q=dns/txt; s=iport; t=1540363013; x=1541572613; h=from:to:subject:date:message-id:mime-version; bh=h44h8gj/4E2qsfWHv0GN0IvYC/uypwFU4oRV5Ex/unM=; b=RYI/1l6IfU0ofhuJrsPxCqyw8fwaEBv3h16Mse4+wvlMmBTMtNbQcfVX ZEXaLs+JGBRMpusna4o4l+HvO2NYHmiB0mGS0xxOT+Ge3XWYE15QTKh7M 1NxuuC/TLoWS+zWQIN1afFkvwiqkkcEvHsJRM4jRo3YgKubLe0Od/uQ9R E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AwAADdEdBb/49dJa1jHAEBAQQBAQc?= =?us-ascii?q?EAQGBUQcBAQsBgQ13Zn8oCoNriBiMHoFokXOFShSBZgsBASWEYIJyITQNDQE?= =?us-ascii?q?DAQECAQECbRwBC4VkCl4BGjACBDAXEASDNAGBHWQPqBuBLoU7hGYFi2IXgUE?= =?us-ascii?q?/gTgME4VnAgIBF4EvgxsxgiYCjjyGE4oPCQKBWoUKgx2GdReBUoR1iW+MYIl?= =?us-ascii?q?uAhEUgSYdOIFVcBVlAYJBixmFPm8BAYlzKoEEgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.54,419,1534809600"; d="scan'208,217";a="467643659" Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 06:36:52 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id w9O6aqsn020296 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 24 Oct 2018 06:36:52 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 24 Oct 2018 02:36:51 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Wed, 24 Oct 2018 02:36:51 -0400 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" Thread-Topic: Changes in draft-ietf-opsec-v6-14 Thread-Index: AQHUa2PyHuvm8uJFKEeLL5EZfdUL4w== Date: Wed, 24 Oct 2018 06:36:51 +0000 Message-ID: <54F150E8-1E09-4C2F-9790-502C596D89FD@cisco.com> Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.4] Content-Type: multipart/alternative; boundary="_000_54F150E81E094C2F9790502C596D89FDciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.151, xch-rtp-011.cisco.com X-Outbound-Node: rcdn-core-7.cisco.com Archived-At: Subject: [OPSEC] Changes in draft-ietf-opsec-v6-14 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 06:36:57 -0000 --_000_54F150E81E094C2F9790502C596D89FDciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QXMgeW91IGtub3cgYnkgbm93LCB0aGVyZSB3aWxsIGJlIG5vIE9QU0VDIFdHIG1lZXRpbmcgYXQg SUVURi0xMDMgaW4gTm92ZW1iZXIgKHRoZXJlIHdhcyBvbmx5IDEgaXRlbSBvbiB0aGUgYWdlbmRh KS4gU28sIHRoZSBhdXRob3JzIG9mIG9wc2VjLXY2IGRvY3VtZW50IHdvdWxkIGxpa2UgdG8gc3Rh cnQgZGlzY3Vzc2lvbiBvbiB0aGUgbGF0ZXN0IHJldmlzaW9uLiBQbGVhc2UgZmluZCBiZWxvdyB0 aGUgbGluayB0byB0aGUgZGlmZmVyZW5jZXMgYmV0d2VlbiAtMTIgYW5kIC0xNCAoc28gdHdvIHJl dmlzaW9ucykuDQoNCg0KDQpodHRwczovL3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFm dC1pZXRmLW9wc2VjLXY2LTE0LnR4dCZ1cmwxPWRyYWZ0LWlldGYtb3BzZWMtdjYtMTIudHh0DQoN Cg0KDQpJdCBpcyBtYWlubHkgYWJvdXQ6DQoNCi0gU2VjdGlvbiAyLjEgQWRkcmVzc2luZyBBcmNo aXRlY3R1cmU6IGFkZGluZyBSRkMgNzkzNCByZWZlcmVuY2Ugdy8gbXVsdGlwbGUgYWRkcmVzc2Vz IHBlciBob3N0DQoNCi0gU2VjdGlvbiAyLjEuMiBVc2Ugb2YgVUxBczogOTUlIGNvbXBsZXRlIHJl d3JpdGUNCg0KLSBTZWN0aW9uIDIuMS4zOiBQb2ludC10by1wb2ludCBsaW5rczogdGV4dCBzaW1w bGlmaWVkDQoNCi0gU2VjdGlvbiAyLjEuNDogVGVtcG9yYXJ5IGFkZHJlc3NlczogYWRkZWQgcmVm ZXJlbmNlIHRvIFJGQyA4MDY0IChzdGFibGUgYWRkcmVzcyksIHRleHQgbW9yZSBpbiBmYXZvciBv ZiBwcml2YWN5IGFkZHJlc3NlcywgdGV4dCBzaW1wbGlmaWNhdGlvbg0KDQotIFNlY3Rpb24gMi4y OiBleHRlbnNpb24gaGVhZGVyczogdGhlIGludHJvZHVjdGlvbiBwYXJhZ3JhcGggaXMgY2xhcmlm aWVkIGFuZCBzcGxpdCBpbiB0d28NCg0KLSBTZWN0aW9uIDIuMi4xLiAgT3JkZXIgYW5kIFJlcGV0 aXRpb24gb2YgRXh0ZW5zaW9uIEhlYWRlcnM6IGFkZCByZWNvbW1lbmRhdGlvbiB0byB1c2UgZmly ZXdhbGwgKGlmIHJlcXVpcmVkKSBzdXBwb3J0aW5nIGhlYWRlciBmaWx0ZXJpbmcNCg0KLSBTZWN0 aW9uIDIuMi4yOiBob3AgYnkgaG9wIGV4dGVuc2lvbiBoZWFkZXI6IGNvbXBsZXRlIHJld3JpdGUg aW4gbGluZSB3aXRoIFJGQyA4MjAwDQoNCi0gU2VjdGlvbiAyLjMuMS4gIFNlY3VyaW5nIERIQ1A6 IGFkZGVkIHNvbWUgdGV4dCBhcm91bmQgc2VjdXJlIERIQ1B2Ng0KDQotIFNlY3Rpb24gMi42LjIu MS4gIEZvcmVuc2ljOiBhZGRlZCBjbGFyaWZpY2F0aW9uDQoNCi0gU2VjdGlvbiAyLjYuMi4yLiAg SW52ZW50b3J5OiByZW1vdmVkIHRoZSBwYXJhZ3JhcGggYWJvdXQgTlhET01BSU4gJiBOT0VSUk9S IGluIEROUyB6b25lIGVudW1lcmF0aW9uDQoNCi0gU2VjdGlvbiAyLjYuMi4zLiAgQ29ycmVsYXRp b246IGFkZGVkIHRleHQgb24gbXVsdGlwbGUgSVB2NiBhZGRyZXNzZXMgcGVyIG5vZGUgKHBlciBS RkMgNzkzNCkNCg0KLSBTZWN0aW9uIDIuNy4yLjYuICBUZXJlZG8gJiA2dG80OiBtb3ZlZCB0byB0 aGUgZW5kIG9mIHRoZSB0dW5uZWwgc2VjdGlvbiArIHRleHQgYWJvdXQgdGhlaXIgY3VycmVudCBz dGF0dXMNCg0KDQoNCkNvbW1lbnRzIGFyZSBvZiBjb3Vyc2Ugd2VsY29tZS4NCg0KDQoNCi3DqXJp YyAtbWVyaWtlIC1lbm5vIC1raw0KDQoNCg0KDQo= --_000_54F150E81E094C2F9790502C596D89FDciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1z b1BsYWluVGV4dCwgbGkuTXNvUGxhaW5UZXh0LCBkaXYuTXNvUGxhaW5UZXh0DQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCBDaGFyIjsNCgltYXJn aW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGku TXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9y aXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1hcmdpbi1yaWdodDowY207DQoJbWFyZ2luLWJv dHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30N CnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5pbnNl cnQNCgl7bXNvLXN0eWxlLW5hbWU6aW5zZXJ0O30NCnNwYW4uUGxhaW5UZXh0Q2hhcg0KCXttc28t c3R5bGUtbmFtZToiUGxhaW4gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ bXNvLXN0eWxlLWxpbms6IlBsYWluIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIu MHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBE ZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6OTYwNDU0NjYzOw0KCW1zby1s aXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotNjc2NDA3NTYwIDE5NjA3 NjgyMTYgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2 ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFy dC1hdDoxNzsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ6LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9 DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBw dDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBs aXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5Oldp bmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCm9sDQoJe21h cmdpbi1ib3R0b206MGNtO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGNtO30NCi0tPjwvc3R5bGU+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBz cGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIg ZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+QXMgeW91IGtu b3cgYnkgbm93LCB0aGVyZSB3aWxsIGJlIG5vIE9QU0VDIFdHIG1lZXRpbmcgYXQgSUVURi0xMDMg aW4gTm92ZW1iZXIgKHRoZXJlIHdhcyBvbmx5IDEgaXRlbSBvbiB0aGUgYWdlbmRhKS4gU28sIHRo ZSBhdXRob3JzIG9mIG9wc2VjLXY2IGRvY3VtZW50IHdvdWxkIGxpa2UgdG8gc3RhcnQgZGlzY3Vz c2lvbiBvbiB0aGUgbGF0ZXN0IHJldmlzaW9uLiBQbGVhc2UgZmluZCBiZWxvdyB0aGUgbGluaw0K IHRvIHRoZSBkaWZmZXJlbmNlcyBiZXR3ZWVuIC0xMiBhbmQgLTE0IChzbyB0d28gcmV2aXNpb25z KS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1vcHNlYy12Ni0xNC50eHQmYW1wO3VybDE9 ZHJhZnQtaWV0Zi1vcHNlYy12Ni0xMi50eHQiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlm Zj91cmwyPWRyYWZ0LWlldGYtb3BzZWMtdjYtMTQudHh0JmFtcDt1cmwxPWRyYWZ0LWlldGYtb3Bz ZWMtdjYtMTIudHh0PC9hPg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPkl0IGlzIG1h aW5seSBhYm91dDo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPi0gU2Vj dGlvbiAyLjEgQWRkcmVzc2luZyBBcmNoaXRlY3R1cmU6IGFkZGluZyBSRkMgNzkzNCByZWZlcmVu Y2Ugdy8gbXVsdGlwbGUgYWRkcmVzc2VzIHBlciBob3N0PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4tIFNlY3Rpb24gMi4xLjIgVXNlIG9mIFVMQXM6IDk1JSBjb21wbGV0 ZSByZXdyaXRlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4tIFNlY3Rp b24gMi4xLjM6IFBvaW50LXRvLXBvaW50IGxpbmtzOiB0ZXh0IHNpbXBsaWZpZWQ8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPi0gU2VjdGlvbiAyLjEuNDogVGVtcG9yYXJ5 IGFkZHJlc3NlczogYWRkZWQgcmVmZXJlbmNlIHRvIFJGQyA4MDY0IChzdGFibGUgYWRkcmVzcyks IHRleHQgbW9yZSBpbiBmYXZvciBvZiBwcml2YWN5IGFkZHJlc3NlcywgdGV4dCBzaW1wbGlmaWNh dGlvbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+LSBTZWN0aW9uIDIu MjogZXh0ZW5zaW9uIGhlYWRlcnM6IHRoZSBpbnRyb2R1Y3Rpb24gcGFyYWdyYXBoIGlzIGNsYXJp ZmllZCBhbmQgc3BsaXQgaW4gdHdvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4tIFNlY3Rpb24gMi4yLjEuJm5ic3A7IE9yZGVyIGFuZCBSZXBldGl0aW9uIG9mIEV4dGVu c2lvbiBIZWFkZXJzOiBhZGQgcmVjb21tZW5kYXRpb24gdG8gdXNlIGZpcmV3YWxsIChpZiByZXF1 aXJlZCkgc3VwcG9ydGluZyBoZWFkZXIgZmlsdGVyaW5nPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4tIFNlY3Rpb24gMi4yLjI6IGhvcCBieSBob3AgZXh0ZW5zaW9uIGhl YWRlcjogY29tcGxldGUgcmV3cml0ZSBpbiBsaW5lIHdpdGggUkZDIDgyMDA8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPi0gU2VjdGlvbiAyLjMuMS4mbmJzcDsgU2VjdXJp bmcgREhDUDogYWRkZWQgc29tZSB0ZXh0IGFyb3VuZCBzZWN1cmUgREhDUHY2PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4tIFNlY3Rpb24gMi42LjIuMS4mbmJzcDsgRm9y ZW5zaWM6IGFkZGVkIGNsYXJpZmljYXRpb248bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPi0gU2VjdGlvbiAyLjYuMi4yLiZuYnNwOyBJbnZlbnRvcnk6IHJlbW92ZWQgdGhl IHBhcmFncmFwaCBhYm91dCBOWERPTUFJTiAmYW1wOyBOT0VSUk9SIGluIEROUyB6b25lIGVudW1l cmF0aW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4tIFNlY3Rpb24g Mi42LjIuMy4mbmJzcDsgQ29ycmVsYXRpb246IGFkZGVkIHRleHQgb24gbXVsdGlwbGUgSVB2NiBh ZGRyZXNzZXMgcGVyIG5vZGUgKHBlciBSRkMgNzkzNCk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPi0gU2VjdGlvbiAyLjcuMi42LiZuYnNwOyBUZXJlZG8gJmFtcDsgNnRv NDogbW92ZWQgdG8gdGhlIGVuZCBvZiB0aGUgdHVubmVsIHNlY3Rpb24gJiM0MzsgdGV4dCBhYm91 dCB0aGVpciBjdXJyZW50IHN0YXR1czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5Db21t ZW50cyBhcmUgb2YgY291cnNlIHdlbGNvbWUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi Pi3DqXJpYyAtbWVyaWtlIC1lbm5vIC1razxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_54F150E81E094C2F9790502C596D89FDciscocom_-- From nobody Wed Oct 24 05:25:34 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2EE0126DBF; Wed, 24 Oct 2018 05:25:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UbeMjxuHmbDu; Wed, 24 Oct 2018 05:25:16 -0700 (PDT) Received: from mail-wm1-x32d.google.com (mail-wm1-x32d.google.com [IPv6:2a00:1450:4864:20::32d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E95D4130DFE; Wed, 24 Oct 2018 05:25:13 -0700 (PDT) Received: by mail-wm1-x32d.google.com with SMTP id a8-v6so5183831wmf.1; Wed, 24 Oct 2018 05:25:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=crAFyU+3MmdYegFOnVnp21K02fLD2BHm5N6NH4Xn9KY=; b=eLPxMTkx+pC8LOUFzXwiTGtHCmBX425v217t/5gmpLNCf6eGuCrLKcjg6+WC6yJK0v LNgnF9CETQa3LbWfZ/ZI48EEPXAatJgTZv4oLTfb3bs+EXifBmtWxw2e2kI7ik4erU9e tLnyY38JASdKBACWhybWK+47j+Aoo1m+OfXv3swkiOBGp1OmopgKZeHIYc+9bdWLIuWv wT+JcUldEz66ciEmeOc+DzIRVhHEVrOUP4wfKcPxI6muQXtx1hioVC1Rm1NIaD7WW/wX x1xL9AgItHKeViv/ERSvsmT9NnaBp5gYkiF2iLx9gxhgQ40IdWBfbSIsjf8mY/iNIibl FxLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=crAFyU+3MmdYegFOnVnp21K02fLD2BHm5N6NH4Xn9KY=; b=rHRCjWrUYanL9eHrgh6nnA5DJu2X36RVq5cEKLYWRGhLM4R2uPQLcOSnlr3Nc3QzBh 2KSoB7WLvpAx+yOSx+Jvo9a8LOMTBkrz2WSwLMDZYiPYMWgxF50SnJQdYmmUbgnRnhrd yUOk4JmkGQSIb03/JMyfOTmGAOvfOkMYQmjswkdVpNEBAwJSs2pMYzHxfd6cP5VP7zzp EQjcsdOZxrGckzC59M5W1w2kXi9ZZRz3WVgGmvskxkcA4l+55qkipwwdQbvtR4b/m+ag BfnIEY3Zv+lQOdiNl+93+ZjAqiY182drmFH9DHNAQLVtzNzp8ZPpq1tH7pQwGkE8xa8l 0aGw== X-Gm-Message-State: AGRZ1gIDtL6YyQ45nFxWrdpFcUUQq2EKvXjZI/9ayHZ8MO/Z0leVEwWS mUwKcgC2LWcWF7QZoRsBAeQ= X-Google-Smtp-Source: AJdET5fbJJVwCItpFUo8kuhaEIv2CSYugvbUyHN5SMNhvIvgwzewXxPBVvExnMl7M5K8CFvoKXmpIQ== X-Received: by 2002:a1c:1314:: with SMTP id 20-v6mr2625912wmt.132.1540383912416; Wed, 24 Oct 2018 05:25:12 -0700 (PDT) Received: from [192.168.50.230] ([213.27.245.162]) by smtp.gmail.com with ESMTPSA id y19-v6sm5953353wra.60.2018.10.24.05.25.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 24 Oct 2018 05:25:11 -0700 (PDT) From: Fred Baker Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_A9FB9A8B-6121-4A55-A947-F759A8F1B940"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Wed, 24 Oct 2018 14:25:09 +0200 In-Reply-To: <02B5B763-C10C-4EC9-BD9D-96B6A3F11A33@kaloom.com> Cc: Lorenzo Colitti , "Pascal Thubert (pthubert)" , Lorenzo Colitti , Bernard Aboba , "v6ops@ietf.org WG" , int-area , IETF IPv6 Mailing List , "opsec@ietf.org" , dhcwg , "opsawg@ietf.org" , "v6ops-chairs@ietf.org" , Warren Kumari To: Suresh Krishnan References: <9E0D2E7C-FC28-49AC-A165-241C0BC3487E@kaloom.com> <3BB81D98-E70D-45B4-A99D-94AF29D89526@kaloom.com> <02B5B763-C10C-4EC9-BD9D-96B6A3F11A33@kaloom.com> X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [OPSEC] [dhcwg] Considering AD sponsoring draft-bi-savi-wlan-15 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 12:25:19 -0000 --Apple-Mail=_A9FB9A8B-6121-4A55-A947-F759A8F1B940 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Well, it's not crazy to bring it to v6ops. I sent the authors to = int-area IIRC, but we could look at it in the IETF 104 timeframe and in = email in between time. It won't make the agenda for 103 - we're full up. > On Oct 24, 2018, at 5:13 AM, Suresh Krishnan = wrote: >=20 > I did think of it, but the draft is also expected to work with IPv4 = and that made me reconsider (In fact one of my solicited reviews for the = previous version of this draft was from Fred Baker). Fred/Ron, do you = think this draft can fit in v6ops? If so, I will send the authors your = way. = --------------------------------------------------------------------------= ------ The fact that there is a highway to hell and a stairway to heaven is an = interesting comment on projected traffic volume... --Apple-Mail=_A9FB9A8B-6121-4A55-A947-F759A8F1B940 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEctjlJjQmVrp9uMq7EhdRnd2GP+AFAlvQZKUACgkQEhdRnd2G P+BlpQ//XFPHiEjrsSTuryLPztNkY93Fc5ingpg4tUGaUB1yXGFtEBdV0k/eoq7D ufVQoJ3s4CFd/CKSU4JxHvjwFkzPyb73GyF2i56rQNN+fp2ZHoNI0DuUybuydIds cg+9PAOrSCYu2RblSUKU8AhbW5OpH7rl/05AvxIA1v0wacE+J8yqFs8kvD4ULox1 Nu2aKEkcWjFaLc9vPDZMny4GHTmY1QhB2ug/y+P0lq3MpOdX3yqrDf3nGcVf5GSE w4/1oxgBDAJFakE9kIZJRIA6aShM0U8a563uw1hbqR6fL4u93CJNBvaowoYzdrwP ZPtX6hQXqXojqIEMiR9jjEh6dfJe2SOEDj+vXlZVRguNWgJUMuzFGF7Jwc0rVQ1R 4IocB0fcy0r3RXaf5K1GbHrAcpa+pn0ZJfy3wMck3PChGIBjM/wE9yESQMn/FXlC jfRoRimri3vy8YNmocr9oNPqR6K2bWfial+mPauyiNkjHNktZAmyXZJr1U+ZlCzE U0H0RhySs4jfKurpYWGN5ssU0Gwmy3DnWc2vEEg2i0B6+iZs9ceNLhZXO9pgno6c IlQKxBfvk9MKPZbJDLh9H04vhu1nIeWnCu9xRIk+NUkFndhn3yGiAOj7JVGLkbcs d4dHZUkaOJr171OBlJNKeBqz4senwMbhgzs0VyEHdx+5EZMqCVQ= =FUcx -----END PGP SIGNATURE----- --Apple-Mail=_A9FB9A8B-6121-4A55-A947-F759A8F1B940-- From nobody Wed Oct 24 15:26:09 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59578130E86 for ; Wed, 24 Oct 2018 15:25:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gfo3MT8cQiWS for ; Wed, 24 Oct 2018 15:25:53 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CDA7130E78 for ; Wed, 24 Oct 2018 15:25:53 -0700 (PDT) Received: from [192.168.0.104] (unknown [80.30.179.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 077E086BCE; Thu, 25 Oct 2018 00:25:49 +0200 (CEST) To: "Eric Vyncke (evyncke)" , "opsec@ietf.org" References: <54F150E8-1E09-4C2F-9790-502C596D89FD@cisco.com> From: Fernando Gont Openpgp: preference=signencrypt Autocrypt: addr=fgont@si6networks.com; prefer-encrypt=mutual; keydata= xsFNBE5so2gBEACzBQBLUy8nzgAzSZn6ViXT6TmZBFNYNqTpPRvTVtUqF6+tkI+IEd9N2E8p pXUXCd0W4dkxz6o7pagnK63m4QSueggvp881RVVHOF8oTSHOdnGxLfLeLNJFKE1FOutU3vod GK/wG/Fwzkv9MebdXpMlLV8nnJuAt66XGl/lU1JrNfrKO4SoYQi4TsB/waUQcygh7OR/PEO0 EttiU8kZUbZNv58WH+PAj/rdZCrgUSiGXiWUQQKShqKnJxLuAcTcg5YRwL8se/V6ciW0QR9i /sr52gSmLLbW5N3hAoO+nv1V/9SjJAUvzXu43k8sua/XlCXkqU7uLj41CRR72JeUZ4DQsYfP LfNPC98ZGTVxbWbFtLXxpzzDDT8i3uo7w1LJ2Ij/d5ezcARqw01HGljWWxnidUrjbTpxkJ9X EllcsH94mer728j/HKzC9OcTuz6WUBP3Crgl6Q47gY5ZIiF0lsmd9/wxbaq5NiJ+lGuBRZrD v0dQx9KmyI0/pH2AF8cW897/6ypvcyD/1/11CJcN+uAGIrklwJlVpRSbKbFtGC6In592lhu7 wnK8cgyP5cTU+vva9+g6P1wehi4bylXdlKc6mMphbtSA+T3WBNP557+mh3L62l4pGaEGidcZ DLYT2Ud18eAJmxU3HnM8P3iZZgeoK7oqgb53/eg96vkONXNIOwARAQABzSVGZXJuYW5kbyBH b250IDxmZ29udEBzaTZuZXR3b3Jrcy5jb20+wsGBBBMBAgArAhsjBQkSzAMABgsJCAcDAgYV CAIJCgsEFgIDAQIeAQIXgAUCTmylpQIZAQAKCRCuJQ1VHU50kv7wD/9fuNtTfxSLk3B3Hs3p ixTy8YXVjdkVwWlnJjFd7BOWmg7sI+LDhpjGfT6+ddOiwkumnvUZpObodj4ysH0i8c7P4C5t F9yu7WjklSlrB5Rth2CGChg5bKt541z2WHkFFxys9qBLmCSYDeKQkzLqhCjIUJizY2kOJ2GI MnSFDzJjhSFEh//oW830Y8fel1xnf/NVF+lBVtRMtMOfoWUqDjvP3sJ1G4zgkDCnF0CfncLx +hq2Mv26Uq9OTzvLH9aSQQ/f067BOkKAJKsfHdborX4E96ISTz57/4xECRSMr5dVsKVm4Y// uVIsb+L5z+a32FaiBZIAKDgnJO7Z8j6CV5e5yfuBTtX52Yi9HjYYqnYJGSDxYd6igD4bWu+7 xmJPHjkdqZgGV6dQIgiUfqkU+s5Cv350vK48CMaT/ZLo2BdsMhWsmaHmb+waePUMyq6E4E9x 9Js+EJb9ZiCfxS9exgieZQpet1L36IvhiwByvkQM009ywfa30JeMOltUtfLi5V06WQWsTzPL 5C+4cpkguSuAJVDTctjCA0moIeVDOpJ8WH9voQ4IeWapQnX35OIoj1jGJqqYdx65gc1ygbyx b8vw+pJ9E5GLse5TQnYifOWpXzX9053dtbwp/2OVhU4KLlzfCPCEsoTyfu9nIZxdI2PMwiL5 M85BfjX4NmwBLmPGoM7BTQRObKNoARAAqqXCkr250BchRDmi+05F5UQFgylUh10XTAJxBeaQ UNtdxZiZRm6jgomSrqeYtricM9t9K0qb4X2ZXmAMW8o8AYW3RrQHTjcBwMnAKzUIEXXWaLfG cid/ygmvWzIHgMDQKP+MUq1AGQrnvt/MRLvZLyczAV1RTXS58qNaxtaSpc3K/yrDozh/a4pu WcUsVvIkzyx43sqcwamDSBb6U8JFoZizuLXiARLLASgyHrrCedNIZdWSx0z0iHEpZIelA2ih AGLiSMtmtikVEyrJICgO81DkKNCbBbPg+7fi23V6M24+3syHk3IdQibTtBMxinIPyLFF0byJ aGm0fmjefhnmVJyCIl/FDkCHprVhTme57G2/WdoGnUvnT7mcwDRb8XY5nNRkOJsqqLPemKjz kx8mXdQbunXtX9bKyVgd1gIl+LLsxbdzRCch773UBVoortPdK3kMyLtZ4uMeDX3comjx+6VL bztUdJ1Zc9/njwVG8fgmQ+0Kj5+bzQfUY+MmX0HTXIx3B4R1I1a8QoOwi1N+iZNdewV5Zfq+ 29NlQLnVPjCRCKbaz9k6RJ2oIti55YUI6zSsL3lmlOXsRbXN5bRswFczkNSCJxJMlDiyAUIC WOay7ymzvgzPa+BY/mYn94vRaurDQ4/ljOfj6oqgfjts+dJev4Jj89vp8MQI3KJpZPEAEQEA AcLBZQQYAQIADwUCTmyjaAIbDAUJEswDAAAKCRCuJQ1VHU50km4xEACho45PZrUjY4Zl2opR DFNo5a6roTOPpgwO9PcBb3I5F8yX2Dnew+9OhgWXbBhAFq4DCx+9Gjs43Bn60qbZTDbLGJ/m 8N4PwEiq0e5MKceYcbetEdEUWhm5L6psU9ZZ82GR3UGxPXYe+oifEoJjOXQ39avf9S8p3yKP Diil0E79rn7LbJjMcgMLyjFg9SDoJ6pHLtniJoDhEAaSSgeV7Y745+gyMIdtQmrFHfqrFdjq D6G0HE+Z68ywc5KN67YxhvhBmSycs1ZSKAXv1zLDlXdmjHDHkU3xMcB+RkuiTba8yRFYwb/n j62CC4NhFTuIKOc4ta3dJsyXTGh/hO9UjWUnmAGfd0fnzTBZF8Qlnw/8ftx5lt4/O+eqY1EN RITScnPzXE/wMOlTtdkddQ+QN6xt6jyR2XtAIi7aAFHypIqA3lLI9hF9x+lj4UQ2yA9LqpoX 6URpPOd13JhAyDe47cwsP1u9Y+OBvQTVLSvw7Liu2b4KjqL4lx++VdBi7dXsjJ6kjIRjI6Lb WVpxe8LumMCuVDepTafBZ49gr7Fgc4F9ZSCo6ChgQNLn6WDzIkqFX+42KuHz90AHWhuW+KZR 1aJylERWeTcMCGUSBptd48KniWmD6kPKpzwoMkJtEXTuO2lVuborxzwuqOTNuYg9lWDl7zKt wPI9brGzquUHy4qRrA== Message-ID: <51205113-5925-9c25-7cd8-2a564be4df50@si6networks.com> Date: Thu, 25 Oct 2018 00:24:06 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: <54F150E8-1E09-4C2F-9790-502C596D89FD@cisco.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [OPSEC] Changes in draft-ietf-opsec-v6-14 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 22:26:03 -0000 Hi, Eric, I was just abut to re-read the previous version of the I-D. Wil read the last one you posted and send comments. Thanks! Cheers, Fernando On 10/24/18 8:36 AM, Eric Vyncke (evyncke) wrote: > As you know by now, there will be no OPSEC WG meeting at IETF-103 in > November (there was only 1 item on the agenda). So, the authors of > opsec-v6 document would like to start discussion on the latest revision. > Please find below the link to the differences between -12 and -14 (so > two revisions). > >   > > https://tools.ietf.org/rfcdiff?url2=draft-ietf-opsec-v6-14.txt&url1=draft-ietf-opsec-v6-12.txt > > >   > > It is mainly about: > > - Section 2.1 Addressing Architecture: adding RFC 7934 reference w/ > multiple addresses per host > > - Section 2.1.2 Use of ULAs: 95% complete rewrite > > - Section 2.1.3: Point-to-point links: text simplified > > - Section 2.1.4: Temporary addresses: added reference to RFC 8064 > (stable address), text more in favor of privacy addresses, text > simplification > > - Section 2.2: extension headers: the introduction paragraph is > clarified and split in two > > - Section 2.2.1.  Order and Repetition of Extension Headers: add > recommendation to use firewall (if required) supporting header filtering > > - Section 2.2.2: hop by hop extension header: complete rewrite in line > with RFC 8200 > > - Section 2.3.1.  Securing DHCP: added some text around secure DHCPv6 > > - Section 2.6.2.1.  Forensic: added clarification > > - Section 2.6.2.2.  Inventory: removed the paragraph about NXDOMAIN & > NOERROR in DNS zone enumeration > > - Section 2.6.2.3.  Correlation: added text on multiple IPv6 addresses > per node (per RFC 7934) > > - Section 2.7.2.6.  Teredo & 6to4: moved to the end of the tunnel > section + text about their current status > >   > > Comments are of course welcome. > >   > > -éric -merike -enno -kk > >   > >   > > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec > -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Oct 25 00:51:57 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEFDF130DE0 for ; Thu, 25 Oct 2018 00:51:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.97 X-Spam-Level: X-Spam-Status: No, score=-14.97 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3kRVfHkhVCUL for ; Thu, 25 Oct 2018 00:51:54 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3925F12D4F2 for ; Thu, 25 Oct 2018 00:51:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4124; q=dns/txt; s=iport; t=1540453914; x=1541663514; h=from:to:cc:subject:date:message-id:mime-version; bh=PeUHKPp5OCKpI5gf38RU3KqS2v5pkPAtm/M6815uqqs=; b=Hp3f5PNk/vSD0dtnDwTNgslWQObCJNq4f2MkYf7p8Md/C0TyoUkSrP5k nStKDRVjFO6fVtOzX0yhyZgUID3eAPdEYXceuvtmvzRWF7HB2DBlJLBbM 4V/dUKFvF6r9kodQGDkLFkAmfmgvcYiQQDUJjB9sxP5ACb+SdzEpAXVly c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AEAACXddFb/4sNJK1jGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBUQUBAQEBCwGBDXdmfzKDa4gYjBiBaJF2hUoUgWYLAQGEbBm?= =?us-ascii?q?CdiE0DQ0BAwEBAgEBAm0ohWQKTBIBDD4CBDAnBAENgyYBgR1kplGBLooqi2Y?= =?us-ascii?q?XgUE/gTgME4IehHSDOzGCJgKOPpAoCQKQeRiQO5ZaAhEUgSYdOIFVcBVlAYJ?= =?us-ascii?q?CkFaME4EfAQE?= X-IronPort-AV: E=Sophos;i="5.54,423,1534809600"; d="scan'208,217";a="190721034" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Oct 2018 07:51:53 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id w9P7pr29032471 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 25 Oct 2018 07:51:53 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 25 Oct 2018 03:51:52 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Thu, 25 Oct 2018 03:51:52 -0400 From: "Eric Vyncke (evyncke)" To: "liushucheng@huawei.com" , "fgont@si6networks.com" , "opsec@ietf.org" Thread-Topic: Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? Thread-Index: AQHUbDeXNpGRix0Mn0+E+G7LPH4XFQ== Date: Thu, 25 Oct 2018 07:51:52 +0000 Message-ID: <4E5EDCAD-7923-4F24-898F-723C301361D1@cisco.com> Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.222.102] Content-Type: multipart/alternative; boundary="_000_4E5EDCAD79234F24898F723C301361D1ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.151, xch-rtp-011.cisco.com X-Outbound-Node: alln-core-6.cisco.com Archived-At: Subject: [OPSEC] Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 07:51:56 -0000 --_000_4E5EDCAD79234F24898F723C301361D1ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBhdXRob3JzLA0KDQpJIGFtIHRoZSBkb2N1bWVudCBzaGVwaGVyZCBmb3IgeW91ciBJLUQg ZHJhZnQtaWV0Zi1vcHNlYy1pcHY2LWVoLWZpbHRlcmluZy0wNi4NCg0KQ2FuIHlvdSByZXNwb25k IHRvIHRoaXMgbWVzc2FnZSBzdGF0aW5nIHdoZXRoZXIgdGhleSBrbm93IG9mIGFueSBJUFIgYXNz b2NpYXRlZCB3aXRoIHRoaXMgZHJhZnQ/DQoNClRoYW5rIHlvdQ0KDQotw6lyaWMNCg== --_000_4E5EDCAD79234F24898F723C301361D1ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <874387480001B347AC86CDEFFE8478FA@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9 IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIx IiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkg bGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkRlYXIgYXV0aG9ycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUiIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JIGFtIHRoZSBkb2N1bWVudCBzaGVwaGVy ZCBmb3IgeW91ciBJLUQgZHJhZnQtaWV0Zi1vcHNlYy1pcHY2LWVoLWZpbHRlcmluZy0wNi48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkNhbiB5b3UgcmVzcG9uZCB0 byB0aGlzIG1lc3NhZ2Ugc3RhdGluZyB3aGV0aGVyIHRoZXkga25vdyBvZiBhbnkgSVBSIGFzc29j aWF0ZWQgd2l0aCB0aGlzIGRyYWZ0PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhhbmsgeW91PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij4tw6lyaWM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_4E5EDCAD79234F24898F723C301361D1ciscocom_-- From nobody Thu Oct 25 01:49:59 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00AD31293FB for ; Thu, 25 Oct 2018 01:49:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Nl1LEn287Kq for ; Thu, 25 Oct 2018 01:49:56 -0700 (PDT) Received: from d.mail.sonic.net (d.mail.sonic.net [64.142.111.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B7FE1252B7 for ; Thu, 25 Oct 2018 01:49:56 -0700 (PDT) Received: from [10.196.194.9] (144-196.icannmeeting.org [199.91.196.144]) (authenticated bits=0) by d.mail.sonic.net (8.15.1/8.15.1) with ESMTPSA id w9P8no6t011486 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 25 Oct 2018 01:49:51 -0700 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_E7A03070-1087-42DD-913B-2305E55666FC"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail From: Merike Kaeo In-Reply-To: <51205113-5925-9c25-7cd8-2a564be4df50@si6networks.com> Date: Thu, 25 Oct 2018 01:49:43 -0700 Cc: "Eric Vyncke (evyncke)" , "opsec@ietf.org" Message-Id: <32A2095B-37BE-4CAF-A66A-F2D435E1E3E3@doubleshotsecurity.com> References: <54F150E8-1E09-4C2F-9790-502C596D89FD@cisco.com> <51205113-5925-9c25-7cd8-2a564be4df50@si6networks.com> To: Fernando Gont X-Mailer: Apple Mail (2.3124) X-Sonic-CAuth: UmFuZG9tSVaJYEe5y2nZkGJ0okRYyk0pRPDC0Iaz8HMJl4k9uMiLC/JZ/q4a9kAUFMCau9krcPk2oh9CrENCx+jTaTsavoboXqzowhNCdlY= X-Sonic-ID: C;miDP7jLY6BGGUv+mSH5B5g== M;4Gy07zLY6BGGUv+mSH5B5g== X-Sonic-Spam-Details: 0.0/5.0 by cerberusd Archived-At: Subject: Re: [OPSEC] Changes in draft-ietf-opsec-v6-14 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 08:49:58 -0000 --Apple-Mail=_E7A03070-1087-42DD-913B-2305E55666FC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Appreciate that Fernando. Eric did a great job enumerating the actual = changes which stemmed from the comments made in last 2 meetings and the mailing list. We did go back to review the videos of the meetings = and hope we addressed (pun intended :)) all issues that were pointed = out. Looking forward to seeing comments from the review from you and rest of = working group. - merike > On Oct 24, 2018, at 3:24 PM, Fernando Gont = wrote: >=20 > Hi, Eric, >=20 > I was just abut to re-read the previous version of the I-D. Wil read = the > last one you posted and send comments. >=20 > Thanks! >=20 > Cheers, > Fernando >=20 >=20 >=20 >=20 > On 10/24/18 8:36 AM, Eric Vyncke (evyncke) wrote: >> As you know by now, there will be no OPSEC WG meeting at IETF-103 in >> November (there was only 1 item on the agenda). So, the authors of >> opsec-v6 document would like to start discussion on the latest = revision. >> Please find below the link to the differences between -12 and -14 (so >> two revisions). >>=20 >>=20 >>=20 >> = https://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-opsec-v6-14.txt&url1=3Ddr= aft-ietf-opsec-v6-12.txt >>=20 >>=20 >>=20 >>=20 >> It is mainly about: >>=20 >> - Section 2.1 Addressing Architecture: adding RFC 7934 reference w/ >> multiple addresses per host >>=20 >> - Section 2.1.2 Use of ULAs: 95% complete rewrite >>=20 >> - Section 2.1.3: Point-to-point links: text simplified >>=20 >> - Section 2.1.4: Temporary addresses: added reference to RFC 8064 >> (stable address), text more in favor of privacy addresses, text >> simplification >>=20 >> - Section 2.2: extension headers: the introduction paragraph is >> clarified and split in two >>=20 >> - Section 2.2.1. Order and Repetition of Extension Headers: add >> recommendation to use firewall (if required) supporting header = filtering >>=20 >> - Section 2.2.2: hop by hop extension header: complete rewrite in = line >> with RFC 8200 >>=20 >> - Section 2.3.1. Securing DHCP: added some text around secure DHCPv6 >>=20 >> - Section 2.6.2.1. Forensic: added clarification >>=20 >> - Section 2.6.2.2. Inventory: removed the paragraph about NXDOMAIN & >> NOERROR in DNS zone enumeration >>=20 >> - Section 2.6.2.3. Correlation: added text on multiple IPv6 = addresses >> per node (per RFC 7934) >>=20 >> - Section 2.7.2.6. Teredo & 6to4: moved to the end of the tunnel >> section + text about their current status >>=20 >>=20 >>=20 >> Comments are of course welcome. >>=20 >>=20 >>=20 >> -=C3=A9ric -merike -enno -kk >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> OPSEC mailing list >> OPSEC@ietf.org >> https://www.ietf.org/mailman/listinfo/opsec >>=20 >=20 >=20 > -- > Fernando Gont > SI6 Networks > e-mail: fgont@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 >=20 >=20 >=20 >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec >=20 --Apple-Mail=_E7A03070-1087-42DD-913B-2305E55666FC Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJb0YOtAAoJEA7gPO9LJuahCp4H/1qdBrfCYb8kwAlggA6VVeTm IeUmuyvVo3KXCX2qs4n1LzPumVN4eQaJp55pg+bwC39eEMVGMrbgiSmV4i91ThcB 8Ir+LlOzoWAyzXb/E21hMGaMaN9EjHDIEqQM527eQLHRqAnCORLX6EI1dlmuqCTN utF9KDFrG9Bl5aY4SCkE4TYeNMobAWvwwj6EStXeRrZtKPYIqu9e25wxDCBjaUrf 1lj3HYLhUTmmFExJKRQS9+UwKRmJb4KBYfjzkwnsv98iR4vUW5eisTVpbljlQrU6 CIXtHN4c8uGbzcNGPSSjWVYKPpC+oKjJCaRdYDxm96Q9Z9iPqGxHMqVGIu60jvg= =bpUE -----END PGP SIGNATURE----- --Apple-Mail=_E7A03070-1087-42DD-913B-2305E55666FC-- From nobody Thu Oct 25 12:56:32 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 778FB130E41; Thu, 25 Oct 2018 12:56:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.601 X-Spam-Level: X-Spam-Status: No, score=-0.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_DYNAMIC=1.999, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ul2X2RdW1km; Thu, 25 Oct 2018 12:56:22 -0700 (PDT) Received: from mx0a-00191d01.pphosted.com (mx0a-00191d01.pphosted.com [67.231.149.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47FDF127148; Thu, 25 Oct 2018 12:56:22 -0700 (PDT) Received: from pps.filterd (m0053301.ppops.net [127.0.0.1]) by mx0a-00191d01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w9PEnUhF019854; Thu, 25 Oct 2018 10:51:29 -0400 Received: from tlpd255.enaf.dadc.sbc.com (sbcsmtp3.sbc.com [144.160.112.28]) by mx0a-00191d01.pphosted.com with ESMTP id 2nbfx2r27d-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 25 Oct 2018 10:51:29 -0400 Received: from enaf.dadc.sbc.com (localhost [127.0.0.1]) by tlpd255.enaf.dadc.sbc.com (8.14.5/8.14.5) with ESMTP id w9PEpRtu095024; Thu, 25 Oct 2018 09:51:27 -0500 Received: from zlp30499.vci.att.com (zlp30499.vci.att.com [135.46.181.149]) by tlpd255.enaf.dadc.sbc.com (8.14.5/8.14.5) with ESMTP id w9PEpKfK094752; Thu, 25 Oct 2018 09:51:20 -0500 Received: from zlp30499.vci.att.com (zlp30499.vci.att.com [127.0.0.1]) by zlp30499.vci.att.com (Service) with ESMTP id A19DF4013B2D; Thu, 25 Oct 2018 14:51:20 +0000 (GMT) Received: from clpi183.sldc.sbc.com (unknown [135.41.1.46]) by zlp30499.vci.att.com (Service) with ESMTP id 84320400074B; Thu, 25 Oct 2018 14:51:20 +0000 (GMT) Received: from sldc.sbc.com (localhost [127.0.0.1]) by clpi183.sldc.sbc.com (8.14.5/8.14.5) with ESMTP id w9PEpKsc021064; Thu, 25 Oct 2018 09:51:20 -0500 Received: from mail-azure.research.att.com (mail-azure.research.att.com [135.207.255.18]) by clpi183.sldc.sbc.com (8.14.5/8.14.5) with ESMTP id w9PEpAuK019995; Thu, 25 Oct 2018 09:51:10 -0500 Received: from exchange.research.att.com (njbdcas1.research.att.com [135.197.255.61]) by mail-azure.research.att.com (Postfix) with ESMTP id EEF5DE45F9; Thu, 25 Oct 2018 10:51:09 -0400 (EDT) Received: from njmtexg5.research.att.com ([fe80::b09c:ff13:4487:78b6]) by njbdcas1.research.att.com ([fe80::8c6b:4b77:618f:9a01%11]) with mapi id 14.03.0415.000; Thu, 25 Oct 2018 10:50:25 -0400 From: "MORTON, ALFRED C (AL)" To: "opsec@ietf.org" , "bmwg@ietf.org" Thread-Topic: Call for adoption: draft-balarajah-bmwg-ngfw-performance Thread-Index: AdRpbQmISVir3THXT3m9iQjUgXW92gDBMFag Date: Thu, 25 Oct 2018 14:50:24 +0000 Message-ID: <4D7F4AD313D3FC43A053B309F97543CF557A801C@njmtexg5.research.att.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [69.141.203.172] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-10-25_07:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1810250125 Archived-At: Subject: [OPSEC] FW: Call for adoption: draft-balarajah-bmwg-ngfw-performance X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 19:56:24 -0000 OPSEC WG, Cross-posting this call for adoption, there was interest and presentation of this topic in the past @OPSEC. Al bmwg co-chair -----Original Message----- From: MORTON, ALFRED C (AL)=20 Sent: Sunday, October 21, 2018 2:39 PM To: bmwg@ietf.org Subject: Call for adoption: draft-balarajah-bmwg-ngfw-performance BMWG, At our three meetings so far this year, the BMWG reviewed a version of the Internet Draft on Benchmarking Methodology for Network Security Device Performance=20 https://tools.ietf.org/html/draft-balarajah-bmwg-ngfw-performance-05 The BMWG has already adopted a milestone on our charter: Aug 2018 Methodology for Next-Gen Firewall Benchmarking to IESG Review (in retrospect, this milestone was quite aspirational!) This message, therefore, starts a call for adoption on: Benchmarking Methodology for Network Security Device Performance=20 https://tools.ietf.org/html/draft-balarajah-bmwg-ngfw-performance-05 to run until Friday, November 9, 2018.=20 Please reply to bmwg@ietf.org indicating: (1) whether you support the adoption of the draft as the basis document for the existing milestone (2) whether you commit to reviewing the WG document if adopted =20 thanks for your consideration of the draft, and regards, Al bmwg co-chair From nobody Thu Oct 25 16:48:00 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B51D6130EF9 for ; Thu, 25 Oct 2018 16:47:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.357 X-Spam-Level: X-Spam-Status: No, score=-0.357 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_06_12=1.543, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1jbQFpE8KKjv for ; Thu, 25 Oct 2018 16:47:53 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E769C130F39 for ; Thu, 25 Oct 2018 16:47:52 -0700 (PDT) Received: from [192.168.0.104] (224.red-83-41-246.dynamicip.rima-tde.net [83.41.246.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id BA46187403; Fri, 26 Oct 2018 01:47:49 +0200 (CEST) To: "Eric Vyncke (evyncke)" , "liushucheng@huawei.com" , "opsec@ietf.org" References: <4E5EDCAD-7923-4F24-898F-723C301361D1@cisco.com> From: Fernando Gont Openpgp: preference=signencrypt Autocrypt: addr=fgont@si6networks.com; prefer-encrypt=mutual; keydata= xsFNBE5so2gBEACzBQBLUy8nzgAzSZn6ViXT6TmZBFNYNqTpPRvTVtUqF6+tkI+IEd9N2E8p pXUXCd0W4dkxz6o7pagnK63m4QSueggvp881RVVHOF8oTSHOdnGxLfLeLNJFKE1FOutU3vod GK/wG/Fwzkv9MebdXpMlLV8nnJuAt66XGl/lU1JrNfrKO4SoYQi4TsB/waUQcygh7OR/PEO0 EttiU8kZUbZNv58WH+PAj/rdZCrgUSiGXiWUQQKShqKnJxLuAcTcg5YRwL8se/V6ciW0QR9i /sr52gSmLLbW5N3hAoO+nv1V/9SjJAUvzXu43k8sua/XlCXkqU7uLj41CRR72JeUZ4DQsYfP LfNPC98ZGTVxbWbFtLXxpzzDDT8i3uo7w1LJ2Ij/d5ezcARqw01HGljWWxnidUrjbTpxkJ9X EllcsH94mer728j/HKzC9OcTuz6WUBP3Crgl6Q47gY5ZIiF0lsmd9/wxbaq5NiJ+lGuBRZrD v0dQx9KmyI0/pH2AF8cW897/6ypvcyD/1/11CJcN+uAGIrklwJlVpRSbKbFtGC6In592lhu7 wnK8cgyP5cTU+vva9+g6P1wehi4bylXdlKc6mMphbtSA+T3WBNP557+mh3L62l4pGaEGidcZ DLYT2Ud18eAJmxU3HnM8P3iZZgeoK7oqgb53/eg96vkONXNIOwARAQABzSVGZXJuYW5kbyBH b250IDxmZ29udEBzaTZuZXR3b3Jrcy5jb20+wsGBBBMBAgArAhsjBQkSzAMABgsJCAcDAgYV CAIJCgsEFgIDAQIeAQIXgAUCTmylpQIZAQAKCRCuJQ1VHU50kv7wD/9fuNtTfxSLk3B3Hs3p ixTy8YXVjdkVwWlnJjFd7BOWmg7sI+LDhpjGfT6+ddOiwkumnvUZpObodj4ysH0i8c7P4C5t F9yu7WjklSlrB5Rth2CGChg5bKt541z2WHkFFxys9qBLmCSYDeKQkzLqhCjIUJizY2kOJ2GI MnSFDzJjhSFEh//oW830Y8fel1xnf/NVF+lBVtRMtMOfoWUqDjvP3sJ1G4zgkDCnF0CfncLx +hq2Mv26Uq9OTzvLH9aSQQ/f067BOkKAJKsfHdborX4E96ISTz57/4xECRSMr5dVsKVm4Y// uVIsb+L5z+a32FaiBZIAKDgnJO7Z8j6CV5e5yfuBTtX52Yi9HjYYqnYJGSDxYd6igD4bWu+7 xmJPHjkdqZgGV6dQIgiUfqkU+s5Cv350vK48CMaT/ZLo2BdsMhWsmaHmb+waePUMyq6E4E9x 9Js+EJb9ZiCfxS9exgieZQpet1L36IvhiwByvkQM009ywfa30JeMOltUtfLi5V06WQWsTzPL 5C+4cpkguSuAJVDTctjCA0moIeVDOpJ8WH9voQ4IeWapQnX35OIoj1jGJqqYdx65gc1ygbyx b8vw+pJ9E5GLse5TQnYifOWpXzX9053dtbwp/2OVhU4KLlzfCPCEsoTyfu9nIZxdI2PMwiL5 M85BfjX4NmwBLmPGoM7BTQRObKNoARAAqqXCkr250BchRDmi+05F5UQFgylUh10XTAJxBeaQ UNtdxZiZRm6jgomSrqeYtricM9t9K0qb4X2ZXmAMW8o8AYW3RrQHTjcBwMnAKzUIEXXWaLfG cid/ygmvWzIHgMDQKP+MUq1AGQrnvt/MRLvZLyczAV1RTXS58qNaxtaSpc3K/yrDozh/a4pu WcUsVvIkzyx43sqcwamDSBb6U8JFoZizuLXiARLLASgyHrrCedNIZdWSx0z0iHEpZIelA2ih AGLiSMtmtikVEyrJICgO81DkKNCbBbPg+7fi23V6M24+3syHk3IdQibTtBMxinIPyLFF0byJ aGm0fmjefhnmVJyCIl/FDkCHprVhTme57G2/WdoGnUvnT7mcwDRb8XY5nNRkOJsqqLPemKjz kx8mXdQbunXtX9bKyVgd1gIl+LLsxbdzRCch773UBVoortPdK3kMyLtZ4uMeDX3comjx+6VL bztUdJ1Zc9/njwVG8fgmQ+0Kj5+bzQfUY+MmX0HTXIx3B4R1I1a8QoOwi1N+iZNdewV5Zfq+ 29NlQLnVPjCRCKbaz9k6RJ2oIti55YUI6zSsL3lmlOXsRbXN5bRswFczkNSCJxJMlDiyAUIC WOay7ymzvgzPa+BY/mYn94vRaurDQ4/ljOfj6oqgfjts+dJev4Jj89vp8MQI3KJpZPEAEQEA AcLBZQQYAQIADwUCTmyjaAIbDAUJEswDAAAKCRCuJQ1VHU50km4xEACho45PZrUjY4Zl2opR DFNo5a6roTOPpgwO9PcBb3I5F8yX2Dnew+9OhgWXbBhAFq4DCx+9Gjs43Bn60qbZTDbLGJ/m 8N4PwEiq0e5MKceYcbetEdEUWhm5L6psU9ZZ82GR3UGxPXYe+oifEoJjOXQ39avf9S8p3yKP Diil0E79rn7LbJjMcgMLyjFg9SDoJ6pHLtniJoDhEAaSSgeV7Y745+gyMIdtQmrFHfqrFdjq D6G0HE+Z68ywc5KN67YxhvhBmSycs1ZSKAXv1zLDlXdmjHDHkU3xMcB+RkuiTba8yRFYwb/n j62CC4NhFTuIKOc4ta3dJsyXTGh/hO9UjWUnmAGfd0fnzTBZF8Qlnw/8ftx5lt4/O+eqY1EN RITScnPzXE/wMOlTtdkddQ+QN6xt6jyR2XtAIi7aAFHypIqA3lLI9hF9x+lj4UQ2yA9LqpoX 6URpPOd13JhAyDe47cwsP1u9Y+OBvQTVLSvw7Liu2b4KjqL4lx++VdBi7dXsjJ6kjIRjI6Lb WVpxe8LumMCuVDepTafBZ49gr7Fgc4F9ZSCo6ChgQNLn6WDzIkqFX+42KuHz90AHWhuW+KZR 1aJylERWeTcMCGUSBptd48KniWmD6kPKpzwoMkJtEXTuO2lVuborxzwuqOTNuYg9lWDl7zKt wPI9brGzquUHy4qRrA== Message-ID: Date: Thu, 25 Oct 2018 18:54:13 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: <4E5EDCAD-7923-4F24-898F-723C301361D1@cisco.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [OPSEC] Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 23:48:00 -0000 Hello, Eric, No IPRs that I know of. Cheers, Fernando On 10/25/18 9:51 AM, Eric Vyncke (evyncke) wrote: > Dear authors, > >   > > I am the document shepherd for your I-D > draft-ietf-opsec-ipv6-eh-filtering-06. > >   > > Can you respond to this message stating whether they know of any IPR > associated with this draft? > >   > > Thank you > >   > > -éric > -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Thu Oct 25 18:50:08 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40934130E08 for ; Thu, 25 Oct 2018 18:50:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lDq7ay3Nlmgl for ; Thu, 25 Oct 2018 18:50:04 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CD2C1294D7 for ; Thu, 25 Oct 2018 18:50:04 -0700 (PDT) Received: from lhreml705-cah.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id D505476E526B4 for ; Fri, 26 Oct 2018 02:50:00 +0100 (IST) Received: from DGGEML406-HUB.china.huawei.com (10.3.17.50) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 26 Oct 2018 02:50:02 +0100 Received: from DGGEML529-MBX.china.huawei.com ([169.254.6.70]) by dggeml406-hub.china.huawei.com ([10.3.17.50]) with mapi id 14.03.0382.000; Fri, 26 Oct 2018 09:49:57 +0800 From: "Liushucheng (Will Liu)" To: Fernando Gont , "Eric Vyncke (evyncke)" , "opsec@ietf.org" Thread-Topic: Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? Thread-Index: AQHUbDeXNpGRix0Mn0+E+G7LPH4XFaUvqCuAgAEbpQA= Date: Fri, 26 Oct 2018 01:49:56 +0000 Message-ID: References: <4E5EDCAD-7923-4F24-898F-723C301361D1@cisco.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.25.127.244] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [OPSEC] Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 01:50:06 -0000 Tm8gZnJvbSBteSBzaWRlLiA6KQ0KVGhhbmtzIQ0KDQpSZWdhcmRzLA0KV2lsbCAoTElVIFNodWNo ZW5nKQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogRmVybmFuZG8gR29udCBb bWFpbHRvOmZnb250QHNpNm5ldHdvcmtzLmNvbV0gDQpTZW50OiBGcmlkYXksIE9jdG9iZXIgMjYs IDIwMTggMTI6NTQgQU0NClRvOiBFcmljIFZ5bmNrZSAoZXZ5bmNrZSkgPGV2eW5ja2VAY2lzY28u Y29tPjsgTGl1c2h1Y2hlbmcgKFdpbGwgTGl1KSA8bGl1c2h1Y2hlbmdAaHVhd2VpLmNvbT47IG9w c2VjQGlldGYub3JnDQpDYzogUm9uIEJvbmljYSA8cmJvbmljYUBqdW5pcGVyLm5ldD4NClN1Ympl Y3Q6IFJlOiBJcyB0aGVyZSBhbnkgSVBSIGFzc29jaWF0ZWQgdG8gZHJhZnQtaWV0Zi1vcHNlYy1p cHY2LWVoLWZpbHRlcmluZy0wNiA/DQoNCkhlbGxvLCBFcmljLA0KDQpObyBJUFJzIHRoYXQgSSBr bm93IG9mLg0KDQpDaGVlcnMsDQpGZXJuYW5kbw0KDQoNCg0KDQpPbiAxMC8yNS8xOCA5OjUxIEFN LCBFcmljIFZ5bmNrZSAoZXZ5bmNrZSkgd3JvdGU6DQo+IERlYXIgYXV0aG9ycywNCj4gDQo+IMKg DQo+IA0KPiBJIGFtIHRoZSBkb2N1bWVudCBzaGVwaGVyZCBmb3IgeW91ciBJLUQgDQo+IGRyYWZ0 LWlldGYtb3BzZWMtaXB2Ni1laC1maWx0ZXJpbmctMDYuDQo+IA0KPiDCoA0KPiANCj4gQ2FuIHlv dSByZXNwb25kIHRvIHRoaXMgbWVzc2FnZSBzdGF0aW5nIHdoZXRoZXIgdGhleSBrbm93IG9mIGFu eSBJUFIgDQo+IGFzc29jaWF0ZWQgd2l0aCB0aGlzIGRyYWZ0Pw0KPiANCj4gwqANCj4gDQo+IFRo YW5rIHlvdQ0KPiANCj4gwqANCj4gDQo+IC3DqXJpYw0KPiANCg0KDQotLQ0KRmVybmFuZG8gR29u dA0KU0k2IE5ldHdvcmtzDQplLW1haWw6IGZnb250QHNpNm5ldHdvcmtzLmNvbQ0KUEdQIEZpbmdl cnByaW50OiA2NjY2IDMxQzYgRDQ4NCA2M0IyIDhGQjEgRTNDNCBBRTI1IDBENTUgMUQ0RSA3NDky DQoNCg0KDQoNCg== From nobody Fri Oct 26 12:20:29 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBC85130DFC for ; Fri, 26 Oct 2018 12:20:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.852 X-Spam-Level: X-Spam-Status: No, score=-0.852 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_12_24=1.049, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9QvFQGqEfbQu for ; Fri, 26 Oct 2018 12:20:25 -0700 (PDT) Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E21E130DF3 for ; Fri, 26 Oct 2018 12:20:25 -0700 (PDT) Received: from [192.168.0.104] (224.red-83-41-246.dynamicip.rima-tde.net [83.41.246.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 459068788E; Fri, 26 Oct 2018 21:20:16 +0200 (CEST) From: Fernando Gont Openpgp: preference=signencrypt Autocrypt: addr=fgont@si6networks.com; prefer-encrypt=mutual; keydata= xsFNBE5so2gBEACzBQBLUy8nzgAzSZn6ViXT6TmZBFNYNqTpPRvTVtUqF6+tkI+IEd9N2E8p pXUXCd0W4dkxz6o7pagnK63m4QSueggvp881RVVHOF8oTSHOdnGxLfLeLNJFKE1FOutU3vod GK/wG/Fwzkv9MebdXpMlLV8nnJuAt66XGl/lU1JrNfrKO4SoYQi4TsB/waUQcygh7OR/PEO0 EttiU8kZUbZNv58WH+PAj/rdZCrgUSiGXiWUQQKShqKnJxLuAcTcg5YRwL8se/V6ciW0QR9i /sr52gSmLLbW5N3hAoO+nv1V/9SjJAUvzXu43k8sua/XlCXkqU7uLj41CRR72JeUZ4DQsYfP LfNPC98ZGTVxbWbFtLXxpzzDDT8i3uo7w1LJ2Ij/d5ezcARqw01HGljWWxnidUrjbTpxkJ9X EllcsH94mer728j/HKzC9OcTuz6WUBP3Crgl6Q47gY5ZIiF0lsmd9/wxbaq5NiJ+lGuBRZrD v0dQx9KmyI0/pH2AF8cW897/6ypvcyD/1/11CJcN+uAGIrklwJlVpRSbKbFtGC6In592lhu7 wnK8cgyP5cTU+vva9+g6P1wehi4bylXdlKc6mMphbtSA+T3WBNP557+mh3L62l4pGaEGidcZ DLYT2Ud18eAJmxU3HnM8P3iZZgeoK7oqgb53/eg96vkONXNIOwARAQABzSVGZXJuYW5kbyBH b250IDxmZ29udEBzaTZuZXR3b3Jrcy5jb20+wsGBBBMBAgArAhsjBQkSzAMABgsJCAcDAgYV CAIJCgsEFgIDAQIeAQIXgAUCTmylpQIZAQAKCRCuJQ1VHU50kv7wD/9fuNtTfxSLk3B3Hs3p ixTy8YXVjdkVwWlnJjFd7BOWmg7sI+LDhpjGfT6+ddOiwkumnvUZpObodj4ysH0i8c7P4C5t F9yu7WjklSlrB5Rth2CGChg5bKt541z2WHkFFxys9qBLmCSYDeKQkzLqhCjIUJizY2kOJ2GI MnSFDzJjhSFEh//oW830Y8fel1xnf/NVF+lBVtRMtMOfoWUqDjvP3sJ1G4zgkDCnF0CfncLx +hq2Mv26Uq9OTzvLH9aSQQ/f067BOkKAJKsfHdborX4E96ISTz57/4xECRSMr5dVsKVm4Y// uVIsb+L5z+a32FaiBZIAKDgnJO7Z8j6CV5e5yfuBTtX52Yi9HjYYqnYJGSDxYd6igD4bWu+7 xmJPHjkdqZgGV6dQIgiUfqkU+s5Cv350vK48CMaT/ZLo2BdsMhWsmaHmb+waePUMyq6E4E9x 9Js+EJb9ZiCfxS9exgieZQpet1L36IvhiwByvkQM009ywfa30JeMOltUtfLi5V06WQWsTzPL 5C+4cpkguSuAJVDTctjCA0moIeVDOpJ8WH9voQ4IeWapQnX35OIoj1jGJqqYdx65gc1ygbyx b8vw+pJ9E5GLse5TQnYifOWpXzX9053dtbwp/2OVhU4KLlzfCPCEsoTyfu9nIZxdI2PMwiL5 M85BfjX4NmwBLmPGoM7BTQRObKNoARAAqqXCkr250BchRDmi+05F5UQFgylUh10XTAJxBeaQ UNtdxZiZRm6jgomSrqeYtricM9t9K0qb4X2ZXmAMW8o8AYW3RrQHTjcBwMnAKzUIEXXWaLfG cid/ygmvWzIHgMDQKP+MUq1AGQrnvt/MRLvZLyczAV1RTXS58qNaxtaSpc3K/yrDozh/a4pu WcUsVvIkzyx43sqcwamDSBb6U8JFoZizuLXiARLLASgyHrrCedNIZdWSx0z0iHEpZIelA2ih AGLiSMtmtikVEyrJICgO81DkKNCbBbPg+7fi23V6M24+3syHk3IdQibTtBMxinIPyLFF0byJ aGm0fmjefhnmVJyCIl/FDkCHprVhTme57G2/WdoGnUvnT7mcwDRb8XY5nNRkOJsqqLPemKjz kx8mXdQbunXtX9bKyVgd1gIl+LLsxbdzRCch773UBVoortPdK3kMyLtZ4uMeDX3comjx+6VL bztUdJ1Zc9/njwVG8fgmQ+0Kj5+bzQfUY+MmX0HTXIx3B4R1I1a8QoOwi1N+iZNdewV5Zfq+ 29NlQLnVPjCRCKbaz9k6RJ2oIti55YUI6zSsL3lmlOXsRbXN5bRswFczkNSCJxJMlDiyAUIC WOay7ymzvgzPa+BY/mYn94vRaurDQ4/ljOfj6oqgfjts+dJev4Jj89vp8MQI3KJpZPEAEQEA AcLBZQQYAQIADwUCTmyjaAIbDAUJEswDAAAKCRCuJQ1VHU50km4xEACho45PZrUjY4Zl2opR DFNo5a6roTOPpgwO9PcBb3I5F8yX2Dnew+9OhgWXbBhAFq4DCx+9Gjs43Bn60qbZTDbLGJ/m 8N4PwEiq0e5MKceYcbetEdEUWhm5L6psU9ZZ82GR3UGxPXYe+oifEoJjOXQ39avf9S8p3yKP Diil0E79rn7LbJjMcgMLyjFg9SDoJ6pHLtniJoDhEAaSSgeV7Y745+gyMIdtQmrFHfqrFdjq D6G0HE+Z68ywc5KN67YxhvhBmSycs1ZSKAXv1zLDlXdmjHDHkU3xMcB+RkuiTba8yRFYwb/n j62CC4NhFTuIKOc4ta3dJsyXTGh/hO9UjWUnmAGfd0fnzTBZF8Qlnw/8ftx5lt4/O+eqY1EN RITScnPzXE/wMOlTtdkddQ+QN6xt6jyR2XtAIi7aAFHypIqA3lLI9hF9x+lj4UQ2yA9LqpoX 6URpPOd13JhAyDe47cwsP1u9Y+OBvQTVLSvw7Liu2b4KjqL4lx++VdBi7dXsjJ6kjIRjI6Lb WVpxe8LumMCuVDepTafBZ49gr7Fgc4F9ZSCo6ChgQNLn6WDzIkqFX+42KuHz90AHWhuW+KZR 1aJylERWeTcMCGUSBptd48KniWmD6kPKpzwoMkJtEXTuO2lVuborxzwuqOTNuYg9lWDl7zKt wPI9brGzquUHy4qRrA== To: "draft-ietf-opsec-v6@tools.ietf.org" Cc: "'opsec@ietf.org'" Message-ID: Date: Fri, 26 Oct 2018 04:15:27 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [OPSEC] Some feedback on draft-ietf-opsec-v6 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 19:20:28 -0000 Folks, Here are my notes while re-reading the doc. My comments have typos, questionable English grammar :-), and missing ("you might want to" || "please" || "I'd") all over the place (*please* keep that in mind :-) ). p 4: > A common question is whether companies should use PI vs PA space > [RFC7381], but from a security perspective there is little > difference. expand acronym upon first usage. p4: > hence, for > large network, s/network/networks/ p4: > That RFC also recognizes the > need for host tracking and lists several mechanisms of how this can > be accomlished in section 9.1 or by the data sources (Section 2.6.1) > section of this document. This one seems hard to parse ("or by the data..") also s/accomlished/accomplished/ p5: > [SCANNING] > shows that there are scientifically based mechanisms that make > scanning for IPv6 reachable nodes more realizable than expected; see > also [RFC7707]. IIRC, [SCANNING] talks about the structure of the network bits, rathr than host bits. You might want to move this ref to the previous page when discussing using the bits for geography, etc. p5: > While in some unmanaged environments obfuscating addresses could be > considered a benefit; it is a better practice to ensure that > perimeter rules are actively These need not be ... XOR ... One could do both :-) p5: > Unique Local Addresses (ULAs) RFC4193 [RFC4193] are intended for > scenarios where IP addresses are not globally reachable, despite > formally having global scope. I think this should be something like "..for scenarios where systems are not..." (see s/IP addresses/systems/) p5: > RFC4193 [RFC4193] states that if these addresses are > accidentally leaked outside of a site via routing or DNS, there is no > conflict with any other addresses. However, it would be prudent to > consider ingress filtering packets with ULA source addresses or > egress filtering packets with ULA destination addresses at the domain > boundary. Some might read this in the wrong way: like the lack of conflict my be enough reason not to filter. Thing is that lack of conflict can be of benefit if you merge to nets. But you should always filter on your edge... otherwise e.g. your peer could get ULA packets to you. p5: > ULAs are assigned within pseudo-random /48 prefixes created as > specified in RFC4193 [RFC4193]. They could be useful for > infrastructure hiding as described in RFC4864 [RFC4864]. Some people (well, "folk") in argentina :-) randomize the prefixes, since otherwise they lead to hard-to-remember addresses. :-) Additionally, given that 2001:db8::/16 cannot be used in practice (they are dropped at nodes, and its impossible to override this), some folks in ARG frequently use ULAs in e.g. virtual labs (and the corresponding documetation). p5: While not wanting to get into "ula usage", they can be useful when: * you have internal servers that should only be reachable by internal nodes. This makes the border ACLs easier. And the addresses don't change if your provider leases you a different prefix. * you want to keep communication within the internal network going while there's an outage with your provider. In that case your PA space would time out, and if you don't use ULAs, you might loose commuunication within your network. Pge 6 and others: > RFC6164 [RFC6164] in section 5.1 documents the reasons why to use a > /127 for inter-router point-to-point links; notably, a /127 prevents > the ping-pong attack between routers not implementing correctly > RFC4443 [RFC4443]. The previous recommendation of RFC3627 [RFC3627] > has been obsoleted and marked Historic by RFC6547 [RFC6547]) If the ref is the rfc # within brakes, I would just include the reference.. otherwise "RFCxxxx [RFCxxxx]" duplicastes stuf unnecessarily. Section 2.1.3: Might want to point out that, more importantly, /127s mitigate NCE attacks for cases where the implementation does not e.g. limit the number of entries in the "INCOMPLETE" state. > 2.1.4. Temporary Addresses - Privacy Extensions for SLAAC > > Normal stateless address autoconfiguration (SLAAC) relies on the > automatically generated EUI-64 address, which together with the /64 > prefix makes up the global unique IPv6 address. The EUI-64 address > is generated from the 48-bit MAC address.RFC8064 [RFC8064] specifies > another way than using EUI-64 while still keeping the same IID for > each network prefix; this allows SLAAC nodes to always have the same > stable IPv6 address on a specific network while having different IPv6 > address on different networks. EUI-64 is kind of legacy now. At least recent versions of modern OSes use RFC7217. Besides RFC8064 formely recommends against EUI-64 and recommends RFC7217. (the text would seem t suggest you can do either eui64 or rfc7217.. but you shouldnt). Pag 6: > Privacy extension addresses a.k.a. > temporary addresses may help to mitigate the correlation of > activities of a node within the same network, and may also reduce the > attack exposure window. It certainly does reduce the attack window, also such reduction might be questionable (ie., there's plenty of time to attack an adress that remains valid for one day) p 7: > When > [RFC8064] is available, the stable temporary address are probably a > good balance between privacy (among multiple networks) and security/ > user attribution (within a network). s/stable temporary/stable privacy/ p7: > Using privacy extension addresses prevents the operator from building > a priori host specific access control lists (ACLs). It must be noted > that recent versions of Windows do not use the MAC address anymore to > build the stable address but use a mechanism similar to the one > described in [RFC7217], this also means that such an ACL cannot be > configured based solely on the MAC address of the nodes, diminishing > the value of such ACL. At least some versions of windows used to generate a random token, and use it for the IID. in that sense, addresses configured for the same NIC for different prefixes wuld get the same IID (in contrast with rfc7217, where the IID would eb different) Section 2.1.6: RFC7610 might eb of use here. I guess there's also somethign from SAVI-land? p 9: > > A firewall or any edge device able to enforce the recommended order > and number of occurences of extension headers is recommended. change the last instance of "recommended" to avoid repetition. > > 2.2.3. Fragment Header > > The fragment header is used by the source when it has to fragment > packets. RFC7112 [RFC7112] and section 4.5 of RFC8200 [RFC8200] > explain why it is important to: > > firewall and security devices should drop first fragment not > containing an upper-layer header; > > destination nodes should discard first fragments not containing an > upper-layer header. > > Else, stateless filtering could be bypassed by an hostile party. > RFC6980 [RFC6980] applies the same rule to NDP and the RA-guard > function described in RFC6105 [RFC6105]. The first para seems to have something missing (kind of "nodes should drop first fragments that do not contain the entire ipv6 header chain"). Note: RFC6980 bans fragmentation for ND altogether -- RFC7112 jsut says that the first fragment must contain the entire EH chain. RFC7113 spells out how to implement ra-guard to avoid circumvention. P.S.: May send more as I keep reading... Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 From nobody Sat Oct 27 09:15:55 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25DD3130DE0 for ; Sat, 27 Oct 2018 09:15:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wyY-fYtuVquc for ; Sat, 27 Oct 2018 09:15:51 -0700 (PDT) Received: from d.mail.sonic.net (d.mail.sonic.net [64.142.111.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC97E127332 for ; Sat, 27 Oct 2018 09:15:51 -0700 (PDT) Received: from [192.168.9.116] ([216.243.59.39]) (authenticated bits=0) by d.mail.sonic.net (8.15.1/8.15.1) with ESMTPSA id w9RGFmHu017264 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Sat, 27 Oct 2018 09:15:49 -0700 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_FF00E9C6-ED3D-4484-981A-4F30050ABDA2"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail From: Merike Kaeo In-Reply-To: Date: Sat, 27 Oct 2018 09:15:43 -0700 Cc: "draft-ietf-opsec-v6@tools.ietf.org" , "opsec@ietf.org" Message-Id: <83D2F523-0775-452F-A902-D6350C336F39@doubleshotsecurity.com> References: To: Fernando Gont X-Mailer: Apple Mail (2.3124) X-Sonic-CAuth: UmFuZG9tSVYFOvV/qMBThb+q1nYoNwOrlAD5uaqIQBsZduT2Nz3t1D29b3K2ePEcPD97SojjtZf32gq+Mg7uxwx5+D/vyyl+ X-Sonic-ID: C;qnshkQPa6BGETP+mSH5B5g== M;PLJYkQPa6BGETP+mSH5B5g== X-Sonic-Spam-Details: 0.0/5.0 by cerberusd Archived-At: Subject: Re: [OPSEC] Some feedback on draft-ietf-opsec-v6 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Oct 2018 16:15:54 -0000 --Apple-Mail=_FF00E9C6-ED3D-4484-981A-4F30050ABDA2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Appreciate these first set of comments. - merike > On Oct 25, 2018, at 7:15 PM, Fernando Gont = wrote: >=20 > Folks, >=20 > Here are my notes while re-reading the doc. My comments have typos, > questionable English grammar :-), and missing ("you might want to" || > "please" || "I'd") all over the place (*please* keep that in mind :-) = ). >=20 >=20 > p 4: >> A common question is whether companies should use PI vs PA space >> [RFC7381], but from a security perspective there is little >> difference. >=20 > expand acronym upon first usage. >=20 >=20 > p4: >> hence, for >> large network, >=20 > s/network/networks/ >=20 >=20 > p4: >> That RFC also recognizes the >> need for host tracking and lists several mechanisms of how this can >> be accomlished in section 9.1 or by the data sources (Section = 2.6.1) >> section of this document. >=20 > This one seems hard to parse ("or by the data..") > also s/accomlished/accomplished/ >=20 >=20 > p5: >> [SCANNING] >> shows that there are scientifically based mechanisms that make >> scanning for IPv6 reachable nodes more realizable than expected; = see >> also [RFC7707]. >=20 >=20 > IIRC, [SCANNING] talks about the structure of the network bits, rathr > than host bits. You might want to move this ref to the previous page > when discussing using the bits for geography, etc. >=20 >=20 > p5: >> While in some unmanaged environments obfuscating addresses could be >> considered a benefit; it is a better practice to ensure that >> perimeter rules are actively >=20 > These need not be ... XOR ... One could do both :-) >=20 >=20 > p5: >> Unique Local Addresses (ULAs) RFC4193 [RFC4193] are intended for >> scenarios where IP addresses are not globally reachable, despite >> formally having global scope. >=20 > I think this should be something like "..for scenarios where systems = are > not..." (see s/IP addresses/systems/) >=20 >=20 > p5: >> RFC4193 [RFC4193] states that if these addresses are >> accidentally leaked outside of a site via routing or DNS, there is = no >> conflict with any other addresses. However, it would be prudent to >> consider ingress filtering packets with ULA source addresses or >> egress filtering packets with ULA destination addresses at the = domain >> boundary. >=20 >=20 > Some might read this in the wrong way: like the lack of conflict my be > enough reason not to filter. Thing is that lack of conflict can be of > benefit if you merge to nets. But you should always filter on your > edge... otherwise e.g. your peer could get ULA packets to you. >=20 >=20 > p5: >> ULAs are assigned within pseudo-random /48 prefixes created as >> specified in RFC4193 [RFC4193]. They could be useful for >> infrastructure hiding as described in RFC4864 [RFC4864]. >=20 > Some people (well, "folk") in argentina :-) randomize the prefixes, > since otherwise they lead to hard-to-remember addresses. :-) > Additionally, given that 2001:db8::/16 cannot be used in practice = (they > are dropped at nodes, and its impossible to override this), some folks > in ARG frequently use ULAs in e.g. virtual labs (and the corresponding > documetation). >=20 >=20 > p5: > While not wanting to get into "ula usage", they can be useful when: > * you have internal servers that should only be reachable by internal > nodes. This makes the border ACLs easier. And the addresses don't = change > if your provider leases you a different prefix. >=20 > * you want to keep communication within the internal network going = while > there's an outage with your provider. In that case your PA space would > time out, and if you don't use ULAs, you might loose commuunication > within your network. >=20 >=20 > Pge 6 and others: >> RFC6164 [RFC6164] in section 5.1 documents the reasons why to use a >> /127 for inter-router point-to-point links; notably, a /127 = prevents >> the ping-pong attack between routers not implementing correctly >> RFC4443 [RFC4443]. The previous recommendation of RFC3627 = [RFC3627] >> has been obsoleted and marked Historic by RFC6547 [RFC6547]) >=20 > If the ref is the rfc # within brakes, I would just include the > reference.. otherwise "RFCxxxx [RFCxxxx]" duplicastes stuf = unnecessarily. >=20 >=20 >=20 > Section 2.1.3: > Might want to point out that, more importantly, /127s mitigate NCE > attacks for cases where the implementation does not e.g. limit the > number of entries in the "INCOMPLETE" state. >=20 >=20 >=20 >> 2.1.4. Temporary Addresses - Privacy Extensions for SLAAC >>=20 >> Normal stateless address autoconfiguration (SLAAC) relies on the >> automatically generated EUI-64 address, which together with the /64 >> prefix makes up the global unique IPv6 address. The EUI-64 address >> is generated from the 48-bit MAC address.RFC8064 [RFC8064] = specifies >> another way than using EUI-64 while still keeping the same IID for >> each network prefix; this allows SLAAC nodes to always have the = same >> stable IPv6 address on a specific network while having different = IPv6 >> address on different networks. >=20 > EUI-64 is kind of legacy now. At least recent versions of modern OSes > use RFC7217. Besides RFC8064 formely recommends against EUI-64 and > recommends RFC7217. (the text would seem t suggest you can do either > eui64 or rfc7217.. but you shouldnt). >=20 >=20 > Pag 6: >> Privacy extension addresses a.k.a. >> temporary addresses may help to mitigate the correlation of >> activities of a node within the same network, and may also reduce = the >> attack exposure window. >=20 > It certainly does reduce the attack window, also such reduction might = be > questionable (ie., there's plenty of time to attack an adress that > remains valid for one day) >=20 >=20 >=20 > p 7: >> When >> [RFC8064] is available, the stable temporary address are probably a >> good balance between privacy (among multiple networks) and = security/ >> user attribution (within a network). >=20 > s/stable temporary/stable privacy/ >=20 >=20 > p7: >> Using privacy extension addresses prevents the operator from = building >> a priori host specific access control lists (ACLs). It must be = noted >> that recent versions of Windows do not use the MAC address anymore = to >> build the stable address but use a mechanism similar to the one >> described in [RFC7217], this also means that such an ACL cannot be >> configured based solely on the MAC address of the nodes, = diminishing >> the value of such ACL. >=20 > At least some versions of windows used to generate a random token, and > use it for the IID. in that sense, addresses configured for the same = NIC > for different prefixes wuld get the same IID (in contrast with = rfc7217, > where the IID would eb different) >=20 >=20 > Section 2.1.6: > RFC7610 might eb of use here. I guess there's also somethign from = SAVI-land? >=20 >=20 >=20 > p 9: >>=20 >> A firewall or any edge device able to enforce the recommended order >> and number of occurences of extension headers is recommended. >=20 > change the last instance of "recommended" to avoid repetition. >=20 >=20 >=20 >>=20 >> 2.2.3. Fragment Header >>=20 >> The fragment header is used by the source when it has to fragment >> packets. RFC7112 [RFC7112] and section 4.5 of RFC8200 [RFC8200] >> explain why it is important to: >>=20 >> firewall and security devices should drop first fragment not >> containing an upper-layer header; >>=20 >> destination nodes should discard first fragments not containing = an >> upper-layer header. >>=20 >> Else, stateless filtering could be bypassed by an hostile party. >> RFC6980 [RFC6980] applies the same rule to NDP and the RA-guard >> function described in RFC6105 [RFC6105]. >=20 > The first para seems to have something missing (kind of "nodes should > drop first fragments that do not contain the entire ipv6 header = chain"). >=20 > Note: RFC6980 bans fragmentation for ND altogether -- RFC7112 jsut = says > that the first fragment must contain the entire EH chain. RFC7113 = spells > out how to implement ra-guard to avoid circumvention. >=20 >=20 > P.S.: May send more as I keep reading... >=20 > Thanks! >=20 > Cheers, > -- > Fernando Gont > SI6 Networks > e-mail: fgont@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 >=20 >=20 >=20 >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec >=20 --Apple-Mail=_FF00E9C6-ED3D-4484-981A-4F30050ABDA2 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJb1I81AAoJEA7gPO9LJuahBkYH/juMwKP3yOGvj/izOhAnqHvV 7HXqD9vBBL76XTP3CUw9PMVg7SaLPtztthCG6D4QsVFmGIvyeGb3XlWOfQ9g08tx IKIJt/25W/+EplDayfWbQfgJuTkkovhuTmfzKqUXssA9VkdmNDeBoSrwrubihT4m cRPpXAG6W7fFhZZAoSEUrpnxpGxSN8b9s4KcN89VVA1s1HnOAeDwx1fWNZ1l2WU6 QBrmRWKMmga0375h/SxyosgdRMltvfTzHe2VuX8pPiBCN0gWtxpO7BecBprKGBRd jj9vNY7xPDG5Xkgu0BfXDcgybAkh/ioWmYF3MPV3j0h4QLp8mnvG2nRDnjw3AY8= =FQIw -----END PGP SIGNATURE----- --Apple-Mail=_FF00E9C6-ED3D-4484-981A-4F30050ABDA2-- From nobody Mon Oct 29 04:34:29 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B20F130EAF for ; Mon, 29 Oct 2018 04:34:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1nl_PO6W9kDN for ; Mon, 29 Oct 2018 04:34:25 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AFE8130EB2 for ; Mon, 29 Oct 2018 04:34:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2924; q=dns/txt; s=iport; t=1540812864; x=1542022464; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=7NIsnzcnu08axrnALftMuTkqAUemai/U3z9MpxZPxUU=; b=WlbixnsW9jlqf5K6ZdBF097ZNIKH7dQW3Ie2+qrXbOs5bRSzfcOVQpWA 8uIHUbyxpab4k/cmYwZyI1orxBTi+/ndxRzAtEDJ8ifYVoiA+EjNnk6Co 4ypAxXl0Y4ovGAj4vf0JRmfPKCJXVzuFJmhs4DfvYma6uqW9dEev08a/Z o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AHAAAC79Zb/5BdJa1kGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBUwIBAQEBAQsBggRmfygKg2uUL4INlyAUgWYLAQEYC4R?= =?us-ascii?q?JAheDESE2Cw0BAwEBAgEBAm0cDIU6AQEBAQMBASEROgsMBAIBBgIRBAEBAQI?= =?us-ascii?q?CIwMCAgIlCxQBCAgCBA4FgyEBggEPi0GbToEuhXuEEwWBC4pcF4FBP4E4H4I?= =?us-ascii?q?eLoMbAQGBKQUBEgEfF4JtMYImAohxhW+BRIRIih0JApECGJBHlnUCERSBJiQ?= =?us-ascii?q?DLmRrBnAVOyoBgkGLGYU+b4pngR+BHwEB?= X-IronPort-AV: E=Sophos;i="5.54,440,1534809600"; d="scan'208";a="472914007" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Oct 2018 11:34:23 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id w9TBYN1m031872 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 29 Oct 2018 11:34:23 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 29 Oct 2018 07:34:22 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Mon, 29 Oct 2018 07:34:22 -0400 From: "Eric Vyncke (evyncke)" To: "Liushucheng (Will Liu)" CC: "'Fernando Gont'" , "opsec@ietf.org" , Ron Bonica Thread-Topic: Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? Thread-Index: AQHUbDeXNpGRix0Mn0+E+G7LPH4XFaUvqCuAgAEbpQCABVFq0IAAXNUA Date: Mon, 29 Oct 2018 11:34:22 +0000 Message-ID: <78A4D8A9-9B04-44A3-AB13-603B962859AB@cisco.com> References: <4E5EDCAD-7923-4F24-898F-723C301361D1@cisco.com> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.55.56.4] Content-Type: text/plain; charset="utf-8" Content-ID: <1F61E7062907C04EA465B1B7418CC895@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: rcdn-core-8.cisco.com Archived-At: Subject: Re: [OPSEC] Is there any IPR associated to draft-ietf-opsec-ipv6-eh-filtering-06 ? X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Oct 2018 11:34:27 -0000 W0FzIGl0IGZhaWxlZCB0byByZWFjaCB0aGUgbGlzdCwgSSBhbSBmb3J3YXJkaW5nIHlvdXIgcmVw bHkgdG8gdGhlIGxpc3RdDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggV2lsbCAoYW5kIHNvcnJ5IGZv ciB0aGUgZmlyc3QgbmFtZSBtaXN0YWtlIG9mIG1pbmUuLi4pDQoNCi3DqXJpYw0KDQrvu79PbiAy OS8xMC8yMDE4LCAxMjowMywgIkxpdXNodWNoZW5nIChXaWxsIExpdSkiIDxsaXVzaHVjaGVuZ0Bo dWF3ZWkuY29tPiB3cm90ZToNCg0KICAgIEhpIEVyaWMsDQogICAgDQogICAgSSBzZW50IHRoZSBi ZWxvdyBlbWFpbCBsYXN0IHdlZWsuIEhvd2V2ZXIsIEkgcmVjZWl2ZWQgYSBmYWlsdXJlIG5vdGlm aWNhdGlvbi4gDQogICAgDQogICAgUmVnYXJkcywgLyDoh7TnpLwhIA0KICAgIFdpbGwgTElVICAv IOWImOagkeaIkA0KICAgIA0KICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgRnJv bTogT1BTRUMgW21haWx0bzpvcHNlYy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTGl1 c2h1Y2hlbmcgKFdpbGwgTGl1KQ0KICAgIFNlbnQ6IEZyaWRheSwgT2N0b2JlciAyNiwgMjAxOCA5 OjUwIEFNDQogICAgVG86IEZlcm5hbmRvIEdvbnQgPGZnb250QHNpNm5ldHdvcmtzLmNvbT47IEVy aWMgVnluY2tlIChldnluY2tlKSA8ZXZ5bmNrZUBjaXNjby5jb20+OyBvcHNlY0BpZXRmLm9yZw0K ICAgIFN1YmplY3Q6IFJlOiBbT1BTRUNdIElzIHRoZXJlIGFueSBJUFIgYXNzb2NpYXRlZCB0byBk cmFmdC1pZXRmLW9wc2VjLWlwdjYtZWgtZmlsdGVyaW5nLTA2ID8NCiAgICANCiAgICBObyBmcm9t IG15IHNpZGUuIDopDQogICAgVGhhbmtzIQ0KICAgIA0KICAgIFJlZ2FyZHMsDQogICAgV2lsbCAo TElVIFNodWNoZW5nKQ0KICAgIA0KICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAg RnJvbTogRmVybmFuZG8gR29udCBbbWFpbHRvOmZnb250QHNpNm5ldHdvcmtzLmNvbV0NCiAgICBT ZW50OiBGcmlkYXksIE9jdG9iZXIgMjYsIDIwMTggMTI6NTQgQU0NCiAgICBUbzogRXJpYyBWeW5j a2UgKGV2eW5ja2UpIDxldnluY2tlQGNpc2NvLmNvbT47IExpdXNodWNoZW5nIChXaWxsIExpdSkg PGxpdXNodWNoZW5nQGh1YXdlaS5jb20+OyBvcHNlY0BpZXRmLm9yZw0KICAgIENjOiBSb24gQm9u aWNhIDxyYm9uaWNhQGp1bmlwZXIubmV0Pg0KICAgIFN1YmplY3Q6IFJlOiBJcyB0aGVyZSBhbnkg SVBSIGFzc29jaWF0ZWQgdG8gZHJhZnQtaWV0Zi1vcHNlYy1pcHY2LWVoLWZpbHRlcmluZy0wNiA/ DQogICAgDQogICAgSGVsbG8sIEVyaWMsDQogICAgDQogICAgTm8gSVBScyB0aGF0IEkga25vdyBv Zi4NCiAgICANCiAgICBDaGVlcnMsDQogICAgRmVybmFuZG8NCiAgICANCiAgICANCiAgICANCiAg ICANCiAgICBPbiAxMC8yNS8xOCA5OjUxIEFNLCBFcmljIFZ5bmNrZSAoZXZ5bmNrZSkgd3JvdGU6 DQogICAgPiBEZWFyIGF1dGhvcnMsDQogICAgPiANCiAgICA+ICANCiAgICA+IA0KICAgID4gSSBh bSB0aGUgZG9jdW1lbnQgc2hlcGhlcmQgZm9yIHlvdXIgSS1EIA0KICAgID4gZHJhZnQtaWV0Zi1v cHNlYy1pcHY2LWVoLWZpbHRlcmluZy0wNi4NCiAgICA+IA0KICAgID4gIA0KICAgID4gDQogICAg PiBDYW4geW91IHJlc3BvbmQgdG8gdGhpcyBtZXNzYWdlIHN0YXRpbmcgd2hldGhlciB0aGV5IGtu b3cgb2YgYW55IElQUiANCiAgICA+IGFzc29jaWF0ZWQgd2l0aCB0aGlzIGRyYWZ0Pw0KICAgID4g DQogICAgPiAgDQogICAgPiANCiAgICA+IFRoYW5rIHlvdQ0KICAgID4gDQogICAgPiAgDQogICAg PiANCiAgICA+IC3DqXJpYw0KICAgID4gDQogICAgDQogICAgDQogICAgLS0NCiAgICBGZXJuYW5k byBHb250DQogICAgU0k2IE5ldHdvcmtzDQogICAgZS1tYWlsOiBmZ29udEBzaTZuZXR3b3Jrcy5j b20NCiAgICBQR1AgRmluZ2VycHJpbnQ6IDY2NjYgMzFDNiBENDg0IDYzQjIgOEZCMSBFM0M0IEFF MjUgMEQ1NSAxRDRFIDc0OTINCiAgICANCiAgICANCiAgICANCiAgICANCiAgICBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIE9QU0VDIG1haWxpbmcg bGlzdA0KICAgIE9QU0VDQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9vcHNlYw0KICAgIA0KDQo= From nobody Mon Oct 29 10:05:24 2018 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D9888131038; Mon, 29 Oct 2018 10:05:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?=C3=89ric_Vyncke?= To: X-Test-IDTracker: no X-IETF-IDTracker: 6.87.1 Auto-Submitted: auto-generated Precedence: bulk Cc: iesg-secretary@ietf.org, opsec@ietf.org, opsec-chairs@ietf.org, evyncke@cisco.com, =?utf-8?q?=C3=89ric_Vyncke?= Message-ID: <154083272188.4828.16758101093823160877.idtracker@ietfa.amsl.com> Date: Mon, 29 Oct 2018 10:05:21 -0700 Archived-At: Subject: [OPSEC] Publication has been requested for draft-ietf-opsec-ipv6-eh-filtering-06 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Oct 2018 17:05:22 -0000 Éric Vyncke has requested publication of draft-ietf-opsec-ipv6-eh-filtering-06 as Informational on behalf of the OPSEC working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-opsec-ipv6-eh-filtering/ From nobody Wed Oct 31 03:32:15 2018 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A47612F1AC for ; Wed, 31 Oct 2018 03:32:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jEWBfaZTGxHX for ; Wed, 31 Oct 2018 03:32:08 -0700 (PDT) Received: from pegasus.erg.abdn.ac.uk (pegasus.erg.abdn.ac.uk [IPv6:2001:630:42:150::2]) by ietfa.amsl.com (Postfix) with ESMTP id 67BA812D7EA for ; Wed, 31 Oct 2018 03:32:07 -0700 (PDT) Received: from Gs-MacBook-Pro.local (fgrpf.plus.com [212.159.18.54]) by pegasus.erg.abdn.ac.uk (Postfix) with ESMTPSA id 168A11B000A6 for ; Wed, 31 Oct 2018 10:32:05 +0000 (GMT) Message-ID: <5BD984A4.6040704@erg.abdn.ac.uk> Date: Wed, 31 Oct 2018 10:32:04 +0000 From: Gorry Fairhurst Reply-To: gorry@erg.abdn.ac.uk Organization: University of Aberdeen User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: opsec@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [OPSEC] Link to a whitepaper on network management of encrypted traffic X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Oct 2018 10:32:12 -0000 Hi all, Earlier in March this year, the EU MAMI Project held an industry workshop in London on the challenges in network management of encrypted traffic. You may find this interesting, and it certainly relates to some of the topics covered in draft-ietf-tsvwg-transport-encrypt-01. And you'd be welcome to discuss any transport related issues on that list! We now have a whitepaper that summarises the workshop outcomes. This workshop discussed challenges in network management that arise with the increased deployment of traffic encryption on all layers, with a focus on network measurements, performance enhancement techniques based on traffic classification, as well as network-supported DDoS protection mechanisms. The scope included review of existing techniques as currently used, discussion of challenges that arise based on new protocols and mechanisms that are currently under deployment, as well as new proposals to address these challenges. You can download a copy of the whitepaper here: https://github.com/mami-project/roadshows/blob/master/m3s-london/m3s-white-paper.pdf There is also a link to workshop materials here, with the agenda and various slide decks: https://mami-project.eu/index.php/events/mami-management-and-measurement-summit-m3s/ Best wishes, Gorry