From nobody Mon Oct 7 00:00:55 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69F4B12002F for ; Mon, 7 Oct 2019 00:00:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=iunIQCgm; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=GebB0f2n Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I4L7dlvruJxx for ; Mon, 7 Oct 2019 00:00:46 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2986D12003E for ; Mon, 7 Oct 2019 00:00:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=29989; q=dns/txt; s=iport; t=1570431646; x=1571641246; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=+cH8RBVpBdFBHdiO9SzBONa07Z+kzrlHlzvTBsatHvc=; b=iunIQCgm71P9Dant9ZbL4ZNhb4ow9YIU6+RV3aENFEgquzcAX9C4KBaI CquLqLq82KGeMHaSFk605Q6iKsOwgqpz+ZXwKiLNhVovyLjJ75KRwALbQ 5Pb+e2pZy5cZBXR7V36VkMQ+1eA46D0vRNaZcH8YLALYrMp6QHGivWzxg I=; IronPort-PHdr: =?us-ascii?q?9a23=3AaAgVxBPVdVDUjTptNOol6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEu60/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDFf4ETB?= =?us-ascii?q?oZkYMTlg0kDtSCDBj2Mu/sZC83NM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CBAACu4Zpd/4MNJK1jAxkBAQEBAQE?= =?us-ascii?q?BAQEBAQEMAQEBAQEBgWeBHC8kLANtViAECyqEI4NHA4pIglyJaY4TgUKBEAN?= =?us-ascii?q?UCQEBAQwBARgBCgoCAQGEQAIXgj4jOBMCAwkBAQQBAQECAQUEbYUtDIVLAQE?= =?us-ascii?q?BBAEBEAsGHQEBByIDCwENAgIBBgIOAwMBAhYSAwICAhkGBgsUCQgCBAENBSK?= =?us-ascii?q?DAAGBHU0DHQECDJAYkGECgTiIYXWBMoJ9AQEFgTgCgQ+CQQ0LghcJBYEvhRa?= =?us-ascii?q?GeBiBQD+BEAEnH4JMPoIaRwEBA4EZEgESASURCQEFBwkJCIJGMoImjHMdgl2?= =?us-ascii?q?FNZddQQqCIoYlZIUXhHGEBxuCOodOhCyJLIFfjiyIIYINjwQCBAIEBQIOAQE?= =?us-ascii?q?FgWkiRCNxcBU7KgGCQQlHEBRWeYNzhRSFP3QBCyZ3jW8PFwSCKgEB?= X-IronPort-AV: E=Sophos;i="5.67,265,1566864000"; d="scan'208,217";a="338980902" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 07 Oct 2019 07:00:44 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by alln-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id x9770i3d006878 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 7 Oct 2019 07:00:44 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 7 Oct 2019 02:00:43 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 7 Oct 2019 02:00:43 -0500 Received: from NAM01-BY2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 7 Oct 2019 02:00:43 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AVMCICnOZ30toBUgpfHvbWA4gQ0rG2Tj/gkP7E6Xyo12dAGqnGGYy2427JsuncngvjARuPlyv6mh/u9nDsd2wUuKXzYCTcFrjUTMLRn8Yl9W05EfK+OR/iP6/ETnp8EacD26VuG2m9GY/WuqemDv+YyYEWEXEUwFyssg5nN4zTKscbdxVE7JjYhwtOiP5fy1dTAEePKcsYV4OXUc43GK9conSksE6M70s/zpqROikCqvcp9RlAnwfok+MOdOszqewlIW5PS4a7NYmIy9qK99/zqfK+jwnMXDlihjjE3B9fOFhF+T/1si+Lyo4Gn3jPXtxu/Z+jvJ4f2eNV0icdeKRQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+cH8RBVpBdFBHdiO9SzBONa07Z+kzrlHlzvTBsatHvc=; b=EsoPcBe86K8af8mCcSw9xgmS5npTmcM5GOuImvFRPcgYe+tBtoqj0yahhqMFlJuh87AiASy3znDvvQ/pPGm8MpU+Ta4DiXcnKNn97JGocXkywrW8s6xK3VdAlNXbeJThwJwom4DaZKFS27/uChawQtwGzqUKYbZBznlPoEsUOJD0kWxcGLGM4/6rAaSR6eZfWJOC75fLID65TS3qwdIgXxIX3u3yLroRyEx8XkC/AluRFJjZonaCXBuxe6cNJT8tmQ1k65u5zsvgoMiOrrDS1XQZ2HgLG6aZW8JLgYmeZXrEVMqBugA2SZW/9aOO2IAOgEZB7W4WkBqHxCP5wBX46Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+cH8RBVpBdFBHdiO9SzBONa07Z+kzrlHlzvTBsatHvc=; b=GebB0f2neadA5uEMAmelXXfIeqVpDKUAnNGDyW0bYccP1ivhYLQ4MkVfSeHTSvX3BRSCovFaESQsbxtrGKbG0MjuRV6BX2ujA8kqntsjuFak6crweHk7e4qg8EkggZUZ3u9SA0GTXoZIHDRxmq6XJI2kPJzc9CSDc2P0TGi5FXc= Received: from MN2PR11MB4144.namprd11.prod.outlook.com (20.179.150.210) by MN2PR11MB4397.namprd11.prod.outlook.com (52.135.38.212) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2327.24; Mon, 7 Oct 2019 07:00:42 +0000 Received: from MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::e4f8:d335:c018:c62a]) by MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::e4f8:d335:c018:c62a%7]) with mapi id 15.20.2327.023; Mon, 7 Oct 2019 07:00:42 +0000 From: "Eric Vyncke (evyncke)" To: Gyan Mishra , Jen Linkova CC: opsec WG Thread-Topic: [OPSEC] WGLC for draft-ietf-opsec-v6-19 Thread-Index: AQHVcmps0oamayy0fUCZLNWaZkv3jqc6O0UAgBS7SYA= Date: Mon, 7 Oct 2019 07:00:42 +0000 Message-ID: <832EECB8-728D-410D-B55E-B4A9476D517E@cisco.com> References: In-Reply-To: Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1d.0.190908 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:7489:80bb:3f14:8c5d] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4267206b-446e-4560-6702-08d74af41192 x-ms-traffictypediagnostic: MN2PR11MB4397: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 01834E39B7 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(346002)(376002)(366004)(396003)(136003)(199004)(189003)(102836004)(53546011)(36756003)(186003)(6506007)(76176011)(6436002)(5660300002)(446003)(11346002)(46003)(99286004)(7736002)(966005)(14454004)(486006)(66574012)(606006)(6116002)(2616005)(4326008)(25786009)(476003)(2906002)(478600001)(6486002)(86362001)(256004)(14444005)(45080400002)(58126008)(54896002)(6512007)(33656002)(71200400001)(71190400001)(110136005)(6306002)(236005)(316002)(81166006)(81156014)(8936002)(6246003)(76116006)(91956017)(229853002)(66446008)(64756008)(66476007)(66946007)(66556008)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB4397; H:MN2PR11MB4144.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: c+MtLRU2PSjYnKliqY1VdVL6tje1hgVtTY0jkPuYQn3/BxGj8QPXJIbtyGQjEgfRhIkBnl7Yr+m4JayNSywczilzNciwxFT6TzGvoxufn37Mtz4aITCMk63Zly/rtXkUfCTKfKPxgo0B41LFPnsnwzD+5YHXp92EPNvHpeTfN29jCSkTUErzy4xUrAMDa/QG2txpw28KXP5pyyBkwfebZTkuJX1GOba7kBguKgxvRZ12xE1w9A913xXceTc8B6kxhXeAg96pFFSFgSqjDnIX2VT9wGdAah2K/qSTTP4JAHg71/pA0Tq5pQ6M8+1r7rXrBshX13m9TIZGS+GRSdNOuFMRholqheYpTyL6hLGTJALzV8CZgDKAMrKlPwQIyvVVULFlDLarIppzv+K569UTE41XJTP6nLmilsWrfVFiUEznEMypwJ2ToEes9tVSpSEE1Q+gvWR7nMVI+h/gxHgP/w== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_832EECB8728D410DB55EB4A9476D517Eciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 4267206b-446e-4560-6702-08d74af41192 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2019 07:00:42.1618 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: rZkVB2b+thWFL3RZTC80uxX/fOyMbOk0bR3FeHxVIty9z9GHVmqk+x3vwELCaud2cEnXygSFP3a9CXGwjJwdRw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4397 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.30, xch-aln-020.cisco.com X-Outbound-Node: alln-core-1.cisco.com Archived-At: Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Oct 2019 07:00:49 -0000 --_000_832EECB8728D410DB55EB4A9476D517Eciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 R3lhbiwNCg0KVGhhbmsgeW91IGZvciByZXZpZXdpbmcgb3VyIGRyYWZ0LiBJdCBpcyB2ZXJ5IG11 Y2ggYXBwcmVjaWF0ZWQgYnkgdGhlIGF1dGhvcnMuDQoNCkFzIGEgY28tYXV0aG9yIG9mIHRoaXMg ZHJhZnQsIEkgYWdyZWUgd2l0aCB5b3VyIHBvaW50IG9mIHZpZXcgb24gdGhlIHN0YWJpbGl0eSBv ZiBJUHY2IGFkZHJlc3NlcyBpbiB0aGUgc3BlY2lmaWMgY2FzZSBvZiBhICDigJx0cnVzdGVkIG5l dHdvcmvigJ0sIGVzcCB3aGVuIFJGQyA3MTI3IGFuZCA4MDY0IGFyZSB3aWRlbHkgZGVwbG95ZWQu DQoNClNlZSBtb3JlIGNvbW1lbnRzIGluIGxpbmUgd2l0aCBFVj4NCg0KUmVnYXJkcw0KDQotw6ly aWMNCg0KRnJvbTogR3lhbiBNaXNocmEgPGhheWFidXNhZ3NtQGdtYWlsLmNvbT4NCkRhdGU6IFR1 ZXNkYXksIDI0IFNlcHRlbWJlciAyMDE5IGF0IDA2OjI1DQpUbzogSmVuIExpbmtvdmEgPGZ1cnJ5 MTNAZ21haWwuY29tPg0KQ2M6IG9wc2VjIFdHIDxvcHNlY0BpZXRmLm9yZz4sICJkcmFmdC1pZXRm LW9wc2VjLXY2QGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1vcHNlYy12NkBpZXRmLm9yZz4sIE9wU2Vj IENoYWlycyA8b3BzZWMtY2hhaXJzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtPUFNFQ10gV0dM QyBmb3IgZHJhZnQtaWV0Zi1vcHNlYy12Ni0xOQ0KUmVzZW50LUZyb206IDxhbGlhcy1ib3VuY2Vz QGlldGYub3JnPg0KUmVzZW50LVRvOiBFcmljIFZ5bmNrZSA8ZXZ5bmNrZUBjaXNjby5jb20+LCBL aXJhbiBLdW1hciBDaGl0dGltYW5lbmkgPGtrLmNoaXR0aW1hbmVuaUBnbWFpbC5jb20+LCBNZXJp a2UgS2FlbyA8bWVyaWtlQGRvdWJsZXNob3RzZWN1cml0eS5jb20+LCA8ZXJleUBlcm53LmRlPg0K UmVzZW50LURhdGU6IFR1ZXNkYXksIDI0IFNlcHRlbWJlciAyMDE5IGF0IDA2OjI1DQoNCkhpIEpl bg0KDQpDb21tZW50cyBpbi1saW5lDQoNCkkganVzdCBqb2luZWQgdGhlIE9QU0VDIHdvcmtncm91 cCBhbmQgcmVhZCB0aHJvdWdoIHNvbWUgb2YgdGhlIGRyYWZ0cy4gUmlnaHQgdXAgbXkgYWxsZXku IPCfmIMNCg0KUmVnYXJkcywNCg0KR3lhbg0KDQpPbiBNb24sIFNlcCAyMywgMjAxOSBhdCA3OjU1 IFBNIEplbiBMaW5rb3ZhIDxmdXJyeTEzQGdtYWlsLmNvbTxtYWlsdG86ZnVycnkxM0BnbWFpbC5j b20+PiB3cm90ZToNCkhlbGxvLA0KDQpUaGlzIG1lc3NhZ2Ugc3RhcnRzIGEgV29ya2luZyBHcm91 cCBMYXN0IENhbGwgZm9yIGRyYWZ0LWlldGYtb3BzZWMtdjYtMTkNCihodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vcHNlYy12Ni0xOSkNCg0KUGxlYXNlIHJldmlldyB0aGUg ZHJhZnQgcmVzcG9uZCB0byB0aGlzIGVtYWlsIHRvIHN1cHBvcnQgdGhlIGRvY3VtZW50DQphbmQv b3Igc2VuZCBjb21tZW50cyBieSAyMzo1OSBVVEMgb24gRnJpLCBPY3QgMTF0aCAyMDE5Lg0KDQpU aGFua3MhDQotLQ0KU1ksIEplbiBMaW5rb3ZhIGFrYSBGdXJyeQ0KDQpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KT1BTRUMgbWFpbGluZyBsaXN0DQpPUFNF Q0BpZXRmLm9yZzxtYWlsdG86T1BTRUNAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL29wc2VjDQoNCg0KW0d5YW5dICBJbiAgc2VjdGlvbiAyLjEuNSBiZWxv dyAgb24gY29ycG9yYXRlIGludHJhbmV0cyB3aGVyZSB5b3UgYXJlIG9uIGEgInRydXN0ZWQiIG5l dHdvcmsgd2hlcmUgdGhlIGhvc3RzIGFyZSAidHJ1c3RlZCIgdGhlIHVzZSBvciBuZWVkIGZvciBw cml2YWN5IGV4dGVuc2lvbnMgYXJlIG5vdCBuZWNlc3NhcnkgYW5kIGFjY291bnRhYmlsaXR5IGJ5 IGZhciBvdXR3ZWlnaHMgdGhlIHByaXZhY3kgZXh0ZW5zaW9uIHRvIG1haW50YWluIGFub255bWl0 eSBmcm9tIGFuIElUIHNlY3VyaXR5LiAgSSBoYXZlIGRlcGxveWVkIHdpdGhpbiBWZXJpem9uJ3Mg aW50ZXJuYWwgbmV0d29yayBhcyB3ZWxsIGFzIG90aGVyIGN1c3RvbWVycyBhIHN0YW5kYXJkIG9m IGRpc2FibGluZyBwcml2YWN5IGV4dGVuc2lvbnMgcmFuZG9tIHN0YXRpb24gaWQgYXMgd2VsbCBh cyB0ZW1wb3JhcnkgYWRkcmVzcyBzbyB0aGF0IGFsbCBob3N0cyBhcmUgYWNjb3VudGFibGUgYW5k IHRyYWNlYWJsZSBhbmQgdGhlIGFkZHJlc3NlcyByZW1haW4gc3RhYmxlIHdpdGggRVVJNjQgYWRk cmVzcyBvciBkaGNwdjYgYWRkcmVzcy4gIFdpdGggUkZDIDgwNjQgICYgUkZDIDcyMTcgYXJlIGFk b3B0ZWQgYnkgd2luZG93cyAmIG90aGVyIGRlc2t0b3AgT1MncyBhbmQgYmVjb21lIHRoZSBkZWZh dWx0IHdlIGNhbiByZXZlcnQgb3VyIElQdjYgZGVwbG95bWVudCBzdGFuZGFyZHMgYmFjayB0byB0 aGUgT1MgZGVmYXVsdHMuICBTZWN0aW9uIDIuMS40IHRhbGtzIGFib3V0IHNjYW5uaW5nIGFuZCBz dGF0aWMgSVB2NiBhZGRyZXNzZXMgaG93ZXZlciBzaG91bGQgYWxzbyB0YWtlIGludG8gYWNjb3Vu dCBlbnRlcnByaXNlcyB3aGVyZSBob3N0cyBhcmUgInRydXN0ZWQiIGFuZCB0aGF0IHNjYW5uaW5n IGlzIGEgcmVxdWlyZW1lbnQgZm9yIGVudGVycHJpc2VzIGhhdmluZyBhIGhpc3RvcmljYWwgZGF0 YWJhc2UgZHVtcCBvZiBhcnAgY2FjaGUgJiBuZCBjYWNoZSBvZiBhbGwgaG9zdHMgYWRkcmVzc2Vz IGJvdGggSVB2NCAmIElQdjYuDQoNCiAyLjEuNS4gVGVtcG9yYXJ5IEFkZHJlc3NlcyAtIFByaXZh Y3kgRXh0ZW5zaW9ucyBmb3IgU0xBQUMgLQ0KDQpJbiBzb21lIGV4dHJlbWUgdXNlIGNhc2VzIHdo ZXJlIHVzZXIgYWNjb3VudGFiaWxpdHkgaXMgbW9yZSBpbXBvcnRhbnQgdGhhbiB1c2VyIHByaXZh Y3ksIG5ldHdvcmsgb3BlcmF0b3JzIG1heSBjb25zaWRlciB0byBkaXNhYmxlIFNMQUFDIGFuZCBy ZWx5IG9ubHkgb24gREhDUHY2OyBidXQsIG5vdCBhbGwgb3BlcmF0aW5nIHN5c3RlbXMgc3VwcG9y dCBESENQdjYgc28gc29tZSBob3N0cyB3aWxsIG5vdCBnZXQgYW55IElQdjYgY29ubmVjdGl2aXR5 LiBEaXNhYmxpbmcgU0xBQUMgYW5kIHByaXZhY3kgZXh0ZW5zaW9ucyBhZGRyZXNzZXMgY2FuIGJl IGRvbmUgZm9yIG1vc3QgT1MgYW5kIGZvciBub24taGFja2VyIHVzZXJzIGJ5IHNlbmRpbmcgUkEg bWVzc2FnZXMgd2l0aCBhIGhpbnQgdG8gZ2V0IGFkZHJlc3NlcyB2aWEgREhDUHY2IGJ5IHNldHRp bmcgdGhlIE0tYml0IGJ1dCBhbHNvIGRpc2FibGluZyBTTEFBQyBieSByZXNldHRpbmcgYWxsIEEt Yml0cyBpbiBhbGwgcHJlZml4IGluZm9ybWF0aW9uIG9wdGlvbnMuIEhvd2V2ZXIgYXR0YWNrZXJz IGNvdWxkIHN0aWxsIGZpbmQgd2F5cyB0byBieXBhc3MgdGhpcyBtZWNoYW5pc20gaWYgbm90IGVu Zm9yY2VkIGF0IHRoZSBzd2l0Y2gvIHJvdXRlciBsZXZlbC4gSG93ZXZlciwgaW4gc2NlbmFyaW9z IHdoZXJlIGFub255bWl0eSBpcyBhIHN0cm9uZyBkZXNpcmUgKHByb3RlY3RpbmcgdXNlciBwcml2 YWN5IGlzIG1vcmUgaW1wb3J0YW50IHRoYW4gdXNlciBhdHRyaWJ1dGlvbiksIHByaXZhY3kgZXh0 ZW5zaW9uIGFkZHJlc3NlcyBzaG91bGQgYmUgdXNlZC4NCg0KQ2FuIHdlIGFkZCBhICBzZWN0aW9u IHJlbGF0ZWQgdG8gSVB2NiBpbmhlcmVudCBjYXBhYmlsaXR5IG9mIHRoZSBob3N0IHRvIG1haW50 YWluIG1hbnkgSVB2NiBhZGRyZXNzZXMgYW5kIHNlY3VyaXR5IGNvbmNlcm5zIGFzIHRvIHdoaWNo IElQdjYgYWRkcmVzcyBpcyB1c2VkIGZvciBjb252ZXJzYXRpb24gZmxvd3MgYW5kIHRoZSBob3N0 IE9TIGRlZmF1bHQgYWRkcmVzcyBzZWxlY3Rpb24gcmZjIDY3MjQgaW50ZXJuYWwgbWVjaGFuaXNt IHVzZWQgdG8gZGV0ZXJtaW5lIHdoaWNoIElQdjYgYWRkcmVzcyBpcyB1c2VkIGZvciBjb252ZXJz YXRpb25zLiAgV2l0aCBTTEFBQyBpdHMgcG9zc2libGUgdG8gaGF2ZSBhIHJvdXRlciB3aXRoIG1h bnkgYWRkcmVzc2VzIGNvbmZpZ3VyZWQgYW5kIGFsbCBob3N0cyBvbiB0aGUgc3VibmV0IGluIHRo YXQgaHlwb3RoZXRpY2FsIHNjZW5hcmlvIHdvdWxkIGdldCBhbiBSQSBhZHZlcnRpc2VtZW50IHdp dGggbm8gbGltaXRzIGFzIG1hbnkgaXB2NiBhZGRyZXNzZXMgdGhhdCBhcmUgY29uZmlndXJlZCBv biB0aGUgcm91dGVyLg0KDQpFVj4gVGhpcyBpc3N1ZSAgKG11bHRpcGxlIGFkZHJlc3NlcyBwZXIg aG9zdCkgaXMgZGVzY3JpYmVkIGluIHNlY3Rpb24gMi42LjIuMyAgYW5kIGF0IHRoZSBlbmQgb2Yg dGhlIGludHJvZHVjdGlvbiBvZiBzZWN0aW9uIDIuMSA/IFVuc3VyZSB3aGV0aGVyIHRoZSBkb2N1 bWVudCBzaG91bGQgZ28gZnVydGhlciBidXQgdGhlIG5leHQgcmV2IHdpbGwgaGF2ZSBzb21lIG1v cmUgdGV4dCBpbiBzZWN0aW9uIDIuMS4NCg0KSW4gc2VjdGlvbiAyLjEuMiBQb2ludC10by1Qb2lu dCBsaW5rcyB5b3UgbWVudGlvbiBhIHVzZSBjYXNlIG9mIGluZnJhc3RydWN0dXJlIHJvdXRlZCBw MnAgbGlua3Mgb25seSByZXF1aXJlIGJlaW5nIGNvbmZpZ3VyZWQgd2l0aCBsaW5rIGxvY2FsIHZp YSBDaXNjbyAiaXB2NiBlbmFibGUiIGZvciBpcHY2IHBhY2tldCBwcm9jZXNzaW5nIGFuZCBJIGJl bGlldmUgSnVuaXBlciAmIEh1YXdlaSBoYXZlIGEgc2ltaWxhciBjb21tYW5kIHNvIHRoYXQgdGhl IElHUCBPU1BGIG9yIElTSVMgYWRqYWNlbmN5IGNhbiBmb3JtIHZpYSBMTCBMU0EgdXBkYXRlcyBo b3dldmVyIHRoZSBtYWpvciBzZWN1cml0eSBhbmQgb3BlcmF0aW9uYWwgZG93bnNpZGUgaXMgdGhh dCB0aGUgdHJhY2Vyb3V0ZSBpcyB1bmFibGUgdG8gc2hvdyB0aGUgaW4vb3V0IGhvcCBieSBob3Ag cm91dGVkIGludGVyZmFjZSBJUHY2IGFkZHJlc3NlcyBhbG9uZyB0aGUgcGF0aCB0byBiZSBhYmxl IHRvIHBlcmZvcm0gYSBob3AgYnkgaG9wIHBpbmcvdHJhY2Ugd2hlbiB0cm91Ymxlc2hvb3Rpbmcg bmV0d29yayBpc3N1ZXMgcmVsYXRlZCB0byBsYXRlbmN5LCBqaXR0ZXIgb3IgZHJvcHMuICBTbyBm cm9tIGEgc2VjdXJpdHkgc3RhbmRwb2ludCBpdCBpcyByZWNvbW1lbmRlZCBhbHRob3VnaCBub3Qg cmVxdWlyZWQgdG8gcGxhY2UgSVB2NiBhZGRyZXNzIG9uIGFsbCBQMlAgcm91dGVkIGludGVyZmFj ZXMuDQoNCkVWPiBJbmRlZWQgT1NQRnYzICYgUklQbmcgb25seSB1c2UgSVB2NiBMTEEgdG8gZm9y bSBhZGphY2VuY2llcyAoSVMtSVMgZG9lcyBub3QgaGF2ZSBJUCBhZGRyZXNzKSBhbmQgSSBjYW4g b25seSBhZ3JlZSB3aXRoIHRoZSBhYm92ZSBhcyB0aGUgY28tYXV0aG9yIG9mIFJGQyA3NDA0IDst KQ0KDQpGcm9tIGFuIGFkZHJlc3NpbmcgcGVyc3BlY3RpdmUgYW5kIGFsc28gZm9yIHNlY3VyaXR5 IHN0YW5kcG9pbnQgdGhlIGFiaWxpdHkgIHRvIGNyYWZ0IGFuIEFDTCBhbGxvY2F0aW5nIGFsbCBp bmZyYXN0cnVjdHVyZSAvMTI4IGxvb3BzIGZyb20gYSBzaW5nbGUgLzY0IGFuZCAvMTI3IGZvcm0g YSBzaW5nbGUgLzY0IGlzIHJlY29tbWVuZGVkIGFuZCBjb21pbmcgb3V0IG9mIHRoZSBzYW1lIGhp Z2hlciBvcmRlciBibG9jayBiaXQgYm91bmRhcnkgc3VjaCBhcyBhIC81Ni4gIEluIGltcGxlbWVu dGF0aW9ucyB0aGF0IEkgaGF2ZSBkZXBsb3llZCB3ZSB1c2VkIGFzIGEgc3RhbmRhcmQgYWRkcmVz c2luZyBzY2hlbWEgICIwICAvNTYiIC0gIDAgLzY0IExvb3BzLCAxIC82NCBQMlAgYW5kIHRoZW4g aW5zdGVhZCBvZiBnb2luZyBjcmF6eSB3aXRoIHZsc20gd2Ugd291bGQgaGF2ZSBhIHNpbmdsZSBt YXNrIHdlIG1hZGUgaXQgYSAvMTIwIHNpbWlsYXIgdG8gLzI0IGZvciBJUHY0IHRoYXQgY292ZXJz IGdyZWF0ZXIgdGhlbiAyIGhvc3QgbmV0cyByb3V0ZXIgaW5mcmEgbGlrZSByb3V0ZXIgYmFja2Jv bmUgcmluZyBvciBmaXJld2FsbCBzdWJuZXQgYW5kIHRoZW4gbGFzdCBhIC82NCBmb3IgYWxsIGhv c3Qgc3VibmV0cyBzbyBzaW1wbGUgYWRkcmVzc2luZyBhbGxvd2luZyBhYmlsaXR5IHRvIGNyYWZ0 IHNlY3VyaXR5IEFDTHMgYXMgbmVjZXNzYXJ5IGZvciBhbGwgaW5mcmFzdHJ1Y3R1cmUgc3VibmV0 cyAvMTI4LWxvb3BzIC8xMjctcDJwIC8xMjAtID4yIGhvc3Qgc3VibmV0Lg0KDQpFVj4gVGhhbmsg eW91IGZvciB0aGUgcmV0dXJuIG9mIGV4cGVyaWVuY2UNCg0KLcOpcmljDQoNCg0KUmVnYXJkcywN Cg0KR3lhbiBTLiBNaXNocmENCklUIE5ldHdvcmsgRW5naW5lZXJpbmcgJiBUZWNobm9sb2d5DQpW ZXJpem9uIENvbW11bmljYXRpb25zIEluYy4gKFZaKQ0KMTMxMDEgQ29sdW1iaWEgUGlrZSBGREMx IDNyZCBGbG9vcg0KU2lsdmVyIFNwcmluZywgTUQgMjA5MDQNClVuaXRlZCBTdGF0ZXMNClBob25l OiAzMDEgNTAyLTEzNDcNCkVtYWlsOiBneWFuLnMubWlzaHJhQHZlcml6b24uY29tPG1haWx0bzpn eWFuLnMubWlzaHJhQHZlcml6b24uY29tPg0Kd3d3LmxpbmtlZGluLmNvbS9pbi9HWUFOLU1JU0hS QS1SUy1TUC1NUExTLUlQVjYtRVhQRVJUPGh0dHA6Ly93d3cubGlua2VkaW4uY29tL2luL0dZQU4t TUlTSFJBLVJTLVNQLU1QTFMtSVBWNi1FWFBFUlQ+DQoNCg== --_000_832EECB8728D410DB55EB4A9476D517Eciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <68C93764FCEE0B4ABB4133D4367B1C8E@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJBcHBsZSBD b2xvciBFbW9qaSI7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAgMDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29I eXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93 ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25v cm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDph dXRvOw0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJ bWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4w cHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5HeWFuLDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5UaGFuayB5b3UgZm9yIHJldmlld2luZyBvdXIgZHJhZnQuIEl0IGlzIHZl cnkgbXVjaCBhcHByZWNpYXRlZCBieSB0aGUgYXV0aG9ycy48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QXMgYSBjby1hdXRob3Igb2YgdGhpcyBkcmFmdCwgSSBhZ3JlZSB3aXRoIHlvdXIgcG9pbnQg b2YgdmlldyBvbiB0aGUgc3RhYmlsaXR5IG9mIElQdjYgYWRkcmVzc2VzIGluIHRoZSBzcGVjaWZp YyBjYXNlIG9mIGEgJm5ic3A74oCcdHJ1c3RlZCBuZXR3b3Jr4oCdLCBlc3Agd2hlbiBSRkMgNzEy NyBhbmQgODA2NCBhcmUgd2lkZWx5IGRlcGxveWVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5T ZWUgbW9yZSBjb21tZW50cyBpbiBsaW5lIHdpdGggRVYmZ3Q7PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlJlZ2FyZHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LcOpcmljPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9t Og0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ R3lhbiBNaXNocmEgJmx0O2hheWFidXNhZ3NtQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8 L2I+VHVlc2RheSwgMjQgU2VwdGVtYmVyIDIwMTkgYXQgMDY6MjU8YnI+DQo8Yj5UbzogPC9iPkpl biBMaW5rb3ZhICZsdDtmdXJyeTEzQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPm9wc2Vj IFdHICZsdDtvcHNlY0BpZXRmLm9yZyZndDssICZxdW90O2RyYWZ0LWlldGYtb3BzZWMtdjZAaWV0 Zi5vcmcmcXVvdDsgJmx0O2RyYWZ0LWlldGYtb3BzZWMtdjZAaWV0Zi5vcmcmZ3Q7LCBPcFNlYyBD aGFpcnMgJmx0O29wc2VjLWNoYWlyc0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+ UmU6IFtPUFNFQ10gV0dMQyBmb3IgZHJhZnQtaWV0Zi1vcHNlYy12Ni0xOTxicj4NCjxiPlJlc2Vu dC1Gcm9tOiA8L2I+Jmx0O2FsaWFzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+UmVzZW50 LVRvOiA8L2I+RXJpYyBWeW5ja2UgJmx0O2V2eW5ja2VAY2lzY28uY29tJmd0OywgS2lyYW4gS3Vt YXIgQ2hpdHRpbWFuZW5pICZsdDtray5jaGl0dGltYW5lbmlAZ21haWwuY29tJmd0OywgTWVyaWtl IEthZW8gJmx0O21lcmlrZUBkb3VibGVzaG90c2VjdXJpdHkuY29tJmd0OywgJmx0O2VyZXlAZXJu dy5kZSZndDs8YnI+DQo8Yj5SZXNlbnQtRGF0ZTogPC9iPlR1ZXNkYXksIDI0IFNlcHRlbWJlciAy MDE5IGF0IDA2OjI1PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SGkgSmVuIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Q29tbWVudHMgaW4tbGluZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JIGp1c3Qgam9pbmVkIHRoZSBPUFNFQyB3b3JrZ3Jv dXAgYW5kIHJlYWQgdGhyb3VnaCBzb21lIG9mIHRoZSBkcmFmdHMuIFJpZ2h0IHVwIG15IGFsbGV5 LiZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcHBsZSBDb2xvciBFbW9qaSZx dW90OyI+JiMxMjg1MTU7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij5SZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij5HeWFuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPk9uIE1vbiwgU2VwIDIzLCAyMDE5IGF0IDc6NTUgUE0gSmVuIExp bmtvdmEgJmx0OzxhIGhyZWY9Im1haWx0bzpmdXJyeTEzQGdtYWlsLmNvbSI+ZnVycnkxM0BnbWFp bC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGlu ZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkhlbGxvLDxi cj4NCjxicj4NClRoaXMgbWVzc2FnZSBzdGFydHMgYSBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCBm b3IgZHJhZnQtaWV0Zi1vcHNlYy12Ni0xOTxicj4NCig8YSBocmVmPSJodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vcHNlYy12Ni0xOSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9wc2VjLXY2LTE5PC9hPik8YnI+DQo8 YnI+DQpQbGVhc2UgcmV2aWV3IHRoZSBkcmFmdCByZXNwb25kIHRvIHRoaXMgZW1haWwgdG8gc3Vw cG9ydCB0aGUgZG9jdW1lbnQ8YnI+DQphbmQvb3Igc2VuZCBjb21tZW50cyBieSAyMzo1OSBVVEMg b24gRnJpLCBPY3QgMTF0aCAyMDE5Ljxicj4NCjxicj4NClRoYW5rcyE8YnI+DQotLSA8YnI+DQpT WSwgSmVuIExpbmtvdmEgYWthIEZ1cnJ5PGJyPg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpPUFNFQyBtYWlsaW5nIGxpc3Q8YnI+DQo8 YSBocmVmPSJtYWlsdG86T1BTRUNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5PUFNFQ0BpZXRm Lm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL29wc2VjIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9vcHNlYzwvYT48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGJyIGNsZWFy PSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5bR3lh bl0mbmJzcDsgSW4mbmJzcDsgc2VjdGlvbiAyLjEuNSBiZWxvdyZuYnNwOyBvbiBjb3Jwb3JhdGUg aW50cmFuZXRzIHdoZXJlIHlvdSBhcmUgb24gYSAmcXVvdDt0cnVzdGVkJnF1b3Q7IG5ldHdvcmsg d2hlcmUgdGhlIGhvc3RzIGFyZSAmcXVvdDt0cnVzdGVkJnF1b3Q7IHRoZSB1c2Ugb3IgbmVlZCBm b3IgcHJpdmFjeSBleHRlbnNpb25zIGFyZSBub3QgbmVjZXNzYXJ5IGFuZCBhY2NvdW50YWJpbGl0 eSBieSBmYXIgb3V0d2VpZ2hzJm5ic3A7dGhlDQogcHJpdmFjeSBleHRlbnNpb24gdG8gbWFpbnRh aW4mbmJzcDthbm9ueW1pdHkgZnJvbSBhbiBJVCBzZWN1cml0eS4mbmJzcDsgSSBoYXZlIGRlcGxv eWVkIHdpdGhpbiBWZXJpem9uJ3MgaW50ZXJuYWwgbmV0d29yayBhcyB3ZWxsIGFzIG90aGVyIGN1 c3RvbWVycyBhIHN0YW5kYXJkIG9mIGRpc2FibGluZyBwcml2YWN5IGV4dGVuc2lvbnMgcmFuZG9t IHN0YXRpb24gaWQgYXMgd2VsbCBhcyB0ZW1wb3JhcnkgYWRkcmVzcyBzbyB0aGF0IGFsbCBob3N0 cyBhcmUgYWNjb3VudGFibGUmbmJzcDthbmQNCiB0cmFjZWFibGUgYW5kIHRoZSBhZGRyZXNzZXMg cmVtYWluIHN0YWJsZSB3aXRoIEVVSTY0IGFkZHJlc3Mgb3IgZGhjcHY2IGFkZHJlc3MuJm5ic3A7 IFdpdGggUkZDIDgwNjQmbmJzcDsgJmFtcDsgUkZDIDcyMTcgYXJlIGFkb3B0ZWQgYnkgd2luZG93 cyAmYW1wOyBvdGhlciBkZXNrdG9wIE9TJ3MgYW5kIGJlY29tZSB0aGUgZGVmYXVsdCB3ZSBjYW4g cmV2ZXJ0IG91ciBJUHY2IGRlcGxveW1lbnQgc3RhbmRhcmRzIGJhY2sgdG8gdGhlIE9TIGRlZmF1 bHRzLiZuYnNwOyBTZWN0aW9uIDIuMS40DQogdGFsa3MgYWJvdXQgc2Nhbm5pbmcgYW5kIHN0YXRp YyBJUHY2IGFkZHJlc3NlcyBob3dldmVyIHNob3VsZCBhbHNvIHRha2UgaW50byBhY2NvdW50IGVu dGVycHJpc2VzIHdoZXJlIGhvc3RzIGFyZSAmcXVvdDt0cnVzdGVkJnF1b3Q7IGFuZCB0aGF0IHNj YW5uaW5nIGlzIGEgcmVxdWlyZW1lbnQgZm9yIGVudGVycHJpc2VzIGhhdmluZyBhIGhpc3Rvcmlj YWwgZGF0YWJhc2UgZHVtcCBvZiBhcnAgY2FjaGUgJmFtcDsgbmQgY2FjaGUgb2YgYWxsIGhvc3Rz IGFkZHJlc3NlcyBib3RoDQogSVB2NCAmYW1wOyBJUHY2LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7Mi4xLjUuIFRlbXBvcmFy eSBBZGRyZXNzZXMgLSBQcml2YWN5IEV4dGVuc2lvbnMgZm9yIFNMQUFDIC0mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SW4gc29tZSBleHRy ZW1lIHVzZSBjYXNlcyB3aGVyZSB1c2VyIGFjY291bnRhYmlsaXR5IGlzIG1vcmUgaW1wb3J0YW50 IHRoYW4gdXNlciBwcml2YWN5LCBuZXR3b3JrIG9wZXJhdG9ycyBtYXkgY29uc2lkZXIgdG8gZGlz YWJsZSBTTEFBQyBhbmQgcmVseSBvbmx5IG9uIERIQ1B2NjsgYnV0LCBub3QgYWxsIG9wZXJhdGlu ZyBzeXN0ZW1zIHN1cHBvcnQgREhDUHY2IHNvDQogc29tZSBob3N0cyB3aWxsIG5vdCBnZXQgYW55 IElQdjYgY29ubmVjdGl2aXR5LiBEaXNhYmxpbmcgU0xBQUMgYW5kIHByaXZhY3kgZXh0ZW5zaW9u cyBhZGRyZXNzZXMgY2FuIGJlIGRvbmUgZm9yIG1vc3QgT1MgYW5kIGZvciBub24taGFja2VyIHVz ZXJzIGJ5IHNlbmRpbmcgUkEgbWVzc2FnZXMgd2l0aCBhIGhpbnQgdG8gZ2V0IGFkZHJlc3NlcyB2 aWEgREhDUHY2IGJ5IHNldHRpbmcgdGhlIE0tYml0IGJ1dCBhbHNvIGRpc2FibGluZyBTTEFBQyBi eQ0KIHJlc2V0dGluZyBhbGwgQS1iaXRzIGluIGFsbCBwcmVmaXggaW5mb3JtYXRpb24gb3B0aW9u cy4gSG93ZXZlciBhdHRhY2tlcnMgY291bGQgc3RpbGwgZmluZCB3YXlzIHRvIGJ5cGFzcyB0aGlz IG1lY2hhbmlzbSBpZiBub3QgZW5mb3JjZWQgYXQgdGhlIHN3aXRjaC8gcm91dGVyIGxldmVsLiBI b3dldmVyLCBpbiBzY2VuYXJpb3Mgd2hlcmUgYW5vbnltaXR5IGlzIGEgc3Ryb25nIGRlc2lyZSAo cHJvdGVjdGluZyB1c2VyIHByaXZhY3kgaXMgbW9yZQ0KIGltcG9ydGFudCB0aGFuIHVzZXIgYXR0 cmlidXRpb24pLCBwcml2YWN5IGV4dGVuc2lvbiBhZGRyZXNzZXMgc2hvdWxkIGJlIHVzZWQuIDxv OnA+DQo8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Q2FuIHdlIGFkZCBhJm5ic3A7IHNlY3Rp b24gcmVsYXRlZCB0byBJUHY2IGluaGVyZW50IGNhcGFiaWxpdHkgb2YgdGhlIGhvc3QgdG8gbWFp bnRhaW4gbWFueSBJUHY2IGFkZHJlc3NlcyBhbmQgc2VjdXJpdHkgY29uY2VybnMgYXMgdG8gd2hp Y2ggSVB2NiBhZGRyZXNzIGlzIHVzZWQgZm9yIGNvbnZlcnNhdGlvbiBmbG93cyBhbmQgdGhlIGhv c3QgT1MgZGVmYXVsdCBhZGRyZXNzDQogc2VsZWN0aW9uIHJmYyA2NzI0IGludGVybmFsIG1lY2hh bmlzbSB1c2VkIHRvIGRldGVybWluZSB3aGljaCBJUHY2IGFkZHJlc3MgaXMgdXNlZCBmb3IgY29u dmVyc2F0aW9ucy4mbmJzcDsgV2l0aCBTTEFBQyBpdHMgcG9zc2libGUgdG8gaGF2ZSBhIHJvdXRl ciB3aXRoIG1hbnkgYWRkcmVzc2VzIGNvbmZpZ3VyZWQgYW5kIGFsbCBob3N0cyBvbiB0aGUgc3Vi bmV0IGluIHRoYXQgaHlwb3RoZXRpY2FsIHNjZW5hcmlvIHdvdWxkIGdldCBhbiBSQSBhZHZlcnRp c2VtZW50DQogd2l0aCBubyBsaW1pdHMgYXMgbWFueSBpcHY2IGFkZHJlc3NlcyB0aGF0IGFyZSBj b25maWd1cmVkIG9uIHRoZSByb3V0ZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkVWJmd0OyBUaGlzIGlzc3VlICZuYnNwOyhtdWx0aXBsZSBhZGRyZXNzZXMgcGVyIGhv c3QpIGlzIGRlc2NyaWJlZCBpbiBzZWN0aW9uIDIuNi4yLjMgJm5ic3A7YW5kIGF0IHRoZSBlbmQg b2YgdGhlIGludHJvZHVjdGlvbiBvZiBzZWN0aW9uIDIuMSA/IFVuc3VyZSB3aGV0aGVyIHRoZSBk b2N1bWVudCBzaG91bGQgZ28gZnVydGhlciBidXQgdGhlIG5leHQgcmV2IHdpbGwgaGF2ZSBzb21l IG1vcmUgdGV4dCBpbiBzZWN0aW9uIDIuMS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SW4gc2VjdGlvbiAyLjEuMiBQb2lu dC10by1Qb2ludCBsaW5rcyB5b3UgbWVudGlvbiBhIHVzZSBjYXNlIG9mIGluZnJhc3RydWN0dXJl IHJvdXRlZCBwMnAgbGlua3Mgb25seSByZXF1aXJlIGJlaW5nIGNvbmZpZ3VyZWQgd2l0aCBsaW5r IGxvY2FsIHZpYSBDaXNjbyAmcXVvdDtpcHY2IGVuYWJsZSZxdW90OyBmb3IgaXB2NiBwYWNrZXQg cHJvY2Vzc2luZyBhbmQgSSBiZWxpZXZlIEp1bmlwZXINCiAmYW1wOyBIdWF3ZWkgaGF2ZSBhIHNp bWlsYXIgY29tbWFuZCBzbyB0aGF0IHRoZSBJR1AgT1NQRiBvciBJU0lTIGFkamFjZW5jeSBjYW4g Zm9ybSB2aWEgTEwgTFNBIHVwZGF0ZXMgaG93ZXZlciB0aGUgbWFqb3Igc2VjdXJpdHkgYW5kIG9w ZXJhdGlvbmFsIGRvd25zaWRlIGlzIHRoYXQgdGhlIHRyYWNlcm91dGUgaXMgdW5hYmxlIHRvIHNo b3cgdGhlIGluL291dCBob3AgYnkgaG9wIHJvdXRlZCBpbnRlcmZhY2UgSVB2NiBhZGRyZXNzZXMg YWxvbmcgdGhlDQogcGF0aCB0byBiZSBhYmxlIHRvIHBlcmZvcm0gYSBob3AgYnkgaG9wIHBpbmcv dHJhY2Ugd2hlbiB0cm91Ymxlc2hvb3RpbmcgbmV0d29yayBpc3N1ZXMgcmVsYXRlZCB0byBsYXRl bmN5LCBqaXR0ZXIgb3IgZHJvcHMuJm5ic3A7IFNvIGZyb20gYSBzZWN1cml0eSBzdGFuZHBvaW50 IGl0IGlzIHJlY29tbWVuZGVkIGFsdGhvdWdoIG5vdCByZXF1aXJlZCB0byBwbGFjZSBJUHY2IGFk ZHJlc3Mgb24gYWxsIFAyUCByb3V0ZWQgaW50ZXJmYWNlcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+RVYmZ3Q7IEluZGVlZCBPU1BGdjMgJmFtcDsgUklQbmcgb25seSB1c2UgSVB2NiBMTEEgdG8g Zm9ybSBhZGphY2VuY2llcyAoSVMtSVMgZG9lcyBub3QgaGF2ZSBJUCBhZGRyZXNzKSBhbmQgSSBj YW4gb25seSBhZ3JlZSB3aXRoIHRoZSBhYm92ZSBhcyB0aGUgY28tYXV0aG9yIG9mIFJGQyA3NDA0 IDstKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5G cm9tIGFuIGFkZHJlc3NpbmcgcGVyc3BlY3RpdmUgYW5kIGFsc28gZm9yIHNlY3VyaXR5IHN0YW5k cG9pbnQgdGhlIGFiaWxpdHkmbmJzcDsgdG8gY3JhZnQgYW4gQUNMIGFsbG9jYXRpbmcgYWxsIGlu ZnJhc3RydWN0dXJlIC8xMjggbG9vcHMgZnJvbSBhIHNpbmdsZSAvNjQgYW5kIC8xMjcgZm9ybSBh IHNpbmdsZSAvNjQgaXMgcmVjb21tZW5kZWQgYW5kIGNvbWluZyBvdXQNCiBvZiB0aGUgc2FtZSBo aWdoZXIgb3JkZXIgYmxvY2sgYml0IGJvdW5kYXJ5IHN1Y2ggYXMgYSAvNTYuJm5ic3A7IEluIGlt cGxlbWVudGF0aW9ucyB0aGF0IEkgaGF2ZSBkZXBsb3llZCB3ZSB1c2VkIGFzIGEgc3RhbmRhcmQg YWRkcmVzc2luZyBzY2hlbWEmbmJzcDsgJnF1b3Q7MCZuYnNwOyAvNTYmcXVvdDsgLSZuYnNwOyAw IC82NCBMb29wcywgMSAvNjQgUDJQIGFuZCB0aGVuIGluc3RlYWQgb2YgZ29pbmcgY3Jhenkgd2l0 aCB2bHNtIHdlIHdvdWxkIGhhdmUgYSBzaW5nbGUgbWFzayB3ZSBtYWRlIGl0DQogYSAvMTIwIHNp bWlsYXIgdG8gLzI0IGZvciBJUHY0IHRoYXQgY292ZXJzIGdyZWF0ZXIgdGhlbiAyIGhvc3QgbmV0 cyByb3V0ZXIgaW5mcmEgbGlrZSByb3V0ZXIgYmFja2JvbmUgcmluZyBvciBmaXJld2FsbCBzdWJu ZXQgYW5kIHRoZW4gbGFzdCBhIC82NCBmb3IgYWxsIGhvc3Qgc3VibmV0cyBzbyBzaW1wbGUgYWRk cmVzc2luZyBhbGxvd2luZyBhYmlsaXR5IHRvIGNyYWZ0IHNlY3VyaXR5IEFDTHMgYXMgbmVjZXNz YXJ5IGZvciBhbGwgaW5mcmFzdHJ1Y3R1cmUNCiBzdWJuZXRzIC8xMjgtbG9vcHMgLzEyNy1wMnAg LzEyMC0gJmd0OzIgaG9zdCBzdWJuZXQuJm5ic3A7Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVWJmd0OyBUaGFu ayB5b3UgZm9yIHRoZSByZXR1cm4gb2YgZXhwZXJpZW5jZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4tw6lyaWM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5SZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7YmFj a2dyb3VuZC1pbWFnZTppbml0aWFsO2JhY2tncm91bmQtcG9zaXRpb246aW5pdGlhbDtiYWNrZ3Jv dW5kLXJlcGVhdDppbml0aWFsIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9y OiM1MDAwNTAiPkd5YW4gUy4gTWlzaHJhPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdDtiYWNrZ3JvdW5kLWltYWdlOmluaXRpYWw7YmFja2dyb3VuZC1wb3NpdGlvbjppbml0 aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6IzUwMDA1MCI+SVQgTmV0d29yayBFbmdpbmVlcmluZyAmYW1wOyBUZWNobm9s b2d5Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3Jv dW5kLWltYWdlOmluaXRpYWw7YmFja2dyb3VuZC1wb3NpdGlvbjppbml0aWFsO2JhY2tncm91bmQt cmVwZWF0OmluaXRpYWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6IzUw MDA1MCI+VmVyaXpvbiBDb21tdW5pY2F0aW9ucyZuYnNwO0luYy4gKFZaKTwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7YmFja2dyb3VuZC1pbWFnZTppbml0aWFsO2JhY2tn cm91bmQtcG9zaXRpb246aW5pdGlhbDtiYWNrZ3JvdW5kLXJlcGVhdDppbml0aWFsIj4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOiM1MDAwNTAiPjEzMTAxIENvbHVtYmlhIFBp a2UgRkRDMSAzcmQgRmxvb3I8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 O2JhY2tncm91bmQtaW1hZ2U6aW5pdGlhbDtiYWNrZ3JvdW5kLXBvc2l0aW9uOmluaXRpYWw7YmFj a2dyb3VuZC1yZXBlYXQ6aW5pdGlhbCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtj b2xvcjojNTAwMDUwIj5TaWx2ZXIgU3ByaW5nLCBNRCAyMDkwNDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss c2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQ7YmFja2dyb3VuZC1pbWFnZTppbml0aWFsO2JhY2tncm91bmQt cG9zaXRpb246aW5pdGlhbDtiYWNrZ3JvdW5kLXJlcGVhdDppbml0aWFsIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOiM1MDAwNTAiPlVuaXRlZCBTdGF0ZXM8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tncm91bmQtaW1hZ2U6aW5pdGlhbDti YWNrZ3JvdW5kLXBvc2l0aW9uOmluaXRpYWw7YmFja2dyb3VuZC1yZXBlYXQ6aW5pdGlhbCI+DQo8 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjojNTAwMDUwIj5QaG9uZTombmJzcDsz MDEgNTAyLTEzNDc8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tn cm91bmQtaW1hZ2U6aW5pdGlhbDtiYWNrZ3JvdW5kLXBvc2l0aW9uOmluaXRpYWw7YmFja2dyb3Vu ZC1yZXBlYXQ6aW5pdGlhbCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjoj NTAwMDUwIj5FbWFpbDombmJzcDs8YSBocmVmPSJtYWlsdG86Z3lhbi5zLm1pc2hyYUB2ZXJpem9u LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NUNDIj5neWFuLnMu bWlzaHJhQHZlcml6b24uY29tPC9zcGFuPjwvYT48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0O2JhY2tncm91bmQtaW1hZ2U6aW5pdGlhbDtiYWNrZ3JvdW5kLXBvc2l0aW9u OmluaXRpYWw7YmFja2dyb3VuZC1yZXBlYXQ6aW5pdGlhbCI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtjb2xvcjpibGFjayI+PGEgaHJlZj0iaHR0cDovL3d3dy5saW5rZWRpbi5jb20v aW4vR1lBTi1NSVNIUkEtUlMtU1AtTVBMUy1JUFY2LUVYUEVSVCIgdGFyZ2V0PSJfYmxhbmsiPnd3 dy5saW5rZWRpbi5jb20vaW4vR1lBTi1NSVNIUkEtUlMtU1AtTVBMUy1JUFY2LUVYUEVSVDwvYT48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_832EECB8728D410DB55EB4A9476D517Eciscocom_-- From nobody Thu Oct 10 09:46:21 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C55A1200DF for ; Thu, 10 Oct 2019 09:46:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ReeaHLnshyXh for ; Thu, 10 Oct 2019 09:46:17 -0700 (PDT) Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C26A21200C3 for ; Thu, 10 Oct 2019 09:46:16 -0700 (PDT) Received: by mail-qk1-x72e.google.com with SMTP id y144so6209544qkb.7 for ; Thu, 10 Oct 2019 09:46:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=stySvDQnNlYS4HyBCMYrQ0rTMr8RmL4E45thKuSx508=; b=DZhbbxykTkP4aXFckBLtRponEPprnKeU3fBBkhKvE3gNK5OuTVhTnY1uFOtdze5+Ud WlxiDbKHi09umhMJYGzuzqTuOJ33QusWOgDT1AYPCOcyz97lb9c8oe/Fj3nbMI+j98yo 6+jUwtOUN0yevQi/S46FWQ+cBaZkuQ29iJhBUEdc24E2LwsImAcwbCoya0WPU+2rvFD4 vNwyedDFb3JxNU4Mp5txWAoeg03Hy/4dbb40NADTkbiXffsbxf724ToX9OGgehyAhM6D MiYMuECzEzVWfjlsCcUUpL/L5sFo2zsxCim+xzCuvP4vb83WP11uoysep+5VVui39rPa EmRQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=stySvDQnNlYS4HyBCMYrQ0rTMr8RmL4E45thKuSx508=; b=s39Ped+r+1PpRiC3DYCX1vGq1IGL16tf0Ea6CZnnEGWkatOkWbSQYhg2DgR5sdfN6t PhQzPCGhoCfB3vdyDMHVI0k7FuVU9URG9WX+zTTsjmd1rBoISjxqv1NyMI1fLuuVrqxN 9b5hzEGiDXsu2QjZkNpKw6ey9cAP3HNPD6pryptapiCrezviowNBH0i/3OwHuK+FOXz9 V+6lDQ5Z7c1qHalpTsEiexijMwGnDGM5KgCAlkSuEMCNTyG1p9f3Ma24996tRJg3ADND mf6qO0niALtmpZ1jCuKxHHqnJYHMowN919Nx/8Y0INM06km1LibysX5FSlhb8jA2dz9i +7jw== X-Gm-Message-State: APjAAAXPGbOIoVi4O4gJGqiUSQULR9BinxNoLeXUYUbHIWN8riLrqNFr dPanNkWgrvsm+lKTz+84fEc= X-Google-Smtp-Source: APXvYqz24MThl2Zp0+iUl2QbnoFQ+aYf46jMzkvaiJWhvexl4jnDNQpnYXprBtb6rlQ0hw5V+7tVlA== X-Received: by 2002:a05:620a:6d6:: with SMTP id 22mr3255354qky.253.1570725975546; Thu, 10 Oct 2019 09:46:15 -0700 (PDT) Received: from [192.168.1.213] (pool-72-83-194-140.washdc.fios.verizon.net. [72.83.194.140]) by smtp.gmail.com with ESMTPSA id l23sm4570523qta.53.2019.10.10.09.46.14 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 10 Oct 2019 09:46:14 -0700 (PDT) From: Gyan Mishra X-Google-Original-From: Gyan Mishra Content-Type: multipart/alternative; boundary=Apple-Mail-A590E793-5C8F-4051-AC17-77716EC0DA3E Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (16G102) In-Reply-To: <832EECB8-728D-410D-B55E-B4A9476D517E@cisco.com> Date: Thu, 10 Oct 2019 12:46:14 -0400 Cc: Jen Linkova , opsec WG Content-Transfer-Encoding: 7bit Message-Id: <62A5A7C0-E36F-47F0-8366-271350035427@gmail.com> References: <832EECB8-728D-410D-B55E-B4A9476D517E@cisco.com> To: "Eric Vyncke (evyncke)" Archived-At: Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2019 16:46:20 -0000 --Apple-Mail-A590E793-5C8F-4051-AC17-77716EC0DA3E Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Eric=20 Thank you=20 Responses in-line Sent from my iPhone > On Oct 7, 2019, at 3:00 AM, Eric Vyncke (evyncke) wrot= e: >=20 > Gyan, > =20 > Thank you for reviewing our draft. It is very much appreciated by the auth= ors. > =20 > As a co-author of this draft, I agree with your point of view on the stabi= lity of IPv6 addresses in the specific case of a =E2=80=9Ctrusted network=E2= =80=9D, esp when RFC 7127 and 8064 are widely deployed. > =20 > See more comments in line with EV> > =20 > Regards > =20 > -=C3=A9ric > =20 > From: Gyan Mishra > Date: Tuesday, 24 September 2019 at 06:25 > To: Jen Linkova > Cc: opsec WG , "draft-ietf-opsec-v6@ietf.org" , OpSec Chairs > Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19 > Resent-From: > Resent-To: Eric Vyncke , Kiran Kumar Chittimaneni , Merike Kaeo , > Resent-Date: Tuesday, 24 September 2019 at 06:25 > =20 > Hi Jen > =20 > Comments in-line > =20 > I just joined the OPSEC workgroup and read through some of the drafts. Rig= ht up my alley. =F0=9F=98=83 > =20 > Regards, > =20 > Gyan > =20 > On Mon, Sep 23, 2019 at 7:55 PM Jen Linkova wrote: > Hello, >=20 > This message starts a Working Group Last Call for draft-ietf-opsec-v6-19 > (https://tools.ietf.org/html/draft-ietf-opsec-v6-19) >=20 > Please review the draft respond to this email to support the document > and/or send comments by 23:59 UTC on Fri, Oct 11th 2019. >=20 > Thanks! > --=20 > SY, Jen Linkova aka Furry >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec >=20 > =20 > [Gyan] In section 2.1.5 below on corporate intranets where you are on a= "trusted" network where the hosts are "trusted" the use or need for privacy= extensions are not necessary and accountability by far outweighs the privac= y extension to maintain anonymity from an IT security. I have deployed with= in Verizon's internal network as well as other customers a standard of disab= ling privacy extensions random station id as well as temporary address so th= at all hosts are accountable and traceable and the addresses remain stable w= ith EUI64 address or dhcpv6 address. With RFC 8064 & RFC 7217 are adopted b= y windows & other desktop OS's and become the default we can revert our IPv6= deployment standards back to the OS defaults. Section 2.1.4 talks about sc= anning and static IPv6 addresses however should also take into account enter= prises where hosts are "trusted" and that scanning is a requirement for ente= rprises having a historical database dump of arp cache & nd cache of all hos= ts addresses both IPv4 & IPv6. > =20 > 2.1.5. Temporary Addresses - Privacy Extensions for SLAAC -=20 > =20 > In some extreme use cases where user accountability is more important than= user privacy, network operators may consider to disable SLAAC and rely only= on DHCPv6; but, not all operating systems support DHCPv6 so some hosts will= not get any IPv6 connectivity. Disabling SLAAC and privacy extensions addre= sses can be done for most OS and for non-hacker users by sending RA messages= with a hint to get addresses via DHCPv6 by setting the M-bit but also disab= ling SLAAC by resetting all A-bits in all prefix information options. Howeve= r attackers could still find ways to bypass this mechanism if not enforced a= t the switch/ router level. However, in scenarios where anonymity is a stron= g desire (protecting user privacy is more important than user attribution), p= rivacy extension addresses should be used. > =20 > Can we add a section related to IPv6 inherent capability of the host to m= aintain many IPv6 addresses and security concerns as to which IPv6 address i= s used for conversation flows and the host OS default address selection rfc 6= 724 internal mechanism used to determine which IPv6 address is used for conv= ersations. With SLAAC its possible to have a router with many addresses con= figured and all hosts on the subnet in that hypothetical scenario would get a= n RA advertisement with no limits as many ipv6 addresses that are configured= on the router. > =20 > EV> This issue (multiple addresses per host) is described in section 2.6.= 2.3 and at the end of the introduction of section 2.1 ? Unsure whether the d= ocument should go further but the next rev will have some more text in secti= on 2.1. [Gyan] Thank you=20 > =20 > In section 2.1.2 Point-to-Point links you mention a use case of infrastruc= ture routed p2p links only require being configured with link local via Cisc= o "ipv6 enable" for ipv6 packet processing and I believe Juniper & Huawei ha= ve a similar command so that the IGP OSPF or ISIS adjacency can form via LL L= SA updates however the major security and operational downside is that the t= raceroute is unable to show the in/out hop by hop routed interface IPv6 addr= esses along the path to be able to perform a hop by hop ping/trace when trou= bleshooting network issues related to latency, jitter or drops. So from a s= ecurity standpoint it is recommended although not required to place IPv6 add= ress on all P2P routed interfaces. > =20 > EV> Indeed OSPFv3 & RIPng only use IPv6 LLA to form adjacencies (IS-IS doe= s not have IP address) and I can only agree with the above as the co-author o= f RFC 7404 ;-) > =20 > =46rom an addressing perspective and also for security standpoint the abil= ity to craft an ACL allocating all infrastructure /128 loops from a single /= 64 and /127 form a single /64 is recommended and coming out of the same high= er order block bit boundary such as a /56. In implementations that I have d= eployed we used as a standard addressing schema "0 /56" - 0 /64 Loops, 1 /= 64 P2P and then instead of going crazy with vlsm we would have a single mask= we made it a /120 similar to /24 for IPv4 that covers greater then 2 host n= ets router infra like router backbone ring or firewall subnet and then last a= /64 for all host subnets so simple addressing allowing ability to craft sec= urity ACLs as necessary for all infrastructure subnets /128-loops /127-p2p /= 120- >2 host subnet. =20 > =20 > EV> Thank you for the return of experience > =20 > -=C3=A9ric > =20 > =20 > Regards, > =20 > Gyan S. Mishra > IT Network Engineering & Technology=20 > Verizon Communications Inc. (VZ) > 13101 Columbia Pike FDC1 3rd Floor > Silver Spring, MD 20904 > United States > Phone: 301 502-1347 > Email: gyan.s.mishra@verizon.com > www.linkedin.com/in/GYAN-MISHRA-RS-SP-MPLS-IPV6-EXPERT > =20 --Apple-Mail-A590E793-5C8F-4051-AC17-77716EC0DA3E Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Eric 

Thank you&= nbsp;

Responses in-line

Sent from my iPhone

On Oct 7= , 2019, at 3:00 AM, Eric Vyncke (evyncke) <evyncke@cisco.com> wrote:

Gyan,

 

Thank you for reviewing our draft. It is very much ap= preciated by the authors.

 

As a co-author of this draft, I agree with your point= of view on the stability of IPv6 addresses in the specific case of a  = =E2=80=9Ctrusted network=E2=80=9D, esp when RFC 7127 and 8064 are widely dep= loyed.

 

See more comments in line with EV>

 

Regards

 

-=C3=A9ric

 

From: Gyan Mishra <hayabusagsm@gmail.com>
Date: Tuesday, 24 September 2019 at 06:25
To: Jen Linkova <furry13@gmai= l.com>
Cc: opsec WG <opsec@ietf.org= >, "draft-ietf-opsec-v6@i= etf.org" <draft-ietf-= opsec-v6@ietf.org>, OpSec Chairs <opsec-chairs@ietf.org>
Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19
Resent-From: <alias-boun= ces@ietf.org>
Resent-To: Eric Vyncke <evync= ke@cisco.com>, Kiran Kumar Chittimaneni <kk.chittimaneni@gmail.com>, Merike Kaeo <merike@doubleshotsecurity.com>, <erey@ernw.de>
Resent-Date: Tuesday, 24 September 2019 at 06:25

 

Hi Jen

 

Comments in-line

 

I just joined the OPSEC w= orkgroup and read through some of the drafts. Right up my alley. =F0=9F=98=83<= /o:p>

 

Regards,

 

Gyan

 

On Mon, Sep 23, 2019 at 7= :55 PM Jen Linkova <furry13@gmail.co= m> wrote:

Hello,

This message starts a Working Group Last Call for draft-ietf-opsec-v6-19
= (https://tools.ietf.org/html/draft-ietf-opsec-v6-19)

Please review the draft respond to this email to support the document
and/or send comments by 23:59 UTC on Fri, Oct 11th 2019.

Thanks!
--
SY, Jen Linkova aka Furry

_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/opsec


 

[Gyan]  In  se= ction 2.1.5 below  on corporate intranets where you are on a "trusted" n= etwork where the hosts are "trusted" the use or need for privacy extensions a= re not necessary and accountability by far outweighs the privacy extension to maintain anonymity from an IT security.  I h= ave deployed within Verizon's internal network as well as other customers a s= tandard of disabling privacy extensions random station id as well as tempora= ry address so that all hosts are accountable and traceable and the addresses remain stable with EUI64 address or dhcpv6 addr= ess.  With RFC 8064  & RFC 7217 are adopted by windows & o= ther desktop OS's and become the default we can revert our IPv6 deployment s= tandards back to the OS defaults.  Section 2.1.4 talks about scanning and static IPv6 addresses however should also take int= o account enterprises where hosts are "trusted" and that scanning is a requi= rement for enterprises having a historical database dump of arp cache & n= d cache of all hosts addresses both IPv4 & IPv6.

 

 2.1.5. Temporary A= ddresses - Privacy Extensions for SLAAC - 

 

In some extreme use case= s where user accountability is more important than user privacy, network ope= rators may consider to disable SLAAC and rely only on DHCPv6; but, not all o= perating systems support DHCPv6 so some hosts will not get any IPv6 connectivity. Disabling SLAAC and privacy e= xtensions addresses can be done for most OS and for non-hacker users by send= ing RA messages with a hint to get addresses via DHCPv6 by setting the M-bit= but also disabling SLAAC by resetting all A-bits in all prefix information options. However attackers c= ould still find ways to bypass this mechanism if not enforced at the switch/= router level. However, in scenarios where anonymity is a strong desire (pro= tecting user privacy is more important than user attribution), privacy extension addresses should be use= d.

 

Can we add a  secti= on related to IPv6 inherent capability of the host to maintain many IPv6 add= resses and security concerns as to which IPv6 address is used for conversati= on flows and the host OS default address selection rfc 6724 internal mechanism used to determine which IPv6 address i= s used for conversations.  With SLAAC its possible to have a router wit= h many addresses configured and all hosts on the subnet in that hypothetical= scenario would get an RA advertisement with no limits as many ipv6 addresses that are configured on the router.

 

EV> This issue  (multiple addresses per host)= is described in section 2.6.2.3  and at the end of the introduction of= section 2.1 ? Unsure whether the document should go further but the next re= v will have some more text in section 2.1.


[Gyan] Thank you 

=

 

In section 2.1.2 Point-t= o-Point links you mention a use case of infrastructure routed p2p links only= require being configured with link local via Cisco "ipv6 enable" for ipv6 p= acket processing and I believe Juniper & Huawei have a similar command so that the IGP OSPF or ISIS adjacency c= an form via LL LSA updates however the major security and operational downsi= de is that the traceroute is unable to show the in/out hop by hop routed int= erface IPv6 addresses along the path to be able to perform a hop by hop ping/trace when troubleshooting net= work issues related to latency, jitter or drops.  So from a security st= andpoint it is recommended although not required to place IPv6 address on al= l P2P routed interfaces.

 

EV> Indeed OSPFv3 & RIPng only use IPv6 LLA to= form adjacencies (IS-IS does not have IP address) and I can only agree with= the above as the co-author of RFC 7404 ;-)

 

=46rom an addressing per= spective and also for security standpoint the ability  to craft an ACL a= llocating all infrastructure /128 loops from a single /64 and /127 form a si= ngle /64 is recommended and coming out of the same higher order block bit boundary such as a /56.  In impleme= ntations that I have deployed we used as a standard addressing schema  "= 0  /56" -  0 /64 Loops, 1 /64 P2P and then instead of going crazy w= ith vlsm we would have a single mask we made it a /120 similar to /24 for IPv4 that covers greater then 2 host nets router i= nfra like router backbone ring or firewall subnet and then last a /64 for al= l host subnets so simple addressing allowing ability to craft security ACLs a= s necessary for all infrastructure subnets /128-loops /127-p2p /120- >2 host subnet.  =

 

EV> Thank you for the return of experience

 

-=C3=A9ric

 

 

Regards,

 

Gyan S. Mishra=

IT Network Engineering & T= echnology 

Verizon Communications I= nc. (VZ)

13101 Columbia Pike FDC1 3rd = Floor

Silver Spring, MD 20904

United States<= /o:p>

Phone: 301 502-1347

Email: = gyan.s.mishra@verizon.com

www.linkedin.co= m/in/GYAN-MISHRA-RS-SP-MPLS-IPV6-EXPERT

 

= --Apple-Mail-A590E793-5C8F-4051-AC17-77716EC0DA3E-- From nobody Thu Oct 10 10:20:48 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A1141200E6 for ; Thu, 10 Oct 2019 10:20:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id obvuFLrVqVlD for ; Thu, 10 Oct 2019 10:20:43 -0700 (PDT) Received: from mail-qt1-x830.google.com (mail-qt1-x830.google.com [IPv6:2607:f8b0:4864:20::830]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BDF512010C for ; Thu, 10 Oct 2019 10:20:43 -0700 (PDT) Received: by mail-qt1-x830.google.com with SMTP id j31so9812906qta.5 for ; Thu, 10 Oct 2019 10:20:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z6VwDUf78k3ROhjIv/ZSqvBhrIm7pRR8YYaou339L+I=; b=WXoRWQ8mJ73jCRT9gPec6feWCOaG+ToR2oB7jdy6AH5d3zNQSzmbAYkBIo4bKobujU OzrXA+0kUQ+ONrZOKbB2CdeR6WybAsfFmnawK+YUM6UKr6QrHgi5aZU/neelIMmlgfJ6 6t3VtouFYUZrrtHwakGgYlrMZXcQc1nVL3F9mznZf1uCgz5o9Zy3uoZh3l6c64QMHFsK pqg9k3AgU3YzJK2OgzMFT2xCbAxU03Z+rYkwVSyCTMwySKghPeNE0qZ+CdI6KJ2XAhL6 FQEtQKUTkvR7BPFzscRxbyjvt11nO4hYM7GFcIcaGU+2aLxhuQNGR0UiXl3sIk1sc+je Xlog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z6VwDUf78k3ROhjIv/ZSqvBhrIm7pRR8YYaou339L+I=; b=KCfrj+gW7QNuqYybxNJel+1gsm4qFuqdXot8ZwDJXk72TUqJ5c1auOZUbJwc+gUnWD aaZdftnbtNmQ7zA3WHY3mNYhTMceceWBBzIdoGbcdKq6hoPC/sUrVMD2eSNT3ZcqMoei S1ZOQ5BeZK409mCOO4rU5+W3Ww1TV9Mwblb6bIfV4Gc0AgD3006eFXo+dwXkip3h5EB+ kpgN3vsmrH8KCA5b/4UNOIM2J6kfGoIOs4N6wvc43LufLcczO41Ya+WBcMICjQohsR6r 83xgCNUBM4utF5IZtvihjK1weKAnMU8mdK6YZ/YZVnyaEYcTcHfFTQW7Ryz4PXfP6ssS RVWA== X-Gm-Message-State: APjAAAWiSB5zip3N1W4F2miJQwq65kFFQkHvt47ujCnFexRAIZReY4Lj 6+zM+x4dj+ZxiB8ixSThIzL7juE/JDk= X-Google-Smtp-Source: APXvYqwdcC5RZW9GPrtdrcuSYCazACtx8TcAwFTcKrQ1KMafmBKCP8kcN4/k2ZoxkO52HmiEUFVZjg== X-Received: by 2002:a0c:e741:: with SMTP id g1mr10782001qvn.193.1570728041633; Thu, 10 Oct 2019 10:20:41 -0700 (PDT) Received: from [192.168.1.213] (pool-72-83-194-140.washdc.fios.verizon.net. [72.83.194.140]) by smtp.gmail.com with ESMTPSA id v23sm3131695qto.89.2019.10.10.10.20.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 10 Oct 2019 10:20:40 -0700 (PDT) From: Gyan Mishra X-Google-Original-From: Gyan Mishra Content-Type: multipart/alternative; boundary=Apple-Mail-C6BF4D27-A73B-4EF0-9780-16925888BBE1 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (16G102) In-Reply-To: <62A5A7C0-E36F-47F0-8366-271350035427@gmail.com> Date: Thu, 10 Oct 2019 13:20:40 -0400 Cc: "Eric Vyncke (evyncke)" , Jen Linkova , opsec WG Content-Transfer-Encoding: 7bit Message-Id: <81DC6BFF-57D1-4FCA-8472-BD5EEE58E7B7@gmail.com> References: <832EECB8-728D-410D-B55E-B4A9476D517E@cisco.com> <62A5A7C0-E36F-47F0-8366-271350035427@gmail.com> To: Gyan Mishra Archived-At: Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2019 17:20:47 -0000 --Apple-Mail-C6BF4D27-A73B-4EF0-9780-16925888BBE1 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Eric=20 The draft is well written and covers IPv6 addressing architecture which is k= ey as well as all the security and best practices design aspects for a succe= ssful deployment. Few more comments below: I designed Verizon=E2=80=99s addressing architecture for our very large inte= rnal network and did quite extensive research about 12 years ago when we com= pleted deployment. So there were a lot of learning from a network design pe= rspective in deployment of a successful IPv6 addressing plan. Actually I am= thinking this is more for 6MAN a draft on IPv6 addressing architecture for o= perators. The 1st section on the addressing architecture just a few simple points whic= h I am thinking of putting into a 6MAN draft. =46rom a security or firewall acl perspective it makes sense to put all loop= s /128 into the same /64 within the contiguous infrastructure or customer AS= within same admin control. So that also goes for p2p links /127 and even w= hat I call greater then 2 host router backbone made a one size fits all for t= hat made it a /120 so to not go crazy with VLSM as is possible but for simpl= icity kept at a simple 4 mask design. The concept of putting all longer mas= ks group into the same /64 is what make security perspective building ACLs m= uch easier. In the section on 2.3 called link layer security has also been called in the= industry =E2=80=9Cfirst hop router security=E2=80=9D which maybe good to st= ate that somewhere in the description in 2.3 Regarding section 3 external security do you think we should have a standard= best practice Inbound ACL to externals that includes the standard bogon fil= tering and options that should be filtered. If so I from my deployments cou= ld provide a standard ingress filter that could be added as an appendix. Thank you=20 Gyan Sent from my iPhone > On Oct 10, 2019, at 12:46 PM, Gyan Mishra wrote: >=20 > Hi Eric=20 >=20 > Thank you=20 >=20 > Responses in-line >=20 > Sent from my iPhone >=20 >> On Oct 7, 2019, at 3:00 AM, Eric Vyncke (evyncke) wro= te: >>=20 >> Gyan, >> =20 >> Thank you for reviewing our draft. It is very much appreciated by the aut= hors. >> =20 >> As a co-author of this draft, I agree with your point of view on the stab= ility of IPv6 addresses in the specific case of a =E2=80=9Ctrusted network=E2= =80=9D, esp when RFC 7127 and 8064 are widely deployed. >> =20 >> See more comments in line with EV> >> =20 >> Regards >> =20 >> -=C3=A9ric >> =20 >> From: Gyan Mishra >> Date: Tuesday, 24 September 2019 at 06:25 >> To: Jen Linkova >> Cc: opsec WG , "draft-ietf-opsec-v6@ietf.org" , OpSec Chairs >> Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19 >> Resent-From: >> Resent-To: Eric Vyncke , Kiran Kumar Chittimaneni , Merike Kaeo , >> Resent-Date: Tuesday, 24 September 2019 at 06:25 >> =20 >> Hi Jen >> =20 >> Comments in-line >> =20 >> I just joined the OPSEC workgroup and read through some of the drafts. Ri= ght up my alley. =F0=9F=98=83 >> =20 >> Regards, >> =20 >> Gyan >> =20 >> On Mon, Sep 23, 2019 at 7:55 PM Jen Linkova wrote: >> Hello, >>=20 >> This message starts a Working Group Last Call for draft-ietf-opsec-v6-19 >> (https://tools.ietf.org/html/draft-ietf-opsec-v6-19) >>=20 >> Please review the draft respond to this email to support the document >> and/or send comments by 23:59 UTC on Fri, Oct 11th 2019. >>=20 >> Thanks! >> --=20 >> SY, Jen Linkova aka Furry >>=20 >> _______________________________________________ >> OPSEC mailing list >> OPSEC@ietf.org >> https://www.ietf.org/mailman/listinfo/opsec >>=20 >> =20 >> [Gyan] In section 2.1.5 below on corporate intranets where you are on a= "trusted" network where the hosts are "trusted" the use or need for privacy= extensions are not necessary and accountability by far outweighs the privac= y extension to maintain anonymity from an IT security. I have deployed with= in Verizon's internal network as well as other customers a standard of disab= ling privacy extensions random station id as well as temporary address so th= at all hosts are accountable and traceable and the addresses remain stable w= ith EUI64 address or dhcpv6 address. With RFC 8064 & RFC 7217 are adopted b= y windows & other desktop OS's and become the default we can revert our IPv6= deployment standards back to the OS defaults. Section 2.1.4 talks about sc= anning and static IPv6 addresses however should also take into account enter= prises where hosts are "trusted" and that scanning is a requirement for ente= rprises having a historical database dump of arp cache & nd cache of all hos= ts addresses both IPv4 & IPv6. >> =20 >> 2.1.5. Temporary Addresses - Privacy Extensions for SLAAC -=20 >> =20 >> In some extreme use cases where user accountability is more important tha= n user privacy, network operators may consider to disable SLAAC and rely onl= y on DHCPv6; but, not all operating systems support DHCPv6 so some hosts wil= l not get any IPv6 connectivity. Disabling SLAAC and privacy extensions addr= esses can be done for most OS and for non-hacker users by sending RA message= s with a hint to get addresses via DHCPv6 by setting the M-bit but also disa= bling SLAAC by resetting all A-bits in all prefix information options. Howev= er attackers could still find ways to bypass this mechanism if not enforced a= t the switch/ router level. However, in scenarios where anonymity is a stron= g desire (protecting user privacy is more important than user attribution), p= rivacy extension addresses should be used. >> =20 >> Can we add a section related to IPv6 inherent capability of the host to m= aintain many IPv6 addresses and security concerns as to which IPv6 address i= s used for conversation flows and the host OS default address selection rfc 6= 724 internal mechanism used to determine which IPv6 address is used for conv= ersations. With SLAAC its possible to have a router with many addresses con= figured and all hosts on the subnet in that hypothetical scenario would get a= n RA advertisement with no limits as many ipv6 addresses that are configured= on the router. >> =20 >> EV> This issue (multiple addresses per host) is described in section 2.6= .2.3 and at the end of the introduction of section 2.1 ? Unsure whether the= document should go further but the next rev will have some more text in sec= tion 2.1. >=20 > [Gyan] Thank you=20 >> =20 >> In section 2.1.2 Point-to-Point links you mention a use case of infrastru= cture routed p2p links only require being configured with link local via Cis= co "ipv6 enable" for ipv6 packet processing and I believe Juniper & Huawei h= ave a similar command so that the IGP OSPF or ISIS adjacency can form via LL= LSA updates however the major security and operational downside is that the= traceroute is unable to show the in/out hop by hop routed interface IPv6 ad= dresses along the path to be able to perform a hop by hop ping/trace when tr= oubleshooting network issues related to latency, jitter or drops. So from a= security standpoint it is recommended although not required to place IPv6 a= ddress on all P2P routed interfaces. >> =20 >> EV> Indeed OSPFv3 & RIPng only use IPv6 LLA to form adjacencies (IS-IS do= es not have IP address) and I can only agree with the above as the co-author= of RFC 7404 ;-) >> =20 >> =46rom an addressing perspective and also for security standpoint the abi= lity to craft an ACL allocating all infrastructure /128 loops from a single= /64 and /127 form a single /64 is recommended and coming out of the same hi= gher order block bit boundary such as a /56. In implementations that I have= deployed we used as a standard addressing schema "0 /56" - 0 /64 Loops, 1= /64 P2P and then instead of going crazy with vlsm we would have a single ma= sk we made it a /120 similar to /24 for IPv4 that covers greater then 2 host= nets router infra like router backbone ring or firewall subnet and then las= t a /64 for all host subnets so simple addressing allowing ability to craft s= ecurity ACLs as necessary for all infrastructure subnets /128-loops /127-p2p= /120- >2 host subnet. =20 >> =20 >> EV> Thank you for the return of experience >> =20 >> -=C3=A9ric >> =20 >> =20 >> Regards, >> =20 >> Gyan S. Mishra >> IT Network Engineering & Technology=20 >> Verizon Communications Inc. (VZ) >> 13101 Columbia Pike FDC1 3rd Floor >> Silver Spring, MD 20904 >> United States >> Phone: 301 502-1347 >> Email: gyan.s.mishra@verizon.com >> www.linkedin.com/in/GYAN-MISHRA-RS-SP-MPLS-IPV6-EXPERT >> =20 --Apple-Mail-C6BF4D27-A73B-4EF0-9780-16925888BBE1 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Eric 

The draft i= s well written and covers IPv6 addressing architecture which is key as well a= s all the security and best practices design aspects for a successful deploy= ment.

Few more comments below:

=
I designed Verizon=E2=80=99s addressing architecture for our very large= internal network and did quite extensive research about 12 years ago when w= e completed deployment.  So there were a lot of learning from a network= design perspective in deployment of a successful IPv6 addressing plan. &nbs= p;Actually I am thinking this is more for 6MAN a draft on IPv6 addressing ar= chitecture for operators.

The 1st section on the ad= dressing architecture just a few simple points which I am thinking of puttin= g into a 6MAN draft.

=46rom a security or firewall a= cl perspective it makes sense to put all loops /128 into the same /64 within= the contiguous infrastructure or customer AS within same admin control. &nb= sp;So that also goes for p2p links /127 and even what I call greater then 2 h= ost router backbone made a one size fits all for that made it a /120 so to n= ot go crazy with VLSM as is possible but for simplicity kept at a simple 4 m= ask design.  The concept of putting all longer masks group into the sam= e /64 is what make security perspective building ACLs much easier.

In the section on 2.3 called link layer security has also be= en called in the industry =E2=80=9Cfirst hop router security=E2=80=9D which m= aybe good to state that somewhere in the description in 2.3

Regarding section 3 external security do you think we should have a= standard best practice Inbound ACL to externals that includes the standard b= ogon filtering and options that should be filtered.  If so I from my de= ployments could provide a standard ingress filter that could be added as an a= ppendix.

Thank you 

G= yan
Sent from my iPhone
<= div dir=3D"ltr">
On Oct 10, 2019, at 12:46 PM, Gyan Mishra <hayabusagsm@gmail.com> wrote:

<= /div>
Hi Eric 

Thank you 

Responses in-line

Sent from my iPhone
<= br>On Oct 7, 2019, at 3:00 AM, Eric Vyncke (evyncke) <evyncke@cisco.com> wrote:

Gyan,

 

Thank you for reviewing our draft. It is very much ap= preciated by the authors.

 

As a co-author of this draft, I agree with your point= of view on the stability of IPv6 addresses in the specific case of a  = =E2=80=9Ctrusted network=E2=80=9D, esp when RFC 7127 and 8064 are widely dep= loyed.

 

See more comments in line with EV>

 

Regards

 

-=C3=A9ric

 

From: Gyan Mishra <hayabusagsm@gmail.com>
Date: Tuesday, 24 September 2019 at 06:25
To: Jen Linkova <furry13@gmai= l.com>
Cc: opsec WG <opsec@ietf.org= >, "draft-ietf-opsec-v6@i= etf.org" <draft-ietf-= opsec-v6@ietf.org>, OpSec Chairs <opsec-chairs@ietf.org>
Subject: Re: [OPSEC] WGLC for draft-ietf-opsec-v6-19
Resent-From: <alias-boun= ces@ietf.org>
Resent-To: Eric Vyncke <evync= ke@cisco.com>, Kiran Kumar Chittimaneni <kk.chittimaneni@gmail.com>, Merike Kaeo <merike@doubleshotsecurity.com>, <erey@ernw.de>
Resent-Date: Tuesday, 24 September 2019 at 06:25

 

Hi Jen

 

Comments in-line

 

I just joined the OPSEC w= orkgroup and read through some of the drafts. Right up my alley. =F0=9F=98=83<= /o:p>

 

Regards,

 

Gyan

 

On Mon, Sep 23, 2019 at 7= :55 PM Jen Linkova <furry13@gmail.co= m> wrote:

Hello,

This message starts a Working Group Last Call for draft-ietf-opsec-v6-19
= (https://tools.ietf.org/html/draft-ietf-opsec-v6-19)

Please review the draft respond to this email to support the document
and/or send comments by 23:59 UTC on Fri, Oct 11th 2019.

Thanks!
--
SY, Jen Linkova aka Furry

_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/opsec


 

[Gyan]  In  se= ction 2.1.5 below  on corporate intranets where you are on a "trusted" n= etwork where the hosts are "trusted" the use or need for privacy extensions a= re not necessary and accountability by far outweighs the privacy extension to maintain anonymity from an IT security.  I h= ave deployed within Verizon's internal network as well as other customers a s= tandard of disabling privacy extensions random station id as well as tempora= ry address so that all hosts are accountable and traceable and the addresses remain stable with EUI64 address or dhcpv6 addr= ess.  With RFC 8064  & RFC 7217 are adopted by windows & o= ther desktop OS's and become the default we can revert our IPv6 deployment s= tandards back to the OS defaults.  Section 2.1.4 talks about scanning and static IPv6 addresses however should also take int= o account enterprises where hosts are "trusted" and that scanning is a requi= rement for enterprises having a historical database dump of arp cache & n= d cache of all hosts addresses both IPv4 & IPv6.

 

 2.1.5. Temporary A= ddresses - Privacy Extensions for SLAAC - 

 

In some extreme use case= s where user accountability is more important than user privacy, network ope= rators may consider to disable SLAAC and rely only on DHCPv6; but, not all o= perating systems support DHCPv6 so some hosts will not get any IPv6 connectivity. Disabling SLAAC and privacy e= xtensions addresses can be done for most OS and for non-hacker users by send= ing RA messages with a hint to get addresses via DHCPv6 by setting the M-bit= but also disabling SLAAC by resetting all A-bits in all prefix information options. However attackers c= ould still find ways to bypass this mechanism if not enforced at the switch/= router level. However, in scenarios where anonymity is a strong desire (pro= tecting user privacy is more important than user attribution), privacy extension addresses should be use= d.

 

Can we add a  secti= on related to IPv6 inherent capability of the host to maintain many IPv6 add= resses and security concerns as to which IPv6 address is used for conversati= on flows and the host OS default address selection rfc 6724 internal mechanism used to determine which IPv6 address i= s used for conversations.  With SLAAC its possible to have a router wit= h many addresses configured and all hosts on the subnet in that hypothetical= scenario would get an RA advertisement with no limits as many ipv6 addresses that are configured on the router.

 

EV> This issue  (multiple addresses per host)= is described in section 2.6.2.3  and at the end of the introduction of= section 2.1 ? Unsure whether the document should go further but the next re= v will have some more text in section 2.1.


[Gyan] Thank you 

=

 

In section 2.1.2 Point-t= o-Point links you mention a use case of infrastructure routed p2p links only= require being configured with link local via Cisco "ipv6 enable" for ipv6 p= acket processing and I believe Juniper & Huawei have a similar command so that the IGP OSPF or ISIS adjacency c= an form via LL LSA updates however the major security and operational downsi= de is that the traceroute is unable to show the in/out hop by hop routed int= erface IPv6 addresses along the path to be able to perform a hop by hop ping/trace when troubleshooting net= work issues related to latency, jitter or drops.  So from a security st= andpoint it is recommended although not required to place IPv6 address on al= l P2P routed interfaces.

 

EV> Indeed OSPFv3 & RIPng only use IPv6 LLA to= form adjacencies (IS-IS does not have IP address) and I can only agree with= the above as the co-author of RFC 7404 ;-)

 

=46rom an addressing per= spective and also for security standpoint the ability  to craft an ACL a= llocating all infrastructure /128 loops from a single /64 and /127 form a si= ngle /64 is recommended and coming out of the same higher order block bit boundary such as a /56.  In impleme= ntations that I have deployed we used as a standard addressing schema  "= 0  /56" -  0 /64 Loops, 1 /64 P2P and then instead of going crazy w= ith vlsm we would have a single mask we made it a /120 similar to /24 for IPv4 that covers greater then 2 host nets router i= nfra like router backbone ring or firewall subnet and then last a /64 for al= l host subnets so simple addressing allowing ability to craft security ACLs a= s necessary for all infrastructure subnets /128-loops /127-p2p /120- >2 host subnet.  =

 

EV> Thank you for the return of experience

 

-=C3=A9ric

 

 

Regards,

 

Gyan S. Mishra=

IT Network Engineering & T= echnology 

Verizon Communications I= nc. (VZ)

13101 Columbia Pike FDC1 3rd = Floor

Silver Spring, MD 20904

United States<= /o:p>

Phone: 301 502-1347

Email: = gyan.s.mishra@verizon.com

www.linkedin.co= m/in/GYAN-MISHRA-RS-SP-MPLS-IPV6-EXPERT

 

= --Apple-Mail-C6BF4D27-A73B-4EF0-9780-16925888BBE1-- From nobody Sat Oct 12 00:33:20 2019 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F7A112001E; Sat, 12 Oct 2019 00:33:11 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: opsec@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.105.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: opsec@ietf.org Message-ID: <157086559138.1393.1472645196672102960@ietfa.amsl.com> Date: Sat, 12 Oct 2019 00:33:11 -0700 Archived-At: Subject: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2019 07:33:11 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure WG of the IETF. Title : Operational Security Considerations for IPv6 Networks Authors : Eric Vyncke Kiran K. Chittimaneni Merike Kaeo Enno Rey Filename : draft-ietf-opsec-v6-20.txt Pages : 52 Date : 2019-10-12 Abstract: Knowledge and experience on how to operate IPv4 securely is available: whether it is the Internet or an enterprise internal network. However, IPv6 presents some new security challenges. RFC 4942 describes the security issues in the protocol but network managers also need a more practical, operations-minded document to enumerate advantages and/or disadvantages of certain choices. This document analyzes the operational security issues in several places of a network (enterprises, service providers and residential users) and proposes technical and procedural mitigations techniques. Some very specific places of a network such as the Internet of Things are not discussed in this document. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-opsec-v6-20 https://datatracker.ietf.org/doc/html/draft-ietf-opsec-v6-20 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-v6-20 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sat Oct 12 00:41:08 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B71C1120845 for ; Sat, 12 Oct 2019 00:40:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=QzmkGBgW; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=nd7ufm+2 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V3yAdDGNAqxY for ; Sat, 12 Oct 2019 00:40:56 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A03AC120851 for ; Sat, 12 Oct 2019 00:40:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4148; q=dns/txt; s=iport; t=1570866056; x=1572075656; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=fU6t854t3uWfxi5KvK2hQ5q/RHa/R/G7XdS+TYyOVm8=; b=QzmkGBgWy6TriFAXbMlOvN2MdY+AHHNHDDrIxG2howlzWpPaQD92Grek wgFvloXVcLvoY7K5uHLsdn81BjpCXMNQ7EZYNYg6CMAgWg8w7Zck7Kbc5 2vZOhawAXipD5lLihOC1WFgW5NYN/YFtX/j00tMSAg60F0lXTnZkm9jZe U=; IronPort-PHdr: =?us-ascii?q?9a23=3AWMgHaBO0sOK0Pluq/gEl6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEu60/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDFf4ETB?= =?us-ascii?q?oZkYMTlg0kDtSCDBj2Mu/sZC83NM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AYAAAqg6Fd/4cNJK1mGwEBAQEBAQE?= =?us-ascii?q?FAQEBEQEBAwMBAQGBZwYBAQELAYFKUAVsViAECyqEI4NHA4RYhXKaWoEugSQ?= =?us-ascii?q?DVAkBAQEMAQEYCwoCAQGEQAIXgkcjNAkOAgMJAQEEAQEBAgEFBG2FLQELhUw?= =?us-ascii?q?CBAEBEBERDAEBLAsBDwIBCBoCJgICAiULFRACBA4FIoMAAYJGAy4BAgynIwK?= =?us-ascii?q?BOIhhdYEygn0BAQWBOAIOQUCCOhiCFwmBDCgBjA0YgUA/gREnH4JMPoJhAQE?= =?us-ascii?q?CAQEWgUcXgncygiyPb51YCoIihwiJM4ReG4I6L0OGXI84ji2IIpEVAgQCBAU?= =?us-ascii?q?CDgEBBYFSOYFYcBUaISoBgkEJRxAUgU+Dc4UUhT90gSmQHgEB?= X-IronPort-AV: E=Sophos;i="5.67,286,1566864000"; d="scan'208";a="645586381" Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 Oct 2019 07:40:56 +0000 Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by alln-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id x9C7etXw016829 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 12 Oct 2019 07:40:56 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 12 Oct 2019 02:40:55 -0500 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 12 Oct 2019 03:40:54 -0400 Received: from NAM05-DM3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Sat, 12 Oct 2019 03:40:54 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WhLax8vGdwfapPl2zo3RBjWKU51tC+1MlbzrI7eGTgBzPBbuXbLrm0qYUteHsYDZbN9W+jCDX6tMMS5Kquiy96ukoRaEf6HrjvMoYOPWUG3HE6LyD2rK1BDgZRXrEAFaim/QxErvWgFOsLe76a2WlMCSW1MzWTIi8atFR54P/2MZExCPq3bwXht3Q0uy9JKeaRy/do2vfDk781M7utrPSUrJpk8oKw3jRuFMuyCVzNdVa3MIamd9z8UAoZGrvSJjonwZx9/p50jW0Pvzt1UxC47n3K1TBH66pGANqcnrAlnz7WsQ1UtcG0bq6ghIv1hczt46cRDFC7fbAWhga/yPRw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fU6t854t3uWfxi5KvK2hQ5q/RHa/R/G7XdS+TYyOVm8=; b=B/2kP6aO37RG7Vh67+d+hR2D8g6Huuk9V0MxhU4WgwLQ97RlhIK7jW58STXjhZH6dhC8A5tl5iHbs8KunoUqm3LMkD+ksc9PxgxBEszNHtxwZNov1zy6HAcrGkW4TdLjXTyLpdV0dQGJ+GEVvfAAD/iLVP6EIUV8Ta/2rBDj3RL1JV8TF28wnktklGNf/xIs2BvInnt4vcNsit2oOWFf/bBBc6UI8GfUpdg+L2HBaHPQX/smJ5+TBsko/5bpEsRxjtbrySx+tfFWXyioxSDwl9nm5v5VNO/D0P8EO6oMfB0jQh3BewpthR+0TDB6X0UKiLhcOjyeHBR7mHRboFFijQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fU6t854t3uWfxi5KvK2hQ5q/RHa/R/G7XdS+TYyOVm8=; b=nd7ufm+2gfXICct0oIvNuRdGw4Dpb5moYfCdlB52yWnb3j1OsaatcF+YKCobM5Lr2I0Ieki8iDutXrzDSIp4LcmJURaEXAeFHNrOktwaHHpiuFbhTRLDKHOYwXWIBPEHWExomkGGU6l9UD8rh+X1pbu6D4I4XvHhlvNmVJYrDvM= Received: from MN2PR11MB4144.namprd11.prod.outlook.com (20.179.150.210) by MN2PR11MB3630.namprd11.prod.outlook.com (20.178.253.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.18; Sat, 12 Oct 2019 07:40:53 +0000 Received: from MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::e4f8:d335:c018:c62a]) by MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::e4f8:d335:c018:c62a%7]) with mapi id 15.20.2347.021; Sat, 12 Oct 2019 07:40:53 +0000 From: "Eric Vyncke (evyncke)" To: "opsec@ietf.org" Thread-Topic: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt Thread-Index: AQHVgM9rjNu0gahqL0CwhI/yzqaHUKdWwKcA Date: Sat, 12 Oct 2019 07:40:52 +0000 Message-ID: References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> In-Reply-To: <157086559138.1393.1472645196672102960@ietfa.amsl.com> Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1d.0.190908 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:750f:3f7a:6233:2b3e] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b35d3474-b4b2-451d-7508-08d74ee78282 x-ms-traffictypediagnostic: MN2PR11MB3630: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0188D66E61 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(396003)(39860400002)(376002)(346002)(136003)(189003)(199004)(76116006)(91956017)(2501003)(64756008)(2906002)(256004)(476003)(6306002)(966005)(66556008)(66446008)(76176011)(6512007)(66476007)(81156014)(81166006)(66946007)(8936002)(58126008)(486006)(33656002)(54906003)(8676002)(6116002)(14444005)(4326008)(99286004)(1730700003)(186003)(102836004)(316002)(6506007)(6436002)(6486002)(71200400001)(305945005)(446003)(36756003)(6246003)(2351001)(25786009)(71190400001)(66574012)(6916009)(229853002)(478600001)(2616005)(5660300002)(7736002)(4001150100001)(14454004)(86362001)(5640700003)(11346002)(46003); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3630; H:MN2PR11MB4144.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: ive+ufKTnjNKXq1+2Jno5T8b4JNliQLotuo9HJGgUvhuphyUCm5BjhH3bQ8xHEoi6uvYLQZTCrampB6ThqGhvyECKERhaGl6GaILGPpL+Gc9zyLdcjLQuQC4LNL7Wt/k+gw1IrepE2cvsYofqOUlMFsXfAHoZsEM/pSAfT3S0OviCypHN/lhKdJhRT1MLn81wZ11orvR598VQwiUTK1OPI0kqyi9hnT7IOx76dnfMgOQ+xQOzDXFjgVRt8BBA0qVjjgwxtKDXVhFeKrS9h2JOENiVtQkS7fiff5K8BEaGEwBDNtq8+Gc9tga5bQkpkTHHHs4suXcpwPN01nZGK47IKBKN1IkjdZiNB9mc8/Va8y4uLjWqK1slDtuXiKfaWSKSXyUDV58/1ONPvl2AXLvppBedNnNdnli1uPuP2D3Vh9cyi1FKGsrl+n22u8xCGE6m0TLUxYSLWWmId1SuaIRFA== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <81FB5D0011BCE143AF4F3B478757BDDE@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: b35d3474-b4b2-451d-7508-08d74ee78282 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2019 07:40:52.7715 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: a5JW50flfkT4opinM/BOtS4ROlUHBVoWe69Dh0Pxx9L85NNm+MmBDWQKZ0HGznQr7MfFQ2VWG+3NoL3U0aOV1w== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3630 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com X-Outbound-Node: alln-core-2.cisco.com Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2019 07:41:07 -0000 QXMgeW91IHdpbGwgbm90aWNlIGluIGh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1k cmFmdC1pZXRmLW9wc2VjLXY2LTIwIHRoaXMgbGF0ZXN0IHJldmlzaW9uIGFkZHJlc3NlcyBhIHN1 Z2dlc3Rpb24gYnkgR3lhbiBNaXNocmEgaXNzdWVkIGR1cmluZyB0aGUgV29ya2luZyBHcm91cCBM YXN0IENhbGwuIE90aGVyIGNoYW5nZXMgYXJlIG1haW5seSByZXBsYWNpbmcgdGhlIG5vcm1hdGl2 ZSAiTVVTVCIgYW5kICJTSE9VTEQiIGFzIGl0IGlzIGFuIGluZm9ybWF0aW9uYWwgZG9jdW1lbnQg KHNvIGl0IGlzIG5vdyAibXVzdCIgYW5kICJzaG91bGQiKSArIHJlbW92aW5nIGFuIHVudXNlZCBp bmZvcm1hdGlvbmFsIHJlZmVyZW5jZS4NCg0KSmVuIGFuZCBSb24sIGFzIHRoZSBhdXRob3JzIGhh dmUgYWRkcmVzc2VkIGFsbCBjb21tZW50cyByZWNlaXZlZCBkdXJpbmcgdGhlIFdHTEMgKGFjdHVh bGx5IGJ5IG9ubHkgb25lIHJldmlld2VyKSBhbmQgdGhlIGV4dGVuc2l2ZSByZXZpZXcgYnkgSmVu LCBtYXkgSSBraW5kbHkgcmVxdWVzdCBwdWJsaWNhdGlvbiBvZiB0aGlzIGRvY3VtZW50Pw0KDQpU aGFuayAgeW91IGFsbA0KDQotw6lyaWMgLW1lcmlrZSAtIGtrIC1lbm5vDQoNCg0K77u/T24gMTIv MTAvMjAxOSwgMDk6MzQsICJPUFNFQyBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYu b3JnIiA8b3BzZWMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRz QGlldGYub3JnPiB3cm90ZToNCg0KICAgIA0KICAgIEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2 YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy4NCiAg ICBUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBPcGVyYXRpb25hbCBTZWN1cml0eSBD YXBhYmlsaXRpZXMgZm9yIElQIE5ldHdvcmsgSW5mcmFzdHJ1Y3R1cmUgV0cgb2YgdGhlIElFVEYu DQogICAgDQogICAgICAgICAgICBUaXRsZSAgICAgICAgICAgOiBPcGVyYXRpb25hbCBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucyBmb3IgSVB2NiBOZXR3b3Jrcw0KICAgICAgICAgICAgQXV0aG9ycyAg ICAgICAgIDogRXJpYyBWeW5ja2UNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEtpcmFu IEsuIENoaXR0aW1hbmVuaQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTWVyaWtlIEth ZW8NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEVubm8gUmV5DQogICAgCUZpbGVuYW1l ICAgICAgICA6IGRyYWZ0LWlldGYtb3BzZWMtdjYtMjAudHh0DQogICAgCVBhZ2VzICAgICAgICAg ICA6IDUyDQogICAgCURhdGUgICAgICAgICAgICA6IDIwMTktMTAtMTINCiAgICANCiAgICBBYnN0 cmFjdDoNCiAgICAgICBLbm93bGVkZ2UgYW5kIGV4cGVyaWVuY2Ugb24gaG93IHRvIG9wZXJhdGUg SVB2NCBzZWN1cmVseSBpcw0KICAgICAgIGF2YWlsYWJsZTogd2hldGhlciBpdCBpcyB0aGUgSW50 ZXJuZXQgb3IgYW4gZW50ZXJwcmlzZSBpbnRlcm5hbA0KICAgICAgIG5ldHdvcmsuICBIb3dldmVy LCBJUHY2IHByZXNlbnRzIHNvbWUgbmV3IHNlY3VyaXR5IGNoYWxsZW5nZXMuICBSRkMNCiAgICAg ICA0OTQyIGRlc2NyaWJlcyB0aGUgc2VjdXJpdHkgaXNzdWVzIGluIHRoZSBwcm90b2NvbCBidXQg bmV0d29yaw0KICAgICAgIG1hbmFnZXJzIGFsc28gbmVlZCBhIG1vcmUgcHJhY3RpY2FsLCBvcGVy YXRpb25zLW1pbmRlZCBkb2N1bWVudCB0bw0KICAgICAgIGVudW1lcmF0ZSBhZHZhbnRhZ2VzIGFu ZC9vciBkaXNhZHZhbnRhZ2VzIG9mIGNlcnRhaW4gY2hvaWNlcy4NCiAgICANCiAgICAgICBUaGlz IGRvY3VtZW50IGFuYWx5emVzIHRoZSBvcGVyYXRpb25hbCBzZWN1cml0eSBpc3N1ZXMgaW4gc2V2 ZXJhbA0KICAgICAgIHBsYWNlcyBvZiBhIG5ldHdvcmsgKGVudGVycHJpc2VzLCBzZXJ2aWNlIHBy b3ZpZGVycyBhbmQgcmVzaWRlbnRpYWwNCiAgICAgICB1c2VycykgYW5kIHByb3Bvc2VzIHRlY2hu aWNhbCBhbmQgcHJvY2VkdXJhbCBtaXRpZ2F0aW9ucyB0ZWNobmlxdWVzLg0KICAgICAgIFNvbWUg dmVyeSBzcGVjaWZpYyBwbGFjZXMgb2YgYSBuZXR3b3JrIHN1Y2ggYXMgdGhlIEludGVybmV0IG9m IFRoaW5ncw0KICAgICAgIGFyZSBub3QgZGlzY3Vzc2VkIGluIHRoaXMgZG9jdW1lbnQuDQogICAg DQogICAgDQogICAgVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJh ZnQgaXM6DQogICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1v cHNlYy12Ni8NCiAgICANCiAgICBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFp bGFibGUgYXQ6DQogICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtb3Bz ZWMtdjYtMjANCiAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0 LWlldGYtb3BzZWMtdjYtMjANCiAgICANCiAgICBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVy c2lvbiBpcyBhdmFpbGFibGUgYXQ6DQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91 cmwyPWRyYWZ0LWlldGYtb3BzZWMtdjYtMjANCiAgICANCiAgICANCiAgICBQbGVhc2Ugbm90ZSB0 aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJt aXNzaW9uDQogICAgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWls YWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCiAgICANCiAgICBJbnRlcm5ldC1EcmFmdHMgYXJlIGFs c28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQogICAgZnRwOi8vZnRwLmlldGYub3Jn L2ludGVybmV0LWRyYWZ0cy8NCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KICAgIE9QU0VDIG1haWxpbmcgbGlzdA0KICAgIE9QU0VDQGll dGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vcHNlYw0K ICAgIA0KDQo= From nobody Mon Oct 14 16:14:56 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5179D1208B0 for ; Mon, 14 Oct 2019 16:14:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ymfFG9-hhKSv for ; Mon, 14 Oct 2019 16:14:51 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99109120893 for ; Mon, 14 Oct 2019 16:14:51 -0700 (PDT) Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x9ENBii9030452; Mon, 14 Oct 2019 16:14:48 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=VPh4ntG7kOnRqcE2AwPEOjrlZ7mprhGelBZD18aHFUE=; b=SnfKwFCnwCfEkDJ9BP8/Fq6LoWY5DIvvrUPKj5y8i3rg/KBGXQjLdnpKiD3zEl0Jkca9 W7Rvb8O5sGVW5FBAADnKelUg6piyuYrUOHokLdrN3Viibo4lrXz/JILgw5PGZxBd10Wy CdFb+NECvlQd55fhS840uoxpa25Q+o3pXop9+SwNoPnGj8pEhCFRD36ERRIYyZPqaVaZ VHu8FwfpDKQrel/nbyFQ4Hf3o2uwuJfC2d94KpiT88NftAGRHhUhhKyVImxrx9Hmqxbx Oss7FDylcxqo47Bvy80XQcaAJxYc9rTqa/UZMADKlC0Lq6OwLWDEsQG8QsSBX8eUJtZS 0Q== Received: from nam03-dm3-obe.outbound.protection.outlook.com (mail-dm3nam03lp2059.outbound.protection.outlook.com [104.47.41.59]) by mx0a-00273201.pphosted.com with ESMTP id 2vmr0y118k-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 14 Oct 2019 16:14:48 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dJzoHJhOm+Y4LIG1O1ypnhcN0lSsPegx97zZf85mZsaKocd6Zkbo+gp4xjNPs42hozLQBBvMHN0zGUHZDhmB2wiXT5bBUZbO188K8t8xP9ZrVb1ddB5n6LjBL687/Vz3gebc36Y+Jf102qJPgchNo8K55xt68ZQtpfoVvM8PytixVkoJrH8xFz4MhLqTs2V3Z2VRFCiaN35iGES5o4ouLvkWPoyWFIc0CFERiPazlpYh1G2x/8O65OoXXUXhmFZacXwPz/HeZqrO48UELErQUE/JgFhYjXjE5zuVnn6Q0D83dlKm6OVYlqqg3UvF+ADt0ugLJpnf8QTJGp9AcUenlg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VPh4ntG7kOnRqcE2AwPEOjrlZ7mprhGelBZD18aHFUE=; b=UW6j344wvRACGQM8eE6hfzG391puOL8ykaWDbK0dUavzSlPWFMw2Xu9uNQ57IAx6HchLafyfx+m70sX3Joo+pu/0qam3pgPzMMVk6978rVH+tV/wqtpT0NnAo1J6kUK6psYfm8RIdiJXo7FJRT3/oZaNdVD4FBQBu5G1oSbufKooIK8i+usNBm20iW+f6xjIV2GUOWu4nBvGdAJa/AC6NPhlwDZsseaCcBgnaJ2uoJt32e5uBTGby72CnW7bpXnH6lzouVI29DXbX21b/bcfa9GNWc3zElMrWUGAofQntuQbpFoG+jTsL64FbhsPPA6GOPdyAfumh0wcN0crf2LouQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB6276.namprd05.prod.outlook.com (20.176.29.212) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.14; Mon, 14 Oct 2019 23:14:46 +0000 Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d%6]) with mapi id 15.20.2347.023; Mon, 14 Oct 2019 23:14:46 +0000 From: Ron Bonica To: "Eric Vyncke (evyncke)" , "opsec@ietf.org" Thread-Topic: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt Thread-Index: AQHVgM9qCXNfO+2Yk0OA93yzEpLb9KdWnyAAgAQpIHA= Content-Class: Date: Mon, 14 Oct 2019 23:14:45 +0000 Message-ID: References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-14T23:14:44.0479789Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=6e8df741-f7dc-4d3a-bdc8-3d84b051de6f; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [108.28.233.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3f6eae11-8332-4ac5-3516-08d750fc4db0 x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: BN7PR05MB6276: x-ms-exchange-purlcount: 6 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 01901B3451 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(136003)(376002)(366004)(396003)(346002)(189003)(199004)(13464003)(76176011)(11346002)(6506007)(8676002)(52536014)(102836004)(446003)(81156014)(5660300002)(81166006)(7696005)(66066001)(99286004)(33656002)(6116002)(110136005)(25786009)(316002)(53546011)(3846002)(478600001)(8936002)(26005)(186003)(6436002)(74316002)(66574012)(4326008)(86362001)(305945005)(256004)(2501003)(71200400001)(229853002)(966005)(6246003)(14444005)(55016002)(7736002)(6306002)(9686003)(71190400001)(2906002)(64756008)(66446008)(14454004)(4001150100001)(76116006)(486006)(66476007)(66556008)(66946007)(476003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB6276; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: jtIscoXOciPwRCNDRlZIarGLK1qCDVkO58h1z40wLhtQsMY+sf+1O0SJhTx/DJ6ciB4PFLQWT4n0o5bx1qdcToZZhyKX2sREpr1YzuTVwkw0JslkVzTlZKnP0QRRtBMGlkz8MVmNgErTXuUm6GOD6SLhyjPcrp88HKGlCM4b0oWdhOTIFG6v/v3ogISFfnFpzWcVx4rJh39TvwuFAtVR8zWLR+DUmAs/qlyxKWdtMu4WodXgYohTc6KnmbI247gh0lr4UnMA21bQj3dRxFr10KBCE5Fzm/IjuhaP02pOowjKdgCVEaxtmYUPbDI0JrgTi/XCQy9XAgX7E3SElIhGvYj62OotM3GBarPB56eiieMMQkCtICURcDOZPLJf3mCWcTsrG+Jz/dWccglXtlWaWj4J+NXRZImjiED1y0BujN3/s8s6ujjvxbJIwDVdMb/8tbOwtfHvCFDI0D0NWLYTEA== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 3f6eae11-8332-4ac5-3516-08d750fc4db0 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2019 23:14:45.9040 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7FyMr1yHDGMnQqTfYvtc89aANs/WClYyGbjYeCKOrROIWU7IVA+M7T+v48/TREhkd1AvcsBdkI8irmWCYSkEtA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB6276 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-14_11:2019-10-11,2019-10-14 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 impostorscore=0 spamscore=0 mlxscore=0 clxscore=1011 malwarescore=0 lowpriorityscore=0 adultscore=0 priorityscore=1501 phishscore=0 suspectscore=0 bulkscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910140195 Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Oct 2019 23:14:55 -0000 SmVuLA0KDQpJIGFtIHJlYWR5IHRvIHJlcXVlc3QgcHVibGljYXRpb24uIEJ1dCBiZWZvcmUgd2Ug ZG8gdGhhdCwgd2UgbmVlZCBhIGRvY3VtZW50IHNoZXBoZXJkLg0KDQpFcmljLA0KDQpXYXMgdGhl cmUgYW55b25lIHdobyB3YXMgY2xvc2UgdG8gdGhlIGRyYWZ0LCBidXQgbm90IGEgY28tYXV0aG9y LiBXZSBjYW4gdmljdGltdGVlciB0aGF0IHBlcnNvbi4NCg0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUm9uDQoNCg0KDQpKdW5pcGVyIEJ1c2lu ZXNzIFVzZSBPbmx5DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBFcmljIFZ5 bmNrZSAoZXZ5bmNrZSkgPGV2eW5ja2VAY2lzY28uY29tPiANClNlbnQ6IFNhdHVyZGF5LCBPY3Rv YmVyIDEyLCAyMDE5IDM6NDEgQU0NClRvOiBvcHNlY0BpZXRmLm9yZw0KQ2M6IEplbiBMaW5rb3Zh IDxmdXJyeTEzQGdtYWlsLmNvbT47IFJvbiBCb25pY2EgPHJib25pY2FAanVuaXBlci5uZXQ+DQpT dWJqZWN0OiBSZTogW09QU0VDXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLW9wc2VjLXY2LTIwLnR4 dA0KDQpBcyB5b3Ugd2lsbCBub3RpY2UgaW4gaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0 dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187 IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRs MTFaOWpYWmdNTXVWQ2ZDMFFyWWckICB0aGlzIGxhdGVzdCByZXZpc2lvbiBhZGRyZXNzZXMgYSBz dWdnZXN0aW9uIGJ5IEd5YW4gTWlzaHJhIGlzc3VlZCBkdXJpbmcgdGhlIFdvcmtpbmcgR3JvdXAg TGFzdCBDYWxsLiBPdGhlciBjaGFuZ2VzIGFyZSBtYWlubHkgcmVwbGFjaW5nIHRoZSBub3JtYXRp dmUgIk1VU1QiIGFuZCAiU0hPVUxEIiBhcyBpdCBpcyBhbiBpbmZvcm1hdGlvbmFsIGRvY3VtZW50 IChzbyBpdCBpcyBub3cgIm11c3QiIGFuZCAic2hvdWxkIikgKyByZW1vdmluZyBhbiB1bnVzZWQg aW5mb3JtYXRpb25hbCByZWZlcmVuY2UuDQoNCkplbiBhbmQgUm9uLCBhcyB0aGUgYXV0aG9ycyBo YXZlIGFkZHJlc3NlZCBhbGwgY29tbWVudHMgcmVjZWl2ZWQgZHVyaW5nIHRoZSBXR0xDIChhY3R1 YWxseSBieSBvbmx5IG9uZSByZXZpZXdlcikgYW5kIHRoZSBleHRlbnNpdmUgcmV2aWV3IGJ5IEpl biwgbWF5IEkga2luZGx5IHJlcXVlc3QgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudD8NCg0K VGhhbmsgIHlvdSBhbGwNCg0KLcOpcmljIC1tZXJpa2UgLSBrayAtZW5ubw0KDQoNCu+7v09uIDEy LzEwLzIwMTksIDA5OjM0LCAiT1BTRUMgb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRm Lm9yZyIgPG9wc2VjLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0 c0BpZXRmLm9yZz4gd3JvdGU6DQoNCiAgICANCiAgICBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBh dmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuDQog ICAgVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgT3BlcmF0aW9uYWwgU2VjdXJpdHkg Q2FwYWJpbGl0aWVzIGZvciBJUCBOZXR3b3JrIEluZnJhc3RydWN0dXJlIFdHIG9mIHRoZSBJRVRG Lg0KICAgIA0KICAgICAgICAgICAgVGl0bGUgICAgICAgICAgIDogT3BlcmF0aW9uYWwgU2VjdXJp dHkgQ29uc2lkZXJhdGlvbnMgZm9yIElQdjYgTmV0d29ya3MNCiAgICAgICAgICAgIEF1dGhvcnMg ICAgICAgICA6IEVyaWMgVnluY2tlDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBLaXJh biBLLiBDaGl0dGltYW5lbmkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1lcmlrZSBL YWVvDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFbm5vIFJleQ0KICAgIAlGaWxlbmFt ZSAgICAgICAgOiBkcmFmdC1pZXRmLW9wc2VjLXY2LTIwLnR4dA0KICAgIAlQYWdlcyAgICAgICAg ICAgOiA1Mg0KICAgIAlEYXRlICAgICAgICAgICAgOiAyMDE5LTEwLTEyDQogICAgDQogICAgQWJz dHJhY3Q6DQogICAgICAgS25vd2xlZGdlIGFuZCBleHBlcmllbmNlIG9uIGhvdyB0byBvcGVyYXRl IElQdjQgc2VjdXJlbHkgaXMNCiAgICAgICBhdmFpbGFibGU6IHdoZXRoZXIgaXQgaXMgdGhlIElu dGVybmV0IG9yIGFuIGVudGVycHJpc2UgaW50ZXJuYWwNCiAgICAgICBuZXR3b3JrLiAgSG93ZXZl ciwgSVB2NiBwcmVzZW50cyBzb21lIG5ldyBzZWN1cml0eSBjaGFsbGVuZ2VzLiAgUkZDDQogICAg ICAgNDk0MiBkZXNjcmliZXMgdGhlIHNlY3VyaXR5IGlzc3VlcyBpbiB0aGUgcHJvdG9jb2wgYnV0 IG5ldHdvcmsNCiAgICAgICBtYW5hZ2VycyBhbHNvIG5lZWQgYSBtb3JlIHByYWN0aWNhbCwgb3Bl cmF0aW9ucy1taW5kZWQgZG9jdW1lbnQgdG8NCiAgICAgICBlbnVtZXJhdGUgYWR2YW50YWdlcyBh bmQvb3IgZGlzYWR2YW50YWdlcyBvZiBjZXJ0YWluIGNob2ljZXMuDQogICAgDQogICAgICAgVGhp cyBkb2N1bWVudCBhbmFseXplcyB0aGUgb3BlcmF0aW9uYWwgc2VjdXJpdHkgaXNzdWVzIGluIHNl dmVyYWwNCiAgICAgICBwbGFjZXMgb2YgYSBuZXR3b3JrIChlbnRlcnByaXNlcywgc2VydmljZSBw cm92aWRlcnMgYW5kIHJlc2lkZW50aWFsDQogICAgICAgdXNlcnMpIGFuZCBwcm9wb3NlcyB0ZWNo bmljYWwgYW5kIHByb2NlZHVyYWwgbWl0aWdhdGlvbnMgdGVjaG5pcXVlcy4NCiAgICAgICBTb21l IHZlcnkgc3BlY2lmaWMgcGxhY2VzIG9mIGEgbmV0d29yayBzdWNoIGFzIHRoZSBJbnRlcm5ldCBv ZiBUaGluZ3MNCiAgICAgICBhcmUgbm90IGRpc2N1c3NlZCBpbiB0aGlzIGRvY3VtZW50Lg0KICAg IA0KICAgIA0KICAgIFRoZSBJRVRGIGRhdGF0cmFja2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRy YWZ0IGlzOg0KICAgIGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLW9wc2VjLXY2L19fOyE4V29BNlJqQzgxYyFSMnZI LV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNWZ3Rt bkdkJCANCiAgICANCiAgICBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFi bGUgYXQ6DQogICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3Yz TnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1FkQXEtbkck IA0KICAgIGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtb3BzZWMtdjYtMjBfXzshOFdvQTZSakM4MWMhUjJ2 SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDVGFG V3YzaCQgDQogICAgDQogICAgQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZh aWxhYmxlIGF0Og0KICAgIGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3d3dy5p ZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1vcHNlYy12Ni0yMF9fOyE4V29BNlJqQzgx YyFSMnZILV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11 VkNmQzBRcllnJCANCiAgICANCiAgICANCiAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtl IGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQogICAgdW50 aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5p ZXRmLm9yZy4NCiAgICANCiAgICBJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5 IGFub255bW91cyBGVFAgYXQ6DQogICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2Z0cDov L2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVn aXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1hrdVVlYmQkIA0K ICAgIA0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQogICAgT1BTRUMgbWFpbGluZyBsaXN0DQogICAgT1BTRUNAaWV0Zi5vcmcNCiAgICBodHRwczov L3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9vcHNlY19fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklC N29NeGdWXzVUbDExWjlqWFpnTU11VkNWakEtN3QyJCANCiAgICANCg== From nobody Mon Oct 14 16:54:40 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C7621208B5 for ; Mon, 14 Oct 2019 16:54:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IiOPUfPGF47N for ; Mon, 14 Oct 2019 16:54:36 -0700 (PDT) Received: from mail-qk1-x72d.google.com (mail-qk1-x72d.google.com [IPv6:2607:f8b0:4864:20::72d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 141081208B3 for ; Mon, 14 Oct 2019 16:54:36 -0700 (PDT) Received: by mail-qk1-x72d.google.com with SMTP id x4so13596875qkx.5 for ; Mon, 14 Oct 2019 16:54:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=5dKNVhabstqpYf5ASHsAgdBY3a4uSZRgmbqsc3frn+o=; b=Wx8jc4xzWBbt/ZtNWGJPcqMYBiiIIFVew9A3t9L781p4y53OQkUlWa9uaOXEB2zltN UxtPHYaXbKC1yGZVH3D7XYTw61lyOdZ9SyvmZSzybWnE/99FukdY2dzQ/101RTerf8h1 kJ/750hMbuF2rgA6qmtHWoNCZffeXMZ9VQw2Jx/ffuWk1gv3UHd4EwisYSsO6bZX/0LU bG8WgTFhVBryj00hmLAemQypFBb+9/mcgDbz9SONH7C2TPJXxgvyyLzNsuimQ46j6HQ3 5UMaxcBCkmS2sbk8mQaLUQNe9SXWQ3leY1BJZ4V8rqz67o3DqBTmvEZX8yjadxEfg9cc pp0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=5dKNVhabstqpYf5ASHsAgdBY3a4uSZRgmbqsc3frn+o=; b=Oc6scKh74qVLGTVZWMbec/msNIs/VZ/tamgHduNbC3dct+SSGLu1zfbKlb3lSao7gJ 1oVFz9zYfJ9VV+fi0CxbH2pMmupcYH4LesEog5ClaFMcMqbnj39mcRK4g4a25aZ/VzRK /HScTaH9ICWPleuZfELUVz5t2An5MCZ0wdCkvIpnGtzDLZJHZ9/96bxsb5BqI44+8CeG Jan0iYVGHhgCIW8V7RjuHIOg3xXKTXMHtHXBFSfYj+fEdtCkYKOcfUvaCjOL3vBCjo1H QQoBp9pywSswGb/RXhaT6qxUNNZt3KqmX+kf1Lj8YNgfe0VtoQ1NGCBh1k9x8s1LCq4n NHpQ== X-Gm-Message-State: APjAAAUP/pL1jBxcc3NSiAMVgk+55fCToWFB47MPw3gWiaB1VB7gd1PG quW9Rio4y6hq0hJ6aoYaFEIx2qcc X-Google-Smtp-Source: APXvYqynGDzJpPDVVBDbKi2zgdIBoNoFBCIitM3cJKM9AEdW8kj29NpAWOQmJZ5EnL3zfbgYNmWKnw== X-Received: by 2002:a37:67d4:: with SMTP id b203mr26857631qkc.435.1571097274592; Mon, 14 Oct 2019 16:54:34 -0700 (PDT) Received: from ?IPv6:2600:1003:b108:7d8c:286e:a6d3:4ac9:6605? ([2600:1003:b108:7d8c:286e:a6d3:4ac9:6605]) by smtp.gmail.com with ESMTPSA id b1sm8289024qtr.17.2019.10.14.16.54.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Oct 2019 16:54:33 -0700 (PDT) From: Gyan Mishra X-Google-Original-From: Gyan Mishra Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (16G102) In-Reply-To: Date: Mon, 14 Oct 2019 19:54:33 -0400 Cc: "Eric Vyncke (evyncke)" , "opsec@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> To: Ron Bonica Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Oct 2019 23:54:39 -0000 Ron I read the document thoroughly in its entirety and do have valuable real wor= ld experience in this space so I am volunteering. Not sure what I am getting myself into.=F0=9F=98=80 Gyan Sent from my iPhone > On Oct 14, 2019, at 7:14 PM, Ron Bonica wrote: >=20 > Jen, >=20 > I am ready to request publication. But before we do that, we need a docume= nt shepherd. >=20 > Eric, >=20 > Was there anyone who was close to the draft, but not a co-author. We can v= ictimteer that person. >=20 > Ron >=20 >=20 >=20 > Juniper Business Use Only >=20 > -----Original Message----- > From: Eric Vyncke (evyncke) =20 > Sent: Saturday, October 12, 2019 3:41 AM > To: opsec@ietf.org > Cc: Jen Linkova ; Ron Bonica > Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt >=20 > As you will notice in https://urldefense.com/v3/__https://www.ietf.org/rfc= diff?url2=3Ddraft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zG= AXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCfC0QrYg$ this latest revision addresses a su= ggestion by Gyan Mishra issued during the Working Group Last Call. Other cha= nges are mainly replacing the normative "MUST" and "SHOULD" as it is an info= rmational document (so it is now "must" and "should") + removing an unused i= nformational reference. >=20 > Jen and Ron, as the authors have addressed all comments received during th= e WGLC (actually by only one reviewer) and the extensive review by Jen, may I= kindly request publication of this document? >=20 > Thank you all >=20 > -=C3=A9ric -merike - kk -enno >=20 >=20 > =EF=BB=BFOn 12/10/2019, 09:34, "OPSEC on behalf of internet-drafts@ietf.or= g" wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts dire= ctories. > This draft is a work item of the Operational Security Capabilities for I= P Network Infrastructure WG of the IETF. >=20 > Title : Operational Security Considerations for IPv6 N= etworks > Authors : Eric Vyncke > Kiran K. Chittimaneni > Merike Kaeo > Enno Rey > Filename : draft-ietf-opsec-v6-20.txt > Pages : 52 > Date : 2019-10-12 >=20 > Abstract: > Knowledge and experience on how to operate IPv4 securely is > available: whether it is the Internet or an enterprise internal > network. However, IPv6 presents some new security challenges. RFC > 4942 describes the security issues in the protocol but network > managers also need a more practical, operations-minded document to > enumerate advantages and/or disadvantages of certain choices. >=20 > This document analyzes the operational security issues in several > places of a network (enterprises, service providers and residential > users) and proposes technical and procedural mitigations techniques.= > Some very specific places of a network such as the Internet of Thing= s > are not discussed in this document. >=20 >=20 > The IETF datatracker status page for this draft is: > https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf= -opsec-v6/__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jX= ZgMMuVCVgtmnGd$=20 >=20 > There are also htmlized versions available at: > https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-opse= c-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgM= MuVCQdAq-nG$=20 > https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft= -ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5T= l11Z9jXZgMMuVCTaFWv3h$=20 >=20 > A diff from the previous version is available at: > https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-i= etf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl1= 1Z9jXZgMMuVCfC0QrYg$=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of submi= ssion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > https://urldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!8WoA= 6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCXkuUebd$=20= >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/opsec= __;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCVjA= -7t2$=20 >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec From nobody Mon Oct 14 17:14:40 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 170E51208B8 for ; Mon, 14 Oct 2019 17:14:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fcjjl-7yz9Q0 for ; Mon, 14 Oct 2019 17:14:37 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA99E120013 for ; Mon, 14 Oct 2019 17:14:36 -0700 (PDT) Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x9F0BNw0011294; Mon, 14 Oct 2019 17:14:31 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=xZ04nCOwN+dLeYaD01iYTfQ0O+aS8H07/FKgNQqpPcw=; b=YJMRgJ4OHFVQfivU27W/35sC7lGi6wBeM+tSf7NtgqxTB/wGsK+/6OgIqnu0Ha0Vwbot 6KtrgNEzv04iuoiEFUe1k7loOSRwWfH72bRj+oE03d8NZw9zdnVnGShTE9exmCmrksN6 umnFJSBlUsaGfONklC4KVT8iLxsMljs93l800wQKwi04iShQ1VJmXbcdPwXGIiwx/GnS yApB3FtmSqKN2trpVHbEl6cLEG9xro7bL3KcOeeF8uFOj4EEbzRV3JPsTc29BvHUEJtw a1+SijWcw66hsegJCBvCX9cxTaer0lwI2CDZUFMYQKmNMhBA1S8tCYhTcR9HaBPFjILP 3g== Received: from nam03-dm3-obe.outbound.protection.outlook.com (mail-dm3nam03lp2058.outbound.protection.outlook.com [104.47.41.58]) by mx0b-00273201.pphosted.com with ESMTP id 2vmvsn8mdd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 14 Oct 2019 17:14:30 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RU7Le+oKgFWl7+Rko36NsaqcAkgQelqPX3gnJGi8MgXMwfvv1FQOEY+nyrRXShxMNAnhYyc8RUA2F7aN8qDX6YUXoeYu93KDTRwXHvbNGEuUdf6Tt8RjhzZSI97G56CwZDFGaVowsLga2E4aeB8xOPqJWWgsBwEosxKIMYNj+IxkagLZrmZwDnYCPtm9RDh7vJ8Z80aT23FzdrdUfn2sRlRdxFz92Diaep6a8rbFmK6V1zvX7Bty6VnKjohsvCdgUUTdr90miu84X5qCMzsbyf/Y3hxstVoyyB1+WVnswJZRgpAMjH9bqkrFqmVXr1DhzD0mnAvH4t3s3E45f91dvg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xZ04nCOwN+dLeYaD01iYTfQ0O+aS8H07/FKgNQqpPcw=; b=BC2uZzHjPssGZpI01HFQv36VUv+wmvyk7gdhJx+MHWdSik6Lzg1B1Xb8gD0Y9pgJsizinyOr/1y+XavGrh8+eNzRFQfJWOyu9XSxpG12NCvC+viAQW5ekJR2huOAIjzA/lWowK+te+XFuPdoUU4s0YaGcKDYCETDd5jfiL57Xjar30w0fja7WfNRLOhU6DiautSO6QrAZ/zRlvh9OCm/KslfZJeJEdh0g8VSTA2q7FU668eo0NeIZMOaTk91yiSAVa3CTRdpGEU8+vkQYw2M2y5t7unAyEqqeMwnRraf5C5vMOUasNq2gKf2JZoJBgSFZkkuSqUBVvLeZaRhB9ATZQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB4369.namprd05.prod.outlook.com (52.133.223.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.13; Tue, 15 Oct 2019 00:14:28 +0000 Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d%6]) with mapi id 15.20.2347.023; Tue, 15 Oct 2019 00:14:28 +0000 From: Ron Bonica To: Gyan Mishra CC: "Eric Vyncke (evyncke)" , "opsec@ietf.org" Thread-Topic: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt Thread-Index: AQHVgM9qCXNfO+2Yk0OA93yzEpLb9KdWnyAAgAQpIHCAAAuUgIAABV2w Content-Class: Date: Tue, 15 Oct 2019 00:14:28 +0000 Message-ID: References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-15T00:14:26.0755888Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=37eecfed-9e96-41ef-b22c-784b7e15ab56; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [108.28.233.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 26dd3e7a-84f5-4b00-90a5-08d75104a4e8 x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: BN7PR05MB4369: x-ms-exchange-purlcount: 7 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 01917B1794 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(366004)(136003)(396003)(13464003)(199004)(189003)(66946007)(2906002)(99286004)(64756008)(446003)(66556008)(6246003)(52536014)(54906003)(7696005)(11346002)(74316002)(8676002)(66446008)(66476007)(81166006)(81156014)(25786009)(33656002)(229853002)(8936002)(4326008)(71190400001)(71200400001)(476003)(486006)(66066001)(256004)(5660300002)(86362001)(76116006)(305945005)(66574012)(966005)(478600001)(9686003)(26005)(1411001)(6116002)(3846002)(7736002)(14444005)(6916009)(102836004)(6506007)(53546011)(55016002)(316002)(4001150100001)(76176011)(6436002)(186003)(14454004)(6306002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB4369; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: MFBPrhDioz+Gwb9XxdOERcC1Gn0QZ50NrsXfRqX0qJM9yStgcgWJ0CqQRsBHSyX5lVImZV8a0b3rMZEWglT7Z1DUXc9IXCgJzbzG3xVosR8Z2zepwwFn1uJGDpkgjTd2ZOLOhqw2X9iA6fQ71TMc/M7dkWfFq9p+k+KyuF2uazQMswOcLrWj9icBL/hvJ/4eMSFNdjC4VDDlM/EaJTowxgSRQ+pSpfF7WhV+mT8NFqy+piWlo4OTlEz1bqoDZiJtcDYgVvUMfBnEQGVcygE2SGF+WZozMi9xvLH5UpL5JNm+PQJ3vzWaDUVyjuScc9Zgcsjeqnd1EuuvpwIO/PMSsLknPK8F/dTxDF+hc1D21urdXW5u7Kvz8g+V5JFtWs+SAxGi9LNo99OwySTC1robFMt555hjmKCTuIBFmEnt3mtWIkqILX2leu97MqcGFM3e9pkTCdwKoBmPkB0eemyuzA== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 26dd3e7a-84f5-4b00-90a5-08d75104a4e8 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2019 00:14:28.3219 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Y9tF++Jo70wiAs6Usu08Kjsq+IFuFSy9Kormu2U7EeQxeyn8r1sHGW2MYAFqoXUqvXZOSCCoJhMkUZ/uu3euww== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4369 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-14_12:2019-10-11,2019-10-14 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 malwarescore=0 spamscore=0 phishscore=0 adultscore=0 clxscore=1015 priorityscore=1501 impostorscore=0 lowpriorityscore=0 suspectscore=0 bulkscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910150000 Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 00:14:39 -0000 V2UgaGF2ZSBhIHZpY3RpbXRlZXIhIEkgd2lsbCByZXF1ZXN0IHB1YmxpY2F0aW9uLi4uLi4uDQoN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSb24NCg0KDQoNCkp1bmlwZXIgQnVz aW5lc3MgVXNlIE9ubHkNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEd5YW4g TWlzaHJhIDxoYXlhYnVzYWdzbUBnbWFpbC5jb20+IA0KU2VudDogTW9uZGF5LCBPY3RvYmVyIDE0 LCAyMDE5IDc6NTUgUE0NClRvOiBSb24gQm9uaWNhIDxyYm9uaWNhQGp1bmlwZXIubmV0Pg0KQ2M6 IEVyaWMgVnluY2tlIChldnluY2tlKSA8ZXZ5bmNrZUBjaXNjby5jb20+OyBvcHNlY0BpZXRmLm9y Zw0KU3ViamVjdDogUmU6IFtPUFNFQ10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1vcHNlYy12Ni0y MC50eHQNCg0KUm9uDQoNCkkgcmVhZCB0aGUgZG9jdW1lbnQgdGhvcm91Z2hseSBpbiBpdHMgZW50 aXJldHkgYW5kIGRvIGhhdmUgdmFsdWFibGUgcmVhbCB3b3JsZCBleHBlcmllbmNlIGluIHRoaXMg c3BhY2Ugc28gSSBhbSB2b2x1bnRlZXJpbmcuDQoNCk5vdCBzdXJlIHdoYXQgSSBhbSBnZXR0aW5n IG15c2VsZiBpbnRvLvCfmIANCg0KR3lhbg0KDQpTZW50IGZyb20gbXkgaVBob25lDQoNCj4gT24g T2N0IDE0LCAyMDE5LCBhdCA3OjE0IFBNLCBSb24gQm9uaWNhIDxyYm9uaWNhPTQwanVuaXBlci5u ZXRAZG1hcmMuaWV0Zi5vcmc+IHdyb3RlOg0KPiANCj4gSmVuLA0KPiANCj4gSSBhbSByZWFkeSB0 byByZXF1ZXN0IHB1YmxpY2F0aW9uLiBCdXQgYmVmb3JlIHdlIGRvIHRoYXQsIHdlIG5lZWQgYSBk b2N1bWVudCBzaGVwaGVyZC4NCj4gDQo+IEVyaWMsDQo+IA0KPiBXYXMgdGhlcmUgYW55b25lIHdo byB3YXMgY2xvc2UgdG8gdGhlIGRyYWZ0LCBidXQgbm90IGEgY28tYXV0aG9yLiBXZSBjYW4gdmlj dGltdGVlciB0aGF0IHBlcnNvbi4NCj4gDQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUm9uDQo+IA0KPiANCj4gDQo+IEp1bmlwZXIgQnVzaW5l c3MgVXNlIE9ubHkNCj4gDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEVy aWMgVnluY2tlIChldnluY2tlKSA8ZXZ5bmNrZUBjaXNjby5jb20+IA0KPiBTZW50OiBTYXR1cmRh eSwgT2N0b2JlciAxMiwgMjAxOSAzOjQxIEFNDQo+IFRvOiBvcHNlY0BpZXRmLm9yZw0KPiBDYzog SmVuIExpbmtvdmEgPGZ1cnJ5MTNAZ21haWwuY29tPjsgUm9uIEJvbmljYSA8cmJvbmljYUBqdW5p cGVyLm5ldD4NCj4gU3ViamVjdDogUmU6IFtPUFNFQ10gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1v cHNlYy12Ni0yMC50eHQNCj4gDQo+IEFzIHlvdSB3aWxsIG5vdGljZSBpbiBodHRwczovL3VybGRl ZmVuc2UuY29tL3YzL19faHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWll dGYtb3BzZWMtdjYtMjBfXzshOFdvQTZSakM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdB WFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDZkMwUXJZZyQgIHRoaXMgbGF0ZXN0IHJldmlz aW9uIGFkZHJlc3NlcyBhIHN1Z2dlc3Rpb24gYnkgR3lhbiBNaXNocmEgaXNzdWVkIGR1cmluZyB0 aGUgV29ya2luZyBHcm91cCBMYXN0IENhbGwuIE90aGVyIGNoYW5nZXMgYXJlIG1haW5seSByZXBs YWNpbmcgdGhlIG5vcm1hdGl2ZSAiTVVTVCIgYW5kICJTSE9VTEQiIGFzIGl0IGlzIGFuIGluZm9y bWF0aW9uYWwgZG9jdW1lbnQgKHNvIGl0IGlzIG5vdyAibXVzdCIgYW5kICJzaG91bGQiKSArIHJl bW92aW5nIGFuIHVudXNlZCBpbmZvcm1hdGlvbmFsIHJlZmVyZW5jZS4NCj4gDQo+IEplbiBhbmQg Um9uLCBhcyB0aGUgYXV0aG9ycyBoYXZlIGFkZHJlc3NlZCBhbGwgY29tbWVudHMgcmVjZWl2ZWQg ZHVyaW5nIHRoZSBXR0xDIChhY3R1YWxseSBieSBvbmx5IG9uZSByZXZpZXdlcikgYW5kIHRoZSBl eHRlbnNpdmUgcmV2aWV3IGJ5IEplbiwgbWF5IEkga2luZGx5IHJlcXVlc3QgcHVibGljYXRpb24g b2YgdGhpcyBkb2N1bWVudD8NCj4gDQo+IFRoYW5rICB5b3UgYWxsDQo+IA0KPiAtw6lyaWMgLW1l cmlrZSAtIGtrIC1lbm5vDQo+IA0KPiANCj4g77u/T24gMTIvMTAvMjAxOSwgMDk6MzQsICJPUFNF QyBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiA8b3BzZWMtYm91bmNlc0Bp ZXRmLm9yZyBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPiB3cm90ZToNCj4g DQo+IA0KPiAgICBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0aGUgb24t bGluZSBJbnRlcm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuDQo+ICAgIFRoaXMgZHJhZnQgaXMgYSB3 b3JrIGl0ZW0gb2YgdGhlIE9wZXJhdGlvbmFsIFNlY3VyaXR5IENhcGFiaWxpdGllcyBmb3IgSVAg TmV0d29yayBJbmZyYXN0cnVjdHVyZSBXRyBvZiB0aGUgSUVURi4NCj4gDQo+ICAgICAgICAgICAg VGl0bGUgICAgICAgICAgIDogT3BlcmF0aW9uYWwgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgZm9y IElQdjYgTmV0d29ya3MNCj4gICAgICAgICAgICBBdXRob3JzICAgICAgICAgOiBFcmljIFZ5bmNr ZQ0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEtpcmFuIEsuIENoaXR0aW1hbmVuaQ0K PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1lcmlrZSBLYWVvDQo+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgRW5ubyBSZXkNCj4gICAgICAgIEZpbGVuYW1lICAgICAgICA6IGRy YWZ0LWlldGYtb3BzZWMtdjYtMjAudHh0DQo+ICAgICAgICBQYWdlcyAgICAgICAgICAgOiA1Mg0K PiAgICAgICAgRGF0ZSAgICAgICAgICAgIDogMjAxOS0xMC0xMg0KPiANCj4gICAgQWJzdHJhY3Q6 DQo+ICAgICAgIEtub3dsZWRnZSBhbmQgZXhwZXJpZW5jZSBvbiBob3cgdG8gb3BlcmF0ZSBJUHY0 IHNlY3VyZWx5IGlzDQo+ICAgICAgIGF2YWlsYWJsZTogd2hldGhlciBpdCBpcyB0aGUgSW50ZXJu ZXQgb3IgYW4gZW50ZXJwcmlzZSBpbnRlcm5hbA0KPiAgICAgICBuZXR3b3JrLiAgSG93ZXZlciwg SVB2NiBwcmVzZW50cyBzb21lIG5ldyBzZWN1cml0eSBjaGFsbGVuZ2VzLiAgUkZDDQo+ICAgICAg IDQ5NDIgZGVzY3JpYmVzIHRoZSBzZWN1cml0eSBpc3N1ZXMgaW4gdGhlIHByb3RvY29sIGJ1dCBu ZXR3b3JrDQo+ICAgICAgIG1hbmFnZXJzIGFsc28gbmVlZCBhIG1vcmUgcHJhY3RpY2FsLCBvcGVy YXRpb25zLW1pbmRlZCBkb2N1bWVudCB0bw0KPiAgICAgICBlbnVtZXJhdGUgYWR2YW50YWdlcyBh bmQvb3IgZGlzYWR2YW50YWdlcyBvZiBjZXJ0YWluIGNob2ljZXMuDQo+IA0KPiAgICAgICBUaGlz IGRvY3VtZW50IGFuYWx5emVzIHRoZSBvcGVyYXRpb25hbCBzZWN1cml0eSBpc3N1ZXMgaW4gc2V2 ZXJhbA0KPiAgICAgICBwbGFjZXMgb2YgYSBuZXR3b3JrIChlbnRlcnByaXNlcywgc2VydmljZSBw cm92aWRlcnMgYW5kIHJlc2lkZW50aWFsDQo+ICAgICAgIHVzZXJzKSBhbmQgcHJvcG9zZXMgdGVj aG5pY2FsIGFuZCBwcm9jZWR1cmFsIG1pdGlnYXRpb25zIHRlY2huaXF1ZXMuDQo+ICAgICAgIFNv bWUgdmVyeSBzcGVjaWZpYyBwbGFjZXMgb2YgYSBuZXR3b3JrIHN1Y2ggYXMgdGhlIEludGVybmV0 IG9mIFRoaW5ncw0KPiAgICAgICBhcmUgbm90IGRpc2N1c3NlZCBpbiB0aGlzIGRvY3VtZW50Lg0K PiANCj4gDQo+ICAgIFRoZSBJRVRGIGRhdGF0cmFja2VyIHN0YXR1cyBwYWdlIGZvciB0aGlzIGRy YWZ0IGlzOg0KPiAgICBodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1vcHNlYy12Ni9fXzshOFdvQTZSakM4MWMhUjJ2 SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDVmd0 bW5HZCQgDQo+IA0KPiAgICBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFi bGUgYXQ6DQo+ICAgIGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1vcHNlYy12Ni0yMF9fOyE4V29BNlJqQzgxYyFSMnZILV92 M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNRZEFxLW5H JCANCj4gICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1vcHNlYy12Ni0yMF9fOyE4V29BNlJqQzgxYyFS MnZILV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNU YUZXdjNoJCANCj4gDQo+ICAgIEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2 YWlsYWJsZSBhdDoNCj4gICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vd3d3 LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpD ODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdN TXVWQ2ZDMFFyWWckIA0KPiANCj4gDQo+ICAgIFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2Ug YSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCj4gICAgdW50 aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5p ZXRmLm9yZy4NCj4gDQo+ICAgIEludGVybmV0LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkg YW5vbnltb3VzIEZUUCBhdDoNCj4gICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2Z0cDov L2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVn aXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1hrdVVlYmQkIA0K PiANCj4gICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cj4gICAgT1BTRUMgbWFpbGluZyBsaXN0DQo+ICAgIE9QU0VDQGlldGYub3JnDQo+ICAgIGh0dHBz Oi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL29wc2VjX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRy SUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1ZqQS03dDIkIA0KPiANCj4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gT1BTRUMgbWFpbGluZyBsaXN0DQo+ IE9QU0VDQGlldGYub3JnDQo+IGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29wc2VjX187IThXb0E2UmpDODFjIVZucUlqYjBB ZjVtRmJleW5SNlkzbjNKU0pMT2lob3NlTklqNmVQVG50cHJnYTAyTWVZUkVuUEliQ3pkdVdBZUQk IA0K From nobody Mon Oct 14 23:12:38 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55E5812004E for ; Mon, 14 Oct 2019 23:12:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=fHwDLFAm; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=QtXLgiHK Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6o8aX4Cw-_QB for ; Mon, 14 Oct 2019 23:12:34 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CE9512002E for ; Mon, 14 Oct 2019 23:12:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8002; q=dns/txt; s=iport; t=1571119954; x=1572329554; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=78c7RkoMy7t2D+uu0vPEtvnccRhLkbebCgXg/3xP1N0=; b=fHwDLFAmlaKweyYuL+PSL7HTeVtHTRns+0q43AzcSEG0DuMbuoTy0kvT udSXWQKSaSJLjKUOvElSv+C50stoI4XOJAqXP7Oq+Q1EdS3NXk8Hqiwmt 2whtWzb/6BOs2rf3hUBayO7JwJ5pzPVjpuGdyl0hnKwl8yqBMQqjmlK8L 4=; IronPort-PHdr: =?us-ascii?q?9a23=3AJNGnPBR0+9rxEveXwm//dsFnlNpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESXBdfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5g640NmhA4RsuMCEn1NvnvOiEkDcJJV1JN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AGAAC2YqVd/51dJa1mGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWcEAQEBAQELAYFKUAVsVyAECyqEJYN?= =?us-ascii?q?HA4RYhXKCXIlqjhSBLhSBEANUCQEBAQwBARgGDwIBAYRAAheCSyQ0CQ4CAwk?= =?us-ascii?q?BAQQBAQECAQUEbYUtDIVLAQEBAQIBAQEQEREMAQEsCwEEBwQCAQYCDgMEAQE?= =?us-ascii?q?BAgIRFQICAh8GCxUICAIEAQ0FIoMAAYJGAw4gAQIMkmuQYgKBOIhhdYEygn0?= =?us-ascii?q?BAQWBSEFAgjwNC4IXCYEMKAGFEoZ7GIFAP4ERJx+CTD6CGkcBAQIBARaBAkU?= =?us-ascii?q?XKIJPMoIsj3CdF0EKgiKHCIkzVoQIG4I6L0OGXIQshz+DTY4uiCOCD48HAgQ?= =?us-ascii?q?CBAUCDgEBBYFSOYFYcBUaISoBgg0BATIJRxAUgU+Dc4UUhT90AYEoj0cBAQ?= X-IronPort-AV: E=Sophos;i="5.67,298,1566864000"; d="scan'208";a="650012961" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 Oct 2019 06:12:32 +0000 Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id x9F6CWRB007335 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 15 Oct 2019 06:12:32 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 15 Oct 2019 01:12:31 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 15 Oct 2019 01:12:31 -0500 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 15 Oct 2019 01:12:31 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ESxBGEOVS9ysjInKaYQT033LGuJ9bjak/ruxC1kTDzWOmIaPtvR1BpoxVaP2rHI1N6MTDYYzEAG+AkbjbYp2mrdD6Klyy5PpXzHBpbx/LrKwfvRT4IdfHgqWvZTxK3rJwylu/Ymb66nhVY4Idj50J7Aqpze8tsnDw1yo29J+DpZy16zt7TmPyRC7QM9Cl+kv/GACQ0NCLaPMcEJskN9oGDkYCm+QCDs7pG86fCDQZV6Q6x/ez8/vTybHU+Cv38SJ45El1hMCn/9lPHJSl64mLjKA2VxMZMrB2G5X7R6baM7bDaXNafNEDtxkcPc1JcfxDIhobXnayuP5lePRLGSBUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=78c7RkoMy7t2D+uu0vPEtvnccRhLkbebCgXg/3xP1N0=; b=FXP6LiPsEFGs4ztdblS2QxxRjrsxxW6QFyeHyj3Gu7RaPr78GWjdKeI7ZIktLr2fj0IUyKwF7grmNXWwBpLJAd3IXiARYxVhgHpsd509UTMwphF5qT/e4X5xYiP5PL8AJnSXKUlY3x/qAfLmZAQUB4aZ62v2tVHv35tlX6SHOWnVum7hEZYaTwUYM6FRmv8KXdTtM6G2BUI2EdXbjfBHIq4ybdZS1YcoySbxc2w0QKOq5bdN/3Mkrm5ohci4dKWXijS8xGrrT7f6XjMN0RdgmJXvvvyrEYhXf2nqVhINabLPQRWqGziq0koySrz9vsPdj61jEoQ7i28wVKpvWQUZwQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=78c7RkoMy7t2D+uu0vPEtvnccRhLkbebCgXg/3xP1N0=; b=QtXLgiHK70DrLO4BUxWWuPrSm4SgAb7NKA53bd3Mntw5kb5K/JSnG14p4xBwyT9iJfBGZPOtu/dM2SiKUevW7PoQ4JVE3qElPPtAA0zehSC4KGi5aoI7VTicaEho5gIwKVqepwEFWnt2wYlMdfGsgH8vkRKYIyzkerGalcQ+osA= Received: from MN2PR11MB4144.namprd11.prod.outlook.com (20.179.150.210) by MN2PR11MB3678.namprd11.prod.outlook.com (20.178.254.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.18; Tue, 15 Oct 2019 06:12:30 +0000 Received: from MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::e4f8:d335:c018:c62a]) by MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::e4f8:d335:c018:c62a%7]) with mapi id 15.20.2347.021; Tue, 15 Oct 2019 06:12:30 +0000 From: "Eric Vyncke (evyncke)" To: Gyan Mishra , Ron Bonica CC: "opsec@ietf.org" Thread-Topic: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt Thread-Index: AQHVgM9rjNu0gahqL0CwhI/yzqaHUKdWwKcAgAQID4CAAAsegIAAix+A Date: Tue, 15 Oct 2019 06:12:29 +0000 Message-ID: References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> In-Reply-To: Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1d.0.190908 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:155a:bee:c9e2:bff1] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c961dac1-ac06-4ae3-48d3-08d75136a90b x-ms-traffictypediagnostic: MN2PR11MB3678: x-ms-exchange-purlcount: 9 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 01917B1794 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(366004)(136003)(346002)(376002)(396003)(199004)(189003)(13464003)(71200400001)(71190400001)(66556008)(66446008)(46003)(476003)(2906002)(6486002)(99286004)(53546011)(446003)(966005)(76176011)(66574012)(6306002)(6436002)(6506007)(6512007)(4326008)(76116006)(91956017)(66476007)(486006)(66946007)(64756008)(14454004)(6116002)(2616005)(11346002)(478600001)(256004)(4001150100001)(33656002)(305945005)(14444005)(58126008)(36756003)(316002)(110136005)(229853002)(5660300002)(186003)(81166006)(81156014)(8676002)(8936002)(7736002)(6246003)(86362001)(25786009)(102836004); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3678; H:MN2PR11MB4144.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: HiACVD216Qz53WAm1EHObP/3Q2GrGTxPPWuaZm8yZDFT0o2cfwgJ/3cJ14wHtIEx1JOC447o9XjTu+2TkiS62bHnrChDD5aZ4fgDROJIZwTCVwI1WKgOBGzWMxdRMELdpcfWdRuA4ujFINZvSqh/Mqca/igTw8qMv/hyO5QY+4Q5kvO+lDNK4oY8T74uLhWCK0pmyf9mF0VzWaDI/dUceq4b6GfzECGfkE2dwHhNrfJV7s/iqxsSZzQCF80ZKRQUCDdO24GmaRdKXMMGe4FaQFUJJ6G2N2ZYSYekwylN5j0h32NLuO0Ssm8PQ23ocYvZnvw0AjhxM2/ALG9iMeWiT+IgExi6bM183uUUDq+6ekQA3G4nyiA8EIcEnjwMp2NJYK2+Jyk5n2w/nBXY6GSAc8jMF4uB+Uhfn+QaSOgzUtgzlmTC2/Iw5+3qa2P4j9fwGfomXFwaEqoyEMiugXQ+LQ== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: c961dac1-ac06-4ae3-48d3-08d75136a90b X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2019 06:12:29.9598 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: l4r5BlF0Ogg30j1/RPMPRrqpy2n+sLMPs7df2B495RICFkXhzqK/YNcSMG6qcDmBCBNPivIaGqOO33/qDcjndQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3678 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.26, xch-aln-016.cisco.com X-Outbound-Node: rcdn-core-6.cisco.com Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 06:12:37 -0000 R3lhbiwNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgYmVpbmcgJ3ZpY3RpbXRlZXJlZCcgYXMg dGhlIGRvY3VtZW50IHNoZXBoZXJkIFsxXSBfXw0KDQpUaGFuayB5b3UgSmVuIGFuZCBSb24gZm9y IHlvdXIgc3VwcG9ydA0KDQpSZWdhcmRzDQoNCi3DqXJpYyBhbmQgdGhlIGF1dGhvcnMgLWtrIC1t ZXJpa2UgLWVubm8NCg0KWzFdIHNlZSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9k cmFmdC1pZXRmLW9wc2VjLXY2L2VkaXQvc2hlcGhlcmR3cml0ZXVwLyAoeW91IG5lZWQgdG8gY3Jl YXRlIGEgZnJlZSBhY2NvdW50IG9uIGRhdGF0cmFja2VyIGlmIG5vdCB5ZXQgZG9uZSksIHRoZSBt YWlsaW5nIGxpc3QgYXJjaGl2ZSBzaG91bGQgYWxzbyBiZSBhIHNvdXJjZSBvZiBpbmZvcm1hdGlv biBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvYnJvd3NlL29wc2VjLz9xPWRyYWZ0 LWlldGYtb3BzZWMtdjYNCg0KDQrvu79PbiAxNS8xMC8yMDE5LCAwMTo1NCwgIkd5YW4gTWlzaHJh IiA8aGF5YWJ1c2Fnc21AZ21haWwuY29tPiB3cm90ZToNCg0KICAgIFJvbg0KICAgIA0KICAgIEkg cmVhZCB0aGUgZG9jdW1lbnQgdGhvcm91Z2hseSBpbiBpdHMgZW50aXJldHkgYW5kIGRvIGhhdmUg dmFsdWFibGUgcmVhbCB3b3JsZCBleHBlcmllbmNlIGluIHRoaXMgc3BhY2Ugc28gSSBhbSB2b2x1 bnRlZXJpbmcuDQogICAgDQogICAgTm90IHN1cmUgd2hhdCBJIGFtIGdldHRpbmcgbXlzZWxmIGlu dG8u8J+YgA0KICAgIA0KICAgIEd5YW4NCiAgICANCiAgICBTZW50IGZyb20gbXkgaVBob25lDQog ICAgDQogICAgPiBPbiBPY3QgMTQsIDIwMTksIGF0IDc6MTQgUE0sIFJvbiBCb25pY2EgPHJib25p Y2E9NDBqdW5pcGVyLm5ldEBkbWFyYy5pZXRmLm9yZz4gd3JvdGU6DQogICAgPiANCiAgICA+IEpl biwNCiAgICA+IA0KICAgID4gSSBhbSByZWFkeSB0byByZXF1ZXN0IHB1YmxpY2F0aW9uLiBCdXQg YmVmb3JlIHdlIGRvIHRoYXQsIHdlIG5lZWQgYSBkb2N1bWVudCBzaGVwaGVyZC4NCiAgICA+IA0K ICAgID4gRXJpYywNCiAgICA+IA0KICAgID4gV2FzIHRoZXJlIGFueW9uZSB3aG8gd2FzIGNsb3Nl IHRvIHRoZSBkcmFmdCwgYnV0IG5vdCBhIGNvLWF1dGhvci4gV2UgY2FuIHZpY3RpbXRlZXIgdGhh dCBwZXJzb24uDQogICAgPiANCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgUm9uDQogICAgPiANCiAgICA+IA0KICAgID4gDQogICAgPiBK dW5pcGVyIEJ1c2luZXNzIFVzZSBPbmx5DQogICAgPiANCiAgICA+IC0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQogICAgPiBGcm9tOiBFcmljIFZ5bmNrZSAoZXZ5bmNrZSkgPGV2eW5ja2VAY2lz Y28uY29tPiANCiAgICA+IFNlbnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDEyLCAyMDE5IDM6NDEgQU0N CiAgICA+IFRvOiBvcHNlY0BpZXRmLm9yZw0KICAgID4gQ2M6IEplbiBMaW5rb3ZhIDxmdXJyeTEz QGdtYWlsLmNvbT47IFJvbiBCb25pY2EgPHJib25pY2FAanVuaXBlci5uZXQ+DQogICAgPiBTdWJq ZWN0OiBSZTogW09QU0VDXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLW9wc2VjLXY2LTIwLnR4dA0K ICAgID4gDQogICAgPiBBcyB5b3Ugd2lsbCBub3RpY2UgaW4gaHR0cHM6Ly91cmxkZWZlbnNlLmNv bS92My9fX2h0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9wc2Vj LXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3 b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ2ZDMFFyWWckICB0aGlzIGxhdGVzdCByZXZpc2lvbiBhZGRy ZXNzZXMgYSBzdWdnZXN0aW9uIGJ5IEd5YW4gTWlzaHJhIGlzc3VlZCBkdXJpbmcgdGhlIFdvcmtp bmcgR3JvdXAgTGFzdCBDYWxsLiBPdGhlciBjaGFuZ2VzIGFyZSBtYWlubHkgcmVwbGFjaW5nIHRo ZSBub3JtYXRpdmUgIk1VU1QiIGFuZCAiU0hPVUxEIiBhcyBpdCBpcyBhbiBpbmZvcm1hdGlvbmFs IGRvY3VtZW50IChzbyBpdCBpcyBub3cgIm11c3QiIGFuZCAic2hvdWxkIikgKyByZW1vdmluZyBh biB1bnVzZWQgaW5mb3JtYXRpb25hbCByZWZlcmVuY2UuDQogICAgPiANCiAgICA+IEplbiBhbmQg Um9uLCBhcyB0aGUgYXV0aG9ycyBoYXZlIGFkZHJlc3NlZCBhbGwgY29tbWVudHMgcmVjZWl2ZWQg ZHVyaW5nIHRoZSBXR0xDIChhY3R1YWxseSBieSBvbmx5IG9uZSByZXZpZXdlcikgYW5kIHRoZSBl eHRlbnNpdmUgcmV2aWV3IGJ5IEplbiwgbWF5IEkga2luZGx5IHJlcXVlc3QgcHVibGljYXRpb24g b2YgdGhpcyBkb2N1bWVudD8NCiAgICA+IA0KICAgID4gVGhhbmsgIHlvdSBhbGwNCiAgICA+IA0K ICAgID4gLcOpcmljIC1tZXJpa2UgLSBrayAtZW5ubw0KICAgID4gDQogICAgPiANCiAgICA+IE9u IDEyLzEwLzIwMTksIDA5OjM0LCAiT1BTRUMgb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0Bp ZXRmLm9yZyIgPG9wc2VjLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGludGVybmV0LWRy YWZ0c0BpZXRmLm9yZz4gd3JvdGU6DQogICAgPiANCiAgICA+IA0KICAgID4gICAgQSBOZXcgSW50 ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRz IGRpcmVjdG9yaWVzLg0KICAgID4gICAgVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUg T3BlcmF0aW9uYWwgU2VjdXJpdHkgQ2FwYWJpbGl0aWVzIGZvciBJUCBOZXR3b3JrIEluZnJhc3Ry dWN0dXJlIFdHIG9mIHRoZSBJRVRGLg0KICAgID4gDQogICAgPiAgICAgICAgICAgIFRpdGxlICAg ICAgICAgICA6IE9wZXJhdGlvbmFsIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIGZvciBJUHY2IE5l dHdvcmtzDQogICAgPiAgICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IEVyaWMgVnluY2tlDQog ICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEtpcmFuIEsuIENoaXR0aW1hbmVuaQ0K ICAgID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNZXJpa2UgS2Flbw0KICAgID4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBFbm5vIFJleQ0KICAgID4gICAgICAgIEZpbGVuYW1l ICAgICAgICA6IGRyYWZ0LWlldGYtb3BzZWMtdjYtMjAudHh0DQogICAgPiAgICAgICAgUGFnZXMg ICAgICAgICAgIDogNTINCiAgICA+ICAgICAgICBEYXRlICAgICAgICAgICAgOiAyMDE5LTEwLTEy DQogICAgPiANCiAgICA+ICAgIEFic3RyYWN0Og0KICAgID4gICAgICAgS25vd2xlZGdlIGFuZCBl eHBlcmllbmNlIG9uIGhvdyB0byBvcGVyYXRlIElQdjQgc2VjdXJlbHkgaXMNCiAgICA+ICAgICAg IGF2YWlsYWJsZTogd2hldGhlciBpdCBpcyB0aGUgSW50ZXJuZXQgb3IgYW4gZW50ZXJwcmlzZSBp bnRlcm5hbA0KICAgID4gICAgICAgbmV0d29yay4gIEhvd2V2ZXIsIElQdjYgcHJlc2VudHMgc29t ZSBuZXcgc2VjdXJpdHkgY2hhbGxlbmdlcy4gIFJGQw0KICAgID4gICAgICAgNDk0MiBkZXNjcmli ZXMgdGhlIHNlY3VyaXR5IGlzc3VlcyBpbiB0aGUgcHJvdG9jb2wgYnV0IG5ldHdvcmsNCiAgICA+ ICAgICAgIG1hbmFnZXJzIGFsc28gbmVlZCBhIG1vcmUgcHJhY3RpY2FsLCBvcGVyYXRpb25zLW1p bmRlZCBkb2N1bWVudCB0bw0KICAgID4gICAgICAgZW51bWVyYXRlIGFkdmFudGFnZXMgYW5kL29y IGRpc2FkdmFudGFnZXMgb2YgY2VydGFpbiBjaG9pY2VzLg0KICAgID4gDQogICAgPiAgICAgICBU aGlzIGRvY3VtZW50IGFuYWx5emVzIHRoZSBvcGVyYXRpb25hbCBzZWN1cml0eSBpc3N1ZXMgaW4g c2V2ZXJhbA0KICAgID4gICAgICAgcGxhY2VzIG9mIGEgbmV0d29yayAoZW50ZXJwcmlzZXMsIHNl cnZpY2UgcHJvdmlkZXJzIGFuZCByZXNpZGVudGlhbA0KICAgID4gICAgICAgdXNlcnMpIGFuZCBw cm9wb3NlcyB0ZWNobmljYWwgYW5kIHByb2NlZHVyYWwgbWl0aWdhdGlvbnMgdGVjaG5pcXVlcy4N CiAgICA+ICAgICAgIFNvbWUgdmVyeSBzcGVjaWZpYyBwbGFjZXMgb2YgYSBuZXR3b3JrIHN1Y2gg YXMgdGhlIEludGVybmV0IG9mIFRoaW5ncw0KICAgID4gICAgICAgYXJlIG5vdCBkaXNjdXNzZWQg aW4gdGhpcyBkb2N1bWVudC4NCiAgICA+IA0KICAgID4gDQogICAgPiAgICBUaGUgSUVURiBkYXRh dHJhY2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCiAgICA+ICAgIGh0dHBzOi8v dXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFm dC1pZXRmLW9wc2VjLXY2L19fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hjY0VDODl6 R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNWZ3RtbkdkJCANCiAgICA+IA0KICAgID4g ICAgVGhlcmUgYXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxhYmxlIGF0Og0KICAgID4g ICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRj WGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1FkQXEtbkckIA0KICAgID4g ICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1vcHNlYy12Ni0yMF9fOyE4V29BNlJqQzgxYyFSMnZILV92 M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNUYUZXdjNo JCANCiAgICA+IA0KICAgID4gICAgQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMg YXZhaWxhYmxlIGF0Og0KICAgID4gICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBz Oi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187IThX b0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFa OWpYWmdNTXVWQ2ZDMFFyWWckIA0KICAgID4gDQogICAgPiANCiAgICA+ICAgIFBsZWFzZSBub3Rl IHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1 Ym1pc3Npb24NCiAgICA+ICAgIHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFy ZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQogICAgPiANCiAgICA+ICAgIEludGVybmV0 LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCiAgICA+ICAg IGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19mdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQt ZHJhZnRzL19fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklC N29NeGdWXzVUbDExWjlqWFpnTU11VkNYa3VVZWJkJCANCiAgICA+IA0KICAgID4gICAgX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+ICAgIE9QU0VD IG1haWxpbmcgbGlzdA0KICAgID4gICAgT1BTRUNAaWV0Zi5vcmcNCiAgICA+ICAgIGh0dHBzOi8v dXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L29wc2VjX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3 b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1ZqQS03dDIkIA0KICAgID4gDQogICAgPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4gT1BTRUMgbWFpbGlu ZyBsaXN0DQogICAgPiBPUFNFQ0BpZXRmLm9yZw0KICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9vcHNlYw0KICAgIA0KDQo= From nobody Tue Oct 15 07:51:07 2019 Return-Path: X-Original-To: opsec@ietf.org Delivered-To: opsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A4BB112010F; Tue, 15 Oct 2019 07:51:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Ron Bonica via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 6.105.0 Auto-Submitted: auto-generated Precedence: bulk Cc: iesg-secretary@ietf.org, opsec@ietf.org, opsec-chairs@ietf.org, hayabusagsm@gmail.com, Gyan Mishra Message-ID: <157115106466.18188.6967430577775222667.idtracker@ietfa.amsl.com> Date: Tue, 15 Oct 2019 07:51:04 -0700 Archived-At: Subject: [OPSEC] Publication has been requested for draft-ietf-opsec-v6-20 X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 14:51:06 -0000 Ron Bonica has requested publication of draft-ietf-opsec-v6-20 as Informational on behalf of the OPSEC working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/ From nobody Thu Oct 17 00:49:27 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB0FD12085D for ; Thu, 17 Oct 2019 00:49:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UfYWxbwzKDSV for ; Thu, 17 Oct 2019 00:49:14 -0700 (PDT) Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CB01120844 for ; Thu, 17 Oct 2019 00:49:14 -0700 (PDT) Received: by mail-qk1-x729.google.com with SMTP id u22so994912qkk.11 for ; Thu, 17 Oct 2019 00:49:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=rXVobVSzm3loTf4yK7M4FbKs0PRPEnE+ZUaQaUoFtwU=; b=RmzsOviR1vZEUGY3CYKnFXUTB5u1CJ3P2+6464rxTdk8xg9q+Tq/dyi0qfFTNVbh4M FXNRaU1x+t+KEa0f/cbrgMJfgKc52c/Rq2rvo1Xp/RkdNSm7tgcMGkkbKTPmbA+P8HQo oWQVO+0yzSDZ6cUBPw60Zrm0KDEQABHquZImksh0XS+KfyHJPaaluXqXy7WEIv7YFfnJ Nv/PK0edRuaMIivylPZdAN5xpRekkELlPtUCrViCCdg68jOkpl8N1pYYiufo+eepE5uL gt7tUNRHdtNpkZIxZ5JJ9zjQOmNfuluynes5paY6roLHHeB/HEkWOeVWGRSZc9dMQ7U2 KpHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=rXVobVSzm3loTf4yK7M4FbKs0PRPEnE+ZUaQaUoFtwU=; b=iLzD/pjempyYvasrbG94HTvgd1W9iXgNZAsLG//iRat1aigKR9XaLtaKHdPnCD3yMN erhfQ6O3YJm95ZqTzVqCRyzl5hgLHJtRwHza4m/hLAHioMM0gD5+j9OSpHi8xaIh0yyT +nAuW+7c6uxYD/8B9/V+yH+5Ll8RfQkdvvlc6j5c9ugYDNcI6zvGXEPPjAY+WuWCzJqX O+D7MCvmdndLz+NL8JMH5RgqApe5p0ePg97y3gRKTVyMnVXD98MSFQqlUcGmHHxp6M3R V7viw/zd86Lsuexcyit+LCaBCHAwnqGzWsI5wbYES29AmJYbuc/seDd3RDNnksLHFN6b dzmA== X-Gm-Message-State: APjAAAUSZhgF2lwVNPDO/vVtQhN/unY5q0zXFtXh6RejByxBAUpyBo04 sclWelph3z/lO/JCOyyoGSu3CqxLXMT9NffEOX49XsMk0tQrxA== X-Google-Smtp-Source: APXvYqwyE4Q+tjrGH5Do6FYfClgzNeQXlnZe3olzpe/9o+7k6OIuvNzX307zxj9Rme0ThlsWxgB9SVEIc8OHuKRr/T4= X-Received: by 2002:ae9:d801:: with SMTP id u1mr2003902qkf.245.1571298552576; Thu, 17 Oct 2019 00:49:12 -0700 (PDT) MIME-Version: 1.0 From: Warren Kumari Date: Thu, 17 Oct 2019 09:48:35 +0200 Message-ID: To: opsec wg mailing list Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [OPSEC] Returning draft-ietf-opsec-ipv6-eh-filtering to the WG. X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 07:49:26 -0000 Dear OpSec, I'm returning draft-ietf-opsec-ipv6-eh-filtering to the WG - this is not pejorative, but it's been sufficiently long that I'd need another WGLC and IETF LC to be able to (crediably) say that there is consensus for progressing it. This has been discussed with the OpSec chairs and author - I encourage the WG and authors to work on it, and resubmit it. W -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf From nobody Thu Oct 17 08:18:17 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29DDE120888 for ; Thu, 17 Oct 2019 08:18:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MzXQJQwDhDL5 for ; Thu, 17 Oct 2019 08:18:11 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 687AB12006B for ; Thu, 17 Oct 2019 08:18:11 -0700 (PDT) Received: from pps.filterd (m0108162.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x9HFGqIM000850 for ; Thu, 17 Oct 2019 08:18:09 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : content-type : mime-version; s=PPS1017; bh=QL0cgPSaObMynt6tzDAKpndizDHWnnGzVLpI9DSBpNo=; b=EEO2uS2+rbIh1o49OD9ngARar+1yrvbmRaLDjCWePO/KL0G9wpRDuhynRpwUOeYmG33f K44XgDmCee7vGw7VXtGP3pb15O56jEfuGVcGVumWwbQhzwBniM4RNqQqLhPUDPRHc5/Z pIzGOX6wnGv4YrV6NYXpRFyGn6vXSQ5M+7TOIrhTU30YhflKEnHUnXPw+WJMYMz6IYxe INlfBYP3yBobFyyonFvlDzAhlAcIayQUjev1naRTz+WlXstJl4zNX8fESio6wKz6f50Z O6UPSlnLHjWL0SMp2+ZWcTpfQHkwjqTPL6a1oWWCx71sQNd9R2/XhomhDYcF6G+UESn6 DA== Received: from nam04-sn1-obe.outbound.protection.outlook.com (mail-sn1nam04lp2059.outbound.protection.outlook.com [104.47.44.59]) by mx0b-00273201.pphosted.com with ESMTP id 2vphus936g-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 17 Oct 2019 08:18:09 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XRt3eNMwkGNGHsOwmW3ZPoigwDKn6rsC/V98fZNxyPp1DgRG2he9c/b/MD3Jwcn/KCqJoHTlWOlRhmNlfANMXnio3+3lSw7bHJbTHYYX6p2NnEk9Vct/NSby64FWF7UEdHF3mvJ+ev42+ESEI4gu7WzVixmgCDxfwjzi9Yi0k7w5MiQKz43duc0kX5JODiC1byUmpoc0rbPc/30tQcWGHHd756kfJ1FE3xCAfjWqWZOmym2dMUwFmmuDbnjN9e8SWjl8CLs3NfUnuS2qFcfW1htOHqUkVvWa0XlwXdKayNSw0S8qFkoaHBRJkCovPi+vA3lwMHg91bqSjtaYexzGEw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QL0cgPSaObMynt6tzDAKpndizDHWnnGzVLpI9DSBpNo=; b=cqRDkFOpY9AKmzYJ5X8GOzGzwFTngWEd9EPISwmAk5WE5EbSnSwJRWTuKVzwj2f1TbEAMJ7f34Smr1dkWfq6hLDrTdr+DN/dClcEcQOj+RYrFzFPjOPcRhf1N/B28sp8bCEI0qB9EaMFEjcUqH5bmMLPHXeooTIeDVOl10kh+Ngo1un5YomOfcFRj8CABIqX2uTafz8vGY/xuIl6BOf7VANx52MGDqusZIwWvCCUTkiKCtUGj010xTceeY/jbYV+wXuuHpHV4SDX9NTWUF4NcSp9EHu/+VrjPbDqJVwPv+C1ckKhdVUjGduLn2uqRvG9qcwls44MF0e5T/v/8fs5hA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB4465.namprd05.prod.outlook.com (52.133.221.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2367.14; Thu, 17 Oct 2019 15:18:05 +0000 Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d%6]) with mapi id 15.20.2367.016; Thu, 17 Oct 2019 15:18:05 +0000 From: Ron Bonica To: "opsec@ietf.org" Thread-Topic: WGLC: draft-ietf-opsec-ipv6-eh-filtering Thread-Index: AdWE/fXSsGeDX72ZRD23IRNwbK788g== Content-Class: Date: Thu, 17 Oct 2019 15:18:05 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-17T15:18:04.4381956Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=45d35479-2a98-4e0b-a123-07cb9efe7227; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [108.28.233.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8c2a4bcc-7bc8-436d-ae8a-08d7531535e3 x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: BN7PR05MB4465: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:1284; x-forefront-prvs: 01930B2BA8 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(366004)(346002)(39860400002)(136003)(189003)(199004)(33656002)(186003)(86362001)(476003)(316002)(2501003)(486006)(6916009)(558084003)(52536014)(66446008)(64756008)(66476007)(66946007)(256004)(76116006)(66556008)(25786009)(6436002)(478600001)(2351001)(14454004)(3846002)(2906002)(6116002)(790700001)(6506007)(8936002)(71190400001)(71200400001)(7736002)(102836004)(5660300002)(8676002)(55016002)(7696005)(1730700003)(5640700003)(99286004)(6306002)(9686003)(66066001)(74316002)(26005)(81156014)(81166006); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB4465; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: SUQHOyjuQyuHPlk1f6R2zJA8lUyPN6pE6Tn+XiT840DtdxZwRNaNjNAVDEdE445/K5NBBrEIThtE4PkIxqoXQyaWLKzAaGONSC+xjoDFsmyUEW8GC3UmGoVBs5oA/NoTlqNZf0P2GPQsbw7Dsp2+qjNTiC9pSAekhUk+P2ma72/HgpsR8fv6Jh0juhdV4Vy7WJRM+YjJIHLggR2svPdX33g0/Q/L9NI3lyRjOpy5yGmoJvyna61oOCxv/e3+yizMMDN7+58Xe4vBRWMD4WSDmAHFiSzxQK7lb6YZw2zDPhTKtBLKPT0fa+LV9ibkVH/Hfg5g3PKVdpKL1G6ZkOLTkXAgaSUEXWE2AYNhC2o8Jsp1gLSNOXLpyWGanhgdkJx9rZgThp47goqD/uO2yYvdX8Loy/CEBpbN3FMwHtR0wgs= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BN7PR05MB5699C49BFBB7CF2A4F73F0FBAE6D0BN7PR05MB5699namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 8c2a4bcc-7bc8-436d-ae8a-08d7531535e3 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2019 15:18:05.7018 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Vg1oM+PaXxkm7YCdNusP5ZaYjRVOF/qHvoovSLQtvpEmMvSdmIwh/jymMMYNFAVn2gk0BfhjpCa4YPZMJSslow== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4465 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-17_05:2019-10-17,2019-10-17 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 adultscore=0 mlxlogscore=415 spamscore=0 mlxscore=0 suspectscore=0 phishscore=0 priorityscore=1501 lowpriorityscore=0 impostorscore=0 bulkscore=0 malwarescore=0 clxscore=1015 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910170138 Archived-At: Subject: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 15:18:14 -0000 --_000_BN7PR05MB5699C49BFBB7CF2A4F73F0FBAE6D0BN7PR05MB5699namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Folks, This begins a WGLC on draft-ietf-opsec-ipv6-eh-filtering. Please post your = comments by 10/31/2019. Ron Juniper Business Use Only --_000_BN7PR05MB5699C49BFBB7CF2A4F73F0FBAE6D0BN7PR05MB5699namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Folks,

 

This begins a WGLC on draft-ietf-opsec-ipv6-eh-filte= ring. Please post your comments by 10/31/2019.

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        Ron

 


Juniper Business= Use Only

--_000_BN7PR05MB5699C49BFBB7CF2A4F73F0FBAE6D0BN7PR05MB5699namp_-- From nobody Fri Oct 18 07:58:21 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EDA8120CC5 for ; Fri, 18 Oct 2019 07:58:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pobox.com; domainkeys=pass (1024-bit key) header.from=heard@pobox.com header.d=pobox.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ru20a0OTltfo for ; Fri, 18 Oct 2019 07:58:17 -0700 (PDT) Received: from pb-smtp20.pobox.com (pb-smtp20.pobox.com [173.228.157.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4229C120CB3 for ; Fri, 18 Oct 2019 07:58:16 -0700 (PDT) Received: from pb-smtp20.pobox.com (unknown [127.0.0.1]) by pb-smtp20.pobox.com (Postfix) with ESMTP id CBB489BCB7 for ; Fri, 18 Oct 2019 10:58:15 -0400 (EDT) (envelope-from heard@pobox.com) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=pobox.com; h=mime-version :from:date:message-id:subject:to:cc:content-type; s=sasl; bh=QAz CpOTpeCi8KEccsPlrhYw+ThE=; b=P51pANSdtibDTQ8MO/9djSzHgDq5dWf/C+J +j/TkybRZL9+3nIrEx/fA4lnA6F6KPv/SOfJSuJMvY7yTTLDOTj/riy8F5rjuxPA MJdisVD1Wr2Yr96eFZ/ztIYB10GAUYfuXuEZ4gnSUYgABxfRLL2VpveTNs8YmJgQ bX7gWkWc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=mime-version :from:date:message-id:subject:to:cc:content-type; q=dns; s=sasl; b= i8FV3whtG6xvPtkU3x7qR9Xj8AcbDmNfUnuzstjHAMXAEr+pR7XzHx03TrdOBJqZ 0FHo0IfGPqoyzx3zWrY642RxEnqrYeTwquP76ONxsb6kFWYx6z4nvpoK83Tc0NNE 1L7c35ACZTKqJhvF/Q4zrZzD0oAEDaT9n3BSpjV+x/U= Received: from pb-smtp20.sea.icgroup.com (unknown [127.0.0.1]) by pb-smtp20.pobox.com (Postfix) with ESMTP id C4F209BCB4 for ; Fri, 18 Oct 2019 10:58:15 -0400 (EDT) (envelope-from heard@pobox.com) Received: from mail-il1-f174.google.com (unknown [209.85.166.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pb-smtp20.pobox.com (Postfix) with ESMTPSA id 722379BCAD for ; Fri, 18 Oct 2019 10:58:13 -0400 (EDT) (envelope-from heard@pobox.com) Received: by mail-il1-f174.google.com with SMTP id v2so5819971ilm.0 for ; Fri, 18 Oct 2019 07:58:13 -0700 (PDT) X-Gm-Message-State: APjAAAV+jOK8JNfk7AsAk90uQYnYXBuQNAduQCIixnoDiBXW0p3wqpNI ytmzdPF5PJcTysoHFlAxbm5mv21+jGoCP9KNNlE= X-Google-Smtp-Source: APXvYqzuPbzn6AkDA3kpSwVDB02qggKIGLjlLDG8LfcB4DGrNFB34j5mgqaRW6MWisBF2Mdq4eYfDsMSLf4RH2QZjEU= X-Received: by 2002:a92:360b:: with SMTP id d11mr10655740ila.143.1571410692200; Fri, 18 Oct 2019 07:58:12 -0700 (PDT) MIME-Version: 1.0 From: "C. M. Heard" Date: Fri, 18 Oct 2019 07:58:00 -0700 X-Gmail-Original-Message-ID: Message-ID: To: Ronald Bonica Cc: OPSEC Content-Type: multipart/alternative; boundary="0000000000001ae0e3059530905d" X-Pobox-Relay-ID: B5510B72-F1B7-11E9-9407-B0405B776F7B-06080547!pb-smtp20.pobox.com Archived-At: Subject: Re: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Oct 2019 14:58:19 -0000 --0000000000001ae0e3059530905d Content-Type: text/plain; charset="UTF-8" The document (version -06, expired 2019-01-03) is unchanged since last year's IETF last call that started in November 2018. That version drew a lot of substantive comments that have not been addressed (see thread starting at https://mailarchive.ietf.org/arch/msg/ietf/KKyXXrvHa5r5mNcqlu_CbkktQmY). Isn't a WGLC without any discussion of these issues (not even to dismiss them) somewhat premature? Would it not be more appropriate to comb through the last call threads, extract the substantive comments, and make a considered decision what to do about each, possibly after submitting a new version without changes to un-expire the document? As a reminder, one of the substantive objections raised was that the document recommends blanket discarding of unknown next header values, violating RFC 7045. Expect this to come up again as both a technical and process issue if it's not fixed (for the latter see Brian Carpenter's comments in https://mailarchive.ietf.org/arch/msg/ietf/c0DyXd_rLtMCrHQ3NmmRRGe7Z-A). Mike Heard On Thu, 17 October 2019 15:18 UTC Ron Bonica wrote: > Folks, > > This begins a WGLC on draft-ietf-opsec-ipv6-eh-filtering. Please post your comments by 10/31/2019. > > Ron > > > > Juniper Business Use Only > > --0000000000001ae0e3059530905d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Mike Heard

On T= hu, 17 October 2019 15:18 UTC Ron Bonica=C2=A0wrote:
Folks,

This begins a WGLC on draft-ietf-opsec-ipv6-eh-filtering. Please post your =
comments by 10/31/2019.

                                                       Ron



Juniper Business Use Only
<= /div>
--0000000000001ae0e3059530905d-- From nobody Fri Oct 18 08:20:25 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04A4E1202DD for ; Fri, 18 Oct 2019 08:20:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q3p8c5U1lVPJ for ; Fri, 18 Oct 2019 08:20:21 -0700 (PDT) Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF40D120103 for ; Fri, 18 Oct 2019 08:20:20 -0700 (PDT) Received: by mail-wm1-x32f.google.com with SMTP id a6so6576247wma.5 for ; Fri, 18 Oct 2019 08:20:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=dvwnXDekKY76pmk3WpcFAi/qWYF7TioFpUASkT/VutI=; b=gEeWnGMoMyny7TwEgS7z75WkCYxSf+DFjBmVoCKvtJuW3wGGaO+Q2OIhU3rkTU2WbJ WjvDpVDphDoSVTcHoe8E8EvHIwe5627Utu+aD6slpZKbcJXW0P9CSiGnCpH/Hjeia8XB ova/v4L4py3Q8m+qlUIHn+7YaRF0e0IG30bUo092LNVoH41VXVR9+Z0L4RmyG6hP1N4p 6uNjAVOhwW+jQlRh3i9TIHAIr34DWuTqKwmbSmPmmnQpOgyzDNtxHTnpJv5cVvxYg6Ju WrrQImuyNRJOBT5xVHyITRJr+W4mCMZ+wPuVFLiif8tpbbfvaMeXIKxsaFLHB0PULAv8 UZnw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=dvwnXDekKY76pmk3WpcFAi/qWYF7TioFpUASkT/VutI=; b=ZWqI+XZSgHzHym0tYGpNkF0bk6i4BpPh367FxPdR0dAlVE8IIyQDWTjL1JA/uFkgu2 iFXHJ0fA+FAOJj2VgMlPRXlLps6YXmL523CM+TgtSR+22f62u1/EKpmqV5wEUSicsz17 QpKaKoFbB52711GFy79bEt3dpsyXZmnPqOoog9MI8iVr1bnLVWf9ZwaKhLBH/micZHUA iQ0vNnH9TLH01hYXqbxHke0CVigbEmCiT01rHkJ+8x+J8NdHwHw+ZyIhLmA4oJQUW144 3inL3/R9L935hRzxopUauwIv8/PfnM8+X9EopicbRndCEPDfp1d7BcBikU8TE8RwLrhw +HPg== X-Gm-Message-State: APjAAAXB52/0RFEI4tJQpBbPbmf/ERBJbO4SH8jGmRh/8+bwcLxxnYT+ SmWsMhuy+yTrvFvu3KL0jYg= X-Google-Smtp-Source: APXvYqwMF7taMLA8rIoebP7RK58ZbK9pBLzXgKdheT32kHF3RQOjumDYlenUpL1f08r2DZ0ZnVmRcQ== X-Received: by 2002:a05:600c:10ce:: with SMTP id l14mr8063321wmd.15.1571412019407; Fri, 18 Oct 2019 08:20:19 -0700 (PDT) Received: from ?IPv6:2601:647:5a00:ef0b:b9bb:708e:1e8c:7603? ([2601:647:5a00:ef0b:b9bb:708e:1e8c:7603]) by smtp.gmail.com with ESMTPSA id a192sm6160978wma.1.2019.10.18.08.20.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 18 Oct 2019 08:20:18 -0700 (PDT) From: Bob Hinden Message-Id: <2731CA86-139F-4004-B9DB-0F43729403E7@gmail.com> Content-Type: multipart/signed; boundary="Apple-Mail=_91DE7E06-2C6B-4665-B950-FE2B5E9E46BC"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 18 Oct 2019 08:20:14 -0700 In-Reply-To: Cc: Bob Hinden , Ron Bonica , OPSEC To: "C. M. Heard" References: X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Oct 2019 15:20:24 -0000 --Apple-Mail=_91DE7E06-2C6B-4665-B950-FE2B5E9E46BC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I agree with Mike. Without a discussion of the issues raised and how to = resolve them, I think it=E2=80=99s premature to start a w.g. last call. I also note that the draft expired January 3, 2019, over eight months = ago. Bob > On Oct 18, 2019, at 7:58 AM, C. M. Heard wrote: >=20 > The document (version -06, expired 2019-01-03) is unchanged since last = year's IETF last call that started in November 2018. That version drew a = lot of substantive comments that have not been addressed (see thread = starting at = https://mailarchive.ietf.org/arch/msg/ietf/KKyXXrvHa5r5mNcqlu_CbkktQmY). = Isn't a WGLC without any discussion of these issues (not even to dismiss = them) somewhat premature? Would it not be more appropriate to comb = through the last call threads, extract the substantive comments, and = make a considered decision what to do about each, possibly after = submitting a new version without changes to un-expire the document? >=20 > As a reminder, one of the substantive objections raised was that the = document recommends blanket discarding of unknown next header values, = violating RFC 7045. Expect this to come up again as both a technical and = process issue if it's not fixed (for the latter see Brian Carpenter's = comments in = https://mailarchive.ietf.org/arch/msg/ietf/c0DyXd_rLtMCrHQ3NmmRRGe7Z-A). >=20 > Mike Heard >=20 > On Thu, 17 October 2019 15:18 UTC Ron Bonica wrote: > Folks, >=20 > This begins a WGLC on draft-ietf-opsec-ipv6-eh-filtering. Please post = your comments by 10/31/2019. >=20 > Ron >=20 >=20 >=20 > Juniper Business Use Only >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec --Apple-Mail=_91DE7E06-2C6B-4665-B950-FE2B5E9E46BC Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEm0rfRsOCoyamPexGrut0EXfnu6gFAl2p2C4ACgkQrut0EXfn u6gypggAiycxbW/EjlgsvhZ7bfTMXbMktHVObvGPxS6mkddIVH2SJgCkIDU4Fm0z V3csoObt27m4Mtoyd/3D6i3PEOYyUhkdfZqd1xjqjE0aS5toPxaScNyPd9/kCcaU I5s/x1e4rm698JUEzQ5BvPGkuMoVNqlQexBpsjHQ9rpJg6xNQR+daEPzW1plUyyC MtR7zbzrTQizDWL+F5BGi2uMO002iSmowvMBS2Yhrtm8lKFDUF+9Xi9wtDrzCFrf WQzJUBWmY5P/s4enGykG7UbRbcXiyXY87OwAhA+pWcvUlvVc1xSiUD562VznmA15 emJOlvi2Pw7QXmmD6nv8q22e7HpwkQ== =Z4hF -----END PGP SIGNATURE----- --Apple-Mail=_91DE7E06-2C6B-4665-B950-FE2B5E9E46BC-- From nobody Fri Oct 18 08:49:33 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CF2512004C for ; Fri, 18 Oct 2019 08:49:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rPmNCQxcCDlW for ; Fri, 18 Oct 2019 08:49:12 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C954B12006B for ; Fri, 18 Oct 2019 08:49:12 -0700 (PDT) Received: from pps.filterd (m0108160.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x9IFkUvd011342; Fri, 18 Oct 2019 08:49:10 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=JH5QG0izqcGuTy1P4WL4HkpcHnPqxPb2iv92w3fnBSs=; b=cMCtoVfmIcaJGgZAyTZNviYwe1m91LUowRrLS4pQcSRWEzeI7FXRGkwZTRl6JVw/RVdJ uSRVWmUz2VEv3rurRuD9Sg0amYZYVPLih40zGmM3qjcWsA+YywMoKt5BcaR0Sa2/uaEk KucUoDn/gvgbdRIXNmJfo89wUavGeiE50EQ/hfgV5V/whsrGt91+ms68D2OphFVDiG/v dCz9RIlGQBJ6L0UmlNpKnlMaZDRYFEr/oT8vKCnUP31oVdmUgDz5uRl4XiOUUn9eaKWg ABobM3pKkp/bV6HWhm0GUsFYojgzjbBEoeYcKoo9Pdmgj5gu7tKrF6XIErv019hVQpbk 5A== Received: from nam05-co1-obe.outbound.protection.outlook.com (mail-co1nam05lp2050.outbound.protection.outlook.com [104.47.48.50]) by mx0b-00273201.pphosted.com with ESMTP id 2vqamh8h3w-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 18 Oct 2019 08:49:10 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jfPnFfhUUTyVPYgOR4tExqmqs6BnWDYNEHYIILxouEWHtjn5HvJJOYp/MDNSGtFBFSoiQv0+Q66FcuZuj/nBqG2plfFyGMvOtsT+T+y6IcM5RPWFXGAzNMTALQ03x9rjhbEWR42u8iRsnG7IMmuZ0qx0cfUwmdL2rjZ3ZRFky28Zuv72DkxtZZBVD5lZ5r4aCyn2SdUUJoK5iVnBAOF9sphZsbITq5vyoQDkxrMBGDHW3FZ4ErTQMayCSednBiwZvY5BHS82zW/B1MtpekQS4o+44f3Yibexrww0uJNyhxGtKWnxGsTwlReV31Hwue64fkmK3j4iQABm52+y4ItfXA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JH5QG0izqcGuTy1P4WL4HkpcHnPqxPb2iv92w3fnBSs=; b=WrjygZNPR+9HMMrJDAkCSCrGi4ffFOvOP4EfdU+mY/m+7N8Jiq61n9+2F0cpMMIHsCOqA0/b8y3mJc9sd74pFF2GEy93Ajp1H2t/Zmoo0yiXOM8BfTXhE5xgAna3NPLOwd2tZQ/p6iCLTFQT+peLaETvePQCdXr3QzjxNqCtB9MwbZdUZXp4h9zzuMfKTua7YyBOnv+Ez1FoeXkimprvw2dyPjJlRLkB2WFk61Qz45e53D7ObV/pRVD87AkpbTSWoRZF8HCw1wGQlyi6zECknujP/HdVmrGr35eUX28Gatx84sF7AqPE45cIF1DF+QoIqhUzIt2YMY71lrZTkthbpw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none Received: from SN6PR05MB5710.namprd05.prod.outlook.com (20.178.7.89) by SN6PR05MB5840.namprd05.prod.outlook.com (20.177.255.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2367.14; Fri, 18 Oct 2019 15:49:08 +0000 Received: from SN6PR05MB5710.namprd05.prod.outlook.com ([fe80::8dbe:b15c:b2ba:5ab4]) by SN6PR05MB5710.namprd05.prod.outlook.com ([fe80::8dbe:b15c:b2ba:5ab4%7]) with mapi id 15.20.2367.016; Fri, 18 Oct 2019 15:49:08 +0000 From: Ron Bonica To: Bob Hinden , "C. M. Heard" CC: OPSEC Thread-Topic: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering Thread-Index: AQHVhcR7BTUYPZznMkKLF87MBaBWyqdgg4sAgAAH+EA= Content-Class: Date: Fri, 18 Oct 2019 15:49:07 +0000 Message-ID: References: <2731CA86-139F-4004-B9DB-0F43729403E7@gmail.com> In-Reply-To: <2731CA86-139F-4004-B9DB-0F43729403E7@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-18T15:49:05.9899644Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c9087c80-5daa-4923-806d-2d34b1a75853; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [66.129.241.11] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 44bdd2fe-8d35-401b-62d9-08d753e2b62a x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: SN6PR05MB5840: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 01949FE337 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(39860400002)(366004)(136003)(346002)(189003)(199004)(13464003)(14454004)(66066001)(8676002)(966005)(86362001)(81166006)(81156014)(7696005)(8936002)(316002)(76176011)(6436002)(486006)(102836004)(6246003)(25786009)(26005)(6306002)(55016002)(9686003)(6116002)(33656002)(3846002)(52536014)(11346002)(446003)(76116006)(66476007)(66556008)(64756008)(66446008)(229853002)(186003)(66946007)(6506007)(53546011)(478600001)(5660300002)(4326008)(476003)(7736002)(110136005)(14444005)(256004)(305945005)(2906002)(99286004)(74316002)(71190400001)(71200400001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR05MB5840; H:SN6PR05MB5710.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: BRiI7kvkPOeIEgrhIJpBkI5hqtQ32gdlOwhE+xLFKne/fEFlnTV7c21cWPvR606ZimdDiYb/eUQ4HieGmlLrLsrZjqyMS1Pj/ietpEKw6tZ8sNzu+OGGiXvNepC0FF60oIagNNpcd3eQluZ3Jtm5JjcJtHH6o+zOXDJlEu+ta8zBcel+vhtMi1SIQyD9mzNXatAA8yPMPosIcOZFWrPhV1BinkV2//nUnSzZLQQudYtgyBiIUy/irNEDjeAXMzCOUETmMz5fTtrwtjwbmcbkNFOColIdbM/JiQqTW7sgEm1YMzw8C+M55naBoXrlU8wbZjD9LHJ7Wf2pPXkN3xvobbQ41LqxlWQYwAEXbiggB6pCOlg8JNcayIhs4TneZ40kOHefWF3CNrLHg4FC0zIeIWpCp0/tucM9ChT2/C6FnBbTkuGZXtJsKJrUUEhgc9uFh2ZSb97Hd/qxABUzz77j8w== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 44bdd2fe-8d35-401b-62d9-08d753e2b62a X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Oct 2019 15:49:07.8620 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IvjWOQmoNUlZopBsatrO65Phb+DufELH4c07T3uceIqIgJmk8XhPLmUbMi2Uc4/7AFBGBWjxBEIEQcNpry/Qpw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB5840 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-18_04:2019-10-18,2019-10-18 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 clxscore=1011 phishscore=0 mlxlogscore=999 impostorscore=0 suspectscore=0 adultscore=0 bulkscore=0 spamscore=0 mlxscore=0 priorityscore=1501 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910180142 Archived-At: Subject: Re: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Oct 2019 15:49:16 -0000 TGV0IHRoZSBkaXNjdXNzaW9uIGJlZ2luICENCg0KICAgICAgICAgICAgICAgICDwn5iJDQogICAg ICAgICAgICAgICAgICAgIFJvbg0KDQoNCg0KSnVuaXBlciBCdXNpbmVzcyBVc2UgT25seQ0KDQot LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogQm9iIEhpbmRlbiA8Ym9iLmhpbmRlbkBn bWFpbC5jb20+IA0KU2VudDogRnJpZGF5LCBPY3RvYmVyIDE4LCAyMDE5IDExOjIwIEFNDQpUbzog Qy4gTS4gSGVhcmQgPGhlYXJkQHBvYm94LmNvbT4NCkNjOiBCb2IgSGluZGVuIDxib2IuaGluZGVu QGdtYWlsLmNvbT47IFJvbiBCb25pY2EgPHJib25pY2FAanVuaXBlci5uZXQ+OyBPUFNFQyA8b3Bz ZWNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW09QU0VDXSBXR0xDOiBkcmFmdC1pZXRmLW9wc2Vj LWlwdjYtZWgtZmlsdGVyaW5nDQoNCkkgYWdyZWUgd2l0aCBNaWtlLiAgV2l0aG91dCBhIGRpc2N1 c3Npb24gb2YgdGhlIGlzc3VlcyByYWlzZWQgYW5kIGhvdyB0byByZXNvbHZlIHRoZW0sIEkgdGhp bmsgaXTigJlzIHByZW1hdHVyZSB0byBzdGFydCBhIHcuZy4gbGFzdCBjYWxsLg0KDQpJIGFsc28g bm90ZSB0aGF0IHRoZSBkcmFmdCBleHBpcmVkIEphbnVhcnkgMywgMjAxOSwgb3ZlciBlaWdodCBt b250aHMgYWdvLg0KDQpCb2INCg0KDQo+IE9uIE9jdCAxOCwgMjAxOSwgYXQgNzo1OCBBTSwgQy4g TS4gSGVhcmQgPGhlYXJkQHBvYm94LmNvbT4gd3JvdGU6DQo+IA0KPiBUaGUgZG9jdW1lbnQgKHZl cnNpb24gLTA2LCBleHBpcmVkIDIwMTktMDEtMDMpIGlzIHVuY2hhbmdlZCBzaW5jZSBsYXN0IHll YXIncyBJRVRGIGxhc3QgY2FsbCB0aGF0IHN0YXJ0ZWQgaW4gTm92ZW1iZXIgMjAxOC4gVGhhdCB2 ZXJzaW9uIGRyZXcgYSBsb3Qgb2Ygc3Vic3RhbnRpdmUgY29tbWVudHMgdGhhdCBoYXZlIG5vdCBi ZWVuIGFkZHJlc3NlZCAoc2VlIHRocmVhZCBzdGFydGluZyBhdCBodHRwczovL21haWxhcmNoaXZl LmlldGYub3JnL2FyY2gvbXNnL2lldGYvS0t5WFhydkhhNXI1bU5jcWx1X0Nia2t0UW1ZKS4gSXNu J3QgYSBXR0xDIHdpdGhvdXQgYW55IGRpc2N1c3Npb24gb2YgdGhlc2UgaXNzdWVzIChub3QgZXZl biB0byBkaXNtaXNzIHRoZW0pIHNvbWV3aGF0IHByZW1hdHVyZT8gV291bGQgaXQgbm90IGJlIG1v cmUgYXBwcm9wcmlhdGUgdG8gY29tYiB0aHJvdWdoIHRoZSBsYXN0IGNhbGwgdGhyZWFkcywgZXh0 cmFjdCB0aGUgc3Vic3RhbnRpdmUgY29tbWVudHMsIGFuZCBtYWtlIGEgY29uc2lkZXJlZCBkZWNp c2lvbiB3aGF0IHRvIGRvIGFib3V0IGVhY2gsIHBvc3NpYmx5IGFmdGVyIHN1Ym1pdHRpbmcgYSBu ZXcgdmVyc2lvbiB3aXRob3V0IGNoYW5nZXMgdG8gdW4tZXhwaXJlIHRoZSBkb2N1bWVudD8NCj4g DQo+IEFzIGEgcmVtaW5kZXIsIG9uZSBvZiB0aGUgc3Vic3RhbnRpdmUgb2JqZWN0aW9ucyByYWlz ZWQgd2FzIHRoYXQgdGhlIGRvY3VtZW50IHJlY29tbWVuZHMgYmxhbmtldCBkaXNjYXJkaW5nIG9m IHVua25vd24gbmV4dCBoZWFkZXIgdmFsdWVzLCB2aW9sYXRpbmcgUkZDIDcwNDUuIEV4cGVjdCB0 aGlzIHRvIGNvbWUgdXAgYWdhaW4gYXMgYm90aCBhIHRlY2huaWNhbCBhbmQgcHJvY2VzcyBpc3N1 ZSBpZiBpdCdzIG5vdCBmaXhlZCAoZm9yIHRoZSBsYXR0ZXIgc2VlIEJyaWFuIENhcnBlbnRlcidz IGNvbW1lbnRzIGluIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvaWV0Zi9j MER5WGRfckx0TUNySFEzTm1tUlJHZTdaLUEpLg0KPiANCj4gTWlrZSBIZWFyZA0KPiANCj4gT24g VGh1LCAxNyBPY3RvYmVyIDIwMTkgMTU6MTggVVRDIFJvbiBCb25pY2Egd3JvdGU6DQo+IEZvbGtz LA0KPiANCj4gVGhpcyBiZWdpbnMgYSBXR0xDIG9uIGRyYWZ0LWlldGYtb3BzZWMtaXB2Ni1laC1m aWx0ZXJpbmcuIFBsZWFzZSBwb3N0IHlvdXIgY29tbWVudHMgYnkgMTAvMzEvMjAxOS4NCj4gDQo+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBS b24NCj4gDQo+IA0KPiANCj4gSnVuaXBlciBCdXNpbmVzcyBVc2UgT25seQ0KPiANCj4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gT1BTRUMgbWFpbGlu ZyBsaXN0DQo+IE9QU0VDQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vb3BzZWMNCg== From nobody Fri Oct 18 10:16:19 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCBBC120881 for ; Fri, 18 Oct 2019 10:16:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xu7j_I14wnod for ; Fri, 18 Oct 2019 10:16:08 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E2551208A3 for ; Fri, 18 Oct 2019 10:15:29 -0700 (PDT) Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x9IHBkKq026278; Fri, 18 Oct 2019 10:15:28 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=rkv778aXUavleJGKlcGpcQKOcJEcA8rxOI9Ywh2AZ/Y=; b=p4BQCWHO+SjPxqPRhtazlYhmLGd3FTM+e2sI9NtSXVLnx/rfMqErpsSK2pqzP9+8x6Ne 85DH0USM0pY+6vykJIUuPaKDFGAju8Nxf7DSgjlP11mZjNZGtmr5i8tYB3p0OK/KBoO6 Mm6AzYmkCCFa+VyPfR9MEy/hBJ39b/hu5/Z3XvIet0A3HFLlOLTg5sUq73qIJQj991S1 Q09iJhWX+61rwxe4EEsTs9bGP8AxwNZQW6hD8V9TSSZCrPr31jI9ywcHu17o/t+EcIBp AAG/Ftz/fmaNoYji3Rm181uUBIK6yCin1YNyRJ9XVr9xf6TAvE0n1lE3ABgtstbCxs/u Ug== Received: from nam03-co1-obe.outbound.protection.outlook.com (mail-co1nam03lp2054.outbound.protection.outlook.com [104.47.40.54]) by mx0a-00273201.pphosted.com with ESMTP id 2vpmydk1yn-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 18 Oct 2019 10:15:28 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WD03G3avSkkNbIDGXhCGc0npDAQ7jgFGHYp8FAxtl/+SRp6B/FkQB+KYAMdy4yUMIOBWwQq01VgmHzRmiznR9YcoHC54eglzDJKc7K+ND8c6kpB7EuWz9DPIiem1R9iZaojPvsGNnNV5aao+hhe/wjw7lfWuM5CRvtwVs+HUdYh3DnKzLyOyrYIYnfTw9eK0IztJ92QHaxymzrnpdjoOFCrfualub64ldsRLNMXgrkZ12VZwygaHNC3ooEkVBRp3LiRi3L8/XuJDXPSqLkuGImLVjTdYis77Tc617gbgXCMlWO7kyN0YbCklGViMFF+9gTxNyXoblWYYS6rk1jv2Nw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rkv778aXUavleJGKlcGpcQKOcJEcA8rxOI9Ywh2AZ/Y=; b=KwSCMW16gOEEvAHztyJ4OVmXZBSTM0un7rV5ggVfnmCOcYORrak9hCqnMOa0JwCCGxsCejgBNvNKwTWX5ddvJzR2ie7KzIK6EZSnwAOg6Bp0DUUj78evo8r3fUUJeKxBWpP2GxOfWQY3DWZpoXfNC/sj16200A0BGNkf0nGz3eIvQrAN98npk+uN6+5NuBuevEsQ/Yika8F4d7tumNhZBK0uDnmdfPPlVipWO2WXCDfYzKON8aJL9kFk5O5HCLAL6FzxTCuLiwFbWo0NkczTAz50SEGGb4x3Pf/15WAjb6wgDPtms0THzVp+RXPMTijgdpNlUSCqspIAFn6fVuaE+A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none Received: from SN6PR05MB5710.namprd05.prod.outlook.com (20.178.7.89) by SN6PR05MB5935.namprd05.prod.outlook.com (20.178.7.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.13; Fri, 18 Oct 2019 17:15:26 +0000 Received: from SN6PR05MB5710.namprd05.prod.outlook.com ([fe80::8dbe:b15c:b2ba:5ab4]) by SN6PR05MB5710.namprd05.prod.outlook.com ([fe80::8dbe:b15c:b2ba:5ab4%7]) with mapi id 15.20.2367.016; Fri, 18 Oct 2019 17:15:26 +0000 From: Ron Bonica To: Bob Hinden , "C. M. Heard" , OPSEC , Fernando Gont Thread-Topic: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering Thread-Index: AQHVhcR7BTUYPZznMkKLF87MBaBWyqdgg4sAgAAe8nA= Content-Class: Date: Fri, 18 Oct 2019 17:15:26 +0000 Message-ID: References: <2731CA86-139F-4004-B9DB-0F43729403E7@gmail.com> In-Reply-To: <2731CA86-139F-4004-B9DB-0F43729403E7@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-18T17:15:25.0146279Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=93879700-a652-4c07-bf22-837fb6147b12; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.2.0.14 dlp-reaction: no-action x-originating-ip: [66.129.241.11] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e316a579-38db-458e-adde-08d753eec4c7 x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: SN6PR05MB5935: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 01949FE337 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(366004)(39860400002)(346002)(376002)(136003)(13464003)(189003)(199004)(6246003)(76176011)(66446008)(64756008)(14444005)(9686003)(476003)(7696005)(86362001)(99286004)(66946007)(6506007)(6116002)(66476007)(26005)(11346002)(66556008)(186003)(446003)(66066001)(76116006)(53546011)(102836004)(486006)(2906002)(3846002)(7736002)(8676002)(305945005)(52536014)(81156014)(5660300002)(6306002)(33656002)(8936002)(74316002)(229853002)(81166006)(966005)(478600001)(110136005)(316002)(25786009)(55016002)(256004)(71190400001)(14454004)(71200400001)(6436002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR05MB5935; H:SN6PR05MB5710.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: ziMhF6ouL1Q0RXozNEo2z8BkaThQHXc4O655Miz2LS/5XFlil0nQAYqlPNaBYOuqTN+ETDjMrdUKq2LKUOIp2hDseqedXAcqHr1OFPvHlKL+0h2OWWFdgsu7AMe9Pw2PCjkovNOuTbkizkOblNd7bjTME3er/ra5lj0UF4H/nIDkEHeHFzARNNyGAXKCS17T73OltTjvzJNMeE4emPqYtVHbFrcinD2ON6ct9uyGgZkFsj4bIpyTuZGmGLWhTsBRBQI/ija4wj7pfisYbFR73BIfTDUbS95II+y2mRNaKFxtDDlhyUgd4fT9x9QYW8zUB5M5Yq8jTsgC+7z3dDNh3YnqadPlB1xu5DdqSWOMJCm/xpufpbiWCVfEs8XYFCJZzuhfM5nkF0XN6WxTGTCJc94pj1JTBm+V0VWlKY6SaCUBlVs8FvbdexlJU3s12lF1vRsIpsZarkbe2Txm2pycDA== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: e316a579-38db-458e-adde-08d753eec4c7 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Oct 2019 17:15:26.3697 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Hj2xTfEqiQS8KfjcenDedxYJ3BDUDQraytbfF0u/k7VQvZ9jX1g53jJv1PFLlYH+cF3NwttbqL54gxGECHXnWA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB5935 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-18_04:2019-10-18,2019-10-18 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 malwarescore=0 phishscore=0 suspectscore=0 adultscore=0 spamscore=0 clxscore=1015 bulkscore=0 priorityscore=1501 mlxlogscore=999 lowpriorityscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910180157 Archived-At: Subject: Re: [OPSEC] WGLC: draft-ietf-opsec-ipv6-eh-filtering X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Oct 2019 17:16:17 -0000 Rm9sa3MsDQoNCkdpdmVuIHRoZXNlIGNvbW1lbnRzLCBsZXQncyBzdXNwZW5kIHRoZSBXR0xDIHVu dGlsIGEgbmV3IHZlcnNpb24gaXMgc3VibWl0dGVkLg0KDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFJvbg0KDQoNCg0KSnVuaXBlciBCdXNpbmVzcyBVc2UgT25seQ0K DQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogQm9iIEhpbmRlbiA8Ym9iLmhpbmRl bkBnbWFpbC5jb20+IA0KU2VudDogRnJpZGF5LCBPY3RvYmVyIDE4LCAyMDE5IDExOjIwIEFNDQpU bzogQy4gTS4gSGVhcmQgPGhlYXJkQHBvYm94LmNvbT4NCkNjOiBCb2IgSGluZGVuIDxib2IuaGlu ZGVuQGdtYWlsLmNvbT47IFJvbiBCb25pY2EgPHJib25pY2FAanVuaXBlci5uZXQ+OyBPUFNFQyA8 b3BzZWNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW09QU0VDXSBXR0xDOiBkcmFmdC1pZXRmLW9w c2VjLWlwdjYtZWgtZmlsdGVyaW5nDQoNCkkgYWdyZWUgd2l0aCBNaWtlLiAgV2l0aG91dCBhIGRp c2N1c3Npb24gb2YgdGhlIGlzc3VlcyByYWlzZWQgYW5kIGhvdyB0byByZXNvbHZlIHRoZW0sIEkg dGhpbmsgaXTigJlzIHByZW1hdHVyZSB0byBzdGFydCBhIHcuZy4gbGFzdCBjYWxsLg0KDQpJIGFs c28gbm90ZSB0aGF0IHRoZSBkcmFmdCBleHBpcmVkIEphbnVhcnkgMywgMjAxOSwgb3ZlciBlaWdo dCBtb250aHMgYWdvLg0KDQpCb2INCg0KDQo+IE9uIE9jdCAxOCwgMjAxOSwgYXQgNzo1OCBBTSwg Qy4gTS4gSGVhcmQgPGhlYXJkQHBvYm94LmNvbT4gd3JvdGU6DQo+IA0KPiBUaGUgZG9jdW1lbnQg KHZlcnNpb24gLTA2LCBleHBpcmVkIDIwMTktMDEtMDMpIGlzIHVuY2hhbmdlZCBzaW5jZSBsYXN0 IHllYXIncyBJRVRGIGxhc3QgY2FsbCB0aGF0IHN0YXJ0ZWQgaW4gTm92ZW1iZXIgMjAxOC4gVGhh dCB2ZXJzaW9uIGRyZXcgYSBsb3Qgb2Ygc3Vic3RhbnRpdmUgY29tbWVudHMgdGhhdCBoYXZlIG5v dCBiZWVuIGFkZHJlc3NlZCAoc2VlIHRocmVhZCBzdGFydGluZyBhdCBodHRwczovL21haWxhcmNo aXZlLmlldGYub3JnL2FyY2gvbXNnL2lldGYvS0t5WFhydkhhNXI1bU5jcWx1X0Nia2t0UW1ZKS4g SXNuJ3QgYSBXR0xDIHdpdGhvdXQgYW55IGRpc2N1c3Npb24gb2YgdGhlc2UgaXNzdWVzIChub3Qg ZXZlbiB0byBkaXNtaXNzIHRoZW0pIHNvbWV3aGF0IHByZW1hdHVyZT8gV291bGQgaXQgbm90IGJl IG1vcmUgYXBwcm9wcmlhdGUgdG8gY29tYiB0aHJvdWdoIHRoZSBsYXN0IGNhbGwgdGhyZWFkcywg ZXh0cmFjdCB0aGUgc3Vic3RhbnRpdmUgY29tbWVudHMsIGFuZCBtYWtlIGEgY29uc2lkZXJlZCBk ZWNpc2lvbiB3aGF0IHRvIGRvIGFib3V0IGVhY2gsIHBvc3NpYmx5IGFmdGVyIHN1Ym1pdHRpbmcg YSBuZXcgdmVyc2lvbiB3aXRob3V0IGNoYW5nZXMgdG8gdW4tZXhwaXJlIHRoZSBkb2N1bWVudD8N Cj4gDQo+IEFzIGEgcmVtaW5kZXIsIG9uZSBvZiB0aGUgc3Vic3RhbnRpdmUgb2JqZWN0aW9ucyBy YWlzZWQgd2FzIHRoYXQgdGhlIGRvY3VtZW50IHJlY29tbWVuZHMgYmxhbmtldCBkaXNjYXJkaW5n IG9mIHVua25vd24gbmV4dCBoZWFkZXIgdmFsdWVzLCB2aW9sYXRpbmcgUkZDIDcwNDUuIEV4cGVj dCB0aGlzIHRvIGNvbWUgdXAgYWdhaW4gYXMgYm90aCBhIHRlY2huaWNhbCBhbmQgcHJvY2VzcyBp c3N1ZSBpZiBpdCdzIG5vdCBmaXhlZCAoZm9yIHRoZSBsYXR0ZXIgc2VlIEJyaWFuIENhcnBlbnRl cidzIGNvbW1lbnRzIGluIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvaWV0 Zi9jMER5WGRfckx0TUNySFEzTm1tUlJHZTdaLUEpLg0KPiANCj4gTWlrZSBIZWFyZA0KPiANCj4g T24gVGh1LCAxNyBPY3RvYmVyIDIwMTkgMTU6MTggVVRDIFJvbiBCb25pY2Egd3JvdGU6DQo+IEZv bGtzLA0KPiANCj4gVGhpcyBiZWdpbnMgYSBXR0xDIG9uIGRyYWZ0LWlldGYtb3BzZWMtaXB2Ni1l aC1maWx0ZXJpbmcuIFBsZWFzZSBwb3N0IHlvdXIgY29tbWVudHMgYnkgMTAvMzEvMjAxOS4NCj4g DQo+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBSb24NCj4gDQo+IA0KPiANCj4gSnVuaXBlciBCdXNpbmVzcyBVc2UgT25seQ0KPiANCj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gT1BTRUMgbWFp bGluZyBsaXN0DQo+IE9QU0VDQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vb3BzZWMNCg== From nobody Thu Oct 24 11:35:55 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01EBF120013 for ; Thu, 24 Oct 2019 11:35:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5-Cl9ePegLXR for ; Thu, 24 Oct 2019 11:35:49 -0700 (PDT) Received: from mail-qt1-x82c.google.com (mail-qt1-x82c.google.com [IPv6:2607:f8b0:4864:20::82c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6685120099 for ; Thu, 24 Oct 2019 11:35:48 -0700 (PDT) Received: by mail-qt1-x82c.google.com with SMTP id w14so39313027qto.9 for ; Thu, 24 Oct 2019 11:35:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=QGEDCodCp62w7SIT0Le+XzALhK3SmO5DM7KMQb5vW3U=; b=rP4HE2aLea6R5tdVITfGqwgt6Rem5EuNp0bu+zgBbcqDa2gEspDLQtnrEUGKQsFFFd ra3KR/M410YV0oa+nYe1QTuViiBRdTWCmXGlYVNjVFRu6MYbRmHMiWHTOShqQ0xV/P+U /RPzrfh5zydcaZubovjeoBSEVc2R0Gzw0MIrhhBpYN7ndpCSs3pAFqyjnzrFPG7DJVs5 jKKeFA5F0BzsHriE0D0V46cTZ5p9R/SU/C0bb+que2aWKsVmSXjoJDm+GuxMUbE8xnHo iKGboDVW8DF0RcR3UuLOiMiSF6xAO6VNvPoHatNgMNRP0xsUpxigqNAeRSndIHmZv/8N Jsxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=QGEDCodCp62w7SIT0Le+XzALhK3SmO5DM7KMQb5vW3U=; b=jHk2lAk0/41mtv+VvozNEzvpFB6f68Ds6jNu3zCPNP/nzW8Zc76tpQI2CZUxfNH1Dp H/6rkRDKig3WnweKwtYYCrYEY2sNqxyYMI0CblnaAUe0QyhARRNbdhVGNBDhSpI/8qtR Mr8NDeCxHAW0RbWrdrFrFiHHkSu32iDOvtGSKI35wrVND67h7g3So6zLfXB9twirv4b1 U+0PG4DorE/VHuAmgY6uXfL8/Yryi4bl/vnKuebbqVHxpDPFpDZZFBUn13X3/I5yHn/S 2PZb4qVXOc4fqQEfhOLSbrMG7nZhllzdJFHjb/w04b+YI0b8eiIeLJ6OYOWtYj2a8LnK 3D8A== X-Gm-Message-State: APjAAAV8A7cp86CE9YmWS+v9Co3FQ/bLZJqCNlDid4i5+n5+pdqtU/If AmA1/36s3tsHff2U89Px8RH/8eWB X-Google-Smtp-Source: APXvYqw90zSfcJq3SbeB2hT3P/UftAJItkyLm4nuGPPLs3I40q/vxL0QdbLlmSsJijX5NMbrYf/Aiw== X-Received: by 2002:a0c:c3c4:: with SMTP id p4mr3365811qvi.178.1571942146719; Thu, 24 Oct 2019 11:35:46 -0700 (PDT) Received: from ?IPv6:2600:1003:b012:b4af:850e:a592:d918:4224? ([2600:1003:b012:b4af:850e:a592:d918:4224]) by smtp.gmail.com with ESMTPSA id t199sm13838340qke.36.2019.10.24.11.35.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 24 Oct 2019 11:35:45 -0700 (PDT) From: Gyan Mishra X-Google-Original-From: Gyan Mishra Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (16G102) In-Reply-To: Date: Thu, 24 Oct 2019 14:35:44 -0400 Cc: Ron Bonica , "opsec@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <2C9BFAF1-63FE-43BD-9016-0A1F14CF79EF@gmail.com> References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> To: "Eric Vyncke (evyncke)" Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 18:35:54 -0000 Hi Eric=20 I am completing the Shepards writeup in essay format. Plan to submit in the n= ext few days. As far as WG consensus and history on the document from its initial I-D stat= e were there any nits other then what is public in the tracker or any WG con= sensus issues or topics discussed that I should be aware of to include in th= e write up. I assume we finally reached WG consensus on all topics with no o= utstanding issues as we are now ready to publish. Are there any IPRs disclosed or outstanding.=20 Regards, Gyan=20 Sent from my iPhone > On Oct 15, 2019, at 2:12 AM, Eric Vyncke (evyncke) wro= te: >=20 > Gyan, >=20 > Thank you very much for being 'victimteered' as the document shepherd [1] _= _ >=20 > Thank you Jen and Ron for your support >=20 > Regards >=20 > -=C3=A9ric and the authors -kk -merike -enno >=20 > [1] see https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/edit/shepherd= writeup/ (you need to create a free account on datatracker if not yet done),= the mailing list archive should also be a source of information https://mai= larchive.ietf.org/arch/browse/opsec/?q=3Ddraft-ietf-opsec-v6 >=20 >=20 > =EF=BB=BFOn 15/10/2019, 01:54, "Gyan Mishra" wrote= : >=20 > Ron >=20 > I read the document thoroughly in its entirety and do have valuable rea= l world experience in this space so I am volunteering. >=20 > Not sure what I am getting myself into.=F0=9F=98=80 >=20 > Gyan >=20 > Sent from my iPhone >=20 >> On Oct 14, 2019, at 7:14 PM, Ron Bonica wrote: >>=20 >> Jen, >>=20 >> I am ready to request publication. But before we do that, we need a docum= ent shepherd. >>=20 >> Eric, >>=20 >> Was there anyone who was close to the draft, but not a co-author. We can v= ictimteer that person. >>=20 >> Ron >>=20 >>=20 >>=20 >> Juniper Business Use Only >>=20 >> -----Original Message----- >> From: Eric Vyncke (evyncke) =20 >> Sent: Saturday, October 12, 2019 3:41 AM >> To: opsec@ietf.org >> Cc: Jen Linkova ; Ron Bonica >> Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt >>=20 >> As you will notice in https://urldefense.com/v3/__https://www.ietf.org/rf= cdiff?url2=3Ddraft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89z= GAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCfC0QrYg$ this latest revision addresses a s= uggestion by Gyan Mishra issued during the Working Group Last Call. Other ch= anges are mainly replacing the normative "MUST" and "SHOULD" as it is an inf= ormational document (so it is now "must" and "should") + removing an unused i= nformational reference. >>=20 >> Jen and Ron, as the authors have addressed all comments received during t= he WGLC (actually by only one reviewer) and the extensive review by Jen, may= I kindly request publication of this document? >>=20 >> Thank you all >>=20 >> -=C3=A9ric -merike - kk -enno >>=20 >>=20 >> On 12/10/2019, 09:34, "OPSEC on behalf of internet-drafts@ietf.org" wrote: >>=20 >>=20 >> A New Internet-Draft is available from the on-line Internet-Drafts dire= ctories. >> This draft is a work item of the Operational Security Capabilities for I= P Network Infrastructure WG of the IETF. >>=20 >> Title : Operational Security Considerations for IPv6 N= etworks >> Authors : Eric Vyncke >> Kiran K. Chittimaneni >> Merike Kaeo >> Enno Rey >> Filename : draft-ietf-opsec-v6-20.txt >> Pages : 52 >> Date : 2019-10-12 >>=20 >> Abstract: >> Knowledge and experience on how to operate IPv4 securely is >> available: whether it is the Internet or an enterprise internal >> network. However, IPv6 presents some new security challenges. RFC >> 4942 describes the security issues in the protocol but network >> managers also need a more practical, operations-minded document to >> enumerate advantages and/or disadvantages of certain choices. >>=20 >> This document analyzes the operational security issues in several >> places of a network (enterprises, service providers and residential >> users) and proposes technical and procedural mitigations techniques.= >> Some very specific places of a network such as the Internet of Thing= s >> are not discussed in this document. >>=20 >>=20 >> The IETF datatracker status page for this draft is: >> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf= -opsec-v6/__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jX= ZgMMuVCVgtmnGd$=20 >>=20 >> There are also htmlized versions available at: >> https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-opse= c-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgM= MuVCQdAq-nG$=20 >> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft= -ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5T= l11Z9jXZgMMuVCTaFWv3h$=20 >>=20 >> A diff from the previous version is available at: >> https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-i= etf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl1= 1Z9jXZgMMuVCfC0QrYg$=20 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of submi= ssion >> until the htmlized version and diff are available at tools.ietf.org. >>=20 >> Internet-Drafts are also available by anonymous FTP at: >> https://urldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!8WoA= 6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCXkuUebd$=20= >>=20 >> _______________________________________________ >> OPSEC mailing list >> OPSEC@ietf.org >> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/opsec= __;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCVjA= -7t2$=20 >>=20 >> _______________________________________________ >> OPSEC mailing list >> OPSEC@ietf.org >> https://www.ietf.org/mailman/listinfo/opsec >=20 >=20 From nobody Fri Oct 25 15:11:37 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC5EE120071 for ; Fri, 25 Oct 2019 15:11:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00lhqL2rDtU3 for ; Fri, 25 Oct 2019 15:11:33 -0700 (PDT) Received: from mail-ed1-x52e.google.com (mail-ed1-x52e.google.com [IPv6:2a00:1450:4864:20::52e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 654FB120025 for ; Fri, 25 Oct 2019 15:11:33 -0700 (PDT) Received: by mail-ed1-x52e.google.com with SMTP id p59so3026530edp.7 for ; Fri, 25 Oct 2019 15:11:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=9ElQGg6i2uyx+h+00Kaer0gtVbqvn17WoO1oUxZcLBk=; b=KyMjY0sbPfHcmpzEFl6j1nMw/XkkBikCJ2OzjzEprd/6VQW/YsJkicMrCuMBoCHHKB gRuUGx5kLlEkCYSjIF2AcKp0Dh/ElC/6PsbopUcn4kM9548pjRffjEJItDkIC/ex2FAV NrF76zKsoNkXvBlgB0LIyWVSUe9EzikVHT88s8uQA0hgvUJk9H1yObbZ+1LWSbR10nFZ GixXRk/CgyHdPnx4kKPCyvlfm/rw4Tn9PIkca4fQpZGEHN6yXeSz0+FCasfO42mj4n3O hAqSEsN80HHlDVvvdsXpEXgk7RR5sXY0hB+QMqBrlm4osmXz9XuRE6IN8Qg4d9D0PTbc Nv0g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=9ElQGg6i2uyx+h+00Kaer0gtVbqvn17WoO1oUxZcLBk=; b=J23ZNyeA0hhoqQ7j0vAskRXnDx0bpJl7aZzdCSYt8gb9n2VlwMwiM+QRTRMXrbTUD1 DK50wotMcsh6KfvTohznQxq7x0nL48gr3qJAO8Wk502ec73vaxrtx7l3IUlyjn3/1wUM 2ht+Uo1mq/JPertLCjfahcT44q1gMwfoevQ14a3KbesyWulTup4404R0djG+b2EH8vf/ pG1cwVSFW2wRGjyHCBRFduYDuwLEgw/GyFup6BZMRroiNSJr85c4vh88EmGYkDoQkFNN rNSsMAg6pSkLAxZKR2u68AgGErgs3AXEoWbtztBP0GNWcKab8HwX5bZSb9T2uVsknZtr dleA== X-Gm-Message-State: APjAAAW7b0pbBGMTCF3OxELjNP5p066bqvCzEiB4zxTe6NTPonfp3Td1 lmv2PoLNMTQXzIx9OG5fzGTOEGEO3BqPWY6D7yw= X-Google-Smtp-Source: APXvYqwanMdX1wT/k0sc2UsDjvwvfr02I9ktVIrSv3T/x/sykzaV3RExakOvzSl6CNf4oLg9tq1/XO/TgtFA15IcIX8= X-Received: by 2002:a17:906:448e:: with SMTP id y14mr5837556ejo.136.1572041491689; Fri, 25 Oct 2019 15:11:31 -0700 (PDT) MIME-Version: 1.0 References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> <2C9BFAF1-63FE-43BD-9016-0A1F14CF79EF@gmail.com> In-Reply-To: <2C9BFAF1-63FE-43BD-9016-0A1F14CF79EF@gmail.com> From: KK Chittimaneni Date: Fri, 25 Oct 2019 15:11:20 -0700 Message-ID: To: Gyan Mishra Cc: "Eric Vyncke (evyncke)" , Ron Bonica , "opsec@ietf.org" Content-Type: multipart/alternative; boundary="000000000000af366f0595c36e98" Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 22:11:37 -0000 --000000000000af366f0595c36e98 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Gyan, No IPRs on my end. Thanks, KK On Thu, Oct 24, 2019 at 11:36 AM Gyan Mishra wrote: > Hi Eric > > I am completing the Shepards writeup in essay format. Plan to submit in > the next few days. > > As far as WG consensus and history on the document from its initial I-D > state were there any nits other then what is public in the tracker or any > WG consensus issues or topics discussed that I should be aware of to > include in the write up. I assume we finally reached WG consensus on all > topics with no outstanding issues as we are now ready to publish. > > Are there any IPRs disclosed or outstanding. > > Regards, > > Gyan > > Sent from my iPhone > > > On Oct 15, 2019, at 2:12 AM, Eric Vyncke (evyncke) > wrote: > > > > Gyan, > > > > Thank you very much for being 'victimteered' as the document shepherd > [1] __ > > > > Thank you Jen and Ron for your support > > > > Regards > > > > -=C3=A9ric and the authors -kk -merike -enno > > > > [1] see > https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/edit/shepherdwriteup= / > (you need to create a free account on datatracker if not yet done), the > mailing list archive should also be a source of information > https://mailarchive.ietf.org/arch/browse/opsec/?q=3Ddraft-ietf-opsec-v6 > > > > > > =EF=BB=BFOn 15/10/2019, 01:54, "Gyan Mishra" wr= ote: > > > > Ron > > > > I read the document thoroughly in its entirety and do have valuable > real world experience in this space so I am volunteering. > > > > Not sure what I am getting myself into.=F0=9F=98=80 > > > > Gyan > > > > Sent from my iPhone > > > >> On Oct 14, 2019, at 7:14 PM, Ron Bonica 40juniper.net@dmarc.ietf.org> wrote: > >> > >> Jen, > >> > >> I am ready to request publication. But before we do that, we need a > document shepherd. > >> > >> Eric, > >> > >> Was there anyone who was close to the draft, but not a co-author. We > can victimteer that person. > >> > >> Ron > >> > >> > >> > >> Juniper Business Use Only > >> > >> -----Original Message----- > >> From: Eric Vyncke (evyncke) > >> Sent: Saturday, October 12, 2019 3:41 AM > >> To: opsec@ietf.org > >> Cc: Jen Linkova ; Ron Bonica > >> Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt > >> > >> As you will notice in > https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-iet= f-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11= Z9jXZgMMuVCfC0QrYg$ > this latest revision addresses a suggestion by Gyan Mishra issued during > the Working Group Last Call. Other changes are mainly replacing the > normative "MUST" and "SHOULD" as it is an informational document (so it i= s > now "must" and "should") + removing an unused informational reference. > >> > >> Jen and Ron, as the authors have addressed all comments received durin= g > the WGLC (actually by only one reviewer) and the extensive review by Jen, > may I kindly request publication of this document? > >> > >> Thank you all > >> > >> -=C3=A9ric -merike - kk -enno > >> > >> > >> On 12/10/2019, 09:34, "OPSEC on behalf of internet-drafts@ietf.org" < > opsec-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote: > >> > >> > >> A New Internet-Draft is available from the on-line Internet-Drafts > directories. > >> This draft is a work item of the Operational Security Capabilities > for IP Network Infrastructure WG of the IETF. > >> > >> Title : Operational Security Considerations for > IPv6 Networks > >> Authors : Eric Vyncke > >> Kiran K. Chittimaneni > >> Merike Kaeo > >> Enno Rey > >> Filename : draft-ietf-opsec-v6-20.txt > >> Pages : 52 > >> Date : 2019-10-12 > >> > >> Abstract: > >> Knowledge and experience on how to operate IPv4 securely is > >> available: whether it is the Internet or an enterprise internal > >> network. However, IPv6 presents some new security challenges. R= FC > >> 4942 describes the security issues in the protocol but network > >> managers also need a more practical, operations-minded document t= o > >> enumerate advantages and/or disadvantages of certain choices. > >> > >> This document analyzes the operational security issues in several > >> places of a network (enterprises, service providers and residenti= al > >> users) and proposes technical and procedural mitigations > techniques. > >> Some very specific places of a network such as the Internet of > Things > >> are not discussed in this document. > >> > >> > >> The IETF datatracker status page for this draft is: > >> > https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-o= psec-v6/__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZ= gMMuVCVgtmnGd$ > >> > >> There are also htmlized versions available at: > >> > https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-opsec-= v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMM= uVCQdAq-nG$ > >> > https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-i= etf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl= 11Z9jXZgMMuVCTaFWv3h$ > >> > >> A diff from the previous version is available at: > >> > https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-iet= f-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11= Z9jXZgMMuVCfC0QrYg$ > >> > >> > >> Please note that it may take a couple of minutes from the time of > submission > >> until the htmlized version and diff are available at tools.ietf.org. > >> > >> Internet-Drafts are also available by anonymous FTP at: > >> > https://urldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!8WoA6R= jC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCXkuUebd$ > >> > >> _______________________________________________ > >> OPSEC mailing list > >> OPSEC@ietf.org > >> > https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/opsec__= ;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCVjA-= 7t2$ > >> > >> _______________________________________________ > >> OPSEC mailing list > >> OPSEC@ietf.org > >> https://www.ietf.org/mailman/listinfo/opsec > > > > > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec > --000000000000af366f0595c36e98 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Gyan,

No IPRs on my end.<= /div>

Thanks,
KK

On Thu, Oct 24, 2019= at 11:36 AM Gyan Mishra <hayab= usagsm@gmail.com> wrote:
Hi Eric

I am completing the Shepards writeup in essay format. Plan to submit in the= next few days.

As far as WG consensus and history on the document from its initial I-D sta= te were there any nits other then what is public in the tracker or any WG c= onsensus issues or topics discussed that I should be aware of to include in= the write up.=C2=A0 I assume we finally reached WG consensus on all topics= with no outstanding issues as we are now ready to publish.

Are there any IPRs disclosed or outstanding.

Regards,

Gyan

Sent from my iPhone

> On Oct 15, 2019, at 2:12 AM, Eric Vyncke (evyncke) <evyncke@cisco.com> wrote: >
> Gyan,
>
> Thank you very much for being 'victimteered' as the document s= hepherd [1] __
>
> Thank you Jen and Ron for your support
>
> Regards
>
> -=C3=A9ric and the authors -kk -merike -enno
>
> [1] see https://datat= racker.ietf.org/doc/draft-ietf-opsec-v6/edit/shepherdwriteup/ (you need= to create a free account on datatracker if not yet done), the mailing list= archive should also be a source of information https://mailarchive.ietf.org/arch/browse/opsec/?q=3Ddraf= t-ietf-opsec-v6
>
>
> =EF=BB=BFOn 15/10/2019, 01:54, "Gyan Mishra" <hayabusagsm@gmail.com&g= t; wrote:
>
>=C2=A0 =C2=A0 Ron
>
>=C2=A0 =C2=A0 I read the document thoroughly in its entirety and do hav= e valuable real world experience in this space so I am volunteering.
>
>=C2=A0 =C2=A0 Not sure what I am getting myself into.=F0=9F=98=80
>
>=C2=A0 =C2=A0 Gyan
>
>=C2=A0 =C2=A0 Sent from my iPhone
>
>> On Oct 14, 2019, at 7:14 PM, Ron Bonica <rbonica=3D40juniper.net@dmarc.i= etf.org> wrote:
>>
>> Jen,
>>
>> I am ready to request publication. But before we do that, we need = a document shepherd.
>>
>> Eric,
>>
>> Was there anyone who was close to the draft, but not a co-author. = We can victimteer that person.
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Ron
>>
>>
>>
>> Juniper Business Use Only
>>
>> -----Original Message-----
>> From: Eric Vyncke (evyncke) <evyncke@cisco.com>
>> Sent: Saturday, October 12, 2019 3:41 AM
>> To: opsec@ietf= .org
>> Cc: Jen Linkova <furry13@gmail.com>; Ron Bonica <rbonica@juniper.net>
>> Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt
>>
>> As you will notice in https://urldefense.com/v3/__https://www.ietf.org/rfc= diff?url2=3Ddraft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89z= GAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCfC0QrYg$=C2=A0 this latest revision add= resses a suggestion by Gyan Mishra issued during the Working Group Last Cal= l. Other changes are mainly replacing the normative "MUST" and &q= uot;SHOULD" as it is an informational document (so it is now "mus= t" and "should") + removing an unused informational referenc= e.
>>
>> Jen and Ron, as the authors have addressed all comments received d= uring the WGLC (actually by only one reviewer) and the extensive review by = Jen, may I kindly request publication of this document?
>>
>> Thank=C2=A0 you all
>>
>> -=C3=A9ric -merike - kk -enno
>>
>>
>> On 12/10/2019, 09:34, "OPSEC on behalf of internet-drafts@ietf.org&quo= t; <opsec-bo= unces@ietf.org on behalf of internet-drafts@ietf.org> wrote:
>>
>>
>>=C2=A0 =C2=A0A New Internet-Draft is available from the on-line Int= ernet-Drafts directories.
>>=C2=A0 =C2=A0This draft is a work item of the Operational Security = Capabilities for IP Network Infrastructure WG of the IETF.
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Title=C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0: Operational Security Considerations for IPv6 Networks=
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Authors=C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0: Eric Vyncke
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Kiran K. Chittimaneni
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Merike Kaeo
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Enno Rey
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : dr= aft-ietf-opsec-v6-20.txt
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0Pages=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0: 52
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0Date=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 : 2019-10-12
>>
>>=C2=A0 =C2=A0Abstract:
>>=C2=A0 =C2=A0 =C2=A0 Knowledge and experience on how to operate IPv= 4 securely is
>>=C2=A0 =C2=A0 =C2=A0 available: whether it is the Internet or an en= terprise internal
>>=C2=A0 =C2=A0 =C2=A0 network.=C2=A0 However, IPv6 presents some new= security challenges.=C2=A0 RFC
>>=C2=A0 =C2=A0 =C2=A0 4942 describes the security issues in the prot= ocol but network
>>=C2=A0 =C2=A0 =C2=A0 managers also need a more practical, operation= s-minded document to
>>=C2=A0 =C2=A0 =C2=A0 enumerate advantages and/or disadvantages of c= ertain choices.
>>
>>=C2=A0 =C2=A0 =C2=A0 This document analyzes the operational securit= y issues in several
>>=C2=A0 =C2=A0 =C2=A0 places of a network (enterprises, service prov= iders and residential
>>=C2=A0 =C2=A0 =C2=A0 users) and proposes technical and procedural m= itigations techniques.
>>=C2=A0 =C2=A0 =C2=A0 Some very specific places of a network such as= the Internet of Things
>>=C2=A0 =C2=A0 =C2=A0 are not discussed in this document.
>>
>>
>>=C2=A0 =C2=A0The IETF datatracker status page for this draft is: >>=C2=A0 =C2=A0https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-= ietf-opsec-v6/__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl1= 1Z9jXZgMMuVCVgtmnGd$
>>
>>=C2=A0 =C2=A0There are also htmlized versions available at:
>>=C2=A0 =C2=A0https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-ops= ec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZ= gMMuVCQdAq-nG$
>>=C2=A0 =C2=A0https://urldefense.com/v3/__https://datatracker.ietf.org/doc= /html/draft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4= rIB7oMxgV_5Tl11Z9jXZgMMuVCTaFWv3h$
>>
>>=C2=A0 =C2=A0A diff from the previous version is available at:
>>=C2=A0 =C2=A0https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2= =3Ddraft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB= 7oMxgV_5Tl11Z9jXZgMMuVCfC0QrYg$
>>
>>
>>=C2=A0 =C2=A0Please note that it may take a couple of minutes from = the time of submission
>>=C2=A0 =C2=A0until the htmlized version and diff are available at <= a href=3D"http://tools.ietf.org" rel=3D"noreferrer" target=3D"_blank">tools= .ietf.org.
>>
>>=C2=A0 =C2=A0Internet-Drafts are also available by anonymous FTP at= :
>>=C2=A0 =C2=A0https://ur= ldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!8WoA6RjC81c!R2vH-_= v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCXkuUebd$
>>
>>=C2=A0 =C2=A0_______________________________________________
>>=C2=A0 =C2=A0OPSEC mailing list
>>=C2=A0 =C2=A0OP= SEC@ietf.org
>>=C2=A0 =C2=A0ht= tps://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/opsec__;!8W= oA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCVjA-7t2$=
>>
>> _______________________________________________
>> OPSEC mailing list
>> OPSEC@ietf.org=
>> https://www.ietf.org/mailman/listinfo/opsec<= br> >
>

_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/opsec
--000000000000af366f0595c36e98-- From nobody Fri Oct 25 22:58:31 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81502120077 for ; Fri, 25 Oct 2019 22:58:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=SZ/ns6uI; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=QRALHuOk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VjLlf3BzI24Z for ; Fri, 25 Oct 2019 22:58:25 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AB3C120071 for ; Fri, 25 Oct 2019 22:58:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=32051; q=dns/txt; s=iport; t=1572069505; x=1573279105; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=M1WX5u77xly/O8Puu24WluHGkyk6Qh0XWVU1hywzC50=; b=SZ/ns6uIWr4GPQcQpXROt9W9NXRz6a9uYehIEqKDKrQj2QDQgiZOZds+ uK6iiVWdpnJsC7Rp8QPSQyIgGiiIx5qtQkHk2zE9vo18qTkjky7IJIRQH 1N1BBoXvbmMoKwJuVygHKj7rRhLGtTl76F5BauEq/JRgHPLdHEtE/tc6Y A=; IronPort-PHdr: =?us-ascii?q?9a23=3Aq/WKwhaMz1NAyPTeVc87NeX/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el20gebRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn?= =?us-ascii?q?1NksAKh0olCc+BB1f8KavncT08F8dPfFRk5Hq8d0NSHZW2ag=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CwAABw37Nd/4ENJK1lGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgXuBHC8kLAVsVyAECyqEKINHA4ptgl6?= =?us-ascii?q?JVY4VgUKBEANUCQEBAQwBARgBBQ8CAQGEQAIXgygkOBMCAwkBAQQBAQECAQU?= =?us-ascii?q?EbYU3DIVQAQEBAQIBAQEQER0BASwLAQQHBAIBBgIRAwEBAQEVCAoDAgICHwY?= =?us-ascii?q?LFAkIAgQBDQUigwABgXlNAw4gAQ6VQ5BiAoE4iGF1gTKCfgEBBYFIQUCCRg0?= =?us-ascii?q?LghcJgTaFE4Z8GIFAP4ERJx+CTD6CG0cBAQIBARaBAlwJDQkIAYJRMoIsj3i?= =?us-ascii?q?FPIkzjkFBCoIkhxCJO1aEDBuCPC9DhmKEL4dDg1GOPIgqghCPEgIEAgQFAg4?= =?us-ascii?q?BAQWBPyoigVhwFRohKgGCDQEBMglHEBSCYiSDc4UUhT90AYEojnoBAQ?= X-IronPort-AV: E=Sophos;i="5.68,230,1569283200"; d="scan'208,217";a="351015928" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 26 Oct 2019 05:58:23 +0000 Received: from xch-rcd-011.cisco.com (xch-rcd-011.cisco.com [173.37.102.21]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id x9Q5wNw5017175 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 26 Oct 2019 05:58:23 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-RCD-011.cisco.com (173.37.102.21) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 26 Oct 2019 00:58:10 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 26 Oct 2019 01:58:09 -0400 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Sat, 26 Oct 2019 01:58:09 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PgRbQKu4As82tWnMDqPPaJegZTNLrQmD6cPpy6c7ilfkSrdzYPvG0KP7nxEHJ19BYF2mH6dN2t5HyULvC00+PlD1UQTTuuqm6hVX/ZkXs0tOJcihG3E0GPYvCsq8UVJ8g20WP/q8j4jFPP1mP8OhSr3UlQlfu6fkS0ylr/krScegjuw4Sw+7d46jWt4lqeKGzBleiFJuf+N8I8M4JhgTeUP1TIAuWnIzwyxqrx0yNCMiJ5tIgF7m6re7gzdVsVPPh3i4yI9Lk2fvTUjrkd4pGKyzuX3bIdlHes94PgCw5ZPHSTIV3A/3bn5aikxxH6q5vjdN1ZtK2tAeP++ivbK83Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=M1WX5u77xly/O8Puu24WluHGkyk6Qh0XWVU1hywzC50=; b=eiYUQNRxSXTYL4/gMs+glJgwy7kJFbVsrL6t34A2JKAbmULyd/eobej3UlOYuRZJE0wbqMNqwgAPo4dftbhUogBF/q8SChwes9VwyadpXOz8jmuEEasRJkzgL7XLzgnOArPo8oC8DQHaZ1kRqRPsN5UgWIsnx48UiDmbKY+JkyMfBpHPDjwRLNzpFlFtJlsOucbiXb7rSUsOQv7uUCJYPvzIqYEdXfZWwW4feCZlZRn9JA9wxphppk4IzGPLyw0R61yXprPSUxF0UUqM0KYIQqGj21jsZTLotKdqOBjZDaPEylAxH1lW9Z1qk+VSugvKGvmYVA8wJtOHZOCWo9Pwcw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=M1WX5u77xly/O8Puu24WluHGkyk6Qh0XWVU1hywzC50=; b=QRALHuOkNDHkzyXR/M7Ye/Y/I+ntm2W20KZsJEkLVVEMg3/lTrhsV+DmGnFY2DGktQ7v2vX99XgUqwJns3b2iYPPyA+DsrSPwDnY9OG5JtHuKyvj7SJM21vHKKUKl8PMsJi8yuZvjPj78uXvEriLRWxXh6qZZ4Zw8fyEJkpBX8E= Received: from CY4PR11MB1752.namprd11.prod.outlook.com (10.175.59.14) by CY4PR11MB1943.namprd11.prod.outlook.com (10.175.63.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.23; Sat, 26 Oct 2019 05:58:08 +0000 Received: from CY4PR11MB1752.namprd11.prod.outlook.com ([fe80::e486:d531:f05a:e2c5]) by CY4PR11MB1752.namprd11.prod.outlook.com ([fe80::e486:d531:f05a:e2c5%8]) with mapi id 15.20.2387.021; Sat, 26 Oct 2019 05:58:07 +0000 From: "Eric Vyncke (evyncke)" To: KK Chittimaneni , Gyan Mishra CC: Ron Bonica , "opsec@ietf.org" Thread-Topic: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt Thread-Index: AQHVgM9rjNu0gahqL0CwhI/yzqaHUKdWwKcAgAQID4CAAAsegIAAix+AgA7THgCAAc6SAIAAo/EA Date: Sat, 26 Oct 2019 05:58:07 +0000 Message-ID: References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> <2C9BFAF1-63FE-43BD-9016-0A1F14CF79EF@gmail.com> In-Reply-To: Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:39d4:171c:775d:3633] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: da6081b3-b253-4ad3-74a4-08d759d9799f x-ms-traffictypediagnostic: CY4PR11MB1943: x-ms-exchange-purlcount: 9 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0202D21D2F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(39860400002)(396003)(346002)(136003)(366004)(13464003)(199004)(189003)(33656002)(71190400001)(71200400001)(66446008)(53546011)(2616005)(2906002)(86362001)(966005)(256004)(14444005)(486006)(5660300002)(476003)(6506007)(8936002)(66574012)(186003)(4001150100001)(91956017)(36756003)(8676002)(81166006)(76176011)(81156014)(102836004)(64756008)(54896002)(236005)(6512007)(4326008)(6486002)(66946007)(46003)(6436002)(6306002)(6246003)(446003)(76116006)(99286004)(66556008)(66476007)(606006)(316002)(25786009)(229853002)(58126008)(110136005)(7736002)(54906003)(14454004)(11346002)(478600001)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR11MB1943; H:CY4PR11MB1752.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: V9u25jKIhM60/Rp1qruvl2eoYXD0hEdPn7p48fY/SO74TYIlQr2vZZ4ngx3GNMuwtGjAITpR9qbTHl2s71IewN79D63Feiaf5EKI7M/Q/EOrMv/c2TfA09xNX1LGbuxq0iloW7dl74f2kwe6Vj0SSIHyigE2qaYv5AFfUlvheZ5yk4kWxe0svO9tRH0BKC0jrSCNVHVLbctvplEZGuUqwBhDJqmHuyvvxRgX8MKUvbcL4Xp6gnQ/osXfDn6pHeuCp2cDdOgUbRz7xz6vDC6RZJRK9bDRj76Y7hFT/QLIJIc3yIsaOEtNBUCWlSTLYa4jdM5B3HTN01ss7G1FP1vIl3BIbNgbiaLz3TVQVZ4rTtb0QmuvSVhUDDB+WPSZa1NwOwP5yohFaGSpQhmCe9O2/yh79x4roGpZRMQXdPYyvHfXR+UHcMf0RVUejisJsqVFSRi0aj4CV8buB7bu0NDANXObnhym3AxqycZzNvpgbW4= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_FDAA1323AD39406894306B705A619F95ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: da6081b3-b253-4ad3-74a4-08d759d9799f X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2019 05:58:07.7423 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 1JqsfHC8jGwopfuUcomfLus0wR+qotvW02Dh7Qv92YYdmLzDnQy2s9DTDh7Dw7L4NGKi5j27C93wzSM29Ir2uw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR11MB1943 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.21, xch-rcd-011.cisco.com X-Outbound-Node: alln-core-9.cisco.com Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Oct 2019 05:58:30 -0000 --_000_FDAA1323AD39406894306B705A619F95ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Tm8gSVBSIG9uIG15IHNpZGUuDQoNCi3DqXJpYw0KDQpGcm9tOiBLaXJhbiBLdW1hciBDaGl0dGlt YW5lbmkgPGtrLmNoaXR0aW1hbmVuaUBnbWFpbC5jb20+DQpEYXRlOiBTYXR1cmRheSwgMjYgT2N0 b2JlciAyMDE5IGF0IDAwOjExDQpUbzogR3lhbiBNaXNocmEgPGhheWFidXNhZ3NtQGdtYWlsLmNv bT4NCkNjOiBFcmljIFZ5bmNrZSA8ZXZ5bmNrZUBjaXNjby5jb20+LCBSb24gQm9uaWNhIDxyYm9u aWNhPTQwanVuaXBlci5uZXRAZG1hcmMuaWV0Zi5vcmc+LCAib3BzZWNAaWV0Zi5vcmciIDxvcHNl Y0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbT1BTRUNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYt b3BzZWMtdjYtMjAudHh0DQoNCkhpIEd5YW4sDQoNCk5vIElQUnMgb24gbXkgZW5kLg0KDQpUaGFu a3MsDQpLSw0KDQpPbiBUaHUsIE9jdCAyNCwgMjAxOSBhdCAxMTozNiBBTSBHeWFuIE1pc2hyYSA8 aGF5YWJ1c2Fnc21AZ21haWwuY29tPG1haWx0bzpoYXlhYnVzYWdzbUBnbWFpbC5jb20+PiB3cm90 ZToNCkhpIEVyaWMNCg0KSSBhbSBjb21wbGV0aW5nIHRoZSBTaGVwYXJkcyB3cml0ZXVwIGluIGVz c2F5IGZvcm1hdC4gUGxhbiB0byBzdWJtaXQgaW4gdGhlIG5leHQgZmV3IGRheXMuDQoNCkFzIGZh ciBhcyBXRyBjb25zZW5zdXMgYW5kIGhpc3Rvcnkgb24gdGhlIGRvY3VtZW50IGZyb20gaXRzIGlu aXRpYWwgSS1EIHN0YXRlIHdlcmUgdGhlcmUgYW55IG5pdHMgb3RoZXIgdGhlbiB3aGF0IGlzIHB1 YmxpYyBpbiB0aGUgdHJhY2tlciBvciBhbnkgV0cgY29uc2Vuc3VzIGlzc3VlcyBvciB0b3BpY3Mg ZGlzY3Vzc2VkIHRoYXQgSSBzaG91bGQgYmUgYXdhcmUgb2YgdG8gaW5jbHVkZSBpbiB0aGUgd3Jp dGUgdXAuICBJIGFzc3VtZSB3ZSBmaW5hbGx5IHJlYWNoZWQgV0cgY29uc2Vuc3VzIG9uIGFsbCB0 b3BpY3Mgd2l0aCBubyBvdXRzdGFuZGluZyBpc3N1ZXMgYXMgd2UgYXJlIG5vdyByZWFkeSB0byBw dWJsaXNoLg0KDQpBcmUgdGhlcmUgYW55IElQUnMgZGlzY2xvc2VkIG9yIG91dHN0YW5kaW5nLg0K DQpSZWdhcmRzLA0KDQpHeWFuDQoNClNlbnQgZnJvbSBteSBpUGhvbmUNCg0KPiBPbiBPY3QgMTUs IDIwMTksIGF0IDI6MTIgQU0sIEVyaWMgVnluY2tlIChldnluY2tlKSA8ZXZ5bmNrZUBjaXNjby5j b208bWFpbHRvOmV2eW5ja2VAY2lzY28uY29tPj4gd3JvdGU6DQo+DQo+IEd5YW4sDQo+DQo+IFRo YW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIGJlaW5nICd2aWN0aW10ZWVyZWQnIGFzIHRoZSBkb2N1bWVu dCBzaGVwaGVyZCBbMV0gX18NCj4NCj4gVGhhbmsgeW91IEplbiBhbmQgUm9uIGZvciB5b3VyIHN1 cHBvcnQNCj4NCj4gUmVnYXJkcw0KPg0KPiAtw6lyaWMgYW5kIHRoZSBhdXRob3JzIC1rayAtbWVy aWtlIC1lbm5vDQo+DQo+IFsxXSBzZWUgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv ZHJhZnQtaWV0Zi1vcHNlYy12Ni9lZGl0L3NoZXBoZXJkd3JpdGV1cC8gKHlvdSBuZWVkIHRvIGNy ZWF0ZSBhIGZyZWUgYWNjb3VudCBvbiBkYXRhdHJhY2tlciBpZiBub3QgeWV0IGRvbmUpLCB0aGUg bWFpbGluZyBsaXN0IGFyY2hpdmUgc2hvdWxkIGFsc28gYmUgYSBzb3VyY2Ugb2YgaW5mb3JtYXRp b24gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL2Jyb3dzZS9vcHNlYy8/cT1kcmFm dC1pZXRmLW9wc2VjLXY2DQo+DQo+DQo+IE9uIDE1LzEwLzIwMTksIDAxOjU0LCAiR3lhbiBNaXNo cmEiIDxoYXlhYnVzYWdzbUBnbWFpbC5jb208bWFpbHRvOmhheWFidXNhZ3NtQGdtYWlsLmNvbT4+ IHdyb3RlOg0KPg0KPiAgICBSb24NCj4NCj4gICAgSSByZWFkIHRoZSBkb2N1bWVudCB0aG9yb3Vn aGx5IGluIGl0cyBlbnRpcmV0eSBhbmQgZG8gaGF2ZSB2YWx1YWJsZSByZWFsIHdvcmxkIGV4cGVy aWVuY2UgaW4gdGhpcyBzcGFjZSBzbyBJIGFtIHZvbHVudGVlcmluZy4NCj4NCj4gICAgTm90IHN1 cmUgd2hhdCBJIGFtIGdldHRpbmcgbXlzZWxmIGludG8u8J+YgA0KPg0KPiAgICBHeWFuDQo+DQo+ ICAgIFNlbnQgZnJvbSBteSBpUGhvbmUNCj4NCj4+IE9uIE9jdCAxNCwgMjAxOSwgYXQgNzoxNCBQ TSwgUm9uIEJvbmljYSA8cmJvbmljYT00MGp1bmlwZXIubmV0QGRtYXJjLmlldGYub3JnPG1haWx0 bzo0MGp1bmlwZXIubmV0QGRtYXJjLmlldGYub3JnPj4gd3JvdGU6DQo+Pg0KPj4gSmVuLA0KPj4N Cj4+IEkgYW0gcmVhZHkgdG8gcmVxdWVzdCBwdWJsaWNhdGlvbi4gQnV0IGJlZm9yZSB3ZSBkbyB0 aGF0LCB3ZSBuZWVkIGEgZG9jdW1lbnQgc2hlcGhlcmQuDQo+Pg0KPj4gRXJpYywNCj4+DQo+PiBX YXMgdGhlcmUgYW55b25lIHdobyB3YXMgY2xvc2UgdG8gdGhlIGRyYWZ0LCBidXQgbm90IGEgY28t YXV0aG9yLiBXZSBjYW4gdmljdGltdGVlciB0aGF0IHBlcnNvbi4NCj4+DQo+PiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUm9uDQo+Pg0KPj4NCj4+ DQo+PiBKdW5pcGVyIEJ1c2luZXNzIFVzZSBPbmx5DQo+Pg0KPj4gLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCj4+IEZyb206IEVyaWMgVnluY2tlIChldnluY2tlKSA8ZXZ5bmNrZUBjaXNjby5j b208bWFpbHRvOmV2eW5ja2VAY2lzY28uY29tPj4NCj4+IFNlbnQ6IFNhdHVyZGF5LCBPY3RvYmVy IDEyLCAyMDE5IDM6NDEgQU0NCj4+IFRvOiBvcHNlY0BpZXRmLm9yZzxtYWlsdG86b3BzZWNAaWV0 Zi5vcmc+DQo+PiBDYzogSmVuIExpbmtvdmEgPGZ1cnJ5MTNAZ21haWwuY29tPG1haWx0bzpmdXJy eTEzQGdtYWlsLmNvbT4+OyBSb24gQm9uaWNhIDxyYm9uaWNhQGp1bmlwZXIubmV0PG1haWx0bzpy Ym9uaWNhQGp1bmlwZXIubmV0Pj4NCj4+IFN1YmplY3Q6IFJlOiBbT1BTRUNdIEktRCBBY3Rpb246 IGRyYWZ0LWlldGYtb3BzZWMtdjYtMjAudHh0DQo+Pg0KPj4gQXMgeW91IHdpbGwgbm90aWNlIGlu IGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZm P3VybDI9ZHJhZnQtaWV0Zi1vcHNlYy12Ni0yMF9fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3 SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNmQzBRcllnJDxodHRw czovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9 ZHJhZnQtaWV0Zi1vcHNlYy12Ni0yMF9fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hj Y0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNmQzBRcllnJD4gIHRoaXMgbGF0 ZXN0IHJldmlzaW9uIGFkZHJlc3NlcyBhIHN1Z2dlc3Rpb24gYnkgR3lhbiBNaXNocmEgaXNzdWVk IGR1cmluZyB0aGUgV29ya2luZyBHcm91cCBMYXN0IENhbGwuIE90aGVyIGNoYW5nZXMgYXJlIG1h aW5seSByZXBsYWNpbmcgdGhlIG5vcm1hdGl2ZSAiTVVTVCIgYW5kICJTSE9VTEQiIGFzIGl0IGlz IGFuIGluZm9ybWF0aW9uYWwgZG9jdW1lbnQgKHNvIGl0IGlzIG5vdyAibXVzdCIgYW5kICJzaG91 bGQiKSArIHJlbW92aW5nIGFuIHVudXNlZCBpbmZvcm1hdGlvbmFsIHJlZmVyZW5jZS4NCj4+DQo+ PiBKZW4gYW5kIFJvbiwgYXMgdGhlIGF1dGhvcnMgaGF2ZSBhZGRyZXNzZWQgYWxsIGNvbW1lbnRz IHJlY2VpdmVkIGR1cmluZyB0aGUgV0dMQyAoYWN0dWFsbHkgYnkgb25seSBvbmUgcmV2aWV3ZXIp IGFuZCB0aGUgZXh0ZW5zaXZlIHJldmlldyBieSBKZW4sIG1heSBJIGtpbmRseSByZXF1ZXN0IHB1 YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQ/DQo+Pg0KPj4gVGhhbmsgIHlvdSBhbGwNCj4+DQo+ PiAtw6lyaWMgLW1lcmlrZSAtIGtrIC1lbm5vDQo+Pg0KPj4NCj4+IE9uIDEyLzEwLzIwMTksIDA5 OjM0LCAiT1BTRUMgb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86 aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPiIgPG9wc2VjLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRv Om9wc2VjLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0 Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4+IHdyb3RlOg0KPj4NCj4+DQo+ PiAgIEEgTmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIElu dGVybmV0LURyYWZ0cyBkaXJlY3Rvcmllcy4NCj4+ICAgVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRl bSBvZiB0aGUgT3BlcmF0aW9uYWwgU2VjdXJpdHkgQ2FwYWJpbGl0aWVzIGZvciBJUCBOZXR3b3Jr IEluZnJhc3RydWN0dXJlIFdHIG9mIHRoZSBJRVRGLg0KPj4NCj4+ICAgICAgICAgICBUaXRsZSAg ICAgICAgICAgOiBPcGVyYXRpb25hbCBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBmb3IgSVB2NiBO ZXR3b3Jrcw0KPj4gICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IEVyaWMgVnluY2tlDQo+PiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgS2lyYW4gSy4gQ2hpdHRpbWFuZW5pDQo+PiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgTWVyaWtlIEthZW8NCj4+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBFbm5vIFJleQ0KPj4gICAgICAgRmlsZW5hbWUgICAgICAgIDogZHJhZnQtaWV0 Zi1vcHNlYy12Ni0yMC50eHQNCj4+ICAgICAgIFBhZ2VzICAgICAgICAgICA6IDUyDQo+PiAgICAg ICBEYXRlICAgICAgICAgICAgOiAyMDE5LTEwLTEyDQo+Pg0KPj4gICBBYnN0cmFjdDoNCj4+ICAg ICAgS25vd2xlZGdlIGFuZCBleHBlcmllbmNlIG9uIGhvdyB0byBvcGVyYXRlIElQdjQgc2VjdXJl bHkgaXMNCj4+ICAgICAgYXZhaWxhYmxlOiB3aGV0aGVyIGl0IGlzIHRoZSBJbnRlcm5ldCBvciBh biBlbnRlcnByaXNlIGludGVybmFsDQo+PiAgICAgIG5ldHdvcmsuICBIb3dldmVyLCBJUHY2IHBy ZXNlbnRzIHNvbWUgbmV3IHNlY3VyaXR5IGNoYWxsZW5nZXMuICBSRkMNCj4+ICAgICAgNDk0MiBk ZXNjcmliZXMgdGhlIHNlY3VyaXR5IGlzc3VlcyBpbiB0aGUgcHJvdG9jb2wgYnV0IG5ldHdvcmsN Cj4+ICAgICAgbWFuYWdlcnMgYWxzbyBuZWVkIGEgbW9yZSBwcmFjdGljYWwsIG9wZXJhdGlvbnMt bWluZGVkIGRvY3VtZW50IHRvDQo+PiAgICAgIGVudW1lcmF0ZSBhZHZhbnRhZ2VzIGFuZC9vciBk aXNhZHZhbnRhZ2VzIG9mIGNlcnRhaW4gY2hvaWNlcy4NCj4+DQo+PiAgICAgIFRoaXMgZG9jdW1l bnQgYW5hbHl6ZXMgdGhlIG9wZXJhdGlvbmFsIHNlY3VyaXR5IGlzc3VlcyBpbiBzZXZlcmFsDQo+ PiAgICAgIHBsYWNlcyBvZiBhIG5ldHdvcmsgKGVudGVycHJpc2VzLCBzZXJ2aWNlIHByb3ZpZGVy cyBhbmQgcmVzaWRlbnRpYWwNCj4+ICAgICAgdXNlcnMpIGFuZCBwcm9wb3NlcyB0ZWNobmljYWwg YW5kIHByb2NlZHVyYWwgbWl0aWdhdGlvbnMgdGVjaG5pcXVlcy4NCj4+ICAgICAgU29tZSB2ZXJ5 IHNwZWNpZmljIHBsYWNlcyBvZiBhIG5ldHdvcmsgc3VjaCBhcyB0aGUgSW50ZXJuZXQgb2YgVGhp bmdzDQo+PiAgICAgIGFyZSBub3QgZGlzY3Vzc2VkIGluIHRoaXMgZG9jdW1lbnQuDQo+Pg0KPj4N Cj4+ICAgVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6 DQo+PiAgIGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1pZXRmLW9wc2VjLXY2L19fOyE4V29BNlJqQzgxYyFSMnZILV92M051 Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNWZ3RtbkdkJDxo dHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1pZXRmLW9wc2VjLXY2L19fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hj Y0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNWZ3RtbkdkJD4NCj4+DQo+PiAg IFRoZXJlIGFyZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2YWlsYWJsZSBhdDoNCj4+ICAgaHR0 cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1pZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4 OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1FkQXEtbkckPGh0dHBzOi8vdXJsZGVm ZW5zZS5jb20vdjMvX19odHRwczovdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLW9wc2Vj LXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3 b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1FkQXEtbkckPg0KPj4gICBodHRwczovL3VybGRlZmVuc2Uu Y29tL3YzL19faHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRm LW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZ UjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1RhRld2M2gkPGh0dHBzOi8vdXJsZGVmZW5zZS5j b20vdjMvX19odHRwczovZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1v cHNlYy12Ni0yMF9fOyE4V29BNlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0 cklCN29NeGdWXzVUbDExWjlqWFpnTU11VkNUYUZXdjNoJD4NCj4+DQo+PiAgIEEgZGlmZiBmcm9t IHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDoNCj4+ICAgaHR0cHM6Ly91cmxk ZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1p ZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpH QVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ2ZDMFFyWWckPGh0dHBzOi8vdXJsZGVmZW5z ZS5jb20vdjMvX19odHRwczovd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9w c2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRy SUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ2ZDMFFyWWckPg0KPj4NCj4+DQo+PiAgIFBsZWFzZSBu b3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9m IHN1Ym1pc3Npb24NCj4+ICAgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJl IGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZzxodHRwOi8vdG9vbHMuaWV0Zi5vcmc+Lg0KPj4N Cj4+ICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQ IGF0Og0KPj4gICBodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19fZnRwOi8vZnRwLmlldGYub3Jn L2ludGVybmV0LWRyYWZ0cy9fXzshOFdvQTZSakM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5 ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDWGt1VWViZCQ8aHR0cHM6Ly91cmxkZWZl bnNlLmNvbS92My9fX2Z0cDovZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9fXzshOFdvQTZS akM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alha Z01NdVZDWGt1VWViZCQ+DQo+Pg0KPj4gICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPj4gICBPUFNFQyBtYWlsaW5nIGxpc3QNCj4+ICAgT1BTRUNAaWV0 Zi5vcmc8bWFpbHRvOk9QU0VDQGlldGYub3JnPg0KPj4gICBodHRwczovL3VybGRlZmVuc2UuY29t L3YzL19faHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vcHNlY19fOyE4V29B NlJqQzgxYyFSMnZILV92M051Z2l3SWZUY1hjY0VDODl6R0FYWVI0cklCN29NeGdWXzVUbDExWjlq WFpnTU11VkNWakEtN3QyJDxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29wc2VjX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVn aXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1ZqQS03dDIkPg0K Pj4NCj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ PiBPUFNFQyBtYWlsaW5nIGxpc3QNCj4+IE9QU0VDQGlldGYub3JnPG1haWx0bzpPUFNFQ0BpZXRm Lm9yZz4NCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb3BzZWMNCj4N Cj4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCk9Q U0VDIG1haWxpbmcgbGlzdA0KT1BTRUNAaWV0Zi5vcmc8bWFpbHRvOk9QU0VDQGlldGYub3JnPg0K aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vcHNlYw0K --_000_FDAA1323AD39406894306B705A619F95ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJBcHBsZSBD b2xvciBFbW9qaSI7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAgMDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29I eXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93 ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25v cm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDph dXRvOw0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJ bWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4w cHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5ObyBJUFIgb24gbXkgc2lk ZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LcOpcmljPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20g MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFu PjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+S2lyYW4gS3Vt YXIgQ2hpdHRpbWFuZW5pICZsdDtray5jaGl0dGltYW5lbmlAZ21haWwuY29tJmd0Ozxicj4NCjxi PkRhdGU6IDwvYj5TYXR1cmRheSwgMjYgT2N0b2JlciAyMDE5IGF0IDAwOjExPGJyPg0KPGI+VG86 IDwvYj5HeWFuIE1pc2hyYSAmbHQ7aGF5YWJ1c2Fnc21AZ21haWwuY29tJmd0Ozxicj4NCjxiPkNj OiA8L2I+RXJpYyBWeW5ja2UgJmx0O2V2eW5ja2VAY2lzY28uY29tJmd0OywgUm9uIEJvbmljYSAm bHQ7cmJvbmljYT00MGp1bmlwZXIubmV0QGRtYXJjLmlldGYub3JnJmd0OywgJnF1b3Q7b3BzZWNA aWV0Zi5vcmcmcXVvdDsgJmx0O29wc2VjQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwv Yj5SZTogW09QU0VDXSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLW9wc2VjLXY2LTIwLnR4dDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPkhpIEd5YW4sPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPk5vIElQUnMgb24gbXkgZW5kLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij5UaGFua3MsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5LSzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5PbiBUaHUsIE9j dCAyNCwgMjAxOSBhdCAxMTozNiBBTSBHeWFuIE1pc2hyYSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmhh eWFidXNhZ3NtQGdtYWlsLmNvbSI+aGF5YWJ1c2Fnc21AZ21haWwuY29tPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5IaSBFcmljIDxicj4NCjxicj4NCkkgYW0gY29t cGxldGluZyB0aGUgU2hlcGFyZHMgd3JpdGV1cCBpbiBlc3NheSBmb3JtYXQuIFBsYW4gdG8gc3Vi bWl0IGluIHRoZSBuZXh0IGZldyBkYXlzLjxicj4NCjxicj4NCkFzIGZhciBhcyBXRyBjb25zZW5z dXMgYW5kIGhpc3Rvcnkgb24gdGhlIGRvY3VtZW50IGZyb20gaXRzIGluaXRpYWwgSS1EIHN0YXRl IHdlcmUgdGhlcmUgYW55IG5pdHMgb3RoZXIgdGhlbiB3aGF0IGlzIHB1YmxpYyBpbiB0aGUgdHJh Y2tlciBvciBhbnkgV0cgY29uc2Vuc3VzIGlzc3VlcyBvciB0b3BpY3MgZGlzY3Vzc2VkIHRoYXQg SSBzaG91bGQgYmUgYXdhcmUgb2YgdG8gaW5jbHVkZSBpbiB0aGUgd3JpdGUgdXAuJm5ic3A7IEkg YXNzdW1lIHdlIGZpbmFsbHkNCiByZWFjaGVkIFdHIGNvbnNlbnN1cyBvbiBhbGwgdG9waWNzIHdp dGggbm8gb3V0c3RhbmRpbmcgaXNzdWVzIGFzIHdlIGFyZSBub3cgcmVhZHkgdG8gcHVibGlzaC48 YnI+DQo8YnI+DQpBcmUgdGhlcmUgYW55IElQUnMgZGlzY2xvc2VkIG9yIG91dHN0YW5kaW5nLiA8 YnI+DQo8YnI+DQpSZWdhcmRzLDxicj4NCjxicj4NCkd5YW4gPGJyPg0KPGJyPg0KU2VudCBmcm9t IG15IGlQaG9uZTxicj4NCjxicj4NCiZndDsgT24gT2N0IDE1LCAyMDE5LCBhdCAyOjEyIEFNLCBF cmljIFZ5bmNrZSAoZXZ5bmNrZSkgJmx0OzxhIGhyZWY9Im1haWx0bzpldnluY2tlQGNpc2NvLmNv bSIgdGFyZ2V0PSJfYmxhbmsiPmV2eW5ja2VAY2lzY28uY29tPC9hPiZndDsgd3JvdGU6PGJyPg0K Jmd0OyA8YnI+DQomZ3Q7IEd5YW4sPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IFRoYW5rIHlvdSB2ZXJ5 IG11Y2ggZm9yIGJlaW5nICd2aWN0aW10ZWVyZWQnIGFzIHRoZSBkb2N1bWVudCBzaGVwaGVyZCBb MV0gX188YnI+DQomZ3Q7IDxicj4NCiZndDsgVGhhbmsgeW91IEplbiBhbmQgUm9uIGZvciB5b3Vy IHN1cHBvcnQ8YnI+DQomZ3Q7IDxicj4NCiZndDsgUmVnYXJkczxicj4NCiZndDsgPGJyPg0KJmd0 OyAtw6lyaWMgYW5kIHRoZSBhdXRob3JzIC1rayAtbWVyaWtlIC1lbm5vPGJyPg0KJmd0OyA8YnI+ DQomZ3Q7IFsxXSBzZWUgPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv ZHJhZnQtaWV0Zi1vcHNlYy12Ni9lZGl0L3NoZXBoZXJkd3JpdGV1cC8iIHRhcmdldD0iX2JsYW5r Ij4NCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtb3BzZWMtdjYv ZWRpdC9zaGVwaGVyZHdyaXRldXAvPC9hPiAoeW91IG5lZWQgdG8gY3JlYXRlIGEgZnJlZSBhY2Nv dW50IG9uIGRhdGF0cmFja2VyIGlmIG5vdCB5ZXQgZG9uZSksIHRoZSBtYWlsaW5nIGxpc3QgYXJj aGl2ZSBzaG91bGQgYWxzbyBiZSBhIHNvdXJjZSBvZiBpbmZvcm1hdGlvbg0KPGEgaHJlZj0iaHR0 cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL2Jyb3dzZS9vcHNlYy8/cT1kcmFmdC1pZXRm LW9wc2VjLXY2IiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL21haWxhcmNoaXZlLmlldGYub3Jn L2FyY2gvYnJvd3NlL29wc2VjLz9xPWRyYWZ0LWlldGYtb3BzZWMtdjY8L2E+PGJyPg0KJmd0OyA8 YnI+DQomZ3Q7IDxicj4NCiZndDsgT24gMTUvMTAvMjAxOSwgMDE6NTQsICZxdW90O0d5YW4gTWlz aHJhJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86aGF5YWJ1c2Fnc21AZ21haWwuY29tIiB0YXJn ZXQ9Il9ibGFuayI+aGF5YWJ1c2Fnc21AZ21haWwuY29tPC9hPiZndDsgd3JvdGU6PGJyPg0KJmd0 OyA8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyBSb248YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsg Jm5ic3A7IEkgcmVhZCB0aGUgZG9jdW1lbnQgdGhvcm91Z2hseSBpbiBpdHMgZW50aXJldHkgYW5k IGRvIGhhdmUgdmFsdWFibGUgcmVhbCB3b3JsZCBleHBlcmllbmNlIGluIHRoaXMgc3BhY2Ugc28g SSBhbSB2b2x1bnRlZXJpbmcuPGJyPg0KJmd0OyA8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyBOb3Qg c3VyZSB3aGF0IEkgYW0gZ2V0dGluZyBteXNlbGYgaW50by48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDsiPiYjMTI4NTEyOzwvc3Bhbj48YnI+DQom Z3Q7IDxicj4NCiZndDsmbmJzcDsgJm5ic3A7IEd5YW48YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJz cDsgJm5ic3A7IFNlbnQgZnJvbSBteSBpUGhvbmU8YnI+DQomZ3Q7IDxicj4NCiZndDsmZ3Q7IE9u IE9jdCAxNCwgMjAxOSwgYXQgNzoxNCBQTSwgUm9uIEJvbmljYSAmbHQ7cmJvbmljYT08YSBocmVm PSJtYWlsdG86NDBqdW5pcGVyLm5ldEBkbWFyYy5pZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPjQw anVuaXBlci5uZXRAZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7Jmd0OyA8 YnI+DQomZ3Q7Jmd0OyBKZW4sPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgSSBhbSByZWFk eSB0byByZXF1ZXN0IHB1YmxpY2F0aW9uLiBCdXQgYmVmb3JlIHdlIGRvIHRoYXQsIHdlIG5lZWQg YSBkb2N1bWVudCBzaGVwaGVyZC48YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyBFcmljLDxi cj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IFdhcyB0aGVyZSBhbnlvbmUgd2hvIHdhcyBjbG9z ZSB0byB0aGUgZHJhZnQsIGJ1dCBub3QgYSBjby1hdXRob3IuIFdlIGNhbiB2aWN0aW10ZWVyIHRo YXQgcGVyc29uLjxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtS b248YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7 Jmd0OyBKdW5pcGVyIEJ1c2luZXNzIFVzZSBPbmx5PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZn dDsgLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08YnI+DQomZ3Q7Jmd0OyBGcm9tOiBFcmljIFZ5 bmNrZSAoZXZ5bmNrZSkgJmx0OzxhIGhyZWY9Im1haWx0bzpldnluY2tlQGNpc2NvLmNvbSIgdGFy Z2V0PSJfYmxhbmsiPmV2eW5ja2VAY2lzY28uY29tPC9hPiZndDsNCjxicj4NCiZndDsmZ3Q7IFNl bnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDEyLCAyMDE5IDM6NDEgQU08YnI+DQomZ3Q7Jmd0OyBUbzog PGEgaHJlZj0ibWFpbHRvOm9wc2VjQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+b3BzZWNAaWV0 Zi5vcmc8L2E+PGJyPg0KJmd0OyZndDsgQ2M6IEplbiBMaW5rb3ZhICZsdDs8YSBocmVmPSJtYWls dG86ZnVycnkxM0BnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5mdXJyeTEzQGdtYWlsLmNvbTwv YT4mZ3Q7OyBSb24gQm9uaWNhICZsdDs8YSBocmVmPSJtYWlsdG86cmJvbmljYUBqdW5pcGVyLm5l dCIgdGFyZ2V0PSJfYmxhbmsiPnJib25pY2FAanVuaXBlci5uZXQ8L2E+Jmd0Ozxicj4NCiZndDsm Z3Q7IFN1YmplY3Q6IFJlOiBbT1BTRUNdIEktRCBBY3Rpb246IGRyYWZ0LWlldGYtb3BzZWMtdjYt MjAudHh0PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgQXMgeW91IHdpbGwgbm90aWNlIGlu IDxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovd3d3LmlldGYub3Jn L3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgt X3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ2ZDMFFy WWckIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6 Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtb3BzZWMtdjYtMjBfXzshOFdv QTZSakM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5 alhaZ01NdVZDZkMwUXJZZyQ8L2E+Jm5ic3A7IHRoaXMgbGF0ZXN0IHJldmlzaW9uIGFkZHJlc3Nl cyBhIHN1Z2dlc3Rpb24gYnkgR3lhbiBNaXNocmEgaXNzdWVkIGR1cmluZyB0aGUgV29ya2luZyBH cm91cA0KIExhc3QgQ2FsbC4gT3RoZXIgY2hhbmdlcyBhcmUgbWFpbmx5IHJlcGxhY2luZyB0aGUg bm9ybWF0aXZlICZxdW90O01VU1QmcXVvdDsgYW5kICZxdW90O1NIT1VMRCZxdW90OyBhcyBpdCBp cyBhbiBpbmZvcm1hdGlvbmFsIGRvY3VtZW50IChzbyBpdCBpcyBub3cgJnF1b3Q7bXVzdCZxdW90 OyBhbmQgJnF1b3Q7c2hvdWxkJnF1b3Q7KSAmIzQzOyByZW1vdmluZyBhbiB1bnVzZWQgaW5mb3Jt YXRpb25hbCByZWZlcmVuY2UuPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgSmVuIGFuZCBS b24sIGFzIHRoZSBhdXRob3JzIGhhdmUgYWRkcmVzc2VkIGFsbCBjb21tZW50cyByZWNlaXZlZCBk dXJpbmcgdGhlIFdHTEMgKGFjdHVhbGx5IGJ5IG9ubHkgb25lIHJldmlld2VyKSBhbmQgdGhlIGV4 dGVuc2l2ZSByZXZpZXcgYnkgSmVuLCBtYXkgSSBraW5kbHkgcmVxdWVzdCBwdWJsaWNhdGlvbiBv ZiB0aGlzIGRvY3VtZW50Pzxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IFRoYW5rJm5ic3A7 IHlvdSBhbGw8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyAtw6lyaWMgLW1lcmlrZSAtIGtr IC1lbm5vPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgT24gMTIv MTAvMjAxOSwgMDk6MzQsICZxdW90O09QU0VDIG9uIGJlaGFsZiBvZiA8YSBocmVmPSJtYWlsdG86 aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+DQppbnRlcm5ldC1kcmFm dHNAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86b3BzZWMtYm91bmNlc0Bp ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPm9wc2VjLWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJl aGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxicj4NCiZn dDsmZ3Q7IDxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwO0EgTmV3IElu dGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0 cyBkaXJlY3Rvcmllcy48YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtUaGlzIGRyYWZ0IGlzIGEg d29yayBpdGVtIG9mIHRoZSBPcGVyYXRpb25hbCBTZWN1cml0eSBDYXBhYmlsaXRpZXMgZm9yIElQ IE5ldHdvcmsgSW5mcmFzdHJ1Y3R1cmUgV0cgb2YgdGhlIElFVEYuPGJyPg0KJmd0OyZndDsgPGJy Pg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1RpdGxl Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs6IE9wZXJhdGlvbmFsIFNl Y3VyaXR5IENvbnNpZGVyYXRpb25zIGZvciBJUHY2IE5ldHdvcmtzPGJyPg0KJmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0F1dGhvcnMmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7OiBFcmljIFZ5bmNrZTxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtLaXJhbiBLLiBDaGl0dGltYW5l bmk8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7TWVyaWtlIEthZW88YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7RW5ubyBSZXk8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO0ZpbGVuYW1lJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogZHJhZnQt aWV0Zi1vcHNlYy12Ni0yMC50eHQ8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO1BhZ2VzJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs6IDUyPGJy Pg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtEYXRlJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgOiAyMDE5LTEwLTEyPGJyPg0KJmd0OyZndDsgPGJy Pg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7QWJzdHJhY3Q6PGJyPg0KJmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyBLbm93bGVkZ2UgYW5kIGV4cGVyaWVuY2Ugb24gaG93IHRvIG9wZXJhdGUgSVB2 NCBzZWN1cmVseSBpczxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgYXZhaWxhYmxl OiB3aGV0aGVyIGl0IGlzIHRoZSBJbnRlcm5ldCBvciBhbiBlbnRlcnByaXNlIGludGVybmFsPGJy Pg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyBuZXR3b3JrLiZuYnNwOyBIb3dldmVyLCBJ UHY2IHByZXNlbnRzIHNvbWUgbmV3IHNlY3VyaXR5IGNoYWxsZW5nZXMuJm5ic3A7IFJGQzxicj4N CiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgNDk0MiBkZXNjcmliZXMgdGhlIHNlY3VyaXR5 IGlzc3VlcyBpbiB0aGUgcHJvdG9jb2wgYnV0IG5ldHdvcms8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7IG1hbmFnZXJzIGFsc28gbmVlZCBhIG1vcmUgcHJhY3RpY2FsLCBvcGVyYXRp b25zLW1pbmRlZCBkb2N1bWVudCB0bzxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsg ZW51bWVyYXRlIGFkdmFudGFnZXMgYW5kL29yIGRpc2FkdmFudGFnZXMgb2YgY2VydGFpbiBjaG9p Y2VzLjxicj4NCiZndDsmZ3Q7IDxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgVGhp cyBkb2N1bWVudCBhbmFseXplcyB0aGUgb3BlcmF0aW9uYWwgc2VjdXJpdHkgaXNzdWVzIGluIHNl dmVyYWw8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7IHBsYWNlcyBvZiBhIG5ldHdv cmsgKGVudGVycHJpc2VzLCBzZXJ2aWNlIHByb3ZpZGVycyBhbmQgcmVzaWRlbnRpYWw8YnI+DQom Z3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7IHVzZXJzKSBhbmQgcHJvcG9zZXMgdGVjaG5pY2Fs IGFuZCBwcm9jZWR1cmFsIG1pdGlnYXRpb25zIHRlY2huaXF1ZXMuPGJyPg0KJmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyBTb21lIHZlcnkgc3BlY2lmaWMgcGxhY2VzIG9mIGEgbmV0d29yayBz dWNoIGFzIHRoZSBJbnRlcm5ldCBvZiBUaGluZ3M8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsg Jm5ic3A7IGFyZSBub3QgZGlzY3Vzc2VkIGluIHRoaXMgZG9jdW1lbnQuPGJyPg0KJmd0OyZndDsg PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7VGhlIElFVEYgZGF0YXRy YWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6PGJyPg0KJmd0OyZndDsmbmJzcDsg Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1vcHNlYy12Ni9fXzshOFdvQTZSakM4MWMhUjJ2 SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDVmd0 bW5HZCQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1vcHNlYy12Ni9fXzshOFdvQTZS akM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alha Z01NdVZDVmd0bW5HZCQ8L2E+DQo8YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAm bmJzcDtUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFibGUgYXQ6PGJyPg0K Jmd0OyZndDsmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9f X2h0dHBzOi90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtb3BzZWMtdjYtMjBfXzshOFdv QTZSakM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5 alhaZ01NdVZDUWRBcS1uRyQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3VybGRlZmVuc2UuY29t L3YzL19faHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtb3BzZWMtdjYtMjBf XzshOFdvQTZSakM4MWMhUjJ2SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81 VGwxMVo5alhaZ01NdVZDUWRBcS1uRyQ8L2E+DQo8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDs8 YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtb3BzZWMtdjYtMjBfXzshOFdvQTZSakM4MWMhUjJ2 SC1fdjNOdWdpd0lmVGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDVGFG V3YzaCQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLW9wc2VjLXY2LTIwX187 IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRs MTFaOWpYWmdNTXVWQ1RhRld2M2gkPC9hPg0KPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsm bmJzcDsgJm5ic3A7QSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxl IGF0Ojxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5z ZS5jb20vdjMvX19odHRwczovd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLW9w c2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRy SUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ2ZDMFFyWWckIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6 Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1k cmFmdC1pZXRmLW9wc2VjLXY2LTIwX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNj RUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ2ZDMFFyWWckPC9hPg0KPGJyPg0K Jmd0OyZndDsgPGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7UGxlYXNl IG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUg b2Ygc3VibWlzc2lvbjxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwO3VudGlsIHRoZSBodG1saXpl ZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgPGEgaHJlZj0iaHR0cDovL3Rvb2xz LmlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+DQp0b29scy5pZXRmLm9yZzwvYT4uPGJyPg0KJmd0 OyZndDsgPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7SW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNv IGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Ojxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNw OzxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19mdHA6L2Z0cC5pZXRmLm9yZy9p bnRlcm5ldC1kcmFmdHMvX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpH QVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1hrdVVlYmQkIiB0YXJnZXQ9Il9ibGFuayI+ aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2Z0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1k cmFmdHMvX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJZlRjWGNjRUM4OXpHQVhZUjRySUI3 b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1hrdVVlYmQkPC9hPg0KPGJyPg0KJmd0OyZndDsgPGJyPg0K Jmd0OyZndDsmbmJzcDsgJm5ic3A7X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX188YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDtPUFNFQyBtYWlsaW5nIGxpc3Q8 YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDs8YSBocmVmPSJtYWlsdG86T1BTRUNAaWV0Zi5vcmci IHRhcmdldD0iX2JsYW5rIj5PUFNFQ0BpZXRmLm9yZzwvYT48YnI+DQomZ3Q7Jmd0OyZuYnNwOyAm bmJzcDs8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL29wc2VjX187IThXb0E2UmpDODFjIVIydkgtX3YzTnVnaXdJ ZlRjWGNjRUM4OXpHQVhZUjRySUI3b014Z1ZfNVRsMTFaOWpYWmdNTXVWQ1ZqQS03dDIkIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vb3BzZWNfXzshOFdvQTZSakM4MWMhUjJ2SC1fdjNOdWdpd0lm VGNYY2NFQzg5ekdBWFlSNHJJQjdvTXhnVl81VGwxMVo5alhaZ01NdVZDVmpBLTd0MiQ8L2E+DQo8 YnI+DQomZ3Q7Jmd0OyA8YnI+DQomZ3Q7Jmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsmZ3Q7IE9QU0VDIG1haWxpbmcgbGlzdDxicj4N CiZndDsmZ3Q7IDxhIGhyZWY9Im1haWx0bzpPUFNFQ0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsi Pk9QU0VDQGlldGYub3JnPC9hPjxicj4NCiZndDsmZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vb3BzZWMiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29wc2VjPC9hPjxicj4NCiZndDsgPGJyPg0KJmd0 OyA8YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxicj4NCk9QU0VDIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpPUFNFQ0Bp ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPk9QU0VDQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9 Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb3BzZWMiIHRhcmdldD0iX2Js YW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL29wc2VjPC9hPjxvOnA+ PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRt bD4NCg== --_000_FDAA1323AD39406894306B705A619F95ciscocom_-- From nobody Mon Oct 28 15:13:25 2019 Return-Path: X-Original-To: opsec@ietfa.amsl.com Delivered-To: opsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AC511200B8 for ; Mon, 28 Oct 2019 15:13:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gBAvN2qIavfl for ; Mon, 28 Oct 2019 15:13:21 -0700 (PDT) Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D37A4120096 for ; Mon, 28 Oct 2019 15:13:20 -0700 (PDT) Received: by mail-qk1-x72b.google.com with SMTP id h6so1993809qkf.2 for ; Mon, 28 Oct 2019 15:13:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=kbUEzDr/dGrJ+JmyMMxXmcrseDfbyRlCzfsKriglfvA=; b=EtXVXOTwmZz74AbZL0K3oM1FjehKYxwwDP5XS2YfT3fz8PBv3aBqEvHvoWvZ/zhrG2 q4VfUfkL2KjiMtHENVo8qGYC4ruEJqZmdaSBNWzQw8LH+0wePaFNCrZxcF8wNSpaF1/9 LgldGV8LSHKx87O49AX0oCGnF+mL/Vy4VGQ5ykTqeZMh7qckEmgVicPgYMR+Oa6RQU5M JRPwxM2Xi/L8sSCSLZ1vdGkNWVeIoPjmI4cUDdjQLKmRCTNbgfDJgXT2pkiw7jzjl6UJ MimnoYEY3WZ96QAsKc89EqNCoYyGlpxqAItfL5qyd1CcGBQGNEF/j99IjPmVzZYdNpCV sGVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=kbUEzDr/dGrJ+JmyMMxXmcrseDfbyRlCzfsKriglfvA=; b=iU705d9ta2kdhF1c8Pz6Frhw9qfFKp0W9gOoFJ+QiFIXLrb9W/TkwosGRKItbpyt7N RDKwqEPFVax41w3jwToEw6wky4WR8CDjfuLIiCiYq7buJJ/6pFszUrvsURVJbnkOGFEP 9Fa1A5KtM52dr/JXqUSLms4PpFAJoYHLX65cajw4RGAMwL3f6EVuZvlTB/hU5tuAsjDk U/r8A6eIJuqYDlRd9uECpJeE8JH9aNBhVFYzWbfEIs9uH1j62Pdnd5+xtZsm/rqV+05I +c00Z5Xd8wU9P5N3pF56zI8m7YX7TSx/0yXauhGccNFWpK+aNForg1jpiGjmWTbC3kkA LFwg== X-Gm-Message-State: APjAAAUl2vqfBCsSUQeNFLWNlNBQJ5p+GWVlRashhH4wbolrFACjdRXP ykynYvftewAYOiNxc1eDlEU= X-Google-Smtp-Source: APXvYqz84gCLtCTaWReOTkQyyjVcWC5m09Xs9l34Y5NpbwD+C3jDJsi24RfuRFlBZXVZYO4yAeQ9Ag== X-Received: by 2002:ae9:edc6:: with SMTP id c189mr18340870qkg.351.1572300799634; Mon, 28 Oct 2019 15:13:19 -0700 (PDT) Received: from ?IPv6:2600:1003:b00b:6ad6:fccc:6640:7629:4cca? ([2600:1003:b00b:6ad6:fccc:6640:7629:4cca]) by smtp.gmail.com with ESMTPSA id r36sm10494926qta.27.2019.10.28.15.13.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 28 Oct 2019 15:13:18 -0700 (PDT) From: Gyan Mishra X-Google-Original-From: Gyan Mishra Content-Type: multipart/alternative; boundary=Apple-Mail-4CD6E959-0330-43FE-9E22-88B51ED5A412 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (16G102) In-Reply-To: Date: Mon, 28 Oct 2019 18:13:18 -0400 Cc: KK Chittimaneni , Ron Bonica , "opsec@ietf.org" Content-Transfer-Encoding: 7bit Message-Id: <0190B1AA-0805-486B-A29C-E40343EB772D@gmail.com> References: <157086559138.1393.1472645196672102960@ietfa.amsl.com> <2C9BFAF1-63FE-43BD-9016-0A1F14CF79EF@gmail.com> To: "Eric Vyncke (evyncke)" Archived-At: Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 22:13:24 -0000 --Apple-Mail-4CD6E959-0330-43FE-9E22-88B51ED5A412 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thank you=20 Gyan Sent from my iPhone > On Oct 26, 2019, at 1:58 AM, Eric Vyncke (evyncke) wro= te: >=20 > No IPR on my side. > =20 > -=C3=A9ric > =20 > From: Kiran Kumar Chittimaneni > Date: Saturday, 26 October 2019 at 00:11 > To: Gyan Mishra > Cc: Eric Vyncke , Ron Bonica , "opsec@ietf.org" > Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt > =20 > Hi Gyan, > =20 > No IPRs on my end. > =20 > Thanks, > KK > =20 > On Thu, Oct 24, 2019 at 11:36 AM Gyan Mishra wrote= : > Hi Eric=20 >=20 > I am completing the Shepards writeup in essay format. Plan to submit in th= e next few days. >=20 > As far as WG consensus and history on the document from its initial I-D st= ate were there any nits other then what is public in the tracker or any WG c= onsensus issues or topics discussed that I should be aware of to include in t= he write up. I assume we finally reached WG consensus on all topics with no= outstanding issues as we are now ready to publish. >=20 > Are there any IPRs disclosed or outstanding.=20 >=20 > Regards, >=20 > Gyan=20 >=20 > Sent from my iPhone >=20 > > On Oct 15, 2019, at 2:12 AM, Eric Vyncke (evyncke) w= rote: > >=20 > > Gyan, > >=20 > > Thank you very much for being 'victimteered' as the document shepherd [1= ] __ > >=20 > > Thank you Jen and Ron for your support > >=20 > > Regards > >=20 > > -=C3=A9ric and the authors -kk -merike -enno > >=20 > > [1] see https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/edit/shephe= rdwriteup/ (you need to create a free account on datatracker if not yet done= ), the mailing list archive should also be a source of information https://m= ailarchive.ietf.org/arch/browse/opsec/?q=3Ddraft-ietf-opsec-v6 > >=20 > >=20 > > On 15/10/2019, 01:54, "Gyan Mishra" wrote: > >=20 > > Ron > >=20 > > I read the document thoroughly in its entirety and do have valuable r= eal world experience in this space so I am volunteering. > >=20 > > Not sure what I am getting myself into.=F0=9F=98=80 > >=20 > > Gyan > >=20 > > Sent from my iPhone > >=20 > >> On Oct 14, 2019, at 7:14 PM, Ron Bonica wrote: > >>=20 > >> Jen, > >>=20 > >> I am ready to request publication. But before we do that, we need a doc= ument shepherd. > >>=20 > >> Eric, > >>=20 > >> Was there anyone who was close to the draft, but not a co-author. We ca= n victimteer that person. > >>=20 > >> Ron > >>=20 > >>=20 > >>=20 > >> Juniper Business Use Only > >>=20 > >> -----Original Message----- > >> From: Eric Vyncke (evyncke) =20 > >> Sent: Saturday, October 12, 2019 3:41 AM > >> To: opsec@ietf.org > >> Cc: Jen Linkova ; Ron Bonica > >> Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt > >>=20 > >> As you will notice in https://urldefense.com/v3/__https://www.ietf.org/= rfcdiff?url2=3Ddraft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC8= 9zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCfC0QrYg$ this latest revision addresses a= suggestion by Gyan Mishra issued during the Working Group Last Call. Other c= hanges are mainly replacing the normative "MUST" and "SHOULD" as it is an in= formational document (so it is now "must" and "should") + removing an unused= informational reference. > >>=20 > >> Jen and Ron, as the authors have addressed all comments received during= the WGLC (actually by only one reviewer) and the extensive review by Jen, m= ay I kindly request publication of this document? > >>=20 > >> Thank you all > >>=20 > >> -=C3=A9ric -merike - kk -enno > >>=20 > >>=20 > >> On 12/10/2019, 09:34, "OPSEC on behalf of internet-drafts@ietf.org" wrote: > >>=20 > >>=20 > >> A New Internet-Draft is available from the on-line Internet-Drafts di= rectories. > >> This draft is a work item of the Operational Security Capabilities fo= r IP Network Infrastructure WG of the IETF. > >>=20 > >> Title : Operational Security Considerations for IPv= 6 Networks > >> Authors : Eric Vyncke > >> Kiran K. Chittimaneni > >> Merike Kaeo > >> Enno Rey > >> Filename : draft-ietf-opsec-v6-20.txt > >> Pages : 52 > >> Date : 2019-10-12 > >>=20 > >> Abstract: > >> Knowledge and experience on how to operate IPv4 securely is > >> available: whether it is the Internet or an enterprise internal > >> network. However, IPv6 presents some new security challenges. RFC= > >> 4942 describes the security issues in the protocol but network > >> managers also need a more practical, operations-minded document to= > >> enumerate advantages and/or disadvantages of certain choices. > >>=20 > >> This document analyzes the operational security issues in several > >> places of a network (enterprises, service providers and residentia= l > >> users) and proposes technical and procedural mitigations technique= s. > >> Some very specific places of a network such as the Internet of Thi= ngs > >> are not discussed in this document. > >>=20 > >>=20 > >> The IETF datatracker status page for this draft is: > >> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ie= tf-opsec-v6/__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9= jXZgMMuVCVgtmnGd$=20 > >>=20 > >> There are also htmlized versions available at: > >> https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-op= sec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZ= gMMuVCQdAq-nG$=20 > >> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/dra= ft-ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_= 5Tl11Z9jXZgMMuVCTaFWv3h$=20 > >>=20 > >> A diff from the previous version is available at: > >> https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft= -ietf-opsec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5T= l11Z9jXZgMMuVCfC0QrYg$=20 > >>=20 > >>=20 > >> Please note that it may take a couple of minutes from the time of sub= mission > >> until the htmlized version and diff are available at tools.ietf.org. > >>=20 > >> Internet-Drafts are also available by anonymous FTP at: > >> https://urldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!8W= oA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCXkuUebd$=20= > >>=20 > >> _______________________________________________ > >> OPSEC mailing list > >> OPSEC@ietf.org > >> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/ops= ec__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCV= jA-7t2$=20 > >>=20 > >> _______________________________________________ > >> OPSEC mailing list > >> OPSEC@ietf.org > >> https://www.ietf.org/mailman/listinfo/opsec > >=20 > >=20 >=20 > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec --Apple-Mail-4CD6E959-0330-43FE-9E22-88B51ED5A412 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thank you 

Gyan
=
Sent from my iPhone

On Oct 26, 2019, at 1:58 AM, Eric Vyncke (evyncke) <evyncke@cisco.com> wrote:

No IPR on my side.

 

-=C3=A9ric

 

From: Kiran Kumar Chittima= neni <kk.chittimaneni@gmail.= com>
Date: Saturday, 26 October 2019 at 00:11
To: Gyan Mishra <hayabusa= gsm@gmail.com>
Cc: Eric Vyncke <evyncke@cisc= o.com>, Ron Bonica <rbonica=3D40juniper.net@dmarc.ietf.org>, "opsec@ietf.org" <opsec@ietf.org>
Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt

 

Hi Gyan,

 

No IPRs on my end.<= /o:p>

 

Thanks,

KK

 

On Thu, Oct 24, 2019 at 1= 1:36 AM Gyan Mishra <hayabusagsm= @gmail.com> wrote:

Hi Eric

I am completing the Shepards writeup in essay format. Plan to submit in the n= ext few days.

As far as WG consensus and history on the document from its initial I-D stat= e were there any nits other then what is public in the tracker or any WG con= sensus issues or topics discussed that I should be aware of to include in th= e write up.  I assume we finally reached WG consensus on all topics with no outstanding issues as we are now= ready to publish.

Are there any IPRs disclosed or outstanding.

Regards,

Gyan

Sent from my iPhone

> On Oct 15, 2019, at 2:12 AM, Eric Vyncke (evyncke) <evyncke@cisco.com> wrote:
>
> Gyan,
>
> Thank you very much for being 'victimteered' as the document shepherd [= 1] __
>
> Thank you Jen and Ron for your support
>
> Regards
>
> -=C3=A9ric and the authors -kk -merike -enno
>
> [1] see https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/edit/shepherdwriteup/ (you need to create a free account on datatracker if not yet done), the m= ailing list archive should also be a source of information https://mailarchive.ietf.org/arch/browse/opsec/?q=3Ddraft-ietf-opsec-v6<= br> >
>
> On 15/10/2019, 01:54, "Gyan Mishra" <hayabusagsm@gmail.com> wrote:
>
>    Ron
>
>    I read the document thoroughly in its entirety and do have= valuable real world experience in this space so I am volunteering.
>
>    Not sure what I am getting myself into.=F0=9F=98=80
>
>    Gyan
>
>    Sent from my iPhone
>
>> On Oct 14, 2019, at 7:14 PM, Ron Bonica <rbonica=3D40juniper.net@dmarc.iet= f.org> wrote:
>>
>> Jen,
>>
>> I am ready to request publication. But before we do that, we need a= document shepherd.
>>
>> Eric,
>>
>> Was there anyone who was close to the draft, but not a co-author. W= e can victimteer that person.
>>
>>                   = ;                     &nbs= p;            Ron
>>
>>
>>
>> Juniper Business Use Only
>>
>> -----Original Message-----
>> From: Eric Vyncke (evyncke) <evyncke@cisco.com>
>> Sent: Saturday, October 12, 2019 3:41 AM
>> To: opsec@ietf.= org
>> Cc: Jen Linkova <furry13@gmail.com>; Ron Bonica <rbonica@juniper.net>
>> Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-v6-20.txt
>>
>> As you will notice in = https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-o= psec-v6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jX= ZgMMuVCfC0QrYg$  this latest revision addresses a suggestion by Gya= n Mishra issued during the Working Group Last Call. Other changes are mainly replacing the normative "MUST" and "SHO= ULD" as it is an informational document (so it is now "must" and "should") += removing an unused informational reference.
>>
>> Jen and Ron, as the authors have addressed all comments received du= ring the WGLC (actually by only one reviewer) and the extensive review by Je= n, may I kindly request publication of this document?
>>
>> Thank  you all
>>
>> -=C3=A9ric -merike - kk -enno
>>
>>
>> On 12/10/2019, 09:34, "OPSEC on behalf of internet-drafts@ietf.org" <opsec-bounces@ietf.org on behalf of internet-draft= s@ietf.org> wrote:
>>
>>
>>   A New Internet-Draft is available from the on-line Inte= rnet-Drafts directories.
>>   This draft is a work item of the Operational Security C= apabilities for IP Network Infrastructure WG of the IETF.
>>
>>           Title      &= nbsp;    : Operational Security Considerations for IPv6 Networks >>           Authors     =    : Eric Vyncke
>>                   = ;          Kiran K. Chittimaneni
>>                   = ;          Merike Kaeo
>>                   = ;          Enno Rey
>>       Filename        : dra= ft-ietf-opsec-v6-20.txt
>>       Pages          &= nbsp;: 52
>>       Date          &n= bsp; : 2019-10-12
>>
>>   Abstract:
>>      Knowledge and experience on how to operate IPv4= securely is
>>      available: whether it is the Internet or an ent= erprise internal
>>      network.  However, IPv6 presents some new s= ecurity challenges.  RFC
>>      4942 describes the security issues in the proto= col but network
>>      managers also need a more practical, operations= -minded document to
>>      enumerate advantages and/or disadvantages of ce= rtain choices.
>>
>>      This document analyzes the operational security= issues in several
>>      places of a network (enterprises, service provi= ders and residential
>>      users) and proposes technical and procedural mi= tigations techniques.
>>      Some very specific places of a network such as t= he Internet of Things
>>      are not discussed in this document.
>>
>>
>>   The IETF datatracker status page for this draft is:
= >>   https://urldefe= nse.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/__;!8WoA6R= jC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCVgtmnGd$
>>
>>   There are also htmlized versions available at:
>>   https://urldefense= .com/v3/__https://tools.ietf.org/html/draft-ietf-opsec-v6-20__;!8WoA6RjC81c!= R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCQdAq-nG$
>>   https://= urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-ietf-opsec-v= 6-20__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuV= CTaFWv3h$
>>
>>   A diff from the previous version is available at:
>>   https://ur= ldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-opsec-v6-20= __;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCfC0= QrYg$
>>
>>
>>   Please note that it may take a couple of minutes from t= he time of submission
>>   until the htmlized version and diff are available at tools.ietf.org.
>>
>>   Internet-Drafts are also available by anonymous FTP at:=
>>   https://urldefense.com/v3/__ftp:/= /ftp.ietf.org/internet-drafts/__;!8WoA6RjC81c!R2vH-_v3NugiwIfTcXccEC89zGAXYR= 4rIB7oMxgV_5Tl11Z9jXZgMMuVCXkuUebd$
>>
>>   _______________________________________________
>>   OPSEC mailing list
>>   OPS= EC@ietf.org
>>   https://urldefense.com/v3= /__https://www.ietf.org/mailman/listinfo/opsec__;!8WoA6RjC81c!R2vH-_v3NugiwI= fTcXccEC89zGAXYR4rIB7oMxgV_5Tl11Z9jXZgMMuVCVjA-7t2$
>>
>> _______________________________________________
>> OPSEC mailing list
>> OPSEC@ietf.org<= /a>
>> https://www.ietf.org/mailman/listinfo/opsec
>
>

_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/opsec

= --Apple-Mail-4CD6E959-0330-43FE-9E22-88B51ED5A412--