From nobody Thu Feb 1 11:15:00 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15A6812EC79; Thu, 1 Feb 2018 11:14:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h-0MiWeTRJcb; Thu, 1 Feb 2018 11:14:56 -0800 (PST) Received: from mail-wm0-x235.google.com (mail-wm0-x235.google.com [IPv6:2a00:1450:400c:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1C4812EC6E; Thu, 1 Feb 2018 11:14:55 -0800 (PST) Received: by mail-wm0-x235.google.com with SMTP id f3so7850048wmc.1; Thu, 01 Feb 2018 11:14:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=Y3hmKvzaiEauLquezCPquvYT9g/kBKM3ERZESLSy2xk=; b=VGHX524L2+oHSnic41F4kXqSy6mihnsUoCqDbXC5mj9dsSJSD/ywAsmEmHK3f4vpVa GVU2Idfq5WT6lHYcSDRXJvWgXF9rsoygfPQGv7EdnEwCtmulHRQpE0aZFyrPALnPi5Jb xzqVfpFSn7Zl+8TN+pLmiPS9CQnrYpIRzRUtCfDh/GiUv1O0UmtpbVbx2OvNm5+S2yOw xHsy1lXDvGXxLmFDyDcAb/vGlmn7EdT5npMmAl7cm4HcoQil699u85FabY7FT5jMI3sc EiJvET/dFkIGyrMbCHWkzkbSqJhzELs5A32iVjVua5LO2mD3EMoOEvZMNA1ZHVeOcm6p UtiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=Y3hmKvzaiEauLquezCPquvYT9g/kBKM3ERZESLSy2xk=; b=k44OogiqEyKireHy2j/RlnPGdPQxQ9vvKnD3DT79vH83oSRAry+IwoVGXCWGl7VPNM txj7gAFp7vNbt9xQUwF0Q1j9LQw9ROMC4PBcRgVMdoG8fcVLaHTqlRDouK6BGbDM/WKT mmNtNEdQNYlkFSbc2kVaxwGl82mKjrjXtCEyjTAv6po+VS5gCf6V0jD1kRQpC3NReTRY p8InD3aK8mx8MdpMuGWEXhnYrXJ6HOUEOMDmNJumvJPyOsnsk1vkdo2oDU/VKVQVU3eR atmXZAX8/YzVrZWA6vS77qYZLo3e87hrEZE9Enm92Ft9enB9YTElXBC+HpBWjK4E3I1/ JCdw== X-Gm-Message-State: AKwxytdMzXpVfgMX8110Zpui9g1PgjWJieUV+QMH8B+0sO+iol0QFnig mWR/xvgpArjzCo14tpgkO29UZYkbbqMAcH4wIEa5nQ== X-Google-Smtp-Source: AH8x224qsjXm/dF7dh1rjsKoIDkVFfkWOCV9W5CcdkAnSZNYKAPkFApxa3G4ZNw2nDWBJlZwOFDRBxIRbQb0Zn867O4= X-Received: by 10.28.191.148 with SMTP id o20mr28068113wmi.63.1517512494053; Thu, 01 Feb 2018 11:14:54 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.132.66 with HTTP; Thu, 1 Feb 2018 11:14:53 -0800 (PST) From: tjw ietf Date: Thu, 1 Feb 2018 14:14:53 -0500 Message-ID: To: dnsop Cc: dnssd@ietf.org, doh@ietf.org Content-Type: multipart/alternative; boundary="94eb2c071aa0267d9805642b6985" Archived-At: Subject: [dnssd] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 19:14:58 -0000 --94eb2c071aa0267d9805642b6985 Content-Type: text/plain; charset="UTF-8" This starts a Working Group Last Call for draft-ietf-dnsop-session-signal Current versions of the draft is available here: https://datatracker.ietf.org/doc/draft-ietf-dnsop-session-signal/ Please review the draft and offer relevant comments. Also, if someone feels the document is *not* ready for publication, please speak out with your reasons. We are doing a three week Working Group Last Call process, and we're cross posting to a few groups where we hope to receive some strong reviews. This WGLC ends at midnight, 22 February 2018. thanks Tim/suzanne --94eb2c071aa0267d9805642b6985 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

This starts a Working Group Last Call = for=C2=A0draft-ietf-dnsop-session-signal

Current v= ersions of the draft is available here:

Pl= ease review the draft and offer relevant comments. Also, if someone feels t= he document is *not* ready for publication, please speak out with your reas= ons.

We are doing a three week Working Group Last = Call process, and we're cross posting to a few groups where we hope to = receive some strong reviews.=C2=A0

This WGLC ends = at midnight, 22 February 2018.

thanks
Ti= m/suzanne
--94eb2c071aa0267d9805642b6985-- From nobody Fri Feb 2 13:57:44 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B64761242EA; Fri, 2 Feb 2018 13:57:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bu0WoDM6MgqR; Fri, 2 Feb 2018 13:57:37 -0800 (PST) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C4A61243FE; Fri, 2 Feb 2018 13:57:37 -0800 (PST) Received: from [169.254.45.1] (50-1-51-141.dsl.dynamic.fusionbroadband.com [50.1.51.141]) (authenticated bits=0) by mail.proper.com (8.15.2/8.15.2) with ESMTPSA id w12LvF6P079371 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 2 Feb 2018 14:57:16 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-51-141.dsl.dynamic.fusionbroadband.com [50.1.51.141] claimed to be [169.254.45.1] From: "Paul Hoffman" To: dnsop Cc: dnssd@ietf.org, doh@ietf.org Date: Fri, 02 Feb 2018 13:57:32 -0800 X-Mailer: MailMate (1.10r5443) Message-ID: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; format=flowed Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 21:57:39 -0000 The current draft is hand-wavy when it comes to which transports DSO can run on. Section 2 says "such as": The term "connection" means a bidirectional byte stream of reliable, in-order messages, such as provided by using DNS over TCP [RFC1035][RFC7766] or DNS over TLS [RFC7858]. Section 4.1 says "are suitable": Standard DNS over TCP [RFC1035][RFC7766], and DNS over TLS [RFC7858] are suitable protocols. The document should explicitly list which protocols are currently acceptable, and say that the list can change in the future based on standards-track documents. Proposed wording for both of these above are: Section 2: The term "connection" means a bidirectional byte stream of reliable, in-order messages. Section 4.1 says "are suitable": DSO MUST be run as standard DNS over TCP [RFC1035][RFC7766] or DNS over TLS [RFC7858]. This list might expand in the future, such an expansion MUST be in standards-track RFCs. Having developers know exactly which protocols can be used is important so that they do not use protocols that they accidentally think are reliable and in-order. For example, the DOH WG is working on a protocol that might initially seem attractive, but it does *not* qualify for DSO. --Paul Hoffman From nobody Wed Feb 7 06:22:09 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74B3412D778; Wed, 7 Feb 2018 06:22:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.91 X-Spam-Level: X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pms7oezrV61B; Wed, 7 Feb 2018 06:22:04 -0800 (PST) Received: from mx4.nic.fr (mx4.nic.fr [IPv6:2001:67c:2218:2::4:12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00C0F129C6E; Wed, 7 Feb 2018 06:22:03 -0800 (PST) Received: from mx4.nic.fr (localhost [127.0.0.1]) by mx4.nic.fr (Postfix) with SMTP id 13F682820FF; Wed, 7 Feb 2018 15:22:02 +0100 (CET) Received: by mx4.nic.fr (Postfix, from userid 500) id 0D12928226C; Wed, 7 Feb 2018 15:22:02 +0100 (CET) Received: from relay01.prive.nic.fr (relay01.prive.nic.fr [IPv6:2001:67c:2218:15::11]) by mx4.nic.fr (Postfix) with ESMTP id 05D152820FF; Wed, 7 Feb 2018 15:22:02 +0100 (CET) Received: from b12.nic.fr (b12.users.prive.nic.fr [10.10.86.133]) by relay01.prive.nic.fr (Postfix) with ESMTP id ECCBE6424E41; Wed, 7 Feb 2018 15:22:01 +0100 (CET) Received: by b12.nic.fr (Postfix, from userid 1000) id DF186401C7; Wed, 7 Feb 2018 15:22:01 +0100 (CET) Date: Wed, 7 Feb 2018 15:22:01 +0100 From: Stephane Bortzmeyer To: tjw ietf Cc: dnsop , dnssd@ietf.org, doh@ietf.org Message-ID: <20180207142201.e3mobmoal43wkh3c@nic.fr> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Operating-System: Debian GNU/Linux 9.3 X-Kernel: Linux 4.9.0-5-amd64 x86_64 X-Charlie: Je suis Charlie Organization: NIC France X-URL: http://www.nic.fr/ User-Agent: NeoMutt/20170113 (1.7.2) X-Bogosity: No, tests=bogofilter, spamicity=0.000002, version=1.2.2 X-PMX-Version: 6.0.0.2142326, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2018.2.7.141515 Archived-At: Subject: Re: [dnssd] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Feb 2018 14:22:08 -0000 On Thu, Feb 01, 2018 at 02:14:53PM -0500, tjw ietf wrote a message of 55 lines which said: > This starts a Working Group Last Call for draft-ietf-dnsop-session-signal After reading -05 : My personal feeling is that it is complicated, with a lot of details. May be separating in two documents, one for the base DSO concept and one for the standards TLV (with their detailed behavior) would have been better. There is a discussion about a possible Privacy section for which I suggest the following text: The intention of this specification is to enable stateful information (connection parameters and DNS data) directly related to the DSO Session to be transmitted. This creates trackable state and prevents queries from coming from successive privacy addresses, as could be the case with regular DNS queries, for a privacy-conscious client. Before using DSO (or any kind of long-lived DNS sessions), this consequence should be taken into account. The risk is partially mitigated by using encryption (which protects against sniffing by a third-party, but not against logging by the server.) The design of new TLV must also avoid adding any information that could make this tracking easier. Now, other points: > There are a myriad of other potential use cases for DSO given the > versatility and extensibility of this specification. I don't really like this sort of sentence. Either we have ideas about these potential use cases and we should write them down, or we don't and we should avoid this sort of very general words (after all, human imagination being what it is, we can be sure surprising use cases will be found.) > If the RCODE is set to any value other than NOERROR (0) or DSONOTIMP > (tentatively 11), then the client should assume that the server does > not support DSO. (Why "should" in lower case?) RFC 1035 being very clear that the rcode from a non-DSO server must be NOTIMP (this is also said in section 4.2.1 of the draft), I suggest to change that to: If the server does not handle DSO at all, it MUST reply with RCODE NOTIMP (4) (this is from RFC 1035, section 4.1.1). Because not all servers will be correct, if the client receives an answer with the RCODE set to any value other than NOERROR (0) or DSONOTIMP (tentatively 11), then the client should assume that the server does not support DSO. > DNS Stateful Operations uses "DSO request messages" and "DSO > response messages". DSO request messages are further subdivided > into two variants, "acknowledged request messages" (which generate a > corresponding response message) and "unacknowledged request > messages" (which do not generate any corresponding response > message). It seems to me that the draft uses "response-requiring messages" as a synonym of "acknowledged request messages" (and "non-response-requiring messages" as a synonym of "unacknowledged request messages"). If I'm correct, it would be better to state it clearly in the terminology section. > 7.1. MESSAGE ID > The table below illustrates the legal combinations: Since there are only four combinations, I do not find this table useful. Last, RFC 5226 (IANA considerations section) is now replaced by RFC 8126 From nobody Wed Feb 7 08:24:04 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A87A412D7FC for ; Wed, 7 Feb 2018 08:24:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WEQWP749z5DF for ; Wed, 7 Feb 2018 08:24:00 -0800 (PST) Received: from mail-qt0-x22e.google.com (mail-qt0-x22e.google.com [IPv6:2607:f8b0:400d:c0d::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39E7512D7FB for ; Wed, 7 Feb 2018 08:24:00 -0800 (PST) Received: by mail-qt0-x22e.google.com with SMTP id d8so2387453qtm.0 for ; Wed, 07 Feb 2018 08:24:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=q9FMewqdQx+KfMnYzTh8rqGpFUQkCAz391L6Iio+MmE=; b=DXFZbL6ORZLr0d25Q/DPmcWeT87Vzk1/Gon9VpCetokCsnohDux92ac/QCFszR6/n+ i+Vn4qnyIiTv7yumrPTw7+HQ/hjGbJioW6UgIHwlez15Gc7FPF2pXCQoGRlMf05LR2q7 ao12CJK4YSja2fGnzJfQqTcMHU/t1uF5EbDjHA3OSVKkfuAfWkMxNe9kRM41gwFzz2+x 1oDq6NMEs+as4016H26cEuiPL41oEHTAVwb1mkXcYoJFEbLr6oP5Ke4FMHJnpGVZcf5G JkGlGDVLksbcr3p5o9oUhlPgyTaHSd7ZPvQ5T28NEauwP9f9EVUL5O26hCzoZN9Cqhx7 3HkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=q9FMewqdQx+KfMnYzTh8rqGpFUQkCAz391L6Iio+MmE=; b=OOYOyQzrZmlwqBWL2FB6KwJ3yGXTQnAmraWFgDf33ngtxeJ17teisikLVRHOvZNQSP v12xmvcuYyOYloOvkoHH477DSztzAkoHG+g8xW3AVlMKlLNX0xQ5/3F25wgAjSEd0X5z hMVUHPTBP28WoB8rnuAM3ns7yPlPDgj3VQ062JNN/DYDMp1z1iGLkDNfnoCMCFt4x5wj ncm+7LD+dfTZxKAjuNKCAtmjyTiSWawyUFXm74KdpXGWO4iluR7GEat/Pk0RLfX8K+XR FHc0CbO6CpqbL6/MzGZCY6HF6NiLftzXzHT83NUQNTQXfJ6NcsVcT7OR2b5I/bPPxVcc I54g== X-Gm-Message-State: APf1xPDIKDMBk3+dV73GsXwWwBiDpjQ5g4TG7R7Ux201CbTo+0AtobO9 DX+PdtIJKKiXsAcO85Bmbayesw== X-Google-Smtp-Source: AH8x225WJza/O7omwknq0HHwJiqV9HYORrxdiQDZvBpYgYEPnFuvJPm5KkRBI86M6Skna4HKt8wUzQ== X-Received: by 10.200.49.205 with SMTP id i13mr9633792qte.116.1518020639351; Wed, 07 Feb 2018 08:23:59 -0800 (PST) Received: from cavall.lan (c-24-60-163-103.hsd1.ma.comcast.net. [24.60.163.103]) by smtp.gmail.com with ESMTPSA id d5sm1306334qtd.91.2018.02.07.08.23.58 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Feb 2018 08:23:58 -0800 (PST) From: Ted Lemon Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_0F5470E6-7113-4A8D-8A8B-A299952359E5" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Wed, 7 Feb 2018 11:23:57 -0500 In-Reply-To: <20180207142201.e3mobmoal43wkh3c@nic.fr> Cc: Tim Wicinski , dnsop , doh@ietf.org, dnssd@ietf.org To: Stephane Bortzmeyer References: <20180207142201.e3mobmoal43wkh3c@nic.fr> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [dnssd] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Feb 2018 16:24:03 -0000 --Apple-Mail=_0F5470E6-7113-4A8D-8A8B-A299952359E5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Feb 7, 2018, at 9:22 AM, Stephane Bortzmeyer = wrote: > The intention of this specification is to enable stateful information > (connection parameters and DNS data) directly related to the DSO > Session to be transmitted. This creates trackable state and prevents > queries from coming from successive privacy addresses, as could be the > case with regular DNS queries, for a privacy-conscious client. Before > using DSO (or any kind of long-lived DNS sessions), this consequence > should be taken into account. The risk is partially mitigated by using > encryption (which protects against sniffing by a third-party, but not > against logging by the server.) >=20 > The design of new TLV must also avoid adding any information that > could make this tracking easier. Thanks for this text. I am pretty happy with it; the only thing I'd be = tempted to change would be the last sentence, which I would state this = way instead: When designing new TLVs, the potential for the TLV to be used as a = tracking identifier should be taken into consideration, and should be = avoided when not required. I say this because in some cases it's perfectly fine to know who you're = talking to; e.g. in draft-sctl-dnssd-mdns-relay-02, I specified the use = of TLS client authentication, because hybrid relays are network = infrastructure. Although this is happening at the TLS layer and not = the session signaling layer, it's effectively the same thing. Your other comments all make sense to me=E2=80=94thanks for the thorough = review and particularly for suggesting text and not just saying "you = should change this text." :) --Apple-Mail=_0F5470E6-7113-4A8D-8A8B-A299952359E5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Feb 7, 2018, at 9:22 AM, Stephane Bortzmeyer <bortzmeyer@nic.fr> = wrote:
The intention of = this specification is to enable stateful information
(connection parameters and DNS data) directly = related to the DSO
Session to be = transmitted. This creates trackable state and prevents
queries from coming from successive privacy = addresses, as could be the
case with regular = DNS queries, for a privacy-conscious client. Before
using DSO (or any kind of long-lived DNS = sessions), this consequence
should be taken = into account. The risk is partially mitigated by using
encryption (which protects against sniffing by a = third-party, but not
against logging by = the server.)

The design of new = TLV must also avoid adding any information that
could make this tracking = easier.

Thanks for this text.   I am pretty happy with it; the = only thing I'd be tempted to change would be the last sentence, which I = would state this way instead:

When designing new TLVs, the potential = for the TLV to be used as a tracking identifier should be taken into = consideration, and should be avoided when not required.

I say this because in = some cases it's perfectly fine to know who you're talking to; e.g. = in draft-sctl-dnssd-mdns-relay-02, I specified the use of TLS = client authentication, because hybrid relays are network infrastructure. =   Although this is happening at the TLS layer and not the session = signaling layer, it's effectively the same thing.
Your other comments all make sense to = me=E2=80=94thanks for the thorough review and particularly for = suggesting text and not just saying "you should change this text." =   :)

= --Apple-Mail=_0F5470E6-7113-4A8D-8A8B-A299952359E5-- From nobody Fri Feb 9 13:20:44 2018 Return-Path: X-Original-To: dnssd@ietf.org Delivered-To: dnssd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 313151242F7; Fri, 9 Feb 2018 13:20:42 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Ralph Droms To: Cc: dnssd@ietf.org, ietf@ietf.org, draft-ietf-dnssd-hybrid.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.72.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151821124215.5445.18202159907016733071@ietfa.amsl.com> Date: Fri, 09 Feb 2018 13:20:42 -0800 Archived-At: Subject: [dnssd] Iotdir last call review of draft-ietf-dnssd-hybrid-07 X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Feb 2018 21:20:42 -0000 Reviewer: Ralph Droms Review result: Ready draft-ietf-dnssd-hybrid-07 is ready for publication. I found no issues to comment on. From nobody Fri Feb 9 14:11:57 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9E54126D3F; Fri, 9 Feb 2018 14:11:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xbu1J-P7tP5j; Fri, 9 Feb 2018 14:11:50 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0D0D1270FC; Fri, 9 Feb 2018 14:11:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2998; q=dns/txt; s=iport; t=1518214309; x=1519423909; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=mPnNDbqQGTBp5Rgak10YSqvyVMVwH6NoFOwTCdqQWK4=; b=QvfPOnFYpkasFDm6MeFZykfkL8gHbhk16Rbfm34DAd8Tr3JkSDJgECZI t7nY6W61/SRHh8RGM4dccAkOnZmNyMXwIhnmo6tX8Hys9xxk/NJ/NFk5o kvoMFo+NSI9KaEQunGGMsm81ZmjkE25wS8TVovSq3DrLUAZNTyl4zChu5 s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DzAAATHH5a/4gNJK1eARgBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGDUmZwKAqDW4okjiSZWYIYChgNhRYCGoIgVBgBAgEBAQEBAQJ?= =?us-ascii?q?rHQuFJAIEAQEhEToLEAIBCBoCJgICAiULFRACBA4FijUQrweCJ4UBg3WCDQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAR2BD4NtghWBV4IRgwWDLwEBAgEBF4FWgxcxgjQ?= =?us-ascii?q?FkkyRYAkCiB2NYoIeZ4VBi3mOAIlmAhEZAYE7AR85gVBwFRkkKgGCGwmEbQF4i?= =?us-ascii?q?1qBFwEBAQ?= X-IronPort-AV: E=Sophos;i="5.46,485,1511827200"; d="scan'208";a="343781528" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Feb 2018 22:11:49 +0000 Received: from XCH-ALN-017.cisco.com (xch-aln-017.cisco.com [173.36.7.27]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id w19MBnlI020678 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 9 Feb 2018 22:11:49 GMT Received: from xch-aln-019.cisco.com (173.36.7.29) by XCH-ALN-017.cisco.com (173.36.7.27) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Fri, 9 Feb 2018 16:11:48 -0600 Received: from xch-aln-019.cisco.com ([173.36.7.29]) by XCH-ALN-019.cisco.com ([173.36.7.29]) with mapi id 15.00.1320.000; Fri, 9 Feb 2018 16:11:48 -0600 From: "Jan Komissar (jkomissa)" To: "dnsop@ietf.org" CC: "dnssd@ietf.org" , "doh@ietf.org" Thread-Topic: [DNSOP] I-D Action: draft-ietf-dnsop-session-signal-05.txt Thread-Index: AQHTlzNpJxjKaNAGUEaGwSQBUMUP1KOcyE8A Date: Fri, 9 Feb 2018 22:11:48 +0000 Message-ID: <2637A488-46BB-4AA1-8BE6-281DA594A5CC@cisco.com> References: <151703250881.23521.17253380316887973737@ietfa.amsl.com> In-Reply-To: <151703250881.23521.17253380316887973737@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.25.0.170815 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.86.252.146] Content-Type: text/plain; charset="utf-8" Content-ID: <48D9772AC1BB9342A8A4C59989ED325C@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [dnssd] [DNSOP] I-D Action: draft-ietf-dnsop-session-signal-05.txt X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Feb 2018 22:11:52 -0000 SSBoYXZlIHJldmlld2VkIHRoaXMgZHJhZnQgYW5kIGl0IGxvb2tzIGZpbmUgdG8gbWUuDQoNCisx DQoNCkphbiBLb21pc3Nhcg0KDQpPbiAxLzI3LzE4LCAxMjo1NSBBTSwgIkROU09QIG9uIGJlaGFs ZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciIDxkbnNvcC1ib3VuY2VzQGlldGYub3JnIG9u IGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IHdyb3RlOg0KDQogICAgDQogICAg QSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJu ZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KICAgIFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2Yg dGhlIERvbWFpbiBOYW1lIFN5c3RlbSBPcGVyYXRpb25zIFdHIG9mIHRoZSBJRVRGLg0KICAgIA0K ICAgICAgICAgICAgVGl0bGUgICAgICAgICAgIDogRE5TIFN0YXRlZnVsIE9wZXJhdGlvbnMNCiAg ICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IFJheSBCZWxsaXMNCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFN0dWFydCBDaGVzaGlyZQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgSm9obiBEaWNraW5zb24NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFNhcmEgRGlj a2luc29uDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBBbGxpc29uIE1hbmtpbg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgVG9tIFB1c2F0ZXJpDQogICAgCUZpbGVuYW1lICAg ICAgICA6IGRyYWZ0LWlldGYtZG5zb3Atc2Vzc2lvbi1zaWduYWwtMDUudHh0DQogICAgCVBhZ2Vz ICAgICAgICAgICA6IDUwDQogICAgCURhdGUgICAgICAgICAgICA6IDIwMTgtMDEtMjYNCiAgICAN CiAgICBBYnN0cmFjdDoNCiAgICAgICBUaGlzIGRvY3VtZW50IGRlZmluZXMgYSBuZXcgRE5TIE9Q Q09ERSBmb3IgRE5TIFN0YXRlZnVsIE9wZXJhdGlvbnMNCiAgICAgICAoRFNPKS4gIERTTyBtZXNz YWdlcyBjb21tdW5pY2F0ZSBvcGVyYXRpb25zIHdpdGhpbiBwZXJzaXN0ZW50DQogICAgICAgc3Rh dGVmdWwgc2Vzc2lvbnMsIHVzaW5nIHR5cGUtbGVuZ3RoLXZhbHVlIChUTFYpIHN5bnRheC4gIFRo cmVlIFRMVnMNCiAgICAgICBhcmUgZGVmaW5lZCB0aGF0IG1hbmFnZSBzZXNzaW9uIHRpbWVvdXRz LCB0ZXJtaW5hdGlvbiwgYW5kIGVuY3J5cHRpb24NCiAgICAgICBwYWRkaW5nLCBhbmQgYSBmcmFt ZXdvcmsgaXMgZGVmaW5lZCBmb3IgZXh0ZW5zaW9ucyB0byBlbmFibGUgbmV3DQogICAgICAgc3Rh dGVmdWwgb3BlcmF0aW9ucy4NCiAgICANCiAgICANCiAgICBUaGUgSUVURiBkYXRhdHJhY2tlciBz dGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCiAgICBodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1pZXRmLWRuc29wLXNlc3Npb24tc2lnbmFsLw0KICAgIA0KICAgIFRo ZXJlIGFyZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2YWlsYWJsZSBhdDoNCiAgICBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1kbnNvcC1zZXNzaW9uLXNpZ25hbC0wNQ0K ICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtaWV0Zi1kbnNv cC1zZXNzaW9uLXNpZ25hbC0wNQ0KICAgIA0KICAgIEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2 ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDoNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZm P3VybDI9ZHJhZnQtaWV0Zi1kbnNvcC1zZXNzaW9uLXNpZ25hbC0wNQ0KICAgIA0KICAgIA0KICAg IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRo ZSB0aW1lIG9mIHN1Ym1pc3Npb24NCiAgICB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQg ZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KICAgIA0KICAgIEludGVybmV0 LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCiAgICBmdHA6 Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KICAgIA0KICAgIF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgRE5TT1AgbWFpbGluZyBsaXN0 DQogICAgRE5TT1BAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2Ruc29wDQogICAgDQoNCg== From nobody Wed Feb 14 14:12:34 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEDCE1201FA; Wed, 14 Feb 2018 14:12:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mThmdqFvivG2; Wed, 14 Feb 2018 14:12:30 -0800 (PST) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A681812426E; Wed, 14 Feb 2018 14:12:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3662; q=dns/txt; s=iport; t=1518646350; x=1519855950; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=t66nqsmZK2Y/v6sKPnCM+pQcWyQOXDJbxmLknPgZ20s=; b=WozJXNxe20tOjduI43WH8ahUF7Q8WQvHLGnEX5j7i83+THY6rd1Utda5 EjI67Cm8NY1ynCS8YVf9A1z3D2nWDbYR3NbpngCTgHf+OORyvGYuTbkJ0 2qQtHSeZbFpsWaHiIUKab5SArBDoXojqa2hySRJgtAK7SPVvbRR5h0ZAX E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AJAwDns4Ra/5hdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYNSZnAoCoNbmCiBW4E+lkKCGAoYC4UYAhqCY1YWAQIBAQEBAQE?= =?us-ascii?q?CayiFJAIEAQEhEToLEAIBCBoCJgICAiULFRACBAENBYo1EK98gieFAYQDghMBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEYBYEPg3OCFYFXgWgpDIJ5gy8BAYFxgxcxgjQ?= =?us-ascii?q?BBKQvCQKMJoldlEWXbAIRGQGBOwEmBS2BUHAVPSoBghuEd3iMaQGBGAEBAQ?= X-IronPort-AV: E=Sophos;i="5.46,514,1511827200"; d="scan'208";a="70408039" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Feb 2018 22:12:29 +0000 Received: from XCH-RCD-019.cisco.com (xch-rcd-019.cisco.com [173.37.102.29]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id w1EMCTrt004967 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 14 Feb 2018 22:12:29 GMT Received: from xch-aln-019.cisco.com (173.36.7.29) by XCH-RCD-019.cisco.com (173.37.102.29) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 14 Feb 2018 16:12:29 -0600 Received: from xch-aln-019.cisco.com ([173.36.7.29]) by XCH-ALN-019.cisco.com ([173.36.7.29]) with mapi id 15.00.1320.000; Wed, 14 Feb 2018 16:12:29 -0600 From: "Jan Komissar (jkomissa)" To: Paul Hoffman , dnsop CC: "dnssd@ietf.org" , "doh@ietf.org" Thread-Topic: [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal Thread-Index: AQHTm5D+P8Hdt54fVUSceurV+Y+5IKOSDxkAgBKMVQA= Date: Wed, 14 Feb 2018 22:12:29 +0000 Message-ID: <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> In-Reply-To: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.25.0.170815 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.67.103] Content-Type: text/plain; charset="utf-8" Content-ID: <3418F09B43B37245AD8991243B55ABFB@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Feb 2018 22:12:33 -0000 DQpUd28gaXRlbXMgcmVsYXRlZCB0byB0aGlzOg0KDQoxOiBJIHRoaW5rIHRoYXQgaXQgd291bGQg YmUgYmV0dGVyIHRvIHJlcXVpcmUgVExTIGZvciBhbGwgRFNPIGNvbm5lY3Rpb25zLiBUaGlzIGRv Y3VtZW50IChEU08pIHNwZWNpZmllcyB0aGF0IGl0IHNob3VsZCB1c2UgVENQIG9yIFRMUyBmb3Ig Y29ubmVjdGlvbnMsIGJ1dCB0aGUgRE5TIFB1c2ggTm90aWZpY2F0aW9uIChEUE4pIGRyYWZ0IHJl cXVpcmVzIFRMUy4gVGhpcyB3b3VsZCBjb21wbGljYXRlIG1hdHRlcnMgaWYgYSBzdGFuZGFyZCBU Q1AgY29ubmVjdGlvbiB3YXMgb3BlbmVkIGZvciBvbmUgcHVycG9zZSBhbmQgbGF0ZXIgYSBEUE4g b3BlcmF0aW9uIG92ZXIgdGhlIHNhbWUgY29ubmVjdGlvbiB3YXMgYXR0ZW1wdGVkLiBBbHNvLCBp dCBpbXByb3ZlcyBzZWN1cml0eSBmb3IgYWxsIERTTyBvcGVyYXRpb25zLg0KDQoyOiBJIGFsc28g YmVsaWV2ZSB0aGlzIGRvY3VtZW50IHNob3VsZCBvbmx5IHN1cHBvcnQgRFNPIG92ZXIgVExTLCBu b3Qgc2Vzc2lvbiBiYXNlZCBwcm90b2NvbHMgaW4gZ2VuZXJhbC4gSWYgdGhlcmUgaXMgYSBuZWVk L2Rlc2lyZSBmb3IgZG9pbmcgRFNPIG92ZXIgb3RoZXIgcHJvdG9jb2xzLCBhIG5ldyBSRkMgYWxs b3dpbmcgZWFjaCBwcm90b2NvbCB3b3VsZCBiZSByZXF1aXJlZC4gVGhpcyByZXF1aXJlbWVudCB3 aWxsIGVuc3VyZSB0aGF0IGFsbCBpbXBsZW1lbnRhdGlvbnMgb2YgdGhpcyBkcmFmdCB3b3VsZCBp bnRlcm9wZXJhdGUuIChJZiBEU08tb3Zlci1YIGFuZCBEU08tb3Zlci1ZIGJvdGggYXJlIGNvbXBs aWFudCB3aXRoIHRoaXMgZG9jdW1lbnQsIHRoZXkgYXJlIG5vdCBsaWtlbHkgdG8gaW50ZXJvcGVy YXRlIGV2ZW4gaWYgYm90aCBYIGFuZCBZIGFyZSBzZXNzaW9uIGJhc2VkLCB3aGljaCB3b3VsZCBk ZWZlYXQgdGhlIHB1cnBvc2Ugb2YgYSBzdGFuZGFyZC4pDQoNClJlZ2FyZHMsDQoNCkphbi4NCg0K T24gMi8yLzE4LCA0OjU4IFBNLCAiRE5TT1Agb24gYmVoYWxmIG9mIFBhdWwgSG9mZm1hbiIgPGRu c29wLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHBhdWwuaG9mZm1hbkB2cG5jLm9yZz4g d3JvdGU6DQoNCiAgICBUaGUgY3VycmVudCBkcmFmdCBpcyBoYW5kLXdhdnkgd2hlbiBpdCBjb21l cyB0byB3aGljaCB0cmFuc3BvcnRzIERTTyBjYW4gDQogICAgcnVuIG9uLg0KICAgIA0KICAgIFNl Y3Rpb24gMiBzYXlzICJzdWNoIGFzIjoNCiAgICAgICAgVGhlIHRlcm0gImNvbm5lY3Rpb24iIG1l YW5zIGEgYmlkaXJlY3Rpb25hbCBieXRlIHN0cmVhbSBvZiByZWxpYWJsZSwNCiAgICAgICAgaW4t b3JkZXIgbWVzc2FnZXMsIHN1Y2ggYXMgcHJvdmlkZWQgYnkgdXNpbmcgRE5TIG92ZXIgVENQDQog ICAgICAgIFtSRkMxMDM1XVtSRkM3NzY2XSBvciBETlMgb3ZlciBUTFMgW1JGQzc4NThdLg0KICAg IFNlY3Rpb24gNC4xIHNheXMgImFyZSBzdWl0YWJsZSI6DQogICAgICAgIFN0YW5kYXJkIEROUyBv dmVyIFRDUCBbUkZDMTAzNV1bUkZDNzc2Nl0sIGFuZCBETlMgb3ZlciBUTFMgW1JGQzc4NThdDQog ICAgICAgIGFyZSBzdWl0YWJsZSBwcm90b2NvbHMuDQogICAgDQogICAgVGhlIGRvY3VtZW50IHNo b3VsZCBleHBsaWNpdGx5IGxpc3Qgd2hpY2ggcHJvdG9jb2xzIGFyZSBjdXJyZW50bHkgDQogICAg YWNjZXB0YWJsZSwgYW5kIHNheSB0aGF0IHRoZSBsaXN0IGNhbiBjaGFuZ2UgaW4gdGhlIGZ1dHVy ZSBiYXNlZCBvbiANCiAgICBzdGFuZGFyZHMtdHJhY2sgZG9jdW1lbnRzLiBQcm9wb3NlZCB3b3Jk aW5nIGZvciBib3RoIG9mIHRoZXNlIGFib3ZlIGFyZToNCiAgICANCiAgICBTZWN0aW9uIDI6DQog ICAgICAgIFRoZSB0ZXJtICJjb25uZWN0aW9uIiBtZWFucyBhIGJpZGlyZWN0aW9uYWwgYnl0ZSBz dHJlYW0gb2YgcmVsaWFibGUsDQogICAgICAgIGluLW9yZGVyIG1lc3NhZ2VzLg0KICAgIFNlY3Rp b24gNC4xIHNheXMgImFyZSBzdWl0YWJsZSI6DQogICAgICAgIERTTyBNVVNUIGJlIHJ1biBhcyBz dGFuZGFyZCBETlMgb3ZlciBUQ1AgW1JGQzEwMzVdW1JGQzc3NjZdDQogICAgICAgIG9yIEROUyBv dmVyIFRMUyBbUkZDNzg1OF0uIFRoaXMgbGlzdCBtaWdodCBleHBhbmQgaW4gdGhlIGZ1dHVyZSwg DQogICAgc3VjaA0KICAgICAgICBhbiBleHBhbnNpb24gTVVTVCBiZSBpbiBzdGFuZGFyZHMtdHJh Y2sgUkZDcy4NCiAgICANCiAgICBIYXZpbmcgZGV2ZWxvcGVycyBrbm93IGV4YWN0bHkgd2hpY2gg cHJvdG9jb2xzIGNhbiBiZSB1c2VkIGlzIGltcG9ydGFudCANCiAgICBzbyB0aGF0IHRoZXkgZG8g bm90IHVzZSBwcm90b2NvbHMgdGhhdCB0aGV5IGFjY2lkZW50YWxseSB0aGluayBhcmUgDQogICAg cmVsaWFibGUgYW5kIGluLW9yZGVyLiBGb3IgZXhhbXBsZSwgdGhlIERPSCBXRyBpcyB3b3JraW5n IG9uIGEgcHJvdG9jb2wgDQogICAgdGhhdCBtaWdodCBpbml0aWFsbHkgc2VlbSBhdHRyYWN0aXZl LCBidXQgaXQgZG9lcyAqbm90KiBxdWFsaWZ5IGZvciBEU08uDQogICAgDQogICAgLS1QYXVsIEhv ZmZtYW4NCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KICAgIEROU09QIG1haWxpbmcgbGlzdA0KICAgIEROU09QQGlldGYub3JnDQogICAg aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kbnNvcA0KICAgIA0KDQo= From nobody Wed Feb 14 14:22:45 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56050126C0F for ; Wed, 14 Feb 2018 14:22:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aAJJSc2IHsbN for ; Wed, 14 Feb 2018 14:22:41 -0800 (PST) Received: from mail-qk0-x230.google.com (mail-qk0-x230.google.com [IPv6:2607:f8b0:400d:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 606141201FA for ; Wed, 14 Feb 2018 14:22:41 -0800 (PST) Received: by mail-qk0-x230.google.com with SMTP id l23so4874736qkk.11 for ; Wed, 14 Feb 2018 14:22:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=Va/WnRcXkAVQ7RmBTM2qWR0Jt7LMH1XDRxKLreaKw8Y=; b=ajep751TJKDRT0Wa21TH7que9tRmEDdbR3HOCq3+0Yyi0XIX73MAy+Fa3/nkz6cC9J 4sVY2WfqRo++tgDpVjx46alWa3h6S9hZhZn62m5OOhth22kZzgm3tyOPm0MufvJD6Zkh YwrgnP2QQkTTWU3sfn/wSK/bHju4KwSZiFr1HmPuUdjd1891uLlABbY+pzDKO+FRSHY/ DzNKBeCTJG5+AUQ2kBpl2sTW0KxWF2HAtu0Bbvm5r16Ib8C9QIgvyHYaOIIgb2FJgaY5 XW1s8k15YITSkpSrYEgJB/h5+TFLY5j/WSXiRrD0LKc2suWI+dwl7X//RBYarT/tZp6o Ebxg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=Va/WnRcXkAVQ7RmBTM2qWR0Jt7LMH1XDRxKLreaKw8Y=; b=A8ANPTaThntAxIqWlnkLG3EFgP2c6STItbfvPNmjP1fWxOKuHOTuE8KvLuNSXJxD/O /6tCEKiOw9JwvrVb4TSfU4DPV3Nn/P5VYZpJX7vXXCJmvnd+JdeXcHcga+PBMOwwbk0A sE+7E4MTDMy3P1AjAEp4Wpatg+lHXAIcqzRClD+QRH12Q4pLXNxXU69+SIKzdeVqWyld urmLOFBS9f1VvM9UBaNSYs6LcKXg8JSahLBLBULogCWOM1qsGqdsvyy9gTlfaPd61aEy 7fniN6NhAqcozbHPRZxtHW3aXTowUlBCDN8hl/Sy5XMX7uK4oAxMHPAnWBNXVQqAr/iN 7fGQ== X-Gm-Message-State: APf1xPBjlUxIE59Fk1VcaR6i9TJD5TNrbLf5OH07NrnSlFEbrj4MSSjh 6DoGIAmCeMIrL5mr6W6nspKcXA== X-Google-Smtp-Source: AH8x226x9yEXS91ogH/bJ60toKV6PCc+/yRoVhhGQ6CymFupAzKkFQ+zX2tj/YchSceR8iju/YII+w== X-Received: by 10.55.102.134 with SMTP id a128mr1021837qkc.122.1518646960576; Wed, 14 Feb 2018 14:22:40 -0800 (PST) Received: from [10.0.1.16] ([8.20.190.66]) by smtp.gmail.com with ESMTPSA id g42sm1044260qtb.96.2018.02.14.14.22.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 14 Feb 2018 14:22:40 -0800 (PST) From: Ted Lemon Message-Id: <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_7307901A-0BFE-4C86-8B0D-9CEB69592114" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Wed, 14 Feb 2018 17:22:38 -0500 In-Reply-To: <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> Cc: Paul Hoffman , dnsop , "dnssd@ietf.org" , "doh@ietf.org" To: "Jan Komissar (jkomissa)" References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Feb 2018 22:22:43 -0000 --Apple-Mail=_7307901A-0BFE-4C86-8B0D-9CEB69592114 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Feb 14, 2018, at 5:12 PM, Jan Komissar (jkomissa) = wrote: > 1: I think that it would be better to require TLS for all DSO = connections. This document (DSO) specifies that it should use TCP or TLS = for connections, but the DNS Push Notification (DPN) draft requires TLS. = This would complicate matters if a standard TCP connection was opened = for one purpose and later a DPN operation over the same connection was = attempted. Also, it improves security for all DSO operations. Jan, I'm having trouble following your reasoning here. The client that = makes the connection presumably knows whether or not it's going to do = DPN. Why would there be any confusion? DNS-over-TCP and DNS-over-TLS are standards. It's hard to see where = the interop issue would be. Can you expand on that? Also, do you think that DNS-over-TCP should be formally deprecated? If = so, perhaps that's the right way to address this. If not, can you say = why DSO is special and requires TLS, when DNS-over-TCP does not? --Apple-Mail=_7307901A-0BFE-4C86-8B0D-9CEB69592114 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii On = Feb 14, 2018, at 5:12 PM, Jan Komissar (jkomissa) <jkomissa@cisco.com> = wrote:
1: I think that it = would be better to require TLS for all DSO connections. This document = (DSO) specifies that it should use TCP or TLS for connections, but the = DNS Push Notification (DPN) draft requires TLS. This would complicate = matters if a standard TCP connection was opened for one purpose and = later a DPN operation over the same connection was attempted. Also, it = improves security for all DSO = operations.

Jan, I'm having trouble following your reasoning here.   = The client that makes the connection presumably knows whether or not = it's going to do DPN.   Why would there be any confusion?

DNS-over-TCP and = DNS-over-TLS are standards.   It's hard to see where the interop = issue would be.   Can you expand on that?

Also, do you think that DNS-over-TCP = should be formally deprecated?   If so, perhaps that's the right = way to address this.   If not, can you say why DSO is special and = requires TLS, when DNS-over-TCP does not?

= --Apple-Mail=_7307901A-0BFE-4C86-8B0D-9CEB69592114-- From nobody Wed Feb 14 15:07:01 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33CFA12700F; Wed, 14 Feb 2018 15:07:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.53 X-Spam-Level: X-Spam-Status: No, score=-14.53 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QZoaubZDB1tx; Wed, 14 Feb 2018 15:06:58 -0800 (PST) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1855512704A; Wed, 14 Feb 2018 15:06:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11714; q=dns/txt; s=iport; t=1518649618; x=1519859218; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=J6G+VX0rxrp4D1kfjqb54u3X5v0S92NI+wVlCYFm2tk=; b=Ij9wm9Zucn5q4UbI7KViwccxpTUoVjyFhTXv0JjJvfor14DuDP+DIrOp ip1uL1n0JJNrN94NDz/OPLvcooY8HZjTsiR7eEUHAHzO+ySbEiBMUX1g+ USFX9ZKYCz46bcC43DJFjIvZ+kCdrhEd9UWOX+lMliKm24Ornr/Qfd9C1 s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CcAgDVwIRa/4cNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJaeGZwKAqDW5goggKBF5BnhVuCGAqFOwIagmNWFgECAQEBAQE?= =?us-ascii?q?BAmsohSMBAQEEI1YQAgEIDgMDAQIoAwICAjAUCQgCBA4FiVFksAaCJyaIYYITA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBHYUCghWBV4FoKYMFhQw2FoJhMYI0BaQvCQK?= =?us-ascii?q?WA5RFl2wCERkBgTsBJgsngVBwFWcBghuEd3iMaQGBGAEBAQ?= X-IronPort-AV: E=Sophos; i="5.46,514,1511827200"; d="scan'208,217"; a="70392283" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Feb 2018 23:06:43 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id w1EN6hDl019437 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 14 Feb 2018 23:06:43 GMT Received: from xch-aln-019.cisco.com (173.36.7.29) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 14 Feb 2018 17:06:42 -0600 Received: from xch-aln-019.cisco.com ([173.36.7.29]) by XCH-ALN-019.cisco.com ([173.36.7.29]) with mapi id 15.00.1320.000; Wed, 14 Feb 2018 17:06:42 -0600 From: "Jan Komissar (jkomissa)" To: Ted Lemon CC: Paul Hoffman , dnsop , "dnssd@ietf.org" , "doh@ietf.org" Thread-Topic: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal Thread-Index: AQHTm5D+P8Hdt54fVUSceurV+Y+5IKOSDxkAgBKMVQCAAFapAP//uH4A Date: Wed, 14 Feb 2018 23:06:42 +0000 Message-ID: <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> In-Reply-To: <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.25.0.170815 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.67.103] Content-Type: multipart/alternative; boundary="_000_5AFBBFBECF5A4F7A9AC9F7E0040BBABDciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Feb 2018 23:07:00 -0000 --_000_5AFBBFBECF5A4F7A9AC9F7E0040BBABDciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgVGVkLA0KDQpJ4oCZbGwgdHJ5IHRvIGNsYXJpZnk6DQoNCkN1cnJlbnRseSwgdGhlcmUgYXJl IG9ubHkgcGxhbnMgZm9yIERQTiwgYW5kIHRoYXQgd291bGQgZm9yY2UgZXZlcnkgY29ubmVjdGlv biB0byBiZSBUTFMuIEhvd2V2ZXIsIGlmIGEgZnV0dXJlIHByb3RvY29sIOKAnFotb3Zlci1EU0/i gJ0gZG9lcyBub3QgcmVxdWlyZSBUTFMsIGl0IGlzIHBvc3NpYmxlIHRoYXQgYSBjbGllbnQgd291 bGQgY3JlYXRlIGEgVENQIGNvbm5lY3Rpb24gZm9yIFogYW5kIGxhdGVyIHdvdWxkIHdhbnQgdG8g c2VuZCBEUE4gb3BlcmF0aW9uIHRvIHRoZSBzYW1lIHNlcnZlci4gTm90ZSB0aGF0IHRoZSBEU08g Y2xpZW50IG1heSByZXByZXNlbnQgYSBzaW5nbGUgY29tcHV0ZXIsIHdoaWxlIHRoZSBaIGFuZCBE UE4gcmVxdWVzdHMgcmVwcmVzZW50IGFwcGxpY2F0aW9ucyBvbiB0aGF0IGNvbXB1dGVyIHRoYXQg aW1wbGljaXRseSBkZXBlbmQgb24gdGhvc2UgdHdvIHByb3RvY29scy4gSSBndWVzcyBhIG5ldyBj b25uZWN0aW9uIGNvdWxkIGJlIGNyZWF0ZWQsIGJ1dCBpdCB3b3VsZCBiZSBiZXR0ZXIgaWYgbm90 IG5lY2Vzc2FyeS4NCg0KVGhlIGludGVyb3AgaXNzdWUgaXMgcmVsYXRlZCB0byBzZWN0aW9uIDQu MSB0aGF0IHNheXMgdGhhdCBhbnkgc2Vzc2lvbiBiYXNlZCBwcm90b2NvbCBpcyBzdWl0YWJsZSBm b3IgRFNPLiBJZiB5b3UgbWFrZSBhIHNlcnZlciB0aGF0IG9ubHkgc3VwcG9ydHMgRFNPIG92ZXIg VENQIGFuZCBJIG1ha2UgYSBjbGllbnQgdGhhdCBvbmx5IHN1cHBvcnRzIERTTyBvdmVyIFFVSUMs IHRoZXkgYXJlIGJvdGggY29tcGxpYW50IHdpdGggdGhlIGRyYWZ0LCBidXQgdGhleSBjYW5ub3Qg Y29tbXVuaWNhdGUgd2l0aCBlYWNoIG90aGVyLiBUbyBhdm9pZCB0aGlzLCBJIHN1Z2dlc3QgdGhh dCB0aGlzIGRyYWZ0IG9ubHkgc3VwcG9ydHMgVExTIChhbmQgcG9zc2libHkgVENQKSwgYW5kIHN1 cHBvcnRpbmcgRFNPIG9uIGFueSBvdGhlciB1bmRlcmx5aW5nIHByb3RvY29sIHdvdWxkIHJlcXVp cmUgYSBuZXcgZG9jdW1lbnQuDQoNCkJldHRlcj8NCg0KVGhhbmtzLA0KDQpKYW4uDQoNCg0KRnJv bTogVGVkIExlbW9uIDxtZWxsb25AZnVndWUuY29tPg0KRGF0ZTogV2VkbmVzZGF5LCBGZWJydWFy eSAxNCwgMjAxOCBhdCA1OjIyIFBNDQpUbzogIkphbiBLb21pc3NhciAoamtvbWlzc2EpIiA8amtv bWlzc2FAY2lzY28uY29tPg0KQ2M6IFBhdWwgSG9mZm1hbiA8cGF1bC5ob2ZmbWFuQHZwbmMub3Jn PiwgZG5zb3AgPGRuc29wQGlldGYub3JnPiwgImRuc3NkQGlldGYub3JnIiA8ZG5zc2RAaWV0Zi5v cmc+LCAiZG9oQGlldGYub3JnIiA8ZG9oQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtkbnNzZF0g W0ROU09QXSBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCAtIGRyYWZ0LWlldGYtZG5zb3Atc2Vzc2lv bi1zaWduYWwNCg0KT24gRmViIDE0LCAyMDE4LCBhdCA1OjEyIFBNLCBKYW4gS29taXNzYXIgKGpr b21pc3NhKSA8amtvbWlzc2FAY2lzY28uY29tPG1haWx0bzpqa29taXNzYUBjaXNjby5jb20+PiB3 cm90ZToNCjE6IEkgdGhpbmsgdGhhdCBpdCB3b3VsZCBiZSBiZXR0ZXIgdG8gcmVxdWlyZSBUTFMg Zm9yIGFsbCBEU08gY29ubmVjdGlvbnMuIFRoaXMgZG9jdW1lbnQgKERTTykgc3BlY2lmaWVzIHRo YXQgaXQgc2hvdWxkIHVzZSBUQ1Agb3IgVExTIGZvciBjb25uZWN0aW9ucywgYnV0IHRoZSBETlMg UHVzaCBOb3RpZmljYXRpb24gKERQTikgZHJhZnQgcmVxdWlyZXMgVExTLiBUaGlzIHdvdWxkIGNv bXBsaWNhdGUgbWF0dGVycyBpZiBhIHN0YW5kYXJkIFRDUCBjb25uZWN0aW9uIHdhcyBvcGVuZWQg Zm9yIG9uZSBwdXJwb3NlIGFuZCBsYXRlciBhIERQTiBvcGVyYXRpb24gb3ZlciB0aGUgc2FtZSBj b25uZWN0aW9uIHdhcyBhdHRlbXB0ZWQuIEFsc28sIGl0IGltcHJvdmVzIHNlY3VyaXR5IGZvciBh bGwgRFNPIG9wZXJhdGlvbnMuDQoNCkphbiwgSSdtIGhhdmluZyB0cm91YmxlIGZvbGxvd2luZyB5 b3VyIHJlYXNvbmluZyBoZXJlLiAgIFRoZSBjbGllbnQgdGhhdCBtYWtlcyB0aGUgY29ubmVjdGlv biBwcmVzdW1hYmx5IGtub3dzIHdoZXRoZXIgb3Igbm90IGl0J3MgZ29pbmcgdG8gZG8gRFBOLiAg IFdoeSB3b3VsZCB0aGVyZSBiZSBhbnkgY29uZnVzaW9uPw0KDQpETlMtb3Zlci1UQ1AgYW5kIERO Uy1vdmVyLVRMUyBhcmUgc3RhbmRhcmRzLiAgIEl0J3MgaGFyZCB0byBzZWUgd2hlcmUgdGhlIGlu dGVyb3AgaXNzdWUgd291bGQgYmUuICAgQ2FuIHlvdSBleHBhbmQgb24gdGhhdD8NCg0KQWxzbywg ZG8geW91IHRoaW5rIHRoYXQgRE5TLW92ZXItVENQIHNob3VsZCBiZSBmb3JtYWxseSBkZXByZWNh dGVkPyAgIElmIHNvLCBwZXJoYXBzIHRoYXQncyB0aGUgcmlnaHQgd2F5IHRvIGFkZHJlc3MgdGhp cy4gICBJZiBub3QsIGNhbiB5b3Ugc2F5IHdoeSBEU08gaXMgc3BlY2lhbCBhbmQgcmVxdWlyZXMg VExTLCB3aGVuIEROUy1vdmVyLVRDUCBkb2VzIG5vdD8NCg0K --_000_5AFBBFBECF5A4F7A9AC9F7E0040BBABDciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6QXJpYWw7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAy IDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglw YW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5Ok1lbmxvLVJlZ3VsYXI7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAu TXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNw YW4ubXNvSW5zDQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCW1zby1zdHlsZS1uYW1l OiIiOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7DQoJY29sb3I6dGVhbDt9DQouTXNvQ2hw RGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0 O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4w aW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0 aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9 IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBUZWQsPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPknigJlsbCB0cnkgdG8gY2xhcmlmeTo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q3VycmVu dGx5LCB0aGVyZSBhcmUgb25seSBwbGFucyBmb3IgRFBOLCBhbmQgdGhhdCB3b3VsZCBmb3JjZSBl dmVyeSBjb25uZWN0aW9uIHRvIGJlIFRMUy4gSG93ZXZlciwgaWYgYSBmdXR1cmUgcHJvdG9jb2wg 4oCcWi1vdmVyLURTT+KAnSBkb2VzIG5vdCByZXF1aXJlIFRMUywgaXQgaXMgcG9zc2libGUgdGhh dCBhIGNsaWVudCB3b3VsZCBjcmVhdGUgYSBUQ1AgY29ubmVjdGlvbiBmb3IgWiBhbmQgbGF0ZXIg d291bGQNCiB3YW50IHRvIHNlbmQgRFBOIG9wZXJhdGlvbiB0byB0aGUgc2FtZSBzZXJ2ZXIuIE5v dGUgdGhhdCB0aGUgRFNPIGNsaWVudCBtYXkgcmVwcmVzZW50IGEgc2luZ2xlIGNvbXB1dGVyLCB3 aGlsZSB0aGUgWiBhbmQgRFBOIHJlcXVlc3RzIHJlcHJlc2VudCBhcHBsaWNhdGlvbnMgb24gdGhh dCBjb21wdXRlciB0aGF0IGltcGxpY2l0bHkgZGVwZW5kIG9uIHRob3NlIHR3byBwcm90b2NvbHMu IEkgZ3Vlc3MgYSBuZXcgY29ubmVjdGlvbiBjb3VsZCBiZSBjcmVhdGVkLA0KIGJ1dCBpdCB3b3Vs ZCBiZSBiZXR0ZXIgaWYgbm90IG5lY2Vzc2FyeS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhl IGludGVyb3AgaXNzdWUgaXMgcmVsYXRlZCB0byBzZWN0aW9uIDQuMSB0aGF0IHNheXMgdGhhdCBh bnkgc2Vzc2lvbiBiYXNlZCBwcm90b2NvbCBpcyBzdWl0YWJsZSBmb3IgRFNPLiBJZiB5b3UgbWFr ZSBhIHNlcnZlciB0aGF0IG9ubHkgc3VwcG9ydHMgRFNPIG92ZXIgVENQIGFuZCBJIG1ha2UgYSBj bGllbnQgdGhhdCBvbmx5IHN1cHBvcnRzIERTTyBvdmVyIFFVSUMsIHRoZXkgYXJlIGJvdGggY29t cGxpYW50DQogd2l0aCB0aGUgZHJhZnQsIGJ1dCB0aGV5IGNhbm5vdCBjb21tdW5pY2F0ZSB3aXRo IGVhY2ggb3RoZXIuIFRvIGF2b2lkIHRoaXMsIEkgc3VnZ2VzdCB0aGF0IHRoaXMgZHJhZnQgb25s eSBzdXBwb3J0cyBUTFMgKGFuZCBwb3NzaWJseSBUQ1ApLCBhbmQgc3VwcG9ydGluZyBEU08gb24g YW55IG90aGVyIHVuZGVybHlpbmcgcHJvdG9jb2wgd291bGQgcmVxdWlyZSBhIG5ldyBkb2N1bWVu dC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmV0dGVyPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5UaGFua3MsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkphbi48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xv cjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtj b2xvcjpibGFjayI+VGVkIExlbW9uICZsdDttZWxsb25AZnVndWUuY29tJmd0Ozxicj4NCjxiPkRh dGU6IDwvYj5XZWRuZXNkYXksIEZlYnJ1YXJ5IDE0LCAyMDE4IGF0IDU6MjIgUE08YnI+DQo8Yj5U bzogPC9iPiZxdW90O0phbiBLb21pc3NhciAoamtvbWlzc2EpJnF1b3Q7ICZsdDtqa29taXNzYUBj aXNjby5jb20mZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5QYXVsIEhvZmZtYW4gJmx0O3BhdWwuaG9mZm1h bkB2cG5jLm9yZyZndDssIGRuc29wICZsdDtkbnNvcEBpZXRmLm9yZyZndDssICZxdW90O2Ruc3Nk QGlldGYub3JnJnF1b3Q7ICZsdDtkbnNzZEBpZXRmLm9yZyZndDssICZxdW90O2RvaEBpZXRmLm9y ZyZxdW90OyAmbHQ7ZG9oQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW2Ru c3NkXSBbRE5TT1BdIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIC0gZHJhZnQtaWV0Zi1kbnNvcC1z ZXNzaW9uLXNpZ25hbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5PbiBGZWIgMTQsIDIwMTgsIGF0IDU6MTIgUE0sIEphbiBLb21pc3NhciAoamtv bWlzc2EpICZsdDs8YSBocmVmPSJtYWlsdG86amtvbWlzc2FAY2lzY28uY29tIj5qa29taXNzYUBj aXNjby5jb208L2E+Jmd0OyB3cm90ZToNCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O01lbmxvLVJlZ3VsYXImcXVvdDssc2Fucy1zZXJpZiI+MTogSSB0aGluayB0 aGF0IGl0IHdvdWxkIGJlIGJldHRlciB0byByZXF1aXJlIFRMUyBmb3IgYWxsIERTTyBjb25uZWN0 aW9ucy4gVGhpcyBkb2N1bWVudCAoRFNPKSBzcGVjaWZpZXMgdGhhdCBpdCBzaG91bGQgdXNlIFRD UCBvciBUTFMgZm9yIGNvbm5lY3Rpb25zLCBidXQgdGhlIEROUyBQdXNoDQogTm90aWZpY2F0aW9u IChEUE4pIGRyYWZ0IHJlcXVpcmVzIFRMUy4gVGhpcyB3b3VsZCBjb21wbGljYXRlIG1hdHRlcnMg aWYgYSBzdGFuZGFyZCBUQ1AgY29ubmVjdGlvbiB3YXMgb3BlbmVkIGZvciBvbmUgcHVycG9zZSBh bmQgbGF0ZXIgYSBEUE4gb3BlcmF0aW9uIG92ZXIgdGhlIHNhbWUgY29ubmVjdGlvbiB3YXMgYXR0 ZW1wdGVkLiBBbHNvLCBpdCBpbXByb3ZlcyBzZWN1cml0eSBmb3IgYWxsIERTTyBvcGVyYXRpb25z Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5KYW4sIEknbSBoYXZpbmcgdHJvdWJsZSBmb2xsb3dpbmcgeW91ciByZWFz b25pbmcgaGVyZS4gJm5ic3A7IFRoZSBjbGllbnQgdGhhdCBtYWtlcyB0aGUgY29ubmVjdGlvbiBw cmVzdW1hYmx5IGtub3dzIHdoZXRoZXIgb3Igbm90IGl0J3MgZ29pbmcgdG8gZG8gRFBOLiAmbmJz cDsgV2h5IHdvdWxkIHRoZXJlIGJlIGFueSBjb25mdXNpb24/PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkROUy1vdmVyLVRDUCBhbmQgRE5TLW92 ZXItVExTIGFyZSBzdGFuZGFyZHMuICZuYnNwOyBJdCdzIGhhcmQgdG8gc2VlIHdoZXJlIHRoZSBp bnRlcm9wIGlzc3VlIHdvdWxkIGJlLiAmbmJzcDsgQ2FuIHlvdSBleHBhbmQgb24gdGhhdD88bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWxzbywg ZG8geW91IHRoaW5rIHRoYXQgRE5TLW92ZXItVENQIHNob3VsZCBiZSBmb3JtYWxseSBkZXByZWNh dGVkPyAmbmJzcDsgSWYgc28sIHBlcmhhcHMgdGhhdCdzIHRoZSByaWdodCB3YXkgdG8gYWRkcmVz cyB0aGlzLiAmbmJzcDsgSWYgbm90LCBjYW4geW91IHNheSB3aHkgRFNPIGlzIHNwZWNpYWwgYW5k IHJlcXVpcmVzIFRMUywgd2hlbiBETlMtb3Zlci1UQ1AgZG9lcyBub3Q/PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_5AFBBFBECF5A4F7A9AC9F7E0040BBABDciscocom_-- From nobody Wed Feb 14 15:14:07 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA2F5126FB3 for ; Wed, 14 Feb 2018 15:13:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Le3Fa5Ng3d3k for ; Wed, 14 Feb 2018 15:13:54 -0800 (PST) Received: from mail-qt0-x235.google.com (mail-qt0-x235.google.com [IPv6:2607:f8b0:400d:c0d::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3444112700F for ; Wed, 14 Feb 2018 15:13:52 -0800 (PST) Received: by mail-qt0-x235.google.com with SMTP id c19so9816562qtm.7 for ; Wed, 14 Feb 2018 15:13:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=LcAG1GklvpMReCOBKC51IEAmNOw3TB+r4CSuOQBhkOc=; b=bIBOALsByzQrUvYRCy1SGL7HL7nq0XIj6lbmHqpkohJypQkqEMP8MyGkE2ZoYpr2Km lT+yexGD8e+c+hh0FjcI4uE13uA5xLBfCdaZlpiyRizp+riLtxCj4evhRLD3huG3SuEA qkU8R6mUwpgzGA7nM+lFuQzFUGOG40KRcPsyRjmXy43ID1NvUqHuYXpr/Fd9VxE+nKFc 6pLynsK1iwPN10/uDBna3hYoPPxfYGY+ruAQhCAnMV6jvh24XZPFAm2Aw61Ut8k5kesF O11ul0MM8WpvcSSZGSiNQH9cp/D2X4ViVDJb+TpmZVDXOW3gW4dhogN3N1r3DxeENlnE goyQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=LcAG1GklvpMReCOBKC51IEAmNOw3TB+r4CSuOQBhkOc=; b=jIpsk8HjWnBJJdfoJ0uvRIwIER8YD6QorS3+S0HnJ77mzPRN/NXbB3l2IR85vVZVD/ eb+khSnb0SjlvCJzW68ziRRm/0R1R61HbWGEHEO50f0wpYCcTUf13ViG2m8atx+MRX0a YVZKvf/GQUJ3MhrPMHknD51dk0nD2sTzYCEiIeGaKyQgF0NIcUlL6kD4z2QHEUCcgBCa KZiOH8KMNssFpuNajzkm6VAJcloRl/ncCegWd1Grqfacc75SAS3Iklyv3o/DemyHfWL5 JbEiAwu9tJddC5NQXuxm4zGW2SN9xbHbozTubZtv09wwtyf8lyPF0uaqz0uijmp9VZKc Hw7g== X-Gm-Message-State: APf1xPAg5FcQYEqxP8pmRfbGFqambo9K5eaACqaojvJN0c/God8S4UHG TCanA7axfAOKYnEb+fU3qz5LxMf3GYc= X-Google-Smtp-Source: AH8x227gc9/qbzlqt8WzTf9jSTvJYejLPKKEUIBbffa6iZ2nsM7Nf65u9tGeng8gc3f8zVRwmcpb3w== X-Received: by 10.200.53.121 with SMTP id z54mr1266378qtb.278.1518650031207; Wed, 14 Feb 2018 15:13:51 -0800 (PST) Received: from [10.0.1.16] ([8.20.190.66]) by smtp.gmail.com with ESMTPSA id w63sm908778qtd.76.2018.02.14.15.13.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 14 Feb 2018 15:13:50 -0800 (PST) From: Ted Lemon Message-Id: <34561144-6844-4E00-90E9-41095A9E14E6@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_06F1DF30-8E0D-43FB-991F-A0C44D12D6F3" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Wed, 14 Feb 2018 18:13:47 -0500 In-Reply-To: <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> Cc: Paul Hoffman , dnsop , "dnssd@ietf.org" , "doh@ietf.org" To: "Jan Komissar (jkomissa)" References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Feb 2018 23:13:56 -0000 --Apple-Mail=_06F1DF30-8E0D-43FB-991F-A0C44D12D6F3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Feb 14, 2018, at 6:06 PM, Jan Komissar (jkomissa) = wrote: > Currently, there are only plans for DPN, and that would force every = connection to be TLS. However, if a future protocol =E2=80=9CZ-over-DSO=E2= =80=9D does not require TLS, it is possible that a client would create a = TCP connection for Z and later would want to send DPN operation to the = same server. Note that the DSO client may represent a single computer, = while the Z and DPN requests represent applications on that computer = that implicitly depend on those two protocols. I guess a new connection = could be created, but it would be better if not necessary. Hm, is that really true? What is the scenario that you envision here? = Like, when would this actually happen? What's the client that's making = the connection? How is it that it is the same client that's doing DPN? = If it is configured to support TLS, why isn't it defaulting to that? > The interop issue is related to section 4.1 that says that any = session based protocol is suitable for DSO. If you make a server that = only supports DSO over TCP and I make a client that only supports DSO = over QUIC, they are both compliant with the draft, but they cannot = communicate with each other. To avoid this, I suggest that this draft = only supports TLS (and possibly TCP), and supporting DSO on any other = underlying protocol would require a new document. I think I've heard other suggestions that we should enumerate which = protocols are supported explicitly, but I don't think there's a = requirement to support DSO over anything. We're just describing a new = DNS message type that can be used with any connection-oriented protocol. You didn't answer my third question: > Also, do you think that DNS-over-TCP should be formally deprecated? = If so, perhaps that's the right way to address this. If not, can you = say why DSO is special and requires TLS, when DNS-over-TCP does not? Is is that you want to make DSO-over-TLS MTI and DSO-over-TCP optional? --Apple-Mail=_06F1DF30-8E0D-43FB-991F-A0C44D12D6F3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Feb 14, 2018, at 6:06 PM, Jan Komissar (jkomissa) <jkomissa@cisco.com> = wrote:
Currently, = there are only plans for DPN, and that would force every connection to = be TLS. However, if a future protocol =E2=80=9CZ-over-DSO=E2=80=9D does = not require TLS, it is possible that a client would create a TCP = connection for Z and later would want to send DPN operation to the same = server. Note that the DSO client may represent a single computer, while = the Z and DPN requests represent applications on that computer that = implicitly depend on those two protocols. I guess a new connection could = be created, but it would be better if not = necessary.

Hm, is that = really true?   What is the scenario that you envision here? =  Like, when would this actually happen?   What's the client = that's making the connection?   How is it that it is the same = client that's doing DPN?   If it is configured to support TLS, why = isn't it defaulting to that?

 The interop issue is related to section 4.1 that says that = any session based protocol is suitable for DSO. If you make a server = that only supports DSO over TCP and I make a client that only supports = DSO over QUIC, they are both compliant with the draft, but they cannot = communicate with each other. To avoid this, I suggest that this draft = only supports TLS (and possibly TCP), and supporting DSO on any other = underlying protocol would require a new = document.

I = think I've heard other suggestions that we should enumerate which = protocols are supported explicitly, but I don't think there's a = requirement to support DSO over anything.   We're just describing a = new DNS message type that can be used with any connection-oriented = protocol.

You = didn't answer my third question:

Also, do you think that = DNS-over-TCP should be formally deprecated?   If so, perhaps that's = the right way to address this.   If not, can you say why DSO is = special and requires TLS, when DNS-over-TCP does not?

Is is = that you want to make DSO-over-TLS MTI and DSO-over-TCP = optional?

= --Apple-Mail=_06F1DF30-8E0D-43FB-991F-A0C44D12D6F3-- From nobody Wed Feb 14 16:24:10 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FBB8126CF9 for ; Wed, 14 Feb 2018 16:24:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P_931s0hRgqp for ; Wed, 14 Feb 2018 16:24:07 -0800 (PST) Received: from mail.amsl.com (c8a.amsl.com [4.31.198.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C22BF127342 for ; Wed, 14 Feb 2018 16:24:07 -0800 (PST) Received: from mail.amsl.com (localhost [127.0.0.1]) by c8a.amsl.com (Postfix) with ESMTPS id 1600F1CAE4A for ; Wed, 14 Feb 2018 16:23:36 -0800 (PST) Received: from mail-it0-f53.google.com (mail-it0-f53.google.com [209.85.214.53]) by c8a.amsl.com (Postfix) with ESMTPSA id E89041CAE3D for ; Wed, 14 Feb 2018 16:23:35 -0800 (PST) Received: by mail-it0-f53.google.com with SMTP id v186so11846631itc.5 for ; Wed, 14 Feb 2018 16:24:07 -0800 (PST) X-Gm-Message-State: APf1xPBk3cmlPtHe9jH3vK+FjnG2bTG1lhKojDCT55JcfrubPOsDymUe 8K5yb1iUkeywM1g4EZdEVWvaxRJCNXY5UgZH6pw= X-Google-Smtp-Source: AH8x2267s2DRHTobRGja6D74F0+AsU7iX4as8zWM/jNejaYVRqw+EZbi6irkeNDLZf1qKhYjZ78OyA8ThQ8IuDAkd3Y= X-Received: by 10.36.78.81 with SMTP id r78mr1140102ita.110.1518654247115; Wed, 14 Feb 2018 16:24:07 -0800 (PST) MIME-Version: 1.0 Received: by 10.2.1.68 with HTTP; Wed, 14 Feb 2018 16:23:46 -0800 (PST) From: Glen Date: Wed, 14 Feb 2018 16:23:46 -0800 X-Gmail-Original-Message-ID: Message-ID: To: dnssd@ietf.org Content-Type: multipart/alternative; boundary="001a11372c2cefa27a0565353e30" Archived-At: Subject: [dnssd] Possible missed messages on this list X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Feb 2018 00:24:09 -0000 --001a11372c2cefa27a0565353e30 Content-Type: text/plain; charset="UTF-8" Possible missed messages on this list Dear list participants - An upgrade to the IETF's custom mail processing software today resulted in some delivery failures for *some* messages to *some* recipients on this list, over the past 3 hours. We invite you to check the mail archives for this list, at: https://mailarchive.ietf.org/arch/search/?email_list=dnssd to ensure that you have received all the relevant messages for this list today. We apologize for the inconvenience. Glen -- Glen Barney IT Director AMS (IETF Secretariat) --001a11372c2cefa27a0565353e30 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Possible missed messages on this list

Dear list participants -
An upgrade to the IETF's custom mail processing software today resulted i= n some delivery failures for *some* messages to *some* recipients on this list, over the past 3 hours.

We invite you to check the mail archiv= es for this list, at:

https://mailarchive.ietf.org/arch/search/?email_= list=3Ddnssd

to ensure that you have received all the relevant m= essages for this list today.

We apologize for the inconvenience.
=
Glen
--
Glen Barney
IT Director
AMS (IETF Secretariat)

--001a11372c2cefa27a0565353e30-- From nobody Thu Feb 15 14:35:00 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 198F812D947; Thu, 15 Feb 2018 14:34:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.529 X-Spam-Level: X-Spam-Status: No, score=-14.529 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aFhGgi9S5Uym; Thu, 15 Feb 2018 14:34:50 -0800 (PST) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20DEA12D837; Thu, 15 Feb 2018 14:34:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15936; q=dns/txt; s=iport; t=1518734090; x=1519943690; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=rpNomXkibcde4/zpprxgOXJqv8U1kFY5ctkdsAjoFAA=; b=M51IRbDgAn0R420mYYDk98cWmKA6ZGCTmobqj3stfMD9WYJUDDjOedZI 6Tx0wiWQCa9SJ/h54ei0qvvM8mOGjRfBUaE/QSIpW+jRImHsCDWvk4OCo tvLVTiDRtlUjzroCHzgrLIzJ6I4R/i01hNse/h04MqZj0nhNfYr82WY6t 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DPAADNCoZa/51dJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYJaeGZwKAqDW4oljgKCAnwbkGmFXIIYCoU7AhqCKFQYAQIBAQE?= =?us-ascii?q?BAQECayiFIwEBAQQjVhACAQgOAwMBAigDAgICMBQJCAIEDgWJUWSvP4InJohPg?= =?us-ascii?q?hMBAQEBAQEBAQEBAQEBAQEBAQEBAQEdhQOCJ4FXgWgpgk82hQw2FoJhMYI0BaQ?= =?us-ascii?q?yCQKWA5RGl28CERkBgTsBHzmBUXAVZwGCG4R3eIx9AYEYAQEB?= X-IronPort-AV: E=Sophos; i="5.46,518,1511827200"; d="scan'208,217"; a="70920066" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Feb 2018 22:34:49 +0000 Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id w1FMYmOK011153 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 15 Feb 2018 22:34:48 GMT Received: from xch-aln-019.cisco.com (173.36.7.29) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 15 Feb 2018 16:34:48 -0600 Received: from xch-aln-019.cisco.com ([173.36.7.29]) by XCH-ALN-019.cisco.com ([173.36.7.29]) with mapi id 15.00.1320.000; Thu, 15 Feb 2018 16:34:48 -0600 From: "Jan Komissar (jkomissa)" To: Ted Lemon CC: Paul Hoffman , dnsop , "dnssd@ietf.org" , "doh@ietf.org" Thread-Topic: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal Thread-Index: AQHTm5D+P8Hdt54fVUSceurV+Y+5IKOSDxkAgBKMVQCAAFapAP//uH4AgABVzICAATOegA== Date: Thu, 15 Feb 2018 22:34:48 +0000 Message-ID: <3F61D530-DD24-40A3-B6C8-C6EC7936784E@cisco.com> References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> <34561144-6844-4E00-90E9-41095A9E14E6@fugue.com> In-Reply-To: <34561144-6844-4E00-90E9-41095A9E14E6@fugue.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.25.0.170815 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [161.44.67.103] Content-Type: multipart/alternative; boundary="_000_3F61D530DD2440A3B6C8C6EC7936784Eciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Feb 2018 22:34:53 -0000 --_000_3F61D530DD2440A3B6C8C6EC7936784Eciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgVGVkLA0KDQpBZnRlciBwb25kZXJpbmcgeW91ciByZXNwb25zZSwgbXkgY29tbWVudHMgYXJl IGlubGluZToNCg0KRnJvbTogVGVkIExlbW9uIDxtZWxsb25AZnVndWUuY29tPg0KRGF0ZTogV2Vk bmVzZGF5LCBGZWJydWFyeSAxNCwgMjAxOCBhdCA2OjEzIFBNDQpUbzogIkphbiBLb21pc3NhciAo amtvbWlzc2EpIiA8amtvbWlzc2FAY2lzY28uY29tPg0KQ2M6IFBhdWwgSG9mZm1hbiA8cGF1bC5o b2ZmbWFuQHZwbmMub3JnPiwgZG5zb3AgPGRuc29wQGlldGYub3JnPiwgImRuc3NkQGlldGYub3Jn IiA8ZG5zc2RAaWV0Zi5vcmc+LCAiZG9oQGlldGYub3JnIiA8ZG9oQGlldGYub3JnPg0KU3ViamVj dDogUmU6IFtkbnNzZF0gW0ROU09QXSBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCAtIGRyYWZ0LWll dGYtZG5zb3Atc2Vzc2lvbi1zaWduYWwNCg0KT24gRmViIDE0LCAyMDE4LCBhdCA2OjA2IFBNLCBK YW4gS29taXNzYXIgKGprb21pc3NhKSA8amtvbWlzc2FAY2lzY28uY29tPG1haWx0bzpqa29taXNz YUBjaXNjby5jb20+PiB3cm90ZToNCkN1cnJlbnRseSwgdGhlcmUgYXJlIG9ubHkgcGxhbnMgZm9y IERQTiwgYW5kIHRoYXQgd291bGQgZm9yY2UgZXZlcnkgY29ubmVjdGlvbiB0byBiZSBUTFMuIEhv d2V2ZXIsIGlmIGEgZnV0dXJlIHByb3RvY29sIOKAnFotb3Zlci1EU0/igJ0gZG9lcyBub3QgcmVx dWlyZSBUTFMsIGl0IGlzIHBvc3NpYmxlIHRoYXQgYSBjbGllbnQgd291bGQgY3JlYXRlIGEgVENQ IGNvbm5lY3Rpb24gZm9yIFogYW5kIGxhdGVyIHdvdWxkIHdhbnQgdG8gc2VuZCBEUE4gb3BlcmF0 aW9uIHRvIHRoZSBzYW1lIHNlcnZlci4gTm90ZSB0aGF0IHRoZSBEU08gY2xpZW50IG1heSByZXBy ZXNlbnQgYSBzaW5nbGUgY29tcHV0ZXIsIHdoaWxlIHRoZSBaIGFuZCBEUE4gcmVxdWVzdHMgcmVw cmVzZW50IGFwcGxpY2F0aW9ucyBvbiB0aGF0IGNvbXB1dGVyIHRoYXQgaW1wbGljaXRseSBkZXBl bmQgb24gdGhvc2UgdHdvIHByb3RvY29scy4gSSBndWVzcyBhIG5ldyBjb25uZWN0aW9uIGNvdWxk IGJlIGNyZWF0ZWQsIGJ1dCBpdCB3b3VsZCBiZSBiZXR0ZXIgaWYgbm90IG5lY2Vzc2FyeS4NCg0K SG0sIGlzIHRoYXQgcmVhbGx5IHRydWU/ICAgV2hhdCBpcyB0aGUgc2NlbmFyaW8gdGhhdCB5b3Ug ZW52aXNpb24gaGVyZT8gIExpa2UsIHdoZW4gd291bGQgdGhpcyBhY3R1YWxseSBoYXBwZW4/ICAg V2hhdCdzIHRoZSBjbGllbnQgdGhhdCdzIG1ha2luZyB0aGUgY29ubmVjdGlvbj8gICBIb3cgaXMg aXQgdGhhdCBpdCBpcyB0aGUgc2FtZSBjbGllbnQgdGhhdCdzIGRvaW5nIERQTj8gICBJZiBpdCBp cyBjb25maWd1cmVkIHRvIHN1cHBvcnQgVExTLCB3aHkgaXNuJ3QgaXQgZGVmYXVsdGluZyB0byB0 aGF0Pw0KDQpKYW46DQpJIHdhcyBpbWFnaW5pbmcgYSBzaW5nbGUgb3BlcmF0aW5nIHN5c3RlbSBz ZXJ2aWNlIHBlcmZvcm1pbmcgYWxsIERTTyBiYXNlZCBvcGVyYXRpb25zIG9uIGJlaGFsZiBvZiB2 YXJpb3VzIGFwcGxpY2F0aW9ucywgYnV0IGl0IHdvdWxkIHByb2JhYmx5IG1vcmUgbGlrZWx5IGJl IG9uZSBzZXJ2aWNlIGZvciBhbGwgRFBOIHVzZXJzIGFuZCBhbm90aGVyIGZvciBwcm90b2NvbCBa IHVzZXJzLCBhbmQgdGhlIGV4aXN0aW5nIHN0dWIgcmVzb2x2ZXIgZm9yIHRyYWRpdGlvbmFsIERO UyBxdWVyaWVzLiBBbmQgaW4gdGhhdCBjYXNlLCB0aGVyZSB3b3VsZCBiZSBubyByZWFzb24gdG8g Zm9yY2UgYWxsIERTTyBiYXNlZCBvcGVyYXRpb25zIGludG8gVExTLiBJIGNhbiBsaXZlIHdpdGgg dGhhdC4NCg0KIFRoZSBpbnRlcm9wIGlzc3VlIGlzIHJlbGF0ZWQgdG8gc2VjdGlvbiA0LjEgdGhh dCBzYXlzIHRoYXQgYW55IHNlc3Npb24gYmFzZWQgcHJvdG9jb2wgaXMgc3VpdGFibGUgZm9yIERT Ty4gSWYgeW91IG1ha2UgYSBzZXJ2ZXIgdGhhdCBvbmx5IHN1cHBvcnRzIERTTyBvdmVyIFRDUCBh bmQgSSBtYWtlIGEgY2xpZW50IHRoYXQgb25seSBzdXBwb3J0cyBEU08gb3ZlciBRVUlDLCB0aGV5 IGFyZSBib3RoIGNvbXBsaWFudCB3aXRoIHRoZSBkcmFmdCwgYnV0IHRoZXkgY2Fubm90IGNvbW11 bmljYXRlIHdpdGggZWFjaCBvdGhlci4gVG8gYXZvaWQgdGhpcywgSSBzdWdnZXN0IHRoYXQgdGhp cyBkcmFmdCBvbmx5IHN1cHBvcnRzIFRMUyAoYW5kIHBvc3NpYmx5IFRDUCksIGFuZCBzdXBwb3J0 aW5nIERTTyBvbiBhbnkgb3RoZXIgdW5kZXJseWluZyBwcm90b2NvbCB3b3VsZCByZXF1aXJlIGEg bmV3IGRvY3VtZW50Lg0KDQpJIHRoaW5rIEkndmUgaGVhcmQgb3RoZXIgc3VnZ2VzdGlvbnMgdGhh dCB3ZSBzaG91bGQgZW51bWVyYXRlIHdoaWNoIHByb3RvY29scyBhcmUgc3VwcG9ydGVkIGV4cGxp Y2l0bHksIGJ1dCBJIGRvbid0IHRoaW5rIHRoZXJlJ3MgYSByZXF1aXJlbWVudCB0byBzdXBwb3J0 IERTTyBvdmVyIGFueXRoaW5nLiAgIFdlJ3JlIGp1c3QgZGVzY3JpYmluZyBhIG5ldyBETlMgbWVz c2FnZSB0eXBlIHRoYXQgY2FuIGJlIHVzZWQgd2l0aCBhbnkgY29ubmVjdGlvbi1vcmllbnRlZCBw cm90b2NvbC4NCg0KSmFuOg0KVXBvbiBmdXJ0aGVyIHJldmlldywgSSBhZ3JlZS4NCg0KWW91IGRp ZG4ndCBhbnN3ZXIgbXkgdGhpcmQgcXVlc3Rpb246DQoNCkFsc28sIGRvIHlvdSB0aGluayB0aGF0 IEROUy1vdmVyLVRDUCBzaG91bGQgYmUgZm9ybWFsbHkgZGVwcmVjYXRlZD8gICBJZiBzbywgcGVy aGFwcyB0aGF0J3MgdGhlIHJpZ2h0IHdheSB0byBhZGRyZXNzIHRoaXMuICAgSWYgbm90LCBjYW4g eW91IHNheSB3aHkgRFNPIGlzIHNwZWNpYWwgYW5kIHJlcXVpcmVzIFRMUywgd2hlbiBETlMtb3Zl ci1UQ1AgZG9lcyBub3Q/DQoNCklzIGlzIHRoYXQgeW91IHdhbnQgdG8gbWFrZSBEU08tb3Zlci1U TFMgTVRJIGFuZCBEU08tb3Zlci1UQ1Agb3B0aW9uYWw/DQoNCkphbjoNCkl0IHdvdWxkIGJlIG5p Y2UgaWYgd2UgY291bGQgbWFrZSBzdGVwcyB0b3dhcmRzIG1vcmUgc2VjdXJlIEROUyBjb21tdW5p Y2F0aW9ucywgYW5kIHNpbmNlIERTTyByZXF1aXJlcyBuZXcgY2xpZW50IGNvZGUsIGl0IGNvdWxk IGJlIGEgd2F5IG9mIG1vdmluZyBpbiB0aGF0IGRpcmVjdGlvbi4gSeKAmW0gbm90IHJlYWR5IHRv IGRlcHJlY2F0ZSBETlMtb3Zlci1UQ1AsIHRoZXJlIGFyZSBwcm9iYWJseSB0b28gbWFueSBleGlz dGluZyBjbGllbnRzIGFuZCBzZXJ2ZXJzIGRlcGxveWVkIHRvIHN0YXJ0IHRoYXQgcHJvY2Vzcy4g T24gdGhlIG90aGVyIGhhbmQsIGlmIHdlIHdhbnQgdG8gaW1wcm92ZSBjb21tdW5pY2F0aW9ucyBz ZWN1cml0eSwgaXQgbWlnaHQgYmUgZ29vZCB0byBmaW5kIHdheXMgdGhhdCBzdHJvbmdseSBlbmNv dXJhZ2UgaW1wbGVtZW50ZXJzIGluIG91ciBzcGFjZSB0byBhZG9wdCBzZWN1cmUgcHJvdG9jb2xz LCBhbmQgbWFraW5nIG5ldyBmZWF0dXJlcyBzZWN1cmUgaXMgYSB3YXkgdG8gZG8gdGhhdC4gU28s IGl04oCZcyBub3QgdGhhdCBEU08gaXMgc3BlY2lhbCwgYnV0IEl04oCZcyBhbiBvcHBvcnR1bml0 eSB0byBpbXByb3ZlIEROUyBzZWN1cml0eS4gVGhhdOKAmXMgd2h5IEkgd291bGQgcHJlZmVyIHRo ZSBkcmFmdCB0byByZXF1aXJlIFRMUy4gSWYgdGhlIFdHIGRpc2FncmVlcywgc28gYmUgaXQuDQoN ClJlZ2FyZHMsDQoNCkphbi4NCg0K --_000_3F61D530DD2440A3B6C8C6EC7936784Eciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <198FF37CD24EA7449760E51E0131A8AC@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6QXJpYWw7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAy IDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglw YW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBl cmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndp bmRvd3RleHQ7fQ0Kc3Bhbi5tc29JbnMNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ bXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTsNCgljb2xvcjp0 ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZv bnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGlu Ow0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJ e3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9y PSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIFRlZCw8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+QWZ0ZXIgcG9uZGVyaW5nIHlvdXIgcmVzcG9uc2UsIG15IGNvbW1l bnRzIGFyZSBpbmxpbmU6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8 L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5UZWQg TGVtb24gJmx0O21lbGxvbkBmdWd1ZS5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2Rh eSwgRmVicnVhcnkgMTQsIDIwMTggYXQgNjoxMyBQTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7SmFu IEtvbWlzc2FyIChqa29taXNzYSkmcXVvdDsgJmx0O2prb21pc3NhQGNpc2NvLmNvbSZndDs8YnI+ DQo8Yj5DYzogPC9iPlBhdWwgSG9mZm1hbiAmbHQ7cGF1bC5ob2ZmbWFuQHZwbmMub3JnJmd0Oywg ZG5zb3AgJmx0O2Ruc29wQGlldGYub3JnJmd0OywgJnF1b3Q7ZG5zc2RAaWV0Zi5vcmcmcXVvdDsg Jmx0O2Ruc3NkQGlldGYub3JnJmd0OywgJnF1b3Q7ZG9oQGlldGYub3JnJnF1b3Q7ICZsdDtkb2hA aWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbZG5zc2RdIFtETlNPUF0gV29y a2luZyBHcm91cCBMYXN0IENhbGwgLSBkcmFmdC1pZXRmLWRuc29wLXNlc3Npb24tc2lnbmFsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+T24gRmViIDE0LCAy MDE4LCBhdCA2OjA2IFBNLCBKYW4gS29taXNzYXIgKGprb21pc3NhKSAmbHQ7PGEgaHJlZj0ibWFp bHRvOmprb21pc3NhQGNpc2NvLmNvbSI+amtvbWlzc2FAY2lzY28uY29tPC9hPiZndDsgd3JvdGU6 DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkN1cnJlbnRseSwgdGhlcmUgYXJlIG9ubHkg cGxhbnMgZm9yIERQTiwgYW5kIHRoYXQgd291bGQgZm9yY2UgZXZlcnkgY29ubmVjdGlvbiB0byBi ZSBUTFMuIEhvd2V2ZXIsIGlmIGEgZnV0dXJlIHByb3RvY29sIOKAnFotb3Zlci1EU0/igJ0gZG9l cyBub3QgcmVxdWlyZSBUTFMsIGl0IGlzIHBvc3NpYmxlIHRoYXQgYSBjbGllbnQgd291bGQgY3Jl YXRlIGEgVENQIGNvbm5lY3Rpb24NCiBmb3IgWiBhbmQgbGF0ZXIgd291bGQgd2FudCB0byBzZW5k IERQTiBvcGVyYXRpb24gdG8gdGhlIHNhbWUgc2VydmVyLiBOb3RlIHRoYXQgdGhlIERTTyBjbGll bnQgbWF5IHJlcHJlc2VudCBhIHNpbmdsZSBjb21wdXRlciwgd2hpbGUgdGhlIFogYW5kIERQTiBy ZXF1ZXN0cyByZXByZXNlbnQgYXBwbGljYXRpb25zIG9uIHRoYXQgY29tcHV0ZXIgdGhhdCBpbXBs aWNpdGx5IGRlcGVuZCBvbiB0aG9zZSB0d28gcHJvdG9jb2xzLiBJIGd1ZXNzIGEgbmV3DQogY29u bmVjdGlvbiBjb3VsZCBiZSBjcmVhdGVkLCBidXQgaXQgd291bGQgYmUgYmV0dGVyIGlmIG5vdCBu ZWNlc3NhcnkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPkhtLCBpcyB0aGF0IHJlYWxseSB0cnVlPyAmbmJzcDsgV2hhdCBpcyB0 aGUgc2NlbmFyaW8gdGhhdCB5b3UgZW52aXNpb24gaGVyZT8gJm5ic3A7TGlrZSwgd2hlbiB3b3Vs ZCB0aGlzIGFjdHVhbGx5IGhhcHBlbj8gJm5ic3A7IFdoYXQncyB0aGUgY2xpZW50IHRoYXQncyBt YWtpbmcgdGhlIGNvbm5lY3Rpb24/ICZuYnNwOyBIb3cgaXMgaXQgdGhhdCBpdCBpcyB0aGUgc2Ft ZSBjbGllbnQgdGhhdCdzIGRvaW5nDQogRFBOPyAmbmJzcDsgSWYgaXQgaXMgY29uZmlndXJlZCB0 byBzdXBwb3J0IFRMUywgd2h5IGlzbid0IGl0IGRlZmF1bHRpbmcgdG8gdGhhdD88bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SmFuOjxicj4NCkkgd2FzIGltYWdpbmluZyBh IHNpbmdsZSBvcGVyYXRpbmcgc3lzdGVtIHNlcnZpY2UgcGVyZm9ybWluZyBhbGwgRFNPIGJhc2Vk IG9wZXJhdGlvbnMgb24gYmVoYWxmIG9mIHZhcmlvdXMgYXBwbGljYXRpb25zLCBidXQgaXQgd291 bGQgcHJvYmFibHkgbW9yZSBsaWtlbHkgYmUgb25lIHNlcnZpY2UgZm9yIGFsbCBEUE4gdXNlcnMg YW5kIGFub3RoZXIgZm9yIHByb3RvY29sIFogdXNlcnMsIGFuZCB0aGUgZXhpc3Rpbmcgc3R1YiBy ZXNvbHZlciBmb3INCiB0cmFkaXRpb25hbCBETlMgcXVlcmllcy4gQW5kIGluIHRoYXQgY2FzZSwg dGhlcmUgd291bGQgYmUgbm8gcmVhc29uIHRvIGZvcmNlIGFsbCBEU08gYmFzZWQgb3BlcmF0aW9u cyBpbnRvIFRMUy4gSSBjYW4gbGl2ZSB3aXRoIHRoYXQuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDtUaGUgaW50ZXJvcCBpc3N1 ZSBpcyByZWxhdGVkIHRvIHNlY3Rpb24gNC4xIHRoYXQgc2F5cyB0aGF0IGFueSBzZXNzaW9uIGJh c2VkIHByb3RvY29sIGlzIHN1aXRhYmxlIGZvciBEU08uIElmIHlvdSBtYWtlIGEgc2VydmVyIHRo YXQgb25seSBzdXBwb3J0cyBEU08gb3ZlciBUQ1AgYW5kIEkgbWFrZSBhIGNsaWVudCB0aGF0IG9u bHkgc3VwcG9ydHMgRFNPIG92ZXIgUVVJQywNCiB0aGV5IGFyZSBib3RoIGNvbXBsaWFudCB3aXRo IHRoZSBkcmFmdCwgYnV0IHRoZXkgY2Fubm90IGNvbW11bmljYXRlIHdpdGggZWFjaCBvdGhlci4g VG8gYXZvaWQgdGhpcywgSSBzdWdnZXN0IHRoYXQgdGhpcyBkcmFmdCBvbmx5IHN1cHBvcnRzIFRM UyAoYW5kIHBvc3NpYmx5IFRDUCksIGFuZCBzdXBwb3J0aW5nIERTTyBvbiBhbnkgb3RoZXIgdW5k ZXJseWluZyBwcm90b2NvbCB3b3VsZCByZXF1aXJlIGEgbmV3IGRvY3VtZW50LjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSB0aGluayBJJ3Zl IGhlYXJkIG90aGVyIHN1Z2dlc3Rpb25zIHRoYXQgd2Ugc2hvdWxkIGVudW1lcmF0ZSB3aGljaCBw cm90b2NvbHMgYXJlIHN1cHBvcnRlZCBleHBsaWNpdGx5LCBidXQgSSBkb24ndCB0aGluayB0aGVy ZSdzIGEgcmVxdWlyZW1lbnQgdG8gc3VwcG9ydCBEU08gb3ZlciBhbnl0aGluZy4gJm5ic3A7IFdl J3JlIGp1c3QgZGVzY3JpYmluZyBhIG5ldyBETlMgbWVzc2FnZQ0KIHR5cGUgdGhhdCBjYW4gYmUg dXNlZCB3aXRoIGFueSBjb25uZWN0aW9uLW9yaWVudGVkIHByb3RvY29sLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5KYW46PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5VcG9uIGZ1cnRoZXIgcmV2aWV3LCBJIGFncmVlLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+WW91IGRpZG4n dCBhbnN3ZXIgbXkgdGhpcmQgcXVlc3Rpb246PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkFsc28sIGRvIHlvdSB0aGluayB0aGF0 IEROUy1vdmVyLVRDUCBzaG91bGQgYmUgZm9ybWFsbHkgZGVwcmVjYXRlZD8gJm5ic3A7IElmIHNv LCBwZXJoYXBzIHRoYXQncyB0aGUgcmlnaHQgd2F5IHRvIGFkZHJlc3MgdGhpcy4gJm5ic3A7IElm IG5vdCwgY2FuIHlvdSBzYXkgd2h5IERTTyBpcyBzcGVjaWFsIGFuZCByZXF1aXJlcyBUTFMsIHdo ZW4gRE5TLW92ZXItVENQIGRvZXMgbm90PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5JcyBpcyB0aGF0IHlvdSB3YW50IHRvIG1ha2UgRFNPLW92ZXIt VExTIE1USSBhbmQgRFNPLW92ZXItVENQIG9wdGlvbmFsPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5KYW46PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JdCB3b3VsZCBiZSBuaWNlIGlmIHdlIGNvdWxkIG1ha2Ugc3RlcHMgdG93YXJkcyBtb3JlIHNl Y3VyZSBETlMgY29tbXVuaWNhdGlvbnMsIGFuZCBzaW5jZSBEU08gcmVxdWlyZXMgbmV3IGNsaWVu dCBjb2RlLCBpdCBjb3VsZCBiZSBhIHdheSBvZiBtb3ZpbmcgaW4gdGhhdCBkaXJlY3Rpb24uIEni gJltIG5vdCByZWFkeSB0byBkZXByZWNhdGUgRE5TLW92ZXItVENQLCB0aGVyZSBhcmUgcHJvYmFi bHkgdG9vIG1hbnkNCiBleGlzdGluZyBjbGllbnRzIGFuZCBzZXJ2ZXJzIGRlcGxveWVkIHRvIHN0 YXJ0IHRoYXQgcHJvY2Vzcy4gT24gdGhlIG90aGVyIGhhbmQsIGlmIHdlIHdhbnQgdG8gaW1wcm92 ZSBjb21tdW5pY2F0aW9ucyBzZWN1cml0eSwgaXQgbWlnaHQgYmUgZ29vZCB0byBmaW5kIHdheXMg dGhhdCBzdHJvbmdseSBlbmNvdXJhZ2UgaW1wbGVtZW50ZXJzIGluIG91ciBzcGFjZSB0byBhZG9w dCBzZWN1cmUgcHJvdG9jb2xzLCBhbmQgbWFraW5nIG5ldyBmZWF0dXJlcw0KIHNlY3VyZSBpcyBh IHdheSB0byBkbyB0aGF0LiBTbywgaXTigJlzIG5vdCB0aGF0IERTTyBpcyBzcGVjaWFsLCBidXQg SXTigJlzIGFuIG9wcG9ydHVuaXR5IHRvIGltcHJvdmUgRE5TIHNlY3VyaXR5LiBUaGF04oCZcyB3 aHkgSSB3b3VsZCBwcmVmZXIgdGhlIGRyYWZ0IHRvIHJlcXVpcmUgVExTLiBJZiB0aGUgV0cgZGlz YWdyZWVzLCBzbyBiZSBpdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SmFuLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_3F61D530DD2440A3B6C8C6EC7936784Eciscocom_-- From nobody Thu Feb 15 15:36:44 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DE321243F3 for ; Thu, 15 Feb 2018 15:36:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZJ8b26Ee37nq for ; Thu, 15 Feb 2018 15:36:36 -0800 (PST) Received: from mail-qk0-x229.google.com (mail-qk0-x229.google.com [IPv6:2607:f8b0:400d:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19157126C0F for ; Thu, 15 Feb 2018 15:36:35 -0800 (PST) Received: by mail-qk0-x229.google.com with SMTP id o7so1831137qkc.1 for ; Thu, 15 Feb 2018 15:36:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=0yaGdAfOHbPLrs65bAX2XuzMgQaBTAFEMFd7jQ0E74M=; b=1KxMT45LKsxKpJ0pwPbPLrvbeA9rJcvJ87kH/YEsaiq81hUNUhDxlHrZerLKYNYYeO EWE9WylBy/ASXB1DJRke3AjSb/CjNrWPBDoFGsBnAW0WsorOmsOWsJLj0FpbtK7S3gTk iSWVG7foIqSlBSmt5CsTJOuCG+hyM/7A1H40IfGT5qn+Zu7qbX2LL5FL3Zovm/EvjbMh Lod7ZDYyfp9dpN4jzSnCtljE59/0fli/HYaGIaOgD4qQ74uPc+zDlLsC8s6Yw29Ne6uc GZOIpHJhYokD/ZwUlc3eX+Jm6LmO3KweJGiVxtEE8op8CYl3cRJTbeOVPv7CjVnnJ9u6 iagA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=0yaGdAfOHbPLrs65bAX2XuzMgQaBTAFEMFd7jQ0E74M=; b=T2iXe0MVwW7f5XpQoCVDbPFFaND+i7xZSmrTNONppwTC14HAMOf3Zb8OUE0cMLOrla OksGbX6W4FVbiB9MDMZX7n+RBgm+4+6i8h72nhbRMPL9UxVR4YT/X6HdHkK5NRT0BqR2 8cWZbF5b6XkuLXaVMW7kimf5hBSMSs46OhFcWDGlqJwnYRNcyo+5JjPvTBy4BwWgUkIn 20ofc5ovzXXXJuI3peYN46UaqZtjYsB7brAnLuYzf2Hh7F1DSWBJMKvCIvMd5S/70mq5 BTC9s2waHuUkGxVVlpY/j7B7HPzVV7wUIzankQoKRRKBaWgrkbfLm/KeBcLD9yGTlp5/ Q7mw== X-Gm-Message-State: APf1xPBN7lptZkJn5+SBRfTeIn0uZ76mjGyWEcddwkygCGiVPCcI6kd4 /1vgIUdX/tBXkcsOefe+Mqivi/jshDA= X-Google-Smtp-Source: AH8x227z98pmMrQgs8EIv0uRAat7dnUUkpoKgll4hrATmNXMKeMdCosf+VEwILp4m7UfY2u/aFIadQ== X-Received: by 10.55.31.20 with SMTP id f20mr7079721qkf.290.1518737794189; Thu, 15 Feb 2018 15:36:34 -0800 (PST) Received: from cavall.lan (c-24-60-163-103.hsd1.ma.comcast.net. [24.60.163.103]) by smtp.gmail.com with ESMTPSA id l80sm1469620qki.92.2018.02.15.15.36.32 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 15 Feb 2018 15:36:33 -0800 (PST) From: Ted Lemon Message-Id: <5476EC6A-E6C1-4EFB-9E82-E829C1939E75@fugue.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_561A9D11-9ED4-4695-8315-4EE7D0B0284A" Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Thu, 15 Feb 2018 18:36:31 -0500 In-Reply-To: <3F61D530-DD24-40A3-B6C8-C6EC7936784E@cisco.com> Cc: Paul Hoffman , dnsop , "dnssd@ietf.org" , "doh@ietf.org" To: "Jan Komissar (jkomissa)" References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> <34561144-6844-4E00-90E9-41095A9E14E6@fugue.com> <3F61D530-DD24-40A3-B6C8-C6EC7936784E@cisco.com> X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Feb 2018 23:36:37 -0000 --Apple-Mail=_561A9D11-9ED4-4695-8315-4EE7D0B0284A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Feb 15, 2018, at 5:34 PM, Jan Komissar (jkomissa) = wrote: > After pondering your response, my comments are inline: Thanks! >> Also, do you think that DNS-over-TCP should be formally deprecated? = If so, perhaps that's the right way to address this. If not, can you = say why DSO is special and requires TLS, when DNS-over-TCP does not? >=20 > =20 > Is is that you want to make DSO-over-TLS MTI and DSO-over-TCP = optional? > =20 > Jan: > It would be nice if we could make steps towards more secure DNS = communications, and since DSO requires new client code, it could be a = way of moving in that direction. I=E2=80=99m not ready to deprecate = DNS-over-TCP, there are probably too many existing clients and servers = deployed to start that process. On the other hand, if we want to improve = communications security, it might be good to find ways that strongly = encourage implementers in our space to adopt secure protocols, and = making new features secure is a way to do that. So, it=E2=80=99s not = that DSO is special, but It=E2=80=99s an opportunity to improve DNS = security. That=E2=80=99s why I would prefer the draft to require TLS. If = the WG disagrees, so be it. Understood. One way in which this certainly makes sense is that = although DNSSEC can be used to authenticate DNS data, DSO data can't = really be validated that way. And we don't have TSIG either. So it's = certainly worth considering. --Apple-Mail=_561A9D11-9ED4-4695-8315-4EE7D0B0284A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Feb 15, 2018, at 5:34 PM, Jan Komissar (jkomissa) <jkomissa@cisco.com> = wrote:
After pondering your = response, my comments are inline:

Thanks!

Also, do you think that DNS-over-TCP should be formally = deprecated?   If so, perhaps that's the right way to address this. =   If not, can you say why DSO is special and requires TLS, when = DNS-over-TCP does not?
 
Is is that you want to make = DSO-over-TLS MTI and DSO-over-TCP optional?
 
Jan:
It would be nice if we could make steps towards more secure = DNS communications, and since DSO requires new client code, it could be = a way of moving in that direction. I=E2=80=99m not ready to deprecate = DNS-over-TCP, there are probably too many existing clients and servers = deployed to start that process. On the other hand, if we want to improve = communications security, it might be good to find ways that strongly = encourage implementers in our space to adopt secure protocols, and = making new features secure is a way to do that. So, it=E2=80=99s not = that DSO is special, but It=E2=80=99s an opportunity to improve DNS = security. That=E2=80=99s why I would prefer the draft to require TLS. If = the WG disagrees, so be it.

Understood.   One way in which this certainly = makes sense is that although DNSSEC can be used to authenticate DNS = data, DSO data can't really be validated that way.   And we don't = have TSIG either.   So it's certainly worth = considering.

= --Apple-Mail=_561A9D11-9ED4-4695-8315-4EE7D0B0284A-- From nobody Fri Feb 16 09:54:29 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62622127698 for ; Fri, 16 Feb 2018 09:54:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vk9Lo1T56_J9 for ; Fri, 16 Feb 2018 09:54:14 -0800 (PST) Received: from mail-in22.apple.com (mail-out22.apple.com [17.171.2.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB2E7128959 for ; Fri, 16 Feb 2018 09:54:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1518803651; x=2382717251; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=GXbFDTlwFtwTS7T/YjOHhcIldgq6Z2eERppytGs6w9M=; b=ah9wB9iK9jp9f+rQ3If10hhpDl+i/t/vxMC+jPq76Guv6t+wf4uAaZStJIkttKpc kx9EYCukVJPHcBMs4ugNFoKYxMtAx0e19h+1APcgGH21S5e1XgGXab0OCSK5sBxF 2C7+VyoCuMwnIGaeAaQlQSlDq/w4K55waMeHj0+QyFZ8kGi18EEugEDM/QcPrRh4 vdd+OpUkfRbGl6IYA/LvzsjpfCeEksvNCFA3lMwwfVhsEhHJcf3PZGq7/TkAJo8Y vJ4DylAf0OHAsRB8AQ0eRB8EOeeB5nqFgDYZ5tcKW5lZ9Rhsjhl9Zb8KOBCstmUR a7jcjk5oLMWsydLy/sea4A==; Received: from relay6.apple.com (relay6.apple.com [17.128.113.90]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail-in22.apple.com (Apple Secure Mail Relay) with SMTP id B8.46.11907.3CA178A5; Fri, 16 Feb 2018 09:54:11 -0800 (PST) X-AuditID: 11ab0216-325f09e000002e83-1a-5a871ac3f053 Received: from nwk-mmpp-sz10.apple.com (nwk-mmpp-sz10.apple.com [17.128.115.122]) by relay6.apple.com (Apple SCV relay) with SMTP id 38.DE.23861.2CA178A5; Fri, 16 Feb 2018 09:54:10 -0800 (PST) MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_3nRXvu09hVhRghBStcELxw)" Received: from [17.234.68.209] (unknown [17.234.68.209]) by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.2.20180130 64bit (built Jan 30 2018)) with ESMTPSA id <0P4900MJF8EA4020@nwk-mmpp-sz10.apple.com>; Fri, 16 Feb 2018 09:54:10 -0800 (PST) Sender: dschinazi@apple.com From: David Schinazi Message-id: <9AC49151-EB79-4AB8-B04E-D5213007784F@apple.com> Date: Fri, 16 Feb 2018 09:54:09 -0800 In-reply-to: Cc: dnsop , dnssd@ietf.org, doh@ietf.org To: tjw ietf References: X-Mailer: Apple Mail (2.3445.5.20) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrHLMWRmVeSWpSXmKPExsUi2FAYpXtYqj3KYMpjSYu7by6zWLxfOovR 4trdi2wW09o2MzuweOycdZfdY8mSn0wBTFFcNimpOZllqUX6dglcGYtX/GEtWCJXcfThVvYG xuNSXYycHBICJhKPn5xl7mLk4hASWMMkcf/9NFaYxNVvLxkhEocYJTr+b2QBSfAKCEr8mHwP zGYWCJO49ekOO0TRRCaJgxcPM4EkhAWkJbou3AWaxMHBJqAlcWCNEUSvjcT7oytYIEr8JDqb 2sBsFgFViRWNH9lBbE6BYIn+/8cZIeZbSLQsmg8WFxFQlLj/9i9YvZBAgERzx1qoQ5Ukpn+/ zQZyg4TACjaJb/0L2CcwCs1CcussJLdC2FoS3x+1AsU5gGx5iYPnZSHCmhLP7n2CKtGWePLu AusCRrZVjMK5iZk5upl5RkZ6iQUFOal6yfm5mxhBEbKaSWwH473XhocYBTgYlXh4Ox62RQmx JpYVV+YeYpTmYFES5732vDFKSCA9sSQ1OzW1ILUovqg0J7X4ECMTB6dUA2P41Zntj17uvnyt es2rhvrbTJ9mrpLxLH+kaKq11+boJ71Q3r5urn87m43KxHKelN1Ye/PtpndLNx4QtPtcpKnQ +Gr/BFufF0kX5LScZA1eiHVK67QuPc9dfDG6+uGdM2GLGQ5L/uOba7wsP/vbvnDdT5xrFF7t ixUpt9pVy6dRIPXeQOCP13IlluKMREMt5qLiRACbCo0DcQIAAA== X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrALMWRmVeSWpSXmKPExsUi2FBcpXtIqj3KoKfXyuLum8ssFu+XzmK0 uHb3IpvFtLbNzA4sHjtn3WX3WLLkJ1MAUxSXTUpqTmZZapG+XQJXxuIVf1gLlshVHH24lb2B 8bhUFyMnh4SAicTVby8Zuxi5OIQEDjFKdPzfyAKS4BUQlPgx+R6YzSwQJnHr0x12iKKJTBIH Lx5mAkkIC0hLdF24y9rFyMHBJqAlcWCNEUSvjcT7oytYIEr8JDqb2sBsFgFViRWNH9lBbE6B YIn+/8cZIeZbSLQsmg8WFxFQlLj/9i9YvZBAgERzx1pWiEOVJKZ/v802gZF/FpLzZiE5D8LW kvj+qBUozgFky0scPC8LEdaUeHbvE1SJtsSTdxdYFzCyrWIUKErNSaw000ssKMhJ1UvOz93E CA7nwqgdjA3LrQ4xCnAwKvHwPnjcFiXEmlhWXJkLDCMOZiUR3ucgId6UxMqq1KL8+KLSnNTi Q4zSHCxK4rxPg1uihATSE0tSs1NTC1KLYLJMHJxSDYzJu8OTwrXfmX8q2Jx9raXdMuHLq8IJ ptsmHnf5Y2n99fGU9LTFN1i43r5dueup76qbv562P5jcP2M19wavG2c1JkcVPD7+75SW13wn 44vLZZ/UeNR6VDA0hvfGRbGt27lRh3kbr//CcC8peVHTxsDpwae9RT4vP7uQbUdk1DbN6YZh wW/NZ4UpsRRnJBpqMRcVJwIAhsVDX2MCAAA= Archived-At: Subject: Re: [dnssd] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 17:54:16 -0000 --Boundary_(ID_3nRXvu09hVhRghBStcELxw) Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT Hi, (chair hat off) I've reviewed draft-ietf-dnsop-session-signal-04 and -05 and think -05 is ready to move forward. Draft -05 addresses the points I raised on -04 and in my opinion makes the document clearer. Thanks, David Schinazi > On Feb 1, 2018, at 11:14, tjw ietf wrote: > > > This starts a Working Group Last Call for draft-ietf-dnsop-session-signal > > Current versions of the draft is available here: > https://datatracker.ietf.org/doc/draft-ietf-dnsop-session-signal/ > > Please review the draft and offer relevant comments. Also, if someone feels the document is *not* ready for publication, please speak out with your reasons. > > We are doing a three week Working Group Last Call process, and we're cross posting to a few groups where we hope to receive some strong reviews. > > This WGLC ends at midnight, 22 February 2018. > > thanks > Tim/suzanne > _______________________________________________ > dnssd mailing list > dnssd@ietf.org > https://www.ietf.org/mailman/listinfo/dnssd --Boundary_(ID_3nRXvu09hVhRghBStcELxw) Content-type: text/html; CHARSET=US-ASCII Content-transfer-encoding: quoted-printable Hi,

(chair = hat off)

I've = reviewed draft-ietf-dnsop-session-signal-04 and -05 and think -05 = is ready to move forward.
Draft -05 addresses the = points I raised on -04 and in my opinion makes the document = clearer.

Thanks,
David Schinazi


On Feb 1, 2018, at 11:14, tjw ietf <tjw.ietf@gmail.com> = wrote:


This starts a Working Group Last Call = for draft-ietf-dnsop-session-signal

Current versions of the draft is = available here:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-session-signa= l/

Please = review the draft and offer relevant comments. Also, if someone feels the = document is *not* ready for publication, please speak out with your = reasons.

We = are doing a three week Working Group Last Call process, and we're cross = posting to a few groups where we hope to receive some strong = reviews. 

This WGLC ends at midnight, 22 February 2018.

thanks
Tim/suzanne
_______________________________________________
dnssd = mailing list
dnssd@ietf.org
https://www.ietf.org/mailman/listinfo/dnssd

= --Boundary_(ID_3nRXvu09hVhRghBStcELxw)-- From nobody Fri Feb 16 09:54:42 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 539D9128959 for ; Fri, 16 Feb 2018 09:54:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9uBtzO_N7UYm for ; Fri, 16 Feb 2018 09:54:28 -0800 (PST) Received: from mail-in22.apple.com (mail-out22.apple.com [17.171.2.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 498AF129C6B for ; Fri, 16 Feb 2018 09:54:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1518803666; x=2382717266; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=eSS+3pwE50lDXgDgNhCVk30fb56K3VFca0K/N4XOrJA=; b=yZ//6z0Qa+wZQYcaFZqrINw+U9t/orYG97xq0HAEFO5H0Ny1ki3kQyBJhuKqoZa+ bYhpDTQ14mcceRZiYnlxhBaVC6+b2vdQi5svbk8MWC51G0AYpuo5eru75e2nRDd/ /iGKceLPINB79fs4wZPDlzqRoaYaR035GNGC718UcmG0qaAskneje4ZX4LGslcf2 vJTnMEKRwGVGbOCr6x8d5Bw9xX3eMPl2KnXwrNjqCwl1rBwJyQNG/3ZfuQyy8aKw NSZXBJ2hlLB20WkYsGmQU9bMwYND8yz/uXdXjYiA04Da7xcVVi7H3XzdAc+s0Spt oab9zBl10T8FCKCRinHnFQ==; Received: from relay7.apple.com (relay7.apple.com [17.128.113.101]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail-in22.apple.com (Apple Secure Mail Relay) with SMTP id 8D.46.11907.2DA178A5; Fri, 16 Feb 2018 09:54:26 -0800 (PST) X-AuditID: 11ab0216-325f09e000002e83-34-5a871ad2c598 Received: from nwk-mmpp-sz10.apple.com (nwk-mmpp-sz10.apple.com [17.128.115.122]) by relay7.apple.com (Apple SCV relay) with SMTP id 90.0A.21982.2DA178A5; Fri, 16 Feb 2018 09:54:26 -0800 (PST) MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_aMBkPIxYTIN3DftfyOa+uw)" Received: from [17.234.68.209] (unknown [17.234.68.209]) by nwk-mmpp-sz10.apple.com (Oracle Communications Messaging Server 8.0.2.2.20180130 64bit (built Jan 30 2018)) with ESMTPSA id <0P4900MJF8EA4020@nwk-mmpp-sz10.apple.com> for dnssd@ietf.org; Fri, 16 Feb 2018 09:54:26 -0800 (PST) Sender: dschinazi@apple.com From: David Schinazi Message-id: <281835C6-911C-4A34-9E17-7F23CBB0CA56@apple.com> Date: Fri, 16 Feb 2018 09:54:25 -0800 To: dnssd@ietf.org X-Mailer: Apple Mail (2.3445.5.20) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrGLMWRmVeSWpSXmKPExsUi2FCYqntJqj3K4NZ3FYv3S2cxOjB6LFny kymAMYrLJiU1J7MstUjfLoEr4/S8s8wFnaIV/+f+YW5g3CvUxcjJISFgIrG3s4Gxi5GLQ0hg LZPE4TnXWGASvV+/QiUOMUpc6l/JCpLgFRCU+DH5HlgRs0CYxOLrL6GKljBJvPrSxQySEBaQ lui6cBeogYODTUBL4sAaI4iwpcTtpguMEHNsJCbvesYEYrMIqErMf7WaHcQWERCSWDr3EDvE EUoS07/fZgOZLyHwlFVi9ZFWtgmM/LOQ3DELyR0QtpbE90etQHEOIFte4uB5WYiwpsSze5/Y IWxtiSfvLrAuYGRbxSicm5iZo5uZZ2Skl1hQkJOql5yfu4kRFLCrmcR2MN57bXiIUYCDUYmH t+NhW5QQa2JZcWXuIUZpDhYlcd5rzxujhATSE0tSs1NTC1KL4otKc1KLDzEycXBKNTBmSCfs SNYUOf464aJQTPPkOf9qfu6q33BkywGVq7tuybh4hGVGz5Z+Nkk0+r/C5Z1X7Q12SB07NinR RTLk2PuZZdIFLya9/vNyF0NrYZtvz2ExvYXqD6Laby2YaZFUy9qrcGWC4RmrGGWTRx5OLqpF v5o2ZQSnL/93cLeJt9QVzmf887eULdBQYinOSDTUYi4qTgQAGr4qYzkCAAA= X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprBLMWRmVeSWpSXmKPExsUi2FBcpXtJqj3K4ONuUYv3S2cxOjB6LFny kymAMYrLJiU1J7MstUjfLoEr4/S8s8wFnaIV/+f+YW5g3CvUxcjJISFgItH79StjFyMXh5DA IUaJS/0rWUESvAKCEj8m32MBsZkFwiQWX38JVbSESeLVly5mkISwgLRE14W7QA0cHGwCWhIH 1hhBhC0lbjddYISYYyMxedczJhCbRUBVYv6r1ewgtoiAkMTSuYfYIY5Qkpj+/TbbBEaeWUhW z0KyGsLWkvj+qBUozgFky0scPC8LEdaUeHbvEzuErS3x5N0F1gWMbKsYBYpScxIrzfUSCwpy UvWS83M3MYLDqzB1B2PjcqtDjAIcjEo8vA8et0UJsSaWFVfmAv3PwawkwvscJMSbklhZlVqU H19UmpNafIhRmoNFSZz3RXBLlJBAemJJanZqakFqEUyWiYNTqoHRgUGwQKy87Lz50036mif/ lE8671azYCej8NqMkt86Mzvnqj50WH/B7pn2ipREjyx5Va+5K6X9tG+c+W/k7NpzuvCyXdW1 k785BE+b9y9MX+2SVGKtt9O9yajjc9Se7Sb+H5qZTsreeL02aPVE9hNL3dwUXW+xKh7z3Lx0 qqKXVU6Y7cOIm/FKLMUZiYZazEXFiQBE7CZVKwIAAA== Archived-At: Subject: [dnssd] Please review draft-ietf-dnsop-session-signal-05 X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Feb 2018 17:54:33 -0000 --Boundary_(ID_aMBkPIxYTIN3DftfyOa+uw) Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT Hi dnssd, As you may have seen, draft-ietf-dnsop-session-signal is in working group last call over in dnsop. https://www.ietf.org/mail-archive/web/dnsop/current/msg21835.html https://tools.ietf.org/html/draft-ietf-dnsop-session-signal-05 I know several people here have reviewed this from the dnssd perspective, focusing on how dnssd would use it. If you could take the time to review -05 and reply on the dnsop list with comments that would be helpful to move forward. If you think that the document is ready for publication and don't have specific comments, I think it might still be worth it to say so on dnsop to help gage the interest in this document and the level of review it has received. Thanks, David Schinazi --Boundary_(ID_aMBkPIxYTIN3DftfyOa+uw) Content-type: text/html; CHARSET=US-ASCII Content-transfer-encoding: quoted-printable Hi = dnssd,

As you may = have seen, draft-ietf-dnsop-session-signal is in working group last = call over in dnsop.
https://www.ietf.org/mail-archive/web/dnsop/current/msg21835.ht= ml
https://tools.ietf.org/html/draft-ietf-dnsop-session-signal-05<= /a>

I know = several people here have reviewed this from the dnssd perspective, = focusing on how dnssd would use it.
If you could = take the time to review -05 and reply on the dnsop list with comments = that would be helpful to move forward.
If you think = that the document is ready for publication and don't have specific = comments, I think it might still be worth
it to say = so on dnsop to help gage the interest in this document and the level of = review it has received.

Thanks,
David Schinazi

= --Boundary_(ID_aMBkPIxYTIN3DftfyOa+uw)-- From nobody Wed Feb 21 10:39:34 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89D65124BAC for ; Wed, 21 Feb 2018 10:39:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hxtBaXr6eIJo for ; Wed, 21 Feb 2018 10:39:20 -0800 (PST) Received: from mail-in5.apple.com (mail-out5.apple.com [17.151.62.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9F52126CB6 for ; Wed, 21 Feb 2018 10:39:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1519238360; x=2383151960; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-transfer-encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=wr+Q+pTHR18PhpmaO1gR4lH0LomQ8hAu1UtrhIObbSE=; b=cTvbvukh5sBWnhVYTegNwmVH83f9BAl1ZDUAOki1vVId6/uoQ9nQhlRmZrWM9P6w lUfKjY2kxzBkBNCNnPbHBxMi3Fc5os1ls8U/vlg48owzmxSibUl9YJfA/doIW9A4 T/1kCH0MtcPJXwO5MpufjHTH/caAOT1PpG66CXn6IYLWejVQ3fK/MHodgHKDhe63 adhcTetyblkU9oCw1HeU9+d7z0rOFcqDse3b61ENrqeF6hj8rKZaGuJENqZ6F8MX SXVvKfgM04Sq0ZNrBp7QqfG6cfJIb68X54hUVVdEmpGO5txVmmK4nU3cK+ZUND6R rnIV8iFudECEAXk+PunosA==; Received: from relay6.apple.com (relay6.apple.com [17.128.113.90]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail-in5.apple.com (Apple Secure Mail Relay) with SMTP id A7.61.13704.8DCBD8A5; Wed, 21 Feb 2018 10:39:20 -0800 (PST) X-AuditID: 11973e13-efdff70000003588-c9-5a8dbcd83be7 Received: from nwk-mmpp-sz09.apple.com (nwk-mmpp-sz09.apple.com [17.128.115.80]) by relay6.apple.com (Apple SCV relay) with SMTP id 16.AA.23861.8DCBD8A5; Wed, 21 Feb 2018 10:39:20 -0800 (PST) MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Received: from [17.234.51.43] by nwk-mmpp-sz09.apple.com (Oracle Communications Messaging Server 8.0.2.2.20180130 64bit (built Jan 30 2018)) with ESMTPSA id <0P4I000O9JTHRD60@nwk-mmpp-sz09.apple.com>; Wed, 21 Feb 2018 10:39:20 -0800 (PST) Sender: cheshire@apple.com From: Stuart Cheshire Content-transfer-encoding: quoted-printable Date: Wed, 21 Feb 2018 10:39:15 -0800 References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> To: "Jan Komissar (jkomissa)" , Ted Lemon , "dnssd@ietf.org" , dnsop , "doh@ietf.org" , Paul Hoffman In-reply-to: <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> Message-id: <8225F726-323C-4078-9CB5-C6672025494B@apple.com> X-Mailer: Apple Mail (2.3445.5.20) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrFLMWRmVeSWpSXmKPExsUi2FAYpXtjT2+Uwb2VohZ331xmsXi/dBaj xbW7F9ksGpctZbJ4s+YIk8Wt9V9YHdg8pvzeyOrRdGEZu8eSJT+ZPD7PvsocwBLFZZOSmpNZ llqkb5fAldE+oYet4ApbxfH17A2MS1m7GDk5JARMJI70/WHsYuTiEBJYzSSxt/EJcxcjB1ji 16lyiPhBRokfD1YygjTwCghK/Jh8jwWkhllAXWLKlFyQsJDAF0aJW3dkQGxhASmJVys/M4PY bAJaEi8+X2EDsZkFtCWevLvAClETIXHuyEl2kDEsAqoSd6+xQKyayyTR+PE5O4gjInCNUeLr +g/sIA2cArYSTVMusEPcYCNx8/81NogHlCSmf78NZS9hkzi1qXgCo9AsJKfOQjh1FpIzFjAy r2IUyk3MzNHNzDPVSywoyEnVS87P3cQICvzpdsI7GE+vsjrEKMDBqMTDu6GsN0qINbGsuDL3 EKM0B4uSOK/fzp4oIYH0xJLU7NTUgtSi+KLSnNTiQ4xMHJxSDYxbjqhm9+U6BXe+40u47KjG +G7bn6dneC7Nal1z6me/Sq+vW8mhqHeTnp1uFMssnutzZem9CaFmLVLX61ZsWfdi3jU+o2VN L36d5nv0WnCl0sm7F3oF/92p+djGsXmT/6uprg6Ta2Y+yll68aXz/E3hdfF/RNbM/q5glPlU 6OSMhnfzGwxl9aU7lFiKMxINtZiLihMBlSXiGV0CAAA= X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrHLMWRmVeSWpSXmKPExsUi2FAcoHtjT2+UwbzJQhZ331xmsXi/dBaj xbW7F9ksGpctZbJ4s+YIk8Wt9V9YHdg8pvzeyOrRdGEZu8eSJT+ZPD7PvsocwBLFZZOSmpNZ llqkb5fAldE+oYet4ApbxfH17A2MS1m7GDk4JARMJH6dKu9i5OIQEjjIKPHjwUrGLkZODl4B QYkfk++xgNQwC6hLTJmSCxIWEvjCKHHrjgyILSwgJfFq5WdmEJtNQEvixecrbCA2s4C2xJN3 F1ghaiIkzh05yQ4yhkVAVeLuNRaIVXOZJBo/PmcHcUQErjFKfF3/gR2kgVPAVqJpygV2iBts JG7+vwY2VEJASWL699tsExj5ZyE5bxbCebOQrF7AyLyKUaAoNSex0kwvsaAgJ1UvOT93EyM4 VAujdjA2LLc6xCjAwajEw7uhrDdKiDWxrLgy9xCjBAezkgjviQSgEG9KYmVValF+fFFpTmrx IUZpDhYlcd5GD6CUQHpiSWp2ampBahFMlomDU6qB0XMt284Xkw8s0dH83Kl3lmuHflPJ+jkO X9z4lvRffPlpjmbis+eaM9rrvh9yYKp/FFD6csrp6x/LJlvMqv3tsfOk7NOL5/T+95cpbeRr 2+uwkbFBWHyS+05fvnO1XgdlLh4+5L/c2D96X3eVirBXtgdH47nAyN25xs8TduuGquRMDTvx 1YN7nRJLcUaioRZzUXEiAPXc+I1RAgAA Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Feb 2018 18:39:23 -0000 I think Jan makes a good point. Suppose there=E2=80=99s a server that supports DNS over TCP, and DSO = signaling, and Push Notifications, and DNS Update, and maybe other = things. Now suppose a client connects to that server. The server doesn=E2=80=99t = know what that client is going to do. The client may do queries over = TCP, or DNS updates. It may do queries over TCP and use the DSO = signaling to request a longer inactivity timeout. It may request Push = Notifications (which are currently specified to require TLS). It may do = all of those. When the server receives an incoming TCP connection request from a = client, what are the first bytes received over that TCP connection? Are = they a DNS header and message body? Are they a TLS handshake message? = Can it be either? How does the server know? Stuart Cheshire From nobody Wed Feb 21 10:50:23 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0D612D890 for ; Wed, 21 Feb 2018 10:50:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z4VH3U-payIX for ; Wed, 21 Feb 2018 10:50:06 -0800 (PST) Received: from mail-qt0-x22c.google.com (mail-qt0-x22c.google.com [IPv6:2607:f8b0:400d:c0d::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4794A124BE8 for ; Wed, 21 Feb 2018 10:50:06 -0800 (PST) Received: by mail-qt0-x22c.google.com with SMTP id c7so3215346qtn.3 for ; Wed, 21 Feb 2018 10:50:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=J868/+Sec3ctRcZ4ExhQns6ABafSqjVuH8036kuxLTU=; b=QnUqGq/lWKiGrchXhCVCAZRKl7It0Hl397GWK8SpRM78+Nk2rCiZumiuwydiIU+L6M LxuP27OrpESi9JYk1sikIloruBr0c+SOeBcjI7I185bEs0qxsHSjPdrwttHbL7JnileB grht6FAjFCpDp9gDDcSZWQhU2eUi51kqH9gkmpLWrN88T9ImbLndsxv3Ky+uvTQt+gio +pn+Ox7097Ku3Y5lOBFnvIdcqyuPykPC+mnXIiyp3PN3alHFpWbwNN1c8oFInztWUEiI 9NT8/UXyHLG0vwdQXHEz4mUs7Jkp3UyPN8PLW6nqufaMUxUiO1g8C6u7I5lJ029Qdi+d RfdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=J868/+Sec3ctRcZ4ExhQns6ABafSqjVuH8036kuxLTU=; b=GZd+cHXKiljQ4piggAIcW7NUp+uMxZzim1DYV8NAWEtpOppu+G6vtUZpEzfORCCOok biu3svIiP36x/L5EGgAG9QIM9l5pnZAHDSnz4G1dB56HU56Jvw6ISCHHzp88LJ6JLAzm PGAp1QK/yoNZ/yq4jrhvSE0RsVz43oGC7NJRZW5vLK/pWhipOIrCsHOtbbQDgOYKtyLM X5jCHhUl5BXlZoaG9mGPB4qjMhHuVFcYLIkV88Zh0dITL10NaJZA78nZEikuzqv1dgft 6IQsP94OOnsc14QK5IkviaANfinHxBVkoYw+8Uh2iAi8viFKd7Llv7DT6K75pDsnNZsv owSQ== X-Gm-Message-State: APf1xPB65Py3MOjYm4bnGgb1xaYfdKSepg9GpfhbRHaTdknrfs+DYUH2 U8W4ogl08VLTQRem/ko/Lr+cHA== X-Google-Smtp-Source: AH8x224Sf0eIXwcU5qrykdhAmZtEhFliNwdvETCiXJr2s3usx+6BwjLpU09KEmVWNkNQodeRAud39w== X-Received: by 10.237.47.165 with SMTP id m34mr7089387qtd.51.1519239005408; Wed, 21 Feb 2018 10:50:05 -0800 (PST) Received: from [192.168.1.147] (c-24-60-163-103.hsd1.ma.comcast.net. [24.60.163.103]) by smtp.gmail.com with ESMTPSA id q34sm5666619qkh.73.2018.02.21.10.50.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 21 Feb 2018 10:50:04 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Ted Lemon X-Mailer: iPad Mail (15A372) In-Reply-To: <8225F726-323C-4078-9CB5-C6672025494B@apple.com> Date: Wed, 21 Feb 2018 13:50:03 -0500 Cc: "Jan Komissar (jkomissa)" , "dnssd@ietf.org" , dnsop , "doh@ietf.org" , Paul Hoffman Content-Transfer-Encoding: quoted-printable Message-Id: References: <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com> <8225F726-323C-4078-9CB5-C6672025494B@apple.com> To: Stuart Cheshire Archived-At: Subject: Re: [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Feb 2018 18:50:15 -0000 On Feb 21, 2018, at 1:39 PM, Stuart Cheshire wrote: > I think Jan makes a good point. >=20 > Suppose there=E2=80=99s a server that supports DNS over TCP, and DSO signa= ling, and Push Notifications, and DNS Update, and maybe other things. >=20 > Now suppose a client connects to that server. The server doesn=E2=80=99t k= now what that client is going to do. The client may do queries over TCP, or D= NS updates. It may do queries over TCP and use the DSO signaling to request a= longer inactivity timeout. It may request Push Notifications (which are cur= rently specified to require TLS). It may do all of those. >=20 > When the server receives an incoming TCP connection request from a client,= what are the first bytes received over that TCP connection? Are they a DNS h= eader and message body? Are they a TLS handshake message? Can it be either? H= ow does the server know? Doesn=E2=80=99t dns over tls use a different port?= From nobody Tue Feb 27 15:19:36 2018 Return-Path: X-Original-To: dnssd@ietf.org Delivered-To: dnssd@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 863F712EB2E; Tue, 27 Feb 2018 15:11:22 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: dnssd@ietf.org, terry.manderson@icann.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151977308254.5200.5945004372583287727.idtracker@ietfa.amsl.com> Date: Tue, 27 Feb 2018 15:11:22 -0800 Archived-At: Subject: [dnssd] dnssd - Requested session has been scheduled for IETF 101 X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:11:27 -0000 Dear David Schinazi, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. dnssd Session 1 (2:00:00) Thursday, Morning Session I 0930-1200 Room Name: Buckingham size: 175 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Extensions for Scalable DNS Service Discovery Area Name: Internet Area Session Requester: David Schinazi Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 75 Conflicts to Avoid: First Priority: v6ops saag 6man dnsop homenet dprive 6lo intarea anima core Second Priority: babel ipsecme People who must be present: Tim Chown Terry Manderson David Schinazi Resources Requested: Special Requests: --------------------------------------------------------- From nobody Wed Feb 28 01:29:55 2018 Return-Path: X-Original-To: dnssd@ietfa.amsl.com Delivered-To: dnssd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCFED12EAEC for ; Wed, 28 Feb 2018 01:29:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jisc.ac.uk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1RzlgQ-vh65L for ; Wed, 28 Feb 2018 01:29:51 -0800 (PST) Received: from eu-smtp-delivery-189.mimecast.com (eu-smtp-delivery-189.mimecast.com [146.101.78.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95BB912EAE7 for ; Wed, 28 Feb 2018 01:29:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jisc.ac.uk; s=mimecast20170213; t=1519810189; h=from:subject:date:message-id:to:mime-version:content-type:content-transfer-encoding:in-reply-to:references; bh=0w65nbzP/AUke79DgFMxeb97+ZMpfi60nlkkrUs0mik=; b=E1+RGvM34NOARjCsfKp4h6CutZbubQtRVP6CuANnfGBwq8/hhbUoMAGL41EctzxzUIf1OgRv0Nz8lEWPr7Frtmj9plbTV3ghc1kWaqqjpswc0hSos62IhkI/j/mn+ooLdZ27RR73bXkvZfyT9JypYAL7AFfdQd9vpL5dCy7a5CU= Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-ve1eur02lp0054.outbound.protection.outlook.com [213.199.154.54]) (Using TLS) by eu-smtp-1.mimecast.com with ESMTP id uk-mta-137-28_cs1EINDeerzCD9pJUgA-1; Wed, 28 Feb 2018 09:29:47 +0000 Received: from VI1PR07MB1151.eurprd07.prod.outlook.com (10.163.168.148) by VI1PR07MB0942.eurprd07.prod.outlook.com (10.161.110.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.567.5; Wed, 28 Feb 2018 09:29:43 +0000 Received: from VI1PR07MB1151.eurprd07.prod.outlook.com ([fe80::d48:19a2:2ace:3274]) by VI1PR07MB1151.eurprd07.prod.outlook.com ([fe80::d48:19a2:2ace:3274%5]) with mapi id 15.20.0548.013; Wed, 28 Feb 2018 09:29:43 +0000 From: Tim Chown To: "dnssd@ietf.org" Thread-Topic: dnssd - Requested session has been scheduled for IETF 101 Thread-Index: AQHTsCCGf1an3IsDIEKB2+unQJjTsKO5jREA Date: Wed, 28 Feb 2018 09:29:43 +0000 Message-ID: <20F5A908-6E7F-476B-AC5C-5C496A5870E1@jisc.ac.uk> References: <151977308254.5200.5945004372583287727.idtracker@ietfa.amsl.com> In-Reply-To: <151977308254.5200.5945004372583287727.idtracker@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.5.20) x-originating-ip: [130.246.253.61] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR07MB0942; 7:QNEr7qxCb3JqjB4V6c5n2XhW4HmaFwsHYTPyAlwnUhQCQJCbPEEtL8eP3ZaA68uBkF2nkl2X2J9fIlVsINMtAcdiYp02iewtdTL8/Oljmg+qsFQ4cBbL1yTrDoimqXndSuJt1tdKxvaQw4Gj9e/ok6hXzPaJcdh7gbYIFdClCZ8Y1JECi258tlBBiHClklpDR0EdcTH4sEcbhLv5xp3aY5tGVnwyXa6R9/ZHmsjNsYga2h3atJHSlWx1HrWPvM+8; 20:r2/5hJepOn6S1d9WdNEX1VXZtWGlUzUh1kIlQhewxMV81LVa9ndiI1yGodJDbgQvcWJz1MNdIC1lbFK/+2rqUX5bn8NRUH3Sz8lW/+jOGjIwUZqfA+4robkZcS+DG+OzivL6YmtprRpA9BNCyUe5u1jQFi4EulGvgP5eusLA6Pc= x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: fbd37d0d-41ac-4a5a-bbb3-08d57e8dccc9 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:VI1PR07MB0942; x-ms-traffictypediagnostic: VI1PR07MB0942: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231220)(944501161)(6041288)(20161123560045)(20161123562045)(20161123558120)(20161123564045)(201703131423095)(201702281529075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:VI1PR07MB0942; BCL:0; PCL:0; RULEID:; SRVR:VI1PR07MB0942; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39380400002)(366004)(346002)(39850400004)(376002)(53754006)(189003)(199004)(478600001)(6512007)(786003)(316002)(14454004)(5660300001)(72206003)(83716003)(3280700002)(105586002)(76176011)(305945005)(7736002)(1730700003)(8676002)(99286004)(53936002)(2501003)(5250100002)(86362001)(81156014)(229853002)(6246003)(74482002)(5640700003)(81166006)(68736007)(82746002)(6916009)(2950100002)(6436002)(97736004)(53546011)(8936002)(33656002)(2906002)(25786009)(57306001)(66066001)(186003)(50226002)(3846002)(106356001)(102836004)(2351001)(2900100001)(59450400001)(3660700001)(6506007)(26005)(36756003)(6116002)(6486002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB0942; H:VI1PR07MB1151.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; x-microsoft-antispam-message-info: bXT0s/McvQWWVpjwL2alJdBaTsMTq4dGw2ziloQxZL8BdRbVCKk/AJ1nS3eXR7lZ4hDNPERtbY7LOmpWXMcFqDUzNlNPJ74hgGknWN4P+8kR8RODfKIJxX8cSpusqORrqW6m6llC7qN6BnZWlIVteY8Bm78Zvf9PXEtzpgGjdPc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-ID: <3273186F0B76734FAEB165131F0CC1C9@eurprd07.prod.outlook.com> MIME-Version: 1.0 X-OriginatorOrg: jisc.ac.uk X-MS-Exchange-CrossTenant-Network-Message-Id: fbd37d0d-41ac-4a5a-bbb3-08d57e8dccc9 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 09:29:43.3063 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 48f9394d-8a14-4d27-82a6-f35f12361205 X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB0942 X-MC-Unique: 28_cs1EINDeerzCD9pJUgA-1 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [dnssd] dnssd - Requested session has been scheduled for IETF 101 X-BeenThere: dnssd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 09:29:54 -0000 Hi all, Note we have a session confirmed at IETF101 in London; see below. Please let David or me know of any requests to present and discuss drafts. = We'll also be in touch with authors of active drafts. If anyone needs remote presentation via MeetEcho, please also let us know s= o we can ensure it is appropriately provisioned with the MeetEcho team. Best wishes, Tim=20 > On 27 Feb 2018, at 23:11, IETF Secretariat wrote: >=20 > Dear David Schinazi, >=20 > The session(s) that you have requested have been scheduled. > Below is the scheduled session information followed by > the original request.=20 >=20 > dnssd Session 1 (2:00:00) > Thursday, Morning Session I 0930-1200 > Room Name: Buckingham size: 175 > --------------------------------------------- >=20 >=20 >=20 > Request Information: >=20 >=20 > --------------------------------------------------------- > Working Group Name: Extensions for Scalable DNS Service Discovery=20 > Area Name: Internet Area > Session Requester: David Schinazi >=20 > Number of Sessions: 1 > Length of Session(s): 2 Hours > Number of Attendees: 75 > Conflicts to Avoid:=20 > First Priority: v6ops saag 6man dnsop homenet dprive 6lo intarea anima co= re > Second Priority: babel ipsecme >=20 >=20 >=20 > People who must be present: > Tim Chown > Terry Manderson > David Schinazi >=20 > Resources Requested: >=20 > Special Requests: >=20 > --------------------------------------------------------- >=20