From nobody Mon Jan  4 04:00:22 2021
Return-Path: <trac@tools.ietf.org>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD4323A0C6A for <opsec@ietfa.amsl.com>; Mon,  4 Jan 2021 04:00:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level: 
X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 77NUpd6xjq1V for <opsec@ietfa.amsl.com>; Mon,  4 Jan 2021 04:00:18 -0800 (PST)
Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [64.170.98.42]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B4AC3A0C67 for <opsec@ietf.org>; Mon,  4 Jan 2021 04:00:18 -0800 (PST)
Received: from localhost ([127.0.0.1]:54428 helo=zinfandel.tools.ietf.org ident=www-data) by zinfandel.tools.ietf.org with esmtp (Exim 4.80) (envelope-from <trac@tools.ietf.org>) id 1kwOX3-0007ZB-Hb; Mon, 04 Jan 2021 04:00:17 -0800
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: "opsec issue tracker" <trac@tools.ietf.org>
X-Trac-Version: 0.12.5
Precedence: bulk
Cc: opsec@ietf.org
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.5, by Edgewall Software
To: roger@rogerprice.org
X-Trac-Project: IETF Successes and Failures
Date: Mon, 04 Jan 2021 12:00:17 -0000
Reply-To: opsec@ietf.org
X-URL: http://tools.ietf.org/misc/outcomes/
X-Trac-Ticket-URL: https://trac.tools.ietf.org/misc/outcomes/ticket/3
Message-ID: <068.6ad53292a0eaefd51561ae1bc31a242f@tools.ietf.org>
X-Trac-Ticket-ID: 3
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Rcpt-To: roger@rogerprice.org, opsec@ietf.org
X-SA-Exim-Mail-From: trac@tools.ietf.org
X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false
X-Clacks-Overhead: GNU Terry Pratchett
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/LredhjJvSN3RfFtPnWLy-NzDKLE>
Subject: [OPSEC] [IETF Successes and Failures] #3 (component1): xml2rfc: hyphen not escaped in unicode.py
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jan 2021 12:00:21 -0000

#3: xml2rfc: hyphen not escaped in unicode.py

 Debian Stretch, uname -a reports:
 Linux maria 4.9.0-4-amd64 #1 SMP Debian 4.9.65-3+deb9u1 (2017-12-23)
 x86_64 GNU/Linux
 Command python3 reports:
 Python 3.8.1 (default, Feb 22 2020, 11:56:23) [GCC 6.3.0 20170516] on
 linux

 When I enter command "xml2rfc -h" repeatedly, it fails half the time with
 error message:

 Traceback (most recent call last):
 File "/usr/bin/xml2rfc", line 7, in <module>
 from xml2rfc.run import main
 File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/__init__.py", line 14, in <module>
 from xml2rfc.parser import  XmlRfcError, CachingResolver, XmlRfcParser,
 XmlRfc
 File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/parser.py", line 20, in <module>
 from xml2rfc.writers import base
 File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/writers/__init__.py", line 2, in <module>
 from xml2rfc.writers.base import RfcWriterError
 File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/writers/base.py", line 30, in <module>
 from xml2rfc.util.unicode import ( punctuation, unicode_replacements,
 unicode_content_tags, bare_unicode_tags,
 File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/util/unicode.py", line 260, in <module>
 punctuation_re = re.compile(r'[%s]'%''.join(list(punctuation.keys())))
 File "/usr/lib/python3.5/re.py", line 224, in compile
 return _compile(pattern, flags)
 File "/usr/lib/python3.5/re.py", line 293, in _compile
 p = sre_compile.compile(pattern, flags)
 File "/usr/lib/python3.5/sre_compile.py", line 536, in compile
 p = sre_parse.parse(p, flags)
 File "/usr/lib/python3.5/sre_parse.py", line 829, in parse
 p = _parse_sub(source, pattern, 0)
 File "/usr/lib/python3.5/sre_parse.py", line 437, in _parse_sub
 itemsappend(_parse(source, state))
 File "/usr/lib/python3.5/sre_parse.py", line 575, in _parse
 raise source.error(msg, len(this) + 1 + len(that))
 sre_constants.error: bad character range −-“ at position 3

 At line 260 in .../xml2rfc/util/unicode.py I inserted two lines to display
 the value of punctuation.keys()

 259-punctuation.update(unicode_quote_replacements)
 260-import sys
 261-print("unicode.py: list(punctuation.keys()) {}"
 .format(list(punctuation.keys())),file=sys.stderr)
 262-punctuation_re = re.compile(r'[%s]'%''.join(list(punctuation.keys())))

 When xml2rfc succeeded, I saw

 unicode.py: list(punctuation.keys()) = ['\u2002', '-', '‐', '′', '–', '´',
 '…', '’',
 '−', '„', '—', '\u2009', '‚', '‘', '”', '“', '\u2003']
 unicode.py: list(punctuation.keys()) = ['´', '„', '\u2003', '‚', '−', '“',
 '’', '‘', '-', '…',
 '\u2009', '—', '–', '”', '′', '‐', '\u2002']

 When xml2rfc failed, I saw

 unicode.py: list(punctuation.keys()) = ['´', '\u2002', '−', '-', '“', '„',
 '‘', '′',
 '‚', '–', '…', '’', '‐', '”', '—', '\u2009', '\u2003']
 unicode.py: list(punctuation.keys()) = ['‐', '\u2003', '„', '\u2002',
 '\u2009', '‚',
 '—', '’', '−', '…', '‘', '′', '-', '“', '”', '´', '–']

 It looks as if the character "-" is being wrongly interpreted by re as a
 range indicator.
 Perhaps it should be escaped.

 My apologies for the wretched formatting of this message.
 Roger

-- 
----------------------------------+----------------------
 Reporter:  roger@rogerprice.org  |      Owner:  somebody
     Type:  defect                |     Status:  new
 Priority:  major                 |  Milestone:
Component:  component1            |    Version:
 Keywords:  re escape hyphen      |
----------------------------------+----------------------

Ticket URL: <https://trac.tools.ietf.org/misc/outcomes/ticket/3>
IETF Successes and Failures <http://tools.ietf.org/misc/outcomes/>
IETF Successes and Failures


From nobody Fri Jan  8 03:59:02 2021
Return-Path: <trac@tools.ietf.org>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9B4A3A0B05 for <opsec@ietfa.amsl.com>; Fri,  8 Jan 2021 03:59:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bYhaTjf0ntMR for <opsec@ietfa.amsl.com>; Fri,  8 Jan 2021 03:58:59 -0800 (PST)
Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [64.170.98.42]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0859E3A0B01 for <opsec@ietf.org>; Fri,  8 Jan 2021 03:58:58 -0800 (PST)
Received: from localhost ([127.0.0.1]:43938 helo=zinfandel.tools.ietf.org ident=www-data) by zinfandel.tools.ietf.org with esmtp (Exim 4.80) (envelope-from <trac@tools.ietf.org>) id 1kxqPy-0006bu-BK; Fri, 08 Jan 2021 03:58:58 -0800
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "opsec issue tracker" <trac@tools.ietf.org>
X-Trac-Version: 0.12.5
Precedence: bulk
Cc: opsec@ietf.org
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.5, by Edgewall Software
To: roger@rogerprice.org
X-Trac-Project: IETF Successes and Failures
Date: Fri, 08 Jan 2021 11:58:58 -0000
Reply-To: opsec@ietf.org
X-URL: http://tools.ietf.org/misc/outcomes/
X-Trac-Ticket-URL: https://trac.tools.ietf.org/misc/outcomes/ticket/4
Message-ID: <068.8503b924659b96e8b3debadbeb5df9ce@tools.ietf.org>
X-Trac-Ticket-ID: 4
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Rcpt-To: roger@rogerprice.org, opsec@ietf.org
X-SA-Exim-Mail-From: trac@tools.ietf.org
X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false
X-Clacks-Overhead: GNU Terry Pratchett
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/mYPbPh2-5u-Vn2zN4bXFE6PxHBQ>
Subject: [OPSEC] [IETF Successes and Failures] #4 (component1): text.py: endless loop in function paginate
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jan 2021 11:59:01 -0000

#4: text.py: endless loop in function paginate

 Function paginate got into an endless loop so I added some calls to print,
 let it run and stopped the loop with a Ctl-c. I saw this attached output:

 {{{

 text.py: start_lineno=0 textlen=999 page=1
 text.py: break_lineno=52 break_target=52
 text.py: olen=7 wlen=1 blen=8 elem.tag=t
 text.py: start_lineno=45 textlen=999 page=2
 text.py: break_lineno=93 break_target=93
 text.py: olen=4 wlen=119 blen=123 elem.tag=t
 text.py: start_lineno=93 textlen=999 page=3
 text.py: break_lineno=141 break_target=141
 text.py: olen=52 wlen=71 blen=123 elem.tag=t
 text.py: start_lineno=141 textlen=999 page=4
 text.py: break_lineno=189 break_target=189
 text.py: olen=100 wlen=23 blen=123 elem.tag=t
 text.py: start_lineno=189 textlen=999 page=5
 text.py: break_lineno=237 break_target=237
 text.py: olen=0 wlen=6 blen=6 elem.tag=section
 text.py: range(block.beg=237, break_target=237)
 text.py: start_lineno=237 textlen=999 page=6
 text.py: break_lineno=285 break_target=285
 text.py: olen=6 wlen=1 blen=7 elem.tag=section
 text.py: range(block.beg=279, break_target=285)
 text.py: start_lineno=279 textlen=999 page=7
 text.py: break_lineno=327 break_target=327
 text.py: olen=0 wlen=4 blen=4 elem.tag=section
 text.py: range(block.beg=327, break_target=327)
 text.py: start_lineno=327 textlen=999 page=8
 text.py: break_lineno=375 break_target=375
 text.py: block=None
 text.py: start_lineno=374 textlen=999 page=9
 text.py: break_lineno=422 break_target=422
 text.py: block=None
 text.py: start_lineno=423 textlen=999 page=10
 text.py: break_lineno=471 break_target=471
 text.py: block=None
 text.py: start_lineno=472 textlen=999 page=11
 text.py: break_lineno=520 break_target=520
 text.py: olen=0 wlen=1 blen=1 elem.tag=dt
 text.py: start_lineno=520 textlen=999 page=12
 text.py: break_lineno=568 break_target=568
 text.py: olen=32 wlen=78 blen=110 elem.tag=section
 text.py: range(block.beg=536, break_target=568)
 text.py: start_lineno=536 textlen=999 page=13
 text.py: break_lineno=584 break_target=584
 text.py: olen=48 wlen=62 blen=110 elem.tag=section
 text.py: range(block.beg=536, break_target=584)
 text.py: start_lineno=536 textlen=999 page=14
 text.py: break_lineno=584 break_target=584
 text.py: olen=48 wlen=62 blen=110 elem.tag=section
 text.py: range(block.beg=536, break_target=584)
 text.py: start_lineno=536 textlen=999 page=15
 text.py: break_lineno=584 break_target=584
 text.py: olen=48 wlen=62 blen=110 elem.tag=section
 text.py: range(block.beg=536, break_target=584)
 text.py: start_lineno=536 textlen=999 page=16
 ...
 text.py: break_lineno=584 break_target=584
 text.py: olen=48 wlen=62 blen=110 elem.tag=section
 text.py: range(block.beg=536, break_target=584)
 text.py: start_lineno=536 textlen=999 page=9621
 text.py: break_lineno=584 break_target=584
 text.py: olen=48 wlen=62 blen=110 elem.tag=section
 text.py: range(block.beg=536, break_target=584)
 Traceback (most recent call last):
   File "/usr/bin/xml2rfc", line 11, in <module>
     sys.exit(main())
   File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/run.py",
        line 739, in main writer.write(filename)
   File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/writers/text.py",
        line 343, in write text = self.process()
   File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/writers/text.py",
        line 305, in process lines = self.paginate(lines)
   File "/mnt/home/rprice/.local/lib/python3.5/site-
 packages/xml2rfc/writers/text.py",
        line 461, in paginate paginated += lines[start_lineno:break_lineno]
 KeyboardInterrupt

 }}}

 Roger
 Attached file draft-rprice-UPS-management-protocol-00.rfc

-- 
-----------------------------------+----------------------
 Reporter:  roger@rogerprice.org   |      Owner:  somebody
     Type:  defect                 |     Status:  new
 Priority:  major                  |  Milestone:
Component:  component1             |    Version:
 Keywords:  text.py paginate loop  |
-----------------------------------+----------------------

Ticket URL: <https://trac.tools.ietf.org/misc/outcomes/ticket/4>
IETF Successes and Failures <http://tools.ietf.org/misc/outcomes/>
IETF Successes and Failures


From nobody Tue Jan 19 13:48:10 2021
Return-Path: <internet-drafts@ietf.org>
X-Original-To: opsec@ietf.org
Delivered-To: opsec@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D8C9C3A17DF; Tue, 19 Jan 2021 13:48:04 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: opsec@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: opsec@ietf.org
Message-ID: <161109288484.2686.1614871839620987885@ietfa.amsl.com>
Date: Tue, 19 Jan 2021 13:48:04 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/uZDmWx8hy15jk1MczAKJOnLNwXw>
Subject: [OPSEC] I-D Action: draft-ietf-opsec-ipv6-eh-filtering-07.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jan 2021 21:48:05 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure WG of the IETF.

        Title           : Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers at Transit Routers
        Authors         : Fernando Gont
                          Will(Shucheng) Liu
	Filename        : draft-ietf-opsec-ipv6-eh-filtering-07.txt
	Pages           : 37
	Date            : 2021-01-19

Abstract:
   This document analyzes the security implications of IPv6 Extension
   Headers and associated IPv6 options.  Additionally, it discusses the
   operational and interoperability implications of discarding packets
   based on the IPv6 Extension Headers and IPv6 options they contain.
   Finally, it provides advice on the filtering of such IPv6 packets at
   transit routers for traffic *not* directed to them, for those cases
   where such filtering is deemed as necessary.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsec-ipv6-eh-filtering/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-opsec-ipv6-eh-filtering-07
https://datatracker.ietf.org/doc/html/draft-ietf-opsec-ipv6-eh-filtering-07

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-ipv6-eh-filtering-07


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/



From nobody Wed Jan 20 17:31:46 2021
Return-Path: <jerniman@jernilan.net>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D54363A167A; Wed, 20 Jan 2021 17:31:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.701
X-Spam-Level: 
X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (bad RSA signature)" header.d=netorgft3201145.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UgNuQTWNN_TE; Wed, 20 Jan 2021 17:31:42 -0800 (PST)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2134.outbound.protection.outlook.com [40.107.236.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2916E3A0AD5; Wed, 20 Jan 2021 17:31:41 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hcsgYid8Okyy3SjOeTLYroteKHf8B4M/skBusrTdp2aloR1WMCyCsLgZb/vLlluzmavxDHyvDErf0EF8nGRsZ1XQgLuourVXbAuyNteFmbfswLsJW0qh2g2SBYdh+nNUctvn7+oJX1MyaeqI1F7PxLe39eImBOOdd0TL08hStoOaib0Z1ywRF486lPjoJQvUhFM2JuOWUnicP7nxoHQQ07iyzHetfuD5Y7zx47RJ1evxkmAEHXo4CIxyeI3+DGBSojO/+5uNztAdfRX6Q3wqlVrJYbNsuyhNn3MafF+Rncesr991Fhx1GDT+hMwqkJtC0V8L+3+d8DlkKsnmiMJO8A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=basjfGAPVFDNRpCQyzKkcAQkR+5JoMkkb6HpKReMIb4=; b=Fvmqbm4iCuUSa0rY4qMbHFcvOuDXzkPnofNRnw1j4ChzjlV4b+iiaZPrstOpIBv8JYIA80WP9Q0g5+pr/hcpCWXlcVQGeig2qbEovo5GnYtsPc8iwES0AhKQHlHLrIPZlkD+rbSMt4hEyKJ7pjCivmrkHee8wKHLvC/20XsHz8wEQUYBteC9qMPw2+9L/K5nT8SFsbRVWImETanWIm4UPWK1y8k+nKT9OHvw1SelZFT6LMZbaAK5TBDgAIJK9jYmq2BlFoXPA2rLUswHLSLWY5es4CDtzkz146VNAzaY0/PLZi1w3rr2CWOOsTAak04yetJhCaXTKYJ6dcR3ZAJJAg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jernilan.net; dmarc=pass action=none header.from=jernilan.net; dkim=pass header.d=jernilan.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT3201145.onmicrosoft.com; s=selector2-NETORGFT3201145-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=basjfGAPVFDNRpCQyzKkcAQkR+5JoMkkb6HpKReMIb4=; b=Tj2wHkyywm+RL2P51JrFlptzMoySxTy3SZNGcX1zPrq9V2LmB/MUqKGRQp5AaFVBWnKkJExNdst+W2ZrWB9yWFqNSthb13d5D9x35Qjj1hz6HgL6Q5wVtyd2adtq+5J1vG4ZQs2ym1gZbbhr7xwzfEaQID50xLd7cFEhlp391Ec=
Received: from (2603:10b6:208:8d::33) by MN2PR13MB3024.namprd13.prod.outlook.com (2603:10b6:208:150::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.7; Thu, 21 Jan 2021 01:31:37 +0000
Received: from BL0PR13MB4305.namprd13.prod.outlook.com ([fe80::51f0:c837:a740:1811]) by BL0PR13MB4305.namprd13.prod.outlook.com ([fe80::51f0:c837:a740:1811%5]) with mapi id 15.20.3805.006; Thu, 21 Jan 2021 01:31:31 +0000
From: Michael Dougherty <jerniman@jernilan.net>
To: "opsec@ietf.org" <opsec@ietf.org>, "i-d-announce@ietf.org" <i-d-announce@ietf.org>
CC: "fgont@si6networks.com" <fgont@si6networks.com>, "liushucheng@huawei.com" <liushucheng@huawei.com>
Thread-Topic: I-D Action: draft-ietf-opsec-ipv6-eh-filtering-07.txt
Thread-Index: AQHW75UlVWnMVCkYlEW/zk7f17ZMdg==
Date: Thu, 21 Jan 2021 01:31:31 +0000
Message-ID: <D1128302-7FEB-4DE3-A859-364129A2C762@jernilan.net>
References: <161109288484.2686.1614871839620987885@ietfa.amsl.com>
In-Reply-To: <161109288484.2686.1614871839620987885@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=jernilan.net;
x-originating-ip: [2601:146:4000:1e24:f934:1f7d:9379:f880]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 73dfcae4-c0d2-49ae-8909-08d8bdac486a
x-ms-traffictypediagnostic: MN2PR13MB3024:
x-microsoft-antispam-prvs: <MN2PR13MB3024E0E3588DD90F370EAD31AAA19@MN2PR13MB3024.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:BL0PR13MB4305.namprd13.prod.outlook.com; PTR:; CAT:NONE;  SFS:(376002)(39830400003)(366004)(396003)(136003)(346002)(66446008)(6506007)(64756008)(66476007)(71200400001)(66556008)(86362001)(508600001)(4326008)(66946007)(76116006)(36756003)(5660300002)(6512007)(8936002)(110136005)(66574015)(83380400001)(33656002)(2616005)(966005)(54906003)(8676002)(2906002)(186003)(6486002)(316002)(45980500001); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?utf-8?B?a2Q3MllVQ0NwNXhtZlJCVXR0WmRJaVlLeDNwVUgvdFdUWnF6VUdtMEdPU3Ax?= =?utf-8?B?c1dTQmFTaFo0WEtqNk82QzdpYnY5bHM0enJvQWhhZG91K0dFMlUxbjBLU2Fz?= =?utf-8?B?ZWFqM29BT2Q3cWhzTHVqTUZGRFJTcFVRbFI1c3gwMlhqT0l5SmlaS2dldjly?= =?utf-8?B?ZGhaM2pkNFJmZHRmMzNNQXhXbG05SmErUXNsU1Z0cDdrNlZaODkzK2Exa0pv?= =?utf-8?B?dG1hYzNNOWxVZlFtazVmQWUxNWFaRkFvRENGbUR3YmFyQ0cweWxiQnp0OGhO?= =?utf-8?B?dVBLRjhKNkI5Z0hHeUw3R0dkVitGK0EvbU9EZmVkMjJPY3VvUmd5STFIeDE2?= =?utf-8?B?TTZGSlIyVjR4aUtZdEEvN1J5NDd5emRPTHJMdEo3ZUM3U1h6OVFrSGxvUjlL?= =?utf-8?B?SG1LbkhWalBOQjlUMkN5NzloTjVSaDdTaWxhMzhWN0xoUHJPdTdoRGVOTEF4?= =?utf-8?B?UlB5T0xJaWRlVm1mT1pTWWY3WmpmM1ZpYzJDeTJmM2M2bjdURXlFRVh3Nmtr?= =?utf-8?B?VEU3Q3B5NTJiNUx4S1ZWZUhUWFZwN0NEOXhHS3REVVRTWEF1VmhLNFlqUGFE?= =?utf-8?B?ZzBoN3o3QlQyb2tiYVExeWJPelhwM1NMcDczZnZWeTZlUklaVTQ3ejVYN0Nz?= =?utf-8?B?V0ZzMzdvTFlWVTV6MS9pS01qVVpZRjdUczR2WTdYZnZNQXREa3J6L3NaWnVP?= =?utf-8?B?dFArK2xwUGhNSW15OVZqOXV5UVlrVFg4SjBpZStpM3VvaVY5TmJTSjVqdWlj?= =?utf-8?B?a0J0ZE0vWGMxTm1mT1NPNlo2NWxqK0hHaUZsdUNLNk1ESi83MFNxb0hQZE5N?= =?utf-8?B?ckttYllVZkJGUXpPMEFFV1ZEYm9teTVxbVZkZ1M0OUk3eEd5bDJ1ZTRvcVl3?= =?utf-8?B?Q0ZVUG90aVhVcExkZGpYZW5uQXQ0UFRLdTh3ZUVvSmxPZmRyVlZ1UFIzZnhD?= =?utf-8?B?V0llSXFMWnpoVVBPZFZ4RHhSTlJDZWFiQkJVcWlkRS9scnBkRDVKeklzM3VX?= =?utf-8?B?UjhBazcwYnlOVTBZSWZCT24xUnAyR2EvVGNDQW9YU2dBSTlwMGNaWTJoQjRN?= =?utf-8?B?VlBSSmJjMDBzZTdLMGQ1R0NKaGJZSXRLRCs5a21lem8zSW5hYmhqZjVkMHBl?= =?utf-8?B?SDZhRTBmTUFHK1hMUXRJSW5JeWhndlM0azMwM0VPaEVvTlNZcTJ4bUk5NmV4?= =?utf-8?B?NUM0dEJvSGdxais4QWtxbS81Z2hVamhlWWczanNDRzU4TVA5aHcvbXFHNGJZ?= =?utf-8?B?RTdURFJHZHdId2N6Szk0c3ZhWVp3MHREd2RGSHRKWnIva3ZYU0UwVVZrK2pC?= =?utf-8?B?amkxQlh4enZ1aTh6T0xVQ3dKcHpZbDV6RWl6VjcrMnhuQXdYSi9hejMvSGd0?= =?utf-8?B?MW1rRERMTDFRYWlyb0tvOXVtQlhCOXJhNUVidmFrYVZSRy9DN1pQa2lvakU1?= =?utf-8?B?UElmTFc4V2wvcE1vWFBldGZPL2R6elVTMG9SVnlTSnh0Q0RDd3B3QXA1UHhM?= =?utf-8?B?Q2hXazNRM0ZaK3VmL3pKUldSYmtmMVJoaDNBWGVWM3lPT0Z2eWxQejU1SEpI?= =?utf-8?B?ZmNadz09?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <F99E1407F2B2A645BF43944AAF4CC104@namprd13.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: jernilan.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BL0PR13MB4305.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 73dfcae4-c0d2-49ae-8909-08d8bdac486a
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2021 01:31:31.8112 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: db8d507a-ea83-464e-9d3e-9354bf2944bb
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +BwqgmNzAD3uSeNq93YmbcIyE3J3iamlTu8Nuc/legnhLTauL07hZmCKnF8ITr2XeHncDYDi2RTE1VAgZWOBJQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB3024
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/xd2ROym5Mwh8im76KYUKt05tllM>
Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-ipv6-eh-filtering-07.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jan 2021 01:31:44 -0000
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From nobody Sat Jan 23 21:45:29 2021
Return-Path: <fgont@si6networks.com>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 898223A0C35 for <opsec@ietfa.amsl.com>; Sat, 23 Jan 2021 21:45:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.161
X-Spam-Level: 
X-Spam-Status: No, score=-2.161 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.262, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Teb0in9E9ycz for <opsec@ietfa.amsl.com>; Sat, 23 Jan 2021 21:45:25 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0818F3A0C33 for <opsec@ietf.org>; Sat, 23 Jan 2021 21:45:24 -0800 (PST)
Received: from [IPv6:2800:810:464:2b9:3833:9808:6bb9:a1d8] (unknown [IPv6:2800:810:464:2b9:3833:9808:6bb9:a1d8]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 5B570280626; Sun, 24 Jan 2021 05:45:21 +0000 (UTC)
From: Fernando Gont <fgont@si6networks.com>
To: Michael Dougherty <jerniman@jernilan.net>, "opsec@ietf.org" <opsec@ietf.org>
Cc: "liushucheng@huawei.com" <liushucheng@huawei.com>
References: <161109288484.2686.1614871839620987885@ietfa.amsl.com> <D1128302-7FEB-4DE3-A859-364129A2C762@jernilan.net>
Message-ID: <461ce180-69be-2fdf-aece-c7250a9f886a@si6networks.com>
Date: Sun, 24 Jan 2021 02:42:24 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <D1128302-7FEB-4DE3-A859-364129A2C762@jernilan.net>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/vgtQp1VNGkrKt3iYidHLWHhohK8>
Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-ipv6-eh-filtering-07.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Jan 2021 05:45:28 -0000

Hello, Michael,

Thanks a lot for your input! In-line...

On 20/1/21 22:31, Michael Dougherty wrote:
> Greetings,
> 
> This was an interesting topic and write up. I have a few comments
> related to writing structure and readability.
> 
> Original: While some operators "officially" drop packets that contain
> IPv6 EHs, it is possible that some of the measured packet drops be
> the result of improper configuration defaults, or inappropriate
> advice in this area.
> 
> Suggestion: While some operators "officially" drop packets that
> contain IPv6 EHs; it is possible that some of the measured packet
> drops be the result of improper configuration defaults, or
> inappropriate advice in this area.

Wouldn't the s/,/;/ make the two sentences more unrelated, when they are 
actually meant to be closely-related?


> Original: The advice in this document is aimed only at transit
> routers that may need to enforce a filtering policy based on the EHs
> and IPv6 options a packet may contain, following a "deny-list"
> approach, and hence is likely to be much more permissive that a
> filtering policy to be employed at e.g. the edge of an enterprise
> network.
> 
> Suggestion: The advice in this document is aimed only at transit
> routers that may need to enforce a filtering policy based on the EHs
> and IPv6 options a packet may contain, following a "deny-list"
> approach, and hence is likely to be much more permissive than a
> filtering policy to be employed at, e.g., the edge of an enterprise
> network.

Will do!


> 
> Original: Section 4.2, first paragraph, second sentence Essentially,
> packets that contain IPv6 options might need to be processed by an
> IPv6 router's general-purpose CPU,and hence could present a DDoS risk
> to that router's general-purpose CPU (and thus to the router
> itself).
> 
> Suggestion: Essentially, packets that contain IPv6 options that might
> need to be processed by an IPv6 router's general-purpose CPU and
> could present a DDoS risk to that router's general-purpose CPU.

Will do.


> 
> Comments: 1 - Within the last sentence of the third paragraph within
> the "Introduction" sections. There is a comment about "inappropriate
> and missing guidelines". Who dictates or decides what is
> inappropriate?

Well, that's indeed subjective. One might say that, for example, "drop 
all packets with EHs (regarding the EH-chain length) at transit routers" 
is probably inappropriate.

That said, if you have any suggested tweaks, please do let us know (I'm 
all for improving the document).


> 2 - First bullet point in Section 2.3, change
> "recognise" to "recognize" 3

Will do.


> - Within the last paragraph of section
> 2.3, part of the comment ".... it is generally desirable that the
> sender be signaled of the packet drop...." While the idea is valid,
> it might be a good idea to note that such a signal might attract
> malicious attention or threat-actors.

You mean "expose the filtering policy"? If not, please elaborate. :-)


> 4 - Section 3.4.4.4. It might
> be best to specify what type of IPSEC deployment is involved,
> host-to-host, site-to-site, site-to-host? 

Could you please elaborate a bit on this one?



> 5 - Section 3.4.5.5.
> Advise, hasn't AH been depreciated as an insecure methodology versus
> ESP?

That'd generally be my take. But AH has never been formally obsoleted. 
While double-checking this, I ended up finding this thread 
(http://www.sandelman.ottawa.on.ca/ipsec/2000/06/threads.html#00063 ) in 
which some folks have actually suggested that, but it looks like the 
idea didn't fly.

Thanks!

Regards,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





From nobody Sun Jan 24 06:16:37 2021
Return-Path: <jerniman@jernilan.net>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C9143A0CBB; Sun, 24 Jan 2021 06:16:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.701
X-Spam-Level: 
X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (bad RSA signature)" header.d=netorgft3201145.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yHLeZkSlWN1Q; Sun, 24 Jan 2021 06:16:29 -0800 (PST)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2127.outbound.protection.outlook.com [40.107.236.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 999533A0CBA; Sun, 24 Jan 2021 06:16:29 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fcqlw+EtlIhhbA2xzGyNK8+uQwTityTI+429xagunO9kxD8WxcwZ4EHYPASrJj/6DHaP/Gi6xjZeh/fPoOUccFOLiAsqqjmmVz7WhftD0yi9dBcD3ElOuAGi/53hRJZNe7WJ2xSvEJvVF6EKea5W3NIB19XsEh7oDuMFbFSBHUNLTM4viVU71yR2iJt+dQzx2rIZeCfint/gKT0gwQrZTBWOhrnxCSzUeC8zZYd8dDCSxnaNXDr2aO83xp16re/DQP687xZU72pM/rSVdFMkUKiSRNPaf9yEZFEPUwzff7691Q5y/EqKsdGVBoO4GaN0SjxQxxtPr67ZVo3AbJuCsA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Hs/5Rzfu6L6peZiEOZR7QplDTnO20SPbpu/X+VX/oAo=; b=F7WBCSUWLhSTng53fRAlUyZK5QDVz/56qZ99YNH+Rtm+1Np5MbDeQnEty0JitbYH++35GHSmrTQ9Lvc9uwWBNQuVSVX/jfNHwktsBfQ5+vDBQ64Iljfykgy5w/bfYrlSCAjRP4wFTqXIxO/8B25DSnDfqbv4jVs/EmtgVAe52ZU2fd847Op874EL7eZ9JK4M5bNGQn3fvFwl4LJQvXs6sUv5hX8f1VhjJvte8tBVAN9BNjOf3ZgTZ1vRrT05TnKJTiYBupExqONwf9SzWJbc2Jvlj5Um14XmgARIbI86Bzk/Xn0/08C98KZsLR/dYDBwdrRbXtkjB0Pj2J4LQC+j6w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jernilan.net; dmarc=pass action=none header.from=jernilan.net; dkim=pass header.d=jernilan.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT3201145.onmicrosoft.com; s=selector2-NETORGFT3201145-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Hs/5Rzfu6L6peZiEOZR7QplDTnO20SPbpu/X+VX/oAo=; b=PQTSXLPSC7icqHCKtdzaOv55EHS18WkQ4ywMsTVsmHluy0fFtDDtwSPFhdwAWS6xJnjM2WRScLB2Ga2SK7cCLx+9jzQUtJlqFcZBLK9MqoU+amBP/hr1oP/l7aXtFzLHkwdXqxbCz5eUva6q6Jc12NLobPak/SLc9+wIMemftVw=
Received: from (20.177.243.97) by BL0PR13MB4241.namprd13.prod.outlook.com (20.177.240.87) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3805.5; Sun, 24 Jan 2021 14:16:25 +0000
Received: from BL0PR13MB4305.namprd13.prod.outlook.com ([fe80::51f0:c837:a740:1811]) by BL0PR13MB4305.namprd13.prod.outlook.com ([fe80::51f0:c837:a740:1811%5]) with mapi id 15.20.3805.013; Sun, 24 Jan 2021 14:16:25 +0000
From: Michael Dougherty <jerniman@jernilan.net>
To: Fernando Gont <fgont@si6networks.com>, "opsec@ietf.org" <opsec@ietf.org>
CC: "liushucheng@huawei.com" <liushucheng@huawei.com>, "i-d-announce-owner@ietf.org" <i-d-announce-owner@ietf.org>
Thread-Topic: I-D Action: draft-ietf-opsec-ipv6-eh-filtering-07.txt
Thread-Index: AQHW75UlVWnMVCkYlEW/zk7f17ZMdqo2SDcAgAA7ygA=
Date: Sun, 24 Jan 2021 14:16:24 +0000
Message-ID: <E29A8F2F-EEF6-4DBB-9C91-3781828321A1@jernilan.net>
References: <161109288484.2686.1614871839620987885@ietfa.amsl.com> <D1128302-7FEB-4DE3-A859-364129A2C762@jernilan.net> <461ce180-69be-2fdf-aece-c7250a9f886a@si6networks.com>
In-Reply-To: <461ce180-69be-2fdf-aece-c7250a9f886a@si6networks.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: si6networks.com; dkim=none (message not signed) header.d=none;si6networks.com; dmarc=none action=none header.from=jernilan.net;
x-originating-ip: [2601:146:4000:1e24:903:6353:8f69:6480]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 067bbedd-4f83-4a60-5dcc-08d8c072a212
x-ms-traffictypediagnostic: BL0PR13MB4241:
x-microsoft-antispam-prvs: <BL0PR13MB42415BE225359C4761BF4E52AABE9@BL0PR13MB4241.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: qyx+vpu5X7LoWHRPjc+TNEtoXamDBchk6YXx8B8FO7fa+AwDgo23AXOCB3al+VNCT2SNKiT0NfHD4gzznxBsyW0vcq6ppzM9E6Apq4zaCkJMFd1IN6+iJqBPnzcHGof0/42n/fbP299miW64kdDwr9500lQnTRtccOajpCu1LxndLcVsBO54KrgkChT/gA3gISghtEmRAKActAh9D8JYwFbsmuteUPO8rghEKXwvu1pPu4PIJxxp9fyd+V9xA7rK31dPfyRYGglvoNjHejDqtQkjgtNBWNAl7gY35aKpzO3HnR43gYxT85api4CB1PZVLjsc5P/DThgVIGBxSgdGhuxBM9+chSCmIRylBWjaPwQkhkm1zmJGOzDq1KdX9qZBFxnC4Xkh7tPOUJ6I9DyycGJDCceOy7ZZn4+5nUDKyyR7UxV2yxUKcMiW4G+e7qsObe1b59gM4lbOgYEN8MpmGdRAN3BWsN+hg/a/QF58o8ijJbZU54ERPWUWJPc1x01/RE/q/FkVu8Rve4JXp68A6CHXGIHPpiNFqr2GvoR2Oywm5z/ouufXtHaFodChyJmuH4BGT5h6F+gUid+vno3fMrG3I1mE3NHDAJeTm+wUqWcqwALO1THtmwU3+0FM+bShjZ3ytmigUnScOUdOXAzm7Cfciobhx60fr4JYPmtkd1Q=
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:BL0PR13MB4305.namprd13.prod.outlook.com; PTR:; CAT:NONE;  SFS:(136003)(346002)(366004)(39830400003)(376002)(396003)(36756003)(508600001)(66446008)(64756008)(66556008)(66476007)(71200400001)(83380400001)(53546011)(6486002)(33656002)(316002)(6512007)(66574015)(5660300002)(66946007)(4326008)(186003)(2616005)(6506007)(86362001)(54906003)(76116006)(110136005)(8676002)(8936002)(2906002)(45980500001); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?utf-8?B?WkN4dWRyVkxpUUx3dFhpTHJwZ3JCeFdmaHRNVGxvNitqRWIxTExzTm90ditP?= =?utf-8?B?ZTlIS055WUJhaGl4ZVNxNmtJWm93cngrcmRBNitqMzIreDN0dU1TS1V5WHFW?= =?utf-8?B?RWtYaUxLT2VUdlpjSDFLdnY0eGFOaTNHQkJwV2NrM1Z3eEdKSjc5K3R0eTJr?= =?utf-8?B?MWcyUUVmemFoMDdNblBNQjdPbmNiRHF6MlF2WFRuUHlDZUNIWVhFUHJrOEJ0?= =?utf-8?B?dWJFc2Y0Y3UyNHIxd2E2R3VrWjVvSFlSOWRLSTVZV2l6WTU0THFURE5kNTlo?= =?utf-8?B?b05TZkF2R1NnS2hMMDFONkdDK292YkxuNmlsb1FhSk13Vmd0RnhiaDlDUk1J?= =?utf-8?B?RmR2ak4vWHplaVNyZjU3M0RqbUNXQjA5OTNhVWdiNGRFc0dnZUhxaDlpVUla?= =?utf-8?B?Sy9MMzc1UGE5cnU3VEdvcDBPRUhSNTNNMCtFUkxFYnJjaE1RVTZPa3FKbEFX?= =?utf-8?B?ZVJLb2thQk9haERuYVgzR2piclBYQnY3UkpXc3I2MmZveUxkRmZTK1FxWkpJ?= =?utf-8?B?b1E2WTFtUURhdXpoaG9IZUFBaW5BbjZZSjlZWkVtd0VsME5RTW40MExGOWlS?= =?utf-8?B?WWRKczN3QzRoai9CYTRDa1dUVytjdlNWZGF2eWRxNmgzUnhYNmk4ODc1NzlD?= =?utf-8?B?K2RkMUJQTnpGNjF5OGF6QmRZMVp5aHpEeklidy9CbHl4eS9BenJRcXA2SFhE?= =?utf-8?B?SVQwWmNPYUFmM2NVVllGNU1hb3lRbTBuRzY4ZGxqaE1ZMlFETmpCL2dQWHA1?= =?utf-8?B?WWhTVFdiZVYydVRmUkQvajVrM3YvTUYxYjhzamVWdWtIWlRmTTVOVkM4aHFM?= =?utf-8?B?VXFhei82bEg3OWRDR0tCdStPWnJMZGkzUFYzMmRuQ2s2MVgxRDUzL0cwMDlq?= =?utf-8?B?NTA4Rk5uMlVHWEtDU1E0amtMUXdFbUQxMUlSRTNRY25XektCb1V6S2V0ZjNY?= =?utf-8?B?VXNNMkdLV21uRTVoWkhzWW9VVXRRNHlWcFIzQ0tuOWtyVE93QURJMEthQWo4?= =?utf-8?B?eTVKd0JDQlk1VDV2dXFsT2t4d29NN3BZQ0oydHRSL2ZTaWhCVmRvMjdJalJN?= =?utf-8?B?RHVsVEZkWmJka2thOThEVFlJVnIrUDV6bWZvYmkraElkRDVpeitvL0hjYTZ1?= =?utf-8?B?eXB3L2lKTHZLYitzcVZFOWVLSkxaUFNCeHNRN0ZybGE5TVZuWW5uUWhzUmds?= =?utf-8?B?MVpYT2haVEVPa0phb3N1QjJNTlQ3em9sNkdUb2dhZXBNcjZ6U0JJeFp5Vlpi?= =?utf-8?B?VHR6aDBrMU5lSEtDc0ZXTEFDRVJtQks1cXgycHdYYUUvam4yRXdsWFk1Vktu?= =?utf-8?B?S2ZZQ1orT0t0RG1hMkRtRjJYeDMxUDlNdi9xT3dWSFNEUnJOcE1zWkplMXFI?= =?utf-8?B?TTNQRzFJUVVvRFlyQ0MrR3VrYXBCbC9NV0ZrVFhxbXpWanpwQnoxUTBwRUw4?= =?utf-8?B?MWJOYWZXZjcrYlBhWWI1SFlSZ1FBS3I2Q0Q1OVN0NThWaUVSOVVtdkhHVFpt?= =?utf-8?B?UURvZmdCWElja1hJTm5pSi8wSlJEWDNPalEvc0d6VWlKaXRQVXVTR1Njcmtj?= =?utf-8?B?MWU1UT09?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <0513F2F7343E5D498AF75016CDA0C56C@namprd13.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: jernilan.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BL0PR13MB4305.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 067bbedd-4f83-4a60-5dcc-08d8c072a212
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jan 2021 14:16:24.9133 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: db8d507a-ea83-464e-9d3e-9354bf2944bb
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: va66AwNIjnnc7VXFpepdJ8Ie+iplX85dZL+akgdN60ihWywp3DQR3DPILEYWo9GRp9HedeMd3NlYcHwxBdAVTg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR13MB4241
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/-VwAHwLXBrK8UUkNbK4VMsKfpzU>
Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-ipv6-eh-filtering-07.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 24 Jan 2021 14:16:34 -0000

SGVsbG8gRmVybmFuZG8sDQoNClRoYW5rcyBmb3IgdGhlIHJlcGx5LCBJIHdhc27igJl0IHN1cmUg
aWYgeW91IHJlY2VpdmVkIG15IG1lc3NhZ2UsIGJ1dCBJIGFtIGdsYWQgdGhhdCBpdCBoYXMgaGVs
cGVkLiBJIHJldmlld2VkIHlvdXIgY29tbWVudHMgYW5kIHJlc3BvbmRlZCB0byB0aGVtIGJlbG93
LiBJIGFtIGhhcHB5IHRvIGhlbHAgb3V0Lg0KDQotbWljaGFlbA0KDQrvu79PbiAxLzI0LzIxLCAx
Mjo0NSBBTSwgIkZlcm5hbmRvIEdvbnQiIDxmZ29udEBzaTZuZXR3b3Jrcy5jb20+IHdyb3RlOg0K
DQogICAgSGVsbG8sIE1pY2hhZWwsDQoNCiAgICBUaGFua3MgYSBsb3QgZm9yIHlvdXIgaW5wdXQh
IEluLWxpbmUuLi4NCg0KICAgIE9uIDIwLzEvMjEgMjI6MzEsIE1pY2hhZWwgRG91Z2hlcnR5IHdy
b3RlOg0KICAgID4gR3JlZXRpbmdzLA0KICAgID4gDQogICAgPiBUaGlzIHdhcyBhbiBpbnRlcmVz
dGluZyB0b3BpYyBhbmQgd3JpdGUgdXAuIEkgaGF2ZSBhIGZldyBjb21tZW50cw0KICAgID4gcmVs
YXRlZCB0byB3cml0aW5nIHN0cnVjdHVyZSBhbmQgcmVhZGFiaWxpdHkuDQogICAgPiANCiAgICA+
IE9yaWdpbmFsOiBXaGlsZSBzb21lIG9wZXJhdG9ycyAib2ZmaWNpYWxseSIgZHJvcCBwYWNrZXRz
IHRoYXQgY29udGFpbg0KICAgID4gSVB2NiBFSHMsIGl0IGlzIHBvc3NpYmxlIHRoYXQgc29tZSBv
ZiB0aGUgbWVhc3VyZWQgcGFja2V0IGRyb3BzIGJlDQogICAgPiB0aGUgcmVzdWx0IG9mIGltcHJv
cGVyIGNvbmZpZ3VyYXRpb24gZGVmYXVsdHMsIG9yIGluYXBwcm9wcmlhdGUNCiAgICA+IGFkdmlj
ZSBpbiB0aGlzIGFyZWEuDQogICAgPiANCiAgICA+IFN1Z2dlc3Rpb246IFdoaWxlIHNvbWUgb3Bl
cmF0b3JzICJvZmZpY2lhbGx5IiBkcm9wIHBhY2tldHMgdGhhdA0KICAgID4gY29udGFpbiBJUHY2
IEVIczsgaXQgaXMgcG9zc2libGUgdGhhdCBzb21lIG9mIHRoZSBtZWFzdXJlZCBwYWNrZXQNCiAg
ICA+IGRyb3BzIGJlIHRoZSByZXN1bHQgb2YgaW1wcm9wZXIgY29uZmlndXJhdGlvbiBkZWZhdWx0
cywgb3INCiAgICA+IGluYXBwcm9wcmlhdGUgYWR2aWNlIGluIHRoaXMgYXJlYS4NCg0KICAgIFdv
dWxkbid0IHRoZSBzLywvOy8gbWFrZSB0aGUgdHdvIHNlbnRlbmNlcyBtb3JlIHVucmVsYXRlZCwg
d2hlbiB0aGV5IGFyZSANCiAgICBhY3R1YWxseSBtZWFudCB0byBiZSBjbG9zZWx5LXJlbGF0ZWQ/
DQoNCi8vTUQgUmVwbHkgLSAyNEpBTjIwMjEgXFwNCg0KVGhlIHVzZSBvZiB0aGUgc2VtaS1jb2xv
biB3b3VsZCBiZSBhIGdvb2QgZml0IGhlcmUsIHNpbmNlIHRoZSB0d28gc2VjdGlvbnMgYXJlIHJl
bGF0ZWQgYnV0IGFyZSBzZXBhcmF0ZSBzZW50ZW5jZSBjbGF1c2VzIC0gdGVjaG5pY2FsbHkgaXQg
d291bGQgd29yay4gVGFrZSBhIGxvb2sgYXQgbXkgcmV3cml0ZSBiZWxvdywgaG9wZWZ1bGx5IGl0
IHN0aWxsIGNvbnZleXMgdGhlIGlkZWEuIA0KDQpQb3NzaWJsZSByZXdyaXRlOiBXaGlsZSBzb21l
IG9wZXJhdG9ycyAib2ZmaWNpYWxseSIgZHJvcCBwYWNrZXRzIGNvbnRhaW5pbmcgSVB2NiBFSHMs
IGluYXBwcm9wcmlhdGUgZGVmYXVsdHMgb3IgaW5jb3JyZWN0IGFkdmljZSBpbiB0aGlzIGFyZWEg
bWF5IHJlc3VsdCBpbiB0aGUgcmVjb3JkaW5nIG9mIGVsZXZhdGVkIGRyb3BzLg0KDQogICAgPiBP
cmlnaW5hbDogVGhlIGFkdmljZSBpbiB0aGlzIGRvY3VtZW50IGlzIGFpbWVkIG9ubHkgYXQgdHJh
bnNpdA0KICAgID4gcm91dGVycyB0aGF0IG1heSBuZWVkIHRvIGVuZm9yY2UgYSBmaWx0ZXJpbmcg
cG9saWN5IGJhc2VkIG9uIHRoZSBFSHMNCiAgICA+IGFuZCBJUHY2IG9wdGlvbnMgYSBwYWNrZXQg
bWF5IGNvbnRhaW4sIGZvbGxvd2luZyBhICJkZW55LWxpc3QiDQogICAgPiBhcHByb2FjaCwgYW5k
IGhlbmNlIGlzIGxpa2VseSB0byBiZSBtdWNoIG1vcmUgcGVybWlzc2l2ZSB0aGF0IGENCiAgICA+
IGZpbHRlcmluZyBwb2xpY3kgdG8gYmUgZW1wbG95ZWQgYXQgZS5nLiB0aGUgZWRnZSBvZiBhbiBl
bnRlcnByaXNlDQogICAgPiBuZXR3b3JrLg0KICAgID4gDQogICAgPiBTdWdnZXN0aW9uOiBUaGUg
YWR2aWNlIGluIHRoaXMgZG9jdW1lbnQgaXMgYWltZWQgb25seSBhdCB0cmFuc2l0DQogICAgPiBy
b3V0ZXJzIHRoYXQgbWF5IG5lZWQgdG8gZW5mb3JjZSBhIGZpbHRlcmluZyBwb2xpY3kgYmFzZWQg
b24gdGhlIEVIcw0KICAgID4gYW5kIElQdjYgb3B0aW9ucyBhIHBhY2tldCBtYXkgY29udGFpbiwg
Zm9sbG93aW5nIGEgImRlbnktbGlzdCINCiAgICA+IGFwcHJvYWNoLCBhbmQgaGVuY2UgaXMgbGlr
ZWx5IHRvIGJlIG11Y2ggbW9yZSBwZXJtaXNzaXZlIHRoYW4gYQ0KICAgID4gZmlsdGVyaW5nIHBv
bGljeSB0byBiZSBlbXBsb3llZCBhdCwgZS5nLiwgdGhlIGVkZ2Ugb2YgYW4gZW50ZXJwcmlzZQ0K
ICAgID4gbmV0d29yay4NCg0KICAgIFdpbGwgZG8hDQoNCg0KICAgID4gDQogICAgPiBPcmlnaW5h
bDogU2VjdGlvbiA0LjIsIGZpcnN0IHBhcmFncmFwaCwgc2Vjb25kIHNlbnRlbmNlIEVzc2VudGlh
bGx5LA0KICAgID4gcGFja2V0cyB0aGF0IGNvbnRhaW4gSVB2NiBvcHRpb25zIG1pZ2h0IG5lZWQg
dG8gYmUgcHJvY2Vzc2VkIGJ5IGFuDQogICAgPiBJUHY2IHJvdXRlcidzIGdlbmVyYWwtcHVycG9z
ZSBDUFUsYW5kIGhlbmNlIGNvdWxkIHByZXNlbnQgYSBERG9TIHJpc2sNCiAgICA+IHRvIHRoYXQg
cm91dGVyJ3MgZ2VuZXJhbC1wdXJwb3NlIENQVSAoYW5kIHRodXMgdG8gdGhlIHJvdXRlcg0KICAg
ID4gaXRzZWxmKS4NCiAgICA+IA0KICAgID4gU3VnZ2VzdGlvbjogRXNzZW50aWFsbHksIHBhY2tl
dHMgdGhhdCBjb250YWluIElQdjYgb3B0aW9ucyB0aGF0IG1pZ2h0DQogICAgPiBuZWVkIHRvIGJl
IHByb2Nlc3NlZCBieSBhbiBJUHY2IHJvdXRlcidzIGdlbmVyYWwtcHVycG9zZSBDUFUgYW5kDQog
ICAgPiBjb3VsZCBwcmVzZW50IGEgRERvUyByaXNrIHRvIHRoYXQgcm91dGVyJ3MgZ2VuZXJhbC1w
dXJwb3NlIENQVS4NCg0KICAgIFdpbGwgZG8uDQoNCg0KICAgID4gDQogICAgPiBDb21tZW50czog
MSAtIFdpdGhpbiB0aGUgbGFzdCBzZW50ZW5jZSBvZiB0aGUgdGhpcmQgcGFyYWdyYXBoIHdpdGhp
bg0KICAgID4gdGhlICJJbnRyb2R1Y3Rpb24iIHNlY3Rpb25zLiBUaGVyZSBpcyBhIGNvbW1lbnQg
YWJvdXQgImluYXBwcm9wcmlhdGUNCiAgICA+IGFuZCBtaXNzaW5nIGd1aWRlbGluZXMiLiBXaG8g
ZGljdGF0ZXMgb3IgZGVjaWRlcyB3aGF0IGlzDQogICAgPiBpbmFwcHJvcHJpYXRlPw0KDQogICAg
V2VsbCwgdGhhdCdzIGluZGVlZCBzdWJqZWN0aXZlLiBPbmUgbWlnaHQgc2F5IHRoYXQsIGZvciBl
eGFtcGxlLCAiZHJvcCANCiAgICBhbGwgcGFja2V0cyB3aXRoIEVIcyAocmVnYXJkaW5nIHRoZSBF
SC1jaGFpbiBsZW5ndGgpIGF0IHRyYW5zaXQgcm91dGVycyIgDQogICAgaXMgcHJvYmFibHkgaW5h
cHByb3ByaWF0ZS4NCg0KICAgIFRoYXQgc2FpZCwgaWYgeW91IGhhdmUgYW55IHN1Z2dlc3RlZCB0
d2Vha3MsIHBsZWFzZSBkbyBsZXQgdXMga25vdyAoSSdtIA0KICAgIGFsbCBmb3IgaW1wcm92aW5n
IHRoZSBkb2N1bWVudCkuDQoNCk1EOiBJIHJldmlld2VkIHRoZSBSRkM3ODcyIGFuZCB5b3UgY291
bGQgbWF5YmUgcmVwaHJhc2UgdG8gaW5jbHVkZSB0aGUgY2FsbCBvdXQgb2YgNzg3MiwgYnV0IGFs
c28gY292ZXIgYW55dGhpbmcgdGhhdCBtaWdodCBiZSBjb25zaWRlcmVkLg0KDQovLy8gVGhlIGFk
dmljZSBjb252ZXllZCBpbiB0aGlzIGRvY3VtZW50IGlzIHRvIGFzc2lzdCBuZXR3b3JrIG9wZXJh
dG9ycyB3aXRoIGRldmVsb3Bpbmcgb3IgcmVmaW5pbmcgcGFja2V0IGRyb3BwaW5nIHBvbGljaWVz
IGZvciBJUHY2IEVIIGVudGVyaW5nIG9yIGxlYXZpbmcgdGhlaXIgb3BlcmF0aW9uYWwgcmVzcG9u
c2liaWxpdGllcy4gR3VpZGVsaW5lcyBjb250YWluZWQgaW4gUkZDNzg3MiBtYXkgbm90IGhhdmUg
aW5mb3JtYXRpb24gZm9yIHNwZWNpZmljIHVzZSBjYXNlcyBvciBzaXR1YXRpb25zOyB0aGlzIGRv
Y3VtZW50IG1heSBwb3NpdGl2ZWx5IGFmZmVjdCB1cGRhdGVkIHBvbGljaWVzLiAgXFxcDQoNCiAg
ICA+IDIgLSBGaXJzdCBidWxsZXQgcG9pbnQgaW4gU2VjdGlvbiAyLjMsIGNoYW5nZQ0KICAgID4g
InJlY29nbmlzZSIgdG8gInJlY29nbml6ZSIgMw0KDQogICAgV2lsbCBkby4NCg0KDQogICAgPiAt
IFdpdGhpbiB0aGUgbGFzdCBwYXJhZ3JhcGggb2Ygc2VjdGlvbg0KICAgID4gMi4zLCBwYXJ0IG9m
IHRoZSBjb21tZW50ICIuLi4uIGl0IGlzIGdlbmVyYWxseSBkZXNpcmFibGUgdGhhdCB0aGUNCiAg
ICA+IHNlbmRlciBiZSBzaWduYWxlZCBvZiB0aGUgcGFja2V0IGRyb3AuLi4uIiBXaGlsZSB0aGUg
aWRlYSBpcyB2YWxpZCwNCiAgICA+IGl0IG1pZ2h0IGJlIGEgZ29vZCBpZGVhIHRvIG5vdGUgdGhh
dCBzdWNoIGEgc2lnbmFsIG1pZ2h0IGF0dHJhY3QNCiAgICA+IG1hbGljaW91cyBhdHRlbnRpb24g
b3IgdGhyZWF0LWFjdG9ycy4NCg0KICAgIFlvdSBtZWFuICJleHBvc2UgdGhlIGZpbHRlcmluZyBw
b2xpY3kiPyBJZiBub3QsIHBsZWFzZSBlbGFib3JhdGUuIDotKQ0KDQpNRCBSZXNwb25zZTogWWVz
LCB0aGF0IGlzIGV4YWN0bHkgd2hhdCBJIGFtIHJlZmVyZW5jaW5nLiBTZW5kaW5nIGJhY2sgYW4g
SUNNUCBlcnJvciBtZXNzYWdlIHRvIHRoZSBvcmlnaW5hdGluZyBob3N0IG1heSBleHBvc2UgdGhl
ICJyZXBvcnRpbmcgZGV2aWNlcyIgZXhpc3RlbmNlIG9yIG9wZXJhdGlvbi4gDQoNCg0KICAgID4g
NCAtIFNlY3Rpb24gMy40LjQuNC4gSXQgbWlnaHQNCiAgICA+IGJlIGJlc3QgdG8gc3BlY2lmeSB3
aGF0IHR5cGUgb2YgSVBTRUMgZGVwbG95bWVudCBpcyBpbnZvbHZlZCwNCiAgICA+IGhvc3QtdG8t
aG9zdCwgc2l0ZS10by1zaXRlLCBzaXRlLXRvLWhvc3Q/IA0KDQogICAgQ291bGQgeW91IHBsZWFz
ZSBlbGFib3JhdGUgYSBiaXQgb24gdGhpcyBvbmU/DQoNCk1EIFJlc3BvbnNlOiBJdCB3YXMgbW9y
ZSBzbyBhIGNvbW1lbnQgcmVnYXJkaW5nIGhvdyBzcGVjaWZpYyB5b3Ugd2FudCB0byBiZSB3aXRo
IHRoZSBwb3NzaWJseSBicmVha2luZyBJUFNlYyBkZXBsb3ltZW50cy4gSW4gZ2VuZXJhbCwgeWVz
LCBjYWxsaW5nIG91dCBhcyB5b3UgaGF2ZSB3b3VsZCBjb3ZlciB2YXJpb3VzIGRlcGxveW1lbnRz
IG9yIG9wZXJhdGlvbmFsIGNvbnNpZGVyYXRpb25zLiBCZWluZyB0aGlzIGRvY3VtZW50IGlzIGFp
bWVkIHRvd2FyZHMgdHJhbnNpdCBhbmQgcG9zc2libHkgYXBwbGljYWJsZSB0byBJWFAncywgdGhl
eSBtYXkgbm90IGJlIG1pbmRmdWwgb2YgaG93IGVuZC11c2VycyBtaWdodCBiZSBvcGVyYXRpbmcu
IA0KDQogICAgPiA1IC0gU2VjdGlvbiAzLjQuNS41Lg0KICAgID4gQWR2aXNlLCBoYXNuJ3QgQUgg
YmVlbiBkZXByZWNpYXRlZCBhcyBhbiBpbnNlY3VyZSBtZXRob2RvbG9neSB2ZXJzdXMNCiAgICA+
IEVTUD8NCg0KICAgIFRoYXQnZCBnZW5lcmFsbHkgYmUgbXkgdGFrZS4gQnV0IEFIIGhhcyBuZXZl
ciBiZWVuIGZvcm1hbGx5IG9ic29sZXRlZC4gDQogICAgV2hpbGUgZG91YmxlLWNoZWNraW5nIHRo
aXMsIEkgZW5kZWQgdXAgZmluZGluZyB0aGlzIHRocmVhZCANCiAgICAoaHR0cDovL3d3dy5zYW5k
ZWxtYW4ub3R0YXdhLm9uLmNhL2lwc2VjLzIwMDAvMDYvdGhyZWFkcy5odG1sIzAwMDYzICkgaW4g
DQogICAgd2hpY2ggc29tZSBmb2xrcyBoYXZlIGFjdHVhbGx5IHN1Z2dlc3RlZCB0aGF0LCBidXQg
aXQgbG9va3MgbGlrZSB0aGUgDQogICAgaWRlYSBkaWRuJ3QgZmx5Lg0KDQpNRCBSZXNwb25zZTog
SXQgc2VlbXMgeW91IGFyZSBjb3JyZWN0LCBhdCBhIHN0YW5kYXJkcyBsZXZlbCBBSCBhcHBlYXJz
IHRvIGJlIG5vdCBiZSBvZmZpY2lhbGx5IGRlcHJlY2lhdGVkLiBXaGlsZSBpdCBzb3VuZHMgbGlr
ZSB0aGVyZSBpcyBkaXNjdXNzaW9uIGFuZCBuZWVkIHRvIGRvIHNvLCBpdCBoYXMgbm90IGJlZW4g
ZG9uZS4gSSB3aWxsIHNheSBzb21lIHZlbmRvcnMgZG8gcmVjb21tZW5kIEVTUCBvdmVyIEFILCBz
dWNoIGFzIEp1bmlwZXIgaW4gdGhlaXIgMjAxMiBkb2N1bWVudCwgIkNvbmNlcHRzICYgRXhhbXBs
ZXMgU2NyZWVuT1MgUmVmZXJlbmNlIEd1aWRlIFZpcnR1YWwgUHJpdmF0ZSBOZXR3b3Jrcy4iIFJl
Z2FyZGxlc3MsIHlvdSBjYW4gcHJvYmFibHkgaWdub3JlIG15IHByZXZpb3VzIGNvbW1lbnQuIA0K
DQogICAgVGhhbmtzIQ0KDQogICAgUmVnYXJkcywNCiAgICAtLSANCiAgICBGZXJuYW5kbyBHb250
DQogICAgU0k2IE5ldHdvcmtzDQogICAgZS1tYWlsOiBmZ29udEBzaTZuZXR3b3Jrcy5jb20NCiAg
ICBQR1AgRmluZ2VycHJpbnQ6IDY2NjYgMzFDNiBENDg0IDYzQjIgOEZCMSBFM0M0IEFFMjUgMEQ1
NSAxRDRFIDc0OTINCg0KDQoNCg0KDQo=


From nobody Tue Jan 26 03:19:35 2021
Return-Path: <Kirsty.p@ncsc.gov.uk>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8129C3A0918 for <opsec@ietfa.amsl.com>; Tue, 26 Jan 2021 03:19:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.323
X-Spam-Level: 
X-Spam-Status: No, score=-1.323 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.25, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.873, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ncsc.gov.uk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sB4iApxpeZGH for <opsec@ietfa.amsl.com>; Tue, 26 Jan 2021 03:19:31 -0800 (PST)
Received: from GBR01-LO2-obe.outbound.protection.outlook.com (mail-eopbgr100123.outbound.protection.outlook.com [40.107.10.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70DC63A08C5 for <opsec@ietf.org>; Tue, 26 Jan 2021 03:19:31 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fh8211TVUy8m2mh0ib7B9aZrbwtvOYwVcJlCoaLVUt7sOP1SmiRm7YpJ5uqlShQpSMx5rjIAg0FAxFsiOJNApeuLAIL1zpFzFLUHl4+JyzpIwaA8p3RCULqv8V37hDrDUicIjTgqDHuPkE8LHMKkUYTe/lvZ/vQWPkSbVUbVldoQTof2ZlsBAnnUxXzhoguGDlBsWVYv26lvlaYPK2glqqVQraslofcCPlYAx3qt46VQh/MrWTDF1kDMada7v7zJwq1ljhgnl3KttId8T9za2HrDvQS11boY72vgKrzAyHi4zOzK5Ku7JJZcyCtHF2gMhmsrTvbwZFwkf7y0mN6Y2w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oujyaSaz6wUWLO/092w7zHiYEl7D+n4s4S7YPssqvGY=; b=J1yGgHUH/AJZwB90zoMlYpHagy78nswYPV5K+BJKPxEttJAtpSzeKykKZaZf8yu+BT9DfGI4JPXaL8haQiyilrvoyC85u9I3ac2fLJW262zxB9POeGwMaaQorfov7wAbys8V2ZtGs0qBftXCUsGwzPcUx1+8vzz5TJURD+vTXNnpmLDE/OPp8iBJNvwBmgCridgLtEst7Gdep/SlEPjwUxNcRBbby2jeimLk4yLzPNTlmFnr/IaepVXHHQZO7w3+W4rY2+fUNfX+dyNOqg8qNOLHJ+Ek4Sv58BICFCJKtg5phUuZvS40CsaXxInj1OHIXliHZJjs03YdYelZv8+S5w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ncsc.gov.uk; dmarc=pass action=none header.from=ncsc.gov.uk; dkim=pass header.d=ncsc.gov.uk; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncsc.gov.uk; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oujyaSaz6wUWLO/092w7zHiYEl7D+n4s4S7YPssqvGY=; b=QZm8RiuewKh5kyk0pOO5tW7VvrUTxTL/uFBqcS6J01ilcLo4MaZA3IG9zuuZLQquTAiX05KoEl6eDsnLDFCsQi/ykEW01n/q4flIrJBMrgpzxMCZsvv1MlMqlreRNTaJsGHRszNpfzjaGYdn9nLYKLb60Pjy/euLDVfMjGXa78Sh+cUBQOJbMsqkKPDKw09ykFp9Ku9UkdeW7jRPESJhNV2GAvJJm3RdoIFng8jAsNWF1Dkvt80quN2j+OujE/XjcSkQ7lnm5m09ILDl2E0tzzOZyoQDXjWwERJDtSW2KS9j6b+9zgb8PbLwB/HXPeLfYjugVcuwIKhmOLC3mVOMyg==
Received: from LO2P123MB3599.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:12c::10) by LO2P123MB4206.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:161::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.12; Tue, 26 Jan 2021 11:19:28 +0000
Received: from LO2P123MB3599.GBRP123.PROD.OUTLOOK.COM ([fe80::149b:fdfd:8037:edf3]) by LO2P123MB3599.GBRP123.PROD.OUTLOOK.COM ([fe80::149b:fdfd:8037:edf3%7]) with mapi id 15.20.3784.019; Tue, 26 Jan 2021 11:19:28 +0000
From: Kirsty P <Kirsty.p@ncsc.gov.uk>
To: "opsec@ietf.org" <opsec@ietf.org>
CC: Ollie Whitehouse <ollie.whitehouse@nccgroup.com>
Thread-Topic: New Version Notification for draft-paine-smart-indicators-of-compromise-02.txt
Thread-Index: AQHW6dOxYq/6wLx6q0SrOBrhyWTPK6o50IWW
Date: Tue, 26 Jan 2021 11:19:28 +0000
Message-ID: <LO2P123MB35999C613671D92627878AD9D7BC0@LO2P123MB3599.GBRP123.PROD.OUTLOOK.COM>
References: <161055984315.25920.7578284983388559797@ietfa.amsl.com>
In-Reply-To: <161055984315.25920.7578284983388559797@ietfa.amsl.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ncsc.gov.uk;
x-originating-ip: [51.132.68.129]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 980c88bb-eaf2-4585-cbc2-08d8c1ec3f2b
x-ms-traffictypediagnostic: LO2P123MB4206:
x-ld-processed: 14aa5744-ece1-474e-a2d7-34f46dda64a1,ExtAddr
x-microsoft-antispam-prvs: <LO2P123MB420646B41F3469359F00C9B1D7BC0@LO2P123MB4206.GBRP123.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: Y3ijFRQeP9V3eTw5bPQSbJ9vsMZBxNchb6EcA3nL1hNefK/2SPno5Lob3t7uyBiUm1oq6kTdAbS1s+P55/n1+Ux6Qqms5hXe1Y1rhWNzlPUlAJQe7SXZuaOACr5y23x2BshlQO6liX/OK3P+uVLwvFiT/zcnDRTWDf2Csm2Cuby1Mxy55JqgmQQh+mZd92i7lT+8E5OlJSE6H8otpkOetW/vxgaMQCFjRkr5pRsWRl4VaHe6OAxbC2l+N7/7PYDdkHSDbe0pOH1d8KIKCNnk2ZN4XfHjtWpxSGM6UmzqF/VYkQr0fWaXrMFPmapwsppVeRauII8t6z5B0w0WwkPT1A5Y4jVChRCoC+3HVi8TOSb32GkheKtJpVK0ZrzX3zUypobG3yAY79aFe/Bx/6NNv/fn50ofohTmaxKDPrkOolnb0OnONmK9iEun3/bJnIRjQjGTNKgwfmaq4ffWLRQLwQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;  IPV:NLI; SFV:NSPM; H:LO2P123MB3599.GBRP123.PROD.OUTLOOK.COM; PTR:; CAT:NONE;  SFS:(4636009)(39850400004)(346002)(136003)(376002)(396003)(366004)(478600001)(7696005)(6506007)(8676002)(5660300002)(53546011)(4326008)(55016002)(64756008)(966005)(71200400001)(2906002)(8936002)(66946007)(316002)(66556008)(26005)(33656002)(186003)(66574015)(83380400001)(86362001)(66446008)(15650500001)(6916009)(52536014)(9686003)(76116006)(66476007)(19627405001); DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata: =?iso-8859-1?Q?kWFpwkKng0bNBUTiNF2mQfN3UC27hbagjMlJAOTRlLmYDSt90ctEY7YZ+M?= =?iso-8859-1?Q?WSNA6cQTcq4b1nqwYjK5A1dnss9hleuffars2A1kdnyinF3//YnlWbhiiD?= =?iso-8859-1?Q?9ZKXKR1f1zmYp1p+JlGm+f8eK7harFBB+YdyY+qRGCRcANs5oqlv9+4QDD?= =?iso-8859-1?Q?35tsMj1DAGvG35wGhgIh97RYsBVsfxslG+h8UZEMAL4di0GuiRc5C0TKKl?= =?iso-8859-1?Q?0WPJAem6ROqd5AgWip43avXpeEyFVLlqVrJyCzzjxA+eUgD0NGXWrAJs1R?= =?iso-8859-1?Q?32xhjvOFsprHSS+WODJ7Fr1Norz7E5j2Pz0rzzvlcBM07Me7NPRhHAzXfX?= =?iso-8859-1?Q?nKAD2+a4j3MbCBKXelX+1qLLYbdv/hAzmurP15RrjO6nLbTcY6PFuZDfVZ?= =?iso-8859-1?Q?ADH6Tl2hSFkATFCMEFoJgFas1VjodrnwmQc4tjReqyQ9YLcqhWc/6ysdpB?= =?iso-8859-1?Q?QhpPGvq2is8uzlgR2l/QYabYfg8F2D99aCPdgg6s72yqKQzO3Fh+3u1qbT?= =?iso-8859-1?Q?EYi0RiP2EewSEJlxuLrN7C2b3kxnFbQ+ZNRK93fMu9kXeM9QPxKqxXumUl?= =?iso-8859-1?Q?r/rk9MciWXhrbRgUQyfPHEIkCM3QLkkq32LFQr1qpdpy+ecdXgUfiM+Qbp?= =?iso-8859-1?Q?FMIG/HhNrJ7C+qSYVgkJ27GgrCJ5xBH5fSpNBQtnftmYvriEYTenTMEDEa?= =?iso-8859-1?Q?rzuBlcFHjya7IGCEDsLNaywpjbwB34ItKbZqK3GW9beLhnfpyBr7tPrvYa?= =?iso-8859-1?Q?Yxe8arbvlMLe+zbrFZA2RRKP19f3NbmIMi6ampZPcWsevUDHYlm/02jXU1?= =?iso-8859-1?Q?C/6h/FnzbgNvJ6tcEKJvAn+Vue1coNwE9ifPW6sHDnWjrYCcH3myU1Rz7z?= =?iso-8859-1?Q?e8tz4rMQWC8YypEjtG6xi1trKicv2u8PE5BRcQczG5h+eXyjpAcHy0FFOE?= =?iso-8859-1?Q?VdwqLo/u/qhFpGLXc/IOiJtXOU0kIK4lev5yGoXUpYAEa2yVuHzeQJ1NQw?= =?iso-8859-1?Q?LlaiFpr7rI2Xf8sL+jp/ijlnlBt2r+PTMKhH52Sk0GB/XKpV5UVfJCzACw?= =?iso-8859-1?Q?oo/JVXFxh4bB62Vi9wmh4dNsQ306w21/LNcRKQRNEBFA?=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_LO2P123MB35999C613671D92627878AD9D7BC0LO2P123MB3599GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: ncsc.gov.uk
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LO2P123MB3599.GBRP123.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 980c88bb-eaf2-4585-cbc2-08d8c1ec3f2b
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jan 2021 11:19:28.8326 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 14aa5744-ece1-474e-a2d7-34f46dda64a1
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: SNKPn1Msg6NeyWRfrnWpIVziw/9ESb8wXchcKCvW2PhPurHjHl+/IdlADd527dQkBytSbHKrdV8lB9zvfw3fXA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO2P123MB4206
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/q9Pu8RBglIQpXFM9Lq_ECpNwudY>
Subject: [OPSEC] Fw: New Version Notification for draft-paine-smart-indicators-of-compromise-02.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Jan 2021 11:19:34 -0000

--_000_LO2P123MB35999C613671D92627878AD9D7BC0LO2P123MB3599GBRP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi OPSEC,

Please see below for details of our new draft on Indicators of Compromise (=
IoCs), updated based on previous comments. We think it might be suitable fo=
r OPSEC, but we'd like to hear your comments, discussion or feedback on thi=
s draft - please get in touch!

Kirsty & Ollie

________________________________
From: internet-drafts@ietf.org <internet-drafts@ietf.org>
Sent: 13 January 2021 17:44
To: Kirsty P <Kirsty.p@ncsc.gov.uk>; Kirsty P <Kirsty.p@ncsc.gov.uk>; Ollie=
 Whitehouse <ollie.whitehouse@nccgroup.com>
Subject: New Version Notification for draft-paine-smart-indicators-of-compr=
omise-02.txt


A new version of I-D, draft-paine-smart-indicators-of-compromise-02.txt
has been successfully submitted by Kirsty Paine and posted to the
IETF repository.

Name:           draft-paine-smart-indicators-of-compromise
Revision:       02
Title:          Indicators of Compromise (IoCs) and Their Role in Attack De=
fence
Document date:  2021-01-13
Group:          Individual Submission
Pages:          18
URL:            https://www.ietf.org/archive/id/draft-paine-smart-indicator=
s-of-compromise-02.txt
Status:         https://datatracker.ietf.org/doc/draft-paine-smart-indicato=
rs-of-compromise/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-paine-smart-ind=
icators-of-compromise
Htmlized:       https://tools.ietf.org/html/draft-paine-smart-indicators-of=
-compromise-02
Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-paine-smart-indic=
ators-of-compromise-02

Abstract:
   Indicators of Compromise (IoCs) are an important technique in attack
   defence (often called cyber defence).  This document outlines the
   different types of IoC, their associated benefits and limitations,
   and discusses their effective use.  It also contextualises the role
   of IoCs in defending against attacks through describing a recent case
   study.  This draft does not pre-suppose where IoCs can be found or
   should be detected - as they can be discovered and deployed in
   networks, endpoints or elsewhere - rather, engineers should be aware
   that they need to be detectable (either by endpoints, security
   appliances or network-based defences, or ideally all) to be
   effective.  The purpose of this draft is to document both the
   operational issues, but also the best practices associated with use
   of IoCs today.  This draft provides a foundation for proposals for
   new approaches to operational challenges in network security.




Please note that it may take a couple of minutes from the time of submissio=
n
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat
This information is exempt under the Freedom of Information Act 2000 (FOIA)=
 and may be exempt under other UK information legislation. Refer any FOIA q=
ueries to ncscinfoleg@ncsc.gov.uk. All material is UK Crown Copyright =A9

--_000_LO2P123MB35999C613671D92627878AD9D7BC0LO2P123MB3599GBRP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;=
, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Hi OPSEC,</div>
<div style=3D"font-family: &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;=
, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;=
, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Please see below for details of our new draft on Indicators of Compromise (=
IoCs), updated based on previous comments. We think it might be suitable fo=
r OPSEC, but we'd like to hear your comments, discussion or feedback on thi=
s draft - please get in touch!</div>
<div style=3D"font-family: &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;=
, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;=
, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Kirsty &amp; Ollie</div>
<div>
<div style=3D"font-family: &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;=
, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id=3D"appendonsend"></div>
<hr tabindex=3D"-1" style=3D"display:inline-block; width:98%">
<div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" co=
lor=3D"#000000" style=3D"font-size:11pt"><b>From:</b> internet-drafts@ietf.=
org &lt;internet-drafts@ietf.org&gt;<br>
<b>Sent:</b> 13 January 2021 17:44<br>
<b>To:</b> Kirsty P &lt;Kirsty.p@ncsc.gov.uk&gt;; Kirsty P &lt;Kirsty.p@ncs=
c.gov.uk&gt;; Ollie Whitehouse &lt;ollie.whitehouse@nccgroup.com&gt;<br>
<b>Subject:</b> New Version Notification for draft-paine-smart-indicators-o=
f-compromise-02.txt</font>
<div>&nbsp;</div>
</div>
<div class=3D"BodyFragment"><font size=3D"2"><span style=3D"font-size:11pt"=
>
<div class=3D"PlainText"><br>
A new version of I-D, draft-paine-smart-indicators-of-compromise-02.txt<br>
has been successfully submitted by Kirsty Paine and posted to the<br>
IETF repository.<br>
<br>
Name:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; draft-pai=
ne-smart-indicators-of-compromise<br>
Revision:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 02<br>
Title:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Indicators of =
Compromise (IoCs) and Their Role in Attack Defence<br>
Document date:&nbsp; 2021-01-13<br>
Group:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Individual Sub=
mission<br>
Pages:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 18<br>
URL:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; http=
s://www.ietf.org/archive/id/draft-paine-smart-indicators-of-compromise-02.t=
xt<br>
Status:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https://datatracker=
.ietf.org/doc/draft-paine-smart-indicators-of-compromise/<br>
Htmlized:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https://datatracker.ietf.org/=
doc/html/draft-paine-smart-indicators-of-compromise<br>
Htmlized:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https://tools.ietf.org/html/d=
raft-paine-smart-indicators-of-compromise-02<br>
Diff:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https://w=
ww.ietf.org/rfcdiff?url2=3Ddraft-paine-smart-indicators-of-compromise-02<br=
>
<br>
Abstract:<br>
&nbsp;&nbsp; Indicators of Compromise (IoCs) are an important technique in =
attack<br>
&nbsp;&nbsp; defence (often called cyber defence).&nbsp; This document outl=
ines the<br>
&nbsp;&nbsp; different types of IoC, their associated benefits and limitati=
ons,<br>
&nbsp;&nbsp; and discusses their effective use.&nbsp; It also contextualise=
s the role<br>
&nbsp;&nbsp; of IoCs in defending against attacks through describing a rece=
nt case<br>
&nbsp;&nbsp; study.&nbsp; This draft does not pre-suppose where IoCs can be=
 found or<br>
&nbsp;&nbsp; should be detected - as they can be discovered and deployed in=
<br>
&nbsp;&nbsp; networks, endpoints or elsewhere - rather, engineers should be=
 aware<br>
&nbsp;&nbsp; that they need to be detectable (either by endpoints, security=
<br>
&nbsp;&nbsp; appliances or network-based defences, or ideally all) to be<br=
>
&nbsp;&nbsp; effective.&nbsp; The purpose of this draft is to document both=
 the<br>
&nbsp;&nbsp; operational issues, but also the best practices associated wit=
h use<br>
&nbsp;&nbsp; of IoCs today.&nbsp; This draft provides a foundation for prop=
osals for<br>
&nbsp;&nbsp; new approaches to operational challenges in network security.<=
br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at tools.ietf.org.<br>
<br>
The IETF Secretariat<br>
</div>
</span></font></div>
</div>
This information is exempt under the Freedom of Information Act 2000 (FOIA)=
 and may be exempt under other UK information legislation. Refer any FOIA q=
ueries to ncscinfoleg@ncsc.gov.uk. All material is UK Crown Copyright =A9
</body>
</html>

--_000_LO2P123MB35999C613671D92627878AD9D7BC0LO2P123MB3599GBRP_--


From nobody Tue Jan 26 11:55:39 2021
Return-Path: <internet-drafts@ietf.org>
X-Original-To: opsec@ietf.org
Delivered-To: opsec@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EE9B63A0E0B; Tue, 26 Jan 2021 11:55:33 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: opsec@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 7.24.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: opsec@ietf.org
Message-ID: <161169093391.25499.17808569074028604279@ietfa.amsl.com>
Date: Tue, 26 Jan 2021 11:55:33 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/ljIZF-MolKxlBy5p7pD_nTqbV2A>
Subject: [OPSEC] I-D Action: draft-ietf-opsec-ns-impact-04.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Jan 2021 19:55:34 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure WG of the IETF.

        Title           : Impact of TLS 1.3 to Operational Network Security Practices
        Authors         : Nancy Cam-Winget
                          Eric Wang
                          Roman Danyliw
                          Roelof DuToit
	Filename        : draft-ietf-opsec-ns-impact-04.txt
	Pages           : 18
	Date            : 2021-01-26

Abstract:
   Network-based security solutions are used by enterprises, the public
   sector, internet-service providers, and cloud-service providers to
   both complement and enhance host-based security solutions.  As TLS is
   a widely deployed protocol to secure communication, these network-
   based security solutions must necessarily interact with it.  This
   document describes this interaction for current operational security
   practices and notes the impact of TLS 1.3 on them.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsec-ns-impact/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-opsec-ns-impact-04
https://datatracker.ietf.org/doc/html/draft-ietf-opsec-ns-impact-04

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-opsec-ns-impact-04


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/