From rpsec-bounces@ietf.org Wed Dec 12 17:40:13 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1J2aFJ-0002IY-5y; Wed, 12 Dec 2007 17:40:05 -0500 Received: from rpsec by megatron.ietf.org with local (Exim 4.43) id 1J2aFH-00023f-Cr for rpsec-confirm+ok@megatron.ietf.org; Wed, 12 Dec 2007 17:40:03 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1J2aFG-00020i-TR; Wed, 12 Dec 2007 17:40:02 -0500 Received: from ns1.neustar.com ([2001:503:c779:1a::9c9a:108a]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1J2aFG-00059u-H8; Wed, 12 Dec 2007 17:40:02 -0500 Received: from stiedprstage1.ietf.org (stiedprstage1.va.neustar.com [10.31.47.10]) by ns1.neustar.com (Postfix) with ESMTP id 5FD0726E4D; Wed, 12 Dec 2007 22:40:02 +0000 (GMT) Received: from ietf by stiedprstage1.ietf.org with local (Exim 4.43) id 1J2aFG-0001fG-9m; Wed, 12 Dec 2007 17:40:02 -0500 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org From: Internet-Drafts@ietf.org Message-Id: Date: Wed, 12 Dec 2007 17:40:02 -0500 X-Spam-Score: -1.4 (-) X-Scan-Signature: c3a18ef96977fc9bcc21a621cbf1174b Cc: rpsec@ietf.org Subject: [RPSEC] I-D Action:draft-ietf-rpsec-bgp-session-sec-req-00.txt X-BeenThere: rpsec@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Routing Protocol Security Requirements List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: rpsec-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Routing Protocol Security Requirements Working Group of the IETF. Title : BGP Session Security Requirements Author(s) : M. Behringer Filename : draft-ietf-rpsec-bgp-session-sec-req-00.txt Pages : 12 Date : 2007-12-12 The document "BGP security requirements" (draft-ietf-rpsec-bgpsecrec) specifies general security requirements for BGP. However, specific security requirements for single BGP sessions, i.e., the connection between two BGP peers, are only touched on briefly in the section "transport layer protection". This document expands on this particular aspect of BGP security, defining the security requirements between two BGP peers. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-rpsec-bgp-session-sec-req-00.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-rpsec-bgp-session-sec-req-00.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-rpsec-bgp-session-sec-req-00.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2007-12-12173306.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-rpsec-bgp-session-sec-req-00.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-rpsec-bgp-session-sec-req-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2007-12-12173306.I-D\@ietf.org> --OtherAccess-- --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec --NextPart-- From rpsec-bounces@ietf.org Thu Dec 13 14:27:33 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1J2tiG-0005NH-Ps; Thu, 13 Dec 2007 14:27:16 -0500 Received: from rpsec by megatron.ietf.org with local (Exim 4.43) id 1J2tiF-0005JN-Nl for rpsec-confirm+ok@megatron.ietf.org; Thu, 13 Dec 2007 14:27:15 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1J2tiF-0005Gn-C3 for rpsec@ietf.org; Thu, 13 Dec 2007 14:27:15 -0500 Received: from vapor.isi.edu ([128.9.64.64]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1J2tiD-00065X-R9 for rpsec@ietf.org; Thu, 13 Dec 2007 14:27:15 -0500 Received: from [70.213.233.175] (175.sub-70-213-233.myvzw.com [70.213.233.175]) by vapor.isi.edu (8.13.8/8.13.8) with ESMTP id lBDJQupl002871; Thu, 13 Dec 2007 11:26:57 -0800 (PST) Message-ID: <4761877F.6060504@isi.edu> Date: Thu, 13 Dec 2007 11:26:55 -0800 From: Joe Touch User-Agent: Thunderbird 2.0.0.9 (Windows/20071031) MIME-Version: 1.0 To: rpsec@ietf.org X-Enigmail-Version: 0.95.5 X-ISI-4-43-8-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu X-Spam-Score: 0.0 (/) X-Scan-Signature: 8abaac9e10c826e8252866cbe6766464 Subject: [RPSEC] I-D Action:draft-ietf-rpsec-bgp-session-sec-req-00.txt X-BeenThere: rpsec@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Routing Protocol Security Requirements List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1320485052==" Errors-To: rpsec-bounces@ietf.org This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --===============1320485052== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig303A6B58C6D1DBA73A8F95E1" This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig303A6B58C6D1DBA73A8F95E1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable It would be useful to update this doc's discussion of TCP MD5 and its successors with respect to work in the TCPM WG reported in Vancouver, in particular: - there is a newer version of Bellovin's ID - the TCPM ID on TCP-AO supercedes Ron's and is the intended replacement to TCP MD5; I believe Ron's has been withdrawn at this point Joe --------------enig303A6B58C6D1DBA73A8F95E1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHYYd/E5f5cImnZrsRAsOFAJ9wLgPxuifLOqNvp83tvF2QY8kq0wCg0u55 2IrFo7260k7Top+ZClVwDjc= =8KNN -----END PGP SIGNATURE----- --------------enig303A6B58C6D1DBA73A8F95E1-- --===============1320485052== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec --===============1320485052==-- From rpsec-bounces@ietf.org Thu Dec 13 16:35:15 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1J2vi1-0002d6-I5; Thu, 13 Dec 2007 16:35:09 -0500 Received: from rpsec by megatron.ietf.org with local (Exim 4.43) id 1J2vi0-0002cz-Qr for rpsec-confirm+ok@megatron.ietf.org; Thu, 13 Dec 2007 16:35:08 -0500 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1J2vi0-0002cq-H4 for rpsec@ietf.org; Thu, 13 Dec 2007 16:35:08 -0500 Received: from ams-iport-1.cisco.com ([144.254.224.140]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1J2vhy-0002cf-A0 for rpsec@ietf.org; Thu, 13 Dec 2007 16:35:08 -0500 X-IronPort-AV: E=Sophos;i="4.24,163,1196636400"; d="scan'208";a="850590" Received: from ams-dkim-2.cisco.com ([144.254.224.139]) by ams-iport-1.cisco.com with ESMTP; 13 Dec 2007 22:35:05 +0100 Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id lBDLZ509026588; Thu, 13 Dec 2007 22:35:05 +0100 Received: from xbh-ams-332.emea.cisco.com (xbh-ams-332.cisco.com [144.254.231.87]) by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id lBDLZ5mc012408; Thu, 13 Dec 2007 21:35:05 GMT Received: from xfe-ams-332.cisco.com ([144.254.231.73]) by xbh-ams-332.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 13 Dec 2007 22:35:05 +0100 Received: from mbehring-wxp.cisco.com ([10.55.2.210]) by xfe-ams-332.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 13 Dec 2007 22:35:04 +0100 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Thu, 13 Dec 2007 22:34:46 +0100 To: Joe Touch , rpsec@ietf.org From: "Michael H. Behringer" Subject: Re: [RPSEC] I-D Action:draft-ietf-rpsec-bgp-session-sec-req-00.txt In-Reply-To: <4761877F.6060504@isi.edu> References: <4761877F.6060504@isi.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Message-ID: X-OriginalArrivalTime: 13 Dec 2007 21:35:04.0843 (UTC) FILETIME=[064F95B0:01C83DD0] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=824; t=1197581705; x=1198445705; c=relaxed/simple; s=amsdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=mbehring@cisco.com; z=From:=20=22Michael=20H.=20Behringer=22=20 |Subject:=20Re=3A=20[RPSEC]=20I-D=0A=20=20Action=3Adraft-ie tf-rpsec-bgp-session-sec-req-00.txt |Sender:=20; bh=QCjXHPcYzvXksVn+wxg/Dew/6PY0nDrsGtTJTHSgGz8=; b=UfYidclFUmCkRc/U14XceFls/2QVSAvgmjQlac+FzeQJtvz2qpyvIpDtAk Iw9VhLHnyxiyMm09WPLfe/GOpOyIcnrYUUmUf2nuzqRAeJJ62KPzYXX7LReC zkABt9IDIZ; Authentication-Results: ams-dkim-2; header.From=mbehring@cisco.com; dkim=pass ( sig from cisco.com/amsdkim2001 verified; ); X-Spam-Score: -4.0 (----) X-Scan-Signature: ffa9dfbbe7cc58b3fa6b8ae3e57b0aa3 Cc: X-BeenThere: rpsec@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Routing Protocol Security Requirements List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: rpsec-bounces@ietf.org Hi Joe, Thanks a lot for the feedback, this is very useful! The currently posted draft is the same version as before, just as a WG draft, so a lot of the feedback received is not actually in the document yet. I'll do all the updates, and post a -01 version. Michael At 20:26 13/12/2007, Joe Touch wrote: >It would be useful to update this doc's discussion of TCP MD5 and its >successors with respect to work in the TCPM WG reported in Vancouver, in >particular: > >- there is a newer version of Bellovin's ID > >- the TCPM ID on TCP-AO supercedes Ron's and is the intended replacement >to TCP MD5; I believe Ron's has been withdrawn at this point > >Joe > > > >_______________________________________________ >RPSEC mailing list >RPSEC@ietf.org >https://www1.ietf.org/mailman/listinfo/rpsec _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec