From nobody Wed Dec 2 08:07:43 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E5811AD0CB for ; Wed, 2 Dec 2015 08:07:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id criUhXP4ABLJ for ; Wed, 2 Dec 2015 08:07:40 -0800 (PST) Received: from mail-oi0-x262.google.com (mail-oi0-x262.google.com [IPv6:2607:f8b0:4003:c06::262]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 403801ACDD0 for ; Wed, 2 Dec 2015 08:07:38 -0800 (PST) Received: by oiww189 with SMTP id w189so2914400oiw.2 for ; Wed, 02 Dec 2015 08:07:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verisign-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:content-type :content-transfer-encoding:mime-version; bh=RtuCVRc2wUC0mDnMYGcUUF5FUIJr4f4NVdRSwNg/Oeg=; b=UuLhhaOlztOIelPvDOLFWPoSN8iZtaE68OlypkGofVihdSh4WoNHuckB7x5hkX1tMm G4yQPw/Rqyfeuho1U7wDBtOXO2ISbMFWJgA0U42X3urkJ+vmooByGi6X2ERb6ZfJdvRj 2m7ogxLH28jmEEHWe0FmBThtFHUf9p5orSQSI3yJGQOsFr7dY4WlZQ+jqCwr8x30PZhR k1Q72uZOqdJ+yto1UuQbLWNzAbvPLA7DEvW5L9n76et8QoUwDuEDG6INcj6DSfPWDmpH B3WUPvLBrvI3rOAn/tuOcm/Og8lP0DDILsk5sI/DJWMv5EpDU+/70vQVgkucrZTFUmJi o0Mg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:thread-topic:thread-index:date :message-id:accept-language:content-language:content-type :content-transfer-encoding:mime-version; bh=RtuCVRc2wUC0mDnMYGcUUF5FUIJr4f4NVdRSwNg/Oeg=; b=h1pI56ui9N+eWIpvtW+A7UxPyf3eIEnFcIbdJMbrq7i+5TfT+KbaMhmy5UkEM6XKHU G5xq4vRRGUS65LJLdKHu5kJG79IlMWYMmmdt643GBXRxeHas3JI8F9inCU3UAweNfZ+C 3PHvfTe1JgIqFbLhQJkVt5XiQKPOk+wxGeN4RHsU53H4pfC3pVSTYpiYYovq6JaFUJ0E igObnwRk/7hzrM3UEw3t6OoM4sUFIPSmlBeLc+/ADY/uSN1zeQ/DHIUAFOYUnFoB3+3X E1qgHptVxFtLuI7yZ56TMU6u7tgQKZCOU+rlDfyuw61Td+9M5nb2LMKAh+oDEn8oAv84 7YNw== X-Gm-Message-State: ALoCoQkoRGlCYekn2zM4Pj3H6Lw3j3Wi3X/UD7AoHukFsuiPUGbPA/bJqvLE4EImLtLeak7lFHadHngsN4i4wPS1gORMKFLFOA== X-Received: by 10.140.233.67 with SMTP id e64mr5209527qhc.42.1449072457657; Wed, 02 Dec 2015 08:07:37 -0800 (PST) Received: from brn1lxmailout01.verisign.com (brn1lxmailout01.verisign.com. [72.13.63.41]) by smtp-relay.gmail.com with ESMTPS id d68sm515448qkb.7.2015.12.02.08.07.37 for (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 02 Dec 2015 08:07:37 -0800 (PST) X-Relaying-Domain: verisign.com Received: from BRN1WNEXCHM01.vcorp.ad.vrsn.com (brn1wnexchm01 [10.173.152.255]) by brn1lxmailout01.verisign.com (8.13.8/8.13.8) with ESMTP id tB2G7bWS003049 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 2 Dec 2015 11:07:37 -0500 Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by BRN1WNEXCHM01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Wed, 2 Dec 2015 11:07:36 -0500 From: "Hollenbeck, Scott" To: "weirds@ietf.org" Thread-Topic: Domain Reputation in RDAP Thread-Index: AdEtG45Y/Eguxg6XRvqNNe39ahP/Cw== Date: Wed, 2 Dec 2015 16:07:35 +0000 Message-ID: <831693C2CDA2E849A7D7A712B24E257F4A103357@BRN1WNEXMBX01.vcorp.ad.vrsn.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.173.152.4] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2015 16:07:42 -0000 Someone recently asked me to read this article and consider if or how RDAP = might be helpful in identifying bogus academic journal web sites: http://news.sciencemag.org/scientific-community/2015/11/feature-how-hijack-= journal The author uses the word "hijack" to describe what's happening with domains= (based on the title I thought it would be about bogus transfers), but I re= ad it as more of a problem with two scenarios: 1. A domain expires and is re-registered by someone who does bad things wit= h it. 2. A domain is registered and used to impersonate or appear to function as = a "legitimate" journal. Does anyone see value in adding something to RDAP that could be used as a m= easure of domain stability or reputation? The article describes how WHOIS d= ata can be used to detect suspicious activity ("If the registration date is= recent but the journal has been around for years, that's the first clue.")= . Might we do something more explicit? Scott From nobody Wed Dec 2 08:47:04 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77DD21B2C04 for ; Wed, 2 Dec 2015 08:47:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id czS3xi20s0r9 for ; Wed, 2 Dec 2015 08:47:01 -0800 (PST) Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02FF81B2C02 for ; Wed, 2 Dec 2015 08:47:00 -0800 (PST) Received: by wmww144 with SMTP id w144so64975226wmw.0 for ; Wed, 02 Dec 2015 08:46:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hxr-us.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=Q5DHxr+E2g3udIWhRg52Ics8jsnfBH7HglnM+/W71qg=; b=I9uk6DKlO95yJipbH5M5fAb+g5dwxM1h6/31GO8G+VhjH/N/pwa6H6juxfss64HQTC UlABsTZOwotnfCDwkOiwqmQnuMhyEpR7J2AlgkU85mX3C+IUD+nuGH/6nbU6e3qxp9A9 sgNTKL0u0n8LOJV4WATnHsprkFviPswPDgOg2QyIReqcgoQYmPW5lDkPacl8cXF2in0n IXGy4t/aICh45fwYImM7bbQsy7pEuhSrFi3GRMKkzDDfO+8c9FkpdkF57Kfflf/tnYoh HAG6ujnxTjxgIpdmpc9eRh/iD+S/fR01xngF+31yLA/NLkecZKGgrljTu/nwZxO8in2Y Od3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=Q5DHxr+E2g3udIWhRg52Ics8jsnfBH7HglnM+/W71qg=; b=hl0ZKYkvMIRrodwS1AmdgoAdxDeRJbVXAPHW87jBs5h4E/8DS2XuFByGE7mivulv3z 6KcibV5d9VE7qQQr0F3Ii9WknP1WNS+oWIVW5Y7u6jjM7xyGtrBxD3t+WSxIahMD7/GK 6AOTw92LxQs6/ebzztbhPRSFegyVAVTALOl9nhmKx8nOeM5Ltp9xuv1gbnsM+dUa/+mt wbhkcAaKrJfhnAL2kliOm3cn/SXcgaw4496W9EawP8tnTc1NuW7PQOJI7BViA5h+Tiih fj0qxOvF2+puSteE/zWSDCpJDSiUZDldjc1i5WdNe0AHqZA+x8pSyl8B2XlNhmBEoj85 +oBg== X-Gm-Message-State: ALoCoQmX2YUMXn/ftUzZU6Z2sigmseM56kKG19B6PwEl6S/ovLTk+l8/4bvRLjFVDxOweDAYzEBc MIME-Version: 1.0 X-Received: by 10.28.7.138 with SMTP id 132mr48001120wmh.100.1449074819535; Wed, 02 Dec 2015 08:46:59 -0800 (PST) Received: by 10.194.91.203 with HTTP; Wed, 2 Dec 2015 08:46:59 -0800 (PST) X-Originating-IP: [2001:500:4:15:5058:2ca2:b5cf:28ee] In-Reply-To: <831693C2CDA2E849A7D7A712B24E257F4A103357@BRN1WNEXMBX01.vcorp.ad.vrsn.com> References: <831693C2CDA2E849A7D7A712B24E257F4A103357@BRN1WNEXMBX01.vcorp.ad.vrsn.com> Date: Wed, 2 Dec 2015 11:46:59 -0500 Message-ID: From: Andrew Newton To: "Hollenbeck, Scott" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "weirds@ietf.org" Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2015 16:47:02 -0000 Hmm... that depends. Is the idea to provide meta-data so a reputation can be determined, or is the idea to actually provide a reputation? The latter idea is subjective and could be dangerous. But providing meta-data can be fact based and put reputation in the eye of the beholder. It seems like a simple thing to do with existing RDAP would be to provide a history of registrations and expirations using events. That way a long held domain changing hands is something an observer can draw their own conclusions about. Just an idea. -andy On Wed, Dec 2, 2015 at 11:07 AM, Hollenbeck, Scott wrote: > Someone recently asked me to read this article and consider if or how RDA= P might be helpful in identifying bogus academic journal web sites: > > http://news.sciencemag.org/scientific-community/2015/11/feature-how-hijac= k-journal > > The author uses the word "hijack" to describe what's happening with domai= ns (based on the title I thought it would be about bogus transfers), but I = read it as more of a problem with two scenarios: > > 1. A domain expires and is re-registered by someone who does bad things w= ith it. > > 2. A domain is registered and used to impersonate or appear to function a= s a "legitimate" journal. > > Does anyone see value in adding something to RDAP that could be used as a= measure of domain stability or reputation? The article describes how WHOIS= data can be used to detect suspicious activity ("If the registration date = is recent but the journal has been around for years, that's the first clue.= "). Might we do something more explicit? > > Scott > > _______________________________________________ > weirds mailing list > weirds@ietf.org > https://www.ietf.org/mailman/listinfo/weirds From nobody Wed Dec 2 09:02:34 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D1681A0197 for ; Wed, 2 Dec 2015 09:02:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hDVPsCq_fgfw for ; Wed, 2 Dec 2015 09:02:30 -0800 (PST) Received: from mail-qg0-x261.google.com (mail-qg0-x261.google.com [IPv6:2607:f8b0:400d:c04::261]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13B5C1A0161 for ; Wed, 2 Dec 2015 09:02:30 -0800 (PST) Received: by qgae107 with SMTP id e107so3032823qga.1 for ; Wed, 02 Dec 2015 09:02:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verisign-com.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:thread-topic:thread-index:date:message-id :references:in-reply-to:accept-language:content-language :content-type:content-transfer-encoding:mime-version; bh=OqksFWx/XrpeeAKXnoPZIv32ZHE3vUyo/ToS6GG/9gI=; b=aQmZ0yZiMrHI/2w/dWdxZpAM1R+avs7KMpwxJF+yf9KYiiwq/01vlQnyTzALHXu1gl f50X/vbXbxuDaD0AcZJbKKcY82i0GZsaVr9ize988KZAx4DwT14i7UQNPyqRe0r4+Xie tEC3uLlRqzIIy8C+/mcrnRym2GN9eL8IoItyovkjcioe8LZo8oWxgYEG/kgObd2h1eNO GO2c7U40Nm5+gHZ8kEjilq0FYfgXKhdWSnkKU6I/w/cPsI4NpPVFf2hRv5XRGxxBXcKd AlmYpZ72dqaNiRnpe0dtIM1+3VnfeXAhE3m0S4SUyCw+ybgCYOmkbGdRTdyqq/JP1/va jkcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:thread-topic:thread-index :date:message-id:references:in-reply-to:accept-language :content-language:content-type:content-transfer-encoding :mime-version; bh=OqksFWx/XrpeeAKXnoPZIv32ZHE3vUyo/ToS6GG/9gI=; b=P8duck9NnhYDTM9ujbI4w9DkYtcCOjcUgZyA7OR91QWJfguS7YZHqRresuHuZks0XE Cu4kxrhPw+zZzYIKWg9tX3V49A5uZCvLJhG6JxKArxnjEV2xh6UFdmHrl3BaPJn7ptR0 yq52M5V6u1kgbWCYM5LCrqdI7JVAKWl/LUwkIHVXno+KKjH+IyE0LH1eA33h/KFakWFf z+/0WocnDUTKYU6wJAX0kUhm+rZsyc+G41fFooNtaL2qt7itOc5Iatm98N5YUERPnJuG pntlZ9C8Z1oNf6fZnHsOq/whgQ3KArTMmbIj1zkhDKNv3xGlk5aMwoRu1T4E4vDYUkBs pjmA== X-Gm-Message-State: ALoCoQmf5QD2sdAruUV/BU61m0wjdES4tzdAd7+Z1fEJBNe07YLVWGSSqH7cOT7AgHe715jwIG12S4tkO9Ltr0g0Qh0vtoqA0Q== X-Received: by 10.140.43.135 with SMTP id e7mr5193395qga.11.1449075749163; Wed, 02 Dec 2015 09:02:29 -0800 (PST) Received: from brn1lxmailout02.verisign.com (brn1lxmailout02.verisign.com. [72.13.63.42]) by smtp-relay.gmail.com with ESMTPS id a203sm567352qkb.4.2015.12.02.09.02.29 (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 02 Dec 2015 09:02:29 -0800 (PST) X-Relaying-Domain: verisign.com Received: from brn1wnexcas01.vcorp.ad.vrsn.com (brn1wnexcas01 [10.173.152.205]) by brn1lxmailout02.verisign.com (8.13.8/8.13.8) with ESMTP id tB2H2SXQ010616 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 2 Dec 2015 12:02:28 -0500 Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Wed, 2 Dec 2015 12:02:26 -0500 From: "Hollenbeck, Scott" To: Andrew Newton Thread-Topic: [weirds] Domain Reputation in RDAP Thread-Index: AdEtG45Y/Eguxg6XRvqNNe39ahP/CwAL2oiAAAobmtA= Date: Wed, 2 Dec 2015 17:02:24 +0000 Message-ID: <831693C2CDA2E849A7D7A712B24E257F4A1044EA@BRN1WNEXMBX01.vcorp.ad.vrsn.com> References: <831693C2CDA2E849A7D7A712B24E257F4A103357@BRN1WNEXMBX01.vcorp.ad.vrsn.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.173.152.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "weirds@ietf.org" Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2015 17:02:33 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBBbmRyZXcgTmV3dG9uIFttYWls dG86YW5keUBoeHIudXNdDQo+IFNlbnQ6IFdlZG5lc2RheSwgRGVjZW1iZXIgMDIsIDIwMTUgMTE6 NDcgQU0NCj4gVG86IEhvbGxlbmJlY2ssIFNjb3R0DQo+IENjOiB3ZWlyZHNAaWV0Zi5vcmcNCj4g U3ViamVjdDogUmU6IFt3ZWlyZHNdIERvbWFpbiBSZXB1dGF0aW9uIGluIFJEQVANCj4gDQo+IEht bS4uLiB0aGF0IGRlcGVuZHMuIElzIHRoZSBpZGVhIHRvIHByb3ZpZGUgbWV0YS1kYXRhIHNvIGEg cmVwdXRhdGlvbg0KPiBjYW4gYmUgZGV0ZXJtaW5lZCwgb3IgaXMgdGhlIGlkZWEgdG8gYWN0dWFs bHkgcHJvdmlkZSBhIHJlcHV0YXRpb24/DQo+IA0KPiBUaGUgbGF0dGVyIGlkZWEgaXMgc3ViamVj dGl2ZSBhbmQgY291bGQgYmUgZGFuZ2Vyb3VzLiBCdXQgcHJvdmlkaW5nDQo+IG1ldGEtZGF0YSBj YW4gYmUgZmFjdCBiYXNlZCBhbmQgcHV0IHJlcHV0YXRpb24gaW4gdGhlIGV5ZSBvZiB0aGUNCj4g YmVob2xkZXIuDQoNCkluZGVlZCwgdGhlIGZvcm1lciBzb3VuZHMgbW9yZSB2aWFibGUgdGhhbiB0 aGUgbGF0dGVyLg0KDQo+IEl0IHNlZW1zIGxpa2UgYSBzaW1wbGUgdGhpbmcgdG8gZG8gd2l0aCBl eGlzdGluZyBSREFQIHdvdWxkIGJlIHRvDQo+IHByb3ZpZGUgYSBoaXN0b3J5IG9mIHJlZ2lzdHJh dGlvbnMgYW5kIGV4cGlyYXRpb25zIHVzaW5nIGV2ZW50cy4gVGhhdA0KPiB3YXkgYSBsb25nIGhl bGQgZG9tYWluIGNoYW5naW5nIGhhbmRzIGlzIHNvbWV0aGluZyBhbiBvYnNlcnZlciBjYW4NCj4g ZHJhdyB0aGVpciBvd24gY29uY2x1c2lvbnMgYWJvdXQuIEp1c3QgYW4gaWRlYS4NCg0KSXQncyB3 b3J0aCB0aGlua2luZyBhYm91dC4gSXQgbWlnaHQgYWxzbyBiZSBoZWxwZnVsIGluIHRoZSBjb250 ZXh0IG9mIFdIT1dBUy1pc2ggc2VydmljZXMuDQoNClNjb3R0DQo= From nobody Wed Dec 2 09:09:17 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 779361A1AC1 for ; Wed, 2 Dec 2015 09:09:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.037 X-Spam-Level: X-Spam-Status: No, score=-1.037 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kIhYDthe7QVA for ; Wed, 2 Dec 2015 09:09:14 -0800 (PST) Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 606931A1ABB for ; Wed, 2 Dec 2015 09:09:14 -0800 (PST) Received: (qmail 34505 invoked from network); 2 Dec 2015 17:09:12 -0000 Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 2 Dec 2015 17:09:12 -0000 Date: 2 Dec 2015 17:08:51 -0000 Message-ID: <20151202170851.23051.qmail@ary.lan> From: "John Levine" To: weirds@ietf.org In-Reply-To: Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit Archived-At: Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2015 17:09:15 -0000 In article you write: >Hmm... that depends. Is the idea to provide meta-data so a reputation >can be determined, or is the idea to actually provide a reputation? The former, I hope. The latter would, among other things, make some heads at ICANN explode. I agree that historical data such as registration date, or last time contact info or DNS changed would be useful. R's, John From nobody Tue Dec 8 00:34:53 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A33D1A9048 for ; Tue, 8 Dec 2015 00:34:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8j3qiOjW0FMQ for ; Tue, 8 Dec 2015 00:34:49 -0800 (PST) Received: from mail-vk0-x232.google.com (mail-vk0-x232.google.com [IPv6:2607:f8b0:400c:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A276B1A9036 for ; Tue, 8 Dec 2015 00:34:49 -0800 (PST) Received: by vkha189 with SMTP id a189so7672267vkh.2 for ; Tue, 08 Dec 2015 00:34:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=s4XJnshFe+V1BuQPs8x4gaIq33ZtoKnyotkRc8r0rSU=; b=Gavtg9xJsQ9kE/7R2ys726ddmcUMUdB7kOFphROp5iDSLoTZY9AGTxD2dKJ+dGpwUK bWu8Vl4frbrCGB8VPHjWFABuCm3XMhTANzWbdV1iSERXF06uCnGGjDghzqYM02wayBd8 3qP6EtZB63NEwV1AGYMj2OTb/UTcf0rcIWzbwc/+YYkhaO3H5A4q5g2p/C7etsJPCjyT JVNkww0yBEDzSwdWS2JLsapWI11655nY248DI6GjItxzStPAikI1+IdSK5gphxcHjsGk 67Bv6tuHr70l+6KNkG8nLMX+Kb5rqjXwT+Ku9/ASan6UfMbo5j7wx4P248hZXsXFPcSh Q9Dg== MIME-Version: 1.0 X-Received: by 10.31.41.193 with SMTP id p184mr2149272vkp.132.1449563688821; Tue, 08 Dec 2015 00:34:48 -0800 (PST) Received: by 10.103.83.73 with HTTP; Tue, 8 Dec 2015 00:34:48 -0800 (PST) In-Reply-To: <20151202170851.23051.qmail@ary.lan> References: <20151202170851.23051.qmail@ary.lan> Date: Tue, 8 Dec 2015 00:34:48 -0800 Message-ID: From: "Murray S. Kucherawy" To: John Levine Content-Type: multipart/alternative; boundary=001a113ee62cc0692705265ed846 Archived-At: Cc: "weirds@ietf.org" Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2015 08:34:51 -0000 --001a113ee62cc0692705265ed846 Content-Type: text/plain; charset=UTF-8 On Wed, Dec 2, 2015 at 9:08 AM, John Levine wrote: > In article < > CAAQiQRdMCUn1UNeNhB3XukBpnNMiCWLdyijgtytp91WsNEx07w@mail.gmail.com> you > write: > >Hmm... that depends. Is the idea to provide meta-data so a reputation > >can be determined, or is the idea to actually provide a reputation? > > The former, I hope. The latter would, among other things, make some > heads at ICANN explode. > > I agree that historical data such as registration date, or last time > contact info or DNS changed would be useful. > +1. -MSK --001a113ee62cc0692705265ed846 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On Wed, Dec 2, 2015 at 9:08 AM, John Levine <johnl@taugh.co= m> wrote:
In article <CAAQiQRdMCUn1UNeNhB3XukBpnNMiCWLdyijgtytp91WsNEx07w@mail.gmail.com= > you write:
>Hmm... that depends. Is the idea to provide meta-data so a reputation >can be determined, or is the idea to actually provide a reputation?

The former, I hope.=C2=A0 The latter would, among other things, make= some
heads at ICANN explode.

I agree that historical data such as registration date, or last time
contact info or DNS changed would be useful.

+1.
-MSK
--001a113ee62cc0692705265ed846-- From nobody Tue Dec 8 07:12:09 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 290F81B2EE6 for ; Tue, 8 Dec 2015 07:12:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.43 X-Spam-Level: X-Spam-Status: No, score=-3.43 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P2nXwKxp0LlI for ; Tue, 8 Dec 2015 07:12:06 -0800 (PST) Received: from out.west.pexch112.icann.org (pfe112-ca-2.pexch112.icann.org [64.78.40.10]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF5F01B2EF7 for ; Tue, 8 Dec 2015 07:12:06 -0800 (PST) Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Tue, 8 Dec 2015 07:12:04 -0800 Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1044.021; Tue, 8 Dec 2015 07:12:04 -0800 From: Dave Piscitello To: "Murray S. Kucherawy" Thread-Topic: [weirds] Domain Reputation in RDAP Thread-Index: AdEtG45Y/Eguxg6XRvqNNe39ahP/CwASI9uAAADDgYABG8uoAP//6OIs Date: Tue, 8 Dec 2015 15:12:04 +0000 Message-ID: References: <20151202170851.23051.qmail@ary.lan>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted Content-Type: multipart/alternative; boundary="_000_CDE51C6DA1DF4758A6C6FAF142BF97C6icannorg_" MIME-Version: 1.0 Archived-At: Cc: John Levine , "weirds@ietf.org" Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2015 15:12:08 -0000 --_000_CDE51C6DA1DF4758A6C6FAF142BF97C6icannorg_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Could this also be some 'car fax' indicator that discloses whether a domain= has been block listed, when, by whom, for reason? While some ICANN heads m= ight explode others might be curious to understand what framework or policy= obligation this would imply. Sent from my iPhone On Dec 8, 2015, at 03:35, Murray S. Kucherawy > wrote: On Wed, Dec 2, 2015 at 9:08 AM, John Levine > wrote: In article > you write: >Hmm... that depends. Is the idea to provide meta-data so a reputation >can be determined, or is the idea to actually provide a reputation? The former, I hope. The latter would, among other things, make some heads at ICANN explode. I agree that historical data such as registration date, or last time contact info or DNS changed would be useful. +1. -MSK _______________________________________________ weirds mailing list weirds@ietf.org https://www.ietf.org/mailman/listinfo/weirds --_000_CDE51C6DA1DF4758A6C6FAF142BF97C6icannorg_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Could this also be some 'car fax' indicator that discloses whether a d= omain has been block listed, when, by whom, for reason? While some ICANN he= ads might explode others might be curious to understand what framework or p= olicy obligation this would imply.

Sent from my iPhone

On Dec 8, 2015, at 03:35, Murray S. Kucherawy <superuser@gmail.com> wrote:

On Wed, Dec 2, 2015 at 9:08 AM, John Levine <johnl@taugh.co= m> wrote:
In article <CAAQiQRdMCUn1UNeNhB3XukBpnNMiCWL= dyijgtytp91WsNEx07w@mail.gmail.com> you write:
>Hmm... that depends. Is the idea to provide meta-data so a reputation >can be determined, or is the idea to actually provide a reputation?

The former, I hope.  The latter would, among other things, make= some
heads at ICANN explode.

I agree that historical data such as registration date, or last time
contact info or DNS changed would be useful.

+1.

-MSK
_______________________________________________
weirds mailing list
weirds@ietf.org
https://www.= ietf.org/mailman/listinfo/weirds
--_000_CDE51C6DA1DF4758A6C6FAF142BF97C6icannorg_-- From nobody Tue Dec 8 08:10:48 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13C601B2F92 for ; Tue, 8 Dec 2015 08:10:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.137 X-Spam-Level: X-Spam-Status: No, score=-1.137 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DBkFKuaRgeA1 for ; Tue, 8 Dec 2015 08:10:46 -0800 (PST) Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA22F1B2F91 for ; Tue, 8 Dec 2015 08:10:45 -0800 (PST) Received: (qmail 14223 invoked from network); 8 Dec 2015 16:10:44 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent; s=378e.56670104.k1512; bh=xTZ8X8hrzxSkK04p1hTQ547uOGpmUUlZaa/zhhrUH+M=; b=USpepeRktNjAHPd55Lna6gl03lMYe76syL5XvpyaZ7D97Gdhv+dUWP9kzmSExJk1/nr8YemmTJvpU3KBt9aCzODdsVuqD4mNMe3Os2YuRi4hrC+tBNQomLR0tPNAZfp77MnA9/VhKua2Vq/FyIlZJkyZN8ba9s1h1aekAGE9wfjDcQz6+89Z6bEg7NY3qrHA0Q+NBg99QaH/KIxb7BW+2C7SdZaREjKkaVkbe2NtzNHR+NuHWf/pM7xFAMny6uq4 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent; s=378e.56670104.k1512; bh=xTZ8X8hrzxSkK04p1hTQ547uOGpmUUlZaa/zhhrUH+M=; b=j9LaUbdSUao3b3XdLD4lUeD36dxDMqLLL/I9WU2HRvW4322p27wtggGeWw6xCIejjOc1jSIBbw5W/Oie5aQ8HFON9Zyk9DF9vyk25j3jSpEM7AUvLSCp/xy7oCAZc8IHFOEF5gGkOV+gNMwGZho3NsDGH/G60sb72FTutt6FwqRc7li0u9WIaKWGc2vl3cORZojEryzYedsvD1MPZS2hV8FAoRxVJqaA1T0NXptmEZrEx0Y4EwDMXl7+Stjs4KZE Received: from localhost ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.0/X.509/SHA1) via TCP6; 08 Dec 2015 16:10:43 -0000 Date: 8 Dec 2015 11:10:43 -0500 Message-ID: From: "John R Levine" To: "Dave Piscitello" In-Reply-To: References: <20151202170851.23051.qmail@ary.lan>, User-Agent: Alpine 2.11 (OSX 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Archived-At: Cc: "weirds@ietf.org" Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2015 16:10:47 -0000 > Could this also be some 'car fax' indicator that discloses whether a > domain has been block listed, when, by whom, for reason? While some > ICANN heads might explode others might be curious to understand what > framework or policy obligation this would imply. That'd be OK with me but merely deciding which domain blocklists to look at is highly political. Also, I wouldn't assume that the BLs would be willing to provide a suitable feed to all the registries. Some registries like .org have a good reputation while some like .xyz do not. Regards, John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY Please consider the environment before reading this e-mail. From nobody Tue Dec 8 08:21:32 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EE251B2FAF for ; Tue, 8 Dec 2015 08:21:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.431 X-Spam-Level: X-Spam-Status: No, score=-3.431 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VG9EyZN9o_5n for ; Tue, 8 Dec 2015 08:21:30 -0800 (PST) Received: from out.west.pexch112.icann.org (pfe112-ca-2.pexch112.icann.org [64.78.40.10]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36F1D1B2FB0 for ; Tue, 8 Dec 2015 08:21:29 -0800 (PST) Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-2.pexch112.icann.org (64.78.40.23) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Tue, 8 Dec 2015 08:21:27 -0800 Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1044.021; Tue, 8 Dec 2015 08:21:27 -0800 From: Dave Piscitello To: John R Levine Thread-Topic: [weirds] Domain Reputation in RDAP Thread-Index: AdEtG45Y/Eguxg6XRvqNNe39ahP/CwASI9uAAADDgYABG8uoAP//6OIsgACWf4D//3zj4A== Date: Tue, 8 Dec 2015 16:21:26 +0000 Message-ID: References: <20151202170851.23051.qmail@ary.lan>, , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "weirds@ietf.org" Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2015 16:21:31 -0000 Policy activity exists to look at how registries will monitor or report abu= se so this might be an opportune time to include RDAP considerations. =20 Sent from my iPhone On Dec 8, 2015, at 11:11, John R Levine wrote: >> Could this also be some 'car fax' indicator that discloses whether a dom= ain has been block listed, when, by whom, for reason? While some ICANN head= s might explode others might be curious to understand what framework or pol= icy obligation this would imply. >=20 > That'd be OK with me but merely deciding which domain blocklists to look = at is highly political. Also, I wouldn't assume that the BLs would be will= ing to provide a suitable feed to all the registries. Some registries like= .org have a good reputation while some like .xyz do not. >=20 > Regards, > John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY > Please consider the environment before reading this e-mail. From nobody Tue Dec 8 17:25:34 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49D731A00B4; Tue, 8 Dec 2015 17:25:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.876 X-Spam-Level: X-Spam-Status: No, score=-0.876 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FRT_PROFILE1=2.555, RCVD_IN_DNSWL_MED=-2.3, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q1E5msZmUNTJ; Tue, 8 Dec 2015 17:25:29 -0800 (PST) Received: from out.west.pexch112.icann.org (pfe112-ca-1.pexch112.icann.org [64.78.40.7]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C59031A0069; Tue, 8 Dec 2015 17:25:29 -0800 (PST) Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-2.pexch112.icann.org (64.78.40.23) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Tue, 8 Dec 2015 17:25:27 -0800 Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1044.021; Tue, 8 Dec 2015 17:25:27 -0800 From: Gustavo Lozano To: Roger D Carney , "eppext@ietf.org" , "weirds@ietf.org" Thread-Topic: [eppext] Adding missing RDAP event action types for gTLDs Thread-Index: AQHRMiB7vJAHZ7R4aEujObDC1dr/wg== Date: Wed, 9 Dec 2015 01:25:26 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.5.8.151023 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.0.35.1] Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="B_3532440325_7583226" MIME-Version: 1.0 Archived-At: Subject: Re: [weirds] [eppext] Adding missing RDAP event action types for gTLDs X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Dec 2015 01:25:31 -0000 --B_3532440325_7583226 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable Thank you for the feedback Roger, =20 This email slipped through the cracks, apologies for the late response.=20 Comments inline. Regards, Gustavo From: EppExt on behalf of Roger D Carney Date: Tuesday, November 10, 2015 at 13:19 To: "eppext@ietf.org" , "weirds@ietf.org" Subject: Re: [eppext] Adding missing RDAP event action types for gTLDs >Thanks Gustavo. >=20 >I agree with Scott, from what I recall this is just a proposed timeline. >=20 >As for this I-D, one comment, one clarification: >=B7 =20 >Comment: in reading Appendix B of RFC 7483 it states that events >represent actions that have taken place against a registered object > at a certain date and time. I don=B9t see that Last Update of RDAP >Database is an action against a registered object, against the >=B3container=B2 of these registered objects but not against a registered >object. This may be just a definition issue, I don=B9t recall > reading a definition of Last Update of RDAP Database so it could be >defined as: the date/time of the last change to a registration object >(domain, host, contact) in the RDAP database. Lacking a definition I >would have defined Last Update of RDAP Database literally, > so any maintenance including restoration, reference table updates, >etc I would say changes the Last Update of RDAP Database. Again maybe >just a definition issue. > > > The draft provides a definition for "last update of RDAP database" in section 2. The definition is: An action noting when the information in the object instance in the RDAP database was last synchronized from the authoritative database (e.g. registry database). The RDAP profile published for public comments (i.e. https://whois.icann.org/sites/default/files/files/gtld-rdap-operational-pro file-draft-03dec15-en.pdf) uses this event action, you may want to take a look at this document to have a better idea of the intended use. > >=B7 =20 >Clarification: this I-D tries to address the lack of some RDAP data >modeling in regards to Registrar Expiration Date but there still > is work needed to address getting this data from registrar to registry, >correct? I am not aware of a way to do this currently or of work to make >this happen. >=20 > > > Correct, I am working on an I-D (EPP extension) to fill this gap. >=20 >Thanks >Roger >=20 >=20 >From: > EppExt [mailto:eppext-bounces@ietf.org] On Behalf Of Hollenbeck, Scott >Sent: Tuesday, November 10, 2015 12:48 PM >To: Gustavo Lozano; eppext@ietf.org >Cc: weirds@ietf.org >Subject: Re: [eppext] Adding missing RDAP event action types for gTLDs > > >=20 >From: weirds [mailto:weirds-bounces@ietf.org] >On Behalf Of Gustavo Lozano >Sent: Tuesday, November 10, 2015 1:29 PM >To: eppext@ietf.org >Cc: weirds@ietf.org >Subject: [weirds] Adding missing RDAP event action types for gTLDs >=20 >Hello colleagues, > >=20 > >As you may know, two of the open issues in the RDAP profile for gTLDs >(http://mm.icann.org/pipermail/gtld-tech/attachments/20150928/35901409/gTL >DRDAPOperationalProfile-v06-0001.pdf) > are missing event action types in the base RDAP specification for: > >* Last update time of the RDAP database > >* Registrar registration expiration date > >=20 > >You may find the details in the following I-D: > >https://www.ietf.org/id/draft-lozano-rdap-gtld-whois-additional-events-00. >txt=20 >.txt> > >=20 > >It's important to promptly add these two event action types based on the >timeline for deployment of RDAP in the gTLDs. > >=20 > >[snip] >=20 >If a recall what I heard in Dublin and Yokohama, the timeline is >*proposed* and subject to a community review process that is supposed to >start later this month =AD correct? >=20 >Scott --B_3532440325_7583226 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIITsQYJKoZIhvcNAQcCoIITojCCE54CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC EX0wggb4MIIF4KADAgECAhAMNMzaaOCLlcX5TdjpURhNMA0GCSqGSIb3DQEBBQUAMGIxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2Vy dC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMTAeFw0xMzA1MDgwMDAw MDBaFw0xNjA1MDgxMjAwMDBaMIGiMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTEUMBIGA1UEBxMLTG9zIEFuZ2VsZXMxPDA6BgNVBAoTM0ludGVybmV0IENvcnBvcmF0aW9u IGZvciBBc3NpZ25lZCBOYW1lcyBhbmQgTnVtYmVyczERMA8GA1UECxMIUmVnaXN0cnkxFzAV BgNVBAMTDkd1c3Rhdm8gTG96YW5vMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 3w18r+IUAk+jj+kX9oTY/E3q0GyAzR+0x8YvIlksG3cKpkVBqjAKnpZL+GaN98aXYqsIDo8g gctjo1fAx8QxgPkGeZ56EP5uaaN65I1guFa/mVTzSGg2WyXVMRjJmcLBBt//k9APKpvl4Qj4 o+ItgJAKcEA9mtErJB1UE6FtX6ubRd7l/t2BlYHaJLEmdtA4hXfE9TYiVSo4J8652aQ1ba7I g/Qzse32X4A6gm2w6EbEt7m8UVcH0pbxOXpi8Vvz1l6qG3+kxdtJUclg3os4mm0/Iz5glFzM a7OvDyGDbRZbL8ewlnsx3+mjNqDy2S5xNSYFKmdo65xJL1HItfJcSQIDAQABo4IDZzCCA2Mw HwYDVR0jBBgwFoAUFQASKxOYspkH7R7for5XDStnAs0wHQYDVR0OBBYEFDejkLO4b/vTq4z4 /ln0RuaCGgvuMCMGA1UdEQQcMBqBGGd1c3Rhdm8ubG96YW5vQGljYW5uLm9yZzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMCMH0GA1UdHwR2MHQwOKA2 oDSGMmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRENBLTEuY3Js MDigNqA0hjJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURDQS0x LmNybDCCAcUGA1UdIASCAbwwggG4MIIBtAYKYIZIAYb9bAQBAjCCAaQwOgYIKwYBBQUHAgEW Lmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0wggFkBggr BgEFBQcCAjCCAVYeggFSAEEAbgB5ACAAdQBzAGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIA dABpAGYAaQBjAGEAdABlACAAYwBvAG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQA YQBuAGMAZQAgAG8AZgAgAHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMA IABhAG4AZAAgAHQAaABlACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwByAGUA ZQBtAGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0AHkA IABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABoAGUAcgBlAGkA bgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wdwYIKwYBBQUHAQEEazBpMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQQYIKwYBBQUHMAKGNWh0dHA6Ly9jYWNl cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRENBLTEuY3J0MAwGA1UdEwEB/wQC MAAwDQYJKoZIhvcNAQEFBQADggEBAGaf7RGm6z5gi7JPp8yiw4JQc1rNztSU2JyQfjy3XtFU rrkK3UhhhYKXVoTRL4bSEx2OTc7ejQ2uMNNKU0ew/hPWhx1jU3AMvf6f3FHFt8X/dAcse+TU QyHT822Kup802tVILAijiq+3SnpNoT2VbI1aw1M4lJpIUezERhbDSRkPXMdIK/nRl57KCXc/ PyM2AD4HvdT1OqXQ1j1baeooPcvofWewjD/WyHkpdVbQ+RJ7F1a9ndagERt4D1kTp1yiZwVH 8gKthT5JXVvA1yTOg8Z8nDl2c12SrVQcP/pIAz8VsTNFlIrcO22XGFfyIfj+WFeLkDJeMccK B1IlFAPPKO0wggbCMIIFqqADAgECAhAKBN8hdF1NK4zqM3IFAFDpMA0GCSqGSIb3DQEBBQUA MGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5k aWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0w NjExMTAwMDAwMDBaFw0yMTExMTAwMDAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxE aWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD ZXJ0IEFzc3VyZWQgSUQgQ0EtMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOiC LZn5ysJClaWAc0Bw0p5WVFypxNJBBo/JM/xNRZFcgZ/tLJz4FlnfnrUkFcKYubR3SdyJxAra r8tea+2tsHEx6886QAxGTZPsi3o2CAOrDDT+GEmC/sfHMUiAfB6iD5IOUMnGh+s2P9gww/+m 9/uizW9zI/6sVgWQ8DIhFonGcIj5BZd9o8dD3QLoOz3tsUGj7T++25VIxO4es/K8DCuZ0MZd EkKB4YNugnM/JksUkK5ZZgrEjb7SzgaurYRvSISbT0C58Uzyr5j79s5AXVz2qPEvr+yJIvJr GGWxwXOt1/HYzx4KdFxCuGh+t9V3CidWfA9ipD8yFGCV/QcEogkCAwEAAaOCA28wggNrMA4G A1UdDwEB/wQEAwIBhjA7BgNVHSUENDAyBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMD BggrBgEFBQcDBAYIKwYBBQUHAwgwggHGBgNVHSAEggG9MIIBuTCCAbUGC2CGSAGG/WwBAwAE MIIBpDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBv c2l0b3J5Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAg AHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABl AHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQBy AHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABh AHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABs AGkAYQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0 AGUAZAAgAGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjAPBgNVHRMB Af8EBTADAQH/MH0GCCsGAQUFBwEBBHEwbzAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tMEcGCCsGAQUFBzAChjtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DQUNlcnRz L0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDCBgQYDVR0fBHoweDA6oDigNoY0aHR0cDov L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDA6oDigNoY0 aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDAd BgNVHQ4EFgQUFQASKxOYspkH7R7for5XDStnAs0wHwYDVR0jBBgwFoAUReuir/SSy4IxLVGL p6chnfNtyA8wDQYJKoZIhvcNAQEFBQADggEBAIRhTkEeuHYEKrW274/yVYW5XVb+Cpjm5L1l in1AKdP8sV1F/Tq4KlszSyRczbm05HOtYV12rXQzimbVI69MH3JuRdl1QLuiO8+NSS/AQbDi KaNROENQmRSsMwY1Yol9d6lSB+VsIFe2gbpvvLPClO12AoDZfM6FqBzsx0NKS7FXz3LO3/Ul PMsiT/2fUtE3ywi7OD7g1T5veQmtW3wxs3c1w+Rj+WgKmAfnRjh3hNI+l7wKoKisJU9EbpHh 0lqva+8wHI2jREKzEIsj+tfmNXQ3rM/rq1gfyYgj/zbUB+o0akfqnZVsnilPU+3jK5UgTirP lmB6+CyA8JVSzimWgWIwggO3MIICn6ADAgECAhAM5+DlF9hG/o/lYPwb8DA5MA0GCSqGSIb3 DQEBBQUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT EHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBD QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGUxCzAJBgNVBAYTAlVTMRUwEwYD VQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMT G0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAK0OFc7kQ4BcsYfzt2D5cRKlrtwmlIiq9M71IDkoWGAM+IDaqRWVMmE8tbEohIqK 3J8KDIMXeo+QrIrneVNcMYQq9g+YMjZ2zN7dPKii72r7IfJSYd+fINcf4rHZ/hhk0hJbX/lY GDW8R82hNvlrf9SwOD7BG8OMM9nYLxj+KA+zp4PWw25EwGE1lhb+WZyLdm3X8aJLDSv/C3La nmDQjpA1xnhVhyChz+VtCshJfDGYM2wi6YfQMlqiuhOCEe05F52ZOnKh5vqk2dUXMXWuhX0i rj8BRob2KHnIsdrkVxfEfhwOsLSSplazvbKX7aqn8LfFqD+VFtD/oZbrCF8Yd08CAwEAAaNj MGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEXroq/0ksuC MS1Ri6enIZ3zbcgPMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA0GCSqGSIb3 DQEBBQUAA4IBAQCiDrzf4u3w43JzemSUv/dyZtgy5EJ1Yq6H6/LV2d5Ws5/MzhQouQ2XYFwS TFjk0z2DSUVYlzVpGqhH6lbGeasS2GeBhN9/CTyU5rgmLCC9PbMoifdf/yLil4Qf6WXvh+Df wWdJs13rsgkq6ybteL59PyvztyY1bV+JAbZJW58BBZurPSXBzLZ/wvFvhsb6ZGjrgS2U60K3 +owe3WLxvlBnt2y98/Efaww2BxZ/N3ypW2168RJGYIPXJwS+S86XvsNnKmgR34DnDDNmvxMN FG7zfx9jEB76jRslbWyPpbdhAbHSoyahEHGdreLD+cOZUbcrBwjOLuZQsqf6CkUvovDyMYIB /DCCAfgCAQEwdjBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD VQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBBc3N1cmVkIElEIENB LTECEAw0zNpo4IuVxflN2OlRGE0wCQYFKw4DAhoFAKBdMCMGCSqGSIb3DQEJBDEWBBSJvwQZ wK/eooZ9XTud68c9q1QRMzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ BTEPFw0xNTEyMDkwMTI1MjVaMA0GCSqGSIb3DQEBAQUABIIBACauVF0uJZDwRimt3guY+WUJ bIWcuIg/S+GdCrZAq/tjRO4oRanFoiuaMp13/csoXy/CPNhH83uw1Ym5ZCNlZpNZvuO9xLYr cOYSqQ9p2hvQDjUFcodGfnuf/iFB/E2Q9jyp+A/WsjPYifQg0eDDlMzm10eC0IJF26MwjDGz BOMqCUk1ulmyhf/J3q31YLuHcL7sfTuIUsWb9lLrnU742S0BW/n1HIdP9qGRBKrhbqmN8eCW iG77PG5kRoE1P3ZR7lDdCZIn0yWEu7wvYPpSHwdqAOB+l8p1H+qvfTupOYa9glkE8QCJ3wc4 hhGs3/DklXoIBxZJHff0vR4dp4WAh6Y= --B_3532440325_7583226-- From nobody Tue Dec 15 10:44:50 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280071A8A45; Tue, 15 Dec 2015 10:44:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.654 X-Spam-Level: X-Spam-Status: No, score=0.654 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FRT_PROFILE1=2.555, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aqWHJdXF5Puh; Tue, 15 Dec 2015 10:44:39 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0115.outbound.protection.outlook.com [65.55.169.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B95E1AC3D0; Tue, 15 Dec 2015 10:44:39 -0800 (PST) Received: from BY2PR0201MB0773.namprd02.prod.outlook.com (10.160.125.139) by BY2PR0201MB0776.namprd02.prod.outlook.com (10.160.125.141) with Microsoft SMTP Server (TLS) id 15.1.337.19; Tue, 15 Dec 2015 18:44:37 +0000 Received: from BY2PR0201MB0773.namprd02.prod.outlook.com ([10.160.125.139]) by BY2PR0201MB0773.namprd02.prod.outlook.com ([10.160.125.139]) with mapi id 15.01.0337.024; Tue, 15 Dec 2015 18:44:37 +0000 From: Roger D Carney To: "eppext@ietf.org" , "weirds@ietf.org" Thread-Topic: [eppext] Adding missing RDAP event action types for gTLDs Thread-Index: AQHRMiB7vJAHZ7R4aEujObDC1dr/wp7LDteg Date: Tue, 15 Dec 2015 18:44:36 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=rcarney@godaddy.com; x-originating-ip: [64.202.161.57] x-microsoft-exchange-diagnostics: 1; BY2PR0201MB0776; 5:Pk1ZVs9QKkCCYe0UfZU/w13OtcH5Re1LWEcrU9mwWDmgsaZhUJ5lLWGPalPEWPDtVa3ZKVyN615YwX5c/ZAjUksOY3PQR0FoIE7aVaQPsUj9UNVGd4gwjulTF6NSTCDaPtWjOVy8eoxGmkE0D7xtoQ==; 24:K+Yc7jl5zSmJYkFtFUjF3ara3aNOoIqUjhaFaNjJ+hOOSsXzu+cD4IDl25aE4H1K0AMSt9ou5h21f8q0JsvlbiZRLjdIIAbQKV0FK6tq89o= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR0201MB0776; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(246761809553906); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046); SRVR:BY2PR0201MB0776; BCL:0; PCL:0; RULEID:; SRVR:BY2PR0201MB0776; x-forefront-prvs: 07915F544A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(52014003)(51694002)(199003)(36944003)(13464003)(51914003)(189002)(377454003)(76176999)(50986999)(5004730100002)(122556002)(107886002)(33656002)(74316001)(189998001)(81156007)(2900100001)(5001770100001)(105586002)(5002640100001)(11100500001)(106116001)(40100003)(450100001)(19580395003)(54356999)(77096005)(92566002)(97736004)(15975445007)(76576001)(10400500002)(99286002)(2950100001)(66066001)(1720100001)(86362001)(19580405001)(2501003)(5003600100002)(87936001)(5890100001)(561944003)(5001960100002)(5008740100001)(101416001)(106356001)(6116002)(1096002)(102836003)(3846002)(1220700001)(586003)(17423001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR0201MB0776; H:BY2PR0201MB0773.namprd02.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: godaddy.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: godaddy.com X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Dec 2015 18:44:36.9226 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: d5f1622b-14a3-45a6-b069-003f8dc4851f X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR0201MB0776 Archived-At: Subject: Re: [weirds] [eppext] Adding missing RDAP event action types for gTLDs X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2015 18:44:48 -0000 Thanks for the reference Gustavo. Just for clarity the suggestion is to make a new RDAP event for Last update= of RDAP database as defined as "the last date and time the database used b= y the RDAP service was updated from the Registry or Registrar database". I = don't think this definition of "Last update" matches the definition of an e= vent as defined in Appendix B of RFC 7483: "actions that have taken place a= gainst a registered object at a certain date and time". A small nit, but I = just wanted to make sure that I understand the proposal and the components = involved. Thanks Roger -----Original Message----- From: Gustavo Lozano [mailto:gustavo.lozano@icann.org]=20 Sent: Tuesday, December 08, 2015 7:25 PM To: Roger D Carney; eppext@ietf.org; weirds@ietf.org Subject: Re: [eppext] Adding missing RDAP event action types for gTLDs Thank you for the feedback Roger, =20 This email slipped through the cracks, apologies for the late response.=20 Comments inline. Regards, Gustavo From: EppExt on behalf of Roger D Carney Date: Tuesday, November 10, 2015 at 13:19 To: "eppext@ietf.org" , "weirds@ietf.org" Subject: Re: [eppext] Adding missing RDAP event action types for gTLDs >Thanks Gustavo. >=20 >I agree with Scott, from what I recall this is just a proposed timeline. >=20 >As for this I-D, one comment, one clarification: >=B7 =20 >Comment: in reading Appendix B of RFC 7483 it states that events >represent actions that have taken place against a registered object > at a certain date and time. I don=B9t see that Last Update of RDAP >Database is an action against a registered object, against the >=B3container=B2 of these registered objects but not against a registered >object. This may be just a definition issue, I don=B9t recall > reading a definition of Last Update of RDAP Database so it could be >defined as: the date/time of the last change to a registration object >(domain, host, contact) in the RDAP database. Lacking a definition I >would have defined Last Update of RDAP Database literally, > so any maintenance including restoration, reference table updates, >etc I would say changes the Last Update of RDAP Database. Again maybe >just a definition issue. > > > The draft provides a definition for "last update of RDAP database" in section 2. The definition is: An action noting when the information in the object instance in the RDAP database was last synchronized from the authoritative database (e.g. registry database). The RDAP profile published for public comments (i.e. https://whois.icann.org/sites/default/files/files/gtld-rdap-operational-pro file-draft-03dec15-en.pdf) uses this event action, you may want to take a look at this document to have a better idea of the intended use. > >=B7 =20 >Clarification: this I-D tries to address the lack of some RDAP data >modeling in regards to Registrar Expiration Date but there still > is work needed to address getting this data from registrar to registry, >correct? I am not aware of a way to do this currently or of work to make >this happen. >=20 > > > Correct, I am working on an I-D (EPP extension) to fill this gap. >=20 >Thanks >Roger >=20 >=20 >From: > EppExt [mailto:eppext-bounces@ietf.org] On Behalf Of Hollenbeck, Scott >Sent: Tuesday, November 10, 2015 12:48 PM >To: Gustavo Lozano; eppext@ietf.org >Cc: weirds@ietf.org >Subject: Re: [eppext] Adding missing RDAP event action types for gTLDs > > >=20 >From: weirds [mailto:weirds-bounces@ietf.org] >On Behalf Of Gustavo Lozano >Sent: Tuesday, November 10, 2015 1:29 PM >To: eppext@ietf.org >Cc: weirds@ietf.org >Subject: [weirds] Adding missing RDAP event action types for gTLDs >=20 >Hello colleagues, > >=20 > >As you may know, two of the open issues in the RDAP profile for gTLDs >(http://mm.icann.org/pipermail/gtld-tech/attachments/20150928/35901409/gTL >DRDAPOperationalProfile-v06-0001.pdf) > are missing event action types in the base RDAP specification for: > >* Last update time of the RDAP database > >* Registrar registration expiration date > >=20 > >You may find the details in the following I-D: > >https://www.ietf.org/id/draft-lozano-rdap-gtld-whois-additional-events-00. >txt=20 >.txt> > >=20 > >It's important to promptly add these two event action types based on the >timeline for deployment of RDAP in the gTLDs. > >=20 > >[snip] >=20 >If a recall what I heard in Dublin and Yokohama, the timeline is >*proposed* and subject to a community review process that is supposed to >start later this month =AD correct? >=20 >Scott From nobody Mon Dec 28 02:57:19 2015 Return-Path: X-Original-To: weirds@ietfa.amsl.com Delivered-To: weirds@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B41441A9009 for ; Mon, 28 Dec 2015 02:57:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.784 X-Spam-Level: ** X-Spam-Status: No, score=2.784 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a3TMXNOoYH18 for ; Mon, 28 Dec 2015 02:57:16 -0800 (PST) Received: from arn2-kamx.sidn.nl (kamx.sidn.nl [IPv6:2a00:d78:0:147:94:198:152:69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6CB61A8FD5 for ; Mon, 28 Dec 2015 02:57:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=sidn.nl; s=sidn-nl; c=relaxed/relaxed; h=subject:to:references:from:message-id:date:user-agent:mime-version:in-reply-to:content-type:x-originating-ip:x-clientproxiedby; bh=3LUmDmGddUKKH7nY3GoUXZS810VzI+EzOOemSvqZ8RM=; b=K9cRxdeOVhMWkNfEviiFqwmWJw5xyfY2WR3VLEkEM+29vqytdgYJpzfku3mXlmVWjfGmWhidAOSNwTUdZktcssRHx+FcJI9Juey1QlZhD+Kg99k1y0TyyKUCnlrvvDwnZfGkIpgnkctd67mDh9DQJHB4LhWZ4+iq5YcJXob8jj47j3u/HLRYBuHyAp8nF3e6+rc4fkzdmNR2R8qPIPUMBvVvvYUCZVp47sWz/pCaMKGxg55pjVQVMJAl/YLW/mqo+f7ACrMz90zJcsS4veUm7O5IIZqF/yt1lvPFCyQEx1T5E9ChNk5jSR/XrCFxa+l9fqlSAG2NddRBaJ7sLL4tlg== Received: from ka-mbx01.SIDN.local ([192.168.2.177]) by arn2-kamx.sidn.nl with ESMTP id tBSAvDlh025078-tBSAvDlj025078 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=CAFAIL) for ; Mon, 28 Dec 2015 11:57:13 +0100 Received: from rndhost218.sidn.nl (94.198.152.218) by ka-mbx01.SIDN.local (192.168.2.177) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 28 Dec 2015 11:57:13 +0100 To: References: <831693C2CDA2E849A7D7A712B24E257F4A103357@BRN1WNEXMBX01.vcorp.ad.vrsn.com> From: "Marco Davids (SIDN)" Message-ID: <9735179b-e594-67fa-b657-ff923091cb3f@sidn.nl> Date: Mon, 28 Dec 2015 11:57:07 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.0a2 MIME-Version: 1.0 In-Reply-To: <831693C2CDA2E849A7D7A712B24E257F4A103357@BRN1WNEXMBX01.vcorp.ad.vrsn.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040505010409020001000601" X-Originating-IP: [94.198.152.218] X-ClientProxiedBy: ka-hubcasn01.SIDN.local (192.168.2.171) To ka-mbx01.SIDN.local (192.168.2.177) Archived-At: Subject: Re: [weirds] Domain Reputation in RDAP X-BeenThere: weirds@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "WHOIS-based Extensible Internet Registration Data Service \(WEIRDS\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Dec 2015 10:57:17 -0000 --------------ms040505010409020001000601 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 02/12/15 17:07, Hollenbeck, Scott wrote: > Does anyone see value in adding something to RDAP that could be used as= a measure of domain stability or reputation? Yes. I believe it would fulfill a need and solve a problem. We've been=20 overthinking this matter for quite some time now. One of the solutions=20 we're currently investigating is 'validated WHOIS', meaning our WHOIS=20 will show weather or not we have actually validated the information it=20 is presenting. Any other additional idea to measure reputation is, in my = view, welcome. It's not a very easy nut to crack though, if you ask me. --=20 Marco --------------ms040505010409020001000601 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DGYwggYqMIIFEqADAgECAgMOAPowDQYJKoZIhvcNAQELBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTA1MTExMTU5NThaFw0xNjA1MTAxODU2MjdaMEQxHTAb BgNVBAMMFG1hcmNvLmRhdmlkc0BzaWRuLm5sMSMwIQYJKoZIhvcNAQkBFhRtYXJjby5kYXZp ZHNAc2lkbi5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJx2FmCHlc9Ic5kx rUvjQveDyc7VfoNyzDcpNY6EMlE9kd3XBN9Ml4yBdbY+6N1kKGoPRQFMY8PeYbD41oMPNig6 fm9JzlSIt+Au4XJjoUh05ME7uBgj4PfgMQ1v3XBWQlGM2LWq7XpahV8+JwR8+b2EGgXGaibD WDGJ/JTwHQk3zPMRVg49O4EZmByxbPXhajGJo3dLrDnmth5DxL6ViRJJv4Zz9ymTTpsYzFJP vsnddwmIrQq3zu0snP9dYalACguUPL8VIO4NETqDSLSc3sTVLYfRaeTptyDP3nP2IaXhjcwk qfETmjr6I+5hvIIY7vAymct/y4Vg2LfmxRw3fVkCAwEAAaOCAtowggLWMAkGA1UdEwQCMAAw CwYDVR0PBAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU VQVauvZo1UywOqlv3OEImStl9GkwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIw HwYDVR0RBBgwFoEUbWFyY28uZGF2aWRzQHNpZG4ubmwwggFMBgNVHSAEggFDMIIBPzCCATsG CysGAQQBgbU3AQIDMIIBKjAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20v cG9saWN5LnBkZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcg dG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29t IENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4g Y29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8w LTAroCmgJ4YlaHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYB BQUHAQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9j bGFzczEvY2xpZW50L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9j ZXJ0cy9zdWIuY2xhc3MxLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5z dGFydHNzbC5jb20vMA0GCSqGSIb3DQEBCwUAA4IBAQBMw+ZIJbyHp17e66RJa7FdNADkPW1m HYDAwjobyt76HV/0mPiLoARzIora+e0xNR1IHOMVH2jeiQtnHcqaSPCTvgBAcR0qtKwUD864 Td/GxbwuCvlfub3mRCmw4x8pAIVvc6IvdGUai30vA4ak0J715rkSxYy+g9merSJsvQY1R95P WO9HaA3MYlGQUxz/kDoWftiUaMYt90CYInTa/HhRAfGTrUS9L+HdbZSfWMFwh/vVHp9B3BBL DwL/qRVxa4ZKPwMlv4Mj6Ou/J1HXZiTo3XqX58NIIhuRBF1nrJOITpX/FgcyCp5ICln6/Y1v ZmkbMtxGJEt0Kst5iMse6SrFMIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQsw CQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERp Z2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNh dGlvbiBBdXRob3JpdHkwHhcNMDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkG A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdp dGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJp bWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxwmDzM4t2BqxKaQuE6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESi p7vMz39ScLpNLbL1QpOlPW/tFIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9f tTyhxvxWkf8KW37iKrueKsxw2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsW oTb7q8hmgv6Nv3Hg9rmA1/VPBIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/ 43Yksq60jExipA4l5uv9/+Hm33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IB rTCCAakwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc 4NrLAVx8fpY1TvLUuFGCMB8GA1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsG AQUFBwEBBFowWDAnBggrBgEFBQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0G CCsGAQUFBzAChiFodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQw UjAnoCWgI4YhaHR0cDovL3d3dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRw Oi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcB AgEwZjAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0 BggrBgEFBQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjAN BgkqhkiG9w0BAQUFAAOCAgEACoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHb WNaPeQn3oBSU8KgQZn/Kck1JxbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4 OxK9QPoSjCMxM3HbkZCDJgnlE8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0 KAkXCzeQNLeA5LlYUzFyM7kPAp8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL0 4qYK/zu+Qg1Bw0RwgigVZs/0c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0 IFiNu9IPuTGAPBn4CPxD0+Ru8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6 fDEPme+1Nbi+03pVjuZQKbGwKJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVt jYsv0L1TSm2+NwON58tO+pIVzu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm4 8ZCYfAWLb/Xj7F5JQMbZvCexglAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BI XRsF1du4qESm4/3CKuyUV7p9DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIB ATCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsT IlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29t IENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMOAPowDQYJYIZIAWUD BAIBBQCgggIpMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1 MTIyODEwNTcwN1owLwYJKoZIhvcNAQkEMSIEIPCmmfEP5lKvvT9PcfwQfrbSZUrTMoOn5SYR ua3BePGEMGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggq hkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZI hvcNAwICASgwgaUGCSsGAQQBgjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBAgMOAPowgacGCyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAw4A+jANBgkqhkiG9w0BAQEFAASCAQAgoXganAb6O+VW4eYf C/AD1HhD8qhbTfEqbbb6fZKpu7ZZTdndLXbwql+j1BgtJFvjvb4Nxn92qkWUelDDkCONs4JX 0WtL/OZtciRSEQsA/EMHGkjpTGGSPJNLiEOCPfkpA+6OjNL6o4oKuw1JVA+Cn8AJd3svpg3I F4RLuPUEJlCxZBUAJIOpnh7fxyGe54efFDnUuUe8lf3cFhTrNTYVQDYfN/EiDBJUUv2hx8QA iUnIgpjZyYWGoOXixbyEsMwyljKUAt1nVa4/aNrRi0DlYUH5MAFd9JEME5e8cUsi8dnUcTJy 3QwtNruukieXp6+n9dt7nyRSZWy4mphAgamEAAAAAAAA --------------ms040505010409020001000601--