From nobody Wed Jan 9 09:54:54 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5D79130FA0 for ; Wed, 9 Jan 2019 09:54:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X6WhWtns6Mia for ; Wed, 9 Jan 2019 09:54:51 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59421130F99 for ; Wed, 9 Jan 2019 09:54:51 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09Hsgkd021106; Wed, 9 Jan 2019 12:54:42 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x09Hsgkd021106 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1547056482; bh=2V5oeCcpoCk3UEzopLRgMqqYc9LcATge2zfxOxJoBvw=; h=From:To:CC:Subject:Date:From; b=EMdN2mZCBTYJlkoSp6XijEFLK4EpbNXvtCUfLktzgMnBdnu2L2frqd8om8g5wuqvZ 0NL+PqsCi6aUXNanRwZkYXxs5bey3Mm/ihUTpO0itghYoOiBJNfTbakpHF/4nTOsLm BHEIbbzvRer+ed09E384GE4M7Yc4tGTsfuldfP50= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09HseXh018647; Wed, 9 Jan 2019 12:54:40 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Wed, 9 Jan 2019 12:54:39 -0500 From: Roman Danyliw To: "dots@ietf.org" CC: "nteague@verisign.com" , "rgm@labs.htt-consult.com" , "stefan.fouant@copperriverit.com" Thread-Topic: Publication of draft-ietf-dots-use-cases requires IPR conformance check Thread-Index: AdRvqmd7N9ly1zhyRTeZI8TDkhu8jQ4mEeHw Date: Wed, 9 Jan 2019 17:54:39 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C73340@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Publication of draft-ietf-dots-use-cases requires IPR conformance check X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2019 17:54:54 -0000 Hello! I'm inquiring again on the IPR check as document shepherd. =20 Nik/Bob/Stefan: Could you please reply to the IPR check thread started at: https://www.ietf.org/mail-archive/web/dots/current/msg02711.html All authors: this draft is about to expire. Could it please be resubmitted= as -17 before that happens. Thanks, Roman > -----Original Message----- > From: Roman Danyliw > Sent: Monday, October 29, 2018 1:12 PM > To: dots@ietf.org > Cc: 'nteague@verisign.com' ; 'rgm@labs.htt- > consult.com' ; > 'stefan.fouant@copperriverit.com' > Subject: Publication of draft-ietf-dots-use-cases requires IPR conformanc= e > check >=20 > Hello! >=20 > The use case draft (draft-ietf-dots-use-cases-16) is ready for publicatio= n but > is awaiting a shepherd write-up. As the document shepherd, I need help > from this draft's authors to complete the write-up as was noted in [1]. > Specifically, I need to assert that that the IPR issues per BCP 78/79 ha= ve been > filed. >=20 > Daniel helpfully started a thread of public assertions on IPR from the au= thors: > ** Daniel Migault: https://www.ietf.org/mail- > archive/web/dots/current/msg02707.html > ** Frank Xialiang: https://www.ietf.org/mail- > archive/web/dots/current/msg02708.html > ** Roland Dobbins: https://www.ietf.org/mail- > archive/web/dots/current/msg02710.html > ** Kaname Nishizuka: https://www.ietf.org/mail- > archive/web/dots/current/msg02711.html >=20 > A response is still needed from Stefan Fouant, Nik Teague and Robert > Moskowitz. >=20 > Stefan/Nik/Bob: can you please respond to Daniel's thread on IPR. >=20 > Thanks, > Roman >=20 > [1] https://www.ietf.org/mail-archive/web/dots/current/msg02715.html From nobody Wed Jan 9 10:30:46 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 677CB130FA3 for ; Wed, 9 Jan 2019 10:30:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ATmluxJ9sRy for ; Wed, 9 Jan 2019 10:30:43 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD0A4130F73 for ; Wed, 9 Jan 2019 10:30:43 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09IUgPt022442 for ; Wed, 9 Jan 2019 13:30:42 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x09IUgPt022442 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1547058642; bh=o4aB1fd/yw80UtPmTavvPw1sOh3drvcBwlogfnOB/vo=; h=From:To:Subject:Date:References:In-Reply-To:From; b=GPZoTF1nPPhYwKQiQJnX2Hg7C6AR6BBLAsbPlkJlc89D+latJQi+bVJXPRLPSgtSt aXuTbhomWss+4hLt8ROzhR6TP/rJH/gX/einwCpxe2KxEtTouLbfNW09GKQSxCLoJc TZ5j5AiD/comCD1h6w/oqRaYvOxMrB0MF+2I/N1g= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09IUbWn004378 for ; Wed, 9 Jan 2019 13:30:38 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Wed, 9 Jan 2019 13:30:37 -0500 From: Roman Danyliw To: "'dots@ietf.org'" Thread-Topic: WGLC on draft-ietf-dots-architecture-08 Thread-Index: AdSGnlgla3cLRB5MRLWQWFaJSQftBAhqP0ww Date: Wed, 9 Jan 2019 18:30:36 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C73376@marathon> References: <359EC4B99E040048A7131E0F4E113AFC0184C49169@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C49169@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] WGLC on draft-ietf-dots-architecture-08 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2019 18:30:45 -0000 Hello! Thanks for all of the feedback on the draft. To address the WGLC discussio= ns, two updates (-09 and -10) were made (thanks authors); and the related s= ignal channel draft (-26) was also revised to improve consistency in termin= ology. Based on these changes, the document appears to have WG consensus a= nd be ready for publication. The next step is for a Shepherd Review and Wr= ite-Up (by me). Regards, Roman > -----Original Message----- > From: Roman Danyliw > Sent: Tuesday, November 27, 2018 5:15 PM > To: dots@ietf.org > Subject: WGLC on draft-ietf-dots-architecture-08 >=20 > Hello! >=20 > Consistent with our discussion at the Bangkok meeting, we are starting a > working group last call (WGLC) for the DOTS architecture draft: >=20 > DOTS Architecture > draft-ietf-dots-architecture-08 > https://tools.ietf.org/html/draft-ietf-dots-architecture-08 >=20 > Please send comments to the DOTS mailing list -- feedback on remaining > issues or needed changes; as well as endorsements that this draft is read= y. >=20 > This WGLC will end on December 12, 2018. >=20 > Thanks, > Roman and Frank From nobody Wed Jan 9 10:55:06 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C200130FF5 for ; Wed, 9 Jan 2019 10:55:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xAM-YX0I5mRS for ; Wed, 9 Jan 2019 10:55:03 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 411D813101E for ; Wed, 9 Jan 2019 10:54:56 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09IstiL030313 for ; Wed, 9 Jan 2019 13:54:55 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x09IstiL030313 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1547060095; bh=st5GFou1RWtYMfyFpv+k50g3j/dNLV2I3GzcrDjnhoE=; h=From:To:Subject:Date:References:In-Reply-To:From; b=K7u+T0jCu+MojoTrMmGgWIvOGGmx3AAjv+ui6x7dH8e/rcGQ5aiHcwzXG8iBiqu9B 6RxEdS2blZyvemVH9soCTt6cOlfsEo3OLUMTQ7ecaBeDHbwlGJX2dN+ciHzvFiBbIG M+cYZxG77gxQ/PSEgqW6rpso4yW2EwJR830AFQY4= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09IsprT034788 for ; Wed, 9 Jan 2019 13:54:51 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Wed, 9 Jan 2019 13:54:51 -0500 From: Roman Danyliw To: "dots@ietf.org" Thread-Topic: Call for adoption on draft-boucadair-dots-multihoming Thread-Index: AdSI+VrxTDsjU4gnQ26nDTSSOWTM0wfUvMeQ Date: Wed, 9 Jan 2019 18:54:51 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C733A3@marathon> References: <359EC4B99E040048A7131E0F4E113AFC0184C52FEF@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C52FEF@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-multihoming X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2019 18:55:05 -0000 Hello! Per this call on the mailing list, there is support to adopt this draft, dr= aft-boucadair-dots-multihoming. Authors: please submit this draft as a -00 WG document. Regards, Roman > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw > Sent: Friday, November 30, 2018 5:31 PM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-multihoming >=20 > Hello! >=20 > This is the start of a two week call for input on the WG adoption of the > document: >=20 > draft-boucadair-dots-multihoming > https://tools.ietf.org/html/draft-boucadair-dots-multihoming-04 >=20 > The document has been presented and discussed at IETF 103, IETF 100 and > IETF 99; and revisions have been made based on WG feedback. This > document was created and deferred in the interest of simplifying the > requirements and architecture drafts now getting ready for publication. >=20 > At the IETF 103 meeting, there were not many participants who had read th= e > draft. >=20 > Please provide feedback to the list/chairs if you believe that this docum= ent > should be adopted as a WG document. The adoption call will end on > December 14 2018. >=20 > Regards, > Roman and Frank >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Wed Jan 9 11:17:19 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A557131058 for ; Wed, 9 Jan 2019 11:17:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7DbvtO0aRwZe for ; Wed, 9 Jan 2019 11:17:16 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7AB3131053 for ; Wed, 9 Jan 2019 11:17:15 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09JHEi9001618 for ; Wed, 9 Jan 2019 14:17:14 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x09JHEi9001618 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1547061434; bh=eehCCX8LX4dwMDYRuwW9B6TnPa3jMJtzdjiwwsooOIo=; h=From:To:Subject:Date:References:In-Reply-To:From; b=gVEQ9HRb63JPthVTfmzw1nEVCjpiX/LtR3fBPIF/E1q6RhBMAG8bGBVF5u+IDSLiy v4u07zDw25Uiv52i6OlZxXtsq8TH6F+HiHbNgCfutkwnTJot31MbECEActGvSvwnar 1KM63FrM9GbLb/sq8IxJtbe2DL5cSj3Skq3otmxg= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x09JHE7r041309 for ; Wed, 9 Jan 2019 14:17:14 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Wed, 9 Jan 2019 14:17:14 -0500 From: Roman Danyliw To: "dots@ietf.org" Thread-Topic: Call for adoption on draft-boucadair-dots-server-discovery Thread-Index: AdSI+mzom/yrMKu/SJm1ohZrl+sYtAfU6q3g Date: Wed, 9 Jan 2019 19:17:14 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2019 19:17:18 -0000 Hello! Excluding support from the draft authors, the interest in adoption (or any = response) was low on the list (one) and also at IETF 103. The previous dis= cussion around this draft was more spirited. My concern is that this call = may have been lost in the end of year holidays. To that end, I'm extending= the call for adoption.=20 Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. This extended adoption call will end= on Tuesday, January 22. Regards, Roman and Frank > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw > Sent: Friday, November 30, 2018 5:22 PM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discover= y >=20 > Hello! >=20 > This is the start of a two week call for input on the WG adoption of the > document: >=20 > draft-boucadair-dots-server-discovery > https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05 >=20 > The document has been presented and discussed at IETF 103, IETF 100 and > IETF 99; and revisions have been made based on WG feedback. Discussion > of adoption of this draft was previously deferred pending submission of t= he > signal draft for publication (which occurred in September 2018). >=20 > At the IETF 103 meeting, there were not many participants who had read th= e > draft. >=20 > Please provide feedback to the list/chairs if you believe that this docum= ent > should be adopted as a WG document. The adoption call will end on > December 14 2018. >=20 > Regards, > Roman and Frank >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jan 10 06:50:39 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F45D131162; Thu, 10 Jan 2019 06:50:12 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.2 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154713181260.30744.9016376136818451333@ietfa.amsl.com> Date: Thu, 10 Jan 2019 06:50:12 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-use-cases-17.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2019 14:50:16 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Use cases for DDoS Open Threat Signaling Authors : Roland Dobbins Daniel Migault Stefan Fouant Robert Moskowitz Nik Teague Liang Xia Kaname Nishizuka Filename : draft-ietf-dots-use-cases-17.txt Pages : 14 Date : 2019-01-10 Abstract: The DDoS Open Threat Signaling (DOTS) effort is intended to provide protocols to facilitate interoperability across disparate DDoS mitigation solutions. This document presents use cases which describe the interactions expected between the DOTS components as well as DOTS messaging exchanges. These use cases are meant to identify the interacting DOTS components, how they collaborate and what are the typical information to be exchanged. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-use-cases/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-use-cases-17 https://datatracker.ietf.org/doc/html/draft-ietf-dots-use-cases-17 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-use-cases-17 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jan 14 03:37:25 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E04313101F for ; Mon, 14 Jan 2019 03:37:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EEiXUGkHgcI4 for ; Mon, 14 Jan 2019 03:37:21 -0800 (PST) Received: from mail5.verisign.com (mail5.verisign.com [69.58.187.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C26AD13101E for ; Mon, 14 Jan 2019 03:37:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=2204; q=dns/txt; s=VRSN; t=1547465840; h=from:to:cc:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version:subject; bh=M0j5U2AZbOl8XGbPjOATP8HTmJWJkeOz7EiqyrlnFTM=; b=dTadkovi3EIkxHNe/8sibSjbyOWRNNrC/DgTCurTikAscn44FixiqRHn mrAkmIJaO5RSd2VH5fj7+Azob0MiCOIQO+qHPw6IU4pFQQi/VjdIL3apW itChl0VydrkuO1tjU1fKszEfj4tWAMoNr/GNPdGV4Rm6fyZX67akflC4z 1g4V0bszR351wXXo3XYnLAoZUT6UYkHnxUXzCGd7e55m1K8++Gswgeqm+ KAVDq9ejjSHTsxG3c56LEECshbr6OL+/qUCYh08tlxJp8SJt/asbBLGHa DnD4b07RbQCGU+JElfiha9EWssxRuC9lj4otb6ENvpiehkYX6QqVCQsvb Q==; X-IronPort-AV: E=Sophos;i="5.56,477,1539662400"; d="scan'208";a="6659376" IronPort-PHdr: =?us-ascii?q?9a23=3A5mdA4hKdZp7u8utOX9mcpTZWNBhigK39O0sv0r?= =?us-ascii?q?FitYgeL//xwZ3uMQTl6Ol3ixeRBMOHs6IC07KempujcFRI2YyGvnEGfc4EfD?= =?us-ascii?q?4+ouJSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFA?= =?us-ascii?q?nhOgppPOT1HZPZg9iq2+yo9JDffwZFiCChbb9uMR67sRjfus4KjIV4N60/0A?= =?us-ascii?q?HJonxGe+RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L2?= =?us-ascii?q?81/szrugLdQgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9QLYpUj?= =?us-ascii?q?qg8qhrUgflhicZOTAk7GHZhM9+jKxZrx29qBJwzJXZYJ2MNPp7Yq/RYc8WSX?= =?us-ascii?q?RHU81MVyJBGIS8b44XAuYPI+hXsZPyp1QTrRSgHQWnGfvhyj5LhnP4wKY31O?= =?us-ascii?q?IhER3Y0wM6ENIOrWrboc76O6gMS+C1zbLIzTTMb/NQwzvy9I/IchU4rPyKQL?= =?us-ascii?q?l+f83RyUw1GAPEiFWdsY3lMC2J1uQDqWSb6PBgVe2phmU6qA9xuiCiytowho?= =?us-ascii?q?XTm44YyF7J+T9kzIs1K9C0UkF2bN28HJteqS6XNJd6T8YnTm5yuys3zqYJtJ?= =?us-ascii?q?u1cSQU1ZsqxhvSZOeDfoWJ4B/uUeicLDl6iX14fr+0mgy8/lK6yuLmU8m5yF?= =?us-ascii?q?NKri1YndbSrn0NzBnT6tSfSvt640ehxS6D1wDN5eFAJkA5jbfWJYI5zLItlp?= =?us-ascii?q?UdqUvNES7qlEnrlqOWaFkr+u+y6+T/eLnpvIKTO5VqigHkKaQunNazDvg/Mg?= =?us-ascii?q?gLR2Sb+OK826P//UDhXblGkuc6nrTbvZ3UP8gXu660DgFP3oss6BuzFzKm38?= =?us-ascii?q?4ZnXkDIlJFYhWHj43xNlHIPPD3E+2wg1uxkDh13P3GIKPuAo/MLnjYkbfhcr?= =?us-ascii?q?B951RAxwo0yNBT/4hUBa0ZIPLvRk/xs8TVDgUkPAOp2OvoFMty1pkCWW6VBa?= =?us-ascii?q?+ZKqzSu0eS5u0zO+mMeJMVuDHlJvc44P7ukWQ5lEQcfaa3wZsXZmq0HvN8I0?= =?us-ascii?q?WWMjLQhYI7FmIDuEISRer7jFydGWpJa3qaVK8m+nc8Eo3wXqnZQYX4yoCM1S?= =?us-ascii?q?imE9keQGFFQBjYF2vlfoqZVt8yZTiTOc5ulHoPUr33GNxp7g2nqAKvk+kvFe?= =?us-ascii?q?HT4CBN7Z8=3D?= X-IPAS-Result: =?us-ascii?q?A2ELAADuczxc/zCZrQpkGwEBAQEDAQEBBwMBAQGBUQYBA?= =?us-ascii?q?QELAYJpgSmMG41VJYNalCKBcQoMARgLC4Q+AoJeNAkNAQMBAQEBAQECAQECg?= =?us-ascii?q?QUMgjoiHDEcPgEBAQEBAScBAQEBAQEjAkQsAQEBAQIBAQEbHTQLBQcEAgEID?= =?us-ascii?q?gMEAQEBHgkHJwsUCQgBAQQOBYMiAYF5F68bhDICgQ6EWwWMVoFBPoE4DBOCT?= =?us-ascii?q?IMeAQEDgUgWgzqCJgKiBAkChxqLBIFkhSaDNoc/jwaLPwIEAgQFAhSBRmGBL?= =?us-ascii?q?nAVOyoBgkGCUYhMhT9yil8BAQ?= Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1531.3; Mon, 14 Jan 2019 06:37:18 -0500 Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%5]) with mapi id 15.01.1531.003; Mon, 14 Jan 2019 06:37:18 -0500 From: "Teague, Nik" To: Roman Danyliw CC: "dots@ietf.org" Thread-Topic: [EXTERNAL] Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery Thread-Index: AdSI+mzom/yrMKu/SJm1ohZrl+sYtAfU6q3gAOvaWLY= Date: Mon, 14 Jan 2019 11:37:17 +0000 Message-ID: <1DEEAB2E-F713-4689-9813-C08E410B8877@Verisign.com> References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon>, <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2019 11:37:24 -0000 Hi, I would like to register my support for adoption of this draft as a working= group document. Thanks, -Nik > On 9 Jan 2019, at 19:17, Roman Danyliw wrote: >=20 > Hello! >=20 > Excluding support from the draft authors, the interest in adoption (or an= y response) was low on the list (one) and also at IETF 103. The previous d= iscussion around this draft was more spirited. My concern is that this cal= l may have been lost in the end of year holidays. To that end, I'm extendi= ng the call for adoption.=20 >=20 > Please provide feedback to the list/chairs if you believe that this docum= ent should be adopted as a WG document. This extended adoption call will e= nd on Tuesday, January 22. >=20 > Regards, > Roman and Frank >=20 >> -----Original Message----- >> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw >> Sent: Friday, November 30, 2018 5:22 PM >> To: dots@ietf.org >> Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discove= ry >>=20 >> Hello! >>=20 >> This is the start of a two week call for input on the WG adoption of the >> document: >>=20 >> draft-boucadair-dots-server-discovery >> https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05 >>=20 >> The document has been presented and discussed at IETF 103, IETF 100 and >> IETF 99; and revisions have been made based on WG feedback. Discussion >> of adoption of this draft was previously deferred pending submission of = the >> signal draft for publication (which occurred in September 2018). >>=20 >> At the IETF 103 meeting, there were not many participants who had read t= he >> draft. >>=20 >> Please provide feedback to the list/chairs if you believe that this docu= ment >> should be adopted as a WG document. The adoption call will end on >> December 14 2018. >>=20 >> Regards, >> Roman and Frank >>=20 >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots >=20 From nobody Mon Jan 14 03:57:22 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 428E713103A for ; Mon, 14 Jan 2019 03:57:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TxMY6Ygut5d5 for ; Mon, 14 Jan 2019 03:57:18 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A401128CE4 for ; Mon, 14 Jan 2019 03:57:18 -0800 (PST) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.91) (envelope-from ) id 1gj0ri-000482-CI; Mon, 14 Jan 2019 11:57:14 +0000 From: "Jon Shallow" To: "'Roman Danyliw'" , References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> Date: Mon, 14 Jan 2019 11:57:17 -0000 Message-ID: <03d901d4ac00$4c037720$e40a6560$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQDZJstUKy7pcWAVAawoCMdgpnmESwKiJVOlp5CfnNA= Content-Language: en-gb Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2019 11:57:20 -0000 Hi there, I support adoption of this document as a WG document. Other that already discussed, nothing else currently leaps out at me to say - this needs thinking about / fixing. Regards Jon -----Original Message----- From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Roman Danyliw Sent: 09 January 2019 19:17 To: dots@ietf.org Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery Hello! Excluding support from the draft authors, the interest in adoption (or any response) was low on the list (one) and also at IETF 103. The previous discussion around this draft was more spirited. My concern is that this call may have been lost in the end of year holidays. To that end, I'm extending the call for adoption. Please provide feedback to the list/chairs if you believe that this document should be adopted as a WG document. This extended adoption call will end on Tuesday, January 22. Regards, Roman and Frank > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw > Sent: Friday, November 30, 2018 5:22 PM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discovery > > Hello! > > This is the start of a two week call for input on the WG adoption of the > document: > > draft-boucadair-dots-server-discovery > https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05 > > The document has been presented and discussed at IETF 103, IETF 100 and > IETF 99; and revisions have been made based on WG feedback. Discussion > of adoption of this draft was previously deferred pending submission of the > signal draft for publication (which occurred in September 2018). > > At the IETF 103 meeting, there were not many participants who had read the > draft. > > Please provide feedback to the list/chairs if you believe that this document > should be adopted as a WG document. The adoption call will end on > December 14 2018. > > Regards, > Roman and Frank > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots From nobody Mon Jan 14 06:03:22 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EBE2129A87 for ; Mon, 14 Jan 2019 06:03:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RNpMnDb1zVxJ for ; Mon, 14 Jan 2019 06:03:16 -0800 (PST) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B69E12D4E7 for ; Mon, 14 Jan 2019 06:03:16 -0800 (PST) Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 43dZtp61Zhz10P0; Mon, 14 Jan 2019 15:03:14 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.58]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 43dZtp4wTxzDq78; Mon, 14 Jan 2019 15:03:14 +0100 (CET) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM33.corporate.adroot.infra.ftgroup ([fe80::3881:fc15:b4b2:9017%19]) with mapi id 14.03.0415.000; Mon, 14 Jan 2019 15:03:14 +0100 From: To: "Panwei (William)" , "dots@ietf.org" Thread-Topic: Wei Pan's comments-1st part (RE: Call for adoption on draft-boucadair-dots-multihoming) Thread-Index: AdSsEeBjCF9tQ2aOQrWRzMnhROtfkg== Date: Mon, 14 Jan 2019 14:03:13 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302E065FCF@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302E065FCFOPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Subject: [Dots] Wei Pan's comments-1st part (RE: Call for adoption on draft-boucadair-dots-multihoming) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2019 14:03:20 -0000 --_000_787AE7BB302AE849A7480A190F8B93302E065FCFOPEXCLILMA3corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Wei, Thank you for the review. Please see inline a first set of replies that are fixed in -00. We will han= dle the remaining comments in -01. Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Panwei (William) Envoy=E9 : mercredi 26 d=E9cembre 2018 11:17 =C0 : dots@ietf.org Objet : Re: [Dots] Call for adoption on draft-boucadair-dots-multihoming Hi, I support adoption of this draft. And meanwhile, I have some comments. Nits or Typo: 1. In section 1, s/To that aim, this document adopts the following met= hodology/To those aims, this document adopts the following methodologies/.. [Med] Changed to "This document adopts the following methodology". 2. It's better to use "DOTS signal channel sessions" instead of "DOTS = signaling sessions" in Section 1, Section 5..1 and Section 5.3. [Med] In order to cover both signal and data sessions, the text uses now "D= OTS sessions". 3. In section 4.1, s/Each of these provisioning domains assign IP addr= esses/prefixes to the CPE/Each of these provisioning domains assigns IP add= resses/prefixes to the CPE/. [Med] OK 4. In section 4.2, the descriptions of the two sub-cases begin as the = following way: 1. Provider Independent (PI) addresses: XXXXXXXX 2. PA addresses/prefixes: XXXXXXXX It's better to change the beginning of the two sub-cases like this: 1. Provider Independent (PI) addresses/prefixes: XXXXXXXX 2. Provider Aggregatable (PA) addresses/prefixes: XXXXXXXX [Med] OK, but I went for PI and PA without expanding them because these two= terms were expanded earlier in the document. 5. In section 5.2, the case of figure 6, s/When PA addresses/prefixes = are in used/When PA addresses/prefixes are in use/. [Med] OK. Some comments: 1. I suggest having a detailed explanation of the meaning of Provider-= Independent (PI) and Provider-Aggregatable (PA) in Section 3 Terminology. (= In addition, I think "Provider-Aggregate" is more suitable than "Provider-A= ggregatable".) [Med] Actually, we are using terms that are widely used for multihoming. Th= e document cites RFC4116 so that the reader can get definitions of these te= rms. The reason I want an explanation of these two terms, is that when I read th= e draft I got confused by some parts where these two terms are used. I'd li= ke to offer a sample: Provider-Independent (PI) IP addresses/prefixes: The IP addresses/prefixes which are used by the devices in the client's domain are owned by the client's domain itself. If PI IP addresses/prefixes are used by a DOTS client, then the devices managed by this DOTS client should also use PI IP addresses/prefixes. The DOTS client can use the same PI IP addresses/prefixes to communicate with different upstream provisioning domains. Provider-Aggregatable (PA) IP addresses/prefixes: The IP addresses/prefixes which are used by the devices in the client's domain are owned by the upstream provisioning domains. Each of upstream provisioning domains assigns IP addresses/prefixes to the client's domain. If PA IP addresses/prefixes are used by a DOTS client, then the devices managed by this DOTS client should also use PA IP addresses/prefixes provided by the same provisioning domain. DOTS clients located on the CPE should be assigned IP addresses/prefixes by each of the upstream provisioning domains. DOTS clients not located on the CPE may be assigned IP addresses/prefixes only by one provisioning domain. When a DOTS client communicates with a provisioning domain, then this DOTS client must use the PA IP addresses/prefixes provided by this provisioning domain. 2. In section 5.1, it describes the rule for DOTS client to choose the= correct DOTS server as following: When conveying a mitigation request to protect the attack target(s), the DOTS client among the DOTS servers available MUST select a DOTS server whose network has assigned the prefixes from which target prefixes and target IP addresses are derived. When the DOTS client can't find the correct DOTS server according to this r= ule, to which DOTS server should the mitigation request be sent? all DOTS s= ervers or an arbitrary one or none? I think it's better to clarify the reas= onable behavior of DOTS client in the draft. [Med] The text is clear that a request must send to a server if and only th= at server is responsible for the address/resource under attack. I recommend that DOTS client don't send request to any DOTS server in such = case, because sending request to all DOTS servers may inflict additional ne= twork disruption. The following sentence can be added at the end of the par= agraph: If no appropriate DOTS server can be found, then the DOTS client should not= send mitigation request to any DOTS servers. [Med] MUST in the text you quoted is sufficient, IMO. Will tweak the text t= o make this clearer. 3. In section 5.2, it describes 3 cases of deployment model. But the t= hird case, figure 8, isn't clarified clearly enough. 3.1. For the case of figure 6 and the case of figure 7, PI addresses a= nd PA addresses are considered separately and explicitly. But for the case = of figure 8, it doesn't mention the PI addresses or PA addresses. Is this d= escription of the case of figure 8 suitable for both PI addresses and PA ad= dresses? Whether or not, it's better to be clarified in the draft. 3.2. In the case of figure 8, it describes a rule for CPE: The CPE MUST select the appropriate source IP address when forwarding DOTS messages received from an internal DOTS client. But the CPE isn't a DOTS gateway in this case, how could it "select the app= ropriate source IP address" ? Besides, there is no description to explain w= hat is "appropriate" in this case. 4. In section 5.2, in the case of figure 7, it describes some complica= tions will arise if PA addresses/prefixes are used. Although the draft says= these complications are not specific to DOTS, but it doesn't clarify what = should DOTS do to handle these complications. 5. Different descriptions of PI addresses/prefixes are as followings: The case of figure 6 describes: Nevertheless, when PI addresses/prefixes are assigned, the DOTS gateway MUST sent the same request to all its DOTS servers. The case of figure 7 describes: If PI addresses/prefixes are in use, the DOTS client can send the mitigation request for all its PI addresses/prefixes to any one of the DOTS servers. The use of anycast addresses is NOT RECOMMENDED. The case of figure 9 describes: When PI addresses/prefixes are used, DOTS clients can contact any of the DOTS gateways to send a DOTS message. DOTS gateway will then relay the request to the DOTS server. I don't get the reason why the mitigation request need to be sent to all DO= TS servers in the case of figure 6 but only to one of the DOTS servers in t= he cases of figure 7 and figure 9. I don't figure out the need of such diff= erences. 6. About the anycast addresses: 6.1. There are several places in the draft saying that the use of anyc= ast addresses is NOT RECOMMENDED, but the reason isn't clarified. So I get= confused why anycast is problematic in these cases. For example, the cases of figure 7 and figure 9 describe that when PI addre= sses/prefixes are used the DOTS client can send request to any one of the D= OTS servers/DOTS gateways, using anycast addresses can achieve this more ea= sily but it is not recommended. 6.2. Does it imply that the use of anycast addresses for DOTS servers = is appropriate for those cases which don't say "anycast is not recommended"= ? Because not all cases describe the use of anycast addresses for DOTS serv= ers. For example, in the case of figure 6, it doesn't mention the anycast addres= ses for DOTS servers, can the anycast addresses for DOTS servers be used? 7. In section 5.3, in the case of figure 9, it describes: When PA addresses/prefixes are used, but no filter rules are provided to DOTS clients, these later MUST contact all DOTS gateways simultaneously to send a DOTS message. Upon receipt of a request by a DOTS gateway, it MUST check whether the request is to be forwarded upstream or be rejected. It doesn't clarify the rule that the DOTS gateway should be according to. I= n which condition should the DOTS gateway forward the request or reject the= request? Best Regards Wei Pan > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw > Sent: Saturday, December 01, 2018 6:31 AM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-multihoming > > Hello! > > This is the start of a two week call for input on the WG adoption of the > document: > > draft-boucadair-dots-multihoming > https://tools.ietf.org/html/draft-boucadair-dots-multihoming-04 > > The document has been presented and discussed at IETF 103, IETF 100 and > IETF 99; and revisions have been made based on WG feedback. This > document was created and deferred in the interest of simplifying the > requirements and architecture drafts now getting ready for publication.. > > At the IETF 103 meeting, there were not many participants who had read th= e > draft. > > Please provide feedback to the list/chairs if you believe that this docum= ent > should be adopted as a WG document. The adoption call will end on > December 14 2018. > > Regards, > Roman and Frank > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots --_000_787AE7BB302AE849A7480A190F8B93302E065FCFOPEXCLILMA3corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Wei,

 

Thank you for the review.

 

Please see inline a first set of replies that are fixe= d in -00. We will handle the remaining comments in -01.

 

Cheers,

Med

 

De : Dots= [mailto:dots-bounces@ietf.org] De la part de Panwei (William)
Envoy=E9 : mercredi 26 d=E9cembre 2018 11:17
=C0 : dots@ietf.org
Objet : Re: [Dots] Call for adoption on draft-boucadair-dots-mu= ltihoming

 

Hi,

 <= /o:p>

I support ad= option of this draft. And meanwhile, I have some comments.

 <= /o:p>

Nits or Typo= :

1.    &n= bsp; In section 1, s/To that aim, this document adopts the foll= owing methodology/To those aims, this document adopts the following methodologies/= ..

 

[= Med] Changed to “This document adopts the following methodology”= ;.

<= o:p> 

2.    &n= bsp; It’s better to use "DOTS signal channel session= s" instead of "DOTS signaling sessions" in Section 1, Sectio= n 5..1 and Section 5.3.

[= Med] In order to cover both signal and data sessions, the text uses now = 220;DOTS sessions”.

<= o:p> 

3.    &n= bsp; In section 4.1, s/Each of these provisioning domains assig= n IP addresses/prefixes to the CPE/Each of these provisioning domains assigns IP addresses/prefixes to the CPE/.

[= Med] OK

<= o:p> 

4.    &n= bsp; In section 4.2, the descriptions of the two sub-cases begi= n as the following way:

1. Provider Independent = (PI) addresses: XXXXXXXX

2. PA addresses/prefixes= : XXXXXXXX

It’s better to change the beginning of the two sub-cases li= ke this:

1. Provider Independent = (PI) addresses/prefixes: XXXXXXXX

2. Provider Aggregatable= (PA) addresses/prefixes: XXXXXXXX

<= o:p> 

[= Med] OK, but I went for PI and PA without expanding them because these two = terms were expanded earlier in the document.

<= o:p> 

5.    &n= bsp; In section 5.2, the case of figure 6, s/When PA addresses/= prefixes are in used/When PA addresses/prefixes are in use/.

[= Med] OK.

<= o:p> 

Some comment= s:

1.    &n= bsp; I suggest having a detailed explanation of the meaning of = Provider-Independent (PI) and Provider-Aggregatable (PA) in Section 3 Termi= nology. (In addition, I think "Provider-Aggregate" is more suitable than "Provider-Aggregatable".)

[= Med] Actually, we are using terms that are widely used for multihoming. The= document cites RFC4116 so that the reader can get definitions of these terms.  

<= o:p> 

The reason I want an explanation of these two terms, is that when= I read the draft I got confused by some parts where these two terms are us= ed. I’d like to offer a sample:

Provider-Independent (PI= ) IP addresses/prefixes: The IP addresses/prefixes

which are used by the de= vices in the client’s domain are owned by the

client’s domain it= self. If PI IP addresses/prefixes are used by a DOTS

client, then the devices= managed by this DOTS client should also use

PI IP addresses/prefixes= . The DOTS client can use the same PI IP

addresses/prefixes to co= mmunicate with different upstream provisioning

domains.

 =

Provider-Aggregatable (P= A) IP addresses/prefixes: The IP addresses/prefixes

which are used by the de= vices in the client’s domain are owned by the

upstream provisioning do= mains. Each of upstream provisioning domains

assigns IP addresses/pre= fixes to the client’s domain. If PA IP

addresses/prefixes are u= sed by a DOTS client, then the devices managed

by this DOTS client shou= ld also use PA IP addresses/prefixes provided

by the same provisioning= domain. DOTS clients located on the CPE should

be assigned IP addresses= /prefixes by each of the upstream provisioning

domains. DOTS clients no= t located on the CPE may be assigned IP

addresses/prefixes only = by one provisioning domain. When a DOTS client

communicates with a prov= isioning domain, then this DOTS client must use

the PA IP addresses/pref= ixes provided by this provisioning domain.

 

2.    &n= bsp; In section 5.1, it describes the rule for DOTS client to c= hoose the correct DOTS server as following:

When conveying a mitigat= ion request to protect the attack target(s),

the DOTS client among th= e DOTS servers available MUST select a DOTS

server whose network has= assigned the prefixes from which target

prefixes and target IP a= ddresses are derived.

When the DOTS client can’t find the correct DOTS server acc= ording to this rule, to which DOTS server should the mitigation request be = sent? all DOTS servers or an arbitrary one or none? I think it’s better to clarify the reasonable behavior of DOTS client in the draft.

<= o:p> 

[= Med] The text is clear that a request must send to a server if and only tha= t server is responsible for the address/resource under attack.

<= o:p> 

I recommend that DOTS client don’t send request to any DOTS= server in such case, because sending request to all DOTS servers may infli= ct additional network disruption. The following sentence can be added at the end of the paragraph:

If no appropriate DOTS s= erver can be found, then the DOTS client should not send mitigation request= to any DOTS servers.

 

[Med] MUST in the text you quoted is sufficient, IMO. = Will tweak the text to make this clearer.

 

3.    &n= bsp; In section 5.2, it describes 3 cases of deployment model. = But the third case, figure 8, isn’t clarified clearly enough.

3.1.    =   For the case of figure 6 and the case of figure 7, PI addr= esses and PA addresses are considered separately and explicitly. But for th= e case of figure 8, it doesn’t mention the PI addresses or PA addresses. Is this description of the case of figure 8 suitable for = both PI addresses and PA addresses? Whether or not, it’s better to be= clarified in the draft.

3.2.    =   In the case of figure 8, it describes a rule for CPE:=

The CPE MUST select the = appropriate source IP address when

forwarding DOTS messages= received from an internal DOTS client.

But the CPE isn’t a DOTS gateway in this case, how could it= “select the appropriate source IP address” ? Besides, there is= no description to explain what is “appropriate” in this case.<= o:p>

<= o:p> 

4.    &n= bsp; In section 5.2, in the case of figure 7, it describes some= complications will arise if PA addresses/prefixes are used. Although the d= raft says these complications are not specific to DOTS, but it doesn’t clarify what should DOTS do to handle these complicat= ions.

 <= /o:p>

5.    &n= bsp; Different descriptions of PI addresses/prefixes are as fol= lowings:

The case of figure 6 describes:

Nevertheless, when PI ad= dresses/prefixes are assigned, the DOTS

gateway MUST sent the sa= me request to all its DOTS servers.

The case of figure 7 describes:

If PI addresses/prefixes= are in use, the DOTS client can send the

mitigation request for a= ll its PI addresses/prefixes to any one of

the DOTS servers. The us= e of anycast addresses is NOT RECOMMENDED.

The case of figure 9 describes:

When PI addresses/prefix= es are used, DOTS clients can contact any of

the DOTS gateways to sen= d a DOTS message. DOTS gateway will then

relay the request to the= DOTS server.

I don’t get the reason why the mitigation request need to b= e sent to all DOTS servers in the case of figure 6 but only to one of the D= OTS servers in the cases of figure 7 and figure 9. I don’t figure out the need of such differences.

 <= /o:p>

6.    &n= bsp; About the anycast addresses:

6.1.    =   There are several places in the draft saying that the use = of anycast addresses is NOT RECOMMENDED, but  the reason isn’t c= larified. So I get confused why anycast is problematic in these cases.=

For example, the cases of figure 7 and figure 9 describe that whe= n PI addresses/prefixes are used the DOTS client can send request to any on= e of the DOTS servers/DOTS gateways, using anycast addresses can achieve this more easily but it is not recommended.<= /p>

6.2.    =   Does it imply that the use of anycast addresses for DOTS s= ervers is appropriate for those cases which don’t say “anycast = is not recommended”? Because not all cases describe the use of anycas= t addresses for DOTS servers.

For example, in the case of figure 6, it doesn’t mention th= e anycast addresses for DOTS servers, can the anycast addresses for DOTS se= rvers be used?

 <= /o:p>

7.    &n= bsp; In section 5.3, in the case of figure 9, it describes:

When PA addresses/prefix= es are used, but no filter rules are provided

to DOTS clients, these l= ater MUST contact all DOTS gateways

simultaneously to send a= DOTS message. Upon receipt of a request by

a DOTS gateway, it MUST = check whether the request is to be forwarded

upstream or be rejected.=

It doesn’t clarify the rule that the DOTS gateway should be= according to. In which condition should the DOTS gateway forward the reque= st or reject the request?

 <= /o:p>

 <= /o:p>

Best Regards=

Wei Pan=

 <= /o:p>

<= o:p> 

&= gt; -----Original Message-----

&= gt; From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw

&= gt; Sent: Saturday, December 01, 2018 6:31 AM

&= gt; To: dots@ietf.org

&= gt; Subject: [Dots] Call for adoption on draft-boucadair-dots-multihoming

&= gt;

&= gt; Hello!

&= gt;

&= gt; This is the start of a two week call for input on the WG adoption of th= e

&= gt; document:

&= gt;

&= gt; draft-boucadair-dots-multihoming

&= gt; https://tools.ietf.org/html/draft-boucadair-dots-multihoming-04

&= gt;

&= gt; The document has been presented and discussed at IETF 103, IETF 100 and=

&= gt; IETF 99;  and revisions have been made based on WG feedback. = This

&= gt; document was created and deferred in the interest of simplifying the

&= gt; requirements and architecture drafts now getting ready for publication.= .

&= gt;

&= gt; At the IETF 103 meeting, there were not many participants who had read = the

&= gt; draft.

&= gt;

&= gt; Please provide feedback to the list/chairs if you believe that this doc= ument

&= gt; should be adopted as a WG document.  The adoption call will end on=

&= gt; December 14 2018.

&= gt;

&= gt; Regards,

&= gt; Roman and Frank

&= gt;

&= gt; _______________________________________________

&= gt; Dots mailing list

&= gt; Dots@ietf.org

&= gt; https://www.ietf.org/mailman/listinfo/dots

--_000_787AE7BB302AE849A7480A190F8B93302E065FCFOPEXCLILMA3corp_-- From nobody Mon Jan 14 06:52:39 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 55C08131072; Mon, 14 Jan 2019 06:52:30 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.2 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154747755029.4811.7929532867794281189@ietfa.amsl.com> Date: Mon, 14 Jan 2019 06:52:30 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-multihoming-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2019 14:52:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Multi-homing Deployment Considerations for Distributed-Denial-of-Service Open Threat Signaling (DOTS) Authors : Mohamed Boucadair Tirumaleswar Reddy Filename : draft-ietf-dots-multihoming-00.txt Pages : 14 Date : 2019-01-14 Abstract: This document discusses multi-homing considerations for Distributed- Denial-of-Service Open Threat Signaling (DOTS). The goal is to provide a set of guidance for DOTS clients/gateways when multihomed. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-multihoming/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-multihoming-00 https://datatracker.ietf.org/doc/html/draft-ietf-dots-multihoming-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jan 14 09:29:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B71C130FB4 for ; Mon, 14 Jan 2019 09:29:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -19.052 X-Spam-Level: X-Spam-Status: No, score=-19.052 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d1ywbKlyqXNp for ; Mon, 14 Jan 2019 09:29:23 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45017130F6C for ; Mon, 14 Jan 2019 09:29:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5473; q=dns/txt; s=iport; t=1547486963; x=1548696563; h=subject:to:references:from:message-id:date:mime-version: in-reply-to; bh=0hX65ivgODtpDmUFcF7Gyz58GPKBPfYXu+e+zmO6iC8=; b=h9xH21wMdF3IhZcQ3m2jMlHplnzbjC1KZ5abWivLu7VV7i69WarmJ4Bp cqR3xsCwj7b6VYkMPwV2MNp7BFIpr0SuBXcPlgQ28kCKoFStR7ajgKmBO 4B3aeCjwBnqI5xx37vUoJgNuQPxGDtUikettE1DxlZgjCQeD8vwlyp8rr w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BmAADixTxc/4QNJK1jGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBZYIEZk8zJ4QBlAeBYAgliS+IZYdjDRgBCoRJAoI/IjgSAQM?= =?us-ascii?q?BAQIBAQJtHAyFSgEBAQEDAQEbBksXBAsECgMEAQEBJwMCAicfCQgGAQwGAgE?= =?us-ascii?q?Bgx4BgXQND606gS8fhBMCgQ6EXQWMPxeBQD+BOAyCX4MeAQEDgUiDH4JXApB?= =?us-ascii?q?EN5EJCYccimYGGIFkhSaDECaHP4l1hRGLZoFdIYFWTSMVO4Jsix2FXSEDMIp?= =?us-ascii?q?fAQE?= X-IronPort-AV: E=Sophos;i="5.56,478,1539648000"; d="scan'208,217";a="505375191" Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Jan 2019 17:29:21 +0000 Received: from [10.155.144.141] ([10.155.144.141]) by alln-core-10.cisco.com (8.15.2/8.15.2) with ESMTP id x0EHTLTb028534; Mon, 14 Jan 2019 17:29:21 GMT To: Roman Danyliw , "dots@ietf.org" References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> From: Flemming Andreasen Message-ID: <0b23b46d-2a41-eb04-3763-190a4448510f@cisco.com> Date: Mon, 14 Jan 2019 12:29:20 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> Content-Type: multipart/alternative; boundary="------------46E5E66C95BBC34F3FC4E2A4" Content-Language: en-US X-Outbound-SMTP-Client: 10.155.144.141, [10.155.144.141] X-Outbound-Node: alln-core-10.cisco.com Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2019 17:29:25 -0000 This is a multi-part message in MIME format. --------------46E5E66C95BBC34F3FC4E2A4 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit I support WG adoption of this draft. Thanks -- Flemming On 1/9/19 2:17 PM, Roman Danyliw wrote: > Hello! > > Excluding support from the draft authors, the interest in adoption (or any response) was low on the list (one) and also at IETF 103. The previous discussion around this draft was more spirited. My concern is that this call may have been lost in the end of year holidays. To that end, I'm extending the call for adoption. > > Please provide feedback to the list/chairs if you believe that this document should be adopted as a WG document. This extended adoption call will end on Tuesday, January 22. > > Regards, > Roman and Frank > >> -----Original Message----- >> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw >> Sent: Friday, November 30, 2018 5:22 PM >> To: dots@ietf.org >> Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discovery >> >> Hello! >> >> This is the start of a two week call for input on the WG adoption of the >> document: >> >> draft-boucadair-dots-server-discovery >> https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05 >> >> The document has been presented and discussed at IETF 103, IETF 100 and >> IETF 99; and revisions have been made based on WG feedback. Discussion >> of adoption of this draft was previously deferred pending submission of the >> signal draft for publication (which occurred in September 2018). >> >> At the IETF 103 meeting, there were not many participants who had read the >> draft. >> >> Please provide feedback to the list/chairs if you believe that this document >> should be adopted as a WG document. The adoption call will end on >> December 14 2018. >> >> Regards, >> Roman and Frank >> >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots > . > --------------46E5E66C95BBC34F3FC4E2A4 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit I support WG adoption of this draft.

Thanks

-- Flemming

On 1/9/19 2:17 PM, Roman Danyliw wrote:
Hello!

Excluding support from the draft authors, the interest in adoption (or any response) was low on the list (one) and also at IETF 103.  The previous discussion around this draft was more spirited.  My concern is that this call may have been lost in the end of year holidays.  To that end, I'm extending the call for adoption. 

Please provide feedback to the list/chairs if you believe that this document should be adopted as a WG document.  This extended adoption call will end on Tuesday, January 22.

Regards,
Roman and Frank


-----Original Message-----
From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw
Sent: Friday, November 30, 2018 5:22 PM
To: dots@ietf.org
Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discovery

Hello!

This is the start of a two week call for input on the WG adoption of the
document:

draft-boucadair-dots-server-discovery
https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05

The document has been presented and discussed at IETF 103, IETF 100 and
IETF 99;  and revisions have been made based on WG feedback.  Discussion
of adoption of this draft was previously deferred pending submission of the
signal draft for publication (which occurred in September 2018).

At the IETF 103 meeting, there were not many participants who had read the
draft.

Please provide feedback to the list/chairs if you believe that this document
should be adopted as a WG document.  The adoption call will end on
December 14 2018.

Regards,
Roman and Frank

_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots

_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots
.

--------------46E5E66C95BBC34F3FC4E2A4-- From nobody Mon Jan 14 19:23:49 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A112E12F1AB for ; Mon, 14 Jan 2019 19:23:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8kGgmlzw8t4F for ; Mon, 14 Jan 2019 19:23:45 -0800 (PST) Received: from mail-lf1-f50.google.com (mail-lf1-f50.google.com [209.85.167.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C90D512F1A6 for ; Mon, 14 Jan 2019 19:23:44 -0800 (PST) Received: by mail-lf1-f50.google.com with SMTP id u18so880830lff.10 for ; Mon, 14 Jan 2019 19:23:44 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LwnXsDbkwEiWn/ongpsc8f5xzfNQnNexi3hLSXaGp8o=; b=rN0A00ISKbsU0SYsrnD+82kioN7UGxBJPWScislro2wBBOekqOhAxVNvU7r/JuYGDj 0yKNwML78SzuWhfNJojc0e9TergG+yZcS+4QVqzs1YQqgIZ/3vThKqz7aySKMVePUQUz rutXwanuSgUS2HIWwXsCz8KjZbz2qUEsqTULvURortcV5WexECRjXKDPGkM4LBmPYSKF mWJY3/fzcGJ+6M7GBpKcRIdxygXB/A4yVVTwsooIEIRG53HnfkYh5+UlVMk6Agq3eahc jxvJd7I9JuopflriynOvU3kEzWVyFOcu6kkr8AvCyg0JEfcO3cEAcK9FmhnZ+vb5yoGf ddhw== X-Gm-Message-State: AJcUukfz7ABsRYOnvjfSRdJmY9JdsEaMD1T4wzW6OvtbFxBvU1uwXMzv H/Q3M1xcZOUeq63tFaG0SiY1MH9txtzODAFcHFI= X-Google-Smtp-Source: ALg8bN7SEnKV0fOBVstCuRk0VI1ETgQd4DA18+wm5nw2bvd1JCEhYzqFTydWU36/Gfh2ANLgy4XjbL+UEaxMDO1P8aE= X-Received: by 2002:a19:4849:: with SMTP id v70mr1166400lfa.62.1547522622842; Mon, 14 Jan 2019 19:23:42 -0800 (PST) MIME-Version: 1.0 References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> <0b23b46d-2a41-eb04-3763-190a4448510f@cisco.com> In-Reply-To: <0b23b46d-2a41-eb04-3763-190a4448510f@cisco.com> From: Daniel Migault Date: Mon, 14 Jan 2019 22:23:30 -0500 Message-ID: To: Flemming Andreasen Cc: Roman Danyliw , "dots@ietf.org" Content-Type: multipart/alternative; boundary="000000000000376c40057f76b027" Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jan 2019 03:23:47 -0000 --000000000000376c40057f76b027 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I support the adoption of the draft. While this should not prevent the adoption, I would avoid mDNS and prefer the use of SD with unicast DNS. For homenet, .local should be replaced by home.arpa. I am not sure NAPTR solution could not be replaced by DNS-SD as well. I am happy to look at these discussions. Yours, Daniel On Mon, Jan 14, 2019 at 12:29 PM Flemming Andreasen wrote: > I support WG adoption of this draft. > > Thanks > > -- Flemming > > On 1/9/19 2:17 PM, Roman Danyliw wrote: > > Hello! > > Excluding support from the draft authors, the interest in adoption (or an= y response) was low on the list (one) and also at IETF 103. The previous d= iscussion around this draft was more spirited. My concern is that this cal= l may have been lost in the end of year holidays. To that end, I'm extendi= ng the call for adoption. > > Please provide feedback to the list/chairs if you believe that this docum= ent should be adopted as a WG document. This extended adoption call will e= nd on Tuesday, January 22. > > Regards, > Roman and Frank > > > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org ] On Beha= lf Of Roman Danyliw > Sent: Friday, November 30, 2018 5:22 PM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discover= y > > Hello! > > This is the start of a two week call for input on the WG adoption of the > document: > > draft-boucadair-dots-server-discoveryhttps://tools.ietf.org/html/draft-bo= ucadair-dots-server-discovery-05 > > The document has been presented and discussed at IETF 103, IETF 100 and > IETF 99; and revisions have been made based on WG feedback. Discussion > of adoption of this draft was previously deferred pending submission of t= he > signal draft for publication (which occurred in September 2018). > > At the IETF 103 meeting, there were not many participants who had read th= e > draft. > > Please provide feedback to the list/chairs if you believe that this docum= ent > should be adopted as a WG document. The adoption call will end on > December 14 2018. > > Regards, > Roman and Frank > > _______________________________________________ > Dots mailing listDots@ietf.orghttps://www.ietf.org/mailman/listinfo/dots > > _______________________________________________ > Dots mailing listDots@ietf.orghttps://www.ietf.org/mailman/listinfo/dots > .. > > > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots > --000000000000376c40057f76b027 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I support the adoption of the draft.
<= br>
While this should not prevent the adoption, I would avoid mDN= S and prefer the use of SD with unicast DNS. For homenet, .local should be = replaced by home.arpa.=C2=A0 I am not sure NAPTR solution could not be repl= aced by DNS-SD as well. I am happy to look at these discussions.
=

Yours,
Daniel=C2=A0

<= /div>

On Mon, Jan= 14, 2019 at 12:29 PM Flemming Andreasen <fandreas@cisco.com> wrote:
=20 =20 =20
I support WG adoption of this draft.

Thanks

-- Flemming

On 1/9/19 2:1= 7 PM, Roman Danyliw wrote:
Hello!

Excluding support from the draft authors, the interest in adoption (or any =
response) was low on the list (one) and also at IETF 103.  The previous dis=
cussion around this draft was more spirited.  My concern is that this call =
may have been lost in the end of year holidays.  To that end, I'm exten=
ding the call for adoption.=20

Please provide feedback to the list/chairs if you believe that this documen=
t should be adopted as a WG document.  This extended adoption call will end=
 on Tuesday, January 22.

Regards,
Roman and Frank


-----Origin=
al Message-----
From: Dots [mailto:dots-bounces@=
ietf.org] On Behalf Of Roman Danyliw
Sent: Friday, November 30, 2018 5:22 PM
To: dots@ietf.org
Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discovery

Hello!

This is the start of a two week call for input on the WG adoption of the
document:

draft-boucadair-dots-server-discovery
https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-0=
5

The document has been presented and discussed at IETF 103, IETF 100 and
IETF 99;  and revisions have been made based on WG feedback.  Discussion
of adoption of this draft was previously deferred pending submission of the
signal draft for publication (which occurred in September 2018).

At the IETF 103 meeting, there were not many participants who had read the
draft.

Please provide feedback to the list/chairs if you believe that this documen=
t
should be adopted as a WG document.  The adoption call will end on
December 14 2018.

Regards,
Roman and Frank

_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.o=
rg/mailman/listinfo/dots

_____________=
__________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.o=
rg/mailman/listinfo/dots
..

_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots
--000000000000376c40057f76b027-- From nobody Mon Jan 14 23:32:25 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 502AB130DCB for ; Mon, 14 Jan 2019 23:32:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.553 X-Spam-Level: X-Spam-Status: No, score=-11.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KvFtXFt6V01O for ; Mon, 14 Jan 2019 23:32:20 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20F06128B14 for ; Mon, 14 Jan 2019 23:32:19 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547537424; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:x-originating-ip: x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:authentication-results: x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=7jAYk5hApqrDd7Upfg0L2nB2mlZIpRgecsj0HI eb4rw=; b=ZwmMDGAi285ogF5bWF3ssM7eSvxQYdIoXjiW7RyA zv+DMhSmOBg//xH+kMo8vrnjFZjxOT3IH3tUyCsU5jc4VDOUrz EROQwq4hHAX4jeqCvscfx7cnjio51jiu26LZtXZclLTqyS/0+d 0q6k5xibjYFGyPE2EOfQ/q06OIBYlZ8= Received: from DNVEXAPP1N04.corpzone.internalzone.com (DNVEXAPP1N04.corpzone.internalzone.com [10.44.48.88]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 7b8f_fc76_af756d6b_558c_4dec_b906_0b925a195c1d; Tue, 15 Jan 2019 01:30:23 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 15 Jan 2019 00:28:12 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Tue, 15 Jan 2019 00:28:12 -0700 Received: from NAM05-BY2-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 15 Jan 2019 00:28:12 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2997.namprd16.prod.outlook.com (20.178.235.219) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Tue, 15 Jan 2019 07:28:10 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Tue, 15 Jan 2019 07:28:10 +0000 From: "Konda, Tirumaleswar Reddy" To: Daniel Migault , Flemming Andreasen CC: Roman Danyliw , "dots@ietf.org" Thread-Topic: [Dots] Call for adoption on draft-boucadair-dots-server-discovery Thread-Index: AdSI+mzom/yrMKu/SJm1ohZrl+sYtAfU6q3gAPglxQAAFMBEAAAHv+SQ Date: Tue, 15 Jan 2019 07:28:10 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> <0b23b46d-2a41-eb04-3763-190a4448510f@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action x-originating-ip: [185.221.69.46] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2997; 6:T/S98bHNEGM05A2exGbmO+Zk2vp4aqkE7I+cfajsklTUDHuvBZzYyASz6SnbonPwvyjmsc1YVADjFbSUo5/nCEDGf8Xezfamh34fc34Cv3/S05ZZ2CV5PDLFuL3tmIyjuwy7TTiNXVHxGLqj6w90uoG8WzObpQWoR+YWKJtvfnfDHxo2ZtMSeQ3NcLTcmWTZkBbxX4Md2aHMCTAxiStgypBaVyr3U8i1/lLlCDgnpLbhIubEE8INkH1N1+6UxyTq7fk/Dcwh9ZXsCA/iO7Oi1SgBgbaMaHgKWooNd3Q8L+ZyepeDHwRpG6eBbmoJ5QapUUjTjSlMEnzXmJIyIbsEDznKOPKPvFK8j4/EUiP58S0L4niKd+cNCe7/XaSDPn3Na+ApkIsKu8kKBo+YVO6IOe80eDPfY8QDbLU6qaFvtiNvtwNXyaAucAu9CI0t6xMrN3H/ns5qVpQ8ugkp257SPw==; 5:cv9cyCHr2A2CdWAb1K/JnQmpqJQPqWukWzsrq3Ktb9Zo3jHfTLU16OsF00ee8wM0KQqkrzje9+TN9/e7HZ/M/VfWbeQ84qVUayGZp4ujuHuhVRnrExOYzHFx9J4URAFuxS1bzK8GcRL2sVUQpWM6HMAoUNGKxlgOHQedmDgQU5l1hzTvMj6ngYKmCqTiJDXqpyJSIP3g3146dLipNYlxSw==; 7:cvmsxgpCD/IuehAS4iGmzjMYPpRKHu5VLM414cSHkUP7piL8sVbiiOn6Rr4ZfGdM/y9m4GDH45FC2PROj1x2u2HBwzoZwuUanFREp1FkHvB6fAx/xWOrk0aPFNjJ1bSK9BaynahlvAgZJx/VY+bGkQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 4de25877-d081-40a6-441a-08d67abb0059 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2997; x-ms-traffictypediagnostic: BYAPR16MB2997: x-microsoft-antispam-prvs: x-forefront-prvs: 0918748D70 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(376002)(396003)(136003)(39860400002)(346002)(32952001)(13464003)(189003)(199004)(26005)(53546011)(6346003)(102836004)(229853002)(53936002)(6506007)(446003)(966005)(11346002)(476003)(236005)(186003)(9686003)(54896002)(6306002)(74316002)(478600001)(4326008)(5660300001)(25786009)(66066001)(86362001)(2906002)(6246003)(76176011)(14454004)(6436002)(7696005)(72206003)(790700001)(7736002)(6116002)(3846002)(33656002)(8676002)(105586002)(99286004)(106356001)(316002)(110136005)(54906003)(97736004)(71200400001)(80792005)(606006)(71190400001)(8936002)(68736007)(9326002)(55016002)(81156014)(81166006)(256004)(5024004)(14444005)(93886005)(486006)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2997; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 886gSn8Hmhcb/O7iFa0ELjeH7INFscMkRwSSHHwJrWcgFUBymRm/eRGzrNnfFXOnmCmB1iWJHX1RYjL/41ezheeRQh/bQMskPCcnda3FMMAkypIZ2s5wHWmcPvQQoNPIl4WAgrVdYtc2zYf1oQton39FsaaoZ7DOAXieARIFNGAfnhrAu0bpgGZy/rWnODSUDbXJ6dzMbiQapiX9Xtdb7mFg5IHh9MUKgfFJwPGe7SahVJCsKnabn5+Wdvc389KabYaUMQLBNG8BJk2fvSc2gnS/9XPJMcW53/I2mvoPmLTiAEuGxMFQPwABIiol2FoTcNhWha9ZMRmCW8Y/9utjPjheHrNfTaBEn0Htejs8HRQMpLj4iKtM3s9dvrHjVT4TlLEpsWXrJ1iae/uX/S0ffLjIklhVnrbQmDPUHX6W/9w= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BYAPR16MB2790246424483E108EFFBBD7EA810BYAPR16MB2790namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 4de25877-d081-40a6-441a-08d67abb0059 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jan 2019 07:28:10.1055 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2997 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6460> : inlines <6994> : streams <1810130> : uri <2780147> Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jan 2019 07:32:24 -0000 --_000_BYAPR16MB2790246424483E108EFFBBD7EA810BYAPR16MB2790namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGFuaWVsLA0KDQpBZnRlciB0aGUgZGlzY292ZXJ5IG9mIHRoZSBET1RTIHNlcnZlciwgdGhl IERPVFMgY2xpZW50IG11c3QgYXV0aGVudGljYXRlIHRoZSBET1RTIHNlcnZlciBhbmQgdmljZS12 ZXJzYS4gSWYgdGhlIERPVFMgYWdlbnRzIGNhbm5vdCBtdXR1YWxseSBhdXRoZW50aWNhdGUgZWFj aCBvdGhlciwgdGhlIGRpc2NvdmVyeSBtZWNoYW5pc20gaXMgb2Ygbm8gdXNlLg0KDQoNClRoZSBv bmx5IHdheSB0byBhdXRvbWF0ZSB0aGUgZGlzY292ZXJ5IG9mIERPVFMgc2VydmVyIGFuZCBhdXRv bWF0aWNhbGx5IGNvbmZpZ3VyZSB0aGUgZXhwbGljaXQgdHJ1c3QgYW5jaG9yIHN0b3JlIGZvciB0 aGUgYXR0YWNoZWQgZG9tYWluIG9uIHRoZSBET1RTIGNsaWVudCBpcyB0byB1c2UgQlJTS0kgKHNl ZSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hbmltYS1ib290c3RyYXBw aW5nLWtleWluZnJhLTE3KSwgdXNpbmcgQlJTS0kgdGhlIGRldmljZSAoY28tbG9jYXRlZCB3aXRo IERPVFMgY2xpZW50KSB3b3VsZCBoYXZlIGFscmVhZHkgbGVhcm5lZCBhbmQgdmFsaWRhdGVkIHRo ZSBuZXR3b3JrIGRvbWFpbiBuYW1lLCBhbmQgY2FuIHVzZSBETlMtU0QgdG8gZGlzY292ZXIgdGhl IERPVFMgc2VydmVyLg0KDQoNCg0KRnVydGhlciwgUy1OQVBUUiBsb29rdXAgaGVscHMgcHJvdmlz aW9uIHRoZSBwcmVmZXJyZWQgRE9UUyBzaWduYWwgY2hhbm5lbCB0cmFuc3BvcnQgcHJvdG9jb2wg Yi93IHRoZSBjbGllbnQgYW5kIHNlcnZlciwgYW5kIHRoZSBkZXN0aW5hdGlvbiBwb3J0IG9mIHRo ZSBET1RTIHNlcnZlci4NCg0KDQoNCkkgZG9u4oCZdCBzZWUgdGhlIG5lZWQgdG8gc3VwcG9ydCBt RE5TIGFuZCDigJwubG9jYWzigJ0gb3Ig4oCcLmhvbWUuYXByYeKAnS4NCg0KDQpDaGVlcnMsDQot VGlydQ0KDQpGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBE YW5pZWwgTWlnYXVsdA0KU2VudDogVHVlc2RheSwgSmFudWFyeSAxNSwgMjAxOSA4OjU0IEFNDQpU bzogRmxlbW1pbmcgQW5kcmVhc2VuIDxmYW5kcmVhc0BjaXNjby5jb20+DQpDYzogUm9tYW4gRGFu eWxpdyA8cmRkQGNlcnQub3JnPjsgZG90c0BpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEb3RzXSBD YWxsIGZvciBhZG9wdGlvbiBvbiBkcmFmdC1ib3VjYWRhaXItZG90cy1zZXJ2ZXItZGlzY292ZXJ5 DQoNCg0KQ0FVVElPTjogRXh0ZXJuYWwgZW1haWwuIERvIG5vdCBjbGljayBsaW5rcyBvciBvcGVu IGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhl IGNvbnRlbnQgaXMgc2FmZS4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K SSBzdXBwb3J0IHRoZSBhZG9wdGlvbiBvZiB0aGUgZHJhZnQuDQoNCldoaWxlIHRoaXMgc2hvdWxk IG5vdCBwcmV2ZW50IHRoZSBhZG9wdGlvbiwgSSB3b3VsZCBhdm9pZCBtRE5TIGFuZCBwcmVmZXIg dGhlIHVzZSBvZiBTRCB3aXRoIHVuaWNhc3QgRE5TLiBGb3IgaG9tZW5ldCwgLmxvY2FsIHNob3Vs ZCBiZSByZXBsYWNlZCBieSBob21lLmFycGEuICBJIGFtIG5vdCBzdXJlIE5BUFRSIHNvbHV0aW9u IGNvdWxkIG5vdCBiZSByZXBsYWNlZCBieSBETlMtU0QgYXMgd2VsbC4gSSBhbSBoYXBweSB0byBs b29rIGF0IHRoZXNlIGRpc2N1c3Npb25zLg0KDQpZb3VycywNCkRhbmllbA0KDQoNCk9uIE1vbiwg SmFuIDE0LCAyMDE5IGF0IDEyOjI5IFBNIEZsZW1taW5nIEFuZHJlYXNlbiA8ZmFuZHJlYXNAY2lz Y28uY29tPG1haWx0bzpmYW5kcmVhc0BjaXNjby5jb20+PiB3cm90ZToNCkkgc3VwcG9ydCBXRyBh ZG9wdGlvbiBvZiB0aGlzIGRyYWZ0Lg0KDQpUaGFua3MNCg0KLS0gRmxlbW1pbmcNCk9uIDEvOS8x OSAyOjE3IFBNLCBSb21hbiBEYW55bGl3IHdyb3RlOg0KDQpIZWxsbyENCg0KDQoNCkV4Y2x1ZGlu ZyBzdXBwb3J0IGZyb20gdGhlIGRyYWZ0IGF1dGhvcnMsIHRoZSBpbnRlcmVzdCBpbiBhZG9wdGlv biAob3IgYW55IHJlc3BvbnNlKSB3YXMgbG93IG9uIHRoZSBsaXN0IChvbmUpIGFuZCBhbHNvIGF0 IElFVEYgMTAzLiAgVGhlIHByZXZpb3VzIGRpc2N1c3Npb24gYXJvdW5kIHRoaXMgZHJhZnQgd2Fz IG1vcmUgc3Bpcml0ZWQuICBNeSBjb25jZXJuIGlzIHRoYXQgdGhpcyBjYWxsIG1heSBoYXZlIGJl ZW4gbG9zdCBpbiB0aGUgZW5kIG9mIHllYXIgaG9saWRheXMuICBUbyB0aGF0IGVuZCwgSSdtIGV4 dGVuZGluZyB0aGUgY2FsbCBmb3IgYWRvcHRpb24uDQoNCg0KDQpQbGVhc2UgcHJvdmlkZSBmZWVk YmFjayB0byB0aGUgbGlzdC9jaGFpcnMgaWYgeW91IGJlbGlldmUgdGhhdCB0aGlzIGRvY3VtZW50 IHNob3VsZCBiZSBhZG9wdGVkIGFzIGEgV0cgZG9jdW1lbnQuICBUaGlzIGV4dGVuZGVkIGFkb3B0 aW9uIGNhbGwgd2lsbCBlbmQgb24gVHVlc2RheSwgSmFudWFyeSAyMi4NCg0KDQoNClJlZ2FyZHMs DQoNClJvbWFuIGFuZCBGcmFuaw0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCg0K RnJvbTogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFJv bWFuIERhbnlsaXcNCg0KU2VudDogRnJpZGF5LCBOb3ZlbWJlciAzMCwgMjAxOCA1OjIyIFBNDQoN ClRvOiBkb3RzQGlldGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KDQpTdWJqZWN0OiBbRG90 c10gQ2FsbCBmb3IgYWRvcHRpb24gb24gZHJhZnQtYm91Y2FkYWlyLWRvdHMtc2VydmVyLWRpc2Nv dmVyeQ0KDQoNCg0KSGVsbG8hDQoNCg0KDQpUaGlzIGlzIHRoZSBzdGFydCBvZiBhIHR3byB3ZWVr IGNhbGwgZm9yIGlucHV0IG9uIHRoZSBXRyBhZG9wdGlvbiBvZiB0aGUNCg0KZG9jdW1lbnQ6DQoN Cg0KDQpkcmFmdC1ib3VjYWRhaXItZG90cy1zZXJ2ZXItZGlzY292ZXJ5DQoNCmh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1ib3VjYWRhaXItZG90cy1zZXJ2ZXItZGlzY292ZXJ5LTA1 DQoNCg0KDQpUaGUgZG9jdW1lbnQgaGFzIGJlZW4gcHJlc2VudGVkIGFuZCBkaXNjdXNzZWQgYXQg SUVURiAxMDMsIElFVEYgMTAwIGFuZA0KDQpJRVRGIDk5OyAgYW5kIHJldmlzaW9ucyBoYXZlIGJl ZW4gbWFkZSBiYXNlZCBvbiBXRyBmZWVkYmFjay4gIERpc2N1c3Npb24NCg0Kb2YgYWRvcHRpb24g b2YgdGhpcyBkcmFmdCB3YXMgcHJldmlvdXNseSBkZWZlcnJlZCBwZW5kaW5nIHN1Ym1pc3Npb24g b2YgdGhlDQoNCnNpZ25hbCBkcmFmdCBmb3IgcHVibGljYXRpb24gKHdoaWNoIG9jY3VycmVkIGlu IFNlcHRlbWJlciAyMDE4KS4NCg0KDQoNCkF0IHRoZSBJRVRGIDEwMyBtZWV0aW5nLCB0aGVyZSB3 ZXJlIG5vdCBtYW55IHBhcnRpY2lwYW50cyB3aG8gaGFkIHJlYWQgdGhlDQoNCmRyYWZ0Lg0KDQoN Cg0KUGxlYXNlIHByb3ZpZGUgZmVlZGJhY2sgdG8gdGhlIGxpc3QvY2hhaXJzIGlmIHlvdSBiZWxp ZXZlIHRoYXQgdGhpcyBkb2N1bWVudA0KDQpzaG91bGQgYmUgYWRvcHRlZCBhcyBhIFdHIGRvY3Vt ZW50LiAgVGhlIGFkb3B0aW9uIGNhbGwgd2lsbCBlbmQgb24NCg0KRGVjZW1iZXIgMTQgMjAxOC4N Cg0KDQoNClJlZ2FyZHMsDQoNClJvbWFuIGFuZCBGcmFuaw0KDQoNCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRG90cyBtYWlsaW5nIGxpc3QNCg0K RG90c0BpZXRmLm9yZzxtYWlsdG86RG90c0BpZXRmLm9yZz4NCg0KaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQoNCkRvdHMgbWFpbGluZyBsaXN0DQoNCkRvdHNAaWV0Zi5vcmc8 bWFpbHRvOkRvdHNAaWV0Zi5vcmc+DQoNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vZG90cw0KDQouLi4NCg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQpEb3RzIG1haWxpbmcgbGlzdA0KRG90c0BpZXRmLm9yZzxtYWlsdG86 RG90c0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90 cw0K --_000_BYAPR16MB2790246424483E108EFFBBD7EA810BYAPR16MB2790namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQg MyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3Jt YWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7 DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb1BsYWluVGV4dCwgbGku TXNvUGxhaW5UZXh0LCBkaXYuTXNvUGxhaW5UZXh0DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdp bi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Ijt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJ e21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCglt YXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1s ZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhU TUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5 bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvbnNvbGFzO30NCnNw YW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5Q bGFpblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1zby1z dHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCI7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxl LXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5I aSBEYW5pZWwsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFmdGVyIHRoZSBkaXNjb3Zlcnkgb2Yg dGhlIERPVFMgc2VydmVyLCB0aGUgRE9UUyBjbGllbnQgbXVzdCBhdXRoZW50aWNhdGUgdGhlIERP VFMgc2VydmVyIGFuZCB2aWNlLXZlcnNhLiBJZiB0aGUgRE9UUyBhZ2VudHMgY2Fubm90IG11dHVh bGx5IGF1dGhlbnRpY2F0ZSBlYWNoIG90aGVyLCB0aGUgZGlzY292ZXJ5IG1lY2hhbmlzbSBpcyBv ZiBubyB1c2UuJm5ic3A7DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+VGhlIG9ubHkgd2F5 IHRvIGF1dG9tYXRlIHRoZSBkaXNjb3Zlcnkgb2YgRE9UUyBzZXJ2ZXIgYW5kIGF1dG9tYXRpY2Fs bHkgY29uZmlndXJlIHRoZSBleHBsaWNpdCB0cnVzdCBhbmNob3Igc3RvcmUgZm9yIHRoZSBhdHRh Y2hlZCBkb21haW4gb24gdGhlIERPVFMgY2xpZW50IGlzIHRvIHVzZSBCUlNLSSAoc2VlIGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWFuaW1hLWJvb3RzdHJhcHBpbmcta2V5 aW5mcmEtMTcpLA0KIHVzaW5nIEJSU0tJIHRoZSBkZXZpY2UgKGNvLWxvY2F0ZWQgd2l0aCBET1RT IGNsaWVudCkgd291bGQgaGF2ZSBhbHJlYWR5IGxlYXJuZWQgYW5kIHZhbGlkYXRlZCB0aGUgbmV0 d29yayBkb21haW4gbmFtZSwgYW5kIGNhbiB1c2UgRE5TLVNEIHRvIGRpc2NvdmVyIHRoZSBET1RT IHNlcnZlci4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5GdXJ0aGVyLCBTLU5BUFRS IGxvb2t1cCBoZWxwcyBwcm92aXNpb24gdGhlIHByZWZlcnJlZCBET1RTIHNpZ25hbCBjaGFubmVs IHRyYW5zcG9ydCBwcm90b2NvbCBiL3cgdGhlIGNsaWVudCBhbmQgc2VydmVyLCBhbmQgdGhlIGRl c3RpbmF0aW9uIHBvcnQgb2YgdGhlIERPVFMgc2VydmVyLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij5JIGRvbuKAmXQgc2VlIHRoZSBuZWVkIHRvIHN1cHBvcnQgbUROUyBhbmQg4oCcLmxv Y2Fs4oCdIG9yIOKAnC5ob21lLmFwcmHigJ0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNo ZWVycyw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi1UaXJ1PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzow aW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IERvdHMgJmx0O2RvdHMtYm91bmNlc0BpZXRm Lm9yZyZndDsgPGI+T24gQmVoYWxmIE9mIDwvYj4NCkRhbmllbCBNaWdhdWx0PGJyPg0KPGI+U2Vu dDo8L2I+IFR1ZXNkYXksIEphbnVhcnkgMTUsIDIwMTkgODo1NCBBTTxicj4NCjxiPlRvOjwvYj4g RmxlbW1pbmcgQW5kcmVhc2VuICZsdDtmYW5kcmVhc0BjaXNjby5jb20mZ3Q7PGJyPg0KPGI+Q2M6 PC9iPiBSb21hbiBEYW55bGl3ICZsdDtyZGRAY2VydC5vcmcmZ3Q7OyBkb3RzQGlldGYub3JnPGJy Pg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRG90c10gQ2FsbCBmb3IgYWRvcHRpb24gb24gZHJhZnQt Ym91Y2FkYWlyLWRvdHMtc2VydmVyLWRpc2NvdmVyeTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4N Cjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0iMSIgY2VsbHNwYWNpbmc9IjMi IGNlbGxwYWRkaW5nPSIwIiBzdHlsZT0iYmFja2dyb3VuZDojRjNGRjMzO2JvcmRlcjpzb2xpZCAj OUI5QTg3IDEuNXB0Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7cGFk ZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8cD48c3Ryb25nPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5QjhCM0UiPkNB VVRJT048L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzlCOEIzRSI+Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+IEV4dGVy bmFsIGVtYWlsLiBEbyBub3QgY2xpY2sgbGlua3Mgb3Igb3Blbg0KIGF0dGFjaG1lbnRzIHVubGVz cyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFi bGU+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFs aWduOmNlbnRlciI+DQo8aHIgc2l6ZT0iMyIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBzdXBw b3J0IHRoZSBhZG9wdGlvbiBvZiB0aGUgZHJhZnQuIDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XaGlsZSB0aGlzIHNob3VsZCBub3QgcHJldmVu dCB0aGUgYWRvcHRpb24sIEkgd291bGQgYXZvaWQgbUROUyBhbmQgcHJlZmVyIHRoZSB1c2Ugb2Yg U0Qgd2l0aCB1bmljYXN0IEROUy4gRm9yIGhvbWVuZXQsIC5sb2NhbCBzaG91bGQgYmUgcmVwbGFj ZWQgYnkgaG9tZS5hcnBhLiZuYnNwOyBJIGFtIG5vdCBzdXJlIE5BUFRSIHNvbHV0aW9uIGNvdWxk IG5vdCBiZSByZXBsYWNlZCBieSBETlMtU0QgYXMgd2VsbC4gSSBhbSBoYXBweQ0KIHRvIGxvb2sg YXQgdGhlc2UgZGlzY3Vzc2lvbnMuIDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5Zb3VycywgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5EYW5pZWwmbmJzcDsgPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1vbiwgSmFuIDE0 LCAyMDE5IGF0IDEyOjI5IFBNIEZsZW1taW5nIEFuZHJlYXNlbiAmbHQ7PGEgaHJlZj0ibWFpbHRv OmZhbmRyZWFzQGNpc2NvLmNvbSI+ZmFuZHJlYXNAY2lzY28uY29tPC9hPiZndDsgd3JvdGU6PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFy Z2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5JIHN1cHBvcnQgV0cgYWRvcHRpb24g b2YgdGhpcyBkcmFmdC4NCjxicj4NCjxicj4NClRoYW5rcyA8YnI+DQo8YnI+DQotLSBGbGVtbWlu ZyA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiAxLzkvMTkg MjoxNyBQTSwgUm9tYW4gRGFueWxpdyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 cHJlPkhlbGxvITxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+ DQo8cHJlPkV4Y2x1ZGluZyBzdXBwb3J0IGZyb20gdGhlIGRyYWZ0IGF1dGhvcnMsIHRoZSBpbnRl cmVzdCBpbiBhZG9wdGlvbiAob3IgYW55IHJlc3BvbnNlKSB3YXMgbG93IG9uIHRoZSBsaXN0IChv bmUpIGFuZCBhbHNvIGF0IElFVEYgMTAzLiZuYnNwOyBUaGUgcHJldmlvdXMgZGlzY3Vzc2lvbiBh cm91bmQgdGhpcyBkcmFmdCB3YXMgbW9yZSBzcGlyaXRlZC4mbmJzcDsgTXkgY29uY2VybiBpcyB0 aGF0IHRoaXMgY2FsbCBtYXkgaGF2ZSBiZWVuIGxvc3QgaW4gdGhlIGVuZCBvZiB5ZWFyIGhvbGlk YXlzLiZuYnNwOyBUbyB0aGF0IGVuZCwgSSdtIGV4dGVuZGluZyB0aGUgY2FsbCBmb3IgYWRvcHRp b24uIDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJl PlBsZWFzZSBwcm92aWRlIGZlZWRiYWNrIHRvIHRoZSBsaXN0L2NoYWlycyBpZiB5b3UgYmVsaWV2 ZSB0aGF0IHRoaXMgZG9jdW1lbnQgc2hvdWxkIGJlIGFkb3B0ZWQgYXMgYSBXRyBkb2N1bWVudC4m bmJzcDsgVGhpcyBleHRlbmRlZCBhZG9wdGlvbiBjYWxsIHdpbGwgZW5kIG9uIFR1ZXNkYXksIEph bnVhcnkgMjIuPG86cD48L286cD48L3ByZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4N CjxwcmU+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5Sb21hbiBhbmQgRnJhbms8bzpw PjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cHJlPi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tPG86cD48L286cD48L3ByZT4NCjxwcmU+RnJvbTogRG90cyBb PGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPm1h aWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgUm9tYW4gRGFueWxp dzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPlNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMzAsIDIwMTgg NToyMiBQTTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPlRvOiA8YSBocmVmPSJtYWlsdG86ZG90c0Bp ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmRvdHNAaWV0Zi5vcmc8L2E+PG86cD48L286cD48L3By ZT4NCjxwcmU+U3ViamVjdDogW0RvdHNdIENhbGwgZm9yIGFkb3B0aW9uIG9uIGRyYWZ0LWJvdWNh ZGFpci1kb3RzLXNlcnZlci1kaXNjb3Zlcnk8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZu YnNwOzwvbzpwPjwvcHJlPg0KPHByZT5IZWxsbyE8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpw PiZuYnNwOzwvbzpwPjwvcHJlPg0KPHByZT5UaGlzIGlzIHRoZSBzdGFydCBvZiBhIHR3byB3ZWVr IGNhbGwgZm9yIGlucHV0IG9uIHRoZSBXRyBhZG9wdGlvbiBvZiB0aGU8bzpwPjwvbzpwPjwvcHJl Pg0KPHByZT5kb2N1bWVudDo8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpw PjwvcHJlPg0KPHByZT5kcmFmdC1ib3VjYWRhaXItZG90cy1zZXJ2ZXItZGlzY292ZXJ5PG86cD48 L286cD48L3ByZT4NCjxwcmU+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWJvdWNhZGFpci1kb3RzLXNlcnZlci1kaXNjb3ZlcnktMDUiIHRhcmdldD0iX2JsYW5rIj5o dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtYm91Y2FkYWlyLWRvdHMtc2VydmVyLWRp c2NvdmVyeS0wNTwvYT48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwv cHJlPg0KPHByZT5UaGUgZG9jdW1lbnQgaGFzIGJlZW4gcHJlc2VudGVkIGFuZCBkaXNjdXNzZWQg YXQgSUVURiAxMDMsIElFVEYgMTAwIGFuZDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPklFVEYgOTk7 Jm5ic3A7IGFuZCByZXZpc2lvbnMgaGF2ZSBiZWVuIG1hZGUgYmFzZWQgb24gV0cgZmVlZGJhY2su Jm5ic3A7IERpc2N1c3Npb248bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5vZiBhZG9wdGlvbiBvZiB0 aGlzIGRyYWZ0IHdhcyBwcmV2aW91c2x5IGRlZmVycmVkIHBlbmRpbmcgc3VibWlzc2lvbiBvZiB0 aGU8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5zaWduYWwgZHJhZnQgZm9yIHB1YmxpY2F0aW9uICh3 aGljaCBvY2N1cnJlZCBpbiBTZXB0ZW1iZXIgMjAxOCkuPG86cD48L286cD48L3ByZT4NCjxwcmU+ PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+QXQgdGhlIElFVEYgMTAzIG1lZXRpbmcsIHRo ZXJlIHdlcmUgbm90IG1hbnkgcGFydGljaXBhbnRzIHdobyBoYWQgcmVhZCB0aGU8bzpwPjwvbzpw PjwvcHJlPg0KPHByZT5kcmFmdC48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNwOzwv bzpwPjwvcHJlPg0KPHByZT5QbGVhc2UgcHJvdmlkZSBmZWVkYmFjayB0byB0aGUgbGlzdC9jaGFp cnMgaWYgeW91IGJlbGlldmUgdGhhdCB0aGlzIGRvY3VtZW50PG86cD48L286cD48L3ByZT4NCjxw cmU+c2hvdWxkIGJlIGFkb3B0ZWQgYXMgYSBXRyBkb2N1bWVudC4mbmJzcDsgVGhlIGFkb3B0aW9u IGNhbGwgd2lsbCBlbmQgb248bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5EZWNlbWJlciAxNCAyMDE4 LjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8cHJlPlJl Z2FyZHMsPG86cD48L286cD48L3ByZT4NCjxwcmU+Um9tYW4gYW5kIEZyYW5rPG86cD48L286cD48 L3ByZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxwcmU+X19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpwPjwvcHJlPg0KPHByZT5E b3RzIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxhIGhyZWY9Im1haWx0bzpE b3RzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+RG90c0BpZXRmLm9yZzwvYT48bzpwPjwvbzpw PjwvcHJlPg0KPHByZT48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2RvdHMiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2RvdHM8L2E+PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+X19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpwPjwv cHJlPg0KPHByZT5Eb3RzIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxhIGhy ZWY9Im1haWx0bzpEb3RzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+RG90c0BpZXRmLm9yZzwv YT48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2RvdHMiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2RvdHM8L2E+PG86cD48L286cD48L3ByZT4NCjxwcmU+Li4uPG86 cD48L286cD48L3ByZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjwvYmxvY2txdW90 ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXzxicj4NCkRvdHMgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkRv dHNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5Eb3RzQGlldGYub3JnPC9hPjxicj4NCjxhIGhy ZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cyIgdGFyZ2V0PSJf YmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90czwvYT48bzpw PjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BYAPR16MB2790246424483E108EFFBBD7EA810BYAPR16MB2790namp_-- From nobody Tue Jan 15 16:14:19 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6171126F72; Tue, 15 Jan 2019 16:14:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UAP2y5rHzIxs; Tue, 15 Jan 2019 16:14:12 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800099.outbound.protection.outlook.com [40.107.80.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21B3C126C01; Tue, 15 Jan 2019 16:14:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wEbL0prqXqxAdtojz/dN+HyM2eg8oCT+t8YT4/u3TMw=; b=i/yAFtee3/unqLT6ExnlktxnGuerNfEacfHwwMBtm1/7ht29zJf1T/35T8jtrBXPysdTZrMxnUUjP1ivynEXDdCbq4ZIQBefPg/EieHqJBScy8t/O6fHYighUmcgTc/xFerX9o13Fg9izGiRMpSQ5dnTkboHN/bIeH9+s3MnaI0= Received: from BL0PR0102CA0071.prod.exchangelabs.com (2603:10b6:208:25::48) by BN3PR01MB2019.prod.exchangelabs.com (2a01:111:e400:7bb1::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Wed, 16 Jan 2019 00:14:09 +0000 Received: from BY2NAM03FT042.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::205) by BL0PR0102CA0071.outlook.office365.com (2603:10b6:208:25::48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1516.19 via Frontend Transport; Wed, 16 Jan 2019 00:14:09 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT042.mail.protection.outlook.com (10.152.85.47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1471.13 via Frontend Transport; Wed, 16 Jan 2019 00:14:08 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0G0E4W5017819 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 15 Jan 2019 19:14:07 -0500 Date: Tue, 15 Jan 2019 18:14:04 -0600 From: Benjamin Kaduk To: CC: Message-ID: <20190116001404.GC91727@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(136003)(346002)(376002)(39860400002)(396003)(2980300002)(51444003)(53434003)(199004)(189003)(316002)(786003)(8676002)(126002)(476003)(26005)(336012)(186003)(50466002)(16586007)(97756001)(53416004)(6666004)(106466001)(1076003)(356004)(36906005)(2351001)(55016002)(305945005)(8936002)(106002)(246002)(104016004)(23726003)(47776003)(58126008)(53946003)(2906002)(478600001)(33656002)(86362001)(486006)(46406003)(30864003)(6916009)(75432002)(88552002)(5660300001)(956004)(14444005)(426003)(7696005)(26826003)(450100002)(4326008)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR01MB2019; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-Microsoft-Exchange-Diagnostics: 1; BY2NAM03FT042; 1:YXfTvAPJ9GsxJB4Wd+ChN3YrxNPOAk9Js+ESqQ7mcv0bM5RH0B4AOF8xjG+9moxo3NAnOXBQ9ngef2pBwAgEmdjK/ezQQ1/PsZwaT3rjBK2F0ySYSLGBIi+oqwEQ/BZQ X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: b5bcb249-8eec-4d5e-20ac-08d67b4788cf X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:BN3PR01MB2019; X-Microsoft-Exchange-Diagnostics: 1; BN3PR01MB2019; 3:rr1mxOW1WyRoNkfMAX9uTTpItxY/h2Bfuio88vF87xyfmqRNZs9Ap2w6AGla3qCiU7t0Q28NRcurB3q41CbLbhtPRByTTqmplbIZJ4n3V4NiuCSX7Tgp0mQuY7/tma9KNW1pXiR0dX7+zT+ACXZioX/gahZnpp4um6mx7Emi+oy9W97aGY9VjzRgJlXhIAMQROkT0QsZlUfz7qWN35H6ZSGNYcnaXKy+YdVJWQg2xwrMN2AvBHeAByQqYu0zlm51bDsl2/Sirc50TtkI/4aNDmDrQICOehOTpT2aLw5LiFkZFY24OzFGHR96kcFqWKzK63CjijVQhyZ+PMRP12P6oXvYfunsnQhNe9jAldNiEu18gzN3kSwDRAqcVLIvlSMN; 25:GIZayOBntkjCRGvTLABIVOjGQEc5OTER0wKksdFwhRyzDxUamGekHHH2f0hOFKIC8AoOvLlaP6YDye+tvDDFKgfqFAqBGOlyNxksiAIE/R/mJ6o6GeDIZUrmTbS/GfzMBzO3HBbToZ/5kLQvhGzT4FCvg7gUZ8GPWr2RrnnVm2BmXBvxwQsdTA5vmEB1atZc+n+TShGQZTEqURAj4LJ5LrM240uRRi8krvcZmFBmVi6L4SHjumwzrj8eXZ5UG0+he+P+q29TrqPdUwesUPlLIqgvaUNYHQMNGeDahzf/HHD7V/T7Ij2YaICzyT0zusRtnTHQt4j6UYa91Qkdzco1FQ== X-MS-TrafficTypeDiagnostic: BN3PR01MB2019: X-Microsoft-Exchange-Diagnostics: 1; BN3PR01MB2019; 31:kPxfOphLQDcOQF1iZeAMNIL0WD9DyELVRxBj9VRkYXBT7IOzAtLLlm0V4WciWIhguFd1wk4Rbw7kaLcxGc5nwPj8xopUNvI4CQgBEBmKIRXaT/jX46IKeWH+o8Q+zGMtsZNhP+88u4qvxDM9Kf3A08bBZMjn66Pj9OgGj5jTFZY7Gc94IYsjmBQ7xPMDxJwnTklVKgQUajKjXMRDj566he65CdwuvGC1Bx7r4ZnO6VE=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; BN3PR01MB2019; 4:Jp3rLiYPdZ9w5F/s0ty5Baip10o/93hNduzHPSUjEqKePbpB7FuWtt/FTn7J26Ntk1lMPh3oNLIa1brvY0ui252wnM0/FGtirMzOlgN2/ab5yK3jisdHnK1M2/Wqk810dDHgKUECXpSAcFmNmDpCRPyl/pOFIudp/0s7vdajyHql2D6IX2A8HKVhIWIe4bFlUPaXeIQbF7xn0r54+bzZLCNN8jj4RlugWZyNdQh9rFHq8gDhAuRAnvwZ/6aM+9mv3z6HDqUG+m7uuPaCAEvc4ic6gT8JDTUMe4rkETAmjcqAmAO0UwYLLII1cG+/D1q0 X-Forefront-PRVS: 091949432C X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BN3PR01MB2019; 23:Qp8Nhga7Qh3NdcwswcgivBhwIoNTdt0CGsgqaigeP?= =?us-ascii?Q?AyXjlLJnLPCCTodSGYREIEnBijFmlWUVL/I8oViPGiVqFhxnT10I/k9+YIoo?= =?us-ascii?Q?rs5kCiuV+YwjUcKFVCoLEF3eP6SmsoqfBQ9ZyVsDSiQrbhBjJQGhNBTnMuwN?= =?us-ascii?Q?xCBKIIlE/PTgaZeBCUaohO0vbQqO5y+m03ZoQc4ARKaqCsCQp7JvQ0I9roQL?= =?us-ascii?Q?sUbmh0+COAI/aPst5Azmjyw/Ad8gjFcYK4jE1SltO+gVr6+OuWDH8PUhnLqj?= =?us-ascii?Q?uZkrzFZHBDC/eI3aFDZjwPdBfCx+WNLoLTHMPb4EEiQhi1sMo6sPLa/xaCKM?= =?us-ascii?Q?d+JLrj4qiuwNZKbT99ucq5Aq/d+8yr+kvEA74UWfFzrtUYf/EpHwfbFYeHju?= =?us-ascii?Q?Q6ems11LeErHUHfj5UNYYVxq3FoXZ7nUnwmN5yee7nOItSxm/LBa1bp2a0ut?= =?us-ascii?Q?8cIuklBMeslI2MqJyVbD/+Kidr2M//cK7nUSwv14SYn5Dl9LbnSmnFpVYIrp?= =?us-ascii?Q?Qg/rvZF58paUNn4ah5i7sVTAMtxmPMBx78FjkAlUeNHoiy6Cs+EcQm47WRwb?= =?us-ascii?Q?vzicoVdcW5j/adf4qkhHUZ+8q7cqSTlNno8cl8PqFTIdV5peCao9oo+rXz0E?= =?us-ascii?Q?fhLV6stJeNF+WYu+yTLWlepy2clxt4cYTPFdMMJNSmV5qGtk0vp7rcu0EXjB?= =?us-ascii?Q?qovEeIDqBLx0N6DQBg2L+iGSsaHk5PrwL6+HzhCKosittlX9/O1XHf5aBn1i?= =?us-ascii?Q?P0n1tFUlAEOHQA89y4PQqwYUODOsMyDeE1kMcLRqkzmzRB5lAj7LsfO4WjbJ?= =?us-ascii?Q?S88s+Y1XzHx0M7al7s72Zd4OH7m5mDxDrj4Zy6epUoYxO8b36/5cbf56pbgv?= =?us-ascii?Q?QFOqrCxy0Y8SAvWrKpRT3ZqBjDf1t+HwfgkSthhf3bWIfD02JKfnKhOipmOf?= =?us-ascii?Q?sYDKz7ljdbtU4rzjhr/M48moFeYY9QYM2kUKwQLn6w6G6SOGKGpGrku1gPoZ?= =?us-ascii?Q?za8XuLN0Exy5nuCPDxX9tVRpBCtnuAmdv4zFm6PWWDL8wdFy/yLU4nt3jzXz?= =?us-ascii?Q?pTeawl0BilFIDNRF062pErG2o7QGnraxdA3YglUnXgJcjPt3KhzEsonoAnvV?= =?us-ascii?Q?EFKpCIWTyMt+Y41P4XMBShzweT6D69EWCoNxkLKAV/ZKDOWtN/pgShMSefLG?= =?us-ascii?Q?vE6U+5pWCCgMbaHS8kKGUsFovEBR+4iYe5JnuDPfaFAAfdCLDcPCEeQQZwyY?= =?us-ascii?Q?3FR6qdrk9EuNTSPTJA=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: 9dJhUP77MQzI99yvZG/mdC/0cqOOfkcZowRp/DYq7RyKEuNwXaPlfGyq1d22b+2FM/YzsH2jYOLy2TR/2o4X45vuOd7AyemKhgnkGr2ql+sCUrg3o5Jh6J+cMuUrpTRbFSWaPPYMtkSCT0jBTdG5dVYqWdc1+AAtj0x4IozFlvY/HViocYgWHoTB5+TiRCYJhNQR52MSSXbLJNC370VzmXkGsrwJ7rJ2xDCVC16IaH6fsHxgqXC+aVffZ3iZpZLZ5zot4uWLeFUuzqoDUxkAx4hggfr/8D+JRd9RkgeP1GIDNsD4lyPAjtjyopep1wieDXO0/NRUiPWbk9KlIGr9sYOr1j39iGH7ratIU+W0LEOAmZqRF8lPhdSl7lpSIsyHwr5/IMiTH1trGnOa73qDwxV4lnm6rHmQum/GgqqBC4w= X-Microsoft-Exchange-Diagnostics: 1; BN3PR01MB2019; 6:+5FDwPAU1HGR7WTrO5yeri5ogxUD9qsP+zjTrNa+yhzUwx7/ZyE+wMkuP7SGPNWw7udvuprgXDW/D3xWX8eMglj3uyA3qtCbJ6G8+ZCCYQnfyOgI/JVekPxk9UMlBlRzhXSG5NbdJda/AClJLgPiMm61qcsuCSZsGOPZKcjX219OdX1kDUt0+ww3iBcUiHiWB21jUnenOYeFq5MsBWHcJkhL2/Zsqw+KMNIV7X7aYmOOU/Ngj3ZTzpDtoEex/ZhpQ1DFvHBoWNX8FrPr0Fn9VvTO3sRIcaSzTHia9A7s6QbmWYUZzv469txpne6hstvjiirwF3AF09RVEM+Yrh05x/tv7DqgqMhY2DzD1iVdjpPZYXqoLOkX59ICV9+D1Ix2rZkeApzlQTn5xoo8+scmwwHSnNLV4wCVx/3/hb+r2xvVYT55p00N3GFs12knk0JLOPa7IEYUvDWJg18dFrOsww==; 5:acNy83s7WnXC9eYrTAwCp5+ET+6ZXkmZ5jzuOGDnYX+jickzAirkBnLi+O2ERx6ZqSz3CpmVHqSQqoJ54Zlss2kI4x7eYwyNrQiOeI2vbYd40TO4oE3I65xO+DF1ZxL1e2NtKmhugdj21Ezhk9WwSvrboIzsA6LslrESYs7iLnG+XQXD3imvmGvv90EufxoGTbePc2YSQG4KC7dUqaqyIw==; 7:P4YzIhkWTL+6wSJTBtsw5I1dZY1JvCaW6Ukkn5Fl6T0BYhBMQb2aAxb8H8msT2K152SdvmeGWdjhtUYFKtGifetc8fbmU/R2xOGA5EySkIZbUn9cWdPuzoI0rN1c9wpWw0sNjKexk68ADbeFBMwlBQ== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jan 2019 00:14:08.4548 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b5bcb249-8eec-4d5e-20ac-08d67b4788cf X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR01MB2019 Archived-At: Subject: [Dots] AD review of draft-ietf-dots-signal-channel-25 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 00:14:17 -0000 AD review of -25. (Note that -26 is out already, but to preserve my sanity I am still using the section numbers from the -25. I took a quick look at the diff, and tried to remove comments that are no longer applicable, but probably missed some. This review is pretty long, but I think the document is actually in pretty good shape -- the length of review comments is just a normal frequency of rough edges multiplied by a long document. I will make a github pull request with some changes that I think are just editorial (but feel free to bring them up as discussion items if you are not sure that they are editorial, disagree with the changes, etc.) We should probably introduce (or avoid) the concept of "peace-time" (sometimes spelled without the hyphen) and perhaps the corresponding attack situation before using it. Section 1 I wasn't sure whether the RFC 4987 reference was supposed to be for what an ACK-flood is or the fact that it is CPU-exhausting or something else. (Searching for those terms in its text did not help me come to a conclusion.) We also talk about "DOTS servers" and "DOTS agents" in Section 1, before we've defined the terminology. But these two are sufficiently self-explanatory that it may be fine to leave them as-is. This protocol enables cooperation between DOTS agents to permit a highly-automated network defense that is robust, reliable, and secure. We should explain somewhere what we mean by "secure". (I guess, that the signal and data channels are integrity- and confidentiality-protected, and that changes in mitigation status are not made unless properly authorized.) Section 3 DOTS clients MAY alternatively support means to dynamically discover the ports used by their DOTS servers. [...] If we have some examples in mind of dynamic discovery protocols, it would be appropriate to provide informative references here. We should also have an informative reference for "Happy Eyeballs" (e.g., RFC 8305). From that standpoint, this document specifies a YANG module for representing DOTS mitigation scopes, DOTS signal channel session [...] Which standpoint? Representing these data as CBOR data is assumed to follow the rules in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with JSON/CBOR conversion rules in [RFC7049]. All parameters in the payload of the DOTS signal channel are mapped to CBOR types as specified in Section 6. How do I know which set of rules is in use? Are the two sets of rules equivalent and interoperable? DOTS agents MUST support GET, PUT, and DELETE CoAP methods. [...] As written, this applies to all agents (clients, servers, and proxies). Presumably this is intended, but I just wante to double-check -- sometimes it's okay to place weaker requirements on clients. In deployments where one or more translators (e.g., Traditional NAT [RFC3022], CGN [RFC6888], NAT64 [RFC6146], NPTv6 [RFC6296]) are enabled between the client's network and the DOTS server, DOTS signal channel messages forwarded to a DOTS server MUST NOT include internal IP addresses/prefixes and/or port numbers; external addresses/ prefixes and/or port numbers as assigned by the translator MUST be Do we want to give any examples of signal channel messages that might include internal addresses/prefixes? Such procedure is needed to avoid experiencing long connection delays. For example, if an IPv4 path to reach a DOTS server is found, but the DOTS server's IPv6 path is not working, a dual-stack DOTS client may experience a significant connection delay compared to an IPv4-only DOTS client. [...] There seems a bit of a mismatch between "found" and "not working". If the point is supposed to be that the client is going to try both IPv4 and IPv6 but the v6 path has issues and it would take the client's algorithm some extra time to choose to fall back to v4, then maybe "iv an IPv4 path to a DOTS server is functional and there is also an apparently present but non-functional IPv6 path to the same server"? These connection attempts are performed by the DOTS client when it initializes. The results of the Happy Eyeballs procedure are used by the DOTS client for sending its subsequent messages to the DOTS server. I see this is scoped to "when the client initializes", so I don't know whether it adds more or not to end with "for the duration of the DOTS session" or some similar scoping for the caching of the happy eyeballs results. client because there is no long delay before using IPv4 and TCP. The DOTS client repeats the mechanism to discover whether DOTS signal channel messages with DTLS over UDP becomes available from the DOTS server, so the DOTS client can migrate the DOTS signal channel from What would cause UDP to "become available"? Would this be a case like if there's a stateful NAT or where we need to actively apply some sort of NAT traversal? If so, do we want to list it as an example? (If it's a complicated scenario, it may not be worth listing an example, of course.) I'm not sure if we want to add some annotations to Figure 4 that (e.g.) the initial DTLS attempts do not need to be strictly ordered in the order presented, or to indicate which lines are retries. Section 4.4 GET: DOTS clients may use the GET method to subscribe to DOTS server status messages, or to retrieve the list of its mitigations maintained by a DOTS server (Section 4.4.2). I'm not really a canonical HTTP expert, but I suspect that using GET to "subscribe" will raise some eyebrows at later stages of review. Maybe we should just leave it as-is and wait for such review to arrive, though, rather than trying to do something preemptively. I don't know if this is the proper section to talk about it, but we should probably have some text justifying the use of application-layer acknowledgment as opposed to just using Confirmable CoAP messages. Section 4.4.1 If Figure 5 is going to use actual/example values for cuid and mid, then I'd suggest also using actual/example values for the JSON fields (instead of "integer" and "string" and such). cuid: Stands for Client Unique Identifier. A globally unique identifier that is meant to prevent collisions among DOTS clients, especially those from the same domain. It MUST be generated by DOTS clients. In order to get global uniqueness we either need sufficient randomness or a hierarchical allocation strategy. Since we recommend a strategy that involves hashing the (public) client certificate, we may also want to note that this value does not need to be unguessable. If a random allocation is possible, I suggest giving guidance on how many random bits must be used to sufficiently ensure global uniqueness (128 might be enough). The output of the cryptographic hash algorithm is truncated to 16 bytes; truncation is done by stripping off the final 16 bytes. The truncated output is base64url encoded. side note: Truncation to 128 bits reduces the collision resistance to 64-bit strength, though this is probably acceptable in this use case. DOTS servers MUST return 4.09 (Conflict) error code to a DOTS peer to notify that the 'cuid' is already in-use by another DOTS client. Upon receipt of that error code, a new 'cuid' MUST be generated by the DOTS peer. Is there any way in which this situation could arise during some sort of migration scenario? Client-domain DOTS gateways MUST handle 'cuid' collision directly and it is RECOMMENDED that 'cuid' collision is handled directly by server-domain DOTS gateways. Is a gateway supposed to know if it is "client-side" or "server-side" by explicit configuration or some more automatic method? 'cuid' and 'mid' MUST NOT appear in the PUT request message body. Do we need to say this given that there's no obvious structure in which to put them? (That is, is this just a reminder to implementors of a previous version of the draft versus guidance to new implementations?) The prefix list MUST NOT include broadcast, loopback, or multicast addresses. These addresses are considered as invalid values. In Does "invalid" mean that the particular address gets ignored or that the entire request is rejected? target-fqdn: A list of Fully Qualified Domain Names (FQDNs) identifying resources under attack. An FQDN is the full name of a resource, rather than just its hostname. For example, "venera" is a hostname, and "venera.isi.edu" is an FQDN [RFC1983]. I would suggest referring to draft-ietf-dnsop-terminology-bis rather than trying to reproduce a definition of FQDN. We also may want to note that the DNS view can change depending on the vantage point used to make the observation. On page 18 we say that server-domain DOTS gateways "MUST supply [...] 'cdid'", but the previous paragraph says that there SHOULD be a configuration option for whether to insert 'cdid' on such systems. The two requirements are in conflict; which was intended? (I assume the MUST -- why would it be desired to not have the information available?) The same paragraph also says that the 'cdid' is "likely to be the same as" the 'cuid', though in addition to the listed reasons the client only has a SHOULD requirement to follow this procedure for generating 'cuid'; it may be worth noting the client's leeway here as well. If a DOTS client is provisioned, for example, with distinct certificates as a function of the peer server-domain DOTS gateway, distinct 'cdid' values may be supplied by a server-domain DOTS gateway. The ultimate DOTS server MUST treat those 'cdid' values as equivalent. Is this paragraph trying to say that a client might supply different certs to different gateways in the same domain (e.g., if one such gateway does not support ecdsa certs)? It was pretty confusing on the first read, in particular how the ultimate DOTS server would know that the different 'cdid' values actually correspond to the same client [domain]. DOTS servers MUST ignore 'cdid' attributes that are directly supplied by source DOTS clients or client-domain DOTS gateways. This implies that first server-domain DOTS gateways MUST strip 'cdid' attributes supplied by DOTS clients. DOTS servers SHOULD support a configuration parameter to identify DOTS gateways that are trusted to supply 'cdid' attributes. Is there any mechanism (e.g., autodetection) other than this by which servers/proxies can learn about the topology information needed to fulfil these requirements? Because of the complexity to handle partial failure cases, this specification does not allow for including multiple mitigation requests in the same PUT request. Concretely, a DOTS client MUST NOT include multiple 'scope' parameters in the same PUT request. "multiple 'scope' parameters" reads like a CBOR object with duplicate keys; is this intended to refer to a multi-valued array? The DOTS server couples the DOTS signal and data channel sessions using the DOTS client identity and optionally the 'cdid' parameter This requires the client to use the same certificate to authenticate the signal and data channels to a given server (even when a gateway is in use). Above, we discussed cases where a client might have multiple certificates available. Where do we specify the requirement to use the same certificate for signal and data channels? DOTS agents can safely ignore Vendor-Specific parameters they don't understand. This is not a very useful statemnet if the agent must know that a parameter is vendor-specific in order to safely ignore it. If the DOTS server does not find the 'mid' parameter value conveyed in the PUT request in its configuration data, it MAY accept the mitigation request by sending back a 2.01 (Created) response to the DOTS client; the DOTS server will consequently try to mitigate the attack. If the DOTS server finds the 'mid' parameter value conveyed in the PUT request in its configuration data bound to that DOTS client, it MAY update the mitigation request, and a 2.04 (Changed) response is returned to indicate a successful update of the mitigation request. There are two "MAY"s spread across these two paragraphs; do we want to say anything about in what cases the server might want to have different behavior (i.e., ignore the MAY)? To avoid maintaining a long list of overlapping mitigation requests (i.e., requests with the same 'trigger-mitigation' type and overlapping scopes) from a DOTS client and avoid error-prone provisioning of mitigation requests from a DOTS client, the overlapped lower numeric 'mid' MUST be automatically deleted and no longer available at the DOTS server. For example, if the DOTS server receives a mitigation request which overlaps with an existing mitigation with a higher numeric 'mid', the DOTS server rejects the request by returning 4.09 (Conflict) to the DOTS client. [...] This seems to be internally inconsistent -- first we hear that the overlapped mitigation request with lower 'mid' MUST be deleted (BTW, note my rewording), but at the end we are hearing that a request to create an overlapping mitgiation must be rejected. (A couple pages later we also say "can be achieved by sending a PUT request [...] that will override the existing one with overlapping mitigation scopes", which suggests a resolution of the conflict. The response includes enough information for a DOTS client to recognize the source of the conflict as described below: conflict-information: Indicates that a mitigation request is [...] I'm not entirely sure what encoding to infer from just this description -- conflict-information/-cause/-scope are in the YANG model, but do we need to say that the response contains a CBOR representation of the subtree starting at conflict-information (or something like that), or is this implicitly specified elsewhere in the document? For example, Figure 9 has an explicit JSON diagnostic notation for a message response. conflict-scope: Indicates the conflict scope. It may include a list of IP addresses, a list of prefixes, a list of port numbers, a list of target protocols, a list of FQDNs, a list of URIs, a list of alias-names, or a 'mid'. This feels a little under-specified -- do we need to include exactly the conflicting entries? Or would we just say something like "this conflicts with 'mid' 8; figure it out"? 3: CUID Collision. This code is returned when a DOTS client uses a 'cuid' that is already used by another DOTS client. This code is an indication that the request has been rejected and a new request with a new 'cuid' is to be re- sent by the DOTS client. Note that 'conflict-status', 'conflict-scope', and 'retry-timer' are not returned in the error response. (Do we want "MUST NOT" 2119 language to prevent their inclusion or is the current descriptive language sufficient?) conflict-scope: Indicates the conflict scope. It may include a list of IP addresses, a list of prefixes, a list of port numbers, a list of target protocols, a list of FQDNs, a list of URIs, a list of alias-names, or references to conflicting ACLs. How do I reference an ACL? This can be achieved by sending a PUT request with a new 'mid' value that will override the existing one with overlapping mitigation scopes. Do we want to reiterate that the existing one will be deleted? For a mitigation request to continue beyond the initial negotiated lifetime, the DOTS client has to refresh the current mitigation request by sending a new PUT request. This PUT request MUST use the same 'mid' value, and MUST repeat all the other parameters as sent in the original mitigation request apart from a possible change to the lifetime parameter value. If the server did not have a check that the other parameters match, what would happen? (Do we need normative language that the server MUST verify the other parameters when the 'mid' matches?) Section 4.4.2 If the representation of all the active mitigation requests associated with the DOTS client does not fit within a single datagram, the DOTS server MUST use the Block2 Option with NUM = 0 in the GET response. [...] I'm not very familiar with CoAP blockwise transfers; is this in conflict with some normal feature-negotiation scheme or is it okay to assume that the client will be able to handle this even if the client has not explictly indicated support? This is a mandatory attribute when an attack mitigation is triggered. Particularly, 'mitigation-start' is not returned for a mitigation with 'status' code set to 8. Is this better as "triggered" or as "active"? bps-dropped and pps-dropped "SHOULD be a five-minute average", but that does not seem quite well-defined. Is it a rolling five-minute average over bins of one second, or a binned five-minute average for the last five-minute interval that ends on a multiple of '5', or something else? Upon receipt of a conflict notification message indicating that a mitigation request is deactivated because of a conflict, a DOTS client MUST NOT resend the same mitigation request before the expiry of 'retry-timer'. It is also recommended that DOTS clients support means to alert administrators about mitigation conflicts. Do we need to say anything regarding the server behavior when a retransmit or similar was in flight already when the conflict notification was generated? (That is, the server's enforcement of the MUST NOT may need to be restrained.) Alternatively, the DOTS client can explicitly deregister itself by issuing a GET request that has the Token field set to the token of the observation to be cancelled and includes an Observe Option with the value set to '1' (deregister). This seems like the more "polite" behavior (as opposed to just "forgetting" -- why is the polite behavior not the default behavior? Does the GET in Figure 13 need to have a ".well-known" and other path components? Section 4.4.3 I'm not questioning the decision, but I am a bit curious how we ended up with a boolean "attack-status" parameter and no quantitative measurements. The DOTS server indicates the result of processing a PUT request using CoAP response codes. The response code 2.04 (Changed) is returned if the DOTS server has accepted the mitigation efficacy update. The error response code 5.03 (Service Unavailable) is returned if the DOTS server has erred or is incapable of performing the mitigation. What (if anythin) should the client do in response? Should the client assume the server is dead and move to a different one? Section 4.4.4 terminating period SHOULD be set by default to 120 seconds. If the client requests mitigation again before the initial active-but- terminating period elapses, the DOTS server MAY exponentially increase the active-but-terminating period up to a maximum of 300 seconds (5 minutes). Is the base of the exponent supposed to be 2 (i.e., a doubling of the delay)? This should probably be made explicit. Also, is the input to the doubling the previous total delay, or the amount of delay remaining when the repeated request arrives? If a mitigation is triggered due to a signal channel loss, the DOTS server relies upon normal triggers to stop that mitigation (typically, receipt of a valid DELETE request, expiry of the mitigation lifetime, or observation of traffic to the attack target). I think "observation of traffic" probably needs more explanation -- as written, it sounds like any packet arriving would be sufficient, which is probably not the intended behavior... Section 4.5.1 Does the "max-retransmit" value exclude the initial transmission? I'm not sure whether there are any particularly interesting security considerations to mention about what happens when ack-random-factor is insufficiently random; it seems like things would only get really bad if the value was constant across peers. Section 4.5.2 A DOTS client MUST NOT transmit a "CoAP Ping" while waiting for the previous "CoAP Ping" response from the same DOTS server. Is this intended to block retransmissions of the same CoAP Ping? sid: Session Identifier is an identifier for the DOTS signal channel session configuration data represented as an integer. This identifier MUST be generated by DOTS clients. 'sid' values MUST increase monotonically. What event triggers the increase? Section 4.5.3 When a DDoS attack is active, refresh requests MUST NOT be sent by DOTS clients and the DOTS server MUST NOT terminate the (D)TLS session after the expiry of the value returned in Max-Age Option. It seems like there's a bit of a race condition with attacks and refresh requests coming in in parallel. Section 4.6 The DOTS server can return the error response code 5.03 in response to a request from the DOTS client or convey the error response code 5.03 in a unidirectional notification response from the DOTS server. Just to check my understanding, this unidirectional notification would only happen if there was a previous Observe to establish the channel? The "alt-server-record" description here is pretty vague on the string formatting used, v4 vs. v6, etc.; I guess that the actual "type inet:ip-address" in the YANG module is probably specific enough, though. Section 4.7 The first two paragraphs seem to have high overlap and would probably benefit from at least being joined together if not also trimmed down a bit. In case of a massive DDoS attack that saturates the incoming link(s) to the DOTS client, all traffic from the DOTS server to the DOTS client will likely be dropped, although the DOTS server receives heartbeat requests in addition to DOTS messages sent by the DOTS client. In this scenario, the DOTS agents MUST behave differently to handle message transmission and DOTS session liveliness during link saturation: Do we need to say how the agents independently detect the link-saturation situation? Section 5.1 It looks like the tree diagram and the module differ about the "mandatory false" nature of some nodes, e.g., upper-port. Perhaps the tree diagram should be regenerated? Section 5.2 I mostly expect some heartburn from various folks about overriding protocol number 0's interpretation as the IPv6 hop-by-hop option to mean "all protocols", though it will probably be fine in practice. I am including a suggested rewording in my editorial changes that may help alleviate concerns. Section 6 I have several thoughts about the CBOR encoding, some of which I mentioned in some previous emails. (I also don't have much experience with CBOR encoding, so I probably have some things wrong, too...) It seems that CBOR major type 0 also encodes some width information for integers. Do we want to require that the CBOR encoding always uses the width that matches the types in the YANG module, or do we permit a smaller encoding when the value in question fits? (Presumably the answer falls out naturally if we expect people to use off-the-shelf CBOR libraries...) We say that the initial set of key values is comprehension-required; does that mean that any other future extensions are necessarily comprehension-optional, and there can be no additional comprehension-required keys? It's probably appropriate to make a statement in the initial text here about the port number and/or media type indicating that this is the syntax used for the top-level object. I already mentioned that the encoding of the integer form of the key values takes a different number of bytes depending on the integer value, so I think those keys are rearranged in the -26 (I reviewed the -25). Section 7.1 A key challenge to deploying DOTS is the provisioning of DOTS clients, including the distribution of keying material to DOTS clients to enable the required mutual authentication of DOTS agents. EST defines a method of certificate enrollment by which domains I think we need a reference for EST. o TLS False Start [RFC7918] which reduces round-trips by allowing the TLS second flight of messages (ChangeCipherSpec) to also contain the DOTS signal. [...] o TCP Fast Open [RFC7413] can reduce the number of round-trips to convey DOTS signal channel message. These are in something of a specification limbo, as they both appear to only be formally defined for use with TLS, but TLS False Start seems to have a straightforward extension to DTLS. It may be worth tweaking the text a little to acknowledge the situation here. Section 7.2 The TLS 1.3 handshake with 0-RTT diagram needs to be revisited/refreshed, as RFC 8446 does not look like that. Additionally, the usage of PSK as well as a certificate is not defined until draft-housley-tls-tls13-cert-with-extern-psk is published. I also note that in the diagram as presented, the client is not yet known to be authenticated when the server sends its initial (0.5-RTT) DOTS signal message. Section 7.3 This whole section seems to only be relevant for UDP usage, so probably the "If UDP is used" clause can be dropped and an introductory statement added earlier on. Path MTU MUST be greater than or equal to [CoAP message size + DTLS overhead of 13 octets + authentication overhead of the negotiated DTLS cipher suite + block padding] (Section 4.1.1.1 of [RFC6347]). If the request size exceeds the path MTU then the DOTS client MUST split the DOTS signal into separate messages, for example the list of addresses in the 'target-prefix' parameter could be split into multiple lists and each list conveyed in a new PUT request. (DTLS 1.3 will have a short header for some packets, that is less than 13 octets.) Section 8 We've got some requirements in here about limiting behavior of clients/servers when talking to gateways; is knowing about the presence of a gateway something that's required to happen out of band or is there an in-band way to identify that the peer is a gateway? messages from an authorized DOTS gateway, thereby creating a two-link chain of transitive authentication between the DOTS client and the DOTS server. This seems to ignore the possibility of setups that include both client-domain and server-domain gateways. DOTS client certificate validation MUST be performed as per [RFC5280] and the DOTS client certificate MUST conform to the [RFC5280] certificate profile. [...] This seems to duplicate a requirement already stated in Section 7.1; it's probably best to only have normative language in one location, even if we need to mention the topic in multiple locations. Similarly for the mutual authentication requirement, which we duplicate in the second and fourth paragraphs of this section. If we don't want to use example.com vs. example.net as sample domains, we can also use whateverwewant.example, per RFC 6761. Section 9 We should mention the media-type allocation in the top-level section. "mappings to CBOR" feels confusing to me, since it leaves empty what we are mapping from. Perhaps just talking about a registry of "CBOR map keys" would be better, both here and in the Section 9.3 intro. Section 9.3 I suggest being very explicit about whether new requests for registration should be directed to the mailing list or to IANA, as we've had some confusion about this elsewhere. The criteria used by the experts also just lists things they should consider, but does not provide full clarity on which answer to the question is more likely to be approved. (And yes, I know that this text is largely copied from already published RFCs, but we can still do better.) Section 9.3.1 If we want the value 0 to be reserved we need to say so. Do we want to say anything about the usage of negative integers as map keys? I suggest not mentioning the postal address, given the recent (e.g.) GDPR requirements. Section 9.3.2 It may be worth mentioning Table 4 here as well. Section 9.5.1 We need to specify which range of values we are asking for an allocation from. Section 9.6.1 As above, specify what range we're asking about. I expect the current text to get some IESG (or directorate) feedback that the Data Item and Semantics descriptions are repetitive and banal. Section 9.7 IIUC, IANA is going to ask if we want this module to be "maintained by IANA", so it would be good to have an answer ready even if we don't put it in the document text. Rate-limiting DOTS requests, including those with new 'cuid' values, from the same DOTS client defends against DoS attacks that would With respect to "new" 'cuid' values, is the server required to remember which ones it has seen in perpetuity, or can it time them out eventually? Section 10 The security considerations seem to be taking a narrow focus on the requirements for and consequences of specific bits on the wire in the signal channel protocol. I think it's appropriate to also include some high-level thoughts about the functional behavior of the protocol, allowing to signal that an attack is underway and trigger mitigation, increasing the availability of services, etc., and the risks that are posed by the protocol failing to work properly, whether that means letting attack traffic through or improperly blocking legitimate traffic. Section 13.1 I think the IANA registries should be listed as Informational and not Normative references. Section 13.2 Pending resolution of the question about using draft-ietf-core-yang-cbor rules or RFC7951+RFC7049, the draft-ietf-core-yang-cbor reference may need to be Normative. Given that "URI" is a well-known abbreviation, we may be able to get away with not citing RFC 3986. On the other hand, it's not causing any harm to leave it in... RFC 4632 needs to be Normative, since we need to know CIDR to encode/decode target-prefixes. Similarly, I think that RFCs 6234, 7413, 7589, 7918, 7924, and 7951 should also be Normative. -Ben From nobody Wed Jan 16 00:00:13 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B242D128D0C; Wed, 16 Jan 2019 00:00:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XApx8uvk0_Db; Wed, 16 Jan 2019 00:00:09 -0800 (PST) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 565D5130DC0; Wed, 16 Jan 2019 00:00:09 -0800 (PST) Received: from opfednr05.francetelecom.fr (unknown [xx.xx.xx.69]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 43ffkv5P2sz5vht; Wed, 16 Jan 2019 09:00:07 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.66]) by opfednr05.francetelecom.fr (ESMTP service) with ESMTP id 43ffkv4Vm5zyQ2; Wed, 16 Jan 2019 09:00:07 +0100 (CET) Received: from OPEXCAUBMA4.corporate.adroot.infra.ftgroup (10.114.13.86) by OPEXCLILMA1.corporate.adroot.infra.ftgroup (10.114.31.66) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 16 Jan 2019 09:00:07 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBMA4.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Wed, 16 Jan 2019 09:00:06 +0100 From: To: Benjamin Kaduk , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3w== Date: Wed, 16 Jan 2019 07:59:53 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 08:00:13 -0000 Hi Ben,=20 Thank you for the detailed review. Please see inline a first set of replies.=20 Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: mercredi 16 janvier 2019 01:14 > =C0=A0: draft-ietf-dots-signal-channel@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: AD review of draft-ietf-dots-signal-channel-25 >=20 > AD review of -25. (Note that -26 is out already, but to preserve my > sanity I am still using the section numbers from the -25. I took a > quick look at the diff, and tried to remove comments that are no longer > applicable, but probably missed some. >=20 > This review is pretty long, but I think the document is actually in > pretty good shape -- the length of review comments is just a normal > frequency of rough edges multiplied by a long document. >=20 > I will make a github pull request with some changes that I think are > just editorial (but feel free to bring them up as discussion items if > you are not sure that they are editorial, disagree with the changes, > etc.) >=20 > We should probably introduce (or avoid) the concept of "peace-time" > (sometimes spelled without the hyphen) and perhaps the corresponding > attack situation before using it. >=20 [Med] We do have two occurrences in the document. I fixed these two.=20 > Section 1 >=20 > I wasn't sure whether the RFC 4987 reference was supposed to be for what > an ACK-flood is or the fact that it is CPU-exhausting or something else. > (Searching for those terms in its text did not help me come to a > conclusion.) >=20 [Med] RFC 4987 is a pointer to back that SYN flood is memory exhausting. I = move the citation right after SYN-flood.=20 > We also talk about "DOTS servers" and "DOTS agents" in Section 1, before > we've defined the terminology. But these two are sufficiently > self-explanatory that it may be fine to leave them as-is. >=20 [Med] You are right. I don't think a change is needed.=20 > This protocol enables > cooperation between DOTS agents to permit a highly-automated network > defense that is robust, reliable, and secure. >=20 > We should explain somewhere what we mean by "secure". (I guess, that > the signal and data channels are integrity- and > confidentiality-protected, and that changes in mitigation status are not > made unless properly authorized.) >=20 [Med] By secure, we meant the set of features called in Section 2.4 of draf= t-ietf-dots-requirements. We can add a pointer to that section if this help= s.=20 > Section 3 >=20 > DOTS clients MAY alternatively support means to dynamically > discover the ports used by their DOTS servers. [...] >=20 > If we have some examples in mind of dynamic discovery protocols, it > would be appropriate to provide informative references here. >=20 [Med] OK. I added an informative reference to draft-boucadair-dots-discover= y.=20 > We should also have an informative reference for "Happy Eyeballs" (e.g., > RFC 8305). >=20 [Med] That text points to the section defining HE: A Happy Eyeballs procedure for DOTS signal channel is specified in Section 4.3. 8305 is cited in section 4.3: To overcome these connection setup problems, the DOTS client attempts to connect to its DOTS server(s) using both IPv6 and IPv4, and tries both DTLS over UDP and TLS over TCP in a manner similar to the Happy Eyeballs mechanism [RFC8305]. This is sufficient, IMO. =20 > From that standpoint, this document specifies a YANG module for > representing DOTS mitigation scopes, DOTS signal channel session > [...] >=20 > Which standpoint? [Med] that is "use the same data models...".=20 I deleted the "From that standpoint," because this may not be clear.=20 >=20 > Representing these data as CBOR data is assumed to follow the rules > in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with > JSON/CBOR conversion rules in [RFC7049]. All parameters in the > payload of the DOTS signal channel are mapped to CBOR types as > specified in Section 6. >=20 > How do I know which set of rules is in use?=20 [Med] This s not important from a DOTS interoperability standpoint. What is= important is the mapping table in Section 6 (and mapping entries that will= defined in future documents).=20 Are the two sets of rules > equivalent and interoperable? >=20 > DOTS agents MUST support GET, PUT, and DELETE CoAP methods. [...] >=20 > As written, this applies to all agents (clients, servers, and proxies). > Presumably this is intended, [Med] Yes.=20 but I just wante to double-check -- > sometimes it's okay to place weaker requirements on clients. >=20 > In deployments where one or more translators (e.g., Traditional NAT > [RFC3022], CGN [RFC6888], NAT64 [RFC6146], NPTv6 [RFC6296]) are > enabled between the client's network and the DOTS server, DOTS signal > channel messages forwarded to a DOTS server MUST NOT include internal > IP addresses/prefixes and/or port numbers; external addresses/ > prefixes and/or port numbers as assigned by the translator MUST be >=20 > Do we want to give any examples of signal channel messages that might > include internal addresses/prefixes? [Med] I'd avoid citing a message which is not defined yet at this stage of = the document.=20 >=20 > Such procedure is needed to avoid experiencing long connection > delays. For example, if an IPv4 path to reach a DOTS server is > found, but the DOTS server's IPv6 path is not working, a dual-stack > DOTS client may experience a significant connection delay compared to > an IPv4-only DOTS client. [...] >=20 > There seems a bit of a mismatch between "found" and "not working". If > the point is supposed to be that the client is going to try both IPv4 > and IPv6 but the v6 path has issues and it would take the client's > algorithm some extra time to choose to fall back to v4, then maybe "iv > an IPv4 path to a DOTS server is functional and there is also an > apparently present but non-functional IPv6 path to the same server"? [Med] You got it. I changed the text to:=20 "if an IPv4 path to reach a DOTS server is functional, but the DOTS server'= s IPv6 path is non-functional," >=20 > These connection attempts are > performed by the DOTS client when it initializes. The results of the > Happy Eyeballs procedure are used by the DOTS client for sending its > subsequent messages to the DOTS server. >=20 > I see this is scoped to "when the client initializes", so I don't know > whether it adds more or not to end with "for the duration of the DOTS > session" or some similar scoping for the caching of the happy eyeballs > results. [Med] The connection attempts are performed each time the client has to sel= ect among a list of v4, v6 (tls, dtls). This is particularly true when the = client initiates, but this may also be true each time the client has to sel= ect among v4, v6, DTLS, TLS (e.g., the client attaches to a new network).=20 I updated the text to:=20 "These connection attempts are performed by the DOTS client when it initial= izes, or in general when it has to select an address family and transport t= o contact its DOTS server." >=20 > client because there is no long delay before using IPv4 and TCP. The > DOTS client repeats the mechanism to discover whether DOTS signal > channel messages with DTLS over UDP becomes available from the DOTS > server, so the DOTS client can migrate the DOTS signal channel from >=20 > What would cause UDP to "become available"? [Med] In this example, this is assumed to be IPv6 path (with no middlebox) = available again.=20 In general, this can be due to a path change, network configuration change,= middlebox configuration change, IPv6 become functional, etc.=20 Would this be a case like > if there's a stateful NAT or where we need to actively apply some sort > of NAT traversal? If so, do we want to list it as an example? (If it's > a complicated scenario, it may not be worth listing an example, of > course.) [Med] The text already says the following:=20 "it is assumed that the IPv6 path is broken and UDP traffic is dropped by a= middlebox" I do think this is sufficient.=20 >=20 > I'm not sure if we want to add some annotations to Figure 4 that (e.g.) > the initial DTLS attempts do not need to be strictly ordered in the > order presented, or to indicate which lines are retries. [Med] The text explaining that figure mentions the following: "...two TCP S= YNs and two DTLS ClientHello messages at the same time over IPv6 and IPv4." Adding annotation would be redundant, IMO. [SNIP] From nobody Wed Jan 16 02:41:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BCB912950A; Wed, 16 Jan 2019 02:41:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sNWaHMPMSoQN; Wed, 16 Jan 2019 02:41:22 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5D36128CF3; Wed, 16 Jan 2019 02:41:21 -0800 (PST) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 43fkJw13ZZz5vjC; Wed, 16 Jan 2019 11:41:20 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.2]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 43fkJv6wmPz5vNb; Wed, 16 Jan 2019 11:41:19 +0100 (CET) Received: from OPEXCAUBM6D.corporate.adroot.infra.ftgroup (10.114.13.57) by OPEXCLILM21.corporate.adroot.infra.ftgroup (10.114.31.2) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 16 Jan 2019 11:41:19 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6D.corporate.adroot.infra.ftgroup ([fe80::4c24:f1ba:2b1:e490%21]) with mapi id 14.03.0415.000; Wed, 16 Jan 2019 11:41:18 +0100 From: To: Benjamin Kaduk , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (2nd Part) Thread-Index: AdSth/4V4uJk+YuhSsWU4l/lLLRChw== Date: Wed, 16 Jan 2019 10:41:14 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08269@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (2nd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 10:41:25 -0000 Re-, Please see inline.=20 Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: mercredi 16 janvier 2019 01:14 > =C0=A0: draft-ietf-dots-signal-channel@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: AD review of draft-ietf-dots-signal-channel-25 >=20 >=20 > Section 4.4 >=20 > GET: DOTS clients may use the GET method to subscribe to DOTS > server status messages, or to retrieve the list of its > mitigations maintained by a DOTS server (Section 4.4.2). >=20 > I'm not really a canonical HTTP expert, but I suspect that using GET to > "subscribe" will raise some eyebrows at later stages of review.=20 [Med] We are following RFC7641. I would be surprised if this is an issue.=20 Maybe > we should just leave it as-is and wait for such review to arrive, > though, rather than trying to do something preemptively. [Med] Yes.=20 >=20 > I don't know if this is the proper section to talk about it, but we > should probably have some text justifying the use of application-layer > acknowledgment as opposed to just using Confirmable CoAP messages. [Med] I'm not sure to understand this one. Which "application-layer acknowl= edgment" are you referring to? >=20 > Section 4.4.1 >=20 > If Figure 5 is going to use actual/example values for cuid and mid, then > I'd suggest also using actual/example values for the JSON fields > (instead of "integer" and "string" and such). [Med] I split the figure into two so that we don't have this problem.=20 >=20 > cuid: Stands for Client Unique Identifier. A globally unique > identifier that is meant to prevent collisions among DOTS clients, > especially those from the same domain. It MUST be generated by > DOTS clients. >=20 > In order to get global uniqueness we either need sufficient randomness > or a hierarchical allocation strategy. Since we recommend a strategy > that involves hashing the (public) client certificate, we may also want > to note that this value does not need to be unguessable. If a random > allocation is possible, I suggest giving guidance on how many random > bits must be used to sufficiently ensure global uniqueness (128 might be > enough). [Med] An attack vector that can be achieved if the cuid is guessable is if = a misbehaving client from within the client's domain succeeds to be granted= access by the server and then uses the cuid of another client of the domai= n to delete active mitigation/etc. For this attack vector to happen, the misbehaving client needs to pass secu= rity validation checks by the server. Therefore, I'm not sure if it is wort= h to add an allocation reco given this perquisite.=20 Thoughts? >=20 > The output of the cryptographic hash algorithm > is truncated to 16 bytes; truncation is done by stripping off the > final 16 bytes. The truncated output is base64url encoded. >=20 > side note: Truncation to 128 bits reduces the collision resistance to > 64-bit strength, though this is probably acceptable in this use case. >=20 > DOTS servers MUST return 4.09 (Conflict) error code to a DOTS peer > to notify that the 'cuid' is already in-use by another DOTS > client. Upon receipt of that error code, a new 'cuid' MUST be > generated by the DOTS peer. >=20 > Is there any way in which this situation could arise during some sort of > migration scenario? [Med] This can be for example a client which does not follow the "SHOULD" f= or creating the cuid.=20 >=20 > Client-domain DOTS gateways MUST handle 'cuid' collision directly > and it is RECOMMENDED that 'cuid' collision is handled directly by > server-domain DOTS gateways. >=20 > Is a gateway supposed to know if it is "client-side" or "server-side" by > explicit configuration or some more automatic method? [Med] This can be done by an explicit configuration.=20 >=20 > 'cuid' and 'mid' MUST NOT appear in the PUT request message body. >=20 > Do we need to say this given that there's no obvious structure in which > to put them? (That is, is this just a reminder to implementors of a > previous version of the draft versus guidance to new implementations?) [Med] We used to have those in the message body in previous versions of the= spec/implementations. Furthermore, there are cases where "mid" is allowed = to be included in the message body (e.g., PUT response). We included this n= ote for implementers because of some behaviors observed during past interop= s. >=20 > The prefix list MUST NOT include broadcast, loopback, or multicast > addresses. These addresses are considered as invalid values. In >=20 > Does "invalid" mean that the particular address gets ignored or that the > entire request is rejected? [Med] The expected behavior is covered by this text:=20 " ... or contains invalid or unknown parameters, the DOTS server MUST reply= with 4.00 (Bad Request)."=20 >=20 > target-fqdn: A list of Fully Qualified Domain Names (FQDNs) > identifying resources under attack. An FQDN is the full name of a > resource, rather than just its hostname. For example, "venera" is > a hostname, and "venera.isi.edu" is an FQDN [RFC1983]. >=20 > I would suggest referring to draft-ietf-dnsop-terminology-bis rather > than trying to reproduce a definition of FQDN. >=20 [Med] I added an informative reference to draft-ietf-dnsop-terminology-bis. =20 > We also may want to note that the DNS view can change depending on the > vantage point used to make the observation. [Med] Not sure what to do with this one given that the text says:=20 "How a name is passed to an underlying name resolution library is implement= ation- and deployment-specific." >=20 > On page 18 we say that server-domain DOTS gateways "MUST supply [...] > 'cdid'", but the previous paragraph says that there SHOULD be a > configuration option for whether to insert 'cdid' on such systems. The > two requirements are in conflict; which was intended? (I assume the > MUST -- why would it be desired to not have the information available?) [Med] This text is about gateways that are instructed to insert the cdid pa= rameter. gateways facing a client's domain are in this case.=20 I updated the text with "server-domain DOTS gateways instructed to insert t= he 'cdid' parameter MUST supply.." >=20 > The same paragraph also says that the 'cdid' is "likely to be the same > as" the 'cuid', though in addition to the listed reasons the client only > has a SHOULD requirement to follow this procedure for generating 'cuid'; > it may be worth noting the client's leeway here as well. [Med] Yes, this is why we have "likely" in the text.=20 >=20 > If a DOTS client is provisioned, for example, with distinct > certificates as a function of the peer server-domain DOTS gateway, > distinct 'cdid' values may be supplied by a server-domain DOTS > gateway. The ultimate DOTS server MUST treat those 'cdid' values > as equivalent. >=20 > Is this paragraph trying to say that a client might supply different > certs to different gateways in the same domain [Med] Yes.=20 (e.g., if one such > gateway does not support ecdsa certs)? It was pretty confusing on the > first read, in particular how the ultimate DOTS server would know that > the different 'cdid' values actually correspond to the same client > [domain]. [Med] This is supposed to be provisioned on the server. This is deployment-= specific; hence no mention in the draft.=20 >=20 > DOTS servers MUST ignore 'cdid' attributes that are directly > supplied by source DOTS clients or client-domain DOTS gateways. > This implies that first server-domain DOTS gateways MUST strip > 'cdid' attributes supplied by DOTS clients. DOTS servers SHOULD > support a configuration parameter to identify DOTS gateways that > are trusted to supply 'cdid' attributes. >=20 > Is there any mechanism (e.g., autodetection) other than this by which > servers/proxies can learn about the topology information needed to > fulfil these requirements? [Med] I'm not aware of such mechanism.=20 >=20 > Because of the complexity to handle partial failure cases, this > specification does not allow for including multiple mitigation > requests in the same PUT request. Concretely, a DOTS client MUST NOT > include multiple 'scope' parameters in the same PUT request. >=20 > "multiple 'scope' parameters" reads like a CBOR object with duplicate > keys; is this intended to refer to a multi-valued array? [Med] What is intended is that the scope list should include only one entry= .=20 I can change to "multiple 'scope' clauses" >=20 > The DOTS server couples the DOTS signal and data channel sessions > using the DOTS client identity and optionally the 'cdid' parameter >=20 > This requires the client to use the same certificate to authenticate the > signal and data channels to a given server (even when a gateway is in > use). Above, we discussed cases where a client might have multiple > certificates available. [Med] Actually, the text above applies also if distinct certificates are us= ed. Equivalent "client identity" are supposed to be known to the server by = an out of band means. In all cases, the identity (same or equivalent) is us= ed to couple the sessions.=20 Where do we specify the requirement to use the > same certificate for signal and data channels? [Med] We don't have such requirement in existing DOTS documents.=20 >=20 > DOTS agents can safely > ignore Vendor-Specific parameters they don't understand. >=20 > This is not a very useful statemnet if the agent must know that a > parameter is vendor-specific in order to safely ignore it. [Med] The agent relies on the cbor key value to determine that a parameter = can be safely ignored or not (comprehension-required). A range of keys is r= eserved for comprehension-optional. An agent checks the range to which belo= ng a parameter, and then behaves accordingly.=20 >=20 > If the DOTS server does not find the 'mid' parameter value conveyed > in the PUT request in its configuration data, it MAY accept the > mitigation request by sending back a 2.01 (Created) response to the > DOTS client; the DOTS server will consequently try to mitigate the > attack. >=20 > If the DOTS server finds the 'mid' parameter value conveyed in the > PUT request in its configuration data bound to that DOTS client, it > MAY update the mitigation request, and a 2.04 (Changed) response is > returned to indicate a successful update of the mitigation request. >=20 > There are two "MAY"s spread across these two paragraphs; do we want to > say anything about in what cases the server might want to have different > behavior (i.e., ignore the MAY)? >=20 [Med] For the first MAY, a typical example is when a rate limit is enforced= : Rate-limiting DOTS requests, including those with new 'cuid' values, from the same DOTS client defends against DoS attacks that would result in varying the 'cuid' to exhaust DOTS server resources. Rate- limit policies SHOULD be enforced on DOTS gateways (if deployed) and DOTS servers For the second MAY, the server may have more visibility on the attack and t= hen may decide to update accordingly. I don't know if it is worth to add examples. Any preference? =20 From nobody Wed Jan 16 03:16:19 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33103130E27; Wed, 16 Jan 2019 03:16:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.553 X-Spam-Level: X-Spam-Status: No, score=-11.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DGDTATGMBdVo; Wed, 16 Jan 2019 03:16:14 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6C69128B01; Wed, 16 Jan 2019 03:16:13 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547637240; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=hIGrfk+OkUyPRC6UJ1UqZaHR5mAjUPmd2hZFti 9j3Ig=; b=l50aAlYWZBe/la7OtiC58P2ZHDtgN08evhYCb+Q5 0pN/+9H7onMXMG2MXc3BV/4+P9uwFtj7m72ThzPHOk7kbDhFyK ZSWvej5qJ4ar4JDdtiDa2BNuEoPBBkQYVZdzlL/5PHqD9Wvoyw np2Gi4Z40WI9ZPGULWL2T/O6Ja2Nb3w= Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 70f2_4621_efbbe757_a6f0_496a_9662_caf6de727f45; Wed, 16 Jan 2019 05:13:59 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 04:10:39 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 Jan 2019 04:10:39 -0700 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 04:10:38 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2424.namprd16.prod.outlook.com (20.177.225.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.20; Wed, 16 Jan 2019 11:10:37 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Wed, 16 Jan 2019 11:10:37 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNw Date: Wed, 16 Jan 2019 11:10:37 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2424; 6:Qr70WrqB5pMr2PF/shM0pLKppz2vpaABVklwysBYP/5tRlxf+fnLee9gB8kFQfmGQUTiyi1JVqT2oXuxFtJI8rq/g87ubYp64DYAl6PJRAZ0ZZYJJqk3KPoXXc2lgyu042BYm0WSfOJBFqfiT/UxWqcK3Ru/Xp/I5WIDmTHP/pqfgucDqOPt/yvXaDq0hr6jEq/RDbhidpLFroXrYQh02zj53X1+DAtesVYcUnYO2SVnste8PaaVB/F8c/ve3cxOtFfTwx0oim/GRJDccta75ajJuLv7XglAre9TqMhGGWoroFMfTS1sRuU5evHLF++16pu32Yng9Yk9ZSADdQktc/xO9i7cUO3i+O3R4uoX6IwS0Bj2dIYiVBEdHfUPxyaL5X85hZyK86FQpc/7y8JRQX/nYAwE2/4957vVkncdfl4cSfhwA+HomotIpIySctA9iejzdkYVrYU31B5EAQuPiw==; 5:ezI5kx77tUacA+ZOHysB1KiDp2POFM9uFc0zXyxhxGPFSOAPES0PMdOrq1PHbwXdhzAWwLKVAlCE7lSwWNn8fo3o6BvL+tMy19oaqH6zKREsSIZPm1eN9INcloCMKX1beC3RgK3oBjJcuykD1C2xpzhvPt76uO+vVix/fONbOTDCgbtVR+yy4Icu7zAJNf71Avl7p6sK/opRxoClQzI+ug==; 7:yQ0SHF0cLiiFk1KaGue2BvtxVv9elaSCPO0xVa0ZsHpbz7E0/xOflKBVfBthqcXMeGIX+OKdR9smm2sFt3sGVhUhUNyLULBpryyJtrg9Kmw6vCqh4IRjYcER5OVz0Vj14IAyBNUCUGDLvOYMpMPG6w== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 59dee98f-b1f4-4906-0328-08d67ba33e6a x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2424; x-ms-traffictypediagnostic: BYAPR16MB2424: x-microsoft-antispam-prvs: x-forefront-prvs: 091949432C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(396003)(136003)(376002)(346002)(39860400002)(32952001)(55784004)(199004)(189003)(13464003)(33656002)(14454004)(6246003)(110136005)(55016002)(72206003)(6116002)(966005)(478600001)(256004)(316002)(9686003)(86362001)(6306002)(26005)(99286004)(102836004)(81166006)(2171002)(53936002)(81156014)(8936002)(71200400001)(2501003)(5024004)(5660300001)(14444005)(74316002)(3846002)(71190400001)(80792005)(66066001)(97736004)(68736007)(6506007)(106356001)(186003)(7736002)(11346002)(6436002)(305945005)(229853002)(446003)(486006)(53546011)(8676002)(476003)(345774005)(7696005)(2906002)(105586002)(76176011)(25786009)(4326008)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2424; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: KLPKat2kZWpzcexl7hgiAWSHnEANZMmVOem7zSn+4WY3bj0cm11tEINaCYiirjQtkUI3CRBgyB9GN0vC8AxOmspY312X1lmgZ7BNbMoB+EfWgaXKHRIFmbUJ1MwnhUxffKqpxnY8A/5RFdGVhiKA+LRUGppD1beLliZOLt9C/Yfl04GriLeia1cBvxjakeqFVucPH22MACD4hyGoAzgJdMtdLdQd6k1N8lK+AupTuj9/hyM4YbFsw1QhmO2XbH31BWAwYOT3T1Tut31qcQiOX53uixKqQe2w/osCmUS51cfFPBj+7ep7j7ao0HcO597oNztjvLKKCdfNBxbn5RYaWoold9EfcwWwLwm7388ZqKLMClujPVC61djeBlcF3j3Xz82pJbnJp0FebgVuTpbSC9fc01I2pdfUj4+dmhl3Suc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 59dee98f-b1f4-4906-0328-08d67ba33e6a X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jan 2019 11:10:37.4643 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2424 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6461> : inlines <6994> : streams <1810240> : uri <2780754> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 11:16:18 -0000 SGkgTWVkLA0KDQpQbGVhc2Ugc2VlIGlubGluZQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQo+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mDQo+ IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gU2VudDogV2VkbmVzZGF5LCBKYW51YXJ5 IDE2LCAyMDE5IDE6MzAgUE0NCj4gVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pjsg ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gY2hhbm5lbEBpZXRmLm9yZw0KPiBDYzogZG90c0Bp ZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRv dHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdCBQYXJ0KQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5h dGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mg b3INCj4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFu ZCBrbm93IHRoZSBjb250ZW50IGlzDQo+IHNhZmUuDQo+IA0KPiBIaSBCZW4sDQo+IA0KPiBUaGFu ayB5b3UgZm9yIHRoZSBkZXRhaWxlZCByZXZpZXcuDQo+IA0KPiBQbGVhc2Ugc2VlIGlubGluZSBh IGZpcnN0IHNldCBvZiByZXBsaWVzLg0KPiANCj4gQ2hlZXJzLA0KPiBNZWQNCj4gDQo+ID4gLS0t LS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gRGXCoDogQmVuamFtaW4gS2FkdWsgW21haWx0 bzprYWR1a0BtaXQuZWR1XSBFbnZvecOpwqA6IG1lcmNyZWRpIDE2DQo+ID4gamFudmllciAyMDE5 IDAxOjE0IMOAwqA6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiA+ IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPiBPYmpldMKgOiBBRCByZXZpZXcgb2YgZHJhZnQtaWV0 Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1DQo+ID4NCj4gPiBBRCByZXZpZXcgb2YgLTI1LiAgKE5v dGUgdGhhdCAtMjYgaXMgb3V0IGFscmVhZHksIGJ1dCB0byBwcmVzZXJ2ZSBteQ0KPiA+IHNhbml0 eSBJIGFtIHN0aWxsIHVzaW5nIHRoZSBzZWN0aW9uIG51bWJlcnMgZnJvbSB0aGUgLTI1LiAgSSB0 b29rIGENCj4gPiBxdWljayBsb29rIGF0IHRoZSBkaWZmLCBhbmQgdHJpZWQgdG8gcmVtb3ZlIGNv bW1lbnRzIHRoYXQgYXJlIG5vDQo+ID4gbG9uZ2VyIGFwcGxpY2FibGUsIGJ1dCBwcm9iYWJseSBt aXNzZWQgc29tZS4NCj4gPg0KPiA+IFRoaXMgcmV2aWV3IGlzIHByZXR0eSBsb25nLCBidXQgSSB0 aGluayB0aGUgZG9jdW1lbnQgaXMgYWN0dWFsbHkgaW4NCj4gPiBwcmV0dHkgZ29vZCBzaGFwZSAt LSB0aGUgbGVuZ3RoIG9mIHJldmlldyBjb21tZW50cyBpcyBqdXN0IGEgbm9ybWFsDQo+ID4gZnJl cXVlbmN5IG9mIHJvdWdoIGVkZ2VzIG11bHRpcGxpZWQgYnkgYSBsb25nIGRvY3VtZW50Lg0KPiA+ DQo+ID4gSSB3aWxsIG1ha2UgYSBnaXRodWIgcHVsbCByZXF1ZXN0IHdpdGggc29tZSBjaGFuZ2Vz IHRoYXQgSSB0aGluayBhcmUNCj4gPiBqdXN0IGVkaXRvcmlhbCAoYnV0IGZlZWwgZnJlZSB0byBi cmluZyB0aGVtIHVwIGFzIGRpc2N1c3Npb24gaXRlbXMgaWYNCj4gPiB5b3UgYXJlIG5vdCBzdXJl IHRoYXQgdGhleSBhcmUgZWRpdG9yaWFsLCBkaXNhZ3JlZSB3aXRoIHRoZSBjaGFuZ2VzLA0KPiA+ IGV0Yy4pDQo+ID4NCj4gPiBXZSBzaG91bGQgcHJvYmFibHkgaW50cm9kdWNlIChvciBhdm9pZCkg dGhlIGNvbmNlcHQgb2YgInBlYWNlLXRpbWUiDQo+ID4gKHNvbWV0aW1lcyBzcGVsbGVkIHdpdGhv dXQgdGhlIGh5cGhlbikgYW5kIHBlcmhhcHMgdGhlIGNvcnJlc3BvbmRpbmcNCj4gPiBhdHRhY2sg c2l0dWF0aW9uIGJlZm9yZSB1c2luZyBpdC4NCj4gPg0KPiANCj4gW01lZF0gV2UgZG8gaGF2ZSB0 d28gb2NjdXJyZW5jZXMgaW4gdGhlIGRvY3VtZW50LiBJIGZpeGVkIHRoZXNlIHR3by4NCj4gDQo+ ID4gU2VjdGlvbiAxDQo+ID4NCj4gPiBJIHdhc24ndCBzdXJlIHdoZXRoZXIgdGhlIFJGQyA0OTg3 IHJlZmVyZW5jZSB3YXMgc3VwcG9zZWQgdG8gYmUgZm9yDQo+ID4gd2hhdCBhbiBBQ0stZmxvb2Qg aXMgb3IgdGhlIGZhY3QgdGhhdCBpdCBpcyBDUFUtZXhoYXVzdGluZyBvciBzb21ldGhpbmcgZWxz ZS4NCj4gPiAoU2VhcmNoaW5nIGZvciB0aG9zZSB0ZXJtcyBpbiBpdHMgdGV4dCBkaWQgbm90IGhl bHAgbWUgY29tZSB0byBhDQo+ID4gY29uY2x1c2lvbi4pDQo+ID4NCj4gDQo+IFtNZWRdIFJGQyA0 OTg3IGlzIGEgcG9pbnRlciB0byBiYWNrIHRoYXQgU1lOIGZsb29kIGlzIG1lbW9yeSBleGhhdXN0 aW5nLiBJDQo+IG1vdmUgdGhlIGNpdGF0aW9uIHJpZ2h0IGFmdGVyIFNZTi1mbG9vZC4NCj4gDQo+ IA0KPiA+IFdlIGFsc28gdGFsayBhYm91dCAiRE9UUyBzZXJ2ZXJzIiBhbmQgIkRPVFMgYWdlbnRz IiBpbiBTZWN0aW9uIDEsDQo+ID4gYmVmb3JlIHdlJ3ZlIGRlZmluZWQgdGhlIHRlcm1pbm9sb2d5 LiAgQnV0IHRoZXNlIHR3byBhcmUgc3VmZmljaWVudGx5DQo+ID4gc2VsZi1leHBsYW5hdG9yeSB0 aGF0IGl0IG1heSBiZSBmaW5lIHRvIGxlYXZlIHRoZW0gYXMtaXMuDQo+ID4NCj4gDQo+IFtNZWRd IFlvdSBhcmUgcmlnaHQuIEkgZG9uJ3QgdGhpbmsgYSBjaGFuZ2UgaXMgbmVlZGVkLg0KPiANCj4g DQo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRo aXMgcHJvdG9jb2wgZW5hYmxlcw0KPiA+ICAgIGNvb3BlcmF0aW9uIGJldHdlZW4gRE9UUyBhZ2Vu dHMgdG8gcGVybWl0IGEgaGlnaGx5LWF1dG9tYXRlZCBuZXR3b3JrDQo+ID4gICAgZGVmZW5zZSB0 aGF0IGlzIHJvYnVzdCwgcmVsaWFibGUsIGFuZCBzZWN1cmUuDQo+ID4NCj4gPiBXZSBzaG91bGQg ZXhwbGFpbiBzb21ld2hlcmUgd2hhdCB3ZSBtZWFuIGJ5ICJzZWN1cmUiLiAgKEkgZ3Vlc3MsIHRo YXQNCj4gPiB0aGUgc2lnbmFsIGFuZCBkYXRhIGNoYW5uZWxzIGFyZSBpbnRlZ3JpdHktIGFuZA0K PiA+IGNvbmZpZGVudGlhbGl0eS1wcm90ZWN0ZWQsIGFuZCB0aGF0IGNoYW5nZXMgaW4gbWl0aWdh dGlvbiBzdGF0dXMgYXJlDQo+ID4gbm90IG1hZGUgdW5sZXNzIHByb3Blcmx5IGF1dGhvcml6ZWQu KQ0KPiA+DQo+IA0KPiBbTWVkXSBCeSBzZWN1cmUsIHdlIG1lYW50IHRoZSBzZXQgb2YgZmVhdHVy ZXMgY2FsbGVkIGluIFNlY3Rpb24gMi40IG9mIGRyYWZ0LQ0KPiBpZXRmLWRvdHMtcmVxdWlyZW1l bnRzLiBXZSBjYW4gYWRkIGEgcG9pbnRlciB0byB0aGF0IHNlY3Rpb24gaWYgdGhpcyBoZWxwcy4N Cj4gDQo+ID4gU2VjdGlvbiAzDQo+ID4NCj4gPiAgICAgICAgICAgICBET1RTIGNsaWVudHMgTUFZ IGFsdGVybmF0aXZlbHkgc3VwcG9ydCBtZWFucyB0byBkeW5hbWljYWxseQ0KPiA+ICAgIGRpc2Nv dmVyIHRoZSBwb3J0cyB1c2VkIGJ5IHRoZWlyIERPVFMgc2VydmVycy4gIFsuLi5dDQo+ID4NCj4g PiBJZiB3ZSBoYXZlIHNvbWUgZXhhbXBsZXMgaW4gbWluZCBvZiBkeW5hbWljIGRpc2NvdmVyeSBw cm90b2NvbHMsIGl0DQo+ID4gd291bGQgYmUgYXBwcm9wcmlhdGUgdG8gcHJvdmlkZSBpbmZvcm1h dGl2ZSByZWZlcmVuY2VzIGhlcmUuDQo+ID4NCj4gDQo+IFtNZWRdIE9LLiBJIGFkZGVkIGFuIGlu Zm9ybWF0aXZlIHJlZmVyZW5jZSB0byBkcmFmdC1ib3VjYWRhaXItZG90cy0NCj4gZGlzY292ZXJ5 Lg0KPiANCj4gPiBXZSBzaG91bGQgYWxzbyBoYXZlIGFuIGluZm9ybWF0aXZlIHJlZmVyZW5jZSBm b3IgIkhhcHB5IEV5ZWJhbGxzIg0KPiA+IChlLmcuLCBSRkMgODMwNSkuDQo+ID4NCj4gDQo+IFtN ZWRdIFRoYXQgdGV4dCBwb2ludHMgdG8gdGhlIHNlY3Rpb24gZGVmaW5pbmcgSEU6DQo+IA0KPiBB IEhhcHB5IEV5ZWJhbGxzIHByb2NlZHVyZSBmb3IgRE9UUyBzaWduYWwgY2hhbm5lbCBpcw0KPiAg ICBzcGVjaWZpZWQgaW4gU2VjdGlvbiA0LjMuDQo+IA0KPiA4MzA1IGlzIGNpdGVkIGluIHNlY3Rp b24gNC4zOg0KPiANCj4gICAgVG8gb3ZlcmNvbWUgdGhlc2UgY29ubmVjdGlvbiBzZXR1cCBwcm9i bGVtcywgdGhlIERPVFMgY2xpZW50IGF0dGVtcHRzDQo+ICAgIHRvIGNvbm5lY3QgdG8gaXRzIERP VFMgc2VydmVyKHMpIHVzaW5nIGJvdGggSVB2NiBhbmQgSVB2NCwgYW5kIHRyaWVzDQo+ICAgIGJv dGggRFRMUyBvdmVyIFVEUCBhbmQgVExTIG92ZXIgVENQIGluIGEgbWFubmVyIHNpbWlsYXIgdG8g dGhlIEhhcHB5DQo+ICAgIEV5ZWJhbGxzIG1lY2hhbmlzbSBbUkZDODMwNV0uDQo+IA0KPiBUaGlz IGlzIHN1ZmZpY2llbnQsIElNTy4NCj4gDQo+ID4gICAgRnJvbSB0aGF0IHN0YW5kcG9pbnQsIHRo aXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEgWUFORyBtb2R1bGUgZm9yDQo+ID4gICAgcmVwcmVzZW50 aW5nIERPVFMgbWl0aWdhdGlvbiBzY29wZXMsIERPVFMgc2lnbmFsIGNoYW5uZWwgc2Vzc2lvbg0K PiA+ICAgIFsuLi5dDQo+ID4NCj4gPiBXaGljaCBzdGFuZHBvaW50Pw0KPiANCj4gW01lZF0gdGhh dCBpcyAidXNlIHRoZSBzYW1lIGRhdGEgbW9kZWxzLi4uIi4NCj4gDQo+IEkgZGVsZXRlZCB0aGUg IkZyb20gdGhhdCBzdGFuZHBvaW50LCIgYmVjYXVzZSB0aGlzIG1heSBub3QgYmUgY2xlYXIuDQo+ IA0KPiA+DQo+ID4gICAgUmVwcmVzZW50aW5nIHRoZXNlIGRhdGEgYXMgQ0JPUiBkYXRhIGlzIGFz c3VtZWQgdG8gZm9sbG93IHRoZSBydWxlcw0KPiA+ICAgIGluIFtJLUQuaWV0Zi1jb3JlLXlhbmct Y2Jvcl0gb3IgdGhvc2UgaW4gW1JGQzc5NTFdIGNvbWJpbmVkIHdpdGgNCj4gPiAgICBKU09OL0NC T1IgY29udmVyc2lvbiBydWxlcyBpbiBbUkZDNzA0OV0uICBBbGwgcGFyYW1ldGVycyBpbiB0aGUN Cj4gPiAgICBwYXlsb2FkIG9mIHRoZSBET1RTIHNpZ25hbCBjaGFubmVsIGFyZSBtYXBwZWQgdG8g Q0JPUiB0eXBlcyBhcw0KPiA+ICAgIHNwZWNpZmllZCBpbiBTZWN0aW9uIDYuDQo+ID4NCj4gPiBI b3cgZG8gSSBrbm93IHdoaWNoIHNldCBvZiBydWxlcyBpcyBpbiB1c2U/DQo+IA0KPiBbTWVkXSBU aGlzIHMgbm90IGltcG9ydGFudCBmcm9tIGEgRE9UUyBpbnRlcm9wZXJhYmlsaXR5IHN0YW5kcG9p bnQuIFdoYXQgaXMNCj4gaW1wb3J0YW50IGlzIHRoZSBtYXBwaW5nIHRhYmxlIGluIFNlY3Rpb24g NiAoYW5kIG1hcHBpbmcgZW50cmllcyB0aGF0IHdpbGwNCj4gZGVmaW5lZCBpbiBmdXR1cmUgZG9j dW1lbnRzKS4NCj4gDQo+ICBBcmUgdGhlIHR3byBzZXRzIG9mIHJ1bGVzDQo+ID4gZXF1aXZhbGVu dCBhbmQgaW50ZXJvcGVyYWJsZT8NCj4gPg0KPiA+ICAgIERPVFMgYWdlbnRzIE1VU1Qgc3VwcG9y dCBHRVQsIFBVVCwgYW5kIERFTEVURSBDb0FQIG1ldGhvZHMuICBbLi4uXQ0KPiA+DQo+ID4gQXMg d3JpdHRlbiwgdGhpcyBhcHBsaWVzIHRvIGFsbCBhZ2VudHMgKGNsaWVudHMsIHNlcnZlcnMsIGFu ZCBwcm94aWVzKS4NCj4gPiBQcmVzdW1hYmx5IHRoaXMgaXMgaW50ZW5kZWQsDQo+IA0KPiBbTWVk XSBZZXMuDQo+IA0KPiAgYnV0IEkganVzdCB3YW50ZSB0byBkb3VibGUtY2hlY2sgLS0NCj4gPiBz b21ldGltZXMgaXQncyBva2F5IHRvIHBsYWNlIHdlYWtlciByZXF1aXJlbWVudHMgb24gY2xpZW50 cy4NCj4gPg0KPiA+ICAgIEluIGRlcGxveW1lbnRzIHdoZXJlIG9uZSBvciBtb3JlIHRyYW5zbGF0 b3JzIChlLmcuLCBUcmFkaXRpb25hbCBOQVQNCj4gPiAgICBbUkZDMzAyMl0sIENHTiBbUkZDNjg4 OF0sIE5BVDY0IFtSRkM2MTQ2XSwgTlBUdjYgW1JGQzYyOTZdKSBhcmUNCj4gPiAgICBlbmFibGVk IGJldHdlZW4gdGhlIGNsaWVudCdzIG5ldHdvcmsgYW5kIHRoZSBET1RTIHNlcnZlciwgRE9UUyBz aWduYWwNCj4gPiAgICBjaGFubmVsIG1lc3NhZ2VzIGZvcndhcmRlZCB0byBhIERPVFMgc2VydmVy IE1VU1QgTk9UIGluY2x1ZGUNCj4gaW50ZXJuYWwNCj4gPiAgICBJUCBhZGRyZXNzZXMvcHJlZml4 ZXMgYW5kL29yIHBvcnQgbnVtYmVyczsgZXh0ZXJuYWwgYWRkcmVzc2VzLw0KPiA+ICAgIHByZWZp eGVzIGFuZC9vciBwb3J0IG51bWJlcnMgYXMgYXNzaWduZWQgYnkgdGhlIHRyYW5zbGF0b3IgTVVT VCBiZQ0KPiA+DQo+ID4gRG8gd2Ugd2FudCB0byBnaXZlIGFueSBleGFtcGxlcyBvZiBzaWduYWwg Y2hhbm5lbCBtZXNzYWdlcyB0aGF0IG1pZ2h0DQo+ID4gaW5jbHVkZSBpbnRlcm5hbCBhZGRyZXNz ZXMvcHJlZml4ZXM/DQo+IA0KPiBbTWVkXSBJJ2QgYXZvaWQgY2l0aW5nIGEgbWVzc2FnZSB3aGlj aCBpcyBub3QgZGVmaW5lZCB5ZXQgYXQgdGhpcyBzdGFnZSBvZiB0aGUNCj4gZG9jdW1lbnQuDQo+ IA0KPiA+DQo+ID4gICAgU3VjaCBwcm9jZWR1cmUgaXMgbmVlZGVkIHRvIGF2b2lkIGV4cGVyaWVu Y2luZyBsb25nIGNvbm5lY3Rpb24NCj4gPiAgICBkZWxheXMuICBGb3IgZXhhbXBsZSwgaWYgYW4g SVB2NCBwYXRoIHRvIHJlYWNoIGEgRE9UUyBzZXJ2ZXIgaXMNCj4gPiAgICBmb3VuZCwgYnV0IHRo ZSBET1RTIHNlcnZlcidzIElQdjYgcGF0aCBpcyBub3Qgd29ya2luZywgYSBkdWFsLXN0YWNrDQo+ ID4gICAgRE9UUyBjbGllbnQgbWF5IGV4cGVyaWVuY2UgYSBzaWduaWZpY2FudCBjb25uZWN0aW9u IGRlbGF5IGNvbXBhcmVkIHRvDQo+ID4gICAgYW4gSVB2NC1vbmx5IERPVFMgY2xpZW50LiAgWy4u Ll0NCj4gPg0KPiA+IFRoZXJlIHNlZW1zIGEgYml0IG9mIGEgbWlzbWF0Y2ggYmV0d2VlbiAiZm91 bmQiIGFuZCAibm90IHdvcmtpbmciLiAgSWYNCj4gPiB0aGUgcG9pbnQgaXMgc3VwcG9zZWQgdG8g YmUgdGhhdCB0aGUgY2xpZW50IGlzIGdvaW5nIHRvIHRyeSBib3RoIElQdjQNCj4gPiBhbmQgSVB2 NiBidXQgdGhlIHY2IHBhdGggaGFzIGlzc3VlcyBhbmQgaXQgd291bGQgdGFrZSB0aGUgY2xpZW50 J3MNCj4gPiBhbGdvcml0aG0gc29tZSBleHRyYSB0aW1lIHRvIGNob29zZSB0byBmYWxsIGJhY2sg dG8gdjQsIHRoZW4gbWF5YmUgIml2DQo+ID4gYW4gSVB2NCBwYXRoIHRvIGEgRE9UUyBzZXJ2ZXIg aXMgZnVuY3Rpb25hbCBhbmQgdGhlcmUgaXMgYWxzbyBhbg0KPiA+IGFwcGFyZW50bHkgcHJlc2Vu dCBidXQgbm9uLWZ1bmN0aW9uYWwgSVB2NiBwYXRoIHRvIHRoZSBzYW1lIHNlcnZlciI/DQo+IA0K PiBbTWVkXSBZb3UgZ290IGl0LiBJIGNoYW5nZWQgdGhlIHRleHQgdG86DQo+IA0KPiAiaWYgYW4g SVB2NCBwYXRoIHRvIHJlYWNoIGEgRE9UUyBzZXJ2ZXIgaXMgZnVuY3Rpb25hbCwgYnV0IHRoZSBE T1RTIHNlcnZlcidzDQo+IElQdjYgcGF0aCBpcyBub24tZnVuY3Rpb25hbCwiDQo+IA0KPiA+DQo+ ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoZXNlIGNvbm5lY3Rpb24gYXR0 ZW1wdHMgYXJlDQo+ID4gICAgcGVyZm9ybWVkIGJ5IHRoZSBET1RTIGNsaWVudCB3aGVuIGl0IGlu aXRpYWxpemVzLiAgVGhlIHJlc3VsdHMgb2YgdGhlDQo+ID4gICAgSGFwcHkgRXllYmFsbHMgcHJv Y2VkdXJlIGFyZSB1c2VkIGJ5IHRoZSBET1RTIGNsaWVudCBmb3Igc2VuZGluZyBpdHMNCj4gPiAg ICBzdWJzZXF1ZW50IG1lc3NhZ2VzIHRvIHRoZSBET1RTIHNlcnZlci4NCj4gPg0KPiA+IEkgc2Vl IHRoaXMgaXMgc2NvcGVkIHRvICJ3aGVuIHRoZSBjbGllbnQgaW5pdGlhbGl6ZXMiLCBzbyBJIGRv bid0IGtub3cNCj4gPiB3aGV0aGVyIGl0IGFkZHMgbW9yZSBvciBub3QgdG8gZW5kIHdpdGggImZv ciB0aGUgZHVyYXRpb24gb2YgdGhlIERPVFMNCj4gPiBzZXNzaW9uIiBvciBzb21lIHNpbWlsYXIg c2NvcGluZyBmb3IgdGhlIGNhY2hpbmcgb2YgdGhlIGhhcHB5IGV5ZWJhbGxzDQo+ID4gcmVzdWx0 cy4NCj4gDQo+IFtNZWRdIFRoZSBjb25uZWN0aW9uIGF0dGVtcHRzIGFyZSBwZXJmb3JtZWQgZWFj aCB0aW1lIHRoZSBjbGllbnQgaGFzIHRvDQo+IHNlbGVjdCBhbW9uZyBhIGxpc3Qgb2YgdjQsIHY2 ICh0bHMsIGR0bHMpLiBUaGlzIGlzIHBhcnRpY3VsYXJseSB0cnVlIHdoZW4gdGhlIGNsaWVudA0K PiBpbml0aWF0ZXMsIGJ1dCB0aGlzIG1heSBhbHNvIGJlIHRydWUgZWFjaCB0aW1lIHRoZSBjbGll bnQgaGFzIHRvIHNlbGVjdCBhbW9uZw0KPiB2NCwgdjYsIERUTFMsIFRMUyAoZS5nLiwgdGhlIGNs aWVudCBhdHRhY2hlcyB0byBhIG5ldyBuZXR3b3JrKS4NCj4gDQo+IEkgdXBkYXRlZCB0aGUgdGV4 dCB0bzoNCj4gDQo+ICJUaGVzZSBjb25uZWN0aW9uIGF0dGVtcHRzIGFyZSBwZXJmb3JtZWQgYnkg dGhlIERPVFMgY2xpZW50IHdoZW4gaXQNCj4gaW5pdGlhbGl6ZXMsIG9yIGluIGdlbmVyYWwgd2hl biBpdCBoYXMgdG8gc2VsZWN0IGFuIGFkZHJlc3MgZmFtaWx5IGFuZCB0cmFuc3BvcnQNCj4gdG8g Y29udGFjdCBpdHMgRE9UUyBzZXJ2ZXIuIg0KDQpIYXBweSBleWViYWxscyBtYW5kYXRlcyBjYWNo aW5nIHRoZSByZXN1bHRzLCBzZWUgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzY1NTUj c2VjdGlvbi00ICh0byBhdm9pZCB0aHJhc2hpbmcgdGhlIG5ldHdvcmspLg0KV2UgbWF5IHdhbnQg dG8gdXBkYXRlIHRoZSBhYm92ZSBsaW5lIGFjY29yZGluZ2x5LiANCg0KQ2hlZXJzLA0KLVRpcnUN Cg0KPiANCj4gPg0KPiA+ICAgIGNsaWVudCBiZWNhdXNlIHRoZXJlIGlzIG5vIGxvbmcgZGVsYXkg YmVmb3JlIHVzaW5nIElQdjQgYW5kIFRDUC4gIFRoZQ0KPiA+ICAgIERPVFMgY2xpZW50IHJlcGVh dHMgdGhlIG1lY2hhbmlzbSB0byBkaXNjb3ZlciB3aGV0aGVyIERPVFMgc2lnbmFsDQo+ID4gICAg Y2hhbm5lbCBtZXNzYWdlcyB3aXRoIERUTFMgb3ZlciBVRFAgYmVjb21lcyBhdmFpbGFibGUgZnJv bSB0aGUgRE9UUw0KPiA+ICAgIHNlcnZlciwgc28gdGhlIERPVFMgY2xpZW50IGNhbiBtaWdyYXRl IHRoZSBET1RTIHNpZ25hbCBjaGFubmVsIGZyb20NCj4gPg0KPiA+IFdoYXQgd291bGQgY2F1c2Ug VURQIHRvICJiZWNvbWUgYXZhaWxhYmxlIj8NCj4gDQo+IFtNZWRdIEluIHRoaXMgZXhhbXBsZSwg dGhpcyBpcyBhc3N1bWVkIHRvIGJlIElQdjYgcGF0aCAod2l0aCBubyBtaWRkbGVib3gpDQo+IGF2 YWlsYWJsZSBhZ2Fpbi4NCj4gDQo+IEluIGdlbmVyYWwsIHRoaXMgY2FuIGJlIGR1ZSB0byBhIHBh dGggY2hhbmdlLCBuZXR3b3JrIGNvbmZpZ3VyYXRpb24gY2hhbmdlLA0KPiBtaWRkbGVib3ggY29u ZmlndXJhdGlvbiBjaGFuZ2UsIElQdjYgYmVjb21lIGZ1bmN0aW9uYWwsIGV0Yy4NCj4gDQo+ICAg V291bGQgdGhpcyBiZSBhIGNhc2UgbGlrZQ0KPiA+IGlmIHRoZXJlJ3MgYSBzdGF0ZWZ1bCBOQVQg b3Igd2hlcmUgd2UgbmVlZCB0byBhY3RpdmVseSBhcHBseSBzb21lIHNvcnQNCj4gPiBvZiBOQVQg dHJhdmVyc2FsPyAgSWYgc28sIGRvIHdlIHdhbnQgdG8gbGlzdCBpdCBhcyBhbiBleGFtcGxlPyAg KElmDQo+ID4gaXQncyBhIGNvbXBsaWNhdGVkIHNjZW5hcmlvLCBpdCBtYXkgbm90IGJlIHdvcnRo IGxpc3RpbmcgYW4gZXhhbXBsZSwNCj4gPiBvZg0KPiA+IGNvdXJzZS4pDQo+IA0KPiBbTWVkXSBU aGUgdGV4dCBhbHJlYWR5IHNheXMgdGhlIGZvbGxvd2luZzoNCj4gDQo+ICJpdCBpcyBhc3N1bWVk IHRoYXQgdGhlIElQdjYgcGF0aCBpcyBicm9rZW4gYW5kIFVEUCB0cmFmZmljIGlzIGRyb3BwZWQg YnkgYQ0KPiBtaWRkbGVib3giDQo+IA0KPiBJIGRvIHRoaW5rIHRoaXMgaXMgc3VmZmljaWVudC4N Cj4gDQo+ID4NCj4gPiBJJ20gbm90IHN1cmUgaWYgd2Ugd2FudCB0byBhZGQgc29tZSBhbm5vdGF0 aW9ucyB0byBGaWd1cmUgNCB0aGF0DQo+ID4gKGUuZy4pIHRoZSBpbml0aWFsIERUTFMgYXR0ZW1w dHMgZG8gbm90IG5lZWQgdG8gYmUgc3RyaWN0bHkgb3JkZXJlZCBpbg0KPiA+IHRoZSBvcmRlciBw cmVzZW50ZWQsIG9yIHRvIGluZGljYXRlIHdoaWNoIGxpbmVzIGFyZSByZXRyaWVzLg0KPiANCj4g W01lZF0gVGhlIHRleHQgZXhwbGFpbmluZyB0aGF0IGZpZ3VyZSBtZW50aW9ucyB0aGUgZm9sbG93 aW5nOiAiLi4udHdvIFRDUA0KPiBTWU5zIGFuZCB0d28gRFRMUyBDbGllbnRIZWxsbyBtZXNzYWdl cyBhdCB0aGUgc2FtZSB0aW1lIG92ZXIgSVB2NiBhbmQNCj4gSVB2NC4iDQo+IA0KPiBBZGRpbmcg YW5ub3RhdGlvbiB3b3VsZCBiZSByZWR1bmRhbnQsIElNTy4NCj4gDQo+IFtTTklQXQ0KPiANCj4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gRG90cyBt YWlsaW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Wed Jan 16 05:26:24 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43C57130F33; Wed, 16 Jan 2019 05:26:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sfRNbW7svod0; Wed, 16 Jan 2019 05:26:20 -0800 (PST) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D35A4130DE9; Wed, 16 Jan 2019 05:26:19 -0800 (PST) Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 43fnzG0TVgz5wZT; Wed, 16 Jan 2019 14:26:18 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.34]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 43fnzF6MJQzDq7r; Wed, 16 Jan 2019 14:26:17 +0100 (CET) Received: from OPEXCAUBM6D.corporate.adroot.infra.ftgroup (10.114.13.57) by OPEXCLILM6F.corporate.adroot.infra.ftgroup (10.114.31.34) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 16 Jan 2019 14:26:17 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6D.corporate.adroot.infra.ftgroup ([fe80::4c24:f1ba:2b1:e490%21]) with mapi id 14.03.0415.000; Wed, 16 Jan 2019 14:26:17 +0100 From: To: Benjamin Kaduk , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (3rd Part) Thread-Index: AdStnwkIYLnL/STeQyWYhz1QpkBSPg== Date: Wed, 16 Jan 2019 13:26:16 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 13:26:22 -0000 Re-, Please see inline.=20 Cheers,=09 Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: mercredi 16 janvier 2019 01:14 > =C0=A0: draft-ietf-dots-signal-channel@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: AD review of draft-ietf-dots-signal-channel-25 >=20 >=20 > To avoid maintaining a > long list of overlapping mitigation requests (i.e., requests with the > same 'trigger-mitigation' type and overlapping scopes) from a DOTS > client and avoid error-prone provisioning of mitigation requests from > a DOTS client, the overlapped lower numeric 'mid' MUST be > automatically deleted and no longer available at the DOTS server. > For example, if the DOTS server receives a mitigation request which > overlaps with an existing mitigation with a higher numeric 'mid', the > DOTS server rejects the request by returning 4.09 (Conflict) to the > DOTS client. [...] >=20 > This seems to be internally inconsistent -- first we hear that the > overlapped mitigation request with lower 'mid' MUST be deleted (BTW, > note my rewording), but at the end we are hearing that a request to > create an overlapping mitgiation must be rejected [Med] It is rejected because it has a lower numeric 'mid'.=20 . (A couple pages > later we also say "can be achieved by sending a PUT request [...] that > will override the existing one with overlapping mitigation scopes" [Med] Yes, the new one will have a higher 'mid'.=20 , > which suggests a resolution of the conflict. [Med] I don't see any inconsistency. Please clarify if I missed your point.= =20 >=20 > The response includes enough information for a DOTS > client to recognize the source of the conflict as described below: >=20 > conflict-information: Indicates that a mitigation request is > [...] >=20 > I'm not entirely sure what encoding to infer from just this description > -- conflict-information/-cause/-scope are in the YANG model, but do we > need to say that the response contains a CBOR representation of the > subtree starting at conflict-information (or something like that), or is > this implicitly specified elsewhere in the document? For example, > Figure 9 has an explicit JSON diagnostic notation for a message > response. [Med] This is covered by this text:=20 Thhis document specifies a YANG module for representing DOTS mitigation scopes, DOTS signal channel session configuration data, and DOTS redirected signalling (Section 5). Representing these data as CBOR data is assumed to follow the rules in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with JSON/CBOR conversion rules in [RFC7049]. All parameters in the ^^^^^^^^^^^^^^^^^^^^^^ payload of the DOTS signal channel are mapped to CBOR types as ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ specified in Section 6. ^^^^^^^^^^^^^^^^^^^^^^ >=20 > conflict-scope: Indicates the conflict scope. It may include a > list of IP addresses, a list of prefixes, a list of port > numbers, a list of target protocols, a list of FQDNs, a list of > URIs, a list of alias-names, or a 'mid'. >=20 > This feels a little under-specified -- do we need to include exactly the > conflicting entries? Or would we just say something like "this > conflicts with 'mid' 8; figure it out"? [Med] This clause indicates the exact conflict scope. It may be for example= : - a conflict of IP addresses. Then, the target addresses in conflict are re= turned. - a conflict with another request, then the mid of that request is returned - etc. We can update the text as follows:=20 conflict-scope: Characterizes the exact conflict scope. It may incl= ude a ^^^^^^^^^^^^^^^^^^^^^^^^ =20 list of IP addresses, a list of prefixes, a list of port numbers, a list of target protocols, a list of FQDNs, a list of URIs, a list of alias-names, or a 'mid'. >=20 > 3: CUID Collision. This code is returned when a DOTS client > uses a 'cuid' that is already used by another DOTS client. > This code is an indication that the request has been > rejected and a new request with a new 'cuid' is to be re- > sent by the DOTS client. Note that 'conflict-status', > 'conflict-scope', and 'retry-timer' are not returned in the > error response. >=20 > (Do we want "MUST NOT" 2119 language to prevent their inclusion or is > the current descriptive language sufficient?) >=20 [Med] OK. > conflict-scope: Indicates the conflict scope. It may include a > list of IP addresses, a list of prefixes, a list of port > numbers, a list of target protocols, a list of FQDNs, a list of > URIs, a list of alias-names, or references to conflicting ACLs. >=20 > How do I reference an ACL? [Med] By an acl-name. I updated the text to hint this:=20 "(by an 'acl-name', typically [I-D.ietf-dots-data-channel])" >=20 > This can be achieved by sending a PUT request > with a new 'mid' value that will override the existing one with > overlapping mitigation scopes. >=20 > Do we want to reiterate that the existing one will be deleted? [Med] The text you quoted reminds that the new request will delete the exis= ting one.=20 >=20 > For a mitigation request to continue beyond the initial negotiated > lifetime, the DOTS client has to refresh the current mitigation > request by sending a new PUT request. This PUT request MUST use the > same 'mid' value, and MUST repeat all the other parameters as sent in > the original mitigation request apart from a possible change to the > lifetime parameter value. >=20 > If the server did not have a check that the other parameters match, what > would happen? [Med] A request may be for example inadvertently transitioned from pre-conf= igured to immediate and vice versa. To avoid such issues, the spec mandates= the following:=20 * a client can adjust its mitigation scope by sending a new one that will o= verride an existing one.=20 * a client can update an existing mitigation by echoing the same parameters= as those in the initial mitigation request.=20 But leave it to the server to decide how to handle the refresh: If the DOTS server finds the 'mid' parameter value conveyed in the PUT request in its configuration data bound to that DOTS client, it MAY update the mitigation request, and a 2.04 (Changed) response is returned to indicate a successful update of the mitigation request. (Do we need normative language that the server MUST > verify the other parameters when the 'mid' matches?) >=20 > Section 4.4.2 >=20 > If the representation of all the active > mitigation requests associated with the DOTS client does not fit > within a single datagram, the DOTS server MUST use the Block2 Option > with NUM =3D 0 in the GET response. [...] >=20 > I'm not very familiar with CoAP blockwise transfers; is this in conflict > with some normal feature-negotiation scheme or is it okay to assume that > the client will be able to handle this even if the client has not > explictly indicated support? [Med] RFC7959 indicates the following:=20 A CoAP implementation that does not support these options generally is limited in the size of the representations that can be exchanged, see Section 4.6 of [RFC7252]. Even though the options are Critical, a server may decide to start using them in an unsolicited way in a response. No effort was expended to provide a capability indication mechanism supporting that decision: since the block-wise transfer mechanisms are so fundamental to the use of CoAP for representations larger than about a kilobyte, there is an expectation that they are very widely implemented. >=20 > This is a mandatory attribute when an attack mitigation is > triggered. Particularly, 'mitigation-start' is not returned for a > mitigation with 'status' code set to 8. >=20 > Is this better as "triggered" or as "active"? [Med] Changed the text to "when an immediate attack mitigation is triggered= ". >=20 > bps-dropped and pps-dropped "SHOULD be a five-minute average", but that > does not seem quite well-defined. Is it a rolling five-minute average > over bins of one second, or a binned five-minute average for the last > five-minute interval that ends on a multiple of '5', or something else? [Med] What is meant in an average over 5-minute intervals. Updated the text= accordingly.=20 >=20 > Upon receipt of a conflict notification message indicating that a > mitigation request is deactivated because of a conflict, a DOTS > client MUST NOT resend the same mitigation request before the expiry > of 'retry-timer'. It is also recommended that DOTS clients support > means to alert administrators about mitigation conflicts. >=20 > Do we need to say anything regarding the server behavior when a > retransmit or similar was in flight already when the conflict > notification was generated? (That is, the server's enforcement of the > MUST NOT may need to be restrained.) [Med] The MUST NOT is intended to avoid overloading the server, because:=20 "Any retransmission of the same mitigation request before the expiry of this timer is likely to be rejected by the DOTS server for the same reasons." =20 The text leave it to the server to decide which action to take when MUST NO= T is not followed by a client. The server may decide the silently ignore th= ose, etc.=20 We can add some text if needed.=20 >=20 > Alternatively, the DOTS client can explicitly deregister itself by > issuing a GET request that has the Token field set to the token of > the observation to be cancelled and includes an Observe Option with > the value set to '1' (deregister). >=20 > This seems like the more "polite" behavior (as opposed to just > "forgetting" -- why is the polite behavior not the default behavior? [Med] Done in my local copy.=20 >=20 > Does the GET in Figure 13 need to have a ".well-known" and other path > components? >=20 [Med] Don't think so. Actually, we are mimicking figure 2 in RFC7641. From nobody Wed Jan 16 05:34:20 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B33F130F3B; Wed, 16 Jan 2019 05:34:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.553 X-Spam-Level: X-Spam-Status: No, score=-11.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dgmJRp74z6nz; Wed, 16 Jan 2019 05:34:14 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77B66130F72; Wed, 16 Jan 2019 05:34:13 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547645535; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=v LKOHaGfEGzyRxEFH43u9oq1/5k6XwD/2o/RYrzSOy 8=; b=YoSMETKCUzKexqltRYymAxmU5U7ZiTmkm6gHcGrGTsl3 4XrgoRXPQgfzOvqmkU2+USFxDpNWab4WMDuIgbiFMGO9ESUW5i NH/Uh57ZFtQYGzQQGcW9zcJeXPgA7OGWM6Taffh+VnDsgf14Co wsX47JYqrv/mf6mQ5nb+yifcT+I= Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 3ac2_7ecb_f5a572cc_bd0f_43d3_a6e4_f0a9c1bfaf39; Wed, 16 Jan 2019 07:32:15 -0600 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 06:30:04 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 Jan 2019 06:30:04 -0700 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 06:30:02 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2840.namprd16.prod.outlook.com (20.178.234.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Wed, 16 Jan 2019 13:30:02 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Wed, 16 Jan 2019 13:30:02 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (2nd Part) Thread-Index: AdSth/4V4uJk+YuhSsWU4l/lLLRChwAFrvyw Date: Wed, 16 Jan 2019 13:30:01 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08269@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08269@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.171.119.30] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2840; 6:lWI4YSh6SdyKN2tOLDZ2oUGM8KiARZgqJyloKnm4JqL+eg0pvGHldhvgiLHD9WkS0BblEVBtm8L62qEXpDb9NBg+1DMPab+NBMsjp+HLGdLu485vuSs/3bRZmQWNH1DOZWylnxdB5zy0UJbOHgmVwDMLvH8Pk3NMVD1vrWp/3a8racwawskIY2+2d1yGz5MSkxZNcIJ39Als9DZuPO7xqndQbt7ktZhcg7gw1oV8Aye/p7UBoZBWIU9lbfeWBrpfbZM6a10cK1yubiGORSbpJ+FJN0Kzx8cw5DVU5DwS7jESi9KdN0jfmcn291e7gWne7gfFChBLv2eobdQr2uwxiYm3t9iheaqB+Ld1gTRPhaA8gQyQl+ZOkmy+h085y5dAbUmweuaB9FB8vzPvZdKFDxq1oWI6e2IN4GxgD5BodkZo7pYWsUW9KC7jlsqDKgcUsAuP4iMDzkyQx4D+n1Gl6g==; 5:4D63kbrwIadB5Zv547rhhCCPQJ24HPz3+y9OPQDdjIqOhsQQKMyTtfeZu7jr2MovjGGv6FHKL7cIsDs66iY34PWNVpbVbi9tSfq5NDXXu/AFDx3ZjpcOk9lclLmPkmFCf4ieWC0/puVScFtt5I2TkWwFDMhciyAZqlAZNhVrNsB/ZtjPEUZcc6tlyrOjfyVng6pWJjg4M3taClrfFGn9/Q==; 7:wmB3KyUJGC2QrBS9Dc6yqXS0qQnJg0OUOhQlljYBrqT7P/e0VKfLLaYUJ1qobSMkQYxZzDvhnoAMvDkZnRW8DiGKNTNTm4wzOLCGCIhgVjaPzj0ijJs4s+ORNaMYttiE0CHDGPWow5IKoa2TBLSFxg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: d5d76de9-5391-4d43-ec3a-08d67bb6b82d x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2840; x-ms-traffictypediagnostic: BYAPR16MB2840: x-microsoft-antispam-prvs: x-forefront-prvs: 091949432C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(39860400002)(136003)(396003)(366004)(346002)(376002)(32952001)(189003)(53434003)(199004)(55784004)(13464003)(105586002)(71190400001)(305945005)(68736007)(7736002)(71200400001)(6116002)(3846002)(66066001)(6306002)(14454004)(72206003)(966005)(9686003)(316002)(99286004)(26005)(6246003)(2171002)(5660300001)(186003)(33656002)(4326008)(106356001)(110136005)(11346002)(53546011)(486006)(81156014)(446003)(97736004)(6436002)(6506007)(2501003)(53936002)(55016002)(80792005)(74316002)(7696005)(229853002)(81166006)(8936002)(2906002)(102836004)(478600001)(14444005)(76176011)(476003)(86362001)(256004)(25786009)(30864003)(78486014)(8676002)(85282002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2840; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: PhK2ZohQ42Rb087DUYQYhPB4E5czd2qE+6UgSP9yOIxjo6cGE6N/KAmmHYieDDL54kjZM7ksTibophA8RIsCtjaZxmZesvyb0ZVPSP+gU5mGmGKFOfac/InSKdyglehkQT9caMIl/cw94UvDARqiW+mfmQEldhxXzv6bbJXcdedc65mSdunrWiiuy0N9UePpWe94qZY/rSQ6EigmMn+iBqa17D4xLAondO44ELtU1y2plwNqfXsTiU32Qpzkd7G9p2a4HCE467bUqnlnY7NZJGdR6csMRKKe61b1A9++uvuVKvLxKWjIPntcav58gbw/VQQER+UvLmmh5jlJzOtjQ3XQEUPoNP1csVMUOScQH7ugty+vOyKJb+5odr38KZ4SHty4qE9OKIjBidJwdg5yPFKyKNKRqRu+BfroKTfKDjU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: d5d76de9-5391-4d43-ec3a-08d67bb6b82d X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jan 2019 13:30:02.1644 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2840 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6461> : inlines <6994> : streams <1810250> : uri <2780807> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (2nd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 13:34:18 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IFdlZG5lc2RheSwgSmFudWFyeSAxNiwgMjAxOSA0OjExIFBNDQo+IFRvOiBCZW5qYW1p biBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5u ZWxAaWV0Zi5vcmcNCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgybmQgUGFydCkN Cj4gDQo+IA0KPiANCj4gUmUtLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVl cnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKg OiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3Jl ZGkgMTYNCj4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsQGlldGYub3JnDQo+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6 IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPg0KPiA+ DQo+ID4gU2VjdGlvbiA0LjQNCj4gPg0KPiA+ICAgIEdFVDogICAgRE9UUyBjbGllbnRzIG1heSB1 c2UgdGhlIEdFVCBtZXRob2QgdG8gc3Vic2NyaWJlIHRvIERPVFMNCj4gPiAgICAgICAgICAgIHNl cnZlciBzdGF0dXMgbWVzc2FnZXMsIG9yIHRvIHJldHJpZXZlIHRoZSBsaXN0IG9mIGl0cw0KPiA+ ICAgICAgICAgICAgbWl0aWdhdGlvbnMgbWFpbnRhaW5lZCBieSBhIERPVFMgc2VydmVyIChTZWN0 aW9uIDQuNC4yKS4NCj4gPg0KPiA+IEknbSBub3QgcmVhbGx5IGEgY2Fub25pY2FsIEhUVFAgZXhw ZXJ0LCBidXQgSSBzdXNwZWN0IHRoYXQgdXNpbmcgR0VUDQo+ID4gdG8gInN1YnNjcmliZSIgd2ls bCByYWlzZSBzb21lIGV5ZWJyb3dzIGF0IGxhdGVyIHN0YWdlcyBvZiByZXZpZXcuDQo+IA0KPiBb TWVkXSBXZSBhcmUgZm9sbG93aW5nIFJGQzc2NDEuIEkgd291bGQgYmUgc3VycHJpc2VkIGlmIHRo aXMgaXMgYW4gaXNzdWUuDQo+IA0KPiAgTWF5YmUNCj4gPiB3ZSBzaG91bGQganVzdCBsZWF2ZSBp dCBhcy1pcyBhbmQgd2FpdCBmb3Igc3VjaCByZXZpZXcgdG8gYXJyaXZlLA0KPiA+IHRob3VnaCwg cmF0aGVyIHRoYW4gdHJ5aW5nIHRvIGRvIHNvbWV0aGluZyBwcmVlbXB0aXZlbHkuDQo+IA0KPiBb TWVkXSBZZXMuDQo+IA0KPiA+DQo+ID4gSSBkb24ndCBrbm93IGlmIHRoaXMgaXMgdGhlIHByb3Bl ciBzZWN0aW9uIHRvIHRhbGsgYWJvdXQgaXQsIGJ1dCB3ZQ0KPiA+IHNob3VsZCBwcm9iYWJseSBo YXZlIHNvbWUgdGV4dCBqdXN0aWZ5aW5nIHRoZSB1c2Ugb2YgYXBwbGljYXRpb24tbGF5ZXINCj4g PiBhY2tub3dsZWRnbWVudCBhcyBvcHBvc2VkIHRvIGp1c3QgdXNpbmcgQ29uZmlybWFibGUgQ29B UCBtZXNzYWdlcy4NCj4gDQo+IFtNZWRdIEknbSBub3Qgc3VyZSB0byB1bmRlcnN0YW5kIHRoaXMg b25lLiBXaGljaCAiYXBwbGljYXRpb24tbGF5ZXINCj4gYWNrbm93bGVkZ21lbnQiIGFyZSB5b3Ug cmVmZXJyaW5nIHRvPw0KPiANCj4gPg0KPiA+IFNlY3Rpb24gNC40LjENCj4gPg0KPiA+IElmIEZp Z3VyZSA1IGlzIGdvaW5nIHRvIHVzZSBhY3R1YWwvZXhhbXBsZSB2YWx1ZXMgZm9yIGN1aWQgYW5k IG1pZCwNCj4gPiB0aGVuIEknZCBzdWdnZXN0IGFsc28gdXNpbmcgYWN0dWFsL2V4YW1wbGUgdmFs dWVzIGZvciB0aGUgSlNPTiBmaWVsZHMNCj4gPiAoaW5zdGVhZCBvZiAiaW50ZWdlciIgYW5kICJz dHJpbmciIGFuZCBzdWNoKS4NCj4gDQo+IFtNZWRdIEkgc3BsaXQgdGhlIGZpZ3VyZSBpbnRvIHR3 byBzbyB0aGF0IHdlIGRvbid0IGhhdmUgdGhpcyBwcm9ibGVtLg0KPiANCj4gPg0KPiA+ICAgIGN1 aWQ6ICBTdGFuZHMgZm9yIENsaWVudCBVbmlxdWUgSWRlbnRpZmllci4gIEEgZ2xvYmFsbHkgdW5p cXVlDQo+ID4gICAgICAgaWRlbnRpZmllciB0aGF0IGlzIG1lYW50IHRvIHByZXZlbnQgY29sbGlz aW9ucyBhbW9uZyBET1RTIGNsaWVudHMsDQo+ID4gICAgICAgZXNwZWNpYWxseSB0aG9zZSBmcm9t IHRoZSBzYW1lIGRvbWFpbi4gIEl0IE1VU1QgYmUgZ2VuZXJhdGVkIGJ5DQo+ID4gICAgICAgRE9U UyBjbGllbnRzLg0KPiA+DQo+ID4gSW4gb3JkZXIgdG8gZ2V0IGdsb2JhbCB1bmlxdWVuZXNzIHdl IGVpdGhlciBuZWVkIHN1ZmZpY2llbnQgcmFuZG9tbmVzcw0KPiA+IG9yIGEgaGllcmFyY2hpY2Fs IGFsbG9jYXRpb24gc3RyYXRlZ3kuICBTaW5jZSB3ZSByZWNvbW1lbmQgYSBzdHJhdGVneQ0KPiA+ IHRoYXQgaW52b2x2ZXMgaGFzaGluZyB0aGUgKHB1YmxpYykgY2xpZW50IGNlcnRpZmljYXRlLCB3 ZSBtYXkgYWxzbw0KPiA+IHdhbnQgdG8gbm90ZSB0aGF0IHRoaXMgdmFsdWUgZG9lcyBub3QgbmVl ZCB0byBiZSB1bmd1ZXNzYWJsZS4gIElmIGENCj4gPiByYW5kb20gYWxsb2NhdGlvbiBpcyBwb3Nz aWJsZSwgSSBzdWdnZXN0IGdpdmluZyBndWlkYW5jZSBvbiBob3cgbWFueQ0KPiA+IHJhbmRvbSBi aXRzIG11c3QgYmUgdXNlZCB0byBzdWZmaWNpZW50bHkgZW5zdXJlIGdsb2JhbCB1bmlxdWVuZXNz ICgxMjgNCj4gPiBtaWdodCBiZSBlbm91Z2gpLg0KPiANCj4gW01lZF0gQW4gYXR0YWNrIHZlY3Rv ciB0aGF0IGNhbiBiZSBhY2hpZXZlZCBpZiB0aGUgY3VpZCBpcyBndWVzc2FibGUgaXMgaWYgYQ0K PiBtaXNiZWhhdmluZyBjbGllbnQgZnJvbSB3aXRoaW4gdGhlIGNsaWVudCdzIGRvbWFpbiBzdWNj ZWVkcyB0byBiZSBncmFudGVkDQo+IGFjY2VzcyBieSB0aGUgc2VydmVyIGFuZCB0aGVuIHVzZXMg dGhlIGN1aWQgb2YgYW5vdGhlciBjbGllbnQgb2YgdGhlIGRvbWFpbg0KPiB0byBkZWxldGUgYWN0 aXZlIG1pdGlnYXRpb24vZXRjLg0KPiANCj4gRm9yIHRoaXMgYXR0YWNrIHZlY3RvciB0byBoYXBw ZW4sIHRoZSBtaXNiZWhhdmluZyBjbGllbnQgbmVlZHMgdG8gcGFzcw0KPiBzZWN1cml0eSB2YWxp ZGF0aW9uIGNoZWNrcyBieSB0aGUgc2VydmVyLiBUaGVyZWZvcmUsIEknbSBub3Qgc3VyZSBpZiBp dCBpcyB3b3J0aA0KPiB0byBhZGQgYW4gYWxsb2NhdGlvbiByZWNvIGdpdmVuIHRoaXMgcGVycXVp c2l0ZS4NCj4gDQo+IFRob3VnaHRzPw0KDQpVVUlEIGRpc2N1c3NlZCBpbiBodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvcmZjNDEyMiBpcyBhbm90aGVyIHdheSBvZiBnZW5lcmF0aW5nIGEgZ2xv YmFsbHkgdW5pcXVlIGlkZW50aWZpZXIuICBBIGNvbXByb21pc2VkIERPVFMgY2xpZW50IGNhbiBz bmlmZiB0aGUgVExTIDEuMiBoYW5kc2hha2UsIHVzZSB0aGUgY2xpZW50IGNlcnRpZmljYXRlIHRv IGlkZW50aWZ5IHRoZSAiY3VpZCIgdXNlZCBieSBhbm90aGVyIERPVFMgY2xpZW50LiBUaGlzIGF0 dGFjayBpcyBub3QgcG9zc2libGUgd2l0aCBUTFMgMS4zIChUTFMgaGFuZHNoYWtlIGlzIGVuY3J5 cHRlZCkuDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4gDQo+ID4NCj4gPiAgICAgICAgICAgICAgICAg ICAgICAgICAgIFRoZSBvdXRwdXQgb2YgdGhlIGNyeXB0b2dyYXBoaWMgaGFzaCBhbGdvcml0aG0N Cj4gPiAgICAgICBpcyB0cnVuY2F0ZWQgdG8gMTYgYnl0ZXM7IHRydW5jYXRpb24gaXMgZG9uZSBi eSBzdHJpcHBpbmcgb2ZmIHRoZQ0KPiA+ICAgICAgIGZpbmFsIDE2IGJ5dGVzLiAgVGhlIHRydW5j YXRlZCBvdXRwdXQgaXMgYmFzZTY0dXJsIGVuY29kZWQuDQo+ID4NCj4gPiBzaWRlIG5vdGU6IFRy dW5jYXRpb24gdG8gMTI4IGJpdHMgcmVkdWNlcyB0aGUgY29sbGlzaW9uIHJlc2lzdGFuY2UgdG8N Cj4gPiA2NC1iaXQgc3RyZW5ndGgsIHRob3VnaCB0aGlzIGlzIHByb2JhYmx5IGFjY2VwdGFibGUg aW4gdGhpcyB1c2UgY2FzZS4NCj4gPg0KPiA+ICAgICAgIERPVFMgc2VydmVycyBNVVNUIHJldHVy biA0LjA5IChDb25mbGljdCkgZXJyb3IgY29kZSB0byBhIERPVFMgcGVlcg0KPiA+ICAgICAgIHRv IG5vdGlmeSB0aGF0IHRoZSAnY3VpZCcgaXMgYWxyZWFkeSBpbi11c2UgYnkgYW5vdGhlciBET1RT DQo+ID4gICAgICAgY2xpZW50LiAgVXBvbiByZWNlaXB0IG9mIHRoYXQgZXJyb3IgY29kZSwgYSBu ZXcgJ2N1aWQnIE1VU1QgYmUNCj4gPiAgICAgICBnZW5lcmF0ZWQgYnkgdGhlIERPVFMgcGVlci4N Cj4gPg0KPiA+IElzIHRoZXJlIGFueSB3YXkgaW4gd2hpY2ggdGhpcyBzaXR1YXRpb24gY291bGQg YXJpc2UgZHVyaW5nIHNvbWUgc29ydA0KPiA+IG9mIG1pZ3JhdGlvbiBzY2VuYXJpbz8NCj4gDQo+ IFtNZWRdIFRoaXMgY2FuIGJlIGZvciBleGFtcGxlIGEgY2xpZW50IHdoaWNoIGRvZXMgbm90IGZv bGxvdyB0aGUgIlNIT1VMRCINCj4gZm9yIGNyZWF0aW5nIHRoZSBjdWlkLg0KPiANCj4gPg0KPiA+ ICAgICAgIENsaWVudC1kb21haW4gRE9UUyBnYXRld2F5cyBNVVNUIGhhbmRsZSAnY3VpZCcgY29s bGlzaW9uIGRpcmVjdGx5DQo+ID4gICAgICAgYW5kIGl0IGlzIFJFQ09NTUVOREVEIHRoYXQgJ2N1 aWQnIGNvbGxpc2lvbiBpcyBoYW5kbGVkIGRpcmVjdGx5IGJ5DQo+ID4gICAgICAgc2VydmVyLWRv bWFpbiBET1RTIGdhdGV3YXlzLg0KPiA+DQo+ID4gSXMgYSBnYXRld2F5IHN1cHBvc2VkIHRvIGtu b3cgaWYgaXQgaXMgImNsaWVudC1zaWRlIiBvciAic2VydmVyLXNpZGUiDQo+ID4gYnkgZXhwbGlj aXQgY29uZmlndXJhdGlvbiBvciBzb21lIG1vcmUgYXV0b21hdGljIG1ldGhvZD8NCj4gDQo+IFtN ZWRdIFRoaXMgY2FuIGJlIGRvbmUgYnkgYW4gZXhwbGljaXQgY29uZmlndXJhdGlvbi4NCj4gDQo+ ID4NCj4gPiAgICAnY3VpZCcgYW5kICdtaWQnIE1VU1QgTk9UIGFwcGVhciBpbiB0aGUgUFVUIHJl cXVlc3QgbWVzc2FnZSBib2R5Lg0KPiA+DQo+ID4gRG8gd2UgbmVlZCB0byBzYXkgdGhpcyBnaXZl biB0aGF0IHRoZXJlJ3Mgbm8gb2J2aW91cyBzdHJ1Y3R1cmUgaW4NCj4gPiB3aGljaCB0byBwdXQg dGhlbT8gIChUaGF0IGlzLCBpcyB0aGlzIGp1c3QgYSByZW1pbmRlciB0byBpbXBsZW1lbnRvcnMN Cj4gPiBvZiBhIHByZXZpb3VzIHZlcnNpb24gb2YgdGhlIGRyYWZ0IHZlcnN1cyBndWlkYW5jZSB0 byBuZXcNCj4gPiBpbXBsZW1lbnRhdGlvbnM/KQ0KPiANCj4gW01lZF0gV2UgdXNlZCB0byBoYXZl IHRob3NlIGluIHRoZSBtZXNzYWdlIGJvZHkgaW4gcHJldmlvdXMgdmVyc2lvbnMgb2YNCj4gdGhl IHNwZWMvaW1wbGVtZW50YXRpb25zLiBGdXJ0aGVybW9yZSwgdGhlcmUgYXJlIGNhc2VzIHdoZXJl ICJtaWQiIGlzDQo+IGFsbG93ZWQgdG8gYmUgaW5jbHVkZWQgaW4gdGhlIG1lc3NhZ2UgYm9keSAo ZS5nLiwgUFVUIHJlc3BvbnNlKS4gV2UNCj4gaW5jbHVkZWQgdGhpcyBub3RlIGZvciBpbXBsZW1l bnRlcnMgYmVjYXVzZSBvZiBzb21lIGJlaGF2aW9ycyBvYnNlcnZlZA0KPiBkdXJpbmcgcGFzdCBp bnRlcm9wcy4NCj4gDQo+ID4NCj4gPiAgICAgICBUaGUgcHJlZml4IGxpc3QgTVVTVCBOT1QgaW5j bHVkZSBicm9hZGNhc3QsIGxvb3BiYWNrLCBvciBtdWx0aWNhc3QNCj4gPiAgICAgICBhZGRyZXNz ZXMuICBUaGVzZSBhZGRyZXNzZXMgYXJlIGNvbnNpZGVyZWQgYXMgaW52YWxpZCB2YWx1ZXMuDQo+ ID4gSW4NCj4gPg0KPiA+IERvZXMgImludmFsaWQiIG1lYW4gdGhhdCB0aGUgcGFydGljdWxhciBh ZGRyZXNzIGdldHMgaWdub3JlZCBvciB0aGF0DQo+ID4gdGhlIGVudGlyZSByZXF1ZXN0IGlzIHJl amVjdGVkPw0KPiANCj4gW01lZF0gVGhlIGV4cGVjdGVkIGJlaGF2aW9yIGlzIGNvdmVyZWQgYnkg dGhpcyB0ZXh0Og0KPiANCj4gIiAuLi4gb3IgY29udGFpbnMgaW52YWxpZCBvciB1bmtub3duIHBh cmFtZXRlcnMsIHRoZSBET1RTIHNlcnZlciBNVVNUIHJlcGx5DQo+IHdpdGggNC4wMCAoQmFkIFJl cXVlc3QpLiINCj4gDQo+ID4NCj4gPiAgICB0YXJnZXQtZnFkbjogICBBIGxpc3Qgb2YgRnVsbHkg UXVhbGlmaWVkIERvbWFpbiBOYW1lcyAoRlFETnMpDQo+ID4gICAgICAgaWRlbnRpZnlpbmcgcmVz b3VyY2VzIHVuZGVyIGF0dGFjay4gIEFuIEZRRE4gaXMgdGhlIGZ1bGwgbmFtZSBvZiBhDQo+ID4g ICAgICAgcmVzb3VyY2UsIHJhdGhlciB0aGFuIGp1c3QgaXRzIGhvc3RuYW1lLiAgRm9yIGV4YW1w bGUsICJ2ZW5lcmEiIGlzDQo+ID4gICAgICAgYSBob3N0bmFtZSwgYW5kICJ2ZW5lcmEuaXNpLmVk dSIgaXMgYW4gRlFETiBbUkZDMTk4M10uDQo+ID4NCj4gPiBJIHdvdWxkIHN1Z2dlc3QgcmVmZXJy aW5nIHRvIGRyYWZ0LWlldGYtZG5zb3AtdGVybWlub2xvZ3ktYmlzIHJhdGhlcg0KPiA+IHRoYW4g dHJ5aW5nIHRvIHJlcHJvZHVjZSBhIGRlZmluaXRpb24gb2YgRlFETi4NCj4gPg0KPiANCj4gW01l ZF0gSSBhZGRlZCBhbiBpbmZvcm1hdGl2ZSByZWZlcmVuY2UgdG8gZHJhZnQtaWV0Zi1kbnNvcC10 ZXJtaW5vbG9neS1iaXMuDQo+IA0KPiA+IFdlIGFsc28gbWF5IHdhbnQgdG8gbm90ZSB0aGF0IHRo ZSBETlMgdmlldyBjYW4gY2hhbmdlIGRlcGVuZGluZyBvbiB0aGUNCj4gPiB2YW50YWdlIHBvaW50 IHVzZWQgdG8gbWFrZSB0aGUgb2JzZXJ2YXRpb24uDQo+IA0KPiBbTWVkXSBOb3Qgc3VyZSB3aGF0 IHRvIGRvIHdpdGggdGhpcyBvbmUgZ2l2ZW4gdGhhdCB0aGUgdGV4dCBzYXlzOg0KPiANCj4gIkhv dyBhIG5hbWUgaXMgcGFzc2VkIHRvIGFuIHVuZGVybHlpbmcgbmFtZSByZXNvbHV0aW9uIGxpYnJh cnkgaXMNCj4gaW1wbGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLiINCj4gDQo+ ID4NCj4gPiBPbiBwYWdlIDE4IHdlIHNheSB0aGF0IHNlcnZlci1kb21haW4gRE9UUyBnYXRld2F5 cyAiTVVTVCBzdXBwbHkgWy4uLl0NCj4gPiAnY2RpZCciLCBidXQgdGhlIHByZXZpb3VzIHBhcmFn cmFwaCBzYXlzIHRoYXQgdGhlcmUgU0hPVUxEIGJlIGENCj4gPiBjb25maWd1cmF0aW9uIG9wdGlv biBmb3Igd2hldGhlciB0byBpbnNlcnQgJ2NkaWQnIG9uIHN1Y2ggc3lzdGVtcy4NCj4gPiBUaGUg dHdvIHJlcXVpcmVtZW50cyBhcmUgaW4gY29uZmxpY3Q7IHdoaWNoIHdhcyBpbnRlbmRlZD8gIChJ IGFzc3VtZQ0KPiA+IHRoZSBNVVNUIC0tIHdoeSB3b3VsZCBpdCBiZSBkZXNpcmVkIHRvIG5vdCBo YXZlIHRoZSBpbmZvcm1hdGlvbg0KPiA+IGF2YWlsYWJsZT8pDQo+IA0KPiBbTWVkXSBUaGlzIHRl eHQgaXMgYWJvdXQgZ2F0ZXdheXMgdGhhdCBhcmUgaW5zdHJ1Y3RlZCB0byBpbnNlcnQgdGhlIGNk aWQNCj4gcGFyYW1ldGVyLiBnYXRld2F5cyBmYWNpbmcgYSBjbGllbnQncyBkb21haW4gYXJlIGlu IHRoaXMgY2FzZS4NCj4gDQo+IEkgdXBkYXRlZCB0aGUgdGV4dCB3aXRoICJzZXJ2ZXItZG9tYWlu IERPVFMgZ2F0ZXdheXMgaW5zdHJ1Y3RlZCB0byBpbnNlcnQNCj4gdGhlICdjZGlkJyBwYXJhbWV0 ZXIgTVVTVCBzdXBwbHkuLiINCj4gDQo+ID4NCj4gPiBUaGUgc2FtZSBwYXJhZ3JhcGggYWxzbyBz YXlzIHRoYXQgdGhlICdjZGlkJyBpcyAibGlrZWx5IHRvIGJlIHRoZSBzYW1lDQo+ID4gYXMiIHRo ZSAnY3VpZCcsIHRob3VnaCBpbiBhZGRpdGlvbiB0byB0aGUgbGlzdGVkIHJlYXNvbnMgdGhlIGNs aWVudA0KPiA+IG9ubHkgaGFzIGEgU0hPVUxEIHJlcXVpcmVtZW50IHRvIGZvbGxvdyB0aGlzIHBy b2NlZHVyZSBmb3IgZ2VuZXJhdGluZw0KPiA+ICdjdWlkJzsgaXQgbWF5IGJlIHdvcnRoIG5vdGlu ZyB0aGUgY2xpZW50J3MgbGVld2F5IGhlcmUgYXMgd2VsbC4NCj4gDQo+IFtNZWRdIFllcywgdGhp cyBpcyB3aHkgd2UgaGF2ZSAibGlrZWx5IiBpbiB0aGUgdGV4dC4NCj4gDQo+ID4NCj4gPiAgICAg ICBJZiBhIERPVFMgY2xpZW50IGlzIHByb3Zpc2lvbmVkLCBmb3IgZXhhbXBsZSwgd2l0aCBkaXN0 aW5jdA0KPiA+ICAgICAgIGNlcnRpZmljYXRlcyBhcyBhIGZ1bmN0aW9uIG9mIHRoZSBwZWVyIHNl cnZlci1kb21haW4gRE9UUyBnYXRld2F5LA0KPiA+ICAgICAgIGRpc3RpbmN0ICdjZGlkJyB2YWx1 ZXMgbWF5IGJlIHN1cHBsaWVkIGJ5IGEgc2VydmVyLWRvbWFpbiBET1RTDQo+ID4gICAgICAgZ2F0 ZXdheS4gIFRoZSB1bHRpbWF0ZSBET1RTIHNlcnZlciBNVVNUIHRyZWF0IHRob3NlICdjZGlkJyB2 YWx1ZXMNCj4gPiAgICAgICBhcyBlcXVpdmFsZW50Lg0KPiA+DQo+ID4gSXMgdGhpcyBwYXJhZ3Jh cGggdHJ5aW5nIHRvIHNheSB0aGF0IGEgY2xpZW50IG1pZ2h0IHN1cHBseSBkaWZmZXJlbnQNCj4g PiBjZXJ0cyB0byBkaWZmZXJlbnQgZ2F0ZXdheXMgaW4gdGhlIHNhbWUgZG9tYWluDQo+IA0KPiBb TWVkXSBZZXMuDQo+IA0KPiAgKGUuZy4sIGlmIG9uZSBzdWNoDQo+ID4gZ2F0ZXdheSBkb2VzIG5v dCBzdXBwb3J0IGVjZHNhIGNlcnRzKT8gIEl0IHdhcyBwcmV0dHkgY29uZnVzaW5nIG9uIHRoZQ0K PiA+IGZpcnN0IHJlYWQsIGluIHBhcnRpY3VsYXIgaG93IHRoZSB1bHRpbWF0ZSBET1RTIHNlcnZl ciB3b3VsZCBrbm93IHRoYXQNCj4gPiB0aGUgZGlmZmVyZW50ICdjZGlkJyB2YWx1ZXMgYWN0dWFs bHkgY29ycmVzcG9uZCB0byB0aGUgc2FtZSBjbGllbnQNCj4gPiBbZG9tYWluXS4NCj4gDQo+IFtN ZWRdIFRoaXMgaXMgc3VwcG9zZWQgdG8gYmUgcHJvdmlzaW9uZWQgb24gdGhlIHNlcnZlci4gVGhp cyBpcyBkZXBsb3ltZW50LQ0KPiBzcGVjaWZpYzsgaGVuY2Ugbm8gbWVudGlvbiBpbiB0aGUgZHJh ZnQuDQo+IA0KPiA+DQo+ID4gICAgICAgRE9UUyBzZXJ2ZXJzIE1VU1QgaWdub3JlICdjZGlkJyBh dHRyaWJ1dGVzIHRoYXQgYXJlIGRpcmVjdGx5DQo+ID4gICAgICAgc3VwcGxpZWQgYnkgc291cmNl IERPVFMgY2xpZW50cyBvciBjbGllbnQtZG9tYWluIERPVFMgZ2F0ZXdheXMuDQo+ID4gICAgICAg VGhpcyBpbXBsaWVzIHRoYXQgZmlyc3Qgc2VydmVyLWRvbWFpbiBET1RTIGdhdGV3YXlzIE1VU1Qg c3RyaXANCj4gPiAgICAgICAnY2RpZCcgYXR0cmlidXRlcyBzdXBwbGllZCBieSBET1RTIGNsaWVu dHMuICBET1RTIHNlcnZlcnMgU0hPVUxEDQo+ID4gICAgICAgc3VwcG9ydCBhIGNvbmZpZ3VyYXRp b24gcGFyYW1ldGVyIHRvIGlkZW50aWZ5IERPVFMgZ2F0ZXdheXMgdGhhdA0KPiA+ICAgICAgIGFy ZSB0cnVzdGVkIHRvIHN1cHBseSAnY2RpZCcgYXR0cmlidXRlcy4NCj4gPg0KPiA+IElzIHRoZXJl IGFueSBtZWNoYW5pc20gKGUuZy4sIGF1dG9kZXRlY3Rpb24pIG90aGVyIHRoYW4gdGhpcyBieSB3 aGljaA0KPiA+IHNlcnZlcnMvcHJveGllcyBjYW4gbGVhcm4gYWJvdXQgdGhlIHRvcG9sb2d5IGlu Zm9ybWF0aW9uIG5lZWRlZCB0bw0KPiA+IGZ1bGZpbCB0aGVzZSByZXF1aXJlbWVudHM/DQo+IA0K PiBbTWVkXSBJJ20gbm90IGF3YXJlIG9mIHN1Y2ggbWVjaGFuaXNtLg0KPiANCj4gPg0KPiA+ICAg IEJlY2F1c2Ugb2YgdGhlIGNvbXBsZXhpdHkgdG8gaGFuZGxlIHBhcnRpYWwgZmFpbHVyZSBjYXNl cywgdGhpcw0KPiA+ICAgIHNwZWNpZmljYXRpb24gZG9lcyBub3QgYWxsb3cgZm9yIGluY2x1ZGlu ZyBtdWx0aXBsZSBtaXRpZ2F0aW9uDQo+ID4gICAgcmVxdWVzdHMgaW4gdGhlIHNhbWUgUFVUIHJl cXVlc3QuICBDb25jcmV0ZWx5LCBhIERPVFMgY2xpZW50IE1VU1QgTk9UDQo+ID4gICAgaW5jbHVk ZSBtdWx0aXBsZSAnc2NvcGUnIHBhcmFtZXRlcnMgaW4gdGhlIHNhbWUgUFVUIHJlcXVlc3QuDQo+ ID4NCj4gPiAibXVsdGlwbGUgJ3Njb3BlJyBwYXJhbWV0ZXJzIiByZWFkcyBsaWtlIGEgQ0JPUiBv YmplY3Qgd2l0aCBkdXBsaWNhdGUNCj4gPiBrZXlzOyBpcyB0aGlzIGludGVuZGVkIHRvIHJlZmVy IHRvIGEgbXVsdGktdmFsdWVkIGFycmF5Pw0KPiANCj4gW01lZF0gV2hhdCBpcyBpbnRlbmRlZCBp cyB0aGF0IHRoZSBzY29wZSBsaXN0IHNob3VsZCBpbmNsdWRlIG9ubHkgb25lIGVudHJ5Li4NCj4g DQo+IEkgY2FuIGNoYW5nZSB0byAibXVsdGlwbGUgJ3Njb3BlJyBjbGF1c2VzIg0KPiANCj4gPg0K PiA+ICAgIFRoZSBET1RTIHNlcnZlciBjb3VwbGVzIHRoZSBET1RTIHNpZ25hbCBhbmQgZGF0YSBj aGFubmVsIHNlc3Npb25zDQo+ID4gICAgdXNpbmcgdGhlIERPVFMgY2xpZW50IGlkZW50aXR5IGFu ZCBvcHRpb25hbGx5IHRoZSAnY2RpZCcgcGFyYW1ldGVyDQo+ID4NCj4gPiBUaGlzIHJlcXVpcmVz IHRoZSBjbGllbnQgdG8gdXNlIHRoZSBzYW1lIGNlcnRpZmljYXRlIHRvIGF1dGhlbnRpY2F0ZQ0K PiA+IHRoZSBzaWduYWwgYW5kIGRhdGEgY2hhbm5lbHMgdG8gYSBnaXZlbiBzZXJ2ZXIgKGV2ZW4g d2hlbiBhIGdhdGV3YXkgaXMNCj4gPiBpbiB1c2UpLiAgQWJvdmUsIHdlIGRpc2N1c3NlZCBjYXNl cyB3aGVyZSBhIGNsaWVudCBtaWdodCBoYXZlIG11bHRpcGxlDQo+ID4gY2VydGlmaWNhdGVzIGF2 YWlsYWJsZS4NCj4gDQo+IFtNZWRdIEFjdHVhbGx5LCB0aGUgdGV4dCBhYm92ZSBhcHBsaWVzIGFs c28gaWYgZGlzdGluY3QgY2VydGlmaWNhdGVzIGFyZSB1c2VkLg0KPiBFcXVpdmFsZW50ICJjbGll bnQgaWRlbnRpdHkiIGFyZSBzdXBwb3NlZCB0byBiZSBrbm93biB0byB0aGUgc2VydmVyIGJ5IGFu DQo+IG91dCBvZiBiYW5kIG1lYW5zLiBJbiBhbGwgY2FzZXMsIHRoZSBpZGVudGl0eSAoc2FtZSBv ciBlcXVpdmFsZW50KSBpcyB1c2VkIHRvDQo+IGNvdXBsZSB0aGUgc2Vzc2lvbnMuDQo+IA0KPiAg IFdoZXJlIGRvIHdlIHNwZWNpZnkgdGhlIHJlcXVpcmVtZW50IHRvIHVzZSB0aGUNCj4gPiBzYW1l IGNlcnRpZmljYXRlIGZvciBzaWduYWwgYW5kIGRhdGEgY2hhbm5lbHM/DQo+IA0KPiBbTWVkXSBX ZSBkb24ndCBoYXZlIHN1Y2ggcmVxdWlyZW1lbnQgaW4gZXhpc3RpbmcgRE9UUyBkb2N1bWVudHMu DQo+IA0KPiA+DQo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBET1RTIGFnZW50cyBjYW4gc2FmZWx5DQo+ID4gICAgaWdub3JlIFZlbmRvci1TcGVjaWZp YyBwYXJhbWV0ZXJzIHRoZXkgZG9uJ3QgdW5kZXJzdGFuZC4NCj4gPg0KPiA+IFRoaXMgaXMgbm90 IGEgdmVyeSB1c2VmdWwgc3RhdGVtbmV0IGlmIHRoZSBhZ2VudCBtdXN0IGtub3cgdGhhdCBhDQo+ ID4gcGFyYW1ldGVyIGlzIHZlbmRvci1zcGVjaWZpYyBpbiBvcmRlciB0byBzYWZlbHkgaWdub3Jl IGl0Lg0KPiANCj4gW01lZF0gVGhlIGFnZW50IHJlbGllcyBvbiB0aGUgY2JvciBrZXkgdmFsdWUg dG8gZGV0ZXJtaW5lIHRoYXQgYSBwYXJhbWV0ZXINCj4gY2FuIGJlIHNhZmVseSBpZ25vcmVkIG9y IG5vdCAoY29tcHJlaGVuc2lvbi1yZXF1aXJlZCkuIEEgcmFuZ2Ugb2Yga2V5cyBpcw0KPiByZXNl cnZlZCBmb3IgY29tcHJlaGVuc2lvbi1vcHRpb25hbC4gQW4gYWdlbnQgY2hlY2tzIHRoZSByYW5n ZSB0byB3aGljaA0KPiBiZWxvbmcgYSBwYXJhbWV0ZXIsIGFuZCB0aGVuIGJlaGF2ZXMgYWNjb3Jk aW5nbHkuDQo+IA0KPiA+DQo+ID4gICAgSWYgdGhlIERPVFMgc2VydmVyIGRvZXMgbm90IGZpbmQg dGhlICdtaWQnIHBhcmFtZXRlciB2YWx1ZSBjb252ZXllZA0KPiA+ICAgIGluIHRoZSBQVVQgcmVx dWVzdCBpbiBpdHMgY29uZmlndXJhdGlvbiBkYXRhLCBpdCBNQVkgYWNjZXB0IHRoZQ0KPiA+ICAg IG1pdGlnYXRpb24gcmVxdWVzdCBieSBzZW5kaW5nIGJhY2sgYSAyLjAxIChDcmVhdGVkKSByZXNw b25zZSB0byB0aGUNCj4gPiAgICBET1RTIGNsaWVudDsgdGhlIERPVFMgc2VydmVyIHdpbGwgY29u c2VxdWVudGx5IHRyeSB0byBtaXRpZ2F0ZSB0aGUNCj4gPiAgICBhdHRhY2suDQo+ID4NCj4gPiAg ICBJZiB0aGUgRE9UUyBzZXJ2ZXIgZmluZHMgdGhlICdtaWQnIHBhcmFtZXRlciB2YWx1ZSBjb252 ZXllZCBpbiB0aGUNCj4gPiAgICBQVVQgcmVxdWVzdCBpbiBpdHMgY29uZmlndXJhdGlvbiBkYXRh IGJvdW5kIHRvIHRoYXQgRE9UUyBjbGllbnQsIGl0DQo+ID4gICAgTUFZIHVwZGF0ZSB0aGUgbWl0 aWdhdGlvbiByZXF1ZXN0LCBhbmQgYSAyLjA0IChDaGFuZ2VkKSByZXNwb25zZSBpcw0KPiA+ICAg IHJldHVybmVkIHRvIGluZGljYXRlIGEgc3VjY2Vzc2Z1bCB1cGRhdGUgb2YgdGhlIG1pdGlnYXRp b24gcmVxdWVzdC4NCj4gPg0KPiA+IFRoZXJlIGFyZSB0d28gIk1BWSJzIHNwcmVhZCBhY3Jvc3Mg dGhlc2UgdHdvIHBhcmFncmFwaHM7IGRvIHdlIHdhbnQgdG8NCj4gPiBzYXkgYW55dGhpbmcgYWJv dXQgaW4gd2hhdCBjYXNlcyB0aGUgc2VydmVyIG1pZ2h0IHdhbnQgdG8gaGF2ZQ0KPiA+IGRpZmZl cmVudCBiZWhhdmlvciAoaS5lLiwgaWdub3JlIHRoZSBNQVkpPw0KPiA+DQo+IA0KPiBbTWVkXSBG b3IgdGhlIGZpcnN0IE1BWSwgYSB0eXBpY2FsIGV4YW1wbGUgaXMgd2hlbiBhIHJhdGUgbGltaXQg aXMgZW5mb3JjZWQ6DQo+IA0KPiAgICBSYXRlLWxpbWl0aW5nIERPVFMgcmVxdWVzdHMsIGluY2x1 ZGluZyB0aG9zZSB3aXRoIG5ldyAnY3VpZCcgdmFsdWVzLA0KPiAgICBmcm9tIHRoZSBzYW1lIERP VFMgY2xpZW50IGRlZmVuZHMgYWdhaW5zdCBEb1MgYXR0YWNrcyB0aGF0IHdvdWxkDQo+ICAgIHJl c3VsdCBpbiB2YXJ5aW5nIHRoZSAnY3VpZCcgdG8gZXhoYXVzdCBET1RTIHNlcnZlciByZXNvdXJj ZXMuICBSYXRlLQ0KPiAgICBsaW1pdCBwb2xpY2llcyBTSE9VTEQgYmUgZW5mb3JjZWQgb24gRE9U UyBnYXRld2F5cyAoaWYgZGVwbG95ZWQpIGFuZA0KPiAgICBET1RTIHNlcnZlcnMNCj4gDQo+IEZv ciB0aGUgc2Vjb25kIE1BWSwgdGhlIHNlcnZlciBtYXkgaGF2ZSBtb3JlIHZpc2liaWxpdHkgb24g dGhlIGF0dGFjayBhbmQNCj4gdGhlbiBtYXkgZGVjaWRlIHRvIHVwZGF0ZSBhY2NvcmRpbmdseS4N Cj4gDQo+IEkgZG9uJ3Qga25vdyBpZiBpdCBpcyB3b3J0aCB0byBhZGQgZXhhbXBsZXMuIEFueSBw cmVmZXJlbmNlPw0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Wed Jan 16 05:53:59 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47C18130EAF; Wed, 16 Jan 2019 05:53:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.553 X-Spam-Level: X-Spam-Status: No, score=-11.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QZVXTFjtF_32; Wed, 16 Jan 2019 05:53:54 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A624130E5F; Wed, 16 Jan 2019 05:53:53 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547646764; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=e +qJrTILf6qVVFIGyVKbED1Yq3yPvQi4t+k197HZ9y 0=; b=ars0AyCZYOBZqDa+0IFbgsawZc99FjtEHVMPW/JeeK3z ztpyNk7BfjFNFPc3fv3hO2HIT59TWTNLYQVjvGRYrZ+3+PGW4i 1Mwdk261oXZmyMVv3bDYVLkni2L+N0cQ8fIx11Ti+UQaUquNBv dL4MUOExGfr4qGrurzduLl4y3X4= Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 3ac2_c70d_345c0e10_3e29_46d1_a6c3_d6c89aa6b81c; Wed, 16 Jan 2019 07:52:43 -0600 Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 06:50:24 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 Jan 2019 06:50:23 -0700 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 06:50:23 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2485.namprd16.prod.outlook.com (20.177.224.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.17; Wed, 16 Jan 2019 13:50:22 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Wed, 16 Jan 2019 13:50:22 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (3rd Part) Thread-Index: AdStnwkIYLnL/STeQyWYhz1QpkBSPgAAieNg Date: Wed, 16 Jan 2019 13:50:22 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.171.119.30] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2485; 6:1AchQAKh78VnnXQk/FG2E7Xrra0yqOWwad8BZL2QcJP9tubguS0mVW5U+SFoG4a0/1g/QnbmPoaXx75Uaps4Vuyhke1DSt4qKnjUJPsnup8+4z8ZpTWYHyt75+X23C4FDUJ9MsSknC6+kKSEIQ9TXVSQ8BJK1InIvmO6iIL4rwUt8/XJCQBu0rAkwHrQ4utP4TbF9NQWwFTYpybi4sFC/0yMepav9dzPC+aOwfTz9VpacP5LcdL7rVKESNTpXviwmzbKE9X3XfEGbbpvuaSL2bCkV3QAHFcdSSfwLR5LMtGLtehz2SFWpRBfwoPMQqyUCVSHzJ+s6Y+hbGFrMX52VlTmNvV4IVbM79hicqEyhwGrksJWaiQpKVBFfHDzLX3p70X/+ZEx3lBPxauKV88TGI/FeV5evGa6gMeHuEBxGSoZSLl8lc1mYnfAwYgvSTSgS8Lch+HVYoee1YhKsKCKDg==; 5:hI6ZuhZZqY6DY89Ubw+Uni5kGxbVyiEko8qHpvoOZqQUatYmrxWjnWVfulr5dJZl5eqK4efsf4W+ugZMDcGXJ14yTOBt5bELSqj/vj0RFDi1AQ7stZxY5A5cokPPAgKYLLu19lBTL2HkctddivyrjwCG5QqscA0Iccbvd9PyYwG/8utJFU3YIMqGCRmrXx5w/fRl9JkXuN9ItqtFj8MQ+Q==; 7:LhXruMUpDAhiDfi/8caapD6MtJ+nCZuL/yhPgTs6BRJE5myeHJiadKFeT/Dwf1Urd05FrgeRT83VJmp5B1u69gDStFfrWf9Y0tLUjmytmm53b9gUow6Z0tDs+FRE/QUW9vrXOHuepEybpz7uyRXt4Q== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: a078043d-4f28-41cb-c9ca-08d67bb98f6a x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2485; x-ms-traffictypediagnostic: BYAPR16MB2485: x-microsoft-antispam-prvs: x-forefront-prvs: 091949432C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(346002)(366004)(376002)(39860400002)(396003)(13464003)(32952001)(189003)(199004)(55784004)(53936002)(71200400001)(966005)(6116002)(6506007)(2906002)(446003)(105586002)(78486014)(26005)(305945005)(68736007)(33656002)(11346002)(6246003)(7696005)(476003)(76176011)(2171002)(71190400001)(72206003)(8936002)(4326008)(186003)(3846002)(486006)(478600001)(102836004)(53546011)(80792005)(97736004)(55016002)(6436002)(256004)(81156014)(81166006)(25786009)(30864003)(14444005)(66066001)(99286004)(8676002)(316002)(6306002)(110136005)(9686003)(86362001)(106356001)(7736002)(14454004)(2501003)(229853002)(74316002)(5660300001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2485; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: t38MS48BHC5i0tFmmrPM3BvuLriqBzhvgEh7qFwBcVmhOVVYcJXuu09sQ9YagCcIoFYbsQkwq5/RwkhBBIYgWISLYMz8uvIwJ/oyabLtOYdbiIebP1cwgrD3BXX8h+07dnNdHF6ZBV4H1LCmwfeTvioA00hfLhd5pw6YycTI/yzzDgNuzJmLV+xpMz8a4ngeBukUZxZ1U51DTL8nUG4EeBN7I6znCl0CHNogv5+bH1z2mZiiDBVwpetOWSOzBqICY0c+qypSkdIaR2OamEZzcfa0CGSSpH9L2rUwZODTkPMCKsZJJqSncVl4L0sqoO0GBEyv5123vVWWIQcEn5O+tvbxAOIZ24Awm2X72qPZm4fLgWW6PRk+OQCaq7GhLlxEH2sC5tNa8q33FhFrFbUF7PqUJzCPlfXY9SL/Q+1y/sM= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: a078043d-4f28-41cb-c9ca-08d67bb98f6a X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jan 2019 13:50:22.3329 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2485 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6461> : inlines <6994> : streams <1810251> : uri <2780814> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 13:53:58 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IFdlZG5lc2RheSwgSmFudWFyeSAxNiwgMjAxOSA2OjU2IFBNDQo+IFRvOiBCZW5qYW1p biBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5u ZWxAaWV0Zi5vcmcNCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgzcmQgUGFydCkN Cj4gDQo+IA0KPiANCj4gUmUtLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVl cnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKg OiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3Jl ZGkgMTYNCj4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsQGlldGYub3JnDQo+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6 IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPg0KPiA+ DQo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBU byBhdm9pZCBtYWludGFpbmluZyBhDQo+ID4gICAgbG9uZyBsaXN0IG9mIG92ZXJsYXBwaW5nIG1p dGlnYXRpb24gcmVxdWVzdHMgKGkuZS4sIHJlcXVlc3RzIHdpdGggdGhlDQo+ID4gICAgc2FtZSAn dHJpZ2dlci1taXRpZ2F0aW9uJyB0eXBlIGFuZCBvdmVybGFwcGluZyBzY29wZXMpIGZyb20gYSBE T1RTDQo+ID4gICAgY2xpZW50IGFuZCBhdm9pZCBlcnJvci1wcm9uZSBwcm92aXNpb25pbmcgb2Yg bWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tDQo+ID4gICAgYSBET1RTIGNsaWVudCwgdGhlIG92ZXJs YXBwZWQgbG93ZXIgbnVtZXJpYyAnbWlkJyBNVVNUIGJlDQo+ID4gICAgYXV0b21hdGljYWxseSBk ZWxldGVkIGFuZCBubyBsb25nZXIgYXZhaWxhYmxlIGF0IHRoZSBET1RTIHNlcnZlci4NCj4gPiAg ICBGb3IgZXhhbXBsZSwgaWYgdGhlIERPVFMgc2VydmVyIHJlY2VpdmVzIGEgbWl0aWdhdGlvbiBy ZXF1ZXN0IHdoaWNoDQo+ID4gICAgb3ZlcmxhcHMgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9u IHdpdGggYSBoaWdoZXIgbnVtZXJpYyAnbWlkJywgdGhlDQo+ID4gICAgRE9UUyBzZXJ2ZXIgcmVq ZWN0cyB0aGUgcmVxdWVzdCBieSByZXR1cm5pbmcgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZQ0KPiA+ ICAgIERPVFMgY2xpZW50LiAgWy4uLl0NCj4gPg0KPiA+IFRoaXMgc2VlbXMgdG8gYmUgaW50ZXJu YWxseSBpbmNvbnNpc3RlbnQgLS0gZmlyc3Qgd2UgaGVhciB0aGF0IHRoZQ0KPiA+IG92ZXJsYXBw ZWQgbWl0aWdhdGlvbiByZXF1ZXN0IHdpdGggbG93ZXIgJ21pZCcgTVVTVCBiZSBkZWxldGVkIChC VFcsDQo+ID4gbm90ZSBteSByZXdvcmRpbmcpLCBidXQgYXQgdGhlIGVuZCB3ZSBhcmUgaGVhcmlu ZyB0aGF0IGEgcmVxdWVzdCB0bw0KPiA+IGNyZWF0ZSBhbiBvdmVybGFwcGluZyBtaXRnaWF0aW9u IG11c3QgYmUgcmVqZWN0ZWQNCj4gDQo+IFtNZWRdIEl0IGlzIHJlamVjdGVkIGJlY2F1c2UgaXQg aGFzIGEgbG93ZXIgbnVtZXJpYyAnbWlkJy4NCj4gDQo+IC4uICAoQSBjb3VwbGUgcGFnZXMNCj4g PiBsYXRlciB3ZSBhbHNvIHNheSAiY2FuIGJlIGFjaGlldmVkIGJ5IHNlbmRpbmcgYSBQVVQgcmVx dWVzdCBbLi4uXSB0aGF0DQo+ID4gd2lsbCBvdmVycmlkZSB0aGUgZXhpc3Rpbmcgb25lIHdpdGgg b3ZlcmxhcHBpbmcgbWl0aWdhdGlvbiBzY29wZXMiDQo+IA0KPiBbTWVkXSBZZXMsIHRoZSBuZXcg b25lIHdpbGwgaGF2ZSBhIGhpZ2hlciAnbWlkJy4NCj4gDQo+ICwNCj4gPiB3aGljaCBzdWdnZXN0 cyBhIHJlc29sdXRpb24gb2YgdGhlIGNvbmZsaWN0Lg0KPiANCj4gW01lZF0gSSBkb24ndCBzZWUg YW55IGluY29uc2lzdGVuY3kuIFBsZWFzZSBjbGFyaWZ5IGlmIEkgbWlzc2VkIHlvdXIgcG9pbnQu DQo+IA0KPiA+DQo+ID4gICAgICAgICAgICAgICAgICBUaGUgcmVzcG9uc2UgaW5jbHVkZXMgZW5v dWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMNCj4gPiAgICBjbGllbnQgdG8gcmVjb2duaXplIHRo ZSBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBiZWxvdzoNCj4gPg0KPiA+ICAg IGNvbmZsaWN0LWluZm9ybWF0aW9uOiAgSW5kaWNhdGVzIHRoYXQgYSBtaXRpZ2F0aW9uIHJlcXVl c3QgaXMNCj4gPiAgICBbLi4uXQ0KPiA+DQo+ID4gSSdtIG5vdCBlbnRpcmVseSBzdXJlIHdoYXQg ZW5jb2RpbmcgdG8gaW5mZXIgZnJvbSBqdXN0IHRoaXMNCj4gPiBkZXNjcmlwdGlvbg0KPiA+IC0t IGNvbmZsaWN0LWluZm9ybWF0aW9uLy1jYXVzZS8tc2NvcGUgYXJlIGluIHRoZSBZQU5HIG1vZGVs LCBidXQgZG8gd2UNCj4gPiBuZWVkIHRvIHNheSB0aGF0IHRoZSByZXNwb25zZSBjb250YWlucyBh IENCT1IgcmVwcmVzZW50YXRpb24gb2YgdGhlDQo+ID4gc3VidHJlZSBzdGFydGluZyBhdCBjb25m bGljdC1pbmZvcm1hdGlvbiAob3Igc29tZXRoaW5nIGxpa2UgdGhhdCksIG9yDQo+ID4gaXMgdGhp cyBpbXBsaWNpdGx5IHNwZWNpZmllZCBlbHNld2hlcmUgaW4gdGhlIGRvY3VtZW50PyAgRm9yIGV4 YW1wbGUsDQo+ID4gRmlndXJlIDkgaGFzIGFuIGV4cGxpY2l0IEpTT04gZGlhZ25vc3RpYyBub3Rh dGlvbiBmb3IgYSBtZXNzYWdlDQo+ID4gcmVzcG9uc2UuDQo+IA0KPiBbTWVkXSBUaGlzIGlzIGNv dmVyZWQgYnkgdGhpcyB0ZXh0Og0KPiANCj4gICAgVGhoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEg WUFORyBtb2R1bGUgZm9yDQo+ICAgIHJlcHJlc2VudGluZyBET1RTIG1pdGlnYXRpb24gc2NvcGVz LCBET1RTIHNpZ25hbCBjaGFubmVsIHNlc3Npb24NCj4gICAgY29uZmlndXJhdGlvbiBkYXRhLCBh bmQgRE9UUyByZWRpcmVjdGVkIHNpZ25hbGxpbmcgKFNlY3Rpb24gNSkuDQo+ICAgIFJlcHJlc2Vu dGluZyB0aGVzZSBkYXRhIGFzIENCT1IgZGF0YSBpcyBhc3N1bWVkIHRvIGZvbGxvdyB0aGUgcnVs ZXMNCj4gICAgaW4gW0ktRC5pZXRmLWNvcmUteWFuZy1jYm9yXSBvciB0aG9zZSBpbiBbUkZDNzk1 MV0gY29tYmluZWQgd2l0aA0KPiAgICBKU09OL0NCT1IgY29udmVyc2lvbiBydWxlcyBpbiBbUkZD NzA0OV0uICBBbGwgcGFyYW1ldGVycyBpbiB0aGUNCj4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgXl5eXl5eXl5eXl5eXl5eXl5eXl5eXg0KPiAgICBwYXlsb2Fk IG9mIHRoZSBET1RTIHNpZ25hbCBjaGFubmVsIGFyZSBtYXBwZWQgdG8gQ0JPUiB0eXBlcyBhcw0K PiAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e Xl5eXl5eXl5eXg0KPiAgICBzcGVjaWZpZWQgaW4gU2VjdGlvbiA2Lg0KPiAgICBeXl5eXl5eXl5e Xl5eXl5eXl5eXl5eDQo+IA0KPiA+DQo+ID4gICAgICAgY29uZmxpY3Qtc2NvcGU6ICBJbmRpY2F0 ZXMgdGhlIGNvbmZsaWN0IHNjb3BlLiAgSXQgbWF5IGluY2x1ZGUgYQ0KPiA+ICAgICAgICAgIGxp c3Qgb2YgSVAgYWRkcmVzc2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBvZiBwb3J0DQo+ ID4gICAgICAgICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMsIGEgbGlzdCBv ZiBGUUROcywgYSBsaXN0IG9mDQo+ID4gICAgICAgICAgVVJJcywgYSBsaXN0IG9mIGFsaWFzLW5h bWVzLCBvciBhICdtaWQnLg0KPiA+DQo+ID4gVGhpcyBmZWVscyBhIGxpdHRsZSB1bmRlci1zcGVj aWZpZWQgLS0gZG8gd2UgbmVlZCB0byBpbmNsdWRlIGV4YWN0bHkNCj4gPiB0aGUgY29uZmxpY3Rp bmcgZW50cmllcz8gIE9yIHdvdWxkIHdlIGp1c3Qgc2F5IHNvbWV0aGluZyBsaWtlICJ0aGlzDQo+ ID4gY29uZmxpY3RzIHdpdGggJ21pZCcgODsgZmlndXJlIGl0IG91dCI/DQo+IA0KPiBbTWVkXSBU aGlzIGNsYXVzZSBpbmRpY2F0ZXMgdGhlIGV4YWN0IGNvbmZsaWN0IHNjb3BlLiBJdCBtYXkgYmUg Zm9yIGV4YW1wbGU6DQo+IC0gYSBjb25mbGljdCBvZiBJUCBhZGRyZXNzZXMuIFRoZW4sIHRoZSB0 YXJnZXQgYWRkcmVzc2VzIGluIGNvbmZsaWN0IGFyZQ0KPiByZXR1cm5lZC4NCj4gLSBhIGNvbmZs aWN0IHdpdGggYW5vdGhlciByZXF1ZXN0LCB0aGVuIHRoZSBtaWQgb2YgdGhhdCByZXF1ZXN0IGlz IHJldHVybmVkDQo+IC0gZXRjLg0KPiANCj4gV2UgY2FuIHVwZGF0ZSB0aGUgdGV4dCBhcyBmb2xs b3dzOg0KPiANCj4gICAgICAgY29uZmxpY3Qtc2NvcGU6ICBDaGFyYWN0ZXJpemVzIHRoZSBleGFj dCBjb25mbGljdCBzY29wZS4gIEl0IG1heSBpbmNsdWRlIGENCj4gICAgICAgICAgICAgICAgICAg ICAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl4NCj4gICAgICAgICAgIGxpc3Qgb2YgSVAgYWRk cmVzc2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBvZiBwb3J0DQo+ICAgICAgICAgICBu dW1iZXJzLCBhIGxpc3Qgb2YgdGFyZ2V0IHByb3RvY29scywgYSBsaXN0IG9mIEZRRE5zLCBhIGxp c3Qgb2YNCj4gICAgICAgICAgIFVSSXMsIGEgbGlzdCBvZiBhbGlhcy1uYW1lcywgb3IgYSAnbWlk Jy4NCj4gDQo+IA0KPiA+DQo+ID4gICAgICAgICAgMzogIENVSUQgQ29sbGlzaW9uLiAgVGhpcyBj b2RlIGlzIHJldHVybmVkIHdoZW4gYSBET1RTIGNsaWVudA0KPiA+ICAgICAgICAgICAgICB1c2Vz IGEgJ2N1aWQnIHRoYXQgaXMgYWxyZWFkeSB1c2VkIGJ5IGFub3RoZXIgRE9UUyBjbGllbnQuDQo+ ID4gICAgICAgICAgICAgIFRoaXMgY29kZSBpcyBhbiBpbmRpY2F0aW9uIHRoYXQgdGhlIHJlcXVl c3QgaGFzIGJlZW4NCj4gPiAgICAgICAgICAgICAgcmVqZWN0ZWQgYW5kIGEgbmV3IHJlcXVlc3Qg d2l0aCBhIG5ldyAnY3VpZCcgaXMgdG8gYmUgcmUtDQo+ID4gICAgICAgICAgICAgIHNlbnQgYnkg dGhlIERPVFMgY2xpZW50LiAgTm90ZSB0aGF0ICdjb25mbGljdC1zdGF0dXMnLA0KPiA+ICAgICAg ICAgICAgICAnY29uZmxpY3Qtc2NvcGUnLCBhbmQgJ3JldHJ5LXRpbWVyJyBhcmUgbm90IHJldHVy bmVkIGluIHRoZQ0KPiA+ICAgICAgICAgICAgICBlcnJvciByZXNwb25zZS4NCj4gPg0KPiA+IChE byB3ZSB3YW50ICJNVVNUIE5PVCIgMjExOSBsYW5ndWFnZSB0byBwcmV2ZW50IHRoZWlyIGluY2x1 c2lvbiBvciBpcw0KPiA+IHRoZSBjdXJyZW50IGRlc2NyaXB0aXZlIGxhbmd1YWdlIHN1ZmZpY2ll bnQ/KQ0KPiA+DQo+IA0KPiBbTWVkXSBPSy4NCj4gDQo+ID4gICAgICAgY29uZmxpY3Qtc2NvcGU6 ICBJbmRpY2F0ZXMgdGhlIGNvbmZsaWN0IHNjb3BlLiAgSXQgbWF5IGluY2x1ZGUgYQ0KPiA+ICAg ICAgICAgIGxpc3Qgb2YgSVAgYWRkcmVzc2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBv ZiBwb3J0DQo+ID4gICAgICAgICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMs IGEgbGlzdCBvZiBGUUROcywgYSBsaXN0IG9mDQo+ID4gICAgICAgICAgVVJJcywgYSBsaXN0IG9m IGFsaWFzLW5hbWVzLCBvciByZWZlcmVuY2VzIHRvIGNvbmZsaWN0aW5nIEFDTHMuDQo+ID4NCj4g PiBIb3cgZG8gSSByZWZlcmVuY2UgYW4gQUNMPw0KPiANCj4gW01lZF0gQnkgYW4gYWNsLW5hbWUu IEkgdXBkYXRlZCB0aGUgdGV4dCB0byBoaW50IHRoaXM6DQo+IA0KPiAiKGJ5IGFuICdhY2wtbmFt ZScsIHR5cGljYWxseSBbSS1ELmlldGYtZG90cy1kYXRhLWNoYW5uZWxdKSINCj4gDQo+ID4NCj4g PiAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoaXMgY2FuIGJlIGFjaGlldmVkIGJ5IHNlbmRp bmcgYSBQVVQgcmVxdWVzdA0KPiA+ICAgIHdpdGggYSBuZXcgJ21pZCcgdmFsdWUgdGhhdCB3aWxs IG92ZXJyaWRlIHRoZSBleGlzdGluZyBvbmUgd2l0aA0KPiA+ICAgIG92ZXJsYXBwaW5nIG1pdGln YXRpb24gc2NvcGVzLg0KPiA+DQo+ID4gRG8gd2Ugd2FudCB0byByZWl0ZXJhdGUgdGhhdCB0aGUg ZXhpc3Rpbmcgb25lIHdpbGwgYmUgZGVsZXRlZD8NCj4gDQo+IFtNZWRdIFRoZSB0ZXh0IHlvdSBx dW90ZWQgcmVtaW5kcyB0aGF0IHRoZSBuZXcgcmVxdWVzdCB3aWxsIGRlbGV0ZSB0aGUNCj4gZXhp c3Rpbmcgb25lLg0KPiANCj4gPg0KPiA+ICAgIEZvciBhIG1pdGlnYXRpb24gcmVxdWVzdCB0byBj b250aW51ZSBiZXlvbmQgdGhlIGluaXRpYWwgbmVnb3RpYXRlZA0KPiA+ICAgIGxpZmV0aW1lLCB0 aGUgRE9UUyBjbGllbnQgaGFzIHRvIHJlZnJlc2ggdGhlIGN1cnJlbnQgbWl0aWdhdGlvbg0KPiA+ ICAgIHJlcXVlc3QgYnkgc2VuZGluZyBhIG5ldyBQVVQgcmVxdWVzdC4gIFRoaXMgUFVUIHJlcXVl c3QgTVVTVCB1c2UgdGhlDQo+ID4gICAgc2FtZSAnbWlkJyB2YWx1ZSwgYW5kIE1VU1QgcmVwZWF0 IGFsbCB0aGUgb3RoZXIgcGFyYW1ldGVycyBhcyBzZW50IGluDQo+ID4gICAgdGhlIG9yaWdpbmFs IG1pdGlnYXRpb24gcmVxdWVzdCBhcGFydCBmcm9tIGEgcG9zc2libGUgY2hhbmdlIHRvIHRoZQ0K PiA+ICAgIGxpZmV0aW1lIHBhcmFtZXRlciB2YWx1ZS4NCj4gPg0KPiA+IElmIHRoZSBzZXJ2ZXIg ZGlkIG5vdCBoYXZlIGEgY2hlY2sgdGhhdCB0aGUgb3RoZXIgcGFyYW1ldGVycyBtYXRjaCwNCj4g PiB3aGF0IHdvdWxkIGhhcHBlbj8NCj4gDQo+IFtNZWRdIEEgcmVxdWVzdCBtYXkgYmUgZm9yIGV4 YW1wbGUgaW5hZHZlcnRlbnRseSB0cmFuc2l0aW9uZWQgZnJvbSBwcmUtDQo+IGNvbmZpZ3VyZWQg dG8gaW1tZWRpYXRlIGFuZCB2aWNlIHZlcnNhLiBUbyBhdm9pZCBzdWNoIGlzc3VlcywgdGhlIHNw ZWMNCj4gbWFuZGF0ZXMgdGhlIGZvbGxvd2luZzoNCj4gDQo+ICogYSBjbGllbnQgY2FuIGFkanVz dCBpdHMgbWl0aWdhdGlvbiBzY29wZSBieSBzZW5kaW5nIGEgbmV3IG9uZSB0aGF0IHdpbGwNCj4g b3ZlcnJpZGUgYW4gZXhpc3Rpbmcgb25lLg0KPiAqIGEgY2xpZW50IGNhbiB1cGRhdGUgYW4gZXhp c3RpbmcgbWl0aWdhdGlvbiBieSBlY2hvaW5nIHRoZSBzYW1lIHBhcmFtZXRlcnMNCj4gYXMgdGhv c2UgaW4gdGhlIGluaXRpYWwgbWl0aWdhdGlvbiByZXF1ZXN0Lg0KPiANCj4gQnV0IGxlYXZlIGl0 IHRvIHRoZSBzZXJ2ZXIgdG8gZGVjaWRlIGhvdyB0byBoYW5kbGUgdGhlIHJlZnJlc2g6DQo+IA0K PiAgICBJZiB0aGUgRE9UUyBzZXJ2ZXIgZmluZHMgdGhlICdtaWQnIHBhcmFtZXRlciB2YWx1ZSBj b252ZXllZCBpbiB0aGUNCj4gICAgUFVUIHJlcXVlc3QgaW4gaXRzIGNvbmZpZ3VyYXRpb24gZGF0 YSBib3VuZCB0byB0aGF0IERPVFMgY2xpZW50LCBpdA0KPiAgICBNQVkgdXBkYXRlIHRoZSBtaXRp Z2F0aW9uIHJlcXVlc3QsIGFuZCBhIDIuMDQgKENoYW5nZWQpIHJlc3BvbnNlIGlzDQo+ICAgIHJl dHVybmVkIHRvIGluZGljYXRlIGEgc3VjY2Vzc2Z1bCB1cGRhdGUgb2YgdGhlIG1pdGlnYXRpb24g cmVxdWVzdC4NCj4gDQo+ICAgKERvIHdlIG5lZWQgbm9ybWF0aXZlIGxhbmd1YWdlIHRoYXQgdGhl IHNlcnZlciBNVVNUDQo+ID4gdmVyaWZ5IHRoZSBvdGhlciBwYXJhbWV0ZXJzIHdoZW4gdGhlICdt aWQnIG1hdGNoZXM/KQ0KPiA+DQo+ID4gU2VjdGlvbiA0LjQuMg0KPiA+DQo+ID4gICAgICAgICAg ICAgICAgICAgICAgICAgICBJZiB0aGUgcmVwcmVzZW50YXRpb24gb2YgYWxsIHRoZSBhY3RpdmUN Cj4gPiAgICBtaXRpZ2F0aW9uIHJlcXVlc3RzIGFzc29jaWF0ZWQgd2l0aCB0aGUgRE9UUyBjbGll bnQgZG9lcyBub3QgZml0DQo+ID4gICAgd2l0aGluIGEgc2luZ2xlIGRhdGFncmFtLCB0aGUgRE9U UyBzZXJ2ZXIgTVVTVCB1c2UgdGhlIEJsb2NrMiBPcHRpb24NCj4gPiAgICB3aXRoIE5VTSA9IDAg aW4gdGhlIEdFVCByZXNwb25zZS4gIFsuLi5dDQo+ID4NCj4gPiBJJ20gbm90IHZlcnkgZmFtaWxp YXIgd2l0aCBDb0FQIGJsb2Nrd2lzZSB0cmFuc2ZlcnM7IGlzIHRoaXMgaW4NCj4gPiBjb25mbGlj dCB3aXRoIHNvbWUgbm9ybWFsIGZlYXR1cmUtbmVnb3RpYXRpb24gc2NoZW1lIG9yIGlzIGl0IG9r YXkgdG8NCj4gPiBhc3N1bWUgdGhhdCB0aGUgY2xpZW50IHdpbGwgYmUgYWJsZSB0byBoYW5kbGUg dGhpcyBldmVuIGlmIHRoZSBjbGllbnQNCj4gPiBoYXMgbm90IGV4cGxpY3RseSBpbmRpY2F0ZWQg c3VwcG9ydD8NCj4gDQo+IFtNZWRdIFJGQzc5NTkgaW5kaWNhdGVzIHRoZSBmb2xsb3dpbmc6DQo+ IA0KPiAgICBBIENvQVAgaW1wbGVtZW50YXRpb24gdGhhdCBkb2VzIG5vdCBzdXBwb3J0IHRoZXNl IG9wdGlvbnMgZ2VuZXJhbGx5DQo+ICAgIGlzIGxpbWl0ZWQgaW4gdGhlIHNpemUgb2YgdGhlIHJl cHJlc2VudGF0aW9ucyB0aGF0IGNhbiBiZSBleGNoYW5nZWQsDQo+ICAgIHNlZSBTZWN0aW9uIDQu NiBvZiBbUkZDNzI1Ml0uICBFdmVuIHRob3VnaCB0aGUgb3B0aW9ucyBhcmUgQ3JpdGljYWwsDQo+ ICAgIGEgc2VydmVyIG1heSBkZWNpZGUgdG8gc3RhcnQgdXNpbmcgdGhlbSBpbiBhbiB1bnNvbGlj aXRlZCB3YXkgaW4gYQ0KPiAgICByZXNwb25zZS4gIE5vIGVmZm9ydCB3YXMgZXhwZW5kZWQgdG8g cHJvdmlkZSBhIGNhcGFiaWxpdHkgaW5kaWNhdGlvbg0KPiAgICBtZWNoYW5pc20gc3VwcG9ydGlu ZyB0aGF0IGRlY2lzaW9uOiBzaW5jZSB0aGUgYmxvY2std2lzZSB0cmFuc2Zlcg0KPiAgICBtZWNo YW5pc21zIGFyZSBzbyBmdW5kYW1lbnRhbCB0byB0aGUgdXNlIG9mIENvQVAgZm9yIHJlcHJlc2Vu dGF0aW9ucw0KPiAgICBsYXJnZXIgdGhhbiBhYm91dCBhIGtpbG9ieXRlLCB0aGVyZSBpcyBhbiBl eHBlY3RhdGlvbiB0aGF0IHRoZXkgYXJlDQo+ICAgIHZlcnkgd2lkZWx5IGltcGxlbWVudGVkLg0K PiANCj4gPg0KPiA+ICAgICAgIFRoaXMgaXMgYSBtYW5kYXRvcnkgYXR0cmlidXRlIHdoZW4gYW4g YXR0YWNrIG1pdGlnYXRpb24gaXMNCj4gPiAgICAgICB0cmlnZ2VyZWQuICBQYXJ0aWN1bGFybHks ICdtaXRpZ2F0aW9uLXN0YXJ0JyBpcyBub3QgcmV0dXJuZWQgZm9yIGENCj4gPiAgICAgICBtaXRp Z2F0aW9uIHdpdGggJ3N0YXR1cycgY29kZSBzZXQgdG8gOC4NCj4gPg0KPiA+IElzIHRoaXMgYmV0 dGVyIGFzICJ0cmlnZ2VyZWQiIG9yIGFzICJhY3RpdmUiPw0KPiANCj4gW01lZF0gQ2hhbmdlZCB0 aGUgdGV4dCB0byAid2hlbiBhbiBpbW1lZGlhdGUgYXR0YWNrIG1pdGlnYXRpb24gaXMNCj4gdHJp Z2dlcmVkIi4NCg0KbWl0aWdhdGlvbi1zdGFydCBpcyBhbHNvIGEgbWFuZGF0b3J5IGF0dHJpYnV0 ZSB3aGVuIGEgcHJlLWNvbmZpZ3VyZWQgbWl0aWdhdGlvbiByZXF1ZXN0IGlzIHRyaWdnZXJlZC4N Cg0KPiANCj4gPg0KPiA+IGJwcy1kcm9wcGVkIGFuZCBwcHMtZHJvcHBlZCAiU0hPVUxEIGJlIGEg Zml2ZS1taW51dGUgYXZlcmFnZSIsIGJ1dA0KPiA+IHRoYXQgZG9lcyBub3Qgc2VlbSBxdWl0ZSB3 ZWxsLWRlZmluZWQuICBJcyBpdCBhIHJvbGxpbmcgZml2ZS1taW51dGUNCj4gPiBhdmVyYWdlIG92 ZXIgYmlucyBvZiBvbmUgc2Vjb25kLCBvciBhIGJpbm5lZCBmaXZlLW1pbnV0ZSBhdmVyYWdlIGZv cg0KPiA+IHRoZSBsYXN0IGZpdmUtbWludXRlIGludGVydmFsIHRoYXQgZW5kcyBvbiBhIG11bHRp cGxlIG9mICc1Jywgb3Igc29tZXRoaW5nDQo+IGVsc2U/DQo+IA0KPiBbTWVkXSBXaGF0IGlzIG1l YW50IGluIGFuIGF2ZXJhZ2Ugb3ZlciA1LW1pbnV0ZSBpbnRlcnZhbHMuIFVwZGF0ZWQgdGhlDQo+ IHRleHQgYWNjb3JkaW5nbHkuDQo+IA0KPiA+DQo+ID4gICAgVXBvbiByZWNlaXB0IG9mIGEgY29u ZmxpY3Qgbm90aWZpY2F0aW9uIG1lc3NhZ2UgaW5kaWNhdGluZyB0aGF0IGENCj4gPiAgICBtaXRp Z2F0aW9uIHJlcXVlc3QgaXMgZGVhY3RpdmF0ZWQgYmVjYXVzZSBvZiBhIGNvbmZsaWN0LCBhIERP VFMNCj4gPiAgICBjbGllbnQgTVVTVCBOT1QgcmVzZW5kIHRoZSBzYW1lIG1pdGlnYXRpb24gcmVx dWVzdCBiZWZvcmUgdGhlIGV4cGlyeQ0KPiA+ICAgIG9mICdyZXRyeS10aW1lcicuICBJdCBpcyBh bHNvIHJlY29tbWVuZGVkIHRoYXQgRE9UUyBjbGllbnRzIHN1cHBvcnQNCj4gPiAgICBtZWFucyB0 byBhbGVydCBhZG1pbmlzdHJhdG9ycyBhYm91dCBtaXRpZ2F0aW9uIGNvbmZsaWN0cy4NCj4gPg0K PiA+IERvIHdlIG5lZWQgdG8gc2F5IGFueXRoaW5nIHJlZ2FyZGluZyB0aGUgc2VydmVyIGJlaGF2 aW9yIHdoZW4gYQ0KPiA+IHJldHJhbnNtaXQgb3Igc2ltaWxhciB3YXMgaW4gZmxpZ2h0IGFscmVh ZHkgd2hlbiB0aGUgY29uZmxpY3QNCj4gPiBub3RpZmljYXRpb24gd2FzIGdlbmVyYXRlZD8gIChU aGF0IGlzLCB0aGUgc2VydmVyJ3MgZW5mb3JjZW1lbnQgb2YgdGhlDQo+ID4gTVVTVCBOT1QgbWF5 IG5lZWQgdG8gYmUgcmVzdHJhaW5lZC4pDQo+IA0KPiBbTWVkXSBUaGUgTVVTVCBOT1QgaXMgaW50 ZW5kZWQgdG8gYXZvaWQgb3ZlcmxvYWRpbmcgdGhlIHNlcnZlciwgYmVjYXVzZToNCj4gDQo+ICAg ICAgICAgICJBbnkgcmV0cmFuc21pc3Npb24gb2YgdGhlIHNhbWUNCj4gICAgICAgICAgbWl0aWdh dGlvbiByZXF1ZXN0IGJlZm9yZSB0aGUgZXhwaXJ5IG9mIHRoaXMgdGltZXIgaXMgbGlrZWx5IHRv DQo+ICAgICAgICAgIGJlIHJlamVjdGVkIGJ5IHRoZSBET1RTIHNlcnZlciBmb3IgdGhlIHNhbWUg cmVhc29ucy4iDQo+IA0KPiBUaGUgdGV4dCBsZWF2ZSBpdCB0byB0aGUgc2VydmVyIHRvIGRlY2lk ZSB3aGljaCBhY3Rpb24gdG8gdGFrZSB3aGVuIE1VU1QNCj4gTk9UIGlzIG5vdCBmb2xsb3dlZCBi eSBhIGNsaWVudC4gVGhlIHNlcnZlciBtYXkgZGVjaWRlIHRoZSBzaWxlbnRseSBpZ25vcmUNCj4g dGhvc2UsIGV0Yy4NCj4gDQo+IFdlIGNhbiBhZGQgc29tZSB0ZXh0IGlmIG5lZWRlZC4NCj4gDQo+ ID4NCj4gPiAgICBBbHRlcm5hdGl2ZWx5LCB0aGUgRE9UUyBjbGllbnQgY2FuIGV4cGxpY2l0bHkg ZGVyZWdpc3RlciBpdHNlbGYgYnkNCj4gPiAgICBpc3N1aW5nIGEgR0VUIHJlcXVlc3QgdGhhdCBo YXMgdGhlIFRva2VuIGZpZWxkIHNldCB0byB0aGUgdG9rZW4gb2YNCj4gPiAgICB0aGUgb2JzZXJ2 YXRpb24gdG8gYmUgY2FuY2VsbGVkIGFuZCBpbmNsdWRlcyBhbiBPYnNlcnZlIE9wdGlvbiB3aXRo DQo+ID4gICAgdGhlIHZhbHVlIHNldCB0byAnMScgKGRlcmVnaXN0ZXIpLg0KPiA+DQo+ID4gVGhp cyBzZWVtcyBsaWtlIHRoZSBtb3JlICJwb2xpdGUiIGJlaGF2aW9yIChhcyBvcHBvc2VkIHRvIGp1 c3QNCj4gPiAiZm9yZ2V0dGluZyIgLS0gd2h5IGlzIHRoZSBwb2xpdGUgYmVoYXZpb3Igbm90IHRo ZSBkZWZhdWx0IGJlaGF2aW9yPw0KPiANCj4gW01lZF0gRG9uZSBpbiBteSBsb2NhbCBjb3B5Lg0K DQpQbGVhc2Ugbm90ZSB0aGF0IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3NjQxI3Nl Y3Rpb24tMy42IGRpZCBub3QgY2hvb3NlIHRoZSBleHBsaWNpdCBkZXJlZ2lzdGVyIGFzIGRlZmF1 bHQgYmVoYXZpb3IuDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4gDQo+ID4NCj4gPiBEb2VzIHRoZSBH RVQgaW4gIEZpZ3VyZSAxMyBuZWVkIHRvIGhhdmUgYSAiLndlbGwta25vd24iIGFuZCBvdGhlciBw YXRoDQo+ID4gY29tcG9uZW50cz8NCj4gPg0KPiANCj4gW01lZF0gRG9uJ3QgdGhpbmsgc28uIEFj dHVhbGx5LCB3ZSBhcmUgbWltaWNraW5nIGZpZ3VyZSAyIGluIFJGQzc2NDEuDQo+IA0KPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBEb3RzIG1haWxp bmcgbGlzdA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZG90cw0K From nobody Wed Jan 16 06:03:22 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 105BD130E27; Wed, 16 Jan 2019 06:03:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.553 X-Spam-Level: X-Spam-Status: No, score=-11.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 71lxyyBTywt4; Wed, 16 Jan 2019 06:03:16 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B80011294FA; Wed, 16 Jan 2019 06:03:15 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547647236; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=iLrOurF2nnSoKnS7Oc5YRgaHhvUwZmuqr6WifK vzEpU=; b=hRLc4upiwH4EnSWJt0C0ldg6jaPLKJEyavu57Igy CcrIp3tnYXXfiQzW0c+41sBaq35leGSsAayFcxtVb5cwKkfNa5 YCaTnIpZJJOv6pgcg3YyLpnzNdqcQ3+DmtES1v4jsT9D6BPSxR VYk6/C+56DFLNO31QQ2ftEGPIb65okI= Received: from DNVEXAPP1N04.corpzone.internalzone.com (DNVEXAPP1N04.corpzone.internalzone.com [10.44.48.88]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 3ac2_dba9_bb76b573_094e_4433_af56_f03ee1bf5535; Wed, 16 Jan 2019 08:00:35 -0600 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 06:58:32 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 Jan 2019 06:58:32 -0700 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 06:58:31 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2727.namprd16.prod.outlook.com (20.178.232.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Wed, 16 Jan 2019 13:58:30 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Wed, 16 Jan 2019 13:58:30 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (3rd Part) Thread-Index: AdStnwkIYLnL/STeQyWYhz1QpkBSPgAA8dOQ Date: Wed, 16 Jan 2019 13:58:30 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.171.119.30] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2727; 6:Qfl+89KKeWfFf/oZmYbYGFDGArwf47a6FGbplX9L+fQw+aJoIi/mUYOr8fVmBzjavA4jdd6XbwOg9jjFWl/BrZRvh2cAlFpucIoz2uXnOlu1Z7X+zM6wDhbQn4y2YHeDGA/tU5CujufAp1GkYs8C+tR2Z6rhDMqEc76oKICeINMpxk1ECss/muxoAxMRD4ftREb7gYFFUMcsrl0P+PQD1sUgzQ63hHXeJp1u8TJpY3RuadmVt/RXwyp7dJCzcfpF+o6XLER2+FxShoHxmdefj0F2NV/7J6RVs6myS1cLXQ/yTzDkksuWNvoR6XAs7xykB7BHHTHQbnhXfehnMWh5toWdbW0h4571+lbXgH6xT9Mhl9ae1Wvn/FvGlKz2DsUUYXHaB5YReJDdfhSjernIsdybO4+fvrFIgOmYEuf73rW9l5dk0TyGoN1qIxO5hotOn12frkPZwLnUjh4wuH29mQ==; 5:VwzOUI+hROs62yRO1QpsS/BtGD7cJaPU2E29L6eBJPsdGqUvJFhlmh5QaRqF0ic1hnn02L5Y+WMkaNCNzCZsT2h/ArXPEFeM1RDuFwG1gxeJHrydJKanGcGDYTfa3vBUam/r/Qhwnm7ngj0ChdUBTWe9zs5VHTlfZf8/bvYk0FCdPbZ8zfZT4z3aDhTukM4FZTj0ltBsvGXI3oaWvuSVsw==; 7:RmvC6KpIYe6mPU2juEltwxm4n3hbs2loTP1AYZluwslt6pNQn1A1pwav+1pm3eTpXUjv7b2t20ctL4LwTCGQ8OUBiXT5SqzDhY1tU9ZUrmXTKaocwOhuD8CukicyQo9Sdre89s/Ye4/eEfVhvnq8fQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: da99afc7-ca3b-4497-ce96-08d67bbab226 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2727; x-ms-traffictypediagnostic: BYAPR16MB2727: x-microsoft-antispam-prvs: x-forefront-prvs: 091949432C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(136003)(366004)(396003)(376002)(346002)(32952001)(55784004)(189003)(199004)(13464003)(4744004)(78486014)(55016002)(14444005)(68736007)(2906002)(256004)(229853002)(66066001)(86362001)(6436002)(478600001)(966005)(72206003)(316002)(14454004)(74316002)(110136005)(106356001)(105586002)(486006)(25786009)(99286004)(81156014)(2501003)(81166006)(6506007)(186003)(53936002)(5660300001)(7696005)(446003)(80792005)(305945005)(7736002)(6306002)(6116002)(33656002)(102836004)(97736004)(3846002)(76176011)(30864003)(71200400001)(11346002)(4326008)(476003)(8676002)(71190400001)(6246003)(2171002)(9686003)(53546011)(8936002)(26005)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2727; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: TRllyGxB2mslV7b9JyJHI/EOzRep52q99oV0Opt6Z4VckAo0Oe7qMGCBGGH8gnIhXJsOWUGKcsx/vLVx0g29JH115OWCxIxoF1nNwPs8a06b+SFfZUydeg6jD9qFyOzqXjp0ahwOrtCaTBGyNPY6Ho3euUvhSh0wQl0hSxQC2cnro1/CyUtam2tiGdU4ONA0GDT9ghU3+W/FT2cgdGRn7h8pAfahZRiMzfnbehpN54zYHHp7lOYSdT1jFd6V4ZVsx67z0C+M2G/wv5cAt14XgsXivojG6lF6IUD5HmdC0rtk1Sn4npgOUriRrBehqfC9YKbe0eGloo5QuY8bQE5mGE0yCwhIeUBFPhZOxaF3X/AKgv1hSt+Ixk/sZrrO+uykpGyBKCsbsnbTghWXPuul4t2C++2uO/D1IL5Sbzw54eg= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: da99afc7-ca3b-4497-ce96-08d67bbab226 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jan 2019 13:58:30.1554 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2727 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6461> : inlines <6994> : streams <1810251> : uri <2780818> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 14:03:20 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IFdlZG5lc2RheSwgSmFudWFyeSAxNiwgMjAxOSA2OjU2IFBNDQo+IFRvOiBCZW5qYW1p biBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5u ZWxAaWV0Zi5vcmcNCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgzcmQgUGFydCkN Cj4gDQo+IA0KPiANCj4gUmUtLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVl cnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKg OiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3Jl ZGkgMTYNCj4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsQGlldGYub3JnDQo+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6 IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPg0KPiA+ DQo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBU byBhdm9pZCBtYWludGFpbmluZyBhDQo+ID4gICAgbG9uZyBsaXN0IG9mIG92ZXJsYXBwaW5nIG1p dGlnYXRpb24gcmVxdWVzdHMgKGkuZS4sIHJlcXVlc3RzIHdpdGggdGhlDQo+ID4gICAgc2FtZSAn dHJpZ2dlci1taXRpZ2F0aW9uJyB0eXBlIGFuZCBvdmVybGFwcGluZyBzY29wZXMpIGZyb20gYSBE T1RTDQo+ID4gICAgY2xpZW50IGFuZCBhdm9pZCBlcnJvci1wcm9uZSBwcm92aXNpb25pbmcgb2Yg bWl0aWdhdGlvbiByZXF1ZXN0cyBmcm9tDQo+ID4gICAgYSBET1RTIGNsaWVudCwgdGhlIG92ZXJs YXBwZWQgbG93ZXIgbnVtZXJpYyAnbWlkJyBNVVNUIGJlDQo+ID4gICAgYXV0b21hdGljYWxseSBk ZWxldGVkIGFuZCBubyBsb25nZXIgYXZhaWxhYmxlIGF0IHRoZSBET1RTIHNlcnZlci4NCj4gPiAg ICBGb3IgZXhhbXBsZSwgaWYgdGhlIERPVFMgc2VydmVyIHJlY2VpdmVzIGEgbWl0aWdhdGlvbiBy ZXF1ZXN0IHdoaWNoDQo+ID4gICAgb3ZlcmxhcHMgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9u IHdpdGggYSBoaWdoZXIgbnVtZXJpYyAnbWlkJywgdGhlDQo+ID4gICAgRE9UUyBzZXJ2ZXIgcmVq ZWN0cyB0aGUgcmVxdWVzdCBieSByZXR1cm5pbmcgNC4wOSAoQ29uZmxpY3QpIHRvIHRoZQ0KPiA+ ICAgIERPVFMgY2xpZW50LiAgWy4uLl0NCj4gPg0KPiA+IFRoaXMgc2VlbXMgdG8gYmUgaW50ZXJu YWxseSBpbmNvbnNpc3RlbnQgLS0gZmlyc3Qgd2UgaGVhciB0aGF0IHRoZQ0KPiA+IG92ZXJsYXBw ZWQgbWl0aWdhdGlvbiByZXF1ZXN0IHdpdGggbG93ZXIgJ21pZCcgTVVTVCBiZSBkZWxldGVkIChC VFcsDQo+ID4gbm90ZSBteSByZXdvcmRpbmcpLCBidXQgYXQgdGhlIGVuZCB3ZSBhcmUgaGVhcmlu ZyB0aGF0IGEgcmVxdWVzdCB0bw0KPiA+IGNyZWF0ZSBhbiBvdmVybGFwcGluZyBtaXRnaWF0aW9u IG11c3QgYmUgcmVqZWN0ZWQNCg0KDQpUaGUgZXhhbXBsZSBpcyBkaXNjdXNzaW5nIG91dCBvZiBv cmRlciBkZWxpdmVyeSBvZiBtaXRpZ2F0aW9uIHJlcXVlc3RzIChET1RTIGNsaWVudCBzZW5kcyBs b3dlciBudW1lcmljICdtaWQnIGZvbGxvd2VkIGJ5IGhpZ2hlciBudW1lcmljICdtaWQnIGJ1dCB0 aGUgRE9UUyBzZXJ2ZXIgcmVjZWl2ZXMgdGhlIA0KaGlnaGVyIG51bWVyaWMgJ21pZCcgZmlyc3Qg YW5kIGFjY2VwdHMgdGhlIHJlcXVlc3QuIEF0IGEgbGF0ZXIgcG9pbnQgb2YgdGltZSwgd2hlbiB0 aGUgc2VydmVyIHJlY2VpdmVzIHRoZSBsb3dlciBudW1lcmljICdtaWQnLCB0aGUgcmVxdWVzdCBp cyByZWplY3RlZCBieSB0aGUgc2VydmVyIHdpdGggNC4wOSBlcnJvciByZXNwb25zZS4NCg0KLVRp cnUNCg0KPiANCj4gW01lZF0gSXQgaXMgcmVqZWN0ZWQgYmVjYXVzZSBpdCBoYXMgYSBsb3dlciBu dW1lcmljICdtaWQnLg0KPiANCj4gLi4gIChBIGNvdXBsZSBwYWdlcw0KPiA+IGxhdGVyIHdlIGFs c28gc2F5ICJjYW4gYmUgYWNoaWV2ZWQgYnkgc2VuZGluZyBhIFBVVCByZXF1ZXN0IFsuLi5dIHRo YXQNCj4gPiB3aWxsIG92ZXJyaWRlIHRoZSBleGlzdGluZyBvbmUgd2l0aCBvdmVybGFwcGluZyBt aXRpZ2F0aW9uIHNjb3BlcyINCj4gDQo+IFtNZWRdIFllcywgdGhlIG5ldyBvbmUgd2lsbCBoYXZl IGEgaGlnaGVyICdtaWQnLg0KPiANCj4gLA0KPiA+IHdoaWNoIHN1Z2dlc3RzIGEgcmVzb2x1dGlv biBvZiB0aGUgY29uZmxpY3QuDQo+IA0KPiBbTWVkXSBJIGRvbid0IHNlZSBhbnkgaW5jb25zaXN0 ZW5jeS4gUGxlYXNlIGNsYXJpZnkgaWYgSSBtaXNzZWQgeW91ciBwb2ludC4NCj4gDQo+ID4NCj4g PiAgICAgICAgICAgICAgICAgIFRoZSByZXNwb25zZSBpbmNsdWRlcyBlbm91Z2ggaW5mb3JtYXRp b24gZm9yIGEgRE9UUw0KPiA+ICAgIGNsaWVudCB0byByZWNvZ25pemUgdGhlIHNvdXJjZSBvZiB0 aGUgY29uZmxpY3QgYXMgZGVzY3JpYmVkIGJlbG93Og0KPiA+DQo+ID4gICAgY29uZmxpY3QtaW5m b3JtYXRpb246ICBJbmRpY2F0ZXMgdGhhdCBhIG1pdGlnYXRpb24gcmVxdWVzdCBpcw0KPiA+ICAg IFsuLi5dDQo+ID4NCj4gPiBJJ20gbm90IGVudGlyZWx5IHN1cmUgd2hhdCBlbmNvZGluZyB0byBp bmZlciBmcm9tIGp1c3QgdGhpcw0KPiA+IGRlc2NyaXB0aW9uDQo+ID4gLS0gY29uZmxpY3QtaW5m b3JtYXRpb24vLWNhdXNlLy1zY29wZSBhcmUgaW4gdGhlIFlBTkcgbW9kZWwsIGJ1dCBkbyB3ZQ0K PiA+IG5lZWQgdG8gc2F5IHRoYXQgdGhlIHJlc3BvbnNlIGNvbnRhaW5zIGEgQ0JPUiByZXByZXNl bnRhdGlvbiBvZiB0aGUNCj4gPiBzdWJ0cmVlIHN0YXJ0aW5nIGF0IGNvbmZsaWN0LWluZm9ybWF0 aW9uIChvciBzb21ldGhpbmcgbGlrZSB0aGF0KSwgb3INCj4gPiBpcyB0aGlzIGltcGxpY2l0bHkg c3BlY2lmaWVkIGVsc2V3aGVyZSBpbiB0aGUgZG9jdW1lbnQ/ICBGb3IgZXhhbXBsZSwNCj4gPiBG aWd1cmUgOSBoYXMgYW4gZXhwbGljaXQgSlNPTiBkaWFnbm9zdGljIG5vdGF0aW9uIGZvciBhIG1l c3NhZ2UNCj4gPiByZXNwb25zZS4NCj4gDQo+IFtNZWRdIFRoaXMgaXMgY292ZXJlZCBieSB0aGlz IHRleHQ6DQo+IA0KPiAgICBUaGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgYSBZQU5HIG1vZHVsZSBm b3INCj4gICAgcmVwcmVzZW50aW5nIERPVFMgbWl0aWdhdGlvbiBzY29wZXMsIERPVFMgc2lnbmFs IGNoYW5uZWwgc2Vzc2lvbg0KPiAgICBjb25maWd1cmF0aW9uIGRhdGEsIGFuZCBET1RTIHJlZGly ZWN0ZWQgc2lnbmFsbGluZyAoU2VjdGlvbiA1KS4NCj4gICAgUmVwcmVzZW50aW5nIHRoZXNlIGRh dGEgYXMgQ0JPUiBkYXRhIGlzIGFzc3VtZWQgdG8gZm9sbG93IHRoZSBydWxlcw0KPiAgICBpbiBb SS1ELmlldGYtY29yZS15YW5nLWNib3JdIG9yIHRob3NlIGluIFtSRkM3OTUxXSBjb21iaW5lZCB3 aXRoDQo+ICAgIEpTT04vQ0JPUiBjb252ZXJzaW9uIHJ1bGVzIGluIFtSRkM3MDQ5XS4gIEFsbCBw YXJhbWV0ZXJzIGluIHRoZQ0KPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eDQo+ICAgIHBheWxvYWQgb2YgdGhlIERPVFMg c2lnbmFsIGNoYW5uZWwgYXJlIG1hcHBlZCB0byBDQk9SIHR5cGVzIGFzDQo+ICAgIF5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eDQo+ ICAgIHNwZWNpZmllZCBpbiBTZWN0aW9uIDYuDQo+ICAgIF5eXl5eXl5eXl5eXl5eXl5eXl5eXl4N Cj4gDQo+ID4NCj4gPiAgICAgICBjb25mbGljdC1zY29wZTogIEluZGljYXRlcyB0aGUgY29uZmxp Y3Qgc2NvcGUuICBJdCBtYXkgaW5jbHVkZSBhDQo+ID4gICAgICAgICAgbGlzdCBvZiBJUCBhZGRy ZXNzZXMsIGEgbGlzdCBvZiBwcmVmaXhlcywgYSBsaXN0IG9mIHBvcnQNCj4gPiAgICAgICAgICBu dW1iZXJzLCBhIGxpc3Qgb2YgdGFyZ2V0IHByb3RvY29scywgYSBsaXN0IG9mIEZRRE5zLCBhIGxp c3Qgb2YNCj4gPiAgICAgICAgICBVUklzLCBhIGxpc3Qgb2YgYWxpYXMtbmFtZXMsIG9yIGEgJ21p ZCcuDQo+ID4NCj4gPiBUaGlzIGZlZWxzIGEgbGl0dGxlIHVuZGVyLXNwZWNpZmllZCAtLSBkbyB3 ZSBuZWVkIHRvIGluY2x1ZGUgZXhhY3RseQ0KPiA+IHRoZSBjb25mbGljdGluZyBlbnRyaWVzPyAg T3Igd291bGQgd2UganVzdCBzYXkgc29tZXRoaW5nIGxpa2UgInRoaXMNCj4gPiBjb25mbGljdHMg d2l0aCAnbWlkJyA4OyBmaWd1cmUgaXQgb3V0Ij8NCj4gDQo+IFtNZWRdIFRoaXMgY2xhdXNlIGlu ZGljYXRlcyB0aGUgZXhhY3QgY29uZmxpY3Qgc2NvcGUuIEl0IG1heSBiZSBmb3IgZXhhbXBsZToN Cj4gLSBhIGNvbmZsaWN0IG9mIElQIGFkZHJlc3Nlcy4gVGhlbiwgdGhlIHRhcmdldCBhZGRyZXNz ZXMgaW4gY29uZmxpY3QgYXJlDQo+IHJldHVybmVkLg0KPiAtIGEgY29uZmxpY3Qgd2l0aCBhbm90 aGVyIHJlcXVlc3QsIHRoZW4gdGhlIG1pZCBvZiB0aGF0IHJlcXVlc3QgaXMgcmV0dXJuZWQNCj4g LSBldGMuDQo+IA0KPiBXZSBjYW4gdXBkYXRlIHRoZSB0ZXh0IGFzIGZvbGxvd3M6DQo+IA0KPiAg ICAgICBjb25mbGljdC1zY29wZTogIENoYXJhY3Rlcml6ZXMgdGhlIGV4YWN0IGNvbmZsaWN0IHNj b3BlLiAgSXQgbWF5IGluY2x1ZGUgYQ0KPiAgICAgICAgICAgICAgICAgICAgICAgIF5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXg0KPiAgICAgICAgICAgbGlzdCBvZiBJUCBhZGRyZXNzZXMsIGEgbGlz dCBvZiBwcmVmaXhlcywgYSBsaXN0IG9mIHBvcnQNCj4gICAgICAgICAgIG51bWJlcnMsIGEgbGlz dCBvZiB0YXJnZXQgcHJvdG9jb2xzLCBhIGxpc3Qgb2YgRlFETnMsIGEgbGlzdCBvZg0KPiAgICAg ICAgICAgVVJJcywgYSBsaXN0IG9mIGFsaWFzLW5hbWVzLCBvciBhICdtaWQnLg0KPiANCj4gDQo+ ID4NCj4gPiAgICAgICAgICAzOiAgQ1VJRCBDb2xsaXNpb24uICBUaGlzIGNvZGUgaXMgcmV0dXJu ZWQgd2hlbiBhIERPVFMgY2xpZW50DQo+ID4gICAgICAgICAgICAgIHVzZXMgYSAnY3VpZCcgdGhh dCBpcyBhbHJlYWR5IHVzZWQgYnkgYW5vdGhlciBET1RTIGNsaWVudC4NCj4gPiAgICAgICAgICAg ICAgVGhpcyBjb2RlIGlzIGFuIGluZGljYXRpb24gdGhhdCB0aGUgcmVxdWVzdCBoYXMgYmVlbg0K PiA+ICAgICAgICAgICAgICByZWplY3RlZCBhbmQgYSBuZXcgcmVxdWVzdCB3aXRoIGEgbmV3ICdj dWlkJyBpcyB0byBiZSByZS0NCj4gPiAgICAgICAgICAgICAgc2VudCBieSB0aGUgRE9UUyBjbGll bnQuICBOb3RlIHRoYXQgJ2NvbmZsaWN0LXN0YXR1cycsDQo+ID4gICAgICAgICAgICAgICdjb25m bGljdC1zY29wZScsIGFuZCAncmV0cnktdGltZXInIGFyZSBub3QgcmV0dXJuZWQgaW4gdGhlDQo+ ID4gICAgICAgICAgICAgIGVycm9yIHJlc3BvbnNlLg0KPiA+DQo+ID4gKERvIHdlIHdhbnQgIk1V U1QgTk9UIiAyMTE5IGxhbmd1YWdlIHRvIHByZXZlbnQgdGhlaXIgaW5jbHVzaW9uIG9yIGlzDQo+ ID4gdGhlIGN1cnJlbnQgZGVzY3JpcHRpdmUgbGFuZ3VhZ2Ugc3VmZmljaWVudD8pDQo+ID4NCj4g DQo+IFtNZWRdIE9LLg0KPiANCj4gPiAgICAgICBjb25mbGljdC1zY29wZTogIEluZGljYXRlcyB0 aGUgY29uZmxpY3Qgc2NvcGUuICBJdCBtYXkgaW5jbHVkZSBhDQo+ID4gICAgICAgICAgbGlzdCBv ZiBJUCBhZGRyZXNzZXMsIGEgbGlzdCBvZiBwcmVmaXhlcywgYSBsaXN0IG9mIHBvcnQNCj4gPiAg ICAgICAgICBudW1iZXJzLCBhIGxpc3Qgb2YgdGFyZ2V0IHByb3RvY29scywgYSBsaXN0IG9mIEZR RE5zLCBhIGxpc3Qgb2YNCj4gPiAgICAgICAgICBVUklzLCBhIGxpc3Qgb2YgYWxpYXMtbmFtZXMs IG9yIHJlZmVyZW5jZXMgdG8gY29uZmxpY3RpbmcgQUNMcy4NCj4gPg0KPiA+IEhvdyBkbyBJIHJl ZmVyZW5jZSBhbiBBQ0w/DQo+IA0KPiBbTWVkXSBCeSBhbiBhY2wtbmFtZS4gSSB1cGRhdGVkIHRo ZSB0ZXh0IHRvIGhpbnQgdGhpczoNCj4gDQo+ICIoYnkgYW4gJ2FjbC1uYW1lJywgdHlwaWNhbGx5 IFtJLUQuaWV0Zi1kb3RzLWRhdGEtY2hhbm5lbF0pIg0KPiANCj4gPg0KPiA+ICAgICAgICAgICAg ICAgICAgICAgICAgICAgVGhpcyBjYW4gYmUgYWNoaWV2ZWQgYnkgc2VuZGluZyBhIFBVVCByZXF1 ZXN0DQo+ID4gICAgd2l0aCBhIG5ldyAnbWlkJyB2YWx1ZSB0aGF0IHdpbGwgb3ZlcnJpZGUgdGhl IGV4aXN0aW5nIG9uZSB3aXRoDQo+ID4gICAgb3ZlcmxhcHBpbmcgbWl0aWdhdGlvbiBzY29wZXMu DQo+ID4NCj4gPiBEbyB3ZSB3YW50IHRvIHJlaXRlcmF0ZSB0aGF0IHRoZSBleGlzdGluZyBvbmUg d2lsbCBiZSBkZWxldGVkPw0KPiANCj4gW01lZF0gVGhlIHRleHQgeW91IHF1b3RlZCByZW1pbmRz IHRoYXQgdGhlIG5ldyByZXF1ZXN0IHdpbGwgZGVsZXRlIHRoZQ0KPiBleGlzdGluZyBvbmUuDQo+ IA0KPiA+DQo+ID4gICAgRm9yIGEgbWl0aWdhdGlvbiByZXF1ZXN0IHRvIGNvbnRpbnVlIGJleW9u ZCB0aGUgaW5pdGlhbCBuZWdvdGlhdGVkDQo+ID4gICAgbGlmZXRpbWUsIHRoZSBET1RTIGNsaWVu dCBoYXMgdG8gcmVmcmVzaCB0aGUgY3VycmVudCBtaXRpZ2F0aW9uDQo+ID4gICAgcmVxdWVzdCBi eSBzZW5kaW5nIGEgbmV3IFBVVCByZXF1ZXN0LiAgVGhpcyBQVVQgcmVxdWVzdCBNVVNUIHVzZSB0 aGUNCj4gPiAgICBzYW1lICdtaWQnIHZhbHVlLCBhbmQgTVVTVCByZXBlYXQgYWxsIHRoZSBvdGhl ciBwYXJhbWV0ZXJzIGFzIHNlbnQgaW4NCj4gPiAgICB0aGUgb3JpZ2luYWwgbWl0aWdhdGlvbiBy ZXF1ZXN0IGFwYXJ0IGZyb20gYSBwb3NzaWJsZSBjaGFuZ2UgdG8gdGhlDQo+ID4gICAgbGlmZXRp bWUgcGFyYW1ldGVyIHZhbHVlLg0KPiA+DQo+ID4gSWYgdGhlIHNlcnZlciBkaWQgbm90IGhhdmUg YSBjaGVjayB0aGF0IHRoZSBvdGhlciBwYXJhbWV0ZXJzIG1hdGNoLA0KPiA+IHdoYXQgd291bGQg aGFwcGVuPw0KPiANCj4gW01lZF0gQSByZXF1ZXN0IG1heSBiZSBmb3IgZXhhbXBsZSBpbmFkdmVy dGVudGx5IHRyYW5zaXRpb25lZCBmcm9tIHByZS0NCj4gY29uZmlndXJlZCB0byBpbW1lZGlhdGUg YW5kIHZpY2UgdmVyc2EuIFRvIGF2b2lkIHN1Y2ggaXNzdWVzLCB0aGUgc3BlYw0KPiBtYW5kYXRl cyB0aGUgZm9sbG93aW5nOg0KPiANCj4gKiBhIGNsaWVudCBjYW4gYWRqdXN0IGl0cyBtaXRpZ2F0 aW9uIHNjb3BlIGJ5IHNlbmRpbmcgYSBuZXcgb25lIHRoYXQgd2lsbA0KPiBvdmVycmlkZSBhbiBl eGlzdGluZyBvbmUuDQo+ICogYSBjbGllbnQgY2FuIHVwZGF0ZSBhbiBleGlzdGluZyBtaXRpZ2F0 aW9uIGJ5IGVjaG9pbmcgdGhlIHNhbWUgcGFyYW1ldGVycw0KPiBhcyB0aG9zZSBpbiB0aGUgaW5p dGlhbCBtaXRpZ2F0aW9uIHJlcXVlc3QuDQo+IA0KPiBCdXQgbGVhdmUgaXQgdG8gdGhlIHNlcnZl ciB0byBkZWNpZGUgaG93IHRvIGhhbmRsZSB0aGUgcmVmcmVzaDoNCj4gDQo+ICAgIElmIHRoZSBE T1RTIHNlcnZlciBmaW5kcyB0aGUgJ21pZCcgcGFyYW1ldGVyIHZhbHVlIGNvbnZleWVkIGluIHRo ZQ0KPiAgICBQVVQgcmVxdWVzdCBpbiBpdHMgY29uZmlndXJhdGlvbiBkYXRhIGJvdW5kIHRvIHRo YXQgRE9UUyBjbGllbnQsIGl0DQo+ICAgIE1BWSB1cGRhdGUgdGhlIG1pdGlnYXRpb24gcmVxdWVz dCwgYW5kIGEgMi4wNCAoQ2hhbmdlZCkgcmVzcG9uc2UgaXMNCj4gICAgcmV0dXJuZWQgdG8gaW5k aWNhdGUgYSBzdWNjZXNzZnVsIHVwZGF0ZSBvZiB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0Lg0KPiAN Cj4gICAoRG8gd2UgbmVlZCBub3JtYXRpdmUgbGFuZ3VhZ2UgdGhhdCB0aGUgc2VydmVyIE1VU1QN Cj4gPiB2ZXJpZnkgdGhlIG90aGVyIHBhcmFtZXRlcnMgd2hlbiB0aGUgJ21pZCcgbWF0Y2hlcz8p DQo+ID4NCj4gPiBTZWN0aW9uIDQuNC4yDQo+ID4NCj4gPiAgICAgICAgICAgICAgICAgICAgICAg ICAgIElmIHRoZSByZXByZXNlbnRhdGlvbiBvZiBhbGwgdGhlIGFjdGl2ZQ0KPiA+ICAgIG1pdGln YXRpb24gcmVxdWVzdHMgYXNzb2NpYXRlZCB3aXRoIHRoZSBET1RTIGNsaWVudCBkb2VzIG5vdCBm aXQNCj4gPiAgICB3aXRoaW4gYSBzaW5nbGUgZGF0YWdyYW0sIHRoZSBET1RTIHNlcnZlciBNVVNU IHVzZSB0aGUgQmxvY2syIE9wdGlvbg0KPiA+ICAgIHdpdGggTlVNID0gMCBpbiB0aGUgR0VUIHJl c3BvbnNlLiAgWy4uLl0NCj4gPg0KPiA+IEknbSBub3QgdmVyeSBmYW1pbGlhciB3aXRoIENvQVAg YmxvY2t3aXNlIHRyYW5zZmVyczsgaXMgdGhpcyBpbg0KPiA+IGNvbmZsaWN0IHdpdGggc29tZSBu b3JtYWwgZmVhdHVyZS1uZWdvdGlhdGlvbiBzY2hlbWUgb3IgaXMgaXQgb2theSB0bw0KPiA+IGFz c3VtZSB0aGF0IHRoZSBjbGllbnQgd2lsbCBiZSBhYmxlIHRvIGhhbmRsZSB0aGlzIGV2ZW4gaWYg dGhlIGNsaWVudA0KPiA+IGhhcyBub3QgZXhwbGljdGx5IGluZGljYXRlZCBzdXBwb3J0Pw0KPiAN Cj4gW01lZF0gUkZDNzk1OSBpbmRpY2F0ZXMgdGhlIGZvbGxvd2luZzoNCj4gDQo+ICAgIEEgQ29B UCBpbXBsZW1lbnRhdGlvbiB0aGF0IGRvZXMgbm90IHN1cHBvcnQgdGhlc2Ugb3B0aW9ucyBnZW5l cmFsbHkNCj4gICAgaXMgbGltaXRlZCBpbiB0aGUgc2l6ZSBvZiB0aGUgcmVwcmVzZW50YXRpb25z IHRoYXQgY2FuIGJlIGV4Y2hhbmdlZCwNCj4gICAgc2VlIFNlY3Rpb24gNC42IG9mIFtSRkM3MjUy XS4gIEV2ZW4gdGhvdWdoIHRoZSBvcHRpb25zIGFyZSBDcml0aWNhbCwNCj4gICAgYSBzZXJ2ZXIg bWF5IGRlY2lkZSB0byBzdGFydCB1c2luZyB0aGVtIGluIGFuIHVuc29saWNpdGVkIHdheSBpbiBh DQo+ICAgIHJlc3BvbnNlLiAgTm8gZWZmb3J0IHdhcyBleHBlbmRlZCB0byBwcm92aWRlIGEgY2Fw YWJpbGl0eSBpbmRpY2F0aW9uDQo+ICAgIG1lY2hhbmlzbSBzdXBwb3J0aW5nIHRoYXQgZGVjaXNp b246IHNpbmNlIHRoZSBibG9jay13aXNlIHRyYW5zZmVyDQo+ICAgIG1lY2hhbmlzbXMgYXJlIHNv IGZ1bmRhbWVudGFsIHRvIHRoZSB1c2Ugb2YgQ29BUCBmb3IgcmVwcmVzZW50YXRpb25zDQo+ICAg IGxhcmdlciB0aGFuIGFib3V0IGEga2lsb2J5dGUsIHRoZXJlIGlzIGFuIGV4cGVjdGF0aW9uIHRo YXQgdGhleSBhcmUNCj4gICAgdmVyeSB3aWRlbHkgaW1wbGVtZW50ZWQuDQo+IA0KPiA+DQo+ID4g ICAgICAgVGhpcyBpcyBhIG1hbmRhdG9yeSBhdHRyaWJ1dGUgd2hlbiBhbiBhdHRhY2sgbWl0aWdh dGlvbiBpcw0KPiA+ICAgICAgIHRyaWdnZXJlZC4gIFBhcnRpY3VsYXJseSwgJ21pdGlnYXRpb24t c3RhcnQnIGlzIG5vdCByZXR1cm5lZCBmb3IgYQ0KPiA+ICAgICAgIG1pdGlnYXRpb24gd2l0aCAn c3RhdHVzJyBjb2RlIHNldCB0byA4Lg0KPiA+DQo+ID4gSXMgdGhpcyBiZXR0ZXIgYXMgInRyaWdn ZXJlZCIgb3IgYXMgImFjdGl2ZSI/DQo+IA0KPiBbTWVkXSBDaGFuZ2VkIHRoZSB0ZXh0IHRvICJ3 aGVuIGFuIGltbWVkaWF0ZSBhdHRhY2sgbWl0aWdhdGlvbiBpcw0KPiB0cmlnZ2VyZWQiLg0KPiAN Cj4gPg0KPiA+IGJwcy1kcm9wcGVkIGFuZCBwcHMtZHJvcHBlZCAiU0hPVUxEIGJlIGEgZml2ZS1t aW51dGUgYXZlcmFnZSIsIGJ1dA0KPiA+IHRoYXQgZG9lcyBub3Qgc2VlbSBxdWl0ZSB3ZWxsLWRl ZmluZWQuICBJcyBpdCBhIHJvbGxpbmcgZml2ZS1taW51dGUNCj4gPiBhdmVyYWdlIG92ZXIgYmlu cyBvZiBvbmUgc2Vjb25kLCBvciBhIGJpbm5lZCBmaXZlLW1pbnV0ZSBhdmVyYWdlIGZvcg0KPiA+ IHRoZSBsYXN0IGZpdmUtbWludXRlIGludGVydmFsIHRoYXQgZW5kcyBvbiBhIG11bHRpcGxlIG9m ICc1Jywgb3Igc29tZXRoaW5nDQo+IGVsc2U/DQo+IA0KPiBbTWVkXSBXaGF0IGlzIG1lYW50IGlu IGFuIGF2ZXJhZ2Ugb3ZlciA1LW1pbnV0ZSBpbnRlcnZhbHMuIFVwZGF0ZWQgdGhlDQo+IHRleHQg YWNjb3JkaW5nbHkuDQo+IA0KPiA+DQo+ID4gICAgVXBvbiByZWNlaXB0IG9mIGEgY29uZmxpY3Qg bm90aWZpY2F0aW9uIG1lc3NhZ2UgaW5kaWNhdGluZyB0aGF0IGENCj4gPiAgICBtaXRpZ2F0aW9u IHJlcXVlc3QgaXMgZGVhY3RpdmF0ZWQgYmVjYXVzZSBvZiBhIGNvbmZsaWN0LCBhIERPVFMNCj4g PiAgICBjbGllbnQgTVVTVCBOT1QgcmVzZW5kIHRoZSBzYW1lIG1pdGlnYXRpb24gcmVxdWVzdCBi ZWZvcmUgdGhlIGV4cGlyeQ0KPiA+ICAgIG9mICdyZXRyeS10aW1lcicuICBJdCBpcyBhbHNvIHJl Y29tbWVuZGVkIHRoYXQgRE9UUyBjbGllbnRzIHN1cHBvcnQNCj4gPiAgICBtZWFucyB0byBhbGVy dCBhZG1pbmlzdHJhdG9ycyBhYm91dCBtaXRpZ2F0aW9uIGNvbmZsaWN0cy4NCj4gPg0KPiA+IERv IHdlIG5lZWQgdG8gc2F5IGFueXRoaW5nIHJlZ2FyZGluZyB0aGUgc2VydmVyIGJlaGF2aW9yIHdo ZW4gYQ0KPiA+IHJldHJhbnNtaXQgb3Igc2ltaWxhciB3YXMgaW4gZmxpZ2h0IGFscmVhZHkgd2hl biB0aGUgY29uZmxpY3QNCj4gPiBub3RpZmljYXRpb24gd2FzIGdlbmVyYXRlZD8gIChUaGF0IGlz LCB0aGUgc2VydmVyJ3MgZW5mb3JjZW1lbnQgb2YgdGhlDQo+ID4gTVVTVCBOT1QgbWF5IG5lZWQg dG8gYmUgcmVzdHJhaW5lZC4pDQo+IA0KPiBbTWVkXSBUaGUgTVVTVCBOT1QgaXMgaW50ZW5kZWQg dG8gYXZvaWQgb3ZlcmxvYWRpbmcgdGhlIHNlcnZlciwgYmVjYXVzZToNCj4gDQo+ICAgICAgICAg ICJBbnkgcmV0cmFuc21pc3Npb24gb2YgdGhlIHNhbWUNCj4gICAgICAgICAgbWl0aWdhdGlvbiBy ZXF1ZXN0IGJlZm9yZSB0aGUgZXhwaXJ5IG9mIHRoaXMgdGltZXIgaXMgbGlrZWx5IHRvDQo+ICAg ICAgICAgIGJlIHJlamVjdGVkIGJ5IHRoZSBET1RTIHNlcnZlciBmb3IgdGhlIHNhbWUgcmVhc29u cy4iDQo+IA0KPiBUaGUgdGV4dCBsZWF2ZSBpdCB0byB0aGUgc2VydmVyIHRvIGRlY2lkZSB3aGlj aCBhY3Rpb24gdG8gdGFrZSB3aGVuIE1VU1QNCj4gTk9UIGlzIG5vdCBmb2xsb3dlZCBieSBhIGNs aWVudC4gVGhlIHNlcnZlciBtYXkgZGVjaWRlIHRoZSBzaWxlbnRseSBpZ25vcmUNCj4gdGhvc2Us IGV0Yy4NCj4gDQo+IFdlIGNhbiBhZGQgc29tZSB0ZXh0IGlmIG5lZWRlZC4NCj4gDQo+ID4NCj4g PiAgICBBbHRlcm5hdGl2ZWx5LCB0aGUgRE9UUyBjbGllbnQgY2FuIGV4cGxpY2l0bHkgZGVyZWdp c3RlciBpdHNlbGYgYnkNCj4gPiAgICBpc3N1aW5nIGEgR0VUIHJlcXVlc3QgdGhhdCBoYXMgdGhl IFRva2VuIGZpZWxkIHNldCB0byB0aGUgdG9rZW4gb2YNCj4gPiAgICB0aGUgb2JzZXJ2YXRpb24g dG8gYmUgY2FuY2VsbGVkIGFuZCBpbmNsdWRlcyBhbiBPYnNlcnZlIE9wdGlvbiB3aXRoDQo+ID4g ICAgdGhlIHZhbHVlIHNldCB0byAnMScgKGRlcmVnaXN0ZXIpLg0KPiA+DQo+ID4gVGhpcyBzZWVt cyBsaWtlIHRoZSBtb3JlICJwb2xpdGUiIGJlaGF2aW9yIChhcyBvcHBvc2VkIHRvIGp1c3QNCj4g PiAiZm9yZ2V0dGluZyIgLS0gd2h5IGlzIHRoZSBwb2xpdGUgYmVoYXZpb3Igbm90IHRoZSBkZWZh dWx0IGJlaGF2aW9yPw0KPiANCj4gW01lZF0gRG9uZSBpbiBteSBsb2NhbCBjb3B5Lg0KPiANCj4g Pg0KPiA+IERvZXMgdGhlIEdFVCBpbiAgRmlndXJlIDEzIG5lZWQgdG8gaGF2ZSBhICIud2VsbC1r bm93biIgYW5kIG90aGVyIHBhdGgNCj4gPiBjb21wb25lbnRzPw0KPiA+DQo+IA0KPiBbTWVkXSBE b24ndCB0aGluayBzby4gQWN0dWFsbHksIHdlIGFyZSBtaW1pY2tpbmcgZmlndXJlIDIgaW4gUkZD NzY0MS4NCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQo+IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Wed Jan 16 07:29:55 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29D6A1294FA; Wed, 16 Jan 2019 07:29:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EzdjsIdjKF0u; Wed, 16 Jan 2019 07:29:50 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D2E5130E57; Wed, 16 Jan 2019 07:29:50 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 43frjn2XV6zBsV6; Wed, 16 Jan 2019 16:29:49 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.13]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 43frjn1k72z1xnY; Wed, 16 Jan 2019 16:29:49 +0100 (CET) Received: from OPEXCAUBM42.corporate.adroot.infra.ftgroup (10.114.13.45) by OPEXCLILM6D.corporate.adroot.infra.ftgroup (10.114.31.13) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 16 Jan 2019 16:29:48 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM42.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Wed, 16 Jan 2019 16:29:48 +0100 From: To: Benjamin Kaduk , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (4th Part) Thread-Index: AdStsEzDhemt4/YOTsCzXrprdETtow== Date: Wed, 16 Jan 2019 15:29:45 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0846A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (4th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 15:29:53 -0000 Re-, Please see inline. Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: mercredi 16 janvier 2019 01:14 > =C0=A0: draft-ietf-dots-signal-channel@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: AD review of draft-ietf-dots-signal-channel-25 >=20 >=20 > Section 4.4.3 >=20 > I'm not questioning the decision, but I am a bit curious how we ended up > with a boolean "attack-status" parameter and no quantitative > measurements. >=20 [Med] This is not a Boolean. The attack-status reflects the status as obser= ved by the client. Actually, we restricted the information to the minimum i= nformation that can be reported by the client without leaking privacy/local= information that may be subject to local policies at the client domain.=20 > The DOTS server indicates the result of processing a PUT request > using CoAP response codes. The response code 2.04 (Changed) is > returned if the DOTS server has accepted the mitigation efficacy > update. The error response code 5.03 (Service Unavailable) is > returned if the DOTS server has erred or is incapable of performing > the mitigation. >=20 > What (if anythin) should the client do in response? Should the client > assume the server is dead and move to a different one? [Med] 5.03 uses Max-Age option to indicate when to retry. This is discussed= in RFC7252. I can update the text if you think this is helpful to remind t= his.=20 >=20 > Section 4.4.4 >=20 > terminating period SHOULD be set by default to 120 seconds. If the > client requests mitigation again before the initial active-but- > terminating period elapses, the DOTS server MAY exponentially > increase the active-but-terminating period up to a maximum of 300 > seconds (5 minutes). >=20 > Is the base of the exponent supposed to be 2 (i.e., a doubling of the > delay)? This should probably be made explicit. [Med] Done. Thanks. Also, is the input to > the doubling the previous total delay, or the amount of delay remaining > when the repeated request arrives? [Med] The server sets active-but-terminating, then if it receives a request= before that timer expires, it doubles the active-but-terminating and so on= . The server repeats this process at most for 5 minutes. =20 >=20 > If a mitigation is triggered due to a signal channel loss, the DOTS > server relies upon normal triggers to stop that mitigation > (typically, receipt of a valid DELETE request, expiry of the > mitigation lifetime, or observation of traffic to the attack target). >=20 > I think "observation of traffic" probably needs more explanation -- as > written, it sounds like any packet arriving would be sufficient, which > is probably not the intended behavior... [Med] We meant "inspecting the traffic", but avoided to use the word becaus= e this term is not well perceived. =20 I can update the text If you are OK with "inspecting".=20 >=20 > Section 4.5.1 >=20 > Does the "max-retransmit" value exclude the initial transmission? [Med] Yes. >=20 > I'm not sure whether there are any particularly interesting security > considerations to mention about what happens when ack-random-factor is > insufficiently random; it seems like things would only get really bad if > the value was constant across peers. >=20 [Med] A brief discussion on this change's impact can be found in Section 4.= 8.1 of RFC7252.=20 > Section 4.5.2 >=20 > A DOTS client MUST NOT > transmit a "CoAP Ping" while waiting for the previous "CoAP Ping" > response from the same DOTS server. >=20 > Is this intended to block retransmissions of the same CoAP Ping? [Med] This is intended to block retransmission before the retransmission ti= meout expires. =20 >=20 > sid: Session Identifier is an identifier for the DOTS signal channel > session configuration data represented as an integer. This > identifier MUST be generated by DOTS clients. 'sid' values MUST > increase monotonically. >=20 > What event triggers the increase? [Med] Send a PUT request for configuration purpose. =20 >=20 > Section 4.5.3 >=20 > When a DDoS attack is active, > refresh requests MUST NOT be sent by DOTS clients and the DOTS server > MUST NOT terminate the (D)TLS session after the expiry of the value > returned in Max-Age Option. >=20 > It seems like there's a bit of a race condition with attacks and refresh > requests coming in in parallel. >=20 [Med] Is there any change that you see to the text?=20 > Section 4.6 >=20 > The DOTS server can return the error response code 5.03 in response > to a request from the DOTS client or convey the error response code > 5.03 in a unidirectional notification response from the DOTS server. >=20 > Just to check my understanding, this unidirectional notification would > only happen if there was a previous Observe to establish the channel? [Med] Yes. >=20 > The "alt-server-record" description here is pretty vague on the string > formatting used, v4 vs. v6, etc.; [Med] "IP addresses" is used on purpose to refer to both IPv4 and IPv6 addr= esses. I guess that the actual "type > inet:ip-address" in the YANG module is probably specific enough, though. >=20 [Med] Yes, indeed. > Section 4.7 >=20 > The first two paragraphs seem to have high overlap and would probably > benefit from at least being joined together if not also trimmed down a > bit. [Med] Joined together in the my local copy with the 2nd para which starts n= ow with "Concretely, ". >=20 > In case of a massive DDoS attack that saturates the incoming link(s) > to the DOTS client, all traffic from the DOTS server to the DOTS > client will likely be dropped, although the DOTS server receives > heartbeat requests in addition to DOTS messages sent by the DOTS > client. In this scenario, the DOTS agents MUST behave differently to > handle message transmission and DOTS session liveliness during link > saturation: >=20 > Do we need to say how the agents independently detect the > link-saturation situation? >=20 [Med] When the agents are aware that an attack is ongoing, they will infer = links are likely to be saturated. > Section 5.1 >=20 > It looks like the tree diagram and the module differ about the > "mandatory false" nature of some nodes, e.g., upper-port. Perhaps the > tree diagram should be regenerated? >=20 [Med] Will double check. > Section 5.2 >=20 > I mostly expect some heartburn from various folks about overriding > protocol number 0's interpretation as the IPv6 hop-by-hop option to mean > "all protocols", though it will probably be fine in practice. I am > including a suggested rewording in my editorial changes that may help > alleviate concerns. [Med] Good catch. We can fix this by updating the text to: "If 'target-protocol' is not specified, then the request applies to any pro= tocol." Will also check your proposal. Thanks. >=20 > Section 6 >=20 > I have several thoughts about the CBOR encoding, some of which I > mentioned in some previous emails. (I also don't have much experience > with CBOR encoding, so I probably have some things wrong, too...) >=20 > It seems that CBOR major type 0 also encodes some width information for > integers. Do we want to require that the CBOR encoding always uses the > width that matches the types in the YANG module, or do we permit a > smaller encoding when the value in question fits? (Presumably the > answer falls out naturally if we expect people to use off-the-shelf CBOR > libraries...) >=20 > We say that the initial set of key values is comprehension-required; > does that mean that any other future extensions are necessarily > comprehension-optional, and there can be no additional > comprehension-required keys? [Med] Future extensions can be either comprehension-required or comprehensi= on-optional. This will depend on each use case.=20 >=20 > It's probably appropriate to make a statement in the initial text here > about the port number and/or media type indicating that this is the > syntax used for the top-level object. >=20 > I already mentioned that the encoding of the integer form of the key > values takes a different number of bytes depending on the integer value, > so I think those keys are rearranged in the -26 (I reviewed the -25). [Med] I guess Tiru has already addressed that comment.=20 >=20 > Section 7.1 >=20 > A key challenge to deploying DOTS is the provisioning of DOTS > clients, including the distribution of keying material to DOTS > clients to enable the required mutual authentication of DOTS agents. > EST defines a method of certificate enrollment by which domains >=20 > I think we need a reference for EST. [Med] Done. Thanks. >=20 > o TLS False Start [RFC7918] which reduces round-trips by allowing > the TLS second flight of messages (ChangeCipherSpec) to also > contain the DOTS signal. > [...] > o TCP Fast Open [RFC7413] can reduce the number of round-trips to > convey DOTS signal channel message. >=20 > These are in something of a specification limbo, as they both appear to > only be formally defined for use with TLS, but TLS False Start seems to > have a straightforward extension to DTLS. It may be worth tweaking the > text a little to acknowledge the situation here. [Med] Can you please indicate which tweaking do you have in mind?=20 TFO allows to send data in the SYN without waiting for the completion of th= e 3WHS. Obviously, such delay is specific to TCP.=20 =20 From nobody Wed Jan 16 09:43:56 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2367124BAA; Wed, 16 Jan 2019 09:43:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BarDg3Zfdh_M; Wed, 16 Jan 2019 09:43:51 -0800 (PST) Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680111.outbound.protection.outlook.com [40.107.68.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B0520124B0C; Wed, 16 Jan 2019 09:43:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w9/GnsLdj8tH50329XHXYmA2MQUnlUCB9o36lYgRu1o=; b=RANrfisa54MbCbMN8FBkDQDqCubhv8QXo/GEzskuaX1uSKTeuO/uweRclT4pXF0tEjK+btczYrEgFUJEGmEaH1Rm4WnMWXZLSqbSfhcsYROjczqFcPv6Rk1yLbpKqiM4oyLIs/WRM3GoBBm79wXAo93g2atAtEVFzdMMDBcUezo= Received: from CY4PR01CA0005.prod.exchangelabs.com (2603:10b6:903:1f::15) by BN7PR01MB3682.prod.exchangelabs.com (2603:10b6:406:86::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.15; Wed, 16 Jan 2019 17:43:49 +0000 Received: from BY2NAM03FT063.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::202) by CY4PR01CA0005.outlook.office365.com (2603:10b6:903:1f::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1537.24 via Frontend Transport; Wed, 16 Jan 2019 17:43:49 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT063.mail.protection.outlook.com (10.152.85.182) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1446.11 via Frontend Transport; Wed, 16 Jan 2019 17:43:48 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0GHhiFM032479 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 16 Jan 2019 12:43:46 -0500 Date: Wed, 16 Jan 2019 11:43:44 -0600 From: Benjamin Kaduk To: "Konda, Tirumaleswar Reddy" CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190116174344.GF91727@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(396003)(39860400002)(376002)(136003)(2980300002)(13464003)(55784004)(189003)(199004)(54906003)(8676002)(786003)(316002)(55016002)(106002)(229853002)(8936002)(76176011)(345774005)(33656002)(305945005)(5660300001)(6246003)(7696005)(58126008)(36906005)(966005)(486006)(26826003)(23756003)(246002)(6916009)(50466002)(478600001)(336012)(1076003)(104016004)(426003)(26005)(476003)(956004)(11346002)(75432002)(6306002)(446003)(53546011)(4326008)(53416004)(47776003)(2906002)(106466001)(186003)(126002)(5024004)(14444005)(30864003)(86362001)(4744004)(2870700001)(356004)(88552002)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR01MB3682; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; BY2NAM03FT063; 1:3L6pXM4B7VhF60kpUIeFAULhMVvnD/n546GTZ70UlpOJh/ehTKjWBdMTnx2lLnA9rpJ+UdbeuZuolAeVVEBJ84pO0Rm4rQs7wudAeYTDBgkg6muxxa76Z55VUhLNs42J X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 80b98975-522a-4e55-cfdd-08d67bda2bde X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:BN7PR01MB3682; X-Microsoft-Exchange-Diagnostics: 1; BN7PR01MB3682; 3:de/jeNDoHP7VqldcwZQWBS83j/Y45Ntc/KcajgDbIEgdwGekkSFF+JzblRRakVdGh+ujtEuGZazuLMUgx88NeW5i84Y5kaVVRVMFLg2pqPKaiFSEx/d7Jpn9joQsrokOBZM6MbAdQa4C5l/bp/RWJR3TSZAI0Qp7/NU0Gehv1qHl867soWSQafjMQqrXqJTAmNqI5ILsZoicYUWVmEJSkIZT7prL0yhZO1rOUZmRAAff0duPEf8xds6VV3FFOABQ04ZpIbTJ/fepWuiZbTzGzsDL9eyZR2qUzCuOfHyjUjQVkBMVUzAaZVJxo1jD4e7Op+ZirmzLuDkp8gxXC0ctIXP364k0Ue9Etz7l/BlgC13WyqDfCsTR0pmJ5yyTNvLE; 25:ud96O4xUqkgOUa/HfRIwpCRbFvRhCp9+ytMu/69eFcZqhjTfd7ZIteXg22TZ3yFWWBklbhWIgor1+WNztIogycfVvy/w5xpBHlUSnSBFPkrv8X+ZaT+upENmWQ4CsxQDUNHVxLzmiwjnKlNLAA6iNgVZ2CFgPRZlkuMCH20egWZD3pXI8Bw0gWefQ56nrnr1ScWHcwieETC2ZsjnxpYYFnLQWFGNhnd8Zm5DwGserTj+ykcMyrOUwU+53ABd7A8USiDLb26zztbXU06cEQBuFMxLyIsJgnHt4Zuqpm0AAQ5YQpc/Ec/RPMty9jafSLPrvKWX8PHdtQKR71mYT82krQ== X-MS-TrafficTypeDiagnostic: BN7PR01MB3682: X-Microsoft-Exchange-Diagnostics: 1; BN7PR01MB3682; 31:10UafizTHPc7y0nYbGUuPuJK7a8E/tiLqlMSs9ZKgvbuZky9TBs1xgppedH8h9Jy8NYgz2+aYcMzWaWuksxybBGl1ApuU02fBwm0O2nAtoDZQJzgDGcpuRWSRJFA3p7gPftOnxjc4pasLwPt88CN1h/lk6qfAyCNuhWjuA5cqDANgHl9nb2g1I4iPg9kt4xlM6T9KK74OfNZMfT88Pg9HL93dMlilCtUH8XdfY1DZdw=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; BN7PR01MB3682; 4:+vM/HTofKEt4ZA/HR05y+2pexXWMk1v474l2wvGAfrQITz9RcSAgwrgFEPbZlk4RrvYsUjkRgpmkzfZV67LAJFNb05w88GB/ya6gXnxGkRzEw/pbZK/nWmEiXrWRIpC4pATdVmvX5iqV1sHX2MVAHHiHBAhhkDTd7sjtfVA2PFBPWX5MHtPRQis03AteMhR6nqiFhaCLZfyWIN9KmlpnQhATBK/NkV+1NVi+KRgP/XWnhN5wJUKRjlM18zoJbBXsiLij08AmrWxjFV0y0Ei63hxFRhplP/G4DlzMpn9WC5ANIruxFjAvtsVzh12i4egd X-Forefront-PRVS: 091949432C X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; BN7PR01MB3682; 23:ogy++sCW3SPUkIHISoy/PSVBp4RQpWovbqJ1LSY?= =?iso-8859-1?Q?gQhyaJVguUsTiDqkvz6UYDIVgEXsbPGX9fe+po3qKRTdFhejCQIIF3SQ4r?= =?iso-8859-1?Q?iuEFlDvnpQAjcNPAoqjga9L3E6XRX+8aDCWWz+LthPDP0DTMpIN7O1tKRI?= =?iso-8859-1?Q?1mnNNWr3+sm6k/YsxKUT8bkP7a2F+MAmoJUgwnQzEtDLA7ZyO4x5Tad18M?= =?iso-8859-1?Q?1ugUzobbK3ybdBzfqK0GAokC0pEWDcPGJpf26FoI6quRksgd4v8+VHd9qi?= =?iso-8859-1?Q?VI4AAQsQRv+STaGHyQzgWRFlMzCeY1Tak3EGjju7Y/W0vY0yK+jOWdCh1b?= =?iso-8859-1?Q?u7HeW2iUyXApJ60dPvIgMV1jE1Z5TA6WcRYWtAOfFiXXw/FHoVWtdUoHYj?= =?iso-8859-1?Q?wwfQxjQy82Jdp3U/hn9pd7pBFNZzbebjgC/RG3f6tyvfsZ6B/qkxqTheqU?= =?iso-8859-1?Q?VgIOzGvqIKMGj10nKf5wzET1h9hQpNq7xYyTrDfYFXiX89H1dLi0axC/1c?= =?iso-8859-1?Q?jXGzqIkiibChfKb4to4lvLnKPNt1OoFrELoIbZBBhuyiIF2hKMgK063c1/?= =?iso-8859-1?Q?xs7MrEfeI6YVVchS7wfo4OiMBPvSB7E/Z2Rb5M2gMhpG9y00mxvLiZOnQ9?= =?iso-8859-1?Q?3utfDI2Pb6eX0d//uSCs/nzOIjGLAISYWHfGUhVU+xnTlfJFcGUXKSnFaP?= =?iso-8859-1?Q?2nzPBkg+fGQbiYnLUmxkBN3UYCcQeQTsImxBTQhVumVHd+QvThbfLKK0z1?= =?iso-8859-1?Q?L6uZ+grI7Q7NDCzOrmFlnHNWYbaHYuucSXOYCPICerVOywYm/CPgsiVZZf?= =?iso-8859-1?Q?SXDTc7QVuXxZubUGCkT4FKWFXkgrR+ZranaC3dwhOGOWlM4z0Oh/RJ0wea?= =?iso-8859-1?Q?s8UVG80tyh0coMmhEvSmL5OztZ2OXg6SJYjMtshiJwdKTtrNQvmB83OTCy?= =?iso-8859-1?Q?Y7fPjTllrq8yb29PkMCqg0ZGrVOD48hVSlFxj9zJcX8lxOQ41CfQkUSQ7/?= =?iso-8859-1?Q?3lIK0boqPE8Ru80QWp3wsN/ExH6KXmGh1rG4Pau1+PjEvuKIdtC8BiEpj5?= =?iso-8859-1?Q?iNehkzqUdnJweqiOBe0ltCjCDaPd99PVtPEb8g1fY3PnrONPxL5AL3aU0j?= =?iso-8859-1?Q?/pz2SGVpc/rbtgrtro9GbFKUEh3elz/spJKzaVG3gpwkROyCQo1idEloc3?= =?iso-8859-1?Q?E717PgRn/ji79S0ot8eLNFuZGfYOVHJQ1JRFmFEnJZyP0JXe/Ce1458wJm?= =?iso-8859-1?Q?zE+DoYDI9MwPIHZTPQz+M7f2RvWOWVagqIvfD0JRwZYNIXaityT4Niz1f3?= =?iso-8859-1?Q?ka3lKuNDb6oK32VKKVkwWCv1c77sYpjtQN8CU4aGQ1TGEtxwPv+dOBZ+M1?= =?iso-8859-1?Q?dnVZRV8WAGmIQWf6Y1iVEYiQPxWDSOn1/AM5RG3F52mdXwF+cdrQfTvugo?= =?iso-8859-1?Q?muv2W1DByT14Q4=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: 7QG5a7A7lMb46x+HguwFJT0qgAnPFWgnrUS/uV7Z8UwYdUDHRFyi22OPLEXJsL4RJYbdcGEbGLo6ASKz3IghrMgWajGCGjIW+8v2Wsyx/QRuUBNOWw8QQZBL79K+XOERh1FUOdV5iIe3S/MSHgQfsuA1kQ2E7+xT5zRqzUpJFsPE5iOd7WGlWa3yCgRx4FtEcz20fPFbPM2UstWGleTEQmfIcR4rGWBBNeRbKEIGRcHxpf4M3rCTbHRKhFyP4av9BVFDF4J70BiH4qDTx125wZtjChLHqDfAKQy65iDcZVxPesGo3Pr3UuqGBsObwF7ut2ru8kXTBtYEi3VS2or4CYjcptRj/6UH/ze9zrdDNRW8qIW/FXyNR26RcwXKE2LpIPoutflcAI8UvJYVEuX/cEGOEZQ2SlDjBoe89VJFxms= X-Microsoft-Exchange-Diagnostics: 1; BN7PR01MB3682; 6:zKe42t0yVX5pO/huIKKsgapDIiF3KFp+AHEoZW9wHLzIKawAeIS4lQ2fJaz5WBCcmM9MlBdsXus6vWbMkwHVfHQ6VERxo/48WXBdOsahq7MGFP7vMBABSOBvdGIDalLsogzKWg0BKQlfMTKC2DNNseKkmqnO8rYZgElZCysMmfsQAl/sX0/Mk3OvMHcjJkz5rSOqRz1OYjU4Uyj8P/K+s3JHYEgE/RhMqervj4kBKwAjPB55aztMSOzuOnSaOTK9zwGNY7UJ8RGdY/XEBHuP3peMNRzWbPWtmLsqmJltyElcdkZviAivP8VUYBVjmSOKY81ArAE/Uuqs8ZDWoJK2flUGqnnAcSSA4LFpFw6t8udVfHG/mlWG+zzMVU/xd1mzs1oEOdRDDvVBLXDfGrnF2H435rF5ClU7USLHU2tvkItHzM/60fYRU9+jSmlE5aQ2nM368exA9QZqzggs8k9ihg==; 5:oJpBPebLEGm4KK5W4DQZ/oJ0D83KNN/5g915OhLiafKTR7esNiakI0/nkcGbTmZzW17M1Fne2A1OjBva83ZKXNv/DYa/u9IzawJqbUbJ4ItiKDJ9GkkP44hRI0Oh1udAJeqiro/j1Rhsa8XUeIVpnldMNS/gA2o3SK/rwO2l/sz8qL1Z48n3u7RmV8aPx7XIyQzL/h2u2YUIbDDGQ6HhUg==; 7:glBLWhHXnm7nEc+bHb57gj2+CRkKAlsA6fE1n1fOHD0I++KMa84rKuk2yOlV4fxWNKZXbfGt4NjS/TyDFpXC8/HK5mL41+N8f3mM3P2DsQH3FnPnno5Dn/f623f96IF0Vdidn9ZDWaTDXeKTVpVqSA== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jan 2019 17:43:48.3769 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 80b98975-522a-4e55-cfdd-08d67bda2bde X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR01MB3682 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 17:43:55 -0000 Trying to get both Tiru and Med's comments, inline... On Wed, Jan 16, 2019 at 11:10:37AM +0000, Konda, Tirumaleswar Reddy wrote: > Hi Med, > > Please see inline > > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Wednesday, January 16, 2019 1:30 PM > > To: Benjamin Kaduk ; draft-ietf-dots-signal- > > channel@ietf.org > > Cc: dots@ietf.org > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) > > > > This email originated from outside of the organization. Do not click links or > > open attachments unless you recognize the sender and know the content is > > safe. > > > > Hi Ben, > > > > Thank you for the detailed review. > > > > Please see inline a first set of replies. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : Benjamin Kaduk [mailto:kaduk@mit.edu] Envoyé : mercredi 16 > > > janvier 2019 01:14 À : draft-ietf-dots-signal-channel@ietf.org > > > Cc : dots@ietf.org > > > Objet : AD review of draft-ietf-dots-signal-channel-25 > > > > > > AD review of -25. (Note that -26 is out already, but to preserve my > > > sanity I am still using the section numbers from the -25. I took a > > > quick look at the diff, and tried to remove comments that are no > > > longer applicable, but probably missed some. > > > > > > This review is pretty long, but I think the document is actually in > > > pretty good shape -- the length of review comments is just a normal > > > frequency of rough edges multiplied by a long document. > > > > > > I will make a github pull request with some changes that I think are > > > just editorial (but feel free to bring them up as discussion items if > > > you are not sure that they are editorial, disagree with the changes, > > > etc.) > > > > > > We should probably introduce (or avoid) the concept of "peace-time" > > > (sometimes spelled without the hyphen) and perhaps the corresponding > > > attack situation before using it. > > > > > > > [Med] We do have two occurrences in the document. I fixed these two. Thanks. I guess my more meta-point was whether we expect the audience to be familiar with the usage of "peacetime" for "absence of a DoS attack" -- I personally found it slightly jarring, but I'm also not exactly the target audience. > > > Section 1 > > > > > > I wasn't sure whether the RFC 4987 reference was supposed to be for > > > what an ACK-flood is or the fact that it is CPU-exhausting or something else. > > > (Searching for those terms in its text did not help me come to a > > > conclusion.) > > > > > > > [Med] RFC 4987 is a pointer to back that SYN flood is memory exhausting. I > > move the citation right after SYN-flood. Ah, that makes perfect sense; thanks. > > > > > We also talk about "DOTS servers" and "DOTS agents" in Section 1, > > > before we've defined the terminology. But these two are sufficiently > > > self-explanatory that it may be fine to leave them as-is. > > > > > > > [Med] You are right. I don't think a change is needed. > > > > > > > This protocol enables > > > cooperation between DOTS agents to permit a highly-automated network > > > defense that is robust, reliable, and secure. > > > > > > We should explain somewhere what we mean by "secure". (I guess, that > > > the signal and data channels are integrity- and > > > confidentiality-protected, and that changes in mitigation status are > > > not made unless properly authorized.) > > > > > > > [Med] By secure, we meant the set of features called in Section 2.4 of draft- > > ietf-dots-requirements. We can add a pointer to that section if this helps. It's probably worth doing. > > > Section 3 > > > > > > DOTS clients MAY alternatively support means to dynamically > > > discover the ports used by their DOTS servers. [...] > > > > > > If we have some examples in mind of dynamic discovery protocols, it > > > would be appropriate to provide informative references here. > > > > > > > [Med] OK. I added an informative reference to draft-boucadair-dots- > > discovery. > > > > > We should also have an informative reference for "Happy Eyeballs" > > > (e.g., RFC 8305). > > > > > > > [Med] That text points to the section defining HE: > > > > A Happy Eyeballs procedure for DOTS signal channel is > > specified in Section 4.3. > > > > 8305 is cited in section 4.3: > > > > To overcome these connection setup problems, the DOTS client attempts > > to connect to its DOTS server(s) using both IPv6 and IPv4, and tries > > both DTLS over UDP and TLS over TCP in a manner similar to the Happy > > Eyeballs mechanism [RFC8305]. > > > > This is sufficient, IMO. So it is. Sorry to have missed that before. > > > From that standpoint, this document specifies a YANG module for > > > representing DOTS mitigation scopes, DOTS signal channel session > > > [...] > > > > > > Which standpoint? > > > > [Med] that is "use the same data models...". > > > > I deleted the "From that standpoint," because this may not be clear. Sounds good. > > > > > > Representing these data as CBOR data is assumed to follow the rules > > > in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with > > > JSON/CBOR conversion rules in [RFC7049]. All parameters in the > > > payload of the DOTS signal channel are mapped to CBOR types as > > > specified in Section 6. > > > > > > How do I know which set of rules is in use? > > > > [Med] This s not important from a DOTS interoperability standpoint. What is > > important is the mapping table in Section 6 (and mapping entries that will > > defined in future documents). > > > > Are the two sets of rules > > > equivalent and interoperable? So the claim is that following either set of rules will result in the same (well, equivalent) encoding, based on the relevant CBOR types? If so, this text could probably be reworded to just use declarative language instead of "is assumed to", maybe something like "are encoded in CBOR; the procedures in [] or [] will produce a valid encoding", though I don't have a great concrete suggestion off the top of my head. > > > DOTS agents MUST support GET, PUT, and DELETE CoAP methods. [...] > > > > > > As written, this applies to all agents (clients, servers, and proxies). > > > Presumably this is intended, > > > > [Med] Yes. > > > > but I just wante to double-check -- > > > sometimes it's okay to place weaker requirements on clients. > > > > > > In deployments where one or more translators (e.g., Traditional NAT > > > [RFC3022], CGN [RFC6888], NAT64 [RFC6146], NPTv6 [RFC6296]) are > > > enabled between the client's network and the DOTS server, DOTS signal > > > channel messages forwarded to a DOTS server MUST NOT include > > internal > > > IP addresses/prefixes and/or port numbers; external addresses/ > > > prefixes and/or port numbers as assigned by the translator MUST be > > > > > > Do we want to give any examples of signal channel messages that might > > > include internal addresses/prefixes? > > > > [Med] I'd avoid citing a message which is not defined yet at this stage of the > > document. Okay. > > > > > > Such procedure is needed to avoid experiencing long connection > > > delays. For example, if an IPv4 path to reach a DOTS server is > > > found, but the DOTS server's IPv6 path is not working, a dual-stack > > > DOTS client may experience a significant connection delay compared to > > > an IPv4-only DOTS client. [...] > > > > > > There seems a bit of a mismatch between "found" and "not working". If > > > the point is supposed to be that the client is going to try both IPv4 > > > and IPv6 but the v6 path has issues and it would take the client's > > > algorithm some extra time to choose to fall back to v4, then maybe "iv > > > an IPv4 path to a DOTS server is functional and there is also an > > > apparently present but non-functional IPv6 path to the same server"? > > > > [Med] You got it. I changed the text to: > > > > "if an IPv4 path to reach a DOTS server is functional, but the DOTS server's > > IPv6 path is non-functional," > > > > > > > > These connection attempts are > > > performed by the DOTS client when it initializes. The results of the > > > Happy Eyeballs procedure are used by the DOTS client for sending its > > > subsequent messages to the DOTS server. > > > > > > I see this is scoped to "when the client initializes", so I don't know > > > whether it adds more or not to end with "for the duration of the DOTS > > > session" or some similar scoping for the caching of the happy eyeballs > > > results. > > > > [Med] The connection attempts are performed each time the client has to > > select among a list of v4, v6 (tls, dtls). This is particularly true when the client > > initiates, but this may also be true each time the client has to select among > > v4, v6, DTLS, TLS (e.g., the client attaches to a new network). > > > > I updated the text to: > > > > "These connection attempts are performed by the DOTS client when it > > initializes, or in general when it has to select an address family and transport > > to contact its DOTS server." > > Happy eyeballs mandates caching the results, see https://tools.ietf.org/html/rfc6555#section-4 (to avoid thrashing the network). > We may want to update the above line accordingly. We probably do, perhaps by qualifying the decision as being one made when conditions have changed in some way since the last decision (and some amount of timeout could be considered a "change"). > > > > > > > > > client because there is no long delay before using IPv4 and TCP. The > > > DOTS client repeats the mechanism to discover whether DOTS signal > > > channel messages with DTLS over UDP becomes available from the DOTS > > > server, so the DOTS client can migrate the DOTS signal channel from > > > > > > What would cause UDP to "become available"? > > > > [Med] In this example, this is assumed to be IPv6 path (with no middlebox) > > available again. > > > > In general, this can be due to a path change, network configuration change, > > middlebox configuration change, IPv6 become functional, etc. I think I would have been less confused if we said "periodically repeats". > > Would this be a case like > > > if there's a stateful NAT or where we need to actively apply some sort > > > of NAT traversal? If so, do we want to list it as an example? (If > > > it's a complicated scenario, it may not be worth listing an example, > > > of > > > course.) > > > > [Med] The text already says the following: > > > > "it is assumed that the IPv6 path is broken and UDP traffic is dropped by a > > middlebox" > > > > I do think this is sufficient. It's probably fine, yes. I was just wondering if there would be scenarios where the situation would be improved if a DOTS agent applied active NAT-busting; if so, we would then need to decide whether the benefits were large enough and the situation common enough to merit a mention. (It sounds like we think it is not common enough to mention, which is fine.) > > > > > > I'm not sure if we want to add some annotations to Figure 4 that > > > (e.g.) the initial DTLS attempts do not need to be strictly ordered in > > > the order presented, or to indicate which lines are retries. > > > > [Med] The text explaining that figure mentions the following: "...two TCP > > SYNs and two DTLS ClientHello messages at the same time over IPv6 and > > IPv4." > > > > Adding annotation would be redundant, IMO. It's often helpful for the figure to stand alone, but I'm happy to wait and see if anyone else asks for a change. -Ben From nobody Wed Jan 16 14:27:52 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55CA21311D7; Wed, 16 Jan 2019 14:27:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b5Cx0gssQLIU; Wed, 16 Jan 2019 14:27:48 -0800 (PST) Received: from NAM05-BY2-obe.outbound.protection.outlook.com (mail-eopbgr710116.outbound.protection.outlook.com [40.107.71.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8AB91311CF; Wed, 16 Jan 2019 14:27:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=v3NqGtT74Kose7eEjJMpWdd0MMUvVqo2IAZ9WYBs3V8=; b=nmHyt8Y9I3DYV6oBnEZ7TW0FQTyD4CsBopznoa4i7DZwvzEOhJggl4XZvC3WgyI/1NhQ6ktL41xKTT6LMeCiLW58ZnLPRLpcEtQoQq6LZaUDbzV4B6WxVVA6cKxog6mLJMR1zqucP+Tu9XM5eetGElp02paH2NPXjgr4JV7LdVQ= Received: from MWHPR01CA0036.prod.exchangelabs.com (2603:10b6:300:101::22) by DM6PR01MB4026.prod.exchangelabs.com (2603:10b6:5:2e::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.25; Wed, 16 Jan 2019 22:27:46 +0000 Received: from DM3NAM03FT050.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::202) by MWHPR01CA0036.outlook.office365.com (2603:10b6:300:101::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1537.26 via Frontend Transport; Wed, 16 Jan 2019 22:27:46 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT050.mail.protection.outlook.com (10.152.82.252) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1471.13 via Frontend Transport; Wed, 16 Jan 2019 22:27:45 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0GMRgWF012187 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 16 Jan 2019 17:27:44 -0500 Date: Wed, 16 Jan 2019 16:27:41 -0600 From: Benjamin Kaduk To: "Konda, Tirumaleswar Reddy" CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190116222741.GK91727@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08269@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(136003)(346002)(39860400002)(396003)(376002)(2980300002)(199004)(189003)(55784004)(13464003)(51914003)(53434003)(356004)(58126008)(4326008)(54906003)(36906005)(229853002)(75432002)(47776003)(316002)(6666004)(55016002)(50466002)(5660300001)(478600001)(86362001)(53546011)(26826003)(966005)(186003)(14444005)(30864003)(8676002)(8936002)(6306002)(786003)(305945005)(106002)(1076003)(426003)(26005)(33656002)(2870700001)(7696005)(336012)(76176011)(6246003)(126002)(956004)(476003)(106466001)(104016004)(11346002)(23756003)(486006)(2906002)(246002)(6916009)(53416004)(88552002)(446003)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR01MB4026; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-Microsoft-Exchange-Diagnostics: 1; DM3NAM03FT050; 1:yYD11iULQEB6JwhsyPt1MyFODkMd9DkEQyFrs8r1HA3qjA2sh6pit4NmbPskTP5emFQq/33jdgsWPGrcGoR9EGb8wToME9OGEewqwT2nzk2M8Q5PRb8Du9z7UC6k5Der X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: ed4dfe01-3766-4838-80d4-08d67c01d6c7 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:DM6PR01MB4026; X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4026; 3:mQYpR9fXxzDfHI7soaS1dowEbdjP7S/uASVthy8IXc9ykX3D0CF63UEUyktngWsS5ctUUifgQy7ymiqihpDkW683MkzmCxGr2iw50AZkDwyWqijRwNtjNq1kbBafbbls7jb5xlekT5cBVoZxgM6Hi9h0//WzjCBJIzcsQXMgc24R09l/LbsC9PeTpZE4ayor2WHpAeGLK2ds/Pu5/ohFbWGiFQ6LzoGXiFmmqXDfFl/FdQR7UU5WgQx7Or24vgrTc2VtDbDi2Uzq4UpJ8e3sBvETrZDhifH4BJmcHlxFbzhNkKGkTsV1cTpoTpVDIvbM7jlW5q2tb8WB0oGzm4flybPezl+J/bgPOH+ulbLvLaujoeG6yyDNLqAL77XnTflB; 25:vNz6P7OYXpYgqs2DMxVuFYqe8FUvSNcx9mVUN2k78PunOAL82RpAIpcO4HRUodr5jLK/hXyBoyiQvfUWSjieiETVox65D6EceapicB6HpnkqJgQ0O91l4+SQESYd8C4b/orM/ZUWtEgy5Js+YF1C5mOeVMKg5FLsCRNAVZRMY+YNizo9Oli6x2zX7ukypTZ2bL+uE+RduMLcK/4Sf1Cu2zlIH0yW2lPaS4Q89sk+APFxJCYolwBlcaENjJqUfvlfLDrORVLutLc5KtjmyGgHisft+YDucT6W761LFfaGf2Ow1rXtBujiRn3fUXZorT/Q8nSaAmXlKj0inHxkopz0MQ== X-MS-TrafficTypeDiagnostic: DM6PR01MB4026: X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4026; 31:xzTwIkeb8o+qRt+S9aeLDPrVZvo9h42DSylKMmYEBllowqqAKW+9b6paQ3VPYPuML6ffMg4/hp8R/CuaIR/tKq5OjhQvKQSZTbX0F3ct/ra2/Ve4kl+JLimR41FI0htqapIfgkTIw4MZ8xaJe+YAzhSfp3WDbWbI0D8cCI+uIvr7XledzDCG77xes1AeSjcow5lLW1htjou+MD7uE4TD991ZJSwrkak55QvFQBrEPxs=; 20:GZ2IQOBEK1hulo78Qnu5iDwKAlWoMHEDbkd2vfvvCcTFdpBjqnUFT9rD5jfc2a+EHRqloNTWi235CBJ/McFvgNSR0v53N5fszKOJaeWLm6CJt4T6Xs4E2vfoF8E0q1be5/i0jnZOUcOsQm3pVXcmOwkuEuAFPIdlcF5qKBL6uuwY3I9UjgTBRAhSSPtKxaVEVMPjD6cZXzgz/IzgSqSmUY8bOYf/ALrDg8YlSH1caqcyhV/LZQvAxI4V6U9XbuUtUU6LZBKWdt2IfZk3KEZ6RP+aSumQq7yPEi5lTUD6T/VSgAfx0aNeoW85gbVC96jERoZJwBnm494GGQjEz7R5unkjducs2QDQM22G6+vuEG5me5IkJ8e98yx+Riw6pQksuBfuFNbufkgZyVDP+sVZdVILIoBeEwikBIYT61/kjI76AFxtu6GiFI4Y86B+hMrzIj/6+jlsXZqblDleiVlCDtV75EJfw3CpJhVAL6xO+qB3l0hMEQvpkkrjoSs8HCxwc3KSRHsehsbGeuwzVGYXPlV+WQq8cgGfFxszvBeHId6lh6kcXgaskDOLq7ctOmNFD4KwEoFSPLyXlbeb/99xOQg6j9+GOwSMxvfYM15QwPE= X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4026; 4:MXtIpjQVvinL75H2HwDSkucxCy1rfbn9koMNPtc/bS2Ry9bIfaB1Di49hN/0uRd/LGXORmwYLdGrLLg2Ghh2Xw+sC93BDKf0TyrYCV2+NFrSbCPQeaJGFjsPUSP6Zq2cSjxg6Y4k4X5KwRl2YF459vKEVbN2pirUvOuJeCj953FeKgJLZxtGRApj88aSXZMauPsVOWI5Z1duQZzdy9320f4U1a8FETcyN49BVtztudG7FMP6HyShu8Rk29Zmm3zWtoBlAKwv8OCNb2A/IRODC1DRShLCVpr7AkJw+OSgnDe9miafUq/HtsoutWMzOgcD X-Forefront-PRVS: 091949432C X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; DM6PR01MB4026; 23:SYDERZbWZhYHkCycoS0sa0V+2H0xapZyTlBOHLN?= =?iso-8859-1?Q?P7qAqfbhDZI7QGngY6G06fFEC6yzDFbuFp+D8qwmFIOUEEEq8PY23BAras?= =?iso-8859-1?Q?GPbmp0bkYEuNWOyS2T0C1L82aEc+SIOv/YgVDvEShkaJXH41xYNAkcW3xd?= =?iso-8859-1?Q?1nmqySiljTLrym7I8mh2J3nwqdE8e8r0WSQgtN2UGY3dIrg5imdCcoTMe/?= =?iso-8859-1?Q?c3J11CwiSh4Pr1mR0wR+kP0CiP0vSHRJZXOCixMYLrmRTvIAYfLCCv7x4I?= =?iso-8859-1?Q?rB8N4tmFhpQ5gtEx4rD0RU/3hAhvf977/rXcVHJxSavsG6HC5gAvpkgmu8?= =?iso-8859-1?Q?9aLFBrvcqTzIX7onC75igK3/fyKrdFSDYRXGW+SEqZdEfL4ENZRK/WSeu6?= =?iso-8859-1?Q?jlfV2ZmNUGBCsjYdhz9Wmoyu4+tpRg/7rvAJ662gkHtVPqs9QuoAuV3TQU?= =?iso-8859-1?Q?HKe5EhCY0gZCnK0/oKMoeH/AcuEnpU35GJSambWHyMjFBE0Geg9fN0/V/u?= =?iso-8859-1?Q?EUgJsYcWTQ74mHM0JtWSh+ipYzPnkGshjH7jsxWvCle259EWiwCNn4EFAt?= =?iso-8859-1?Q?spRtgQWv/E7deqOpQSW38fKvj8/bCpoUTV9BA6j1ATIU1L5tg/pLTDksD5?= =?iso-8859-1?Q?xUnRwItWw2cSpDzHU+TAKXjLfFk2QjReNFB/ojPHkug1gNaxoaVuFYOG4a?= =?iso-8859-1?Q?t8Z95VmjckD2CIYakk33pGqFoyLmfP/FIkpB2j+cxghBZtHMQDgxjTbECz?= =?iso-8859-1?Q?qvRq4ecgnLq74TZSttaq2eytBiAOZqy4akHvP6oeUsLTTtlXaRLbZo+O9C?= =?iso-8859-1?Q?sdd/mXbvvCeDJ465AO/XXf/9EorGvTQN/nEsLZxmGrbR+YIBAzig88iO4O?= =?iso-8859-1?Q?eqTDbUR1iwur/xeg+jojorKOw1ilbOaAB3DrTw3P0TuOsJr56ObRRb32+k?= =?iso-8859-1?Q?aPGzXasIoTaF9zaqKWqhKCluD162ANBvoVHYhpbS8Xg9PgJSwa06c6AxVc?= =?iso-8859-1?Q?mflzcyhhXDTmxNl75Q3sCAds0Orm3R+CntPwo6laZbkCNukyANwTu12lnz?= =?iso-8859-1?Q?rKsqin8Vo274A7gf4ERyXkJeZE20jzEVmv1SvubRuHQ0DE0KJjtHl3VcfB?= =?iso-8859-1?Q?rUGj0xItjJqv9KHaGrYkXGTXGtKpoq95XXfOFvmGrAdOdKfMifFNLeixLQ?= =?iso-8859-1?Q?Qz1jK6CyErVthv8OIEcMm9obY75NdksOHn6zpAbh7K+Uir8LWFTOyy8F8i?= =?iso-8859-1?Q?e54+nJTaDiVzNPeNd8lwLZNbgwZIGLyVN7sSS3jEgH3MWkpqbFN4D5xfu4?= =?iso-8859-1?Q?DOMDUtQcckVa86vYaKumE3C/euCA8QXpKUN6huiG1+Tml8Hl6ROnYYhjif?= =?iso-8859-1?Q?5R/N4dKUZkgANDx7b6x6K2GxLJS8N3o0OVQ+g/GfXPG8lPYX8UZM6+ooPm?= =?iso-8859-1?Q?lntV5zoR9cBgII=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: r/FgHmOarT2RHVFP/08u8LDsPlADV3iyYyPH29xdJaevFivsAg7+kssFd3lI7ZT4Dg2nvZUE+atXVjcwIhwQGl76wvyc2ufwbWkG0x0W6/fM5c6GrUsrvo4kCD8YNO1oGy5cCiqAJbExQNxWtcvOkd3j7bWziobl9DaARhripowgPPL3adK3eQMmYl4jFJ3qNCmd8ajMnZJ+bR1JwtIzpr7XZfef0YLRVrura0LsQjECswrgCbnpCV4QBk2O7UT5eMkb+KhpLZDFxpi0UWaCymB80pf6vOnAPRdw9ALFVy94/6LtLDOm1xMX8vlrhpyoMDuS08qYc7dZtHdqIscbFPYajGaJopLoxYigutZKlx1SSNDYKD3xs9NT67nwyY7apxtkhTqkUg8DJJlNan78Pexubha1i3P8ch1aX1TdfRE= X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4026; 6:9F8X2BtQJZ9EFVrgh3o8NeXqgqBbvFIKCo3WoALnjDL3Gh9KtuqAvtnVnbU+BlNxyOVOp8DICWoD6BFWPS0r1M1DT4GxQDGuu+x7sNHaymM6RqdgoppRl4Pwmmb7If4WhaZeAUWZg9DqWQ8klHh1iQYvtBaK7G1zG2tsvmN2MBqndHOH03bDtR3bCFD9WtpPX0KhF+oRbYIRrVBq9nH6GiXeU7T/jz/E35C/3xvXaqz3tAKLhsmNhPFptZCFGlc5NAvfNIVcfWPDmn9xsAib/lPOeRCBZzoyUAeCdiB2O5kBMEchFI89bjT1/1tqRYMVOTLbylpVfKolMRLnKI/9D33mqv+0DhqJtxFfvArBj64hDQKG5llKk5t8l5r+52l+7rXHXeiHgEs45pDgik2q/0Riccg9ky3InnHQyMjxA4Y/h55UFeOy0bAmUGI6kspHzojygbuSkFolF2B3tTCpEg==; 5:BYZRDk4p7w6AbrITeWSiAZ3Lujdb2FeXSgR966rbgOb44qNmCs4565fXpYkXTo2s0dWDU4g5BOI8ltM75qzOAYkD9C25P9U7L66ArWFpfY/U6BTctmwMrqui14N+ZmWm+6HZc6O4DQ4WYENlrkjFxDUdP4XyYKkZcEKm2xvKz46o1AQc+7DezrHewZzp8eV7rB6/zG+LUZ7FXs6E0DlDmQ==; 7:FiIUYRPdXDOYUOn0vs6zdSx4aLew0hUNVMsGQ7DycMKl2Fd75ObEFHitMZB3e8FbB0nvgb+GQ706I702dAOeyEgBhbA9C6bEfsRMinav1zAzyb0gtW0vUlfc7KIqHiyovbuNeYjCSkc7ORu8ywF2sw== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jan 2019 22:27:45.6589 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ed4dfe01-3766-4838-80d4-08d67c01d6c7 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB4026 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (2nd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 22:27:51 -0000 On Wed, Jan 16, 2019 at 01:30:01PM +0000, Konda, Tirumaleswar Reddy wrote: > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Wednesday, January 16, 2019 4:11 PM > > To: Benjamin Kaduk ; draft-ietf-dots-signal- > > channel@ietf.org > > Cc: dots@ietf.org > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (2nd Part) > > > > > > > > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : Benjamin Kaduk [mailto:kaduk@mit.edu] Envoyé : mercredi 16 > > > janvier 2019 01:14 À : draft-ietf-dots-signal-channel@ietf.org > > > Cc : dots@ietf.org > > > Objet : AD review of draft-ietf-dots-signal-channel-25 > > > > > > > > > Section 4.4 > > > > > > GET: DOTS clients may use the GET method to subscribe to DOTS > > > server status messages, or to retrieve the list of its > > > mitigations maintained by a DOTS server (Section 4.4.2). > > > > > > I'm not really a canonical HTTP expert, but I suspect that using GET > > > to "subscribe" will raise some eyebrows at later stages of review. > > > > [Med] We are following RFC7641. I would be surprised if this is an issue. > > > > Maybe > > > we should just leave it as-is and wait for such review to arrive, > > > though, rather than trying to do something preemptively. > > > > [Med] Yes. Sounds good. > > > > > > I don't know if this is the proper section to talk about it, but we > > > should probably have some text justifying the use of application-layer > > > acknowledgment as opposed to just using Confirmable CoAP messages. > > > > [Med] I'm not sure to understand this one. Which "application-layer > > acknowledgment" are you referring to? Maybe I was just misreading. Does Requests marked by the DOTS client as Non-confirmable messages are sent at regular intervals until a response is received from the DOTS server. refer to a "response" at the application layer (as opposed to the CoAP layer)? > > > > > > Section 4.4.1 > > > > > > If Figure 5 is going to use actual/example values for cuid and mid, > > > then I'd suggest also using actual/example values for the JSON fields > > > (instead of "integer" and "string" and such). > > > > [Med] I split the figure into two so that we don't have this problem. > > > > > > > > cuid: Stands for Client Unique Identifier. A globally unique > > > identifier that is meant to prevent collisions among DOTS clients, > > > especially those from the same domain. It MUST be generated by > > > DOTS clients. > > > > > > In order to get global uniqueness we either need sufficient randomness > > > or a hierarchical allocation strategy. Since we recommend a strategy > > > that involves hashing the (public) client certificate, we may also > > > want to note that this value does not need to be unguessable. If a > > > random allocation is possible, I suggest giving guidance on how many > > > random bits must be used to sufficiently ensure global uniqueness (128 > > > might be enough). > > > > [Med] An attack vector that can be achieved if the cuid is guessable is if a > > misbehaving client from within the client's domain succeeds to be granted > > access by the server and then uses the cuid of another client of the domain > > to delete active mitigation/etc. > > > > For this attack vector to happen, the misbehaving client needs to pass > > security validation checks by the server. Therefore, I'm not sure if it is worth > > to add an allocation reco given this perquisite. > > > > Thoughts? I don't think we need to have text around 'cuid' allocation, but should mention the possibility of this spoofing attack by a compromised client, in the security considerations. > UUID discussed in https://tools.ietf.org/html/rfc4122 is another way of generating a globally unique identifier. A compromised DOTS client can sniff the TLS 1.2 handshake, use the client certificate to identify the "cuid" used by another DOTS client. This attack is not possible with TLS 1.3 (TLS handshake is encrypted). For 1.3 the attacker would need to have data from a server in order to see another client's certificate, yes, which is presumably a harder attack. I don't think a UUID reference would be very valuable here. > Cheers, > -Tiru > > > > > > > > > The output of the cryptographic hash algorithm > > > is truncated to 16 bytes; truncation is done by stripping off the > > > final 16 bytes. The truncated output is base64url encoded. > > > > > > side note: Truncation to 128 bits reduces the collision resistance to > > > 64-bit strength, though this is probably acceptable in this use case. > > > > > > DOTS servers MUST return 4.09 (Conflict) error code to a DOTS peer > > > to notify that the 'cuid' is already in-use by another DOTS > > > client. Upon receipt of that error code, a new 'cuid' MUST be > > > generated by the DOTS peer. > > > > > > Is there any way in which this situation could arise during some sort > > > of migration scenario? > > > > [Med] This can be for example a client which does not follow the "SHOULD" > > for creating the cuid. Of course. I'm wondering if a legitmiate client that does follow the "SHOULD" could ever see this error code in the absence of an attack, for example if the client's network address changes. > > > > > > Client-domain DOTS gateways MUST handle 'cuid' collision directly > > > and it is RECOMMENDED that 'cuid' collision is handled directly by > > > server-domain DOTS gateways. > > > > > > Is a gateway supposed to know if it is "client-side" or "server-side" > > > by explicit configuration or some more automatic method? > > > > [Med] This can be done by an explicit configuration. Okay. Let's wait to see if any other reviewers ask for clarifying text that this can only be known via explicit configuration. > > > > > > 'cuid' and 'mid' MUST NOT appear in the PUT request message body. > > > > > > Do we need to say this given that there's no obvious structure in > > > which to put them? (That is, is this just a reminder to implementors > > > of a previous version of the draft versus guidance to new > > > implementations?) > > > > [Med] We used to have those in the message body in previous versions of > > the spec/implementations. Furthermore, there are cases where "mid" is > > allowed to be included in the message body (e.g., PUT response). We > > included this note for implementers because of some behaviors observed > > during past interops. Okay. (I think this is actually one of the things I asked before and you already answered; sorry for the duplication.) > > > > > > The prefix list MUST NOT include broadcast, loopback, or multicast > > > addresses. These addresses are considered as invalid values. > > > In > > > > > > Does "invalid" mean that the particular address gets ignored or that > > > the entire request is rejected? > > > > [Med] The expected behavior is covered by this text: > > > > " ... or contains invalid or unknown parameters, the DOTS server MUST reply > > with 4.00 (Bad Request)." > > > > > > > > target-fqdn: A list of Fully Qualified Domain Names (FQDNs) > > > identifying resources under attack. An FQDN is the full name of a > > > resource, rather than just its hostname. For example, "venera" is > > > a hostname, and "venera.isi.edu" is an FQDN [RFC1983]. > > > > > > I would suggest referring to draft-ietf-dnsop-terminology-bis rather > > > than trying to reproduce a definition of FQDN. > > > > > > > [Med] I added an informative reference to draft-ietf-dnsop-terminology-bis. Thanks > > > We also may want to note that the DNS view can change depending on the > > > vantage point used to make the observation. > > > > [Med] Not sure what to do with this one given that the text says: > > > > "How a name is passed to an underlying name resolution library is > > implementation- and deployment-specific." I was thinking something like "the results returned for resolving a name can depend on many factors, including when the request was made and the address of the DNS resolver used -- there is no guarantee that the DOTS server will resolve a name to the same addresses that the DOTS client does". > > > > > > On page 18 we say that server-domain DOTS gateways "MUST supply [...] > > > 'cdid'", but the previous paragraph says that there SHOULD be a > > > configuration option for whether to insert 'cdid' on such systems. > > > The two requirements are in conflict; which was intended? (I assume > > > the MUST -- why would it be desired to not have the information > > > available?) > > > > [Med] This text is about gateways that are instructed to insert the cdid > > parameter. gateways facing a client's domain are in this case. > > > > I updated the text with "server-domain DOTS gateways instructed to insert > > the 'cdid' parameter MUST supply.." Ah, that makes sense -- thanks. > > > > > > The same paragraph also says that the 'cdid' is "likely to be the same > > > as" the 'cuid', though in addition to the listed reasons the client > > > only has a SHOULD requirement to follow this procedure for generating > > > 'cuid'; it may be worth noting the client's leeway here as well. > > > > [Med] Yes, this is why we have "likely" in the text. > > > > > > > > If a DOTS client is provisioned, for example, with distinct > > > certificates as a function of the peer server-domain DOTS gateway, > > > distinct 'cdid' values may be supplied by a server-domain DOTS > > > gateway. The ultimate DOTS server MUST treat those 'cdid' values > > > as equivalent. > > > > > > Is this paragraph trying to say that a client might supply different > > > certs to different gateways in the same domain > > > > [Med] Yes. > > > > (e.g., if one such > > > gateway does not support ecdsa certs)? It was pretty confusing on the > > > first read, in particular how the ultimate DOTS server would know that > > > the different 'cdid' values actually correspond to the same client > > > [domain]. > > > > [Med] This is supposed to be provisioned on the server. This is deployment- > > specific; hence no mention in the draft. Ah, thanks for the explanation. I don't have any suggested rewording that would help clarify -- all I can come up with is to add ", when configured to know they represent the same client", which is both long and not really saying anything new. > > > > > > DOTS servers MUST ignore 'cdid' attributes that are directly > > > supplied by source DOTS clients or client-domain DOTS gateways. > > > This implies that first server-domain DOTS gateways MUST strip > > > 'cdid' attributes supplied by DOTS clients. DOTS servers SHOULD > > > support a configuration parameter to identify DOTS gateways that > > > are trusted to supply 'cdid' attributes. > > > > > > Is there any mechanism (e.g., autodetection) other than this by which > > > servers/proxies can learn about the topology information needed to > > > fulfil these requirements? > > > > [Med] I'm not aware of such mechanism. Okay, thanks. > > > > > > Because of the complexity to handle partial failure cases, this > > > specification does not allow for including multiple mitigation > > > requests in the same PUT request. Concretely, a DOTS client MUST NOT > > > include multiple 'scope' parameters in the same PUT request. > > > > > > "multiple 'scope' parameters" reads like a CBOR object with duplicate > > > keys; is this intended to refer to a multi-valued array? > > > > [Med] What is intended is that the scope list should include only one entry.. > > > > I can change to "multiple 'scope' clauses" I'm not sure how different that is. It sounds like you're trying to avoid "multiple entries in the 'scope' array"? > > > > > > The DOTS server couples the DOTS signal and data channel sessions > > > using the DOTS client identity and optionally the 'cdid' parameter > > > > > > This requires the client to use the same certificate to authenticate > > > the signal and data channels to a given server (even when a gateway is > > > in use). Above, we discussed cases where a client might have multiple > > > certificates available. > > > > [Med] Actually, the text above applies also if distinct certificates are used. > > Equivalent "client identity" are supposed to be known to the server by an > > out of band means. In all cases, the identity (same or equivalent) is used to > > couple the sessions. Hmm. If we are talking anything fancier than just comparing Subject information from the certificate (which apparently I forgot about when I wrote the above!), I think we may want to have some text in the document mentioning the possibility of out of band configuration. > > Where do we specify the requirement to use the > > > same certificate for signal and data channels? > > > > [Med] We don't have such requirement in existing DOTS documents. > > > > > > > > DOTS agents can safely > > > ignore Vendor-Specific parameters they don't understand. > > > > > > This is not a very useful statemnet if the agent must know that a > > > parameter is vendor-specific in order to safely ignore it. > > > > [Med] The agent relies on the cbor key value to determine that a parameter > > can be safely ignored or not (comprehension-required). A range of keys is > > reserved for comprehension-optional. An agent checks the range to which > > belong a parameter, and then behaves accordingly. If we really mean comprehension-optional, maybe we should just say that, instead of "Vendor-Specific". > > > > > > If the DOTS server does not find the 'mid' parameter value conveyed > > > in the PUT request in its configuration data, it MAY accept the > > > mitigation request by sending back a 2.01 (Created) response to the > > > DOTS client; the DOTS server will consequently try to mitigate the > > > attack. > > > > > > If the DOTS server finds the 'mid' parameter value conveyed in the > > > PUT request in its configuration data bound to that DOTS client, it > > > MAY update the mitigation request, and a 2.04 (Changed) response is > > > returned to indicate a successful update of the mitigation request. > > > > > > There are two "MAY"s spread across these two paragraphs; do we want to > > > say anything about in what cases the server might want to have > > > different behavior (i.e., ignore the MAY)? > > > > > > > [Med] For the first MAY, a typical example is when a rate limit is enforced: > > > > Rate-limiting DOTS requests, including those with new 'cuid' values, > > from the same DOTS client defends against DoS attacks that would > > result in varying the 'cuid' to exhaust DOTS server resources. Rate- > > limit policies SHOULD be enforced on DOTS gateways (if deployed) and > > DOTS servers > > > > For the second MAY, the server may have more visibility on the attack and > > then may decide to update accordingly. > > > > I don't know if it is worth to add examples. Any preference? I would lean towards adding "A server could reject mitigation requests when it is near capacity or needs to rate-limit a particular client, for example" for the former, but leaving the latter as-is. But I have no strong preferences here and am happy to advance the document either way. -Ben From nobody Wed Jan 16 16:20:05 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08FF613123C; Wed, 16 Jan 2019 16:20:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RyaB1jrd8ILB; Wed, 16 Jan 2019 16:20:01 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800127.outbound.protection.outlook.com [40.107.80.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48FF7131232; Wed, 16 Jan 2019 16:20:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=DIY5/ApBqyA81xyfW+TfSCm/f+xlep8kA7wz1YC2kXU=; b=vEIKIFECNATyiVNob0b7EXVu1l2n5GYh1gDiv0MQV8UmjEbzDuMeixbw17atEEn75JXxWYye5QoPYCmtaCu0UT6nR6vL5Yqt1OHx72eLuKfeoQYSFCep/LUnWMFJzF5qHHKlq4OucFz15hdQQBwQNzry1IEvQB5Hf+s24yRfHuI= Received: from CY4PR01CA0022.prod.exchangelabs.com (2603:10b6:903:1f::32) by BN6PR0101MB2946.prod.exchangelabs.com (2603:10b6:405:2c::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.14; Thu, 17 Jan 2019 00:19:59 +0000 Received: from DM3NAM03FT013.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::204) by CY4PR01CA0022.outlook.office365.com (2603:10b6:903:1f::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1537.26 via Frontend Transport; Thu, 17 Jan 2019 00:19:58 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT013.mail.protection.outlook.com (10.152.82.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1471.13 via Frontend Transport; Thu, 17 Jan 2019 00:19:57 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0H0JrFo010910 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 16 Jan 2019 19:19:55 -0500 Date: Wed, 16 Jan 2019 18:19:53 -0600 From: Benjamin Kaduk To: "Konda, Tirumaleswar Reddy" CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190117001952.GN91727@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(136003)(396003)(376002)(39860400002)(346002)(2980300002)(13464003)(51914003)(189003)(199004)(55784004)(6246003)(26826003)(23756003)(33656002)(486006)(478600001)(50466002)(2870700001)(186003)(476003)(956004)(88552002)(446003)(11346002)(36906005)(356004)(426003)(55016002)(336012)(5660300001)(316002)(6916009)(786003)(47776003)(104016004)(106002)(53416004)(229853002)(4326008)(2906002)(106466001)(53546011)(1076003)(86362001)(8936002)(8676002)(26005)(126002)(7696005)(58126008)(305945005)(54906003)(30864003)(75432002)(76176011)(246002)(14444005)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR0101MB2946; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; DM3NAM03FT013; 1:Gg1u/Z+4Su+bcVuiUDABaE9pVvsm+Ga6dUy89BiEXshKsfU84nx4ZYpURi3Z74LafpUbvYdtAR6ARiEdIqH+ttA/I+1Blsw2SnqEa3YHWvheAzmOlBe21HXhN6McaI/s X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 5f34f0c4-e9ab-4a11-96cf-08d67c118374 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:BN6PR0101MB2946; X-Microsoft-Exchange-Diagnostics: 1; BN6PR0101MB2946; 3:8JuNguGkidnfshZbNm3bacKh3W42SQ1pDB7SSqmIY5ANfaNn5zaZfzd6oRrTDVhPcHLAXCaGpsl+lMwkYS5BBbHa+0DMZvSGPMzV9zC+DFPmjLgAOYRRsoSftlnrNOH65H9297Djfc1QidogPkX/Mh/GL0UYqklTEkdQ0EUXlxlUrBjCNq2CvuWgSpp+F05oASxnRpO9r5PDrWRovbqrZNMccgRuYsW3XxIEG4rvZUTIWBo8myHrQVcSJTtpzsVwpByeFIGb6AtpoYT1zsRvrZKTbatBW0VNFL0FEHACm14tMtsd0ofPk8ZZni6jFgDJLMl5lv96FRScpztirnDp/Nv/+aC3zeVztRWhWvIdKOhOZzRR6lOdkY+pZs/1167I; 25:IliJxbAAu6ZtAkSL7WrV++LVelKwvVOzPwJfdVjVYcCV94AxrGAvHrTV7TjAHiXWrpnkXUexminQ1kF58Mpp5L172X8Q5QwVBfw6N4SoHbLj6ZqgTMlee+/RLX6vrKVwxuIdkeoRY84rBst5jU9bn9l3aNoIovNU/yEbGDHdhFUnjw09ex1VkYtxD67FnmkP4oqaYm8+q9yNd8db9POU9rGCFNLrmgMInbmjb6lYsZHClS2EUAKqoUmQXGvv7Cxb2IHi/JTEhrgpURzeMvxmfRUIMQTIyNVKrpK/YL8VXZW0Lb/FHe3A6BqU+Z8pcp4XOZqDVVZ17ynPzeC9y+Dgpg== X-MS-TrafficTypeDiagnostic: BN6PR0101MB2946: X-Microsoft-Exchange-Diagnostics: 1; BN6PR0101MB2946; 31:QHUvIbUQsnPJ6GaX6iNvsgOi24Gl0O2PPLJe8Z/hnce+lB7O2UBApaoHR/Q/Hv6E6Vnbm6C4XbWZXoNeA8CP4RsYaLgHYgI08uzH2SUfAGP1J8hSCY+e7U97slHmEVYQyEt1ou8dnTkcXdw0jAJwkqvusaiIsg0Uc+rmFr9qYIG3IpYIelOW1GRSN1+zbuq9Vq/FC3eeExHWTws0dM62YTJVAOdUzjNbFZ4PALbl3B8=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; BN6PR0101MB2946; 4:+QPoWP2X/An98gLurLqUKJXwNlY3fs8MuXbv6HO08Fdud8XofYCB6V2bbrHrttvnmr+kz2N3MLSNFaEe5D9Panqp7ox+kEb4uy/n6PcwbuUk+h1i/S1Ck/bHEb3GNmlyQC7BqglIz/WrIO02bVWNFmzluM7eiaoW8MhjHVm+pdDIfo/hoWg4rWKUALTfFnyH/AXAok2MP0/7X2OTLx4zoba3e+VAgV+3wELcq2OtlOUM8Xn/Ao9aQSJjswMvNwRezTB2+CAzprTHNIz+tFkr0p2XdvaK4RegSLqs9z1H1MAPFrF/HVDY70Z02L7lZKI5 X-Forefront-PRVS: 0920602B08 X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; BN6PR0101MB2946; 23:vD51ykzxiRE+yrl77MOgHpJxTTUokwpAFjLO0?= =?iso-8859-1?Q?3h3Dds70b1z1V+rn2DFA0wPNUzjgqNmAXEZ3bYmWWLoJavqxFSSeQABNOc?= =?iso-8859-1?Q?otJKr5z5jrQlMV7BQOep+VOT8KPUG72A1VfnKPm8seHmBbGTUuetPaPFl3?= =?iso-8859-1?Q?fiBrc1yDJ0Qol0+ZCqJ3KhWLI6B2jZEPI5Iibdb+DiRjJTu0yupY36W+xY?= =?iso-8859-1?Q?Goi2PM9emlXGBT3i0bIoV86kOwcYXtJc7h2eQ30T9XTvhhWcIAWmrhOlsD?= =?iso-8859-1?Q?FVsEYhL/Sc1JrHS88/mmg6v+TmFZt8fup3yrsHAC/Ui2hqWJBj6Dd7+qan?= =?iso-8859-1?Q?Ni0oaN/uUP/XDhnBBFDlAQahn4HvCDdeqhAFHJc3QCB2Ix9HU+z6cA4SOe?= =?iso-8859-1?Q?+wyB1rhX+E5i67PW0glHki0T77iH+ScBuhm7HFpTd2M+ZrQjxY7Cd80xz7?= =?iso-8859-1?Q?4ah9UyD61dAr+VuTfnarZkTKc+DWHn9P0YBTW4EWdbvqz4vgq2REhw9hiD?= =?iso-8859-1?Q?MY/CEHMOeNFz78joXP4vHr7OFnnGWwLJJyn0KSLYL6phZySxrmhH83550+?= =?iso-8859-1?Q?H6tnUHy9VrwZdnan+EfGQF214NjmzsX/jC+muMknI7E9ptfLD7pUxYF73l?= =?iso-8859-1?Q?MkNDxgmLiHCxJAsbTLypH2iKgIJdhMgTVGljiexrGgQMAPpKjShFlEDyz2?= =?iso-8859-1?Q?/1mPXNZp3ulqVuF1hx1m9LR5jl5bjUsN3otvcS8o2hPnTAcKvAnCEEQUSU?= =?iso-8859-1?Q?KP9u9lExcF5YyprqmnFvNDKyfw03ynR+jWrfXVwcQIuFNPUk08o6T5PYvf?= =?iso-8859-1?Q?mxhb8CrVRw1LMK1BKN3aRzbdh3BAKMrPoqZovgSLx+G0KksXkhQU6qduD+?= =?iso-8859-1?Q?of9RAzRUuMxf1ldbjagN+qjW7+eieJGovKMQ/zlH50FrqaEMlgWdMmY0Wu?= =?iso-8859-1?Q?mM9Nxj8Y+pDaPPwCCEheLzBR8k5sy1gtf9YNsjprQ6AvetqS/aCYzXlh0p?= =?iso-8859-1?Q?pRYuV0WBVR/3Jz36WUluyAllb3mNbIQE7p5YzLdn7HRM71KGVd6OlIdsGo?= =?iso-8859-1?Q?VgMulOXDQBnV9u3sR3M0ITPLEODlCFUSOA/iS5edgXjrJpBr6WcYaKEnQs?= =?iso-8859-1?Q?bbQN1RLqfmS8Dg4KuPew9ObjjuRlzdIDkUuE1lFJSfvpQ9kyIWNQXHxFiG?= =?iso-8859-1?Q?1Ys0mc9Z1kIBRPvbhcKRFoUqCXmvBC9/YWOU5Jeh4mYXjoCEYpfgEwEulh?= =?iso-8859-1?Q?gWI6KldVQjlaqyeCqHJyMIxfgMi+CwymECleTjOwYrKhQd7ojbYHyGUkx6?= =?iso-8859-1?Q?MNOOU3pjJt0Q3UUX/C4KTaKRcDm1Y5uJ1Vsh1qC0K9XOXPA=3D=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: VqRrkWGDr+9rHt5OwW/efaypZwDh8JkN/WbCqFTeIDzGV/edlfjFT7/t3XSXg/k+fGYMDwgFnTQzl8zGgDTxqcXw9BrviSwIM5dTGeUDgda9Ea95z78OUWhrX9jTJSRLN57wAuPz+TOgmp3D5s78GFyzF2nDTDfLZA37rtipqw7FNy+sUxZroasgUGpXTT0rKQMMsMjhOOfkJIG1Qn0CkWMb2d7ALASJbYY0tRVvRJ9Jbq02z2U2CGnAcTY53RT+Q5BFGr5J2wD8+q8T1vszsRGWSmE5pGV5Jx04XEhI93S1PVEnAthOp0/A3yU+dRJRx7CEciUgIp2xftdIE+MsrvWJqBLOuIG6PPICK3c37tVjDcNV87bUZJvhKUat2Hzhzury4TNFl3tNycJsvV6yfUx4NYB2ldvrlN1YQWx5rdI= X-Microsoft-Exchange-Diagnostics: 1; BN6PR0101MB2946; 6:DxGdqX2gxZMiksEwgLEckShoHMpCOvirrIfX/z0cl5NnlaDs6mAU2K0LUDNYgymnNGAsPJw3g7oPi56M8l9VksJH+bXUxM++LJ0Qx2LWvPFVWO0gulXN1/qwMfEOJwNT94R94JRV0Z+xn8ghVhR/UtVrHiUCj+jFuARMu/xCr9w4c/alyhZvzQAPP+wpINsg79mDoMvfYqX2oipaH42WQKCYYtHtLdKKXETfGmT1G95sDBjZy41IfAlokW4O3RmpkeUgD1qa6akJ+WWtVnw1fNUvZOKj3JumnvPBtVqrwvE1vUbqrh4yNyE8feGdpytI7rDJ0pB1wldqUTysWAHgW62BPJGEyt7AzCM16jcWBErOnvI4ZLFLT/1/ydB7HiIyGl1ELzlXUQxt8//yEoSoiLLDU62m4wQce6VEtPB3QryMs8FqDMMz8BzglnI+tRwEsRSN8/wC/SygWzGbfRErAg==; 5:NRdayxm1sP1gL+QAgZ31Yue+BttyAbTX8DUoNgFaohInIGOhlajGHk15gdH5xyUXuze3RG+Xt7mMT1biifImI7qK2sY0qwhNBIvZeFjqcODQy4DUX7M6GbVo+zU9osNbTxE5QcbnA9vQmW2ITVc2VegTYcdTnz1KWdT9nLATI1G/Eb9ZeQomy+VVz9XTaFkGLU3LBGS77EIA6WRHNI9XsQ==; 7:GfZs96XLW8ylSPzL376N3J6mNzlKU8Yp3BFtKpjJQoiIZJJbHGwJ955k7QN7SMrn+v7Z3/i5+EaAwJ4sbB609esmJznyxLzGU6OAO2Y3qjmFD6wltxf3upPsuqNLREU30ExdmxOipP7KVk7CqabXDA== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jan 2019 00:19:57.7029 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5f34f0c4-e9ab-4a11-96cf-08d67c118374 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR0101MB2946 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 00:20:04 -0000 On Wed, Jan 16, 2019 at 01:58:30PM +0000, Konda, Tirumaleswar Reddy wrote: > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Wednesday, January 16, 2019 6:56 PM > > To: Benjamin Kaduk ; draft-ietf-dots-signal- > > channel@ietf.org > > Cc: dots@ietf.org > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) > > > > > > > > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : Benjamin Kaduk [mailto:kaduk@mit.edu] Envoyé : mercredi 16 > > > janvier 2019 01:14 À : draft-ietf-dots-signal-channel@ietf.org > > > Cc : dots@ietf.org > > > Objet : AD review of draft-ietf-dots-signal-channel-25 > > > > > > > > > To avoid maintaining a > > > long list of overlapping mitigation requests (i.e., requests with the > > > same 'trigger-mitigation' type and overlapping scopes) from a DOTS > > > client and avoid error-prone provisioning of mitigation requests from > > > a DOTS client, the overlapped lower numeric 'mid' MUST be > > > automatically deleted and no longer available at the DOTS server. > > > For example, if the DOTS server receives a mitigation request which > > > overlaps with an existing mitigation with a higher numeric 'mid', the > > > DOTS server rejects the request by returning 4.09 (Conflict) to the > > > DOTS client. [...] > > > > > > This seems to be internally inconsistent -- first we hear that the > > > overlapped mitigation request with lower 'mid' MUST be deleted (BTW, > > > note my rewording), but at the end we are hearing that a request to > > > create an overlapping mitgiation must be rejected > > > The example is discussing out of order delivery of mitigation requests (DOTS client sends lower numeric 'mid' followed by higher numeric 'mid' but the DOTS server receives the > higher numeric 'mid' first and accepts the request. At a later point of time, when the server receives the lower numeric 'mid', the request is rejected by the server with 4.09 error response. Ah, I guess I was reading too fast; this is already clearly spelled out. > -Tiru > > > > > [Med] It is rejected because it has a lower numeric 'mid'. > > > > .. (A couple pages > > > later we also say "can be achieved by sending a PUT request [...] that > > > will override the existing one with overlapping mitigation scopes" > > > > [Med] Yes, the new one will have a higher 'mid'. > > > > , > > > which suggests a resolution of the conflict. > > > > [Med] I don't see any inconsistency. Please clarify if I missed your point. Tiru got it -- error on my part. > > > > > > The response includes enough information for a DOTS > > > client to recognize the source of the conflict as described below: > > > > > > conflict-information: Indicates that a mitigation request is > > > [...] > > > > > > I'm not entirely sure what encoding to infer from just this > > > description > > > -- conflict-information/-cause/-scope are in the YANG model, but do we > > > need to say that the response contains a CBOR representation of the > > > subtree starting at conflict-information (or something like that), or > > > is this implicitly specified elsewhere in the document? For example, > > > Figure 9 has an explicit JSON diagnostic notation for a message > > > response. > > > > [Med] This is covered by this text: > > > > Thhis document specifies a YANG module for > > representing DOTS mitigation scopes, DOTS signal channel session > > configuration data, and DOTS redirected signalling (Section 5). > > Representing these data as CBOR data is assumed to follow the rules > > in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with > > JSON/CBOR conversion rules in [RFC7049]. All parameters in the > > ^^^^^^^^^^^^^^^^^^^^^^ > > payload of the DOTS signal channel are mapped to CBOR types as > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > specified in Section 6. > > ^^^^^^^^^^^^^^^^^^^^^^ I would still prefer to see something like "as described below in the 'conflict-information' subtree with only the relevant nodes listed", to try to forestall any other comments from directorate reviews. > > > > > > conflict-scope: Indicates the conflict scope. It may include a > > > list of IP addresses, a list of prefixes, a list of port > > > numbers, a list of target protocols, a list of FQDNs, a list of > > > URIs, a list of alias-names, or a 'mid'. > > > > > > This feels a little under-specified -- do we need to include exactly > > > the conflicting entries? Or would we just say something like "this > > > conflicts with 'mid' 8; figure it out"? > > > > [Med] This clause indicates the exact conflict scope. It may be for example: > > - a conflict of IP addresses. Then, the target addresses in conflict are > > returned. > > - a conflict with another request, then the mid of that request is returned > > - etc. > > > > We can update the text as follows: > > > > conflict-scope: Characterizes the exact conflict scope. It may include a > > ^^^^^^^^^^^^^^^^^^^^^^^^ > > list of IP addresses, a list of prefixes, a list of port > > numbers, a list of target protocols, a list of FQDNs, a list of > > URIs, a list of alias-names, or a 'mid'. That's probably a clarification worth making, thanks. > > > > > > > > 3: CUID Collision. This code is returned when a DOTS client > > > uses a 'cuid' that is already used by another DOTS client. > > > This code is an indication that the request has been > > > rejected and a new request with a new 'cuid' is to be re- > > > sent by the DOTS client. Note that 'conflict-status', > > > 'conflict-scope', and 'retry-timer' are not returned in the > > > error response. > > > > > > (Do we want "MUST NOT" 2119 language to prevent their inclusion or is > > > the current descriptive language sufficient?) > > > > > > > [Med] OK. > > > > > conflict-scope: Indicates the conflict scope. It may include a > > > list of IP addresses, a list of prefixes, a list of port > > > numbers, a list of target protocols, a list of FQDNs, a list of > > > URIs, a list of alias-names, or references to conflicting ACLs. > > > > > > How do I reference an ACL? > > > > [Med] By an acl-name. I updated the text to hint this: > > > > "(by an 'acl-name', typically [I-D.ietf-dots-data-channel])" Ah, thanks. > > > > > > This can be achieved by sending a PUT request > > > with a new 'mid' value that will override the existing one with > > > overlapping mitigation scopes. > > > > > > Do we want to reiterate that the existing one will be deleted? > > > > [Med] The text you quoted reminds that the new request will delete the > > existing one. I was thinking that sometimes the word "override" means that two items are both present, but one takes precedence over the other during processing; "deleted" would then mean that only one of the items is present. > > > > > > For a mitigation request to continue beyond the initial negotiated > > > lifetime, the DOTS client has to refresh the current mitigation > > > request by sending a new PUT request. This PUT request MUST use the > > > same 'mid' value, and MUST repeat all the other parameters as sent in > > > the original mitigation request apart from a possible change to the > > > lifetime parameter value. > > > > > > If the server did not have a check that the other parameters match, > > > what would happen? > > > > [Med] A request may be for example inadvertently transitioned from pre- > > configured to immediate and vice versa. To avoid such issues, the spec > > mandates the following: > > > > * a client can adjust its mitigation scope by sending a new one that will > > override an existing one. > > * a client can update an existing mitigation by echoing the same parameters > > as those in the initial mitigation request. > > > > But leave it to the server to decide how to handle the refresh: > > > > If the DOTS server finds the 'mid' parameter value conveyed in the > > PUT request in its configuration data bound to that DOTS client, it > > MAY update the mitigation request, and a 2.04 (Changed) response is > > returned to indicate a successful update of the mitigation request. That seems consistent with what we do elsewhere, so sounds good. > > (Do we need normative language that the server MUST > > > verify the other parameters when the 'mid' matches?) > > > > > > Section 4.4.2 > > > > > > If the representation of all the active > > > mitigation requests associated with the DOTS client does not fit > > > within a single datagram, the DOTS server MUST use the Block2 Option > > > with NUM = 0 in the GET response. [...] > > > > > > I'm not very familiar with CoAP blockwise transfers; is this in > > > conflict with some normal feature-negotiation scheme or is it okay to > > > assume that the client will be able to handle this even if the client > > > has not explictly indicated support? > > > > [Med] RFC7959 indicates the following: > > > > A CoAP implementation that does not support these options generally > > is limited in the size of the representations that can be exchanged, > > see Section 4.6 of [RFC7252]. Even though the options are Critical, > > a server may decide to start using them in an unsolicited way in a > > response. No effort was expended to provide a capability indication > > mechanism supporting that decision: since the block-wise transfer > > mechanisms are so fundamental to the use of CoAP for representations > > larger than about a kilobyte, there is an expectation that they are > > very widely implemented. Ah, that's quite decisive. Thanks for pointing me to the reference. > > > > > > This is a mandatory attribute when an attack mitigation is > > > triggered. Particularly, 'mitigation-start' is not returned for a > > > mitigation with 'status' code set to 8. > > > > > > Is this better as "triggered" or as "active"? > > > > [Med] Changed the text to "when an immediate attack mitigation is > > triggered". That takes care of the disambiguation I was hoping for -- thanks :) > > > > > > bps-dropped and pps-dropped "SHOULD be a five-minute average", but > > > that does not seem quite well-defined. Is it a rolling five-minute > > > average over bins of one second, or a binned five-minute average for > > > the last five-minute interval that ends on a multiple of '5', or something > > else? > > > > [Med] What is meant in an average over 5-minute intervals. Updated the > > text accordingly. > > > > > > > > Upon receipt of a conflict notification message indicating that a > > > mitigation request is deactivated because of a conflict, a DOTS > > > client MUST NOT resend the same mitigation request before the expiry > > > of 'retry-timer'. It is also recommended that DOTS clients support > > > means to alert administrators about mitigation conflicts. > > > > > > Do we need to say anything regarding the server behavior when a > > > retransmit or similar was in flight already when the conflict > > > notification was generated? (That is, the server's enforcement of the > > > MUST NOT may need to be restrained.) > > > > [Med] The MUST NOT is intended to avoid overloading the server, because: > > > > "Any retransmission of the same > > mitigation request before the expiry of this timer is likely to > > be rejected by the DOTS server for the same reasons." > > > > The text leave it to the server to decide which action to take when MUST > > NOT is not followed by a client. The server may decide the silently ignore > > those, etc. > > > > We can add some text if needed. Let's leave it alone for now. > > > > > > Alternatively, the DOTS client can explicitly deregister itself by > > > issuing a GET request that has the Token field set to the token of > > > the observation to be cancelled and includes an Observe Option with > > > the value set to '1' (deregister). > > > > > > This seems like the more "polite" behavior (as opposed to just > > > "forgetting" -- why is the polite behavior not the default behavior? > > > > [Med] Done in my local copy. > > > > > > > > Does the GET in Figure 13 need to have a ".well-known" and other path > > > components? > > > > > > > [Med] Don't think so. Actually, we are mimicking figure 2 in RFC7641. Ah, thanks for the reference. -Ben From nobody Wed Jan 16 21:21:34 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84C2E1200B3; Wed, 16 Jan 2019 21:21:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H_hyz-d0-rrg; Wed, 16 Jan 2019 21:21:29 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8338A126BED; Wed, 16 Jan 2019 21:21:27 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547702602; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=mxWSOGhOIPrRFJt48h1mxfz6tnSLhBnZG6+Cqg rONnI=; b=PJ5EcD/sbol7FpTaHIrfo2AnD7hq44HuXQq7Euk+ zAvbls/MhU1xr2FOQkfF2xsSo2Hxa7Te2DPc5GEXIrEHEugSmT 1eHCZWTjiL4blvehd+P2QAFbB4ZPfuqcHn88FI7ZygKRkrX2gP tUSrKMdUsFPMY4fdq4RJnr+LRcx7eCQ= Received: from DNVEXAPP1N04.corpzone.internalzone.com (DNVEXAPP1N04.corpzone.internalzone.com [10.44.48.88]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682c_031e_e8742c6b_ce7e_43ce_bde3_1d471b2f2d4f; Wed, 16 Jan 2019 23:23:21 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 22:21:01 -0700 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 22:21:00 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 Jan 2019 22:21:00 -0700 Received: from NAM05-BY2-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 22:21:00 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2919.namprd16.prod.outlook.com (20.178.235.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 05:20:58 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 05:20:58 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (4th Part) Thread-Index: AdStsEzDhemt4/YOTsCzXrprdETtowAbpQNg Date: Thu, 17 Jan 2019 05:20:58 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA0846A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0846A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2919; 6:JQzYPd5hqQLqFZQ0lOL0lwh3Pl2XhkYZIaNKJ21KjIy982Pai+cGY8cOj6tT+wVKeGkz0zne9/9dzJbaA9Or55OVLCyidGRNe6gB/52YB0e632A/x6M3G2xsnnwNMI9ENPqC8EN20NDFMSMjfyM6uxtk7Zp+O8RJ+wzCQyMIqGldl/YluHHBqPnfo0rlasA8ExUffYR19SjunnbIgfWzexpfwJl7wykLMKBQan/BxUe35a/yQo2WCGxmm7eaiSEY+OvJbwhbsbrmDv/mHZxF2v4OmhWMZXcL5S4a/CTUM6MKG5+j7yet0EzKg/C9yt3hQ4Il/urCY02DINNrllkuCTY/Zfig4sS0LojV1FhflqohhWArIqY1VcIjtUZYMR3rV4kf0i+3qPlDDZlfQCCqQuxxbUeeuCFkrWfCc8JC2hG4JEDq/RCVXY05ayafQwZfvEaNqql4Yu2Y3ZiIEkumsg==; 5:FvZrPjJzdTr1bwx6ukKEEw+Dh1yFkMcHdUhiDpny/DOwUmNaajxbe0EFOsge+0/xIXAlnPgtXw1QAZnuTMLTMSKsnCZeBXzQbg1vuSK+/6CtkuRLP3CczHywgUM0f5bXgPgua1Yy5+Yzoj/iSdxfSHPw018ZcEHhNl+AXIiSDt36TgdlaUHs9s8ve66ivpovHLHzP+PshsqLEHoxG4lkFA==; 7:q26nXWdKAj+mqtoEuuQyoRaITOPZBBRe7hI+tOisazOJUTBxfjPp9muYZfl5W593zAMTuH0/9mNih96XqKQWjrTJggBlEATcjekB1Dcj2Nzdx8UG8azq99/rBq6OY0JGLOCSyxD7e3HkpUL3S44ixg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: c019eb66-55f5-4833-56f0-08d67c3b9081 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2919; x-ms-traffictypediagnostic: BYAPR16MB2919: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(136003)(346002)(39860400002)(396003)(376002)(13464003)(32952001)(199004)(189003)(55784004)(66066001)(71190400001)(71200400001)(3846002)(6116002)(55016002)(486006)(316002)(110136005)(86362001)(5660300001)(30864003)(6436002)(53546011)(76176011)(7696005)(102836004)(26005)(6506007)(186003)(446003)(476003)(11346002)(229853002)(68736007)(478600001)(4326008)(97736004)(80792005)(2171002)(72206003)(966005)(6246003)(7736002)(74316002)(305945005)(2906002)(53936002)(25786009)(9686003)(14444005)(99286004)(106356001)(2501003)(256004)(105586002)(81166006)(8936002)(14454004)(561944003)(81156014)(6306002)(33656002)(8676002)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2919; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 6kvFpA8Yn58r36xeB/KMtsTVwqyIW33KzFMrk2yUtEnyCOFj91NZYtePbAWpjv8v2eZh9KeozcJ2vfPFJxYM+INEOpqqP2+U9QVINqzh4Cb+Nj7GHUYHprJTYao10k/rH+b6sRHEqyyzZ08/8exOaLPafLa5i77WaxRAu6NFr84iMxAm3csLeRdrTmP2Uj9mvOleJxGxgisYgaCCXHPVQvLA8QJZJzVqaLQH295Nxc2w3pTPqBjR1qtFqnFZ6x0l9JX7GO4TNYAdrIegmnpvHFWGsZdnVqHgZOjAp9+M4W3kip2iO6/u7M2sHKOAsOP37W9zackuulCYJHM6nYG3Z7d53FhuezF14ESCXsKBWz//NWTbf2oOTGWZ9mYsdoKRSR/KHbpOCxzqScvgX7pbnvNbym8hp6YtJfSfxRxGkaA= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: c019eb66-55f5-4833-56f0-08d67c3b9081 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 05:20:58.7763 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2919 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6462> : inlines <6996> : streams <1810313> : uri <2781149> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (4th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 05:21:34 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IFdlZG5lc2RheSwgSmFudWFyeSAxNiwgMjAxOSA5OjAwIFBNDQo+IFRvOiBCZW5qYW1p biBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5u ZWxAaWV0Zi5vcmcNCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg0dGggUGFydCkN Cj4gDQo+IA0KPiANCj4gUmUtLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVl cnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKg OiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3Jl ZGkgMTYNCj4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsQGlldGYub3JnDQo+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6 IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPg0KPiA+ DQo+ID4gU2VjdGlvbiA0LjQuMw0KPiA+DQo+ID4gSSdtIG5vdCBxdWVzdGlvbmluZyB0aGUgZGVj aXNpb24sIGJ1dCBJIGFtIGEgYml0IGN1cmlvdXMgaG93IHdlIGVuZGVkDQo+ID4gdXAgd2l0aCBh IGJvb2xlYW4gImF0dGFjay1zdGF0dXMiIHBhcmFtZXRlciBhbmQgbm8gcXVhbnRpdGF0aXZlDQo+ ID4gbWVhc3VyZW1lbnRzLg0KPiA+DQo+IA0KPiBbTWVkXSBUaGlzIGlzIG5vdCBhIEJvb2xlYW4u IFRoZSBhdHRhY2stc3RhdHVzIHJlZmxlY3RzIHRoZSBzdGF0dXMgYXMgb2JzZXJ2ZWQNCj4gYnkg dGhlIGNsaWVudC4gQWN0dWFsbHksIHdlIHJlc3RyaWN0ZWQgdGhlIGluZm9ybWF0aW9uIHRvIHRo ZSBtaW5pbXVtDQo+IGluZm9ybWF0aW9uIHRoYXQgY2FuIGJlIHJlcG9ydGVkIGJ5IHRoZSBjbGll bnQgd2l0aG91dCBsZWFraW5nIHByaXZhY3kvbG9jYWwNCj4gaW5mb3JtYXRpb24gdGhhdCBtYXkg YmUgc3ViamVjdCB0byBsb2NhbCBwb2xpY2llcyBhdCB0aGUgY2xpZW50IGRvbWFpbi4NCj4gDQo+ ID4gICAgVGhlIERPVFMgc2VydmVyIGluZGljYXRlcyB0aGUgcmVzdWx0IG9mIHByb2Nlc3Npbmcg YSBQVVQgcmVxdWVzdA0KPiA+ICAgIHVzaW5nIENvQVAgcmVzcG9uc2UgY29kZXMuICBUaGUgcmVz cG9uc2UgY29kZSAyLjA0IChDaGFuZ2VkKSBpcw0KPiA+ICAgIHJldHVybmVkIGlmIHRoZSBET1RT IHNlcnZlciBoYXMgYWNjZXB0ZWQgdGhlIG1pdGlnYXRpb24gZWZmaWNhY3kNCj4gPiAgICB1cGRh dGUuICBUaGUgZXJyb3IgcmVzcG9uc2UgY29kZSA1LjAzIChTZXJ2aWNlIFVuYXZhaWxhYmxlKSBp cw0KPiA+ICAgIHJldHVybmVkIGlmIHRoZSBET1RTIHNlcnZlciBoYXMgZXJyZWQgb3IgaXMgaW5j YXBhYmxlIG9mIHBlcmZvcm1pbmcNCj4gPiAgICB0aGUgbWl0aWdhdGlvbi4NCj4gPg0KPiA+IFdo YXQgKGlmIGFueXRoaW4pIHNob3VsZCB0aGUgY2xpZW50IGRvIGluIHJlc3BvbnNlPyAgU2hvdWxk IHRoZSBjbGllbnQNCj4gPiBhc3N1bWUgdGhlIHNlcnZlciBpcyBkZWFkIGFuZCBtb3ZlIHRvIGEg ZGlmZmVyZW50IG9uZT8NCj4gDQo+IFtNZWRdIDUuMDMgdXNlcyBNYXgtQWdlIG9wdGlvbiB0byBp bmRpY2F0ZSB3aGVuIHRvIHJldHJ5LiBUaGlzIGlzIGRpc2N1c3NlZA0KPiBpbiBSRkM3MjUyLiBJ IGNhbiB1cGRhdGUgdGhlIHRleHQgaWYgeW91IHRoaW5rIHRoaXMgaXMgaGVscGZ1bCB0byByZW1p bmQgdGhpcy4NCj4gDQo+ID4NCj4gPiBTZWN0aW9uIDQuNC40DQo+ID4NCj4gPiAgICB0ZXJtaW5h dGluZyBwZXJpb2QgU0hPVUxEIGJlIHNldCBieSBkZWZhdWx0IHRvIDEyMCBzZWNvbmRzLiAgSWYg dGhlDQo+ID4gICAgY2xpZW50IHJlcXVlc3RzIG1pdGlnYXRpb24gYWdhaW4gYmVmb3JlIHRoZSBp bml0aWFsIGFjdGl2ZS1idXQtDQo+ID4gICAgdGVybWluYXRpbmcgcGVyaW9kIGVsYXBzZXMsIHRo ZSBET1RTIHNlcnZlciBNQVkgZXhwb25lbnRpYWxseQ0KPiA+ICAgIGluY3JlYXNlIHRoZSBhY3Rp dmUtYnV0LXRlcm1pbmF0aW5nIHBlcmlvZCB1cCB0byBhIG1heGltdW0gb2YgMzAwDQo+ID4gICAg c2Vjb25kcyAoNSBtaW51dGVzKS4NCj4gPg0KPiA+IElzIHRoZSBiYXNlIG9mIHRoZSBleHBvbmVu dCBzdXBwb3NlZCB0byBiZSAyIChpLmUuLCBhIGRvdWJsaW5nIG9mIHRoZQ0KPiA+IGRlbGF5KT8g IFRoaXMgc2hvdWxkIHByb2JhYmx5IGJlIG1hZGUgZXhwbGljaXQuDQo+IA0KPiBbTWVkXSBEb25l LiBUaGFua3MuDQo+IA0KPiAgIEFsc28sIGlzIHRoZSBpbnB1dCB0bw0KPiA+IHRoZSBkb3VibGlu ZyB0aGUgcHJldmlvdXMgdG90YWwgZGVsYXksIG9yIHRoZSBhbW91bnQgb2YgZGVsYXkNCj4gPiBy ZW1haW5pbmcgd2hlbiB0aGUgcmVwZWF0ZWQgcmVxdWVzdCBhcnJpdmVzPw0KPiANCj4gW01lZF0g VGhlIHNlcnZlciBzZXRzIGFjdGl2ZS1idXQtdGVybWluYXRpbmcsIHRoZW4gaWYgaXQgcmVjZWl2 ZXMgYSByZXF1ZXN0DQo+IGJlZm9yZSB0aGF0IHRpbWVyIGV4cGlyZXMsIGl0IGRvdWJsZXMgdGhl IGFjdGl2ZS1idXQtdGVybWluYXRpbmcgYW5kIHNvIG9uLi4NCj4gVGhlIHNlcnZlciByZXBlYXRz IHRoaXMgcHJvY2VzcyBhdCBtb3N0IGZvciA1IG1pbnV0ZXMuDQo+IA0KPiA+DQo+ID4gICAgSWYg YSBtaXRpZ2F0aW9uIGlzIHRyaWdnZXJlZCBkdWUgdG8gYSBzaWduYWwgY2hhbm5lbCBsb3NzLCB0 aGUgRE9UUw0KPiA+ICAgIHNlcnZlciByZWxpZXMgdXBvbiBub3JtYWwgdHJpZ2dlcnMgdG8gc3Rv cCB0aGF0IG1pdGlnYXRpb24NCj4gPiAgICAodHlwaWNhbGx5LCByZWNlaXB0IG9mIGEgdmFsaWQg REVMRVRFIHJlcXVlc3QsIGV4cGlyeSBvZiB0aGUNCj4gPiAgICBtaXRpZ2F0aW9uIGxpZmV0aW1l LCBvciBvYnNlcnZhdGlvbiBvZiB0cmFmZmljIHRvIHRoZSBhdHRhY2sgdGFyZ2V0KS4NCj4gPg0K PiA+IEkgdGhpbmsgIm9ic2VydmF0aW9uIG9mIHRyYWZmaWMiIHByb2JhYmx5IG5lZWRzIG1vcmUg ZXhwbGFuYXRpb24gLS0gYXMNCj4gPiB3cml0dGVuLCBpdCBzb3VuZHMgbGlrZSBhbnkgcGFja2V0 IGFycml2aW5nIHdvdWxkIGJlIHN1ZmZpY2llbnQsIHdoaWNoDQo+ID4gaXMgcHJvYmFibHkgbm90 IHRoZSBpbnRlbmRlZCBiZWhhdmlvci4uLg0KPiANCj4gW01lZF0gV2UgbWVhbnQgImluc3BlY3Rp bmcgdGhlIHRyYWZmaWMiLCBidXQgYXZvaWRlZCB0byB1c2UgdGhlIHdvcmQNCj4gYmVjYXVzZSB0 aGlzIHRlcm0gaXMgbm90IHdlbGwgcGVyY2VpdmVkLg0KPiANCj4gSSBjYW4gdXBkYXRlIHRoZSB0 ZXh0IElmIHlvdSBhcmUgT0sgd2l0aCAiaW5zcGVjdGluZyIuDQoNCkRPVFMgYXJjaGl0ZWN0dXJl IGRyYWZ0IGlzIHVzaW5nIHRoZSB0ZXJtICJzY3J1YmJpbmciIGluc3RlYWQgb2YgImluc3BlY3Rp bmciLg0KDQo+IA0KPiA+DQo+ID4gU2VjdGlvbiA0LjUuMQ0KPiA+DQo+ID4gRG9lcyB0aGUgIm1h eC1yZXRyYW5zbWl0IiB2YWx1ZSBleGNsdWRlIHRoZSBpbml0aWFsIHRyYW5zbWlzc2lvbj8NCj4g DQo+IFtNZWRdIFllcy4NCj4gDQo+ID4NCj4gPiBJJ20gbm90IHN1cmUgd2hldGhlciB0aGVyZSBh cmUgYW55IHBhcnRpY3VsYXJseSBpbnRlcmVzdGluZyBzZWN1cml0eQ0KPiA+IGNvbnNpZGVyYXRp b25zIHRvIG1lbnRpb24gYWJvdXQgd2hhdCBoYXBwZW5zIHdoZW4gYWNrLXJhbmRvbS1mYWN0b3Ig aXMNCj4gPiBpbnN1ZmZpY2llbnRseSByYW5kb207IGl0IHNlZW1zIGxpa2UgdGhpbmdzIHdvdWxk IG9ubHkgZ2V0IHJlYWxseSBiYWQNCj4gPiBpZiB0aGUgdmFsdWUgd2FzIGNvbnN0YW50IGFjcm9z cyBwZWVycy4NCj4gPg0KPiANCj4gW01lZF0gQSBicmllZiBkaXNjdXNzaW9uIG9uIHRoaXMgY2hh bmdlJ3MgaW1wYWN0IGNhbiBiZSBmb3VuZCBpbiBTZWN0aW9uDQo+IDQuOC4xIG9mIFJGQzcyNTIu DQo+IA0KPiA+IFNlY3Rpb24gNC41LjINCj4gPg0KPiA+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBBIERPVFMgY2xpZW50IE1VU1QgTk9UDQo+ID4gICAg dHJhbnNtaXQgYSAiQ29BUCBQaW5nIiB3aGlsZSB3YWl0aW5nIGZvciB0aGUgcHJldmlvdXMgIkNv QVAgUGluZyINCj4gPiAgICByZXNwb25zZSBmcm9tIHRoZSBzYW1lIERPVFMgc2VydmVyLg0KPiA+ DQo+ID4gSXMgdGhpcyBpbnRlbmRlZCB0byBibG9jayByZXRyYW5zbWlzc2lvbnMgb2YgdGhlIHNh bWUgQ29BUCBQaW5nPw0KPiANCj4gW01lZF0gVGhpcyBpcyBpbnRlbmRlZCB0byBibG9jayByZXRy YW5zbWlzc2lvbiBiZWZvcmUgdGhlIHJldHJhbnNtaXNzaW9uDQo+IHRpbWVvdXQgZXhwaXJlcy4N Cj4gDQo+IA0KPiA+DQo+ID4gICAgc2lkOiAgU2Vzc2lvbiBJZGVudGlmaWVyIGlzIGFuIGlkZW50 aWZpZXIgZm9yIHRoZSBET1RTIHNpZ25hbCBjaGFubmVsDQo+ID4gICAgICAgc2Vzc2lvbiBjb25m aWd1cmF0aW9uIGRhdGEgcmVwcmVzZW50ZWQgYXMgYW4gaW50ZWdlci4gIFRoaXMNCj4gPiAgICAg ICBpZGVudGlmaWVyIE1VU1QgYmUgZ2VuZXJhdGVkIGJ5IERPVFMgY2xpZW50cy4gICdzaWQnIHZh bHVlcyBNVVNUDQo+ID4gICAgICAgaW5jcmVhc2UgbW9ub3RvbmljYWxseS4NCj4gPg0KPiA+IFdo YXQgZXZlbnQgdHJpZ2dlcnMgdGhlIGluY3JlYXNlPw0KPiANCj4gW01lZF0gU2VuZCBhIFBVVCBy ZXF1ZXN0IGZvciBjb25maWd1cmF0aW9uIHB1cnBvc2UuDQo+IA0KPiA+DQo+ID4gU2VjdGlvbiA0 LjUuMw0KPiA+DQo+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgV2hl biBhIEREb1MgYXR0YWNrIGlzIGFjdGl2ZSwNCj4gPiAgICByZWZyZXNoIHJlcXVlc3RzIE1VU1Qg Tk9UIGJlIHNlbnQgYnkgRE9UUyBjbGllbnRzIGFuZCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiAgICBN VVNUIE5PVCB0ZXJtaW5hdGUgdGhlIChEKVRMUyBzZXNzaW9uIGFmdGVyIHRoZSBleHBpcnkgb2Yg dGhlIHZhbHVlDQo+ID4gICAgcmV0dXJuZWQgaW4gTWF4LUFnZSBPcHRpb24uDQo+ID4NCj4gPiBJ dCBzZWVtcyBsaWtlIHRoZXJlJ3MgYSBiaXQgb2YgYSByYWNlIGNvbmRpdGlvbiB3aXRoIGF0dGFj a3MgYW5kDQo+ID4gcmVmcmVzaCByZXF1ZXN0cyBjb21pbmcgaW4gaW4gcGFyYWxsZWwuDQo+ID4N Cj4gDQo+IFtNZWRdIElzIHRoZXJlIGFueSBjaGFuZ2UgdGhhdCB5b3Ugc2VlIHRvIHRoZSB0ZXh0 Pw0KPiANCj4gPiBTZWN0aW9uICA0LjYNCj4gPg0KPiA+ICAgIFRoZSBET1RTIHNlcnZlciBjYW4g cmV0dXJuIHRoZSBlcnJvciByZXNwb25zZSBjb2RlIDUuMDMgaW4gcmVzcG9uc2UNCj4gPiAgICB0 byBhIHJlcXVlc3QgZnJvbSB0aGUgRE9UUyBjbGllbnQgb3IgY29udmV5IHRoZSBlcnJvciByZXNw b25zZSBjb2RlDQo+ID4gICAgNS4wMyBpbiBhIHVuaWRpcmVjdGlvbmFsIG5vdGlmaWNhdGlvbiBy ZXNwb25zZSBmcm9tIHRoZSBET1RTIHNlcnZlci4NCj4gPg0KPiA+IEp1c3QgdG8gY2hlY2sgbXkg dW5kZXJzdGFuZGluZywgdGhpcyB1bmlkaXJlY3Rpb25hbCBub3RpZmljYXRpb24gd291bGQNCj4g PiBvbmx5IGhhcHBlbiBpZiB0aGVyZSB3YXMgYSBwcmV2aW91cyBPYnNlcnZlIHRvIGVzdGFibGlz aCB0aGUgY2hhbm5lbD8NCj4gDQo+IFtNZWRdIFllcy4NCj4gDQo+ID4NCj4gPiBUaGUgImFsdC1z ZXJ2ZXItcmVjb3JkIiBkZXNjcmlwdGlvbiBoZXJlIGlzIHByZXR0eSB2YWd1ZSBvbiB0aGUgc3Ry aW5nDQo+ID4gZm9ybWF0dGluZyB1c2VkLCB2NCB2cy4gdjYsIGV0Yy47DQo+IA0KPiBbTWVkXSAi SVAgYWRkcmVzc2VzIiBpcyB1c2VkIG9uIHB1cnBvc2UgdG8gcmVmZXIgdG8gYm90aCBJUHY0IGFu ZCBJUHY2DQo+IGFkZHJlc3Nlcy4NCj4gDQo+ICBJIGd1ZXNzIHRoYXQgdGhlIGFjdHVhbCAidHlw ZQ0KPiA+IGluZXQ6aXAtYWRkcmVzcyIgaW4gdGhlIFlBTkcgbW9kdWxlIGlzIHByb2JhYmx5IHNw ZWNpZmljIGVub3VnaCwgdGhvdWdoLg0KPiA+DQo+IA0KPiBbTWVkXSBZZXMsIGluZGVlZC4NCj4g DQo+IA0KPiA+IFNlY3Rpb24gNC43DQo+ID4NCj4gPiBUaGUgZmlyc3QgdHdvIHBhcmFncmFwaHMg c2VlbSB0byBoYXZlIGhpZ2ggb3ZlcmxhcCBhbmQgd291bGQgcHJvYmFibHkNCj4gPiBiZW5lZml0 IGZyb20gYXQgbGVhc3QgYmVpbmcgam9pbmVkIHRvZ2V0aGVyIGlmIG5vdCBhbHNvIHRyaW1tZWQg ZG93biBhDQo+ID4gYml0Lg0KPiANCj4gW01lZF0gSm9pbmVkIHRvZ2V0aGVyIGluIHRoZSBteSBs b2NhbCBjb3B5IHdpdGggdGhlIDJuZCBwYXJhIHdoaWNoIHN0YXJ0cw0KPiBub3cgd2l0aCAiQ29u Y3JldGVseSwgIi4NCj4gDQo+ID4NCj4gPiAgICBJbiBjYXNlIG9mIGEgbWFzc2l2ZSBERG9TIGF0 dGFjayB0aGF0IHNhdHVyYXRlcyB0aGUgaW5jb21pbmcgbGluayhzKQ0KPiA+ICAgIHRvIHRoZSBE T1RTIGNsaWVudCwgYWxsIHRyYWZmaWMgZnJvbSB0aGUgRE9UUyBzZXJ2ZXIgdG8gdGhlIERPVFMN Cj4gPiAgICBjbGllbnQgd2lsbCBsaWtlbHkgYmUgZHJvcHBlZCwgYWx0aG91Z2ggdGhlIERPVFMg c2VydmVyIHJlY2VpdmVzDQo+ID4gICAgaGVhcnRiZWF0IHJlcXVlc3RzIGluIGFkZGl0aW9uIHRv IERPVFMgbWVzc2FnZXMgc2VudCBieSB0aGUgRE9UUw0KPiA+ICAgIGNsaWVudC4gIEluIHRoaXMg c2NlbmFyaW8sIHRoZSBET1RTIGFnZW50cyBNVVNUIGJlaGF2ZSBkaWZmZXJlbnRseSB0bw0KPiA+ ICAgIGhhbmRsZSBtZXNzYWdlIHRyYW5zbWlzc2lvbiBhbmQgRE9UUyBzZXNzaW9uIGxpdmVsaW5l c3MgZHVyaW5nIGxpbmsNCj4gPiAgICBzYXR1cmF0aW9uOg0KPiA+DQo+ID4gRG8gd2UgbmVlZCB0 byBzYXkgaG93IHRoZSBhZ2VudHMgaW5kZXBlbmRlbnRseSBkZXRlY3QgdGhlDQo+ID4gbGluay1z YXR1cmF0aW9uIHNpdHVhdGlvbj8NCj4gPg0KPiANCj4gW01lZF0gV2hlbiB0aGUgYWdlbnRzIGFy ZSBhd2FyZSB0aGF0IGFuIGF0dGFjayBpcyBvbmdvaW5nLCB0aGV5IHdpbGwgaW5mZXINCj4gbGlu a3MgYXJlIGxpa2VseSB0byBiZSBzYXR1cmF0ZWQuDQo+IA0KPiA+IFNlY3Rpb24gNS4xDQo+ID4N Cj4gPiBJdCBsb29rcyBsaWtlIHRoZSB0cmVlIGRpYWdyYW0gYW5kIHRoZSBtb2R1bGUgZGlmZmVy IGFib3V0IHRoZQ0KPiA+ICJtYW5kYXRvcnkgZmFsc2UiIG5hdHVyZSBvZiBzb21lIG5vZGVzLCBl LmcuLCB1cHBlci1wb3J0LiAgUGVyaGFwcyB0aGUNCj4gPiB0cmVlIGRpYWdyYW0gc2hvdWxkIGJl IHJlZ2VuZXJhdGVkPw0KPiA+DQo+IA0KPiBbTWVkXSBXaWxsIGRvdWJsZSBjaGVjay4NCj4gDQo+ ID4gU2VjdGlvbiA1LjINCj4gPg0KPiA+IEkgbW9zdGx5IGV4cGVjdCBzb21lIGhlYXJ0YnVybiBm cm9tIHZhcmlvdXMgZm9sa3MgYWJvdXQgb3ZlcnJpZGluZw0KPiA+IHByb3RvY29sIG51bWJlciAw J3MgaW50ZXJwcmV0YXRpb24gYXMgdGhlIElQdjYgaG9wLWJ5LWhvcCBvcHRpb24gdG8NCj4gPiBt ZWFuICJhbGwgcHJvdG9jb2xzIiwgdGhvdWdoIGl0IHdpbGwgcHJvYmFibHkgYmUgZmluZSBpbiBw cmFjdGljZS4gIEkNCj4gPiBhbSBpbmNsdWRpbmcgYSBzdWdnZXN0ZWQgcmV3b3JkaW5nIGluIG15 IGVkaXRvcmlhbCBjaGFuZ2VzIHRoYXQgbWF5DQo+ID4gaGVscCBhbGxldmlhdGUgY29uY2VybnMu DQo+IA0KPiBbTWVkXSBHb29kIGNhdGNoLiBXZSBjYW4gZml4IHRoaXMgYnkgdXBkYXRpbmcgdGhl IHRleHQgdG86DQo+IA0KPiAiSWYgJ3RhcmdldC1wcm90b2NvbCcgaXMgbm90IHNwZWNpZmllZCwg dGhlbiB0aGUgcmVxdWVzdCBhcHBsaWVzIHRvIGFueQ0KPiBwcm90b2NvbC4iDQo+IA0KPiBXaWxs IGFsc28gY2hlY2sgeW91ciBwcm9wb3NhbC4gVGhhbmtzLg0KDQpXZSB3aWxsIGhhdmUgdG8gYWxz byBtb2RpZnkgJ3RhcmdldC1wcm90b2NvbCcgcGFyYW1ldGVyIHNwZWNpZmllZCBpbiBET1RTIGRh dGEgY2hhbm5lbCBkcmFmdCBhY2NvcmRpbmdseS4gDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4gDQo+ ID4NCj4gPiBTZWN0aW9uIDYNCj4gPg0KPiA+IEkgaGF2ZSBzZXZlcmFsIHRob3VnaHRzIGFib3V0 IHRoZSBDQk9SIGVuY29kaW5nLCBzb21lIG9mIHdoaWNoIEkNCj4gPiBtZW50aW9uZWQgaW4gc29t ZSBwcmV2aW91cyBlbWFpbHMuICAoSSBhbHNvIGRvbid0IGhhdmUgbXVjaCBleHBlcmllbmNlDQo+ ID4gd2l0aCBDQk9SIGVuY29kaW5nLCBzbyBJIHByb2JhYmx5IGhhdmUgc29tZSB0aGluZ3Mgd3Jv bmcsIHRvby4uLikNCj4gPg0KPiA+IEl0IHNlZW1zIHRoYXQgQ0JPUiBtYWpvciB0eXBlIDAgYWxz byBlbmNvZGVzIHNvbWUgd2lkdGggaW5mb3JtYXRpb24NCj4gPiBmb3IgaW50ZWdlcnMuICBEbyB3 ZSB3YW50IHRvIHJlcXVpcmUgdGhhdCB0aGUgQ0JPUiBlbmNvZGluZyBhbHdheXMNCj4gPiB1c2Vz IHRoZSB3aWR0aCB0aGF0IG1hdGNoZXMgdGhlIHR5cGVzIGluIHRoZSBZQU5HIG1vZHVsZSwgb3Ig ZG8gd2UNCj4gPiBwZXJtaXQgYSBzbWFsbGVyIGVuY29kaW5nIHdoZW4gdGhlIHZhbHVlIGluIHF1 ZXN0aW9uIGZpdHM/DQo+ID4gKFByZXN1bWFibHkgdGhlIGFuc3dlciBmYWxscyBvdXQgbmF0dXJh bGx5IGlmIHdlIGV4cGVjdCBwZW9wbGUgdG8gdXNlDQo+ID4gb2ZmLXRoZS1zaGVsZiBDQk9SDQo+ ID4gbGlicmFyaWVzLi4uKQ0KPiA+DQo+ID4gV2Ugc2F5IHRoYXQgdGhlIGluaXRpYWwgc2V0IG9m IGtleSB2YWx1ZXMgaXMgY29tcHJlaGVuc2lvbi1yZXF1aXJlZDsNCj4gPiBkb2VzIHRoYXQgbWVh biB0aGF0IGFueSBvdGhlciBmdXR1cmUgZXh0ZW5zaW9ucyBhcmUgbmVjZXNzYXJpbHkNCj4gPiBj b21wcmVoZW5zaW9uLW9wdGlvbmFsLCBhbmQgdGhlcmUgY2FuIGJlIG5vIGFkZGl0aW9uYWwNCj4g PiBjb21wcmVoZW5zaW9uLXJlcXVpcmVkIGtleXM/DQo+IA0KPiBbTWVkXSBGdXR1cmUgZXh0ZW5z aW9ucyBjYW4gYmUgZWl0aGVyIGNvbXByZWhlbnNpb24tcmVxdWlyZWQgb3INCj4gY29tcHJlaGVu c2lvbi1vcHRpb25hbC4gVGhpcyB3aWxsIGRlcGVuZCBvbiBlYWNoIHVzZSBjYXNlLg0KPiANCj4g Pg0KPiA+IEl0J3MgcHJvYmFibHkgYXBwcm9wcmlhdGUgdG8gbWFrZSBhIHN0YXRlbWVudCBpbiB0 aGUgaW5pdGlhbCB0ZXh0IGhlcmUNCj4gPiBhYm91dCB0aGUgcG9ydCBudW1iZXIgYW5kL29yIG1l ZGlhIHR5cGUgaW5kaWNhdGluZyB0aGF0IHRoaXMgaXMgdGhlDQo+ID4gc3ludGF4IHVzZWQgZm9y IHRoZSB0b3AtbGV2ZWwgb2JqZWN0Lg0KPiA+DQo+ID4gSSBhbHJlYWR5IG1lbnRpb25lZCB0aGF0 IHRoZSBlbmNvZGluZyBvZiB0aGUgaW50ZWdlciBmb3JtIG9mIHRoZSBrZXkNCj4gPiB2YWx1ZXMg dGFrZXMgYSBkaWZmZXJlbnQgbnVtYmVyIG9mIGJ5dGVzIGRlcGVuZGluZyBvbiB0aGUgaW50ZWdl cg0KPiA+IHZhbHVlLCBzbyBJIHRoaW5rIHRob3NlIGtleXMgYXJlIHJlYXJyYW5nZWQgaW4gdGhl IC0yNiAoSSByZXZpZXdlZCB0aGUgLTI1KS4NCj4gDQo+IFtNZWRdIEkgZ3Vlc3MgVGlydSBoYXMg YWxyZWFkeSBhZGRyZXNzZWQgdGhhdCBjb21tZW50Lg0KPiANCj4gPg0KPiA+IFNlY3Rpb24gNy4x DQo+ID4NCj4gPiAgICBBIGtleSBjaGFsbGVuZ2UgdG8gZGVwbG95aW5nIERPVFMgaXMgdGhlIHBy b3Zpc2lvbmluZyBvZiBET1RTDQo+ID4gICAgY2xpZW50cywgaW5jbHVkaW5nIHRoZSBkaXN0cmli dXRpb24gb2Yga2V5aW5nIG1hdGVyaWFsIHRvIERPVFMNCj4gPiAgICBjbGllbnRzIHRvIGVuYWJs ZSB0aGUgcmVxdWlyZWQgbXV0dWFsIGF1dGhlbnRpY2F0aW9uIG9mIERPVFMgYWdlbnRzLg0KPiA+ ICAgIEVTVCBkZWZpbmVzIGEgbWV0aG9kIG9mIGNlcnRpZmljYXRlIGVucm9sbG1lbnQgYnkgd2hp Y2ggZG9tYWlucw0KPiA+DQo+ID4gSSB0aGluayB3ZSBuZWVkIGEgcmVmZXJlbmNlIGZvciBFU1Qu DQo+IA0KPiBbTWVkXSBEb25lLiBUaGFua3MuDQo+IA0KPiA+DQo+ID4gICAgbyAgVExTIEZhbHNl IFN0YXJ0IFtSRkM3OTE4XSB3aGljaCByZWR1Y2VzIHJvdW5kLXRyaXBzIGJ5IGFsbG93aW5nDQo+ ID4gICAgICAgdGhlIFRMUyBzZWNvbmQgZmxpZ2h0IG9mIG1lc3NhZ2VzIChDaGFuZ2VDaXBoZXJT cGVjKSB0byBhbHNvDQo+ID4gICAgICAgY29udGFpbiB0aGUgRE9UUyBzaWduYWwuDQo+ID4gWy4u Ll0NCj4gPiAgICBvICBUQ1AgRmFzdCBPcGVuIFtSRkM3NDEzXSBjYW4gcmVkdWNlIHRoZSBudW1i ZXIgb2Ygcm91bmQtdHJpcHMgdG8NCj4gPiAgICAgICBjb252ZXkgRE9UUyBzaWduYWwgY2hhbm5l bCBtZXNzYWdlLg0KPiA+DQo+ID4gVGhlc2UgYXJlIGluIHNvbWV0aGluZyBvZiBhIHNwZWNpZmlj YXRpb24gbGltYm8sIGFzIHRoZXkgYm90aCBhcHBlYXINCj4gPiB0byBvbmx5IGJlIGZvcm1hbGx5 IGRlZmluZWQgZm9yIHVzZSB3aXRoIFRMUywgYnV0IFRMUyBGYWxzZSBTdGFydA0KPiA+IHNlZW1z IHRvIGhhdmUgYSBzdHJhaWdodGZvcndhcmQgZXh0ZW5zaW9uIHRvIERUTFMuICBJdCBtYXkgYmUg d29ydGgNCj4gPiB0d2Vha2luZyB0aGUgdGV4dCBhIGxpdHRsZSB0byBhY2tub3dsZWRnZSB0aGUg c2l0dWF0aW9uIGhlcmUuDQo+IA0KPiBbTWVkXSBDYW4geW91IHBsZWFzZSBpbmRpY2F0ZSB3aGlj aCB0d2Vha2luZyBkbyB5b3UgaGF2ZSBpbiBtaW5kPw0KPiANCj4gVEZPIGFsbG93cyB0byBzZW5k IGRhdGEgaW4gdGhlIFNZTiB3aXRob3V0IHdhaXRpbmcgZm9yIHRoZSBjb21wbGV0aW9uIG9mIHRo ZQ0KPiAzV0hTLiBPYnZpb3VzbHksIHN1Y2ggZGVsYXkgaXMgc3BlY2lmaWMgdG8gVENQLg0KPiAN Cj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Wed Jan 16 22:51:11 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 053E6130DBE; Wed, 16 Jan 2019 22:51:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JyV1bawGmds0; Wed, 16 Jan 2019 22:51:07 -0800 (PST) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC129126DBF; Wed, 16 Jan 2019 22:51:06 -0800 (PST) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 43gF8n1RF0z4wpC; Thu, 17 Jan 2019 07:51:05 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.41]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id 43gF8n0ZGXz1xnr; Thu, 17 Jan 2019 07:51:05 +0100 (CET) Received: from OPEXCAUBM6F.corporate.adroot.infra.ftgroup (10.114.13.101) by OPEXCLILM31.corporate.adroot.infra.ftgroup (10.114.31.41) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 07:51:04 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6F.corporate.adroot.infra.ftgroup ([fe80::c489:b768:686a:545b%23]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 07:51:04 +0100 From: To: Benjamin Kaduk , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuA== Date: Thu, 17 Jan 2019 06:51:04 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 06:51:09 -0000 Hi Ben, Please see inline. Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: mercredi 16 janvier 2019 01:14 > =C0=A0: draft-ietf-dots-signal-channel@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: AD review of draft-ietf-dots-signal-channel-25 >=20 > Section 7.2 >=20 > The TLS 1.3 handshake with 0-RTT diagram needs to be > revisited/refreshed, as RFC 8446 does not look like that. Additionally, > the usage of PSK as well as a certificate is not defined until > draft-housley-tls-tls13-cert-with-extern-psk is published. > I also note that in the diagram as presented, the client is not yet > known to be authenticated when the server sends its initial (0.5-RTT) > DOTS signal message. >=20 [Med] Noted. Thanks. > Section 7.3 >=20 > This whole section seems to only be relevant for UDP usage, so probably > the "If UDP is used" clause can be dropped and an introductory statement > added earlier on. [Med] Will consider that.=20 >=20 > Path MTU MUST be greater than or equal to > [CoAP message size + DTLS overhead of 13 octets + authentication > overhead of the negotiated DTLS cipher suite + block padding] > (Section 4.1.1.1 of [RFC6347]). If the request size exceeds the path > MTU then the DOTS client MUST split the DOTS signal into separate > messages, for example the list of addresses in the 'target-prefix' > parameter could be split into multiple lists and each list conveyed > in a new PUT request. >=20 > (DTLS 1.3 will have a short header for some packets, that is less than > 13 octets.) [Med] The text is more about 1.2. We can add a 1.3 note if you think it is = useful for the discussion.=20 >=20 > Section 8 >=20 > We've got some requirements in here about limiting behavior of > clients/servers when talking to gateways; is knowing about the presence > of a gateway something that's required to happen out of band or is there > an in-band way to identify that the peer is a gateway? [Med] An agent does not necessary know that it peer is gateway. A gateway i= s seen as a server for the client, and a client for a server.=20 >=20 > messages from an authorized DOTS gateway, thereby creating a two-link > chain of transitive authentication between the DOTS client and the > DOTS server. >=20 > This seems to ignore the possibility of setups that include both > client-domain and server-domain gateways. [Med] I updated the text to mention this is only an example.=20 >=20 > DOTS client certificate validation MUST be performed as > per [RFC5280] and the DOTS client certificate MUST conform to the > [RFC5280] certificate profile. [...] >=20 > This seems to duplicate a requirement already stated in Section 7.1; > it's probably best to only have normative language in one location, even > if we need to mention the topic in multiple locations. > Similarly for the mutual authentication requirement, which we duplicate > in the second and fourth paragraphs of this section. [Med] Good point. Fixed.=20 >=20 > If we don't want to use example.com vs. example.net as sample domains, > we can also use whateverwewant.example, per RFC 6761. [Med] Will maintain the ones already in the draft. Thanks.=20 >=20 > Section 9 >=20 > We should mention the media-type allocation in the top-level section. [Med] Will fix that. =20 >=20 > "mappings to CBOR" feels confusing to me, since it leaves empty what we > are mapping from. Perhaps just talking about a registry of "CBOR map > keys" would be better, both here and in the Section 9.3 intro. >=20 [Med] Unless there is an objection, I can use "CBOR Map Keys". > Section 9.3 >=20 > I suggest being very explicit about whether new requests for > registration should be directed to the mailing list or to IANA, as we've > had some confusion about this elsewhere. >=20 > The criteria used by the experts also just lists things they should > consider, but does not provide full clarity on which answer to the > question is more likely to be approved. (And yes, I know that this text > is largely copied from already published RFCs, but we can still do > better.) [Med] Will check this.=20 >=20 > Section 9.3.1 >=20 > If we want the value 0 to be reserved we need to say so. [Med] 0 is not part of the allocation range.=20 > Do we want to say anything about the usage of negative integers as map > keys? >=20 > I suggest not mentioning the postal address, given the recent (e.g.) > GDPR requirements. [Med] Good point. Done.=20 >=20 > Section 9.3.2 >=20 > It may be worth mentioning Table 4 here as well. [Med] OK.=20 >=20 > Section 9.5.1 >=20 > We need to specify which range of values we are asking for an allocation > from. [Med] Added a mention to 0-255 range.=20 >=20 > Section 9.6.1 >=20 > As above, specify what range we're asking about. [Med] OK. >=20 > I expect the current text to get some IESG (or directorate) feedback > that the Data Item and Semantics descriptions are repetitive and banal. >=20 > Section 9.7 >=20 > IIUC, IANA is going to ask if we want this module to be "maintained by > IANA", so it would be good to have an answer ready even if we don't put > it in the document text. [Med] This is discussed in -26. >=20 > Rate-limiting DOTS requests, including those with new 'cuid' values, > from the same DOTS client defends against DoS attacks that would >=20 > With respect to "new" 'cuid' values, is the server required to remember > which ones it has seen in perpetuity, or can it time them out > eventually? [Med] The attack vector is a DOTS client which changes frequently its cuid.= The DOTS server can set an interval in which the same client cannot presen= t a new cuid. >=20 > Section 10 >=20 > The security considerations seem to be taking a narrow focus on the > requirements for and consequences of specific bits on the wire in the > signal channel protocol. I think it's appropriate to also include some > high-level thoughts about the functional behavior of the protocol, > allowing to signal that an attack is underway and trigger mitigation, > increasing the availability of services, etc., and the risks that are > posed by the protocol failing to work properly, whether that means > letting attack traffic through or improperly blocking legitimate > traffic. [Med] Would a pointer to the architecture/requirements I-Ds be sufficient t= o cover to high-level aspects? >=20 > Section 13.1 >=20 > I think the IANA registries should be listed as Informational and not > Normative references. >=20 [Med] Done.=20 > Section 13.2 >=20 > Pending resolution of the question about using draft-ietf-core-yang-cbor > rules or RFC7951+RFC7049, the draft-ietf-core-yang-cbor reference may > need to be Normative. [Med] Please refer to my answer to that question. draft-ietf-core-yang-cbor= is informative.=20 >=20 > Given that "URI" is a well-known abbreviation, we may be able to get > away with not citing RFC 3986. On the other hand, it's not causing any > harm to leave it in... [Med] Will leave it.=20 >=20 > RFC 4632 needs to be Normative, since we need to know CIDR to > encode/decode target-prefixes. [Med] Works for me.=20 >=20 > Similarly, I think that RFCs 6234 [Med] This one is not listed as normative because other hash algos may be u= sed.=20 , 7413 [Med] The support if TFO is not mandatory. =20 , 7589 [Med] This is a MAY in the spec. It is just fine to leave it as informative= .=20 , 7918 [Med] Idem as TFO.=20 , 7924 [Med] Idem as TFO. =20 , and 7951 [Med] this one was not listed as normative because the document lists two w= ays to do the mapping. =20 > should also be Normative. >=20 >=20 > -Ben From nobody Wed Jan 16 22:58:21 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6FED126DBF; Wed, 16 Jan 2019 22:58:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TmaWK-B20kNb; Wed, 16 Jan 2019 22:58:14 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3DA6124B0C; Wed, 16 Jan 2019 22:58:13 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547708181; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=RPMh86BlQCs3MO608U5w+92FKedk8flannoMAz x9uMY=; b=OX4vlokdC28xp1AaP43v12psNmOD60lhRZ88izr0 FaDYiIIM30G2YiU8q+h/ejh9ywg6cQzmDCsWouTLBCNM1UWDiH ef/560JE+sEqqGFs8skzcW90moPsve3L7YPix7UAGRcFiKd5Qt fY/OPekRSndZ7R7NCpjSBcviX0Rla+w= Received: from DNVEXAPP1N04.corpzone.internalzone.com (DNVEXAPP1N04.corpzone.internalzone.com [10.44.48.88]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682f_cf02_107b8b0f_ce6a_4c64_b058_29806c39af09; Thu, 17 Jan 2019 00:56:20 -0600 Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 23:54:04 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Wed, 16 Jan 2019 23:54:04 -0700 Received: from NAM01-BY2-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 16 Jan 2019 23:54:04 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2647.namprd16.prod.outlook.com (20.177.228.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.19; Thu, 17 Jan 2019 06:54:02 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 06:54:02 +0000 From: "Konda, Tirumaleswar Reddy" To: Benjamin Kaduk CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (2nd Part) Thread-Index: AdSth/4V4uJk+YuhSsWU4l/lLLRChwAFrvywABL91YAADwLuEA== Date: Thu, 17 Jan 2019 06:54:02 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08269@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190116222741.GK91727@kduck.mit.edu> In-Reply-To: <20190116222741.GK91727@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2647; 6:LrXYoB1d1bEQhxW0z9Ozx1uH1TH2sui/2ZA8T/aZ4ADZBUO/m/g7OkoaLrglx9tS6y5SuPfevmxQ/IYes1jn82XWpK9H+UWemjXAjIkpAt2RTfEGIxHZftwgSEz/ljWz3XLZbp9NLplTaK6gRgzOCqEO7k/tRo8LNMAJKCpUZ8g8CoXg20bI1wHFANYHeRY34XrX2nmd4l9pESGHhd3GMA72T2/IXwP1ikBKaw9IT3c2PTv2qsFE13i9FHPSzpvGJNOsG4moDr2c6Jr1uh1jz3J9Arak43RfJSS6v64rq6lQCEI7syyzD2TNA2ETZrdrOJieONwlb2RvMxKN3hm/uaGzi+kJyXrvZEhtY6UQEra6+ZnVgDfZErCLhVVNGlIHZbgsfX68b8M4397qxfjN31VxO5QDBJVoJY7muWf5T4abwEO/UIBRUhZDIyJIhZiaxz3Q2f68kmysNvBCA4QoQw==; 5:2o0anVTM/kskAWlsXtCOpKej9N6Dn/PuYcZeHlIvtRxKxdQGwO+Dcw+3eYC6b2XzpgnLTwnO0jZf6hdb6MQ2L6FSipqiFotZzsi3sU7WokRikyiz9lBgWP+yDpa/PQdYDyaSTuck8ACOLf+dSX6fvYk35NlxNTjw3hUYjfFkoHFf+2k6p/e65RHuCpu0jy6V418YaWa6jhaCDVZ5ijMZaA==; 7:3PFgnXIsf5BpBRd5Ad/vdRL1TlxHbwDBrec9CN9FMiZRGSp013xio2cPSVJPpZ4exeZog7HyPDZY88qly07k7Sh3bGL1OxxOnTro0OYFBz2N5Uh8bcYt7xMr1hWHp9cAZVf/6i2/ZzX9lfQHRSoAHQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 3a9d077d-de3c-47d8-dbbc-08d67c489083 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2647; x-ms-traffictypediagnostic: BYAPR16MB2647: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(366004)(376002)(396003)(39860400002)(136003)(51914003)(53434003)(189003)(199004)(55784004)(13464003)(32952001)(5660300001)(476003)(446003)(305945005)(74316002)(11346002)(4744004)(72206003)(66066001)(478600001)(71190400001)(71200400001)(966005)(55016002)(105586002)(106356001)(14454004)(68736007)(25786009)(30864003)(256004)(97736004)(14444005)(5024004)(33656002)(4326008)(80792005)(6116002)(3846002)(53936002)(9686003)(486006)(6306002)(2906002)(53946003)(86362001)(6246003)(2171002)(53546011)(6506007)(8676002)(81166006)(81156014)(76176011)(7696005)(7736002)(26005)(102836004)(186003)(6916009)(99286004)(229853002)(6436002)(8936002)(316002)(54906003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2647; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: krndWw59OMOQLA8PlxWev8MAApblCUDMbrZIfnlFwB9yaN7HfMqdpythn9wOzWZawMZ/4cduwwY4W5QorlQbPDNQV0JpcI3QWkH9qJaaiHPF9N6qF6K/rj8ONgwukhg9cZpWjeepjHRxWBLxuEceatID/ReBoyfdqVXOeKCgejpsEWzaaPFjtXpE2zEVKLmEHZ5dNkgwsq5G4hscNWgR2wP2QBHeaC7V7/ubDvmwIRplUKdH/vzM4OfMyemPQaLK3lBly4IYq+qDHZtUbzXLPuvrobZe1lUJUutQe2eVALX9zfAY5Uz+3Nv9cy1D48kBelckMBRPedrYSHKIYScLzrvAAgPgq08u3MEKbuVUSIjNMh/qBl+HhHBihui8cgCXbuOcF07w3trMjPugSRbpmfl/5qBEQXJmAJ0ydPGy+CU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 3a9d077d-de3c-47d8-dbbc-08d67c489083 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 06:54:02.1912 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2647 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6462> : inlines <6996> : streams <1810319> : uri <2781180> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (2nd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 06:58:19 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2Fk dWtAbWl0LmVkdT4NCj4gU2VudDogVGh1cnNkYXksIEphbnVhcnkgMTcsIDIwMTkgMzo1OCBBTQ0K PiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFA TWNBZmVlLmNvbT4NCj4gQ2M6IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRyYWZ0LWll dGYtZG90cy1zaWduYWwtDQo+IGNoYW5uZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcNCj4gU3Vi amVjdDogUmU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUg KDJuZCBQYXJ0KQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0 aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2htZW50 cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlz DQo+IHNhZmUuDQo+IA0KPiBPbiBXZWQsIEphbiAxNiwgMjAxOSBhdCAwMTozMDowMVBNICswMDAw LCBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQo+IHdyb3RlOg0KPiA+ID4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4g T24gQmVoYWxmIE9mDQo+ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiBT ZW50OiBXZWRuZXNkYXksIEphbnVhcnkgMTYsIDIwMTkgNDoxMSBQTQ0KPiA+ID4gVG86IEJlbmph bWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gPiA+ IGNoYW5uZWxAaWV0Zi5vcmcNCj4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPiBTdWJqZWN0 OiBSZTogW0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt MjUNCj4gPiA+ICgybmQgUGFydCkNCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+IFJlLSwNCj4g PiA+DQo+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+DQo+ID4gPiBDaGVlcnMsDQo+ID4g PiBNZWQNCj4gPiA+DQo+ID4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4g PiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDog bWVyY3JlZGkgMTYNCj4gPiA+ID4gamFudmllciAyMDE5IDAxOjE0IMOAwqA6IGRyYWZ0LWlldGYt ZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiA+ID4gPiBDY8KgOiBkb3RzQGlldGYub3Jn DQo+ID4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMjUNCj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gU2VjdGlvbiA0LjQNCj4gPiA+ID4N Cj4gPiA+ID4gICAgR0VUOiAgICBET1RTIGNsaWVudHMgbWF5IHVzZSB0aGUgR0VUIG1ldGhvZCB0 byBzdWJzY3JpYmUgdG8gRE9UUw0KPiA+ID4gPiAgICAgICAgICAgIHNlcnZlciBzdGF0dXMgbWVz c2FnZXMsIG9yIHRvIHJldHJpZXZlIHRoZSBsaXN0IG9mIGl0cw0KPiA+ID4gPiAgICAgICAgICAg IG1pdGlnYXRpb25zIG1haW50YWluZWQgYnkgYSBET1RTIHNlcnZlciAoU2VjdGlvbiA0LjQuMiku DQo+ID4gPiA+DQo+ID4gPiA+IEknbSBub3QgcmVhbGx5IGEgY2Fub25pY2FsIEhUVFAgZXhwZXJ0 LCBidXQgSSBzdXNwZWN0IHRoYXQgdXNpbmcNCj4gPiA+ID4gR0VUIHRvICJzdWJzY3JpYmUiIHdp bGwgcmFpc2Ugc29tZSBleWVicm93cyBhdCBsYXRlciBzdGFnZXMgb2YgcmV2aWV3Lg0KPiA+ID4N Cj4gPiA+IFtNZWRdIFdlIGFyZSBmb2xsb3dpbmcgUkZDNzY0MS4gSSB3b3VsZCBiZSBzdXJwcmlz ZWQgaWYgdGhpcyBpcyBhbiBpc3N1ZS4NCj4gPiA+DQo+ID4gPiAgTWF5YmUNCj4gPiA+ID4gd2Ug c2hvdWxkIGp1c3QgbGVhdmUgaXQgYXMtaXMgYW5kIHdhaXQgZm9yIHN1Y2ggcmV2aWV3IHRvIGFy cml2ZSwNCj4gPiA+ID4gdGhvdWdoLCByYXRoZXIgdGhhbiB0cnlpbmcgdG8gZG8gc29tZXRoaW5n IHByZWVtcHRpdmVseS4NCj4gPiA+DQo+ID4gPiBbTWVkXSBZZXMuDQo+IA0KPiBTb3VuZHMgZ29v ZC4NCj4gDQo+ID4gPiA+DQo+ID4gPiA+IEkgZG9uJ3Qga25vdyBpZiB0aGlzIGlzIHRoZSBwcm9w ZXIgc2VjdGlvbiB0byB0YWxrIGFib3V0IGl0LCBidXQNCj4gPiA+ID4gd2Ugc2hvdWxkIHByb2Jh Ymx5IGhhdmUgc29tZSB0ZXh0IGp1c3RpZnlpbmcgdGhlIHVzZSBvZg0KPiA+ID4gPiBhcHBsaWNh dGlvbi1sYXllciBhY2tub3dsZWRnbWVudCBhcyBvcHBvc2VkIHRvIGp1c3QgdXNpbmcNCj4gQ29u ZmlybWFibGUgQ29BUCBtZXNzYWdlcy4NCj4gPiA+DQo+ID4gPiBbTWVkXSBJJ20gbm90IHN1cmUg dG8gdW5kZXJzdGFuZCB0aGlzIG9uZS4gV2hpY2ggImFwcGxpY2F0aW9uLWxheWVyDQo+ID4gPiBh Y2tub3dsZWRnbWVudCIgYXJlIHlvdSByZWZlcnJpbmcgdG8/DQo+IA0KPiBNYXliZSBJIHdhcyBq dXN0IG1pc3JlYWRpbmcuICBEb2VzDQo+IA0KPiAgICBSZXF1ZXN0cyBtYXJrZWQgYnkgdGhlIERP VFMgY2xpZW50IGFzIE5vbi1jb25maXJtYWJsZSBtZXNzYWdlcyBhcmUNCj4gICAgc2VudCBhdCBy ZWd1bGFyIGludGVydmFscyB1bnRpbCBhIHJlc3BvbnNlIGlzIHJlY2VpdmVkIGZyb20gdGhlIERP VFMNCj4gICAgc2VydmVyLg0KPiANCj4gcmVmZXIgdG8gYSAicmVzcG9uc2UiIGF0IHRoZSBhcHBs aWNhdGlvbiBsYXllciAoYXMgb3Bwb3NlZCB0byB0aGUgQ29BUCBsYXllcik/DQoNCk5vLCB0aGUg bm9uLWNvbmZpcm1hYmxlIHJlc3BvbnNlIGlzIHJldHVybmVkIGF0IHRoZSBDb0FQIGxheWVyIGl0 c2VsZi4gDQoNCj4gDQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gNC40LjENCj4gPiA+ID4NCj4g PiA+ID4gSWYgRmlndXJlIDUgaXMgZ29pbmcgdG8gdXNlIGFjdHVhbC9leGFtcGxlIHZhbHVlcyBm b3IgY3VpZCBhbmQNCj4gPiA+ID4gbWlkLCB0aGVuIEknZCBzdWdnZXN0IGFsc28gdXNpbmcgYWN0 dWFsL2V4YW1wbGUgdmFsdWVzIGZvciB0aGUNCj4gPiA+ID4gSlNPTiBmaWVsZHMgKGluc3RlYWQg b2YgImludGVnZXIiIGFuZCAic3RyaW5nIiBhbmQgc3VjaCkuDQo+ID4gPg0KPiA+ID4gW01lZF0g SSBzcGxpdCB0aGUgZmlndXJlIGludG8gdHdvIHNvIHRoYXQgd2UgZG9uJ3QgaGF2ZSB0aGlzIHBy b2JsZW0uDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAgICBjdWlkOiAgU3RhbmRzIGZvciBDbGll bnQgVW5pcXVlIElkZW50aWZpZXIuICBBIGdsb2JhbGx5IHVuaXF1ZQ0KPiA+ID4gPiAgICAgICBp ZGVudGlmaWVyIHRoYXQgaXMgbWVhbnQgdG8gcHJldmVudCBjb2xsaXNpb25zIGFtb25nIERPVFMg Y2xpZW50cywNCj4gPiA+ID4gICAgICAgZXNwZWNpYWxseSB0aG9zZSBmcm9tIHRoZSBzYW1lIGRv bWFpbi4gIEl0IE1VU1QgYmUgZ2VuZXJhdGVkIGJ5DQo+ID4gPiA+ICAgICAgIERPVFMgY2xpZW50 cy4NCj4gPiA+ID4NCj4gPiA+ID4gSW4gb3JkZXIgdG8gZ2V0IGdsb2JhbCB1bmlxdWVuZXNzIHdl IGVpdGhlciBuZWVkIHN1ZmZpY2llbnQNCj4gPiA+ID4gcmFuZG9tbmVzcyBvciBhIGhpZXJhcmNo aWNhbCBhbGxvY2F0aW9uIHN0cmF0ZWd5LiAgU2luY2Ugd2UNCj4gPiA+ID4gcmVjb21tZW5kIGEg c3RyYXRlZ3kgdGhhdCBpbnZvbHZlcyBoYXNoaW5nIHRoZSAocHVibGljKSBjbGllbnQNCj4gPiA+ ID4gY2VydGlmaWNhdGUsIHdlIG1heSBhbHNvIHdhbnQgdG8gbm90ZSB0aGF0IHRoaXMgdmFsdWUg ZG9lcyBub3QNCj4gPiA+ID4gbmVlZCB0byBiZSB1bmd1ZXNzYWJsZS4gIElmIGEgcmFuZG9tIGFs bG9jYXRpb24gaXMgcG9zc2libGUsIEkNCj4gPiA+ID4gc3VnZ2VzdCBnaXZpbmcgZ3VpZGFuY2Ug b24gaG93IG1hbnkgcmFuZG9tIGJpdHMgbXVzdCBiZSB1c2VkIHRvDQo+ID4gPiA+IHN1ZmZpY2ll bnRseSBlbnN1cmUgZ2xvYmFsIHVuaXF1ZW5lc3MgKDEyOCBtaWdodCBiZSBlbm91Z2gpLg0KPiA+ ID4NCj4gPiA+IFtNZWRdIEFuIGF0dGFjayB2ZWN0b3IgdGhhdCBjYW4gYmUgYWNoaWV2ZWQgaWYg dGhlIGN1aWQgaXMgZ3Vlc3NhYmxlDQo+ID4gPiBpcyBpZiBhIG1pc2JlaGF2aW5nIGNsaWVudCBm cm9tIHdpdGhpbiB0aGUgY2xpZW50J3MgZG9tYWluIHN1Y2NlZWRzDQo+ID4gPiB0byBiZSBncmFu dGVkIGFjY2VzcyBieSB0aGUgc2VydmVyIGFuZCB0aGVuIHVzZXMgdGhlIGN1aWQgb2YgYW5vdGhl cg0KPiA+ID4gY2xpZW50IG9mIHRoZSBkb21haW4gdG8gZGVsZXRlIGFjdGl2ZSBtaXRpZ2F0aW9u L2V0Yy4NCj4gPiA+DQo+ID4gPiBGb3IgdGhpcyBhdHRhY2sgdmVjdG9yIHRvIGhhcHBlbiwgdGhl IG1pc2JlaGF2aW5nIGNsaWVudCBuZWVkcyB0bw0KPiA+ID4gcGFzcyBzZWN1cml0eSB2YWxpZGF0 aW9uIGNoZWNrcyBieSB0aGUgc2VydmVyLiBUaGVyZWZvcmUsIEknbSBub3QNCj4gPiA+IHN1cmUg aWYgaXQgaXMgd29ydGggdG8gYWRkIGFuIGFsbG9jYXRpb24gcmVjbyBnaXZlbiB0aGlzIHBlcnF1 aXNpdGUuDQo+ID4gPg0KPiA+ID4gVGhvdWdodHM/DQo+IA0KPiBJIGRvbid0IHRoaW5rIHdlIG5l ZWQgdG8gaGF2ZSB0ZXh0IGFyb3VuZCAnY3VpZCcgYWxsb2NhdGlvbiwgYnV0IHNob3VsZA0KPiBt ZW50aW9uIHRoZSBwb3NzaWJpbGl0eSBvZiB0aGlzIHNwb29maW5nIGF0dGFjayBieSBhIGNvbXBy b21pc2VkIGNsaWVudCwgaW4NCj4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLg0KPiANCj4g PiBVVUlEIGRpc2N1c3NlZCBpbiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNDEyMiBp cyBhbm90aGVyIHdheSBvZg0KPiBnZW5lcmF0aW5nIGEgZ2xvYmFsbHkgdW5pcXVlIGlkZW50aWZp ZXIuICBBIGNvbXByb21pc2VkIERPVFMgY2xpZW50IGNhbiBzbmlmZg0KPiB0aGUgVExTIDEuMiBo YW5kc2hha2UsIHVzZSB0aGUgY2xpZW50IGNlcnRpZmljYXRlIHRvIGlkZW50aWZ5IHRoZSAiY3Vp ZCIgdXNlZA0KPiBieSBhbm90aGVyIERPVFMgY2xpZW50LiBUaGlzIGF0dGFjayBpcyBub3QgcG9z c2libGUgd2l0aCBUTFMgMS4zIChUTFMNCj4gaGFuZHNoYWtlIGlzIGVuY3J5cHRlZCkuDQo+IA0K PiBGb3IgMS4zIHRoZSBhdHRhY2tlciB3b3VsZCBuZWVkIHRvIGhhdmUgZGF0YSBmcm9tIGEgc2Vy dmVyIGluIG9yZGVyIHRvIHNlZQ0KPiBhbm90aGVyIGNsaWVudCdzIGNlcnRpZmljYXRlLCB5ZXMs IHdoaWNoIGlzIHByZXN1bWFibHkgYSBoYXJkZXIgYXR0YWNrLg0KDQpZdXAsIHdpbGwgdXBkYXRl IFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLg0KDQo+IA0KPiBJIGRvbid0IHRoaW5rIGEgVVVJRCBy ZWZlcmVuY2Ugd291bGQgYmUgdmVyeSB2YWx1YWJsZSBoZXJlLg0KDQpJZiBjdWlkIGNvbGxpc2lv biBoYXBwZW5zLCBVVUlEIGNhbiBiZSB1c2VkIHRvIGdlbmVyYXRlIHRoZSBjdWlkLiANCg0KPiAN Cj4gPiBDaGVlcnMsDQo+ID4gLVRpcnUNCj4gPg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gICAg ICAgICAgICAgICAgICAgICAgICAgICBUaGUgb3V0cHV0IG9mIHRoZSBjcnlwdG9ncmFwaGljIGhh c2ggYWxnb3JpdGhtDQo+ID4gPiA+ICAgICAgIGlzIHRydW5jYXRlZCB0byAxNiBieXRlczsgdHJ1 bmNhdGlvbiBpcyBkb25lIGJ5IHN0cmlwcGluZyBvZmYgdGhlDQo+ID4gPiA+ICAgICAgIGZpbmFs IDE2IGJ5dGVzLiAgVGhlIHRydW5jYXRlZCBvdXRwdXQgaXMgYmFzZTY0dXJsIGVuY29kZWQuDQo+ ID4gPiA+DQo+ID4gPiA+IHNpZGUgbm90ZTogVHJ1bmNhdGlvbiB0byAxMjggYml0cyByZWR1Y2Vz IHRoZSBjb2xsaXNpb24gcmVzaXN0YW5jZQ0KPiA+ID4gPiB0byA2NC1iaXQgc3RyZW5ndGgsIHRo b3VnaCB0aGlzIGlzIHByb2JhYmx5IGFjY2VwdGFibGUgaW4gdGhpcyB1c2UgY2FzZS4NCj4gPiA+ ID4NCj4gPiA+ID4gICAgICAgRE9UUyBzZXJ2ZXJzIE1VU1QgcmV0dXJuIDQuMDkgKENvbmZsaWN0 KSBlcnJvciBjb2RlIHRvIGEgRE9UUyBwZWVyDQo+ID4gPiA+ICAgICAgIHRvIG5vdGlmeSB0aGF0 IHRoZSAnY3VpZCcgaXMgYWxyZWFkeSBpbi11c2UgYnkgYW5vdGhlciBET1RTDQo+ID4gPiA+ICAg ICAgIGNsaWVudC4gIFVwb24gcmVjZWlwdCBvZiB0aGF0IGVycm9yIGNvZGUsIGEgbmV3ICdjdWlk JyBNVVNUIGJlDQo+ID4gPiA+ICAgICAgIGdlbmVyYXRlZCBieSB0aGUgRE9UUyBwZWVyLg0KPiA+ ID4gPg0KPiA+ID4gPiBJcyB0aGVyZSBhbnkgd2F5IGluIHdoaWNoIHRoaXMgc2l0dWF0aW9uIGNv dWxkIGFyaXNlIGR1cmluZyBzb21lDQo+ID4gPiA+IHNvcnQgb2YgbWlncmF0aW9uIHNjZW5hcmlv Pw0KPiA+ID4NCj4gPiA+IFtNZWRdIFRoaXMgY2FuIGJlIGZvciBleGFtcGxlIGEgY2xpZW50IHdo aWNoIGRvZXMgbm90IGZvbGxvdyB0aGUNCj4gIlNIT1VMRCINCj4gPiA+IGZvciBjcmVhdGluZyB0 aGUgY3VpZC4NCj4gDQo+IE9mIGNvdXJzZS4gIEknbSB3b25kZXJpbmcgaWYgYSBsZWdpdG1pYXRl IGNsaWVudCB0aGF0IGRvZXMgZm9sbG93IHRoZQ0KPiAiU0hPVUxEIiBjb3VsZCBldmVyIHNlZSB0 aGlzIGVycm9yIGNvZGUgaW4gdGhlIGFic2VuY2Ugb2YgYW4gYXR0YWNrLCBmb3INCj4gZXhhbXBs ZSBpZiB0aGUgY2xpZW50J3MgbmV0d29yayBhZGRyZXNzIGNoYW5nZXMuDQoNClllcywgSSB0b28g ZG9uJ3QgdGhpbmsgYSBsZWdpdGltYXRlIGNsaWVudCB3aWxsIHNlZSB0aGlzIGVycm9yIGNvZGUg aW4gdGhlIGFic2VuY2Ugb2YgYW4gYXR0YWNrLg0KDQo+IA0KPiA+ID4gPg0KPiA+ID4gPiAgICAg ICBDbGllbnQtZG9tYWluIERPVFMgZ2F0ZXdheXMgTVVTVCBoYW5kbGUgJ2N1aWQnIGNvbGxpc2lv biBkaXJlY3RseQ0KPiA+ID4gPiAgICAgICBhbmQgaXQgaXMgUkVDT01NRU5ERUQgdGhhdCAnY3Vp ZCcgY29sbGlzaW9uIGlzIGhhbmRsZWQgZGlyZWN0bHkgYnkNCj4gPiA+ID4gICAgICAgc2VydmVy LWRvbWFpbiBET1RTIGdhdGV3YXlzLg0KPiA+ID4gPg0KPiA+ID4gPiBJcyBhIGdhdGV3YXkgc3Vw cG9zZWQgdG8ga25vdyBpZiBpdCBpcyAiY2xpZW50LXNpZGUiIG9yICJzZXJ2ZXItc2lkZSINCj4g PiA+ID4gYnkgZXhwbGljaXQgY29uZmlndXJhdGlvbiBvciBzb21lIG1vcmUgYXV0b21hdGljIG1l dGhvZD8NCj4gPiA+DQo+ID4gPiBbTWVkXSBUaGlzIGNhbiBiZSBkb25lIGJ5IGFuIGV4cGxpY2l0 IGNvbmZpZ3VyYXRpb24uDQo+IA0KPiBPa2F5LiAgTGV0J3Mgd2FpdCB0byBzZWUgaWYgYW55IG90 aGVyIHJldmlld2VycyBhc2sgZm9yIGNsYXJpZnlpbmcgdGV4dCB0aGF0IHRoaXMNCj4gY2FuIG9u bHkgYmUga25vd24gdmlhIGV4cGxpY2l0IGNvbmZpZ3VyYXRpb24uDQo+IA0KPiA+ID4gPg0KPiA+ ID4gPiAgICAnY3VpZCcgYW5kICdtaWQnIE1VU1QgTk9UIGFwcGVhciBpbiB0aGUgUFVUIHJlcXVl c3QgbWVzc2FnZSBib2R5Lg0KPiA+ID4gPg0KPiA+ID4gPiBEbyB3ZSBuZWVkIHRvIHNheSB0aGlz IGdpdmVuIHRoYXQgdGhlcmUncyBubyBvYnZpb3VzIHN0cnVjdHVyZSBpbg0KPiA+ID4gPiB3aGlj aCB0byBwdXQgdGhlbT8gIChUaGF0IGlzLCBpcyB0aGlzIGp1c3QgYSByZW1pbmRlciB0bw0KPiA+ ID4gPiBpbXBsZW1lbnRvcnMgb2YgYSBwcmV2aW91cyB2ZXJzaW9uIG9mIHRoZSBkcmFmdCB2ZXJz dXMgZ3VpZGFuY2UgdG8NCj4gPiA+ID4gbmV3DQo+ID4gPiA+IGltcGxlbWVudGF0aW9ucz8pDQo+ ID4gPg0KPiA+ID4gW01lZF0gV2UgdXNlZCB0byBoYXZlIHRob3NlIGluIHRoZSBtZXNzYWdlIGJv ZHkgaW4gcHJldmlvdXMgdmVyc2lvbnMNCj4gPiA+IG9mIHRoZSBzcGVjL2ltcGxlbWVudGF0aW9u cy4gRnVydGhlcm1vcmUsIHRoZXJlIGFyZSBjYXNlcyB3aGVyZQ0KPiA+ID4gIm1pZCIgaXMgYWxs b3dlZCB0byBiZSBpbmNsdWRlZCBpbiB0aGUgbWVzc2FnZSBib2R5IChlLmcuLCBQVVQNCj4gPiA+ IHJlc3BvbnNlKS4gV2UgaW5jbHVkZWQgdGhpcyBub3RlIGZvciBpbXBsZW1lbnRlcnMgYmVjYXVz ZSBvZiBzb21lDQo+ID4gPiBiZWhhdmlvcnMgb2JzZXJ2ZWQgZHVyaW5nIHBhc3QgaW50ZXJvcHMu DQo+IA0KPiBPa2F5LiAgKEkgdGhpbmsgdGhpcyBpcyBhY3R1YWxseSBvbmUgb2YgdGhlIHRoaW5n cyBJIGFza2VkIGJlZm9yZSBhbmQgeW91DQo+IGFscmVhZHkgYW5zd2VyZWQ7IHNvcnJ5IGZvciB0 aGUgZHVwbGljYXRpb24uKQ0KPiANCj4gPiA+ID4NCj4gPiA+ID4gICAgICAgVGhlIHByZWZpeCBs aXN0IE1VU1QgTk9UIGluY2x1ZGUgYnJvYWRjYXN0LCBsb29wYmFjaywgb3IgbXVsdGljYXN0DQo+ ID4gPiA+ICAgICAgIGFkZHJlc3Nlcy4gIFRoZXNlIGFkZHJlc3NlcyBhcmUgY29uc2lkZXJlZCBh cyBpbnZhbGlkIHZhbHVlcy4NCj4gPiA+ID4gSW4NCj4gPiA+ID4NCj4gPiA+ID4gRG9lcyAiaW52 YWxpZCIgbWVhbiB0aGF0IHRoZSBwYXJ0aWN1bGFyIGFkZHJlc3MgZ2V0cyBpZ25vcmVkIG9yDQo+ ID4gPiA+IHRoYXQgdGhlIGVudGlyZSByZXF1ZXN0IGlzIHJlamVjdGVkPw0KPiA+ID4NCj4gPiA+ IFtNZWRdIFRoZSBleHBlY3RlZCBiZWhhdmlvciBpcyBjb3ZlcmVkIGJ5IHRoaXMgdGV4dDoNCj4g PiA+DQo+ID4gPiAiIC4uLiBvciBjb250YWlucyBpbnZhbGlkIG9yIHVua25vd24gcGFyYW1ldGVy cywgdGhlIERPVFMgc2VydmVyDQo+ID4gPiBNVVNUIHJlcGx5IHdpdGggNC4wMCAoQmFkIFJlcXVl c3QpLiINCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+ICAgIHRhcmdldC1mcWRuOiAgIEEgbGlzdCBv ZiBGdWxseSBRdWFsaWZpZWQgRG9tYWluIE5hbWVzIChGUUROcykNCj4gPiA+ID4gICAgICAgaWRl bnRpZnlpbmcgcmVzb3VyY2VzIHVuZGVyIGF0dGFjay4gIEFuIEZRRE4gaXMgdGhlIGZ1bGwgbmFt ZSBvZiBhDQo+ID4gPiA+ICAgICAgIHJlc291cmNlLCByYXRoZXIgdGhhbiBqdXN0IGl0cyBob3N0 bmFtZS4gIEZvciBleGFtcGxlLCAidmVuZXJhIiBpcw0KPiA+ID4gPiAgICAgICBhIGhvc3RuYW1l LCBhbmQgInZlbmVyYS5pc2kuZWR1IiBpcyBhbiBGUUROIFtSRkMxOTgzXS4NCj4gPiA+ID4NCj4g PiA+ID4gSSB3b3VsZCBzdWdnZXN0IHJlZmVycmluZyB0byBkcmFmdC1pZXRmLWRuc29wLXRlcm1p bm9sb2d5LWJpcw0KPiA+ID4gPiByYXRoZXIgdGhhbiB0cnlpbmcgdG8gcmVwcm9kdWNlIGEgZGVm aW5pdGlvbiBvZiBGUUROLg0KPiA+ID4gPg0KPiA+ID4NCj4gPiA+IFtNZWRdIEkgYWRkZWQgYW4g aW5mb3JtYXRpdmUgcmVmZXJlbmNlIHRvIGRyYWZ0LWlldGYtZG5zb3AtdGVybWlub2xvZ3ktDQo+ IGJpcy4NCj4gDQo+IFRoYW5rcw0KPiANCj4gPiA+ID4gV2UgYWxzbyBtYXkgd2FudCB0byBub3Rl IHRoYXQgdGhlIEROUyB2aWV3IGNhbiBjaGFuZ2UgZGVwZW5kaW5nIG9uDQo+ID4gPiA+IHRoZSB2 YW50YWdlIHBvaW50IHVzZWQgdG8gbWFrZSB0aGUgb2JzZXJ2YXRpb24uDQo+ID4gPg0KPiA+ID4g W01lZF0gTm90IHN1cmUgd2hhdCB0byBkbyB3aXRoIHRoaXMgb25lIGdpdmVuIHRoYXQgdGhlIHRl eHQgc2F5czoNCj4gPiA+DQo+ID4gPiAiSG93IGEgbmFtZSBpcyBwYXNzZWQgdG8gYW4gdW5kZXJs eWluZyBuYW1lIHJlc29sdXRpb24gbGlicmFyeSBpcw0KPiA+ID4gaW1wbGVtZW50YXRpb24tIGFu ZCBkZXBsb3ltZW50LXNwZWNpZmljLiINCj4gDQo+IEkgd2FzIHRoaW5raW5nIHNvbWV0aGluZyBs aWtlICJ0aGUgcmVzdWx0cyByZXR1cm5lZCBmb3IgcmVzb2x2aW5nIGEgbmFtZSBjYW4NCj4gZGVw ZW5kIG9uIG1hbnkgZmFjdG9ycywgaW5jbHVkaW5nIHdoZW4gdGhlIHJlcXVlc3Qgd2FzIG1hZGUg YW5kIHRoZQ0KPiBhZGRyZXNzIG9mIHRoZSBETlMgcmVzb2x2ZXIgdXNlZCAtLSB0aGVyZSBpcyBu byBndWFyYW50ZWUgdGhhdCB0aGUgRE9UUw0KPiBzZXJ2ZXIgd2lsbCByZXNvbHZlIGEgbmFtZSB0 byB0aGUgc2FtZSBhZGRyZXNzZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgZG9lcyIuDQoNCkdvb2Qg cG9pbnQsIHdpbGwgdXBkYXRlIGRyYWZ0LiANCg0KPiANCj4gPiA+ID4NCj4gPiA+ID4gT24gcGFn ZSAxOCB3ZSBzYXkgdGhhdCBzZXJ2ZXItZG9tYWluIERPVFMgZ2F0ZXdheXMgIk1VU1Qgc3VwcGx5 DQo+ID4gPiA+IFsuLi5dICdjZGlkJyIsIGJ1dCB0aGUgcHJldmlvdXMgcGFyYWdyYXBoIHNheXMg dGhhdCB0aGVyZSBTSE9VTEQNCj4gPiA+ID4gYmUgYSBjb25maWd1cmF0aW9uIG9wdGlvbiBmb3Ig d2hldGhlciB0byBpbnNlcnQgJ2NkaWQnIG9uIHN1Y2ggc3lzdGVtcy4NCj4gPiA+ID4gVGhlIHR3 byByZXF1aXJlbWVudHMgYXJlIGluIGNvbmZsaWN0OyB3aGljaCB3YXMgaW50ZW5kZWQ/ICAoSQ0K PiA+ID4gPiBhc3N1bWUgdGhlIE1VU1QgLS0gd2h5IHdvdWxkIGl0IGJlIGRlc2lyZWQgdG8gbm90 IGhhdmUgdGhlDQo+ID4gPiA+IGluZm9ybWF0aW9uDQo+ID4gPiA+IGF2YWlsYWJsZT8pDQo+ID4g Pg0KPiA+ID4gW01lZF0gVGhpcyB0ZXh0IGlzIGFib3V0IGdhdGV3YXlzIHRoYXQgYXJlIGluc3Ry dWN0ZWQgdG8gaW5zZXJ0IHRoZQ0KPiA+ID4gY2RpZCBwYXJhbWV0ZXIuIGdhdGV3YXlzIGZhY2lu ZyBhIGNsaWVudCdzIGRvbWFpbiBhcmUgaW4gdGhpcyBjYXNlLg0KPiA+ID4NCj4gPiA+IEkgdXBk YXRlZCB0aGUgdGV4dCB3aXRoICJzZXJ2ZXItZG9tYWluIERPVFMgZ2F0ZXdheXMgaW5zdHJ1Y3Rl ZCB0bw0KPiA+ID4gaW5zZXJ0IHRoZSAnY2RpZCcgcGFyYW1ldGVyIE1VU1Qgc3VwcGx5Li4iDQo+ IA0KPiBBaCwgdGhhdCBtYWtlcyBzZW5zZSAtLSB0aGFua3MuDQo+IA0KPiA+ID4gPg0KPiA+ID4g PiBUaGUgc2FtZSBwYXJhZ3JhcGggYWxzbyBzYXlzIHRoYXQgdGhlICdjZGlkJyBpcyAibGlrZWx5 IHRvIGJlIHRoZQ0KPiA+ID4gPiBzYW1lIGFzIiB0aGUgJ2N1aWQnLCB0aG91Z2ggaW4gYWRkaXRp b24gdG8gdGhlIGxpc3RlZCByZWFzb25zIHRoZQ0KPiA+ID4gPiBjbGllbnQgb25seSBoYXMgYSBT SE9VTEQgcmVxdWlyZW1lbnQgdG8gZm9sbG93IHRoaXMgcHJvY2VkdXJlIGZvcg0KPiA+ID4gPiBn ZW5lcmF0aW5nICdjdWlkJzsgaXQgbWF5IGJlIHdvcnRoIG5vdGluZyB0aGUgY2xpZW50J3MgbGVl d2F5IGhlcmUgYXMNCj4gd2VsbC4NCj4gPiA+DQo+ID4gPiBbTWVkXSBZZXMsIHRoaXMgaXMgd2h5 IHdlIGhhdmUgImxpa2VseSIgaW4gdGhlIHRleHQuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAg ICAgICBJZiBhIERPVFMgY2xpZW50IGlzIHByb3Zpc2lvbmVkLCBmb3IgZXhhbXBsZSwgd2l0aCBk aXN0aW5jdA0KPiA+ID4gPiAgICAgICBjZXJ0aWZpY2F0ZXMgYXMgYSBmdW5jdGlvbiBvZiB0aGUg cGVlciBzZXJ2ZXItZG9tYWluIERPVFMgZ2F0ZXdheSwNCj4gPiA+ID4gICAgICAgZGlzdGluY3Qg J2NkaWQnIHZhbHVlcyBtYXkgYmUgc3VwcGxpZWQgYnkgYSBzZXJ2ZXItZG9tYWluIERPVFMNCj4g PiA+ID4gICAgICAgZ2F0ZXdheS4gIFRoZSB1bHRpbWF0ZSBET1RTIHNlcnZlciBNVVNUIHRyZWF0 IHRob3NlICdjZGlkJyB2YWx1ZXMNCj4gPiA+ID4gICAgICAgYXMgZXF1aXZhbGVudC4NCj4gPiA+ ID4NCj4gPiA+ID4gSXMgdGhpcyBwYXJhZ3JhcGggdHJ5aW5nIHRvIHNheSB0aGF0IGEgY2xpZW50 IG1pZ2h0IHN1cHBseQ0KPiA+ID4gPiBkaWZmZXJlbnQgY2VydHMgdG8gZGlmZmVyZW50IGdhdGV3 YXlzIGluIHRoZSBzYW1lIGRvbWFpbg0KPiA+ID4NCj4gPiA+IFtNZWRdIFllcy4NCj4gPiA+DQo+ ID4gPiAgKGUuZy4sIGlmIG9uZSBzdWNoDQo+ID4gPiA+IGdhdGV3YXkgZG9lcyBub3Qgc3VwcG9y dCBlY2RzYSBjZXJ0cyk/ICBJdCB3YXMgcHJldHR5IGNvbmZ1c2luZyBvbg0KPiA+ID4gPiB0aGUg Zmlyc3QgcmVhZCwgaW4gcGFydGljdWxhciBob3cgdGhlIHVsdGltYXRlIERPVFMgc2VydmVyIHdv dWxkDQo+ID4gPiA+IGtub3cgdGhhdCB0aGUgZGlmZmVyZW50ICdjZGlkJyB2YWx1ZXMgYWN0dWFs bHkgY29ycmVzcG9uZCB0byB0aGUNCj4gPiA+ID4gc2FtZSBjbGllbnQgW2RvbWFpbl0uDQo+ID4g Pg0KPiA+ID4gW01lZF0gVGhpcyBpcyBzdXBwb3NlZCB0byBiZSBwcm92aXNpb25lZCBvbiB0aGUg c2VydmVyLiBUaGlzIGlzDQo+ID4gPiBkZXBsb3ltZW50LSBzcGVjaWZpYzsgaGVuY2Ugbm8gbWVu dGlvbiBpbiB0aGUgZHJhZnQuDQo+IA0KPiBBaCwgdGhhbmtzIGZvciB0aGUgZXhwbGFuYXRpb24u ICBJIGRvbid0IGhhdmUgYW55IHN1Z2dlc3RlZCByZXdvcmRpbmcgdGhhdA0KPiB3b3VsZCBoZWxw IGNsYXJpZnkgLS0gYWxsIEkgY2FuIGNvbWUgdXAgd2l0aCBpcyB0byBhZGQgIiwgd2hlbiBjb25m aWd1cmVkIHRvDQo+IGtub3cgdGhleSByZXByZXNlbnQgdGhlIHNhbWUgY2xpZW50Iiwgd2hpY2gg aXMgYm90aCBsb25nIGFuZCBub3QgcmVhbGx5DQo+IHNheWluZyBhbnl0aGluZyBuZXcuDQo+IA0K PiA+ID4gPg0KPiA+ID4gPiAgICAgICBET1RTIHNlcnZlcnMgTVVTVCBpZ25vcmUgJ2NkaWQnIGF0 dHJpYnV0ZXMgdGhhdCBhcmUgZGlyZWN0bHkNCj4gPiA+ID4gICAgICAgc3VwcGxpZWQgYnkgc291 cmNlIERPVFMgY2xpZW50cyBvciBjbGllbnQtZG9tYWluIERPVFMgZ2F0ZXdheXMuDQo+ID4gPiA+ ICAgICAgIFRoaXMgaW1wbGllcyB0aGF0IGZpcnN0IHNlcnZlci1kb21haW4gRE9UUyBnYXRld2F5 cyBNVVNUIHN0cmlwDQo+ID4gPiA+ICAgICAgICdjZGlkJyBhdHRyaWJ1dGVzIHN1cHBsaWVkIGJ5 IERPVFMgY2xpZW50cy4gIERPVFMgc2VydmVycyBTSE9VTEQNCj4gPiA+ID4gICAgICAgc3VwcG9y dCBhIGNvbmZpZ3VyYXRpb24gcGFyYW1ldGVyIHRvIGlkZW50aWZ5IERPVFMgZ2F0ZXdheXMgdGhh dA0KPiA+ID4gPiAgICAgICBhcmUgdHJ1c3RlZCB0byBzdXBwbHkgJ2NkaWQnIGF0dHJpYnV0ZXMu DQo+ID4gPiA+DQo+ID4gPiA+IElzIHRoZXJlIGFueSBtZWNoYW5pc20gKGUuZy4sIGF1dG9kZXRl Y3Rpb24pIG90aGVyIHRoYW4gdGhpcyBieQ0KPiA+ID4gPiB3aGljaCBzZXJ2ZXJzL3Byb3hpZXMg Y2FuIGxlYXJuIGFib3V0IHRoZSB0b3BvbG9neSBpbmZvcm1hdGlvbg0KPiA+ID4gPiBuZWVkZWQg dG8gZnVsZmlsIHRoZXNlIHJlcXVpcmVtZW50cz8NCj4gPiA+DQo+ID4gPiBbTWVkXSBJJ20gbm90 IGF3YXJlIG9mIHN1Y2ggbWVjaGFuaXNtLg0KPiANCj4gT2theSwgdGhhbmtzLg0KPiANCj4gPiA+ ID4NCj4gPiA+ID4gICAgQmVjYXVzZSBvZiB0aGUgY29tcGxleGl0eSB0byBoYW5kbGUgcGFydGlh bCBmYWlsdXJlIGNhc2VzLCB0aGlzDQo+ID4gPiA+ICAgIHNwZWNpZmljYXRpb24gZG9lcyBub3Qg YWxsb3cgZm9yIGluY2x1ZGluZyBtdWx0aXBsZSBtaXRpZ2F0aW9uDQo+ID4gPiA+ICAgIHJlcXVl c3RzIGluIHRoZSBzYW1lIFBVVCByZXF1ZXN0LiAgQ29uY3JldGVseSwgYSBET1RTIGNsaWVudCBN VVNUDQo+IE5PVA0KPiA+ID4gPiAgICBpbmNsdWRlIG11bHRpcGxlICdzY29wZScgcGFyYW1ldGVy cyBpbiB0aGUgc2FtZSBQVVQgcmVxdWVzdC4NCj4gPiA+ID4NCj4gPiA+ID4gIm11bHRpcGxlICdz Y29wZScgcGFyYW1ldGVycyIgcmVhZHMgbGlrZSBhIENCT1Igb2JqZWN0IHdpdGgNCj4gPiA+ID4g ZHVwbGljYXRlIGtleXM7IGlzIHRoaXMgaW50ZW5kZWQgdG8gcmVmZXIgdG8gYSBtdWx0aS12YWx1 ZWQgYXJyYXk/DQo+ID4gPg0KPiA+ID4gW01lZF0gV2hhdCBpcyBpbnRlbmRlZCBpcyB0aGF0IHRo ZSBzY29wZSBsaXN0IHNob3VsZCBpbmNsdWRlIG9ubHkgb25lDQo+IGVudHJ5Li4NCj4gPiA+DQo+ ID4gPiBJIGNhbiBjaGFuZ2UgdG8gIm11bHRpcGxlICdzY29wZScgY2xhdXNlcyINCj4gDQo+IEkn bSBub3Qgc3VyZSBob3cgZGlmZmVyZW50IHRoYXQgaXMuICBJdCBzb3VuZHMgbGlrZSB5b3UncmUg dHJ5aW5nIHRvIGF2b2lkDQo+ICJtdWx0aXBsZSBlbnRyaWVzIGluIHRoZSAnc2NvcGUnIGFycmF5 Ij8NCg0KWWVzLCBwcm9wb3NlZCB3b3JkaW5nIHRvIHNheSAiTVVTVCBOT1QgaW5jbHVkZSBtdWx0 aXBsZSBlbnRyaWVzIGluIHRoZSAnc2NvcGUnIGFycmF5IiBsb29rcyBiZXR0ZXIuIA0KDQo+IA0K PiA+ID4gPg0KPiA+ID4gPiAgICBUaGUgRE9UUyBzZXJ2ZXIgY291cGxlcyB0aGUgRE9UUyBzaWdu YWwgYW5kIGRhdGEgY2hhbm5lbCBzZXNzaW9ucw0KPiA+ID4gPiAgICB1c2luZyB0aGUgRE9UUyBj bGllbnQgaWRlbnRpdHkgYW5kIG9wdGlvbmFsbHkgdGhlICdjZGlkJw0KPiA+ID4gPiBwYXJhbWV0 ZXINCj4gPiA+ID4NCj4gPiA+ID4gVGhpcyByZXF1aXJlcyB0aGUgY2xpZW50IHRvIHVzZSB0aGUg c2FtZSBjZXJ0aWZpY2F0ZSB0bw0KPiA+ID4gPiBhdXRoZW50aWNhdGUgdGhlIHNpZ25hbCBhbmQg ZGF0YSBjaGFubmVscyB0byBhIGdpdmVuIHNlcnZlciAoZXZlbg0KPiA+ID4gPiB3aGVuIGEgZ2F0 ZXdheSBpcyBpbiB1c2UpLiAgQWJvdmUsIHdlIGRpc2N1c3NlZCBjYXNlcyB3aGVyZSBhDQo+ID4g PiA+IGNsaWVudCBtaWdodCBoYXZlIG11bHRpcGxlIGNlcnRpZmljYXRlcyBhdmFpbGFibGUuDQo+ ID4gPg0KPiA+ID4gW01lZF0gQWN0dWFsbHksIHRoZSB0ZXh0IGFib3ZlIGFwcGxpZXMgYWxzbyBp ZiBkaXN0aW5jdCBjZXJ0aWZpY2F0ZXMgYXJlIHVzZWQuDQo+ID4gPiBFcXVpdmFsZW50ICJjbGll bnQgaWRlbnRpdHkiIGFyZSBzdXBwb3NlZCB0byBiZSBrbm93biB0byB0aGUgc2VydmVyDQo+ID4g PiBieSBhbiBvdXQgb2YgYmFuZCBtZWFucy4gSW4gYWxsIGNhc2VzLCB0aGUgaWRlbnRpdHkgKHNh bWUgb3INCj4gPiA+IGVxdWl2YWxlbnQpIGlzIHVzZWQgdG8gY291cGxlIHRoZSBzZXNzaW9ucy4N Cj4gDQo+IEhtbS4gIElmIHdlIGFyZSB0YWxraW5nIGFueXRoaW5nIGZhbmNpZXIgdGhhbiBqdXN0 IGNvbXBhcmluZyBTdWJqZWN0DQo+IGluZm9ybWF0aW9uIGZyb20gdGhlIGNlcnRpZmljYXRlICh3 aGljaCBhcHBhcmVudGx5IEkgZm9yZ290IGFib3V0IHdoZW4gSQ0KPiB3cm90ZSB0aGUgYWJvdmUh KSwgSSB0aGluayB3ZSBtYXkgd2FudCB0byBoYXZlIHNvbWUgdGV4dCBpbiB0aGUgZG9jdW1lbnQN Cj4gbWVudGlvbmluZyB0aGUgcG9zc2liaWxpdHkgb2Ygb3V0IG9mIGJhbmQgY29uZmlndXJhdGlv bi4NCg0KTm90aGluZyBmYW5jeSwgdGhlIHR3byBjZXJ0aWZpY2F0ZXMgd2lsbCBoYXZlIHRoZSBz YW1lIGRpc3Rpbmd1aXNoZWQgbmFtZSAoRE4pIGluIHRoZSBzdWJqZWN0IGZpZWxkLiANCkEgQ0Eg Y2FuIGlzc3VlIG11bHRpcGxlIGNlcnRpZmljYXRlcyB3aXRoIHRoZSBzYW1lIEROIHRvIHRoZSBE T1RTIGNsaWVudCAob3Igc3ViamVjdCkuIA0KDQo+IA0KPiA+ID4gICBXaGVyZSBkbyB3ZSBzcGVj aWZ5IHRoZSByZXF1aXJlbWVudCB0byB1c2UgdGhlDQo+ID4gPiA+IHNhbWUgY2VydGlmaWNhdGUg Zm9yIHNpZ25hbCBhbmQgZGF0YSBjaGFubmVscz8NCj4gPiA+DQo+ID4gPiBbTWVkXSBXZSBkb24n dCBoYXZlIHN1Y2ggcmVxdWlyZW1lbnQgaW4gZXhpc3RpbmcgRE9UUyBkb2N1bWVudHMuDQo+ID4g Pg0KPiA+ID4gPg0KPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIERPVFMgYWdlbnRzIGNhbiBzYWZlbHkNCj4gPiA+ID4gICAgaWdub3JlIFZlbmRv ci1TcGVjaWZpYyBwYXJhbWV0ZXJzIHRoZXkgZG9uJ3QgdW5kZXJzdGFuZC4NCj4gPiA+ID4NCj4g PiA+ID4gVGhpcyBpcyBub3QgYSB2ZXJ5IHVzZWZ1bCBzdGF0ZW1uZXQgaWYgdGhlIGFnZW50IG11 c3Qga25vdyB0aGF0IGENCj4gPiA+ID4gcGFyYW1ldGVyIGlzIHZlbmRvci1zcGVjaWZpYyBpbiBv cmRlciB0byBzYWZlbHkgaWdub3JlIGl0Lg0KPiA+ID4NCj4gPiA+IFtNZWRdIFRoZSBhZ2VudCBy ZWxpZXMgb24gdGhlIGNib3Iga2V5IHZhbHVlIHRvIGRldGVybWluZSB0aGF0IGENCj4gPiA+IHBh cmFtZXRlciBjYW4gYmUgc2FmZWx5IGlnbm9yZWQgb3Igbm90IChjb21wcmVoZW5zaW9uLXJlcXVp cmVkKS4gQQ0KPiA+ID4gcmFuZ2Ugb2Yga2V5cyBpcyByZXNlcnZlZCBmb3IgY29tcHJlaGVuc2lv bi1vcHRpb25hbC4gQW4gYWdlbnQNCj4gPiA+IGNoZWNrcyB0aGUgcmFuZ2UgdG8gd2hpY2ggYmVs b25nIGEgcGFyYW1ldGVyLCBhbmQgdGhlbiBiZWhhdmVzDQo+IGFjY29yZGluZ2x5Lg0KPiANCj4g SWYgd2UgcmVhbGx5IG1lYW4gY29tcHJlaGVuc2lvbi1vcHRpb25hbCwgbWF5YmUgd2Ugc2hvdWxk IGp1c3Qgc2F5IHRoYXQsDQo+IGluc3RlYWQgb2YgIlZlbmRvci1TcGVjaWZpYyIuDQoNClllcywg d2lsbCB1cGRhdGUuDQoNCj4gDQo+ID4gPiA+DQo+ID4gPiA+ICAgIElmIHRoZSBET1RTIHNlcnZl ciBkb2VzIG5vdCBmaW5kIHRoZSAnbWlkJyBwYXJhbWV0ZXIgdmFsdWUgY29udmV5ZWQNCj4gPiA+ ID4gICAgaW4gdGhlIFBVVCByZXF1ZXN0IGluIGl0cyBjb25maWd1cmF0aW9uIGRhdGEsIGl0IE1B WSBhY2NlcHQgdGhlDQo+ID4gPiA+ICAgIG1pdGlnYXRpb24gcmVxdWVzdCBieSBzZW5kaW5nIGJh Y2sgYSAyLjAxIChDcmVhdGVkKSByZXNwb25zZSB0byB0aGUNCj4gPiA+ID4gICAgRE9UUyBjbGll bnQ7IHRoZSBET1RTIHNlcnZlciB3aWxsIGNvbnNlcXVlbnRseSB0cnkgdG8gbWl0aWdhdGUgdGhl DQo+ID4gPiA+ICAgIGF0dGFjay4NCj4gPiA+ID4NCj4gPiA+ID4gICAgSWYgdGhlIERPVFMgc2Vy dmVyIGZpbmRzIHRoZSAnbWlkJyBwYXJhbWV0ZXIgdmFsdWUgY29udmV5ZWQgaW4gdGhlDQo+ID4g PiA+ICAgIFBVVCByZXF1ZXN0IGluIGl0cyBjb25maWd1cmF0aW9uIGRhdGEgYm91bmQgdG8gdGhh dCBET1RTIGNsaWVudCwgaXQNCj4gPiA+ID4gICAgTUFZIHVwZGF0ZSB0aGUgbWl0aWdhdGlvbiBy ZXF1ZXN0LCBhbmQgYSAyLjA0IChDaGFuZ2VkKSByZXNwb25zZSBpcw0KPiA+ID4gPiAgICByZXR1 cm5lZCB0byBpbmRpY2F0ZSBhIHN1Y2Nlc3NmdWwgdXBkYXRlIG9mIHRoZSBtaXRpZ2F0aW9uIHJl cXVlc3QuDQo+ID4gPiA+DQo+ID4gPiA+IFRoZXJlIGFyZSB0d28gIk1BWSJzIHNwcmVhZCBhY3Jv c3MgdGhlc2UgdHdvIHBhcmFncmFwaHM7IGRvIHdlDQo+ID4gPiA+IHdhbnQgdG8gc2F5IGFueXRo aW5nIGFib3V0IGluIHdoYXQgY2FzZXMgdGhlIHNlcnZlciBtaWdodCB3YW50IHRvDQo+ID4gPiA+ IGhhdmUgZGlmZmVyZW50IGJlaGF2aW9yIChpLmUuLCBpZ25vcmUgdGhlIE1BWSk/DQo+ID4gPiA+ DQo+ID4gPg0KPiA+ID4gW01lZF0gRm9yIHRoZSBmaXJzdCBNQVksIGEgdHlwaWNhbCBleGFtcGxl IGlzIHdoZW4gYSByYXRlIGxpbWl0IGlzIGVuZm9yY2VkOg0KPiA+ID4NCj4gPiA+ICAgIFJhdGUt bGltaXRpbmcgRE9UUyByZXF1ZXN0cywgaW5jbHVkaW5nIHRob3NlIHdpdGggbmV3ICdjdWlkJyB2 YWx1ZXMsDQo+ID4gPiAgICBmcm9tIHRoZSBzYW1lIERPVFMgY2xpZW50IGRlZmVuZHMgYWdhaW5z dCBEb1MgYXR0YWNrcyB0aGF0IHdvdWxkDQo+ID4gPiAgICByZXN1bHQgaW4gdmFyeWluZyB0aGUg J2N1aWQnIHRvIGV4aGF1c3QgRE9UUyBzZXJ2ZXIgcmVzb3VyY2VzLiAgUmF0ZS0NCj4gPiA+ICAg IGxpbWl0IHBvbGljaWVzIFNIT1VMRCBiZSBlbmZvcmNlZCBvbiBET1RTIGdhdGV3YXlzIChpZiBk ZXBsb3llZCkgYW5kDQo+ID4gPiAgICBET1RTIHNlcnZlcnMNCj4gPiA+DQo+ID4gPiBGb3IgdGhl IHNlY29uZCBNQVksIHRoZSBzZXJ2ZXIgbWF5IGhhdmUgbW9yZSB2aXNpYmlsaXR5IG9uIHRoZQ0K PiA+ID4gYXR0YWNrIGFuZCB0aGVuIG1heSBkZWNpZGUgdG8gdXBkYXRlIGFjY29yZGluZ2x5Lg0K PiA+ID4NCj4gPiA+IEkgZG9uJ3Qga25vdyBpZiBpdCBpcyB3b3J0aCB0byBhZGQgZXhhbXBsZXMu IEFueSBwcmVmZXJlbmNlPw0KPiANCj4gSSB3b3VsZCBsZWFuIHRvd2FyZHMgYWRkaW5nICJBIHNl cnZlciBjb3VsZCByZWplY3QgbWl0aWdhdGlvbiByZXF1ZXN0cyB3aGVuDQo+IGl0IGlzIG5lYXIg Y2FwYWNpdHkgb3IgbmVlZHMgdG8gcmF0ZS1saW1pdCBhIHBhcnRpY3VsYXIgY2xpZW50LCBmb3Ig ZXhhbXBsZSIgZm9yDQo+IHRoZSBmb3JtZXIsIGJ1dCBsZWF2aW5nIHRoZSBsYXR0ZXIgYXMtaXMu ICBCdXQgSSBoYXZlIG5vIHN0cm9uZyBwcmVmZXJlbmNlcw0KPiBoZXJlIGFuZCBhbSBoYXBweSB0 byBhZHZhbmNlIHRoZSBkb2N1bWVudCBlaXRoZXIgd2F5Lg0KDQpTdXJlLCB3aWxsIHVwZGF0ZSBk cmFmdC4NCg0KQ2hlZXJzLA0KLVRpcnUNCg0KPiANCj4gLUJlbg0K From nobody Wed Jan 16 23:03:02 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E4E8130DBE; Wed, 16 Jan 2019 23:03:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91JdXI-JM_Ye; Wed, 16 Jan 2019 23:02:59 -0800 (PST) Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FBC2124B0C; Wed, 16 Jan 2019 23:02:59 -0800 (PST) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 43gFQT0sbYzFq6P; Thu, 17 Jan 2019 08:02:57 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.57]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 43gFQS6qVvz5vN0; Thu, 17 Jan 2019 08:02:56 +0100 (CET) Received: from OPEXCAUBM5C.corporate.adroot.infra.ftgroup (10.114.13.38) by OPEXCLILM23.corporate.adroot.infra.ftgroup (10.114.31.57) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 08:02:56 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5C.corporate.adroot.infra.ftgroup ([fe80::393d:418c:3f1d:991d%21]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 08:02:56 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPA= Date: Thu, 17 Jan 2019 07:02:55 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 07:03:01 -0000 SGkgVGlydSwgDQoNCkFzIHlvdSBrbm93IFJGQzgzMDUgb2Jzb2xldGVzIFJGQzY1NTUuIA0KDQpJ IGZhaWwgdG8gc2VlIHdoZXJlIGNhY2hpbmcgcmVzdWx0cyBpcyBtZW50aW9uZWQgaW4gODMwNS4g RG8geW91Pw0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0N Cj4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSBbbWFpbHRvOlRpcnVtYWxlc3dhclJl ZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+IEVudm95w6nCoDogbWVyY3JlZGkgMTYgamFudmllciAy MDE5IDEyOjExDQo+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE47IEJlbmphbWluIEth ZHVrOyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLQ0KPiBjaGFubmVsQGlldGYub3JnDQo+IENjwqA6 IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUkU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRv dHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdCBQYXJ0KQ0KPiANCj4gSGkgTWVkLA0KPiANCj4gUGxl YXNlIHNlZSBpbmxpbmUNCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBG cm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiA+IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiBTZW50OiBXZWRuZXNkYXksIEphbnVhcnkgMTYs IDIwMTkgMTozMCBQTQ0KPiA+IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRy YWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4gY2hhbm5lbEBpZXRmLm9yZw0KPiA+IENjOiBkb3Rz QGlldGYub3JnDQo+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0 Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgxc3QNCj4gUGFydCkNCj4gPg0KPiA+ID4NCj4gPiA+ ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUaGVzZSBjb25uZWN0aW9uIGF0dGVt cHRzIGFyZQ0KPiA+ID4gICAgcGVyZm9ybWVkIGJ5IHRoZSBET1RTIGNsaWVudCB3aGVuIGl0IGlu aXRpYWxpemVzLiAgVGhlIHJlc3VsdHMgb2YgdGhlDQo+ID4gPiAgICBIYXBweSBFeWViYWxscyBw cm9jZWR1cmUgYXJlIHVzZWQgYnkgdGhlIERPVFMgY2xpZW50IGZvciBzZW5kaW5nIGl0cw0KPiA+ ID4gICAgc3Vic2VxdWVudCBtZXNzYWdlcyB0byB0aGUgRE9UUyBzZXJ2ZXIuDQo+ID4gPg0KPiA+ ID4gSSBzZWUgdGhpcyBpcyBzY29wZWQgdG8gIndoZW4gdGhlIGNsaWVudCBpbml0aWFsaXplcyIs IHNvIEkgZG9uJ3Qga25vdw0KPiA+ID4gd2hldGhlciBpdCBhZGRzIG1vcmUgb3Igbm90IHRvIGVu ZCB3aXRoICJmb3IgdGhlIGR1cmF0aW9uIG9mIHRoZSBET1RTDQo+ID4gPiBzZXNzaW9uIiBvciBz b21lIHNpbWlsYXIgc2NvcGluZyBmb3IgdGhlIGNhY2hpbmcgb2YgdGhlIGhhcHB5IGV5ZWJhbGxz DQo+ID4gPiByZXN1bHRzLg0KPiA+DQo+ID4gW01lZF0gVGhlIGNvbm5lY3Rpb24gYXR0ZW1wdHMg YXJlIHBlcmZvcm1lZCBlYWNoIHRpbWUgdGhlIGNsaWVudCBoYXMgdG8NCj4gPiBzZWxlY3QgYW1v bmcgYSBsaXN0IG9mIHY0LCB2NiAodGxzLCBkdGxzKS4gVGhpcyBpcyBwYXJ0aWN1bGFybHkgdHJ1 ZSB3aGVuDQo+IHRoZSBjbGllbnQNCj4gPiBpbml0aWF0ZXMsIGJ1dCB0aGlzIG1heSBhbHNvIGJl IHRydWUgZWFjaCB0aW1lIHRoZSBjbGllbnQgaGFzIHRvIHNlbGVjdA0KPiBhbW9uZw0KPiA+IHY0 LCB2NiwgRFRMUywgVExTIChlLmcuLCB0aGUgY2xpZW50IGF0dGFjaGVzIHRvIGEgbmV3IG5ldHdv cmspLg0KPiA+DQo+ID4gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvOg0KPiA+DQo+ID4gIlRoZXNlIGNv bm5lY3Rpb24gYXR0ZW1wdHMgYXJlIHBlcmZvcm1lZCBieSB0aGUgRE9UUyBjbGllbnQgd2hlbiBp dA0KPiA+IGluaXRpYWxpemVzLCBvciBpbiBnZW5lcmFsIHdoZW4gaXQgaGFzIHRvIHNlbGVjdCBh biBhZGRyZXNzIGZhbWlseSBhbmQNCj4gdHJhbnNwb3J0DQo+ID4gdG8gY29udGFjdCBpdHMgRE9U UyBzZXJ2ZXIuIg0KPiANCj4gSGFwcHkgZXllYmFsbHMgbWFuZGF0ZXMgY2FjaGluZyB0aGUgcmVz dWx0cywgc2VlDQo+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2NTU1I3NlY3Rpb24t NCAodG8gYXZvaWQgdGhyYXNoaW5nIHRoZQ0KPiBuZXR3b3JrKS4NCj4gV2UgbWF5IHdhbnQgdG8g dXBkYXRlIHRoZSBhYm92ZSBsaW5lIGFjY29yZGluZ2x5Lg0KPiANCj4gQ2hlZXJzLA0KPiAtVGly dQ0K From nobody Wed Jan 16 23:13:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55A94124B0C for ; Wed, 16 Jan 2019 23:13:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.043 X-Spam-Level: X-Spam-Status: No, score=-2.043 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.142, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lepidum-co-jp.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mvqccF4sRaor for ; Wed, 16 Jan 2019 23:13:22 -0800 (PST) Received: from mail-pf1-x42d.google.com (mail-pf1-x42d.google.com [IPv6:2607:f8b0:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5693D130DC2 for ; Wed, 16 Jan 2019 23:13:22 -0800 (PST) Received: by mail-pf1-x42d.google.com with SMTP id c73so4357166pfe.13 for ; Wed, 16 Jan 2019 23:13:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lepidum-co-jp.20150623.gappssmtp.com; s=20150623; h=to:from:subject:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=ladrQEzFvR/CUlrwvE2Jplz8vrzCYJeJl4IySuAKz48=; b=ZstpMAbKotYmLMgx1A5MwGpDpnPBtV9zF/vp6a4dtbdBcSHNcGxalU3JnorUsx4yL6 49LDw0veiVJDD75dhkdxAQZXxxCQ798tyUMa9X+lVyzMf1r0Y0D3eYh7LAkYi0Ni83ew 9NS8P7HjhWSzxI7d5UyaFX8S/2KvK6TaxXpz3ynS+I3LeylbPGJKHZU7gAICOWF+HTOa e/Se26dh6lqMs1nH7CJC28lORvjQoq4msBph8U6wtkbsIDmfhYMoe4pia2UoTXFTiux0 nR512axMWLSdIlY7CKMi0ynzzlAo7n0o5LuLV2jMzWuxoWDiNtwEaJwWo+Ic12N70AMB zxBQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=ladrQEzFvR/CUlrwvE2Jplz8vrzCYJeJl4IySuAKz48=; b=e1wL7+bjPgI3aWa7Dz0tP1/8TcwFW7RLlwKuteJcZWLWoLF3i7PTjA8u2fLmycoI29 sWhFYGHpc+QV0i+8TsOj2ISee6yQgOa9M27kUWzYhD3EfDgi0YsMH4xR+UwietwcmdhV QXySQCoziQxtPpDMl80Lnz0XJKW6dNRD8lgipqT93JEeaBSyuw8In+68HTmBk70DwH7a QIWA+3zC73sR4pr68J2GyDTV6PPkf4ESyGfBtNEnFyHn4phGy+xnIUFijS0dC1AoVLbW 3/MQnnD9esA85BSh1ZEOtFmJnvwK8EuVvFKp2Lql9VzB4jrQXpgUU2Tp6B/8jP2Q5geO e3qA== X-Gm-Message-State: AJcUukcjBKR6iBDnlxxaU307BhR3E2njYTTTKWS4kZFztbloJ5Hq/oJ6 azyXDSrJO8ZgIoN+OHqPIyHWYmdvNKA= X-Google-Smtp-Source: ALg8bN4z+Gm7JZCYFN8LokiuAWXdgNP+yxWfYD74Dnah42nSQGmom9QbtOzE6uWwFzopZBua0D9vyw== X-Received: by 2002:a63:eb52:: with SMTP id b18mr12154321pgk.213.1547709201699; Wed, 16 Jan 2019 23:13:21 -0800 (PST) Received: from [192.168.30.84] ([150.249.212.66]) by smtp.gmail.com with ESMTPSA id j21sm1250979pfn.175.2019.01.16.23.13.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Jan 2019 23:13:20 -0800 (PST) To: "dots@ietf.org" From: Takahiko Nagata Message-ID: Date: Thu, 17 Jan 2019 16:13:18 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 07:13:24 -0000 Hi Kaname, I would like to 2 comments on dots-signal-control-filtering-01. (Comment1) Minimal attributes for control-filtering. ("lifetime" behavior) Minimal attributes of SignalChannel MitigationRequest for control-filtering is only the followings, I think. - acl-list(acl-name, activation-type) - lifetime So, We can send acl-list via SignalChannel without other Mitigation request parameters. In this case, we need to decide behavior of "lifetime". I think "lifetime" is ignored in this case. Because acl-list(acl-name, activation-type) should be managed only DataChannel side for specification simply. (Comment2) Should be specified behavior. (a) Not be affected by "trigger-mitigation" acl-list(acl-name, activation-type) is soon be applied even if "trigger-mitigation" is false. (b) Do not affect to "Efficacy Update" acl-list(acl-name, activation-type) would be ignored at "Efficacy Update" success or reject. (c) GET response of Mitigation Request acl-list(acl-name, activation-type) would not be included on respose of GET Mitigation Request. (d) In DELETE, no behavior(ex: rollback) for acl-list. Best Regards, Takahiko Nagata From nobody Wed Jan 16 23:20:41 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C98BF130DE5; Wed, 16 Jan 2019 23:20:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YE-YGyllQw4U; Wed, 16 Jan 2019 23:20:37 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFB5112D4EA; Wed, 16 Jan 2019 23:20:36 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547709489; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=E Bw6o2Rjd0WZsb2CctXs5+eXxnvtAeccT+1ZOGwMYP g=; b=DnA8Fg0OTE3xqW1XM96EvZYLRjB06KfMmZWEbXX6hCkz xgQCXHEAkoZWwGu5bHRXypAoqYrWt1XFuX1HubrI3BKX8EzD+S MXvAMCWg8Vruc16yA4M3u1S7audewFQO/2U5U19grtnQ1eUW1y TP+MJG9/rj0YLNFxRzsSSJWce7w= Received: from DNVEXAPP1N05.corpzone.internalzone.com (DNVEXAPP1N05.corpzone.internalzone.com [10.44.48.89]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682f_04a3_7eed2203_6ea6_4032_8d79_26cdb3be7973; Thu, 17 Jan 2019 01:18:08 -0600 Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 00:16:07 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 00:16:07 -0700 Received: from NAM02-BL2-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 00:16:07 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2455.namprd16.prod.outlook.com (20.177.227.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.19; Thu, 17 Jan 2019 07:16:05 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 07:16:05 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPAAAHjuYA== Date: Thu, 17 Jan 2019 07:16:05 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2455; 6:Zu/TMX/e6+IZXiPn4slj1kPnEFO71xv2x3RebeMh/+d0edanQgLUKkEvN1rZ63yvdF3sH5WjsKJbOQ4FEjrFQDRVRHWApFrIQMFUs0w4iKXbdN+wa4uZ9oC7jtb4xdtyzfgw/iBDskRV9SHdZFRC+G0hD+yVPRGxKk3ya21whA+ZK2ZFUbvPLbJc9NVmw77o6snezpl4tGNPwnG1V8zHD0xbx9Sc2oA5Tqf27QQU6CQ+qf/PXrT4vYKim2b7+FLN0vph+vWZ+MCQtn2b6zTWHOpJQT/6Vzl2etSmtGb8blfkNxAFVn2tWlal5BmfQu8K6KVz6Ot5AaeWinsF/Gvp0zD7lZqE/TxRpk4TxpiloWSRIaGMOXTZTcE7rnoxLpZBbDSJ3hzkUBXVSZtB7dXJJusLumeKLeMGokmwRbJY1JcHQAHvaBoil7RpT4KdJPb+CBRGocwCdXdnONPMDYZwqA==; 5:w+rUPx2mPY1riWiJouWWwKYDX5XbIxkRKOGE+v2sdzUm01jIaI4pjd/WTmmplO9U6Ny7EwANs5k4hejyGWL9pNMKJYPEahg1GECiXsiy/JDG1MGC5gNe1nTLT7eM8EiYzeBGHKiPfE8U3jDcBtJYcn11n/1BWnBmM/Yy1tYjxduf6B1ko7ZJmm0XC4ZgmnGPeezcBASAlYx4nnfcuXFVTQ==; 7:LBXIBfQdlkwUtsf5dYrb4aHexY4s9uDiZKa3gC/YZOH8kr7Ys4yyFDlzI5sIl2c43U+SJH0RL57++hLsPeL5Tt0fFMsZH8zSOM4EfCT/jp4weaZGg1y2PQiE9zeUajlKD9M7lsLs4m6ljcgZ4SL/9A== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 88962d32-38a9-48fc-c431-08d67c4ba530 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2455; x-ms-traffictypediagnostic: BYAPR16MB2455: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(39860400002)(366004)(376002)(136003)(396003)(32952001)(189003)(55784004)(199004)(13464003)(33656002)(486006)(76176011)(86362001)(6246003)(476003)(478600001)(6306002)(66066001)(11346002)(71190400001)(446003)(2171002)(26005)(6506007)(102836004)(9686003)(53546011)(4326008)(2501003)(72206003)(53936002)(14454004)(5660300001)(74316002)(71200400001)(7696005)(2906002)(6436002)(966005)(5024004)(99286004)(14444005)(256004)(110136005)(105586002)(6116002)(186003)(106356001)(25786009)(229853002)(3846002)(316002)(80792005)(68736007)(55016002)(8676002)(97736004)(81156014)(8936002)(81166006)(305945005)(7736002)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2455; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: dfl9+3LywG++vn8EUa571qwucISQi45292hJvkg5oBWvC+jcBksEY1kRujAMtNorUdqL/CtIqzBCjJJREbYKtmo/hvrV3669Izy0f8ro0hawZt/ZxxQz5u+/Ckjdjp1ZbFQH4cWxdoX2vk66rdjN1o17BA1vZg0HCpFVG7LT+Q3zp3txHWW59WACVI0WRefu9beXCHwtNVpgFvQ7TLP0wHyi+u9WnoLM7c6Ws/HDyIFan7Fc3ASObQve9dk2gGS1FPXc3iyOJUEE7LVmZc2Ag+07z4S9DkBSp9SGaV4ELQVULyyroWV6V753krsoiuBEaGFySZNULvfuGW0IOO87IPZvLY0G4Vcrn9rjYdd9sR2QAO1gGlcqQkg3NvOVeFQhkZ3pFE4blizPt2hSFaexw+rqDY7moVwTTTBSEu/TZvc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 88962d32-38a9-48fc-c431-08d67c4ba530 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 07:16:05.4321 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2455 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6462> : inlines <6996> : streams <1810320> : uri <2781189> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 07:20:40 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tDQo+IDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiBTZW50OiBUaHVy c2RheSwgSmFudWFyeSAxNywgMjAxOSAxMjozMyBQTQ0KPiBUbzogS29uZGEsIFRpcnVtYWxlc3dh ciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+IEJlbmphbWlu IEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGll dGYub3JnDQo+IENjOiBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJFOiBBRCByZXZpZXcgb2Yg ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgxc3QgUGFydCkNCj4gDQo+IA0KPiAN Cj4gSGkgVGlydSwNCj4gDQo+IEFzIHlvdSBrbm93IFJGQzgzMDUgb2Jzb2xldGVzIFJGQzY1NTUu DQo+IA0KPiBJIGZhaWwgdG8gc2VlIHdoZXJlIGNhY2hpbmcgcmVzdWx0cyBpcyBtZW50aW9uZWQg aW4gODMwNS4gRG8geW91Pw0KDQpUaG91Z2ggUkZDODAzNSBvYnNvbGV0ZXMgUkZDNjU1NSwgaXQg aXMgc3RpbGwgY29tcGF0aWJsZSB3aXRoIFJGQzY1NTUgKHNlZSBodHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvcmZjODMwNSNhcHBlbmRpeC1BKS4gDQpJdCBpcyB1c2VmdWwgdG8gY2FjaGUgdGhl IGhhcHB5IGV5ZWJhbGwgcmVzdWx0cyBmb3IgYSBzcGVjaWZpYyB0aW1lLg0KDQotVGlydQ0KDQo+ IA0KPiBDaGVlcnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0N Cj4gPiBEZcKgOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gW21haWx0bzpUaXJ1bWFs ZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiA+IEVudm95w6nCoDogbWVyY3JlZGkgMTYg amFudmllciAyMDE5IDEyOjExIMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE47DQo+ID4g QmVuamFtaW4gS2FkdWs7IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtIGNoYW5uZWxAaWV0Zi5vcmcg Q2PCoDoNCj4gPiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJFOiBBRCByZXZpZXcgb2YNCj4gPiBk cmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdCBQYXJ0KQ0KPiA+DQo+ID4gSGkg TWVkLA0KPiA+DQo+ID4gUGxlYXNlIHNlZSBpbmxpbmUNCj4gPg0KPiA+ID4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4g T24gQmVoYWxmIE9mDQo+ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiBT ZW50OiBXZWRuZXNkYXksIEphbnVhcnkgMTYsIDIwMTkgMTozMCBQTQ0KPiA+ID4gVG86IEJlbmph bWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gPiA+ IGNoYW5uZWxAaWV0Zi5vcmcNCj4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPiBTdWJqZWN0 OiBSZTogW0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt MjUNCj4gPiA+ICgxc3QNCj4gPiBQYXJ0KQ0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoZXNlIGNvbm5lY3Rpb24gYXR0ZW1wdHMgYXJl DQo+ID4gPiA+ICAgIHBlcmZvcm1lZCBieSB0aGUgRE9UUyBjbGllbnQgd2hlbiBpdCBpbml0aWFs aXplcy4gIFRoZSByZXN1bHRzIG9mIHRoZQ0KPiA+ID4gPiAgICBIYXBweSBFeWViYWxscyBwcm9j ZWR1cmUgYXJlIHVzZWQgYnkgdGhlIERPVFMgY2xpZW50IGZvciBzZW5kaW5nIGl0cw0KPiA+ID4g PiAgICBzdWJzZXF1ZW50IG1lc3NhZ2VzIHRvIHRoZSBET1RTIHNlcnZlci4NCj4gPiA+ID4NCj4g PiA+ID4gSSBzZWUgdGhpcyBpcyBzY29wZWQgdG8gIndoZW4gdGhlIGNsaWVudCBpbml0aWFsaXpl cyIsIHNvIEkgZG9uJ3QNCj4gPiA+ID4ga25vdyB3aGV0aGVyIGl0IGFkZHMgbW9yZSBvciBub3Qg dG8gZW5kIHdpdGggImZvciB0aGUgZHVyYXRpb24gb2YNCj4gPiA+ID4gdGhlIERPVFMgc2Vzc2lv biIgb3Igc29tZSBzaW1pbGFyIHNjb3BpbmcgZm9yIHRoZSBjYWNoaW5nIG9mIHRoZQ0KPiA+ID4g PiBoYXBweSBleWViYWxscyByZXN1bHRzLg0KPiA+ID4NCj4gPiA+IFtNZWRdIFRoZSBjb25uZWN0 aW9uIGF0dGVtcHRzIGFyZSBwZXJmb3JtZWQgZWFjaCB0aW1lIHRoZSBjbGllbnQgaGFzDQo+ID4g PiB0byBzZWxlY3QgYW1vbmcgYSBsaXN0IG9mIHY0LCB2NiAodGxzLCBkdGxzKS4gVGhpcyBpcyBw YXJ0aWN1bGFybHkNCj4gPiA+IHRydWUgd2hlbg0KPiA+IHRoZSBjbGllbnQNCj4gPiA+IGluaXRp YXRlcywgYnV0IHRoaXMgbWF5IGFsc28gYmUgdHJ1ZSBlYWNoIHRpbWUgdGhlIGNsaWVudCBoYXMg dG8NCj4gPiA+IHNlbGVjdA0KPiA+IGFtb25nDQo+ID4gPiB2NCwgdjYsIERUTFMsIFRMUyAoZS5n LiwgdGhlIGNsaWVudCBhdHRhY2hlcyB0byBhIG5ldyBuZXR3b3JrKS4NCj4gPiA+DQo+ID4gPiBJ IHVwZGF0ZWQgdGhlIHRleHQgdG86DQo+ID4gPg0KPiA+ID4gIlRoZXNlIGNvbm5lY3Rpb24gYXR0 ZW1wdHMgYXJlIHBlcmZvcm1lZCBieSB0aGUgRE9UUyBjbGllbnQgd2hlbiBpdA0KPiA+ID4gaW5p dGlhbGl6ZXMsIG9yIGluIGdlbmVyYWwgd2hlbiBpdCBoYXMgdG8gc2VsZWN0IGFuIGFkZHJlc3Mg ZmFtaWx5DQo+ID4gPiBhbmQNCj4gPiB0cmFuc3BvcnQNCj4gPiA+IHRvIGNvbnRhY3QgaXRzIERP VFMgc2VydmVyLiINCj4gPg0KPiA+IEhhcHB5IGV5ZWJhbGxzIG1hbmRhdGVzIGNhY2hpbmcgdGhl IHJlc3VsdHMsIHNlZQ0KPiA+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM2NTU1I3Nl Y3Rpb24tNCAodG8gYXZvaWQgdGhyYXNoaW5nIHRoZQ0KPiA+IG5ldHdvcmspLg0KPiA+IFdlIG1h eSB3YW50IHRvIHVwZGF0ZSB0aGUgYWJvdmUgbGluZSBhY2NvcmRpbmdseS4NCj4gPg0KPiA+IENo ZWVycywNCj4gPiAtVGlydQ0K From nobody Wed Jan 16 23:25:10 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CE97130DE5; Wed, 16 Jan 2019 23:25:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rkIzNtB3UIiE; Wed, 16 Jan 2019 23:25:06 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7ABE312D4EA; Wed, 16 Jan 2019 23:25:05 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547709784; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=G85IEPUO6dO5LfHckB4n51yhuMImZTpuPNP/SN K4se0=; b=e8R0KTYSIMjDIJCbPKxu32Aau8lU3TXnKGaskeIa 4Wy1cYDWWyVCjdygb4Ah+J/bHUgTDzy7MMjt/n9pY1f8h2NbuB Usi10AOXb/MEm50LF7Kvu0YHP5bJmP+AMUe+j9l6vysalf+/vI 4nXqODCP7gsQy7uxbpQy7GRoKs3reic= Received: from DNVEXAPP1N05.corpzone.internalzone.com (DNVEXAPP1N05.corpzone.internalzone.com [10.44.48.89]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6832_1354_81ad5cb1_1cd3_400e_a509_adb8cb8c21b5; Thu, 17 Jan 2019 01:23:03 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 00:20:43 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 00:20:43 -0700 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 00:20:41 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2837.namprd16.prod.outlook.com (20.178.234.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 07:20:40 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 07:20:40 +0000 From: "Konda, Tirumaleswar Reddy" To: Benjamin Kaduk CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (3rd Part) Thread-Index: AdStnwkIYLnL/STeQyWYhz1QpkBSPgAA8dOQABXjZoAADfjEUA== Date: Thu, 17 Jan 2019 07:20:40 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190117001952.GN91727@kduck.mit.edu> In-Reply-To: <20190117001952.GN91727@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2837; 6:n23jtpFnsOpmZNN7x0pi6kPxehg9AhleqW5P+LSDMsf+VxrQtmzM7Ma89VoVWeQaZb/EV0tRplJcmYkvVUVvLFqyvUfXB3bihDm5G3M2a9KXVxfUt0Wb1nkEJyi/jasWqXslwTeGEzQmpN2O5CSGNKlpCr8Lh/0Kgq5V+GLE2Vjz61/tm/qSZNSMhpnfAfrML2XkYZuu4IXubWriqy3i9RjgUZXXsDgCdlQFvEW1v+IVJgIcsW0x7YvSOsl7FHH6mUhIf/YC+WqZBYaz6mAD5cP6zPA2cqVMHcYBAjTNSXcV62ZEFyYYzvrkMDhP0OhS9W5aJnpBKcK3S6nsqSccSFJ84zNni/OqDoDCPHm0F+HE9Z9Qub2WrJwNxK4wuFHCYp8dk2XzP/FStS3N3eBa6oF4iwlM0iBsfzvRMLoUvQgyQDHiBHOIdGDaPZJyTVl+4F7Oh4Jz29N/Lpqcy9S19Q==; 5:Tcza2+zrA80rW1HGE/a+in436OJYd/XfaNd1C+TB4cDOzTUvQCzTu689CWIq8Cv9pMgIcftfUZmI5YSoqM5vFt8vJJYXL7o3U5/x7PEaM7OU/QooW2wTi4tRRn9coIRJMr4OycwE+LoiK5RT1ltWwPYOfVsLMMXDMojD3wLJW8ss9w8GSFNeY0iQAbatLBUmZCeJWR3ZDN/9KZSvTTYX0Q==; 7:43hbviy4RVsfmKz3buAiSjG9nQctnxnvF6sjHKWj8ym4Q2427YRaLxo3srIw22IWdC6p6r4Xw7uCch72r+wwO8tenmYFEYa/8pq7p3T9yTZ77los3RUNUyi2QGAIYqIp75t9Xq6bKjKB1sKQ/O5y8Q== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 96cda7ce-503d-4210-e7f6-08d67c4c48e5 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600109)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2837; x-ms-traffictypediagnostic: BYAPR16MB2837: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(346002)(39860400002)(136003)(376002)(366004)(13464003)(189003)(32952001)(55784004)(199004)(51914003)(6246003)(229853002)(80792005)(72206003)(6506007)(2171002)(53546011)(102836004)(6116002)(54906003)(486006)(478600001)(30864003)(97736004)(74316002)(3846002)(99286004)(7696005)(33656002)(14454004)(6436002)(8676002)(81156014)(5660300001)(4326008)(6916009)(81166006)(25786009)(55016002)(7736002)(305945005)(105586002)(76176011)(476003)(11346002)(71190400001)(446003)(71200400001)(8936002)(106356001)(66066001)(9686003)(316002)(186003)(256004)(2906002)(5024004)(14444005)(53936002)(26005)(68736007)(86362001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2837; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: JeKnnMKd8kSTHjUrV9PIYCsm6ibbdygXQ9bMYHmr0sJJBkVsjUKS+LCZ82W1ikbW4HZg5iz9FtJyV/wk2rrRScThk5FeheOyZ5yJuL4YdNIlXJcFIBStZwM2fR7+4FlX+3Mdu1P6B5+4KKoiRopTnCz0SQf3YKl/Yeo68ZmC9rsq2ZzfmzUhSn6pZx9SIUSAZBrgv0DljUnoJdx8Ykf8O+pe38zxFh0wSGM3ffRKqK7xWMr0aQ5sdhzI/kfO3TSvk/gJZzUl4PDDEuR4sPysxzMlbRVuWZymMVd5c85mLPQciFI5gf0NMAUxEcdhx7D/b/EnXPjj9A1WS/9UYuAp2+EhnS0DqVXiH/nE7h47rZT8WwgVSZSndXl8iPDUMDQbUtTE34EQJCIeB382MqwhmlZvWgwNY85+ljvT85Dv7u0= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 96cda7ce-503d-4210-e7f6-08d67c4c48e5 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 07:20:40.0738 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2837 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6462> : inlines <6996> : streams <1810320> : uri <2781189> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 07:25:09 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2Fk dWtAbWl0LmVkdT4NCj4gU2VudDogVGh1cnNkYXksIEphbnVhcnkgMTcsIDIwMTkgNTo1MCBBTQ0K PiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFA TWNBZmVlLmNvbT4NCj4gQ2M6IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRyYWZ0LWll dGYtZG90cy1zaWduYWwtDQo+IGNoYW5uZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcNCj4gU3Vi amVjdDogUmU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUg KDNyZCBQYXJ0KQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0 aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2htZW50 cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlz DQo+IHNhZmUuDQo+IA0KPiBPbiBXZWQsIEphbiAxNiwgMjAxOSBhdCAwMTo1ODozMFBNICswMDAw LCBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQo+IHdyb3RlOg0KPiA+ID4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4g T24gQmVoYWxmIE9mDQo+ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiBT ZW50OiBXZWRuZXNkYXksIEphbnVhcnkgMTYsIDIwMTkgNjo1NiBQTQ0KPiA+ID4gVG86IEJlbmph bWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PjsgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gPiA+ IGNoYW5uZWxAaWV0Zi5vcmcNCj4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPiBTdWJqZWN0 OiBSZTogW0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt MjUNCj4gPiA+ICgzcmQgUGFydCkNCj4gPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+IFJlLSwNCj4g PiA+DQo+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+DQo+ID4gPiBDaGVlcnMsDQo+ID4g PiBNZWQNCj4gPiA+DQo+ID4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4g PiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDog bWVyY3JlZGkgMTYNCj4gPiA+ID4gamFudmllciAyMDE5IDAxOjE0IMOAwqA6IGRyYWZ0LWlldGYt ZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiA+ID4gPiBDY8KgOiBkb3RzQGlldGYub3Jn DQo+ID4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMjUNCj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUbyBhdm9pZCBtYWludGFpbmluZyBhDQo+ID4g PiA+ICAgIGxvbmcgbGlzdCBvZiBvdmVybGFwcGluZyBtaXRpZ2F0aW9uIHJlcXVlc3RzIChpLmUu LCByZXF1ZXN0cyB3aXRoIHRoZQ0KPiA+ID4gPiAgICBzYW1lICd0cmlnZ2VyLW1pdGlnYXRpb24n IHR5cGUgYW5kIG92ZXJsYXBwaW5nIHNjb3BlcykgZnJvbSBhIERPVFMNCj4gPiA+ID4gICAgY2xp ZW50IGFuZCBhdm9pZCBlcnJvci1wcm9uZSBwcm92aXNpb25pbmcgb2YgbWl0aWdhdGlvbiByZXF1 ZXN0cyBmcm9tDQo+ID4gPiA+ICAgIGEgRE9UUyBjbGllbnQsIHRoZSBvdmVybGFwcGVkIGxvd2Vy IG51bWVyaWMgJ21pZCcgTVVTVCBiZQ0KPiA+ID4gPiAgICBhdXRvbWF0aWNhbGx5IGRlbGV0ZWQg YW5kIG5vIGxvbmdlciBhdmFpbGFibGUgYXQgdGhlIERPVFMgc2VydmVyLg0KPiA+ID4gPiAgICBG b3IgZXhhbXBsZSwgaWYgdGhlIERPVFMgc2VydmVyIHJlY2VpdmVzIGEgbWl0aWdhdGlvbiByZXF1 ZXN0IHdoaWNoDQo+ID4gPiA+ICAgIG92ZXJsYXBzIHdpdGggYW4gZXhpc3RpbmcgbWl0aWdhdGlv biB3aXRoIGEgaGlnaGVyIG51bWVyaWMgJ21pZCcsIHRoZQ0KPiA+ID4gPiAgICBET1RTIHNlcnZl ciByZWplY3RzIHRoZSByZXF1ZXN0IGJ5IHJldHVybmluZyA0LjA5IChDb25mbGljdCkgdG8gdGhl DQo+ID4gPiA+ICAgIERPVFMgY2xpZW50LiAgWy4uLl0NCj4gPiA+ID4NCj4gPiA+ID4gVGhpcyBz ZWVtcyB0byBiZSBpbnRlcm5hbGx5IGluY29uc2lzdGVudCAtLSBmaXJzdCB3ZSBoZWFyIHRoYXQg dGhlDQo+ID4gPiA+IG92ZXJsYXBwZWQgbWl0aWdhdGlvbiByZXF1ZXN0IHdpdGggbG93ZXIgJ21p ZCcgTVVTVCBiZSBkZWxldGVkDQo+ID4gPiA+IChCVFcsIG5vdGUgbXkgcmV3b3JkaW5nKSwgYnV0 IGF0IHRoZSBlbmQgd2UgYXJlIGhlYXJpbmcgdGhhdCBhDQo+ID4gPiA+IHJlcXVlc3QgdG8gY3Jl YXRlIGFuIG92ZXJsYXBwaW5nIG1pdGdpYXRpb24gbXVzdCBiZSByZWplY3RlZA0KPiA+DQo+ID4N Cj4gPiBUaGUgZXhhbXBsZSBpcyBkaXNjdXNzaW5nIG91dCBvZiBvcmRlciBkZWxpdmVyeSBvZiBt aXRpZ2F0aW9uIHJlcXVlc3RzDQo+ID4gKERPVFMgY2xpZW50IHNlbmRzIGxvd2VyIG51bWVyaWMg J21pZCcgZm9sbG93ZWQgYnkgaGlnaGVyIG51bWVyaWMgJ21pZCcNCj4gYnV0IHRoZSBET1RTIHNl cnZlciByZWNlaXZlcyB0aGUgaGlnaGVyIG51bWVyaWMgJ21pZCcgZmlyc3QgYW5kIGFjY2VwdHMg dGhlDQo+IHJlcXVlc3QuIEF0IGEgbGF0ZXIgcG9pbnQgb2YgdGltZSwgd2hlbiB0aGUgc2VydmVy IHJlY2VpdmVzIHRoZSBsb3dlciBudW1lcmljDQo+ICdtaWQnLCB0aGUgcmVxdWVzdCBpcyByZWpl Y3RlZCBieSB0aGUgc2VydmVyIHdpdGggNC4wOSBlcnJvciByZXNwb25zZS4NCj4gDQo+IEFoLCBJ IGd1ZXNzIEkgd2FzIHJlYWRpbmcgdG9vIGZhc3Q7IHRoaXMgaXMgYWxyZWFkeSBjbGVhcmx5IHNw ZWxsZWQgb3V0Lg0KPiANCj4gPiAtVGlydQ0KPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gSXQgaXMg cmVqZWN0ZWQgYmVjYXVzZSBpdCBoYXMgYSBsb3dlciBudW1lcmljICdtaWQnLg0KPiA+ID4NCj4g PiA+IC4uICAoQSBjb3VwbGUgcGFnZXMNCj4gPiA+ID4gbGF0ZXIgd2UgYWxzbyBzYXkgImNhbiBi ZSBhY2hpZXZlZCBieSBzZW5kaW5nIGEgUFVUIHJlcXVlc3QgWy4uLl0NCj4gPiA+ID4gdGhhdCB3 aWxsIG92ZXJyaWRlIHRoZSBleGlzdGluZyBvbmUgd2l0aCBvdmVybGFwcGluZyBtaXRpZ2F0aW9u IHNjb3BlcyINCj4gPiA+DQo+ID4gPiBbTWVkXSBZZXMsIHRoZSBuZXcgb25lIHdpbGwgaGF2ZSBh IGhpZ2hlciAnbWlkJy4NCj4gPiA+DQo+ID4gPiAsDQo+ID4gPiA+IHdoaWNoIHN1Z2dlc3RzIGEg cmVzb2x1dGlvbiBvZiB0aGUgY29uZmxpY3QuDQo+ID4gPg0KPiA+ID4gW01lZF0gSSBkb24ndCBz ZWUgYW55IGluY29uc2lzdGVuY3kuIFBsZWFzZSBjbGFyaWZ5IGlmIEkgbWlzc2VkIHlvdXIgcG9p bnQuDQo+IA0KPiBUaXJ1IGdvdCBpdCAtLSBlcnJvciBvbiBteSBwYXJ0Lg0KPiANCj4gPiA+ID4N Cj4gPiA+ID4gICAgICAgICAgICAgICAgICBUaGUgcmVzcG9uc2UgaW5jbHVkZXMgZW5vdWdoIGlu Zm9ybWF0aW9uIGZvciBhIERPVFMNCj4gPiA+ID4gICAgY2xpZW50IHRvIHJlY29nbml6ZSB0aGUg c291cmNlIG9mIHRoZSBjb25mbGljdCBhcyBkZXNjcmliZWQgYmVsb3c6DQo+ID4gPiA+DQo+ID4g PiA+ICAgIGNvbmZsaWN0LWluZm9ybWF0aW9uOiAgSW5kaWNhdGVzIHRoYXQgYSBtaXRpZ2F0aW9u IHJlcXVlc3QgaXMNCj4gPiA+ID4gICAgWy4uLl0NCj4gPiA+ID4NCj4gPiA+ID4gSSdtIG5vdCBl bnRpcmVseSBzdXJlIHdoYXQgZW5jb2RpbmcgdG8gaW5mZXIgZnJvbSBqdXN0IHRoaXMNCj4gPiA+ ID4gZGVzY3JpcHRpb24NCj4gPiA+ID4gLS0gY29uZmxpY3QtaW5mb3JtYXRpb24vLWNhdXNlLy1z Y29wZSBhcmUgaW4gdGhlIFlBTkcgbW9kZWwsIGJ1dA0KPiA+ID4gPiBkbyB3ZSBuZWVkIHRvIHNh eSB0aGF0IHRoZSByZXNwb25zZSBjb250YWlucyBhIENCT1IgcmVwcmVzZW50YXRpb24NCj4gPiA+ ID4gb2YgdGhlIHN1YnRyZWUgc3RhcnRpbmcgYXQgY29uZmxpY3QtaW5mb3JtYXRpb24gKG9yIHNv bWV0aGluZyBsaWtlDQo+ID4gPiA+IHRoYXQpLCBvciBpcyB0aGlzIGltcGxpY2l0bHkgc3BlY2lm aWVkIGVsc2V3aGVyZSBpbiB0aGUgZG9jdW1lbnQ/DQo+ID4gPiA+IEZvciBleGFtcGxlLCBGaWd1 cmUgOSBoYXMgYW4gZXhwbGljaXQgSlNPTiBkaWFnbm9zdGljIG5vdGF0aW9uIGZvcg0KPiA+ID4g PiBhIG1lc3NhZ2UgcmVzcG9uc2UuDQo+ID4gPg0KPiA+ID4gW01lZF0gVGhpcyBpcyBjb3ZlcmVk IGJ5IHRoaXMgdGV4dDoNCj4gPiA+DQo+ID4gPiAgICBUaGhpcyBkb2N1bWVudCBzcGVjaWZpZXMg YSBZQU5HIG1vZHVsZSBmb3INCj4gPiA+ICAgIHJlcHJlc2VudGluZyBET1RTIG1pdGlnYXRpb24g c2NvcGVzLCBET1RTIHNpZ25hbCBjaGFubmVsIHNlc3Npb24NCj4gPiA+ICAgIGNvbmZpZ3VyYXRp b24gZGF0YSwgYW5kIERPVFMgcmVkaXJlY3RlZCBzaWduYWxsaW5nIChTZWN0aW9uIDUpLg0KPiA+ ID4gICAgUmVwcmVzZW50aW5nIHRoZXNlIGRhdGEgYXMgQ0JPUiBkYXRhIGlzIGFzc3VtZWQgdG8g Zm9sbG93IHRoZSBydWxlcw0KPiA+ID4gICAgaW4gW0ktRC5pZXRmLWNvcmUteWFuZy1jYm9yXSBv ciB0aG9zZSBpbiBbUkZDNzk1MV0gY29tYmluZWQgd2l0aA0KPiA+ID4gICAgSlNPTi9DQk9SIGNv bnZlcnNpb24gcnVsZXMgaW4gW1JGQzcwNDldLiAgQWxsIHBhcmFtZXRlcnMgaW4gdGhlDQo+ID4g PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBeXl5eXl5eXl5e Xl5eXl5eXl5eXl5eDQo+ID4gPiAgICBwYXlsb2FkIG9mIHRoZSBET1RTIHNpZ25hbCBjaGFubmVs IGFyZSBtYXBwZWQgdG8gQ0JPUiB0eXBlcyBhcw0KPiA+ID4NCj4gXl5eXl5eXl5eXl5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl4NCj4gPiA+ICAgIHNw ZWNpZmllZCBpbiBTZWN0aW9uIDYuDQo+ID4gPiAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eDQo+ IA0KPiBJIHdvdWxkIHN0aWxsIHByZWZlciB0byBzZWUgc29tZXRoaW5nIGxpa2UgImFzIGRlc2Ny aWJlZCBiZWxvdyBpbiB0aGUgJ2NvbmZsaWN0LQ0KPiBpbmZvcm1hdGlvbicgc3VidHJlZSB3aXRo IG9ubHkgdGhlIHJlbGV2YW50IG5vZGVzIGxpc3RlZCIsIHRvIHRyeSB0byBmb3Jlc3RhbGwNCj4g YW55IG90aGVyIGNvbW1lbnRzIGZyb20gZGlyZWN0b3JhdGUgcmV2aWV3cy4NCj4gDQo+ID4gPiA+ DQo+ID4gPiA+ICAgICAgIGNvbmZsaWN0LXNjb3BlOiAgSW5kaWNhdGVzIHRoZSBjb25mbGljdCBz Y29wZS4gIEl0IG1heSBpbmNsdWRlIGENCj4gPiA+ID4gICAgICAgICAgbGlzdCBvZiBJUCBhZGRy ZXNzZXMsIGEgbGlzdCBvZiBwcmVmaXhlcywgYSBsaXN0IG9mIHBvcnQNCj4gPiA+ID4gICAgICAg ICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMsIGEgbGlzdCBvZiBGUUROcywg YSBsaXN0IG9mDQo+ID4gPiA+ICAgICAgICAgIFVSSXMsIGEgbGlzdCBvZiBhbGlhcy1uYW1lcywg b3IgYSAnbWlkJy4NCj4gPiA+ID4NCj4gPiA+ID4gVGhpcyBmZWVscyBhIGxpdHRsZSB1bmRlci1z cGVjaWZpZWQgLS0gZG8gd2UgbmVlZCB0byBpbmNsdWRlDQo+ID4gPiA+IGV4YWN0bHkgdGhlIGNv bmZsaWN0aW5nIGVudHJpZXM/ICBPciB3b3VsZCB3ZSBqdXN0IHNheSBzb21ldGhpbmcNCj4gPiA+ ID4gbGlrZSAidGhpcyBjb25mbGljdHMgd2l0aCAnbWlkJyA4OyBmaWd1cmUgaXQgb3V0Ij8NCj4g PiA+DQo+ID4gPiBbTWVkXSBUaGlzIGNsYXVzZSBpbmRpY2F0ZXMgdGhlIGV4YWN0IGNvbmZsaWN0 IHNjb3BlLiBJdCBtYXkgYmUgZm9yDQo+IGV4YW1wbGU6DQo+ID4gPiAtIGEgY29uZmxpY3Qgb2Yg SVAgYWRkcmVzc2VzLiBUaGVuLCB0aGUgdGFyZ2V0IGFkZHJlc3NlcyBpbiBjb25mbGljdA0KPiA+ ID4gYXJlIHJldHVybmVkLg0KPiA+ID4gLSBhIGNvbmZsaWN0IHdpdGggYW5vdGhlciByZXF1ZXN0 LCB0aGVuIHRoZSBtaWQgb2YgdGhhdCByZXF1ZXN0IGlzDQo+ID4gPiByZXR1cm5lZA0KPiA+ID4g LSBldGMuDQo+ID4gPg0KPiA+ID4gV2UgY2FuIHVwZGF0ZSB0aGUgdGV4dCBhcyBmb2xsb3dzOg0K PiA+ID4NCj4gPiA+ICAgICAgIGNvbmZsaWN0LXNjb3BlOiAgQ2hhcmFjdGVyaXplcyB0aGUgZXhh Y3QgY29uZmxpY3Qgc2NvcGUuICBJdCBtYXkgaW5jbHVkZQ0KPiBhDQo+ID4gPiAgICAgICAgICAg ICAgICAgICAgICAgIF5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXg0KPiA+ID4gICAgICAgICAgIGxp c3Qgb2YgSVAgYWRkcmVzc2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBvZiBwb3J0DQo+ ID4gPiAgICAgICAgICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMsIGEgbGlz dCBvZiBGUUROcywgYSBsaXN0IG9mDQo+ID4gPiAgICAgICAgICAgVVJJcywgYSBsaXN0IG9mIGFs aWFzLW5hbWVzLCBvciBhICdtaWQnLg0KPiANCj4gVGhhdCdzIHByb2JhYmx5IGEgY2xhcmlmaWNh dGlvbiB3b3J0aCBtYWtpbmcsIHRoYW5rcy4NCj4gDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAg ICAgICAgICAzOiAgQ1VJRCBDb2xsaXNpb24uICBUaGlzIGNvZGUgaXMgcmV0dXJuZWQgd2hlbiBh IERPVFMgY2xpZW50DQo+ID4gPiA+ICAgICAgICAgICAgICB1c2VzIGEgJ2N1aWQnIHRoYXQgaXMg YWxyZWFkeSB1c2VkIGJ5IGFub3RoZXIgRE9UUyBjbGllbnQuDQo+ID4gPiA+ICAgICAgICAgICAg ICBUaGlzIGNvZGUgaXMgYW4gaW5kaWNhdGlvbiB0aGF0IHRoZSByZXF1ZXN0IGhhcyBiZWVuDQo+ ID4gPiA+ICAgICAgICAgICAgICByZWplY3RlZCBhbmQgYSBuZXcgcmVxdWVzdCB3aXRoIGEgbmV3 ICdjdWlkJyBpcyB0byBiZSByZS0NCj4gPiA+ID4gICAgICAgICAgICAgIHNlbnQgYnkgdGhlIERP VFMgY2xpZW50LiAgTm90ZSB0aGF0ICdjb25mbGljdC1zdGF0dXMnLA0KPiA+ID4gPiAgICAgICAg ICAgICAgJ2NvbmZsaWN0LXNjb3BlJywgYW5kICdyZXRyeS10aW1lcicgYXJlIG5vdCByZXR1cm5l ZCBpbiB0aGUNCj4gPiA+ID4gICAgICAgICAgICAgIGVycm9yIHJlc3BvbnNlLg0KPiA+ID4gPg0K PiA+ID4gPiAoRG8gd2Ugd2FudCAiTVVTVCBOT1QiIDIxMTkgbGFuZ3VhZ2UgdG8gcHJldmVudCB0 aGVpciBpbmNsdXNpb24gb3INCj4gPiA+ID4gaXMgdGhlIGN1cnJlbnQgZGVzY3JpcHRpdmUgbGFu Z3VhZ2Ugc3VmZmljaWVudD8pDQo+ID4gPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gT0suDQo+ID4g Pg0KPiA+ID4gPiAgICAgICBjb25mbGljdC1zY29wZTogIEluZGljYXRlcyB0aGUgY29uZmxpY3Qg c2NvcGUuICBJdCBtYXkgaW5jbHVkZSBhDQo+ID4gPiA+ICAgICAgICAgIGxpc3Qgb2YgSVAgYWRk cmVzc2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBvZiBwb3J0DQo+ID4gPiA+ICAgICAg ICAgIG51bWJlcnMsIGEgbGlzdCBvZiB0YXJnZXQgcHJvdG9jb2xzLCBhIGxpc3Qgb2YgRlFETnMs IGEgbGlzdCBvZg0KPiA+ID4gPiAgICAgICAgICBVUklzLCBhIGxpc3Qgb2YgYWxpYXMtbmFtZXMs IG9yIHJlZmVyZW5jZXMgdG8gY29uZmxpY3RpbmcgQUNMcy4NCj4gPiA+ID4NCj4gPiA+ID4gSG93 IGRvIEkgcmVmZXJlbmNlIGFuIEFDTD8NCj4gPiA+DQo+ID4gPiBbTWVkXSBCeSBhbiBhY2wtbmFt ZS4gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvIGhpbnQgdGhpczoNCj4gPiA+DQo+ID4gPiAiKGJ5IGFu ICdhY2wtbmFtZScsIHR5cGljYWxseSBbSS1ELmlldGYtZG90cy1kYXRhLWNoYW5uZWxdKSINCj4g DQo+IEFoLCB0aGFua3MuDQo+IA0KPiA+ID4gPg0KPiA+ID4gPiAgICAgICAgICAgICAgICAgICAg ICAgICAgIFRoaXMgY2FuIGJlIGFjaGlldmVkIGJ5IHNlbmRpbmcgYSBQVVQgcmVxdWVzdA0KPiA+ ID4gPiAgICB3aXRoIGEgbmV3ICdtaWQnIHZhbHVlIHRoYXQgd2lsbCBvdmVycmlkZSB0aGUgZXhp c3Rpbmcgb25lIHdpdGgNCj4gPiA+ID4gICAgb3ZlcmxhcHBpbmcgbWl0aWdhdGlvbiBzY29wZXMu DQo+ID4gPiA+DQo+ID4gPiA+IERvIHdlIHdhbnQgdG8gcmVpdGVyYXRlIHRoYXQgdGhlIGV4aXN0 aW5nIG9uZSB3aWxsIGJlIGRlbGV0ZWQ/DQo+ID4gPg0KPiA+ID4gW01lZF0gVGhlIHRleHQgeW91 IHF1b3RlZCByZW1pbmRzIHRoYXQgdGhlIG5ldyByZXF1ZXN0IHdpbGwgZGVsZXRlDQo+ID4gPiB0 aGUgZXhpc3Rpbmcgb25lLg0KPiANCj4gSSB3YXMgdGhpbmtpbmcgdGhhdCBzb21ldGltZXMgdGhl IHdvcmQgIm92ZXJyaWRlIiBtZWFucyB0aGF0IHR3byBpdGVtcyBhcmUNCj4gYm90aCBwcmVzZW50 LCBidXQgb25lIHRha2VzIHByZWNlZGVuY2Ugb3ZlciB0aGUgb3RoZXIgZHVyaW5nIHByb2Nlc3Np bmc7DQo+ICJkZWxldGVkIiB3b3VsZCB0aGVuIG1lYW4gdGhhdCBvbmx5IG9uZSBvZiB0aGUgaXRl bXMgaXMgcHJlc2VudC4NCj4gDQo+ID4gPiA+DQo+ID4gPiA+ICAgIEZvciBhIG1pdGlnYXRpb24g cmVxdWVzdCB0byBjb250aW51ZSBiZXlvbmQgdGhlIGluaXRpYWwgbmVnb3RpYXRlZA0KPiA+ID4g PiAgICBsaWZldGltZSwgdGhlIERPVFMgY2xpZW50IGhhcyB0byByZWZyZXNoIHRoZSBjdXJyZW50 IG1pdGlnYXRpb24NCj4gPiA+ID4gICAgcmVxdWVzdCBieSBzZW5kaW5nIGEgbmV3IFBVVCByZXF1 ZXN0LiAgVGhpcyBQVVQgcmVxdWVzdCBNVVNUIHVzZQ0KPiB0aGUNCj4gPiA+ID4gICAgc2FtZSAn bWlkJyB2YWx1ZSwgYW5kIE1VU1QgcmVwZWF0IGFsbCB0aGUgb3RoZXIgcGFyYW1ldGVycyBhcyBz ZW50DQo+IGluDQo+ID4gPiA+ICAgIHRoZSBvcmlnaW5hbCBtaXRpZ2F0aW9uIHJlcXVlc3QgYXBh cnQgZnJvbSBhIHBvc3NpYmxlIGNoYW5nZSB0byB0aGUNCj4gPiA+ID4gICAgbGlmZXRpbWUgcGFy YW1ldGVyIHZhbHVlLg0KPiA+ID4gPg0KPiA+ID4gPiBJZiB0aGUgc2VydmVyIGRpZCBub3QgaGF2 ZSBhIGNoZWNrIHRoYXQgdGhlIG90aGVyIHBhcmFtZXRlcnMNCj4gPiA+ID4gbWF0Y2gsIHdoYXQg d291bGQgaGFwcGVuPw0KPiA+ID4NCj4gPiA+IFtNZWRdIEEgcmVxdWVzdCBtYXkgYmUgZm9yIGV4 YW1wbGUgaW5hZHZlcnRlbnRseSB0cmFuc2l0aW9uZWQgZnJvbQ0KPiA+ID4gcHJlLSBjb25maWd1 cmVkIHRvIGltbWVkaWF0ZSBhbmQgdmljZSB2ZXJzYS4gVG8gYXZvaWQgc3VjaCBpc3N1ZXMsDQo+ ID4gPiB0aGUgc3BlYyBtYW5kYXRlcyB0aGUgZm9sbG93aW5nOg0KPiA+ID4NCj4gPiA+ICogYSBj bGllbnQgY2FuIGFkanVzdCBpdHMgbWl0aWdhdGlvbiBzY29wZSBieSBzZW5kaW5nIGEgbmV3IG9u ZSB0aGF0DQo+ID4gPiB3aWxsIG92ZXJyaWRlIGFuIGV4aXN0aW5nIG9uZS4NCj4gPiA+ICogYSBj bGllbnQgY2FuIHVwZGF0ZSBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIGJ5IGVjaG9pbmcgdGhlIHNh bWUNCj4gPiA+IHBhcmFtZXRlcnMgYXMgdGhvc2UgaW4gdGhlIGluaXRpYWwgbWl0aWdhdGlvbiBy ZXF1ZXN0Lg0KPiA+ID4NCj4gPiA+IEJ1dCBsZWF2ZSBpdCB0byB0aGUgc2VydmVyIHRvIGRlY2lk ZSBob3cgdG8gaGFuZGxlIHRoZSByZWZyZXNoOg0KPiA+ID4NCj4gPiA+ICAgIElmIHRoZSBET1RT IHNlcnZlciBmaW5kcyB0aGUgJ21pZCcgcGFyYW1ldGVyIHZhbHVlIGNvbnZleWVkIGluIHRoZQ0K PiA+ID4gICAgUFVUIHJlcXVlc3QgaW4gaXRzIGNvbmZpZ3VyYXRpb24gZGF0YSBib3VuZCB0byB0 aGF0IERPVFMgY2xpZW50LCBpdA0KPiA+ID4gICAgTUFZIHVwZGF0ZSB0aGUgbWl0aWdhdGlvbiBy ZXF1ZXN0LCBhbmQgYSAyLjA0IChDaGFuZ2VkKSByZXNwb25zZSBpcw0KPiA+ID4gICAgcmV0dXJu ZWQgdG8gaW5kaWNhdGUgYSBzdWNjZXNzZnVsIHVwZGF0ZSBvZiB0aGUgbWl0aWdhdGlvbiByZXF1 ZXN0Lg0KPiANCj4gVGhhdCBzZWVtcyBjb25zaXN0ZW50IHdpdGggd2hhdCB3ZSBkbyBlbHNld2hl cmUsIHNvIHNvdW5kcyBnb29kLg0KPiANCj4gPiA+ICAgKERvIHdlIG5lZWQgbm9ybWF0aXZlIGxh bmd1YWdlIHRoYXQgdGhlIHNlcnZlciBNVVNUDQo+ID4gPiA+IHZlcmlmeSB0aGUgb3RoZXIgcGFy YW1ldGVycyB3aGVuIHRoZSAnbWlkJyBtYXRjaGVzPykNCj4gPiA+ID4NCj4gPiA+ID4gU2VjdGlv biA0LjQuMg0KPiA+ID4gPg0KPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgIElmIHRo ZSByZXByZXNlbnRhdGlvbiBvZiBhbGwgdGhlIGFjdGl2ZQ0KPiA+ID4gPiAgICBtaXRpZ2F0aW9u IHJlcXVlc3RzIGFzc29jaWF0ZWQgd2l0aCB0aGUgRE9UUyBjbGllbnQgZG9lcyBub3QgZml0DQo+ ID4gPiA+ICAgIHdpdGhpbiBhIHNpbmdsZSBkYXRhZ3JhbSwgdGhlIERPVFMgc2VydmVyIE1VU1Qg dXNlIHRoZSBCbG9jazINCj4gT3B0aW9uDQo+ID4gPiA+ICAgIHdpdGggTlVNID0gMCBpbiB0aGUg R0VUIHJlc3BvbnNlLiAgWy4uLl0NCj4gPiA+ID4NCj4gPiA+ID4gSSdtIG5vdCB2ZXJ5IGZhbWls aWFyIHdpdGggQ29BUCBibG9ja3dpc2UgdHJhbnNmZXJzOyBpcyB0aGlzIGluDQo+ID4gPiA+IGNv bmZsaWN0IHdpdGggc29tZSBub3JtYWwgZmVhdHVyZS1uZWdvdGlhdGlvbiBzY2hlbWUgb3IgaXMg aXQgb2theQ0KPiA+ID4gPiB0byBhc3N1bWUgdGhhdCB0aGUgY2xpZW50IHdpbGwgYmUgYWJsZSB0 byBoYW5kbGUgdGhpcyBldmVuIGlmIHRoZQ0KPiA+ID4gPiBjbGllbnQgaGFzIG5vdCBleHBsaWN0 bHkgaW5kaWNhdGVkIHN1cHBvcnQ/DQo+ID4gPg0KPiA+ID4gW01lZF0gUkZDNzk1OSBpbmRpY2F0 ZXMgdGhlIGZvbGxvd2luZzoNCj4gPiA+DQo+ID4gPiAgICBBIENvQVAgaW1wbGVtZW50YXRpb24g dGhhdCBkb2VzIG5vdCBzdXBwb3J0IHRoZXNlIG9wdGlvbnMgZ2VuZXJhbGx5DQo+ID4gPiAgICBp cyBsaW1pdGVkIGluIHRoZSBzaXplIG9mIHRoZSByZXByZXNlbnRhdGlvbnMgdGhhdCBjYW4gYmUg ZXhjaGFuZ2VkLA0KPiA+ID4gICAgc2VlIFNlY3Rpb24gNC42IG9mIFtSRkM3MjUyXS4gIEV2ZW4g dGhvdWdoIHRoZSBvcHRpb25zIGFyZSBDcml0aWNhbCwNCj4gPiA+ICAgIGEgc2VydmVyIG1heSBk ZWNpZGUgdG8gc3RhcnQgdXNpbmcgdGhlbSBpbiBhbiB1bnNvbGljaXRlZCB3YXkgaW4gYQ0KPiA+ ID4gICAgcmVzcG9uc2UuICBObyBlZmZvcnQgd2FzIGV4cGVuZGVkIHRvIHByb3ZpZGUgYSBjYXBh YmlsaXR5IGluZGljYXRpb24NCj4gPiA+ICAgIG1lY2hhbmlzbSBzdXBwb3J0aW5nIHRoYXQgZGVj aXNpb246IHNpbmNlIHRoZSBibG9jay13aXNlIHRyYW5zZmVyDQo+ID4gPiAgICBtZWNoYW5pc21z IGFyZSBzbyBmdW5kYW1lbnRhbCB0byB0aGUgdXNlIG9mIENvQVAgZm9yIHJlcHJlc2VudGF0aW9u cw0KPiA+ID4gICAgbGFyZ2VyIHRoYW4gYWJvdXQgYSBraWxvYnl0ZSwgdGhlcmUgaXMgYW4gZXhw ZWN0YXRpb24gdGhhdCB0aGV5IGFyZQ0KPiA+ID4gICAgdmVyeSB3aWRlbHkgaW1wbGVtZW50ZWQu DQo+IA0KPiBBaCwgdGhhdCdzIHF1aXRlIGRlY2lzaXZlLiAgVGhhbmtzIGZvciBwb2ludGluZyBt ZSB0byB0aGUgcmVmZXJlbmNlLg0KPiANCj4gPiA+ID4NCj4gPiA+ID4gICAgICAgVGhpcyBpcyBh IG1hbmRhdG9yeSBhdHRyaWJ1dGUgd2hlbiBhbiBhdHRhY2sgbWl0aWdhdGlvbiBpcw0KPiA+ID4g PiAgICAgICB0cmlnZ2VyZWQuICBQYXJ0aWN1bGFybHksICdtaXRpZ2F0aW9uLXN0YXJ0JyBpcyBu b3QgcmV0dXJuZWQgZm9yIGENCj4gPiA+ID4gICAgICAgbWl0aWdhdGlvbiB3aXRoICdzdGF0dXMn IGNvZGUgc2V0IHRvIDguDQo+ID4gPiA+DQo+ID4gPiA+IElzIHRoaXMgYmV0dGVyIGFzICJ0cmln Z2VyZWQiIG9yIGFzICJhY3RpdmUiPw0KPiA+ID4NCj4gPiA+IFtNZWRdIENoYW5nZWQgdGhlIHRl eHQgdG8gIndoZW4gYW4gaW1tZWRpYXRlIGF0dGFjayBtaXRpZ2F0aW9uIGlzDQo+ID4gPiB0cmln Z2VyZWQiLg0KPiANCj4gVGhhdCB0YWtlcyBjYXJlIG9mIHRoZSBkaXNhbWJpZ3VhdGlvbiBJIHdh cyBob3BpbmcgZm9yIC0tIHRoYW5rcyA6KQ0KDQpUaGUgYWJvdmUgY2hhbmdlIGRvZXMgbm90IGxv b2sgY29tcGxldGUsIG1pdGlnYXRpb24tc3RhcnQgaXMgYWxzbyBhIG1hbmRhdG9yeSBhdHRyaWJ1 dGUgd2hlbiBhIHByZS1jb25maWd1cmVkIG1pdGlnYXRpb24gcmVxdWVzdCBpcyB0cmlnZ2VyZWQg YWZ0ZXIgDQp0aGUgRE9UUyBzaWduYWwgY2hhbm5lbCBzZXNzaW9uIGlzIGxvc3QuDQoNCkNoZWVy cywNCi1UaXJ1DQoNCj4gDQo+ID4gPiA+DQo+ID4gPiA+IGJwcy1kcm9wcGVkIGFuZCBwcHMtZHJv cHBlZCAiU0hPVUxEIGJlIGEgZml2ZS1taW51dGUgYXZlcmFnZSIsIGJ1dA0KPiA+ID4gPiB0aGF0 IGRvZXMgbm90IHNlZW0gcXVpdGUgd2VsbC1kZWZpbmVkLiAgSXMgaXQgYSByb2xsaW5nDQo+ID4g PiA+IGZpdmUtbWludXRlIGF2ZXJhZ2Ugb3ZlciBiaW5zIG9mIG9uZSBzZWNvbmQsIG9yIGEgYmlu bmVkDQo+ID4gPiA+IGZpdmUtbWludXRlIGF2ZXJhZ2UgZm9yIHRoZSBsYXN0IGZpdmUtbWludXRl IGludGVydmFsIHRoYXQgZW5kcyBvbg0KPiA+ID4gPiBhIG11bHRpcGxlIG9mICc1Jywgb3Igc29t ZXRoaW5nDQo+ID4gPiBlbHNlPw0KPiA+ID4NCj4gPiA+IFtNZWRdIFdoYXQgaXMgbWVhbnQgaW4g YW4gYXZlcmFnZSBvdmVyIDUtbWludXRlIGludGVydmFscy4gVXBkYXRlZA0KPiA+ID4gdGhlIHRl eHQgYWNjb3JkaW5nbHkuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAgICBVcG9uIHJlY2VpcHQg b2YgYSBjb25mbGljdCBub3RpZmljYXRpb24gbWVzc2FnZSBpbmRpY2F0aW5nIHRoYXQgYQ0KPiA+ ID4gPiAgICBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgZGVhY3RpdmF0ZWQgYmVjYXVzZSBvZiBhIGNv bmZsaWN0LCBhIERPVFMNCj4gPiA+ID4gICAgY2xpZW50IE1VU1QgTk9UIHJlc2VuZCB0aGUgc2Ft ZSBtaXRpZ2F0aW9uIHJlcXVlc3QgYmVmb3JlIHRoZQ0KPiBleHBpcnkNCj4gPiA+ID4gICAgb2Yg J3JldHJ5LXRpbWVyJy4gIEl0IGlzIGFsc28gcmVjb21tZW5kZWQgdGhhdCBET1RTIGNsaWVudHMg c3VwcG9ydA0KPiA+ID4gPiAgICBtZWFucyB0byBhbGVydCBhZG1pbmlzdHJhdG9ycyBhYm91dCBt aXRpZ2F0aW9uIGNvbmZsaWN0cy4NCj4gPiA+ID4NCj4gPiA+ID4gRG8gd2UgbmVlZCB0byBzYXkg YW55dGhpbmcgcmVnYXJkaW5nIHRoZSBzZXJ2ZXIgYmVoYXZpb3Igd2hlbiBhDQo+ID4gPiA+IHJl dHJhbnNtaXQgb3Igc2ltaWxhciB3YXMgaW4gZmxpZ2h0IGFscmVhZHkgd2hlbiB0aGUgY29uZmxp Y3QNCj4gPiA+ID4gbm90aWZpY2F0aW9uIHdhcyBnZW5lcmF0ZWQ/ICAoVGhhdCBpcywgdGhlIHNl cnZlcidzIGVuZm9yY2VtZW50IG9mDQo+ID4gPiA+IHRoZSBNVVNUIE5PVCBtYXkgbmVlZCB0byBi ZSByZXN0cmFpbmVkLikNCj4gPiA+DQo+ID4gPiBbTWVkXSBUaGUgTVVTVCBOT1QgaXMgaW50ZW5k ZWQgdG8gYXZvaWQgb3ZlcmxvYWRpbmcgdGhlIHNlcnZlciwNCj4gYmVjYXVzZToNCj4gPiA+DQo+ ID4gPiAgICAgICAgICAiQW55IHJldHJhbnNtaXNzaW9uIG9mIHRoZSBzYW1lDQo+ID4gPiAgICAg ICAgICBtaXRpZ2F0aW9uIHJlcXVlc3QgYmVmb3JlIHRoZSBleHBpcnkgb2YgdGhpcyB0aW1lciBp cyBsaWtlbHkgdG8NCj4gPiA+ICAgICAgICAgIGJlIHJlamVjdGVkIGJ5IHRoZSBET1RTIHNlcnZl ciBmb3IgdGhlIHNhbWUgcmVhc29ucy4iDQo+ID4gPg0KPiA+ID4gVGhlIHRleHQgbGVhdmUgaXQg dG8gdGhlIHNlcnZlciB0byBkZWNpZGUgd2hpY2ggYWN0aW9uIHRvIHRha2Ugd2hlbg0KPiA+ID4g TVVTVCBOT1QgaXMgbm90IGZvbGxvd2VkIGJ5IGEgY2xpZW50LiBUaGUgc2VydmVyIG1heSBkZWNp ZGUgdGhlDQo+ID4gPiBzaWxlbnRseSBpZ25vcmUgdGhvc2UsIGV0Yy4NCj4gPiA+DQo+ID4gPiBX ZSBjYW4gYWRkIHNvbWUgdGV4dCBpZiBuZWVkZWQuDQo+IA0KPiBMZXQncyBsZWF2ZSBpdCBhbG9u ZSBmb3Igbm93Lg0KPiANCj4gPiA+ID4NCj4gPiA+ID4gICAgQWx0ZXJuYXRpdmVseSwgdGhlIERP VFMgY2xpZW50IGNhbiBleHBsaWNpdGx5IGRlcmVnaXN0ZXIgaXRzZWxmIGJ5DQo+ID4gPiA+ICAg IGlzc3VpbmcgYSBHRVQgcmVxdWVzdCB0aGF0IGhhcyB0aGUgVG9rZW4gZmllbGQgc2V0IHRvIHRo ZSB0b2tlbiBvZg0KPiA+ID4gPiAgICB0aGUgb2JzZXJ2YXRpb24gdG8gYmUgY2FuY2VsbGVkIGFu ZCBpbmNsdWRlcyBhbiBPYnNlcnZlIE9wdGlvbiB3aXRoDQo+ID4gPiA+ICAgIHRoZSB2YWx1ZSBz ZXQgdG8gJzEnIChkZXJlZ2lzdGVyKS4NCj4gPiA+ID4NCj4gPiA+ID4gVGhpcyBzZWVtcyBsaWtl IHRoZSBtb3JlICJwb2xpdGUiIGJlaGF2aW9yIChhcyBvcHBvc2VkIHRvIGp1c3QNCj4gPiA+ID4g ImZvcmdldHRpbmciIC0tIHdoeSBpcyB0aGUgcG9saXRlIGJlaGF2aW9yIG5vdCB0aGUgZGVmYXVs dCBiZWhhdmlvcj8NCj4gPiA+DQo+ID4gPiBbTWVkXSBEb25lIGluIG15IGxvY2FsIGNvcHkuDQo+ ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiBEb2VzIHRoZSBHRVQgaW4gIEZpZ3VyZSAxMyBuZWVkIHRv IGhhdmUgYSAiLndlbGwta25vd24iIGFuZCBvdGhlcg0KPiA+ID4gPiBwYXRoIGNvbXBvbmVudHM/ DQo+ID4gPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gRG9uJ3QgdGhpbmsgc28uIEFjdHVhbGx5LCB3 ZSBhcmUgbWltaWNraW5nIGZpZ3VyZSAyIGluIFJGQzc2NDEuDQo+IA0KPiBBaCwgdGhhbmtzIGZv ciB0aGUgcmVmZXJlbmNlLg0KPiANCj4gLUJlbg0K From nobody Wed Jan 16 23:38:59 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F4B1130F70; Wed, 16 Jan 2019 23:38:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ih0ApwolxtSN; Wed, 16 Jan 2019 23:38:50 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECA75130FEA; Wed, 16 Jan 2019 23:38:48 -0800 (PST) Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 43gGCq38k0z2xvW; Thu, 17 Jan 2019 08:38:47 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.43]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 43gGCq1vmSzCqkY; Thu, 17 Jan 2019 08:38:47 +0100 (CET) Received: from OPEXCAUBM6F.corporate.adroot.infra.ftgroup (10.114.13.101) by OPEXCLILM5F.corporate.adroot.infra.ftgroup (10.114.31.43) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 08:38:46 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6F.corporate.adroot.infra.ftgroup ([fe80::c489:b768:686a:545b%23]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 08:38:46 +0100 From: To: Benjamin Kaduk , "Konda, Tirumaleswar Reddy" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AQHUrcMMbdLaw/P390OEodGKh87GwKWzCdnA Date: Thu, 17 Jan 2019 07:38:45 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08E6C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190116174344.GF91727@kduck.mit.edu> In-Reply-To: <20190116174344.GF91727@kduck.mit.edu> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 07:38:58 -0000 Re-, Please see inline.=20 Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: mercredi 16 janvier 2019 18:44 > =C0=A0: Konda, Tirumaleswar Reddy > Cc=A0: BOUCADAIR Mohamed TGI/OLN; draft-ietf-dots-signal-channel@ietf.org= ; > dots@ietf.org > Objet=A0: Re: AD review of draft-ietf-dots-signal-channel-25 (1st Part) >=20 > Trying to get both Tiru and Med's comments, inline... >=20 > On Wed, Jan 16, 2019 at 11:10:37AM +0000, Konda, Tirumaleswar Reddy wrote= : > > Hi Med, > > > > Please see inline > > > > > -----Original Message----- > > > From: Dots On Behalf Of > > > mohamed.boucadair@orange.com > > > Sent: Wednesday, January 16, 2019 1:30 PM > > > To: Benjamin Kaduk ; draft-ietf-dots-signal- > > > channel@ietf.org > > > Cc: dots@ietf.org > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1= st > Part) > > > > > > This email originated from outside of the organization. Do not click > links or > > > open attachments unless you recognize the sender and know the content= is > > > safe. > > > > > > Hi Ben, > > > > > > Thank you for the detailed review. > > > > > > Please see inline a first set of replies. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] Envoy=E9=A0: mercredi = 16 > > > > janvier 2019 01:14 =C0=A0: draft-ietf-dots-signal-channel@ietf.org > > > > Cc=A0: dots@ietf.org > > > > Objet=A0: AD review of draft-ietf-dots-signal-channel-25 > > > > > > > > AD review of -25. (Note that -26 is out already, but to preserve m= y > > > > sanity I am still using the section numbers from the -25. I took a > > > > quick look at the diff, and tried to remove comments that are no > > > > longer applicable, but probably missed some. > > > > > > > > This review is pretty long, but I think the document is actually in > > > > pretty good shape -- the length of review comments is just a normal > > > > frequency of rough edges multiplied by a long document. > > > > > > > > I will make a github pull request with some changes that I think ar= e > > > > just editorial (but feel free to bring them up as discussion items = if > > > > you are not sure that they are editorial, disagree with the changes= , > > > > etc.) > > > > > > > > We should probably introduce (or avoid) the concept of "peace-time" > > > > (sometimes spelled without the hyphen) and perhaps the correspondin= g > > > > attack situation before using it. > > > > > > > > > > [Med] We do have two occurrences in the document. I fixed these two. >=20 > Thanks. I guess my more meta-point was whether we expect the audience to > be familiar with the usage of "peacetime" for "absence of a DoS attack" -= - > I personally found it slightly jarring, but I'm also not exactly the targ= et > audience. >=20 > > > > Section 1 > > > > > > > > I wasn't sure whether the RFC 4987 reference was supposed to be for > > > > what an ACK-flood is or the fact that it is CPU-exhausting or somet= hing > else. > > > > (Searching for those terms in its text did not help me come to a > > > > conclusion.) > > > > > > > > > > [Med] RFC 4987 is a pointer to back that SYN flood is memory exhausti= ng. > I > > > move the citation right after SYN-flood. >=20 > Ah, that makes perfect sense; thanks. >=20 > > > > > > > We also talk about "DOTS servers" and "DOTS agents" in Section 1, > > > > before we've defined the terminology. But these two are sufficient= ly > > > > self-explanatory that it may be fine to leave them as-is. > > > > > > > > > > [Med] You are right. I don't think a change is needed. > > > > > > > > > > This protocol enab= les > > > > cooperation between DOTS agents to permit a highly-automated net= work > > > > defense that is robust, reliable, and secure. > > > > > > > > We should explain somewhere what we mean by "secure". (I guess, th= at > > > > the signal and data channels are integrity- and > > > > confidentiality-protected, and that changes in mitigation status ar= e > > > > not made unless properly authorized.) > > > > > > > > > > [Med] By secure, we meant the set of features called in Section 2.4 o= f > draft- > > > ietf-dots-requirements. We can add a pointer to that section if this > helps. >=20 > It's probably worth doing. [Med] Done. >=20 > > > > Section 3 > > > > > > > > DOTS clients MAY alternatively support means to dynamic= ally > > > > discover the ports used by their DOTS servers. [...] > > > > > > > > If we have some examples in mind of dynamic discovery protocols, it > > > > would be appropriate to provide informative references here. > > > > > > > > > > [Med] OK. I added an informative reference to draft-boucadair-dots- > > > discovery. > > > > > > > We should also have an informative reference for "Happy Eyeballs" > > > > (e.g., RFC 8305). > > > > > > > > > > [Med] That text points to the section defining HE: > > > > > > A Happy Eyeballs procedure for DOTS signal channel is > > > specified in Section 4.3. > > > > > > 8305 is cited in section 4.3: > > > > > > To overcome these connection setup problems, the DOTS client attem= pts > > > to connect to its DOTS server(s) using both IPv6 and IPv4, and tri= es > > > both DTLS over UDP and TLS over TCP in a manner similar to the Hap= py > > > Eyeballs mechanism [RFC8305]. > > > > > > This is sufficient, IMO. >=20 > So it is. Sorry to have missed that before. >=20 > > > > From that standpoint, this document specifies a YANG module for > > > > representing DOTS mitigation scopes, DOTS signal channel session > > > > [...] > > > > > > > > Which standpoint? > > > > > > [Med] that is "use the same data models...". > > > > > > I deleted the "From that standpoint," because this may not be clear. >=20 > Sounds good. >=20 > > > > > > > > Representing these data as CBOR data is assumed to follow the ru= les > > > > in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with > > > > JSON/CBOR conversion rules in [RFC7049]. All parameters in the > > > > payload of the DOTS signal channel are mapped to CBOR types as > > > > specified in Section 6. > > > > > > > > How do I know which set of rules is in use? > > > > > > [Med] This s not important from a DOTS interoperability standpoint. W= hat > is > > > important is the mapping table in Section 6 (and mapping entries that > will > > > defined in future documents). > > > > > > Are the two sets of rules > > > > equivalent and interoperable? >=20 > So the claim is that following either set of rules will result in the sam= e > (well, equivalent) encoding, based on the relevant CBOR types? If so, th= is > text could probably be reworded to just use declarative language instead = of > "is assumed to", maybe something like "are encoded in CBOR; the procedure= s > in [] or [] will produce a valid encoding", though I don't have a great > concrete suggestion off the top of my head. [Med] What about the following: This document specifies a YANG module for representing DOTS mitigation scopes, DOTS signal channel session configuration data, and DOTS redirected signalling (Section 5). Representing these data as CBOR data can either follow the rules in [I-D.ietf-core-yang-cbor] or those in [RFC7951] combined with JSON/CBOR conversion rules in [RFC7049]; both approaches produce a valid encoding. All parameters in the payload of the DOTS signal channel are mapped to CBOR types as specified in Section 6. >=20 > > > > DOTS agents MUST support GET, PUT, and DELETE CoAP methods. [..= .] > > > > > > > > As written, this applies to all agents (clients, servers, and proxi= es). > > > > Presumably this is intended, > > > > > > [Med] Yes. > > > > > > but I just wante to double-check -- > > > > sometimes it's okay to place weaker requirements on clients. > > > > > > > > In deployments where one or more translators (e.g., Traditional = NAT > > > > [RFC3022], CGN [RFC6888], NAT64 [RFC6146], NPTv6 [RFC6296]) are > > > > enabled between the client's network and the DOTS server, DOTS > signal > > > > channel messages forwarded to a DOTS server MUST NOT include > > > internal > > > > IP addresses/prefixes and/or port numbers; external addresses/ > > > > prefixes and/or port numbers as assigned by the translator MUST = be > > > > > > > > Do we want to give any examples of signal channel messages that mig= ht > > > > include internal addresses/prefixes? > > > > > > [Med] I'd avoid citing a message which is not defined yet at this sta= ge > of the > > > document. >=20 > Okay. >=20 > > > > > > > > Such procedure is needed to avoid experiencing long connection > > > > delays. For example, if an IPv4 path to reach a DOTS server is > > > > found, but the DOTS server's IPv6 path is not working, a dual-st= ack > > > > DOTS client may experience a significant connection delay compar= ed > to > > > > an IPv4-only DOTS client. [...] > > > > > > > > There seems a bit of a mismatch between "found" and "not working". = If > > > > the point is supposed to be that the client is going to try both IP= v4 > > > > and IPv6 but the v6 path has issues and it would take the client's > > > > algorithm some extra time to choose to fall back to v4, then maybe = "iv > > > > an IPv4 path to a DOTS server is functional and there is also an > > > > apparently present but non-functional IPv6 path to the same server"= ? > > > > > > [Med] You got it. I changed the text to: > > > > > > "if an IPv4 path to reach a DOTS server is functional, but the DOTS > server's > > > IPv6 path is non-functional," > > > > > > > > > > > These connection attempts are > > > > performed by the DOTS client when it initializes. The results o= f > the > > > > Happy Eyeballs procedure are used by the DOTS client for sending= its > > > > subsequent messages to the DOTS server. > > > > > > > > I see this is scoped to "when the client initializes", so I don't k= now > > > > whether it adds more or not to end with "for the duration of the DO= TS > > > > session" or some similar scoping for the caching of the happy eyeba= lls > > > > results. > > > > > > [Med] The connection attempts are performed each time the client has = to > > > select among a list of v4, v6 (tls, dtls). This is particularly true = when > the client > > > initiates, but this may also be true each time the client has to sele= ct > among > > > v4, v6, DTLS, TLS (e.g., the client attaches to a new network). > > > > > > I updated the text to: > > > > > > "These connection attempts are performed by the DOTS client when it > > > initializes, or in general when it has to select an address family an= d > transport > > > to contact its DOTS server." > > > > Happy eyeballs mandates caching the results, see > https://tools.ietf.org/html/rfc6555#section-4 (to avoid thrashing the > network). > > We may want to update the above line accordingly. >=20 > We probably do, perhaps by qualifying the decision as being one made when > conditions have changed in some way since the last decision (and some > amount of timeout could be considered a "change"). >=20 > > > > > > > > > > > > > client because there is no long delay before using IPv4 and TCP. > The > > > > DOTS client repeats the mechanism to discover whether DOTS signa= l > > > > channel messages with DTLS over UDP becomes available from the D= OTS > > > > server, so the DOTS client can migrate the DOTS signal channel f= rom > > > > > > > > What would cause UDP to "become available"? > > > > > > [Med] In this example, this is assumed to be IPv6 path (with no > middlebox) > > > available again. > > > > > > In general, this can be due to a path change, network configuration > change, > > > middlebox configuration change, IPv6 become functional, etc. >=20 > I think I would have been less confused if we said "periodically repeats"= . [Med] Fixed. >=20 > > > Would this be a case like > > > > if there's a stateful NAT or where we need to actively apply some s= ort > > > > of NAT traversal? If so, do we want to list it as an example? (If > > > > it's a complicated scenario, it may not be worth listing an example= , > > > > of > > > > course.) > > > > > > [Med] The text already says the following: > > > > > > "it is assumed that the IPv6 path is broken and UDP traffic is droppe= d by > a > > > middlebox" > > > > > > I do think this is sufficient. >=20 > It's probably fine, yes. I was just wondering if there would be scenario= s > where the situation would be improved if a DOTS agent applied active > NAT-busting; if so, we would then need to decide whether the benefits wer= e > large enough and the situation common enough to merit a mention. (It > sounds like we think it is not common enough to mention, which is fine.) >=20 > > > > > > > > I'm not sure if we want to add some annotations to Figure 4 that > > > > (e.g.) the initial DTLS attempts do not need to be strictly ordered= in > > > > the order presented, or to indicate which lines are retries. > > > > > > [Med] The text explaining that figure mentions the following: "...two= TCP > > > SYNs and two DTLS ClientHello messages at the same time over IPv6 and > > > IPv4." > > > > > > Adding annotation would be redundant, IMO. >=20 > It's often helpful for the figure to stand alone, but I'm happy to wait a= nd > see if anyone else asks for a change. >=20 [Med] Thanks. > -Ben From nobody Wed Jan 16 23:46:24 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C215D130E25; Wed, 16 Jan 2019 23:46:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2YXPuQyLbrOX; Wed, 16 Jan 2019 23:46:19 -0800 (PST) Received: from orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07422130DE5; Wed, 16 Jan 2019 23:46:19 -0800 (PST) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 43gGNT2ZmQz7tdY; Thu, 17 Jan 2019 08:46:17 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.19]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 43gGNT1lF1z2xC0; Thu, 17 Jan 2019 08:46:17 +0100 (CET) Received: from OPEXCAUBM5C.corporate.adroot.infra.ftgroup (10.114.13.38) by OPEXCLILM44.corporate.adroot.infra.ftgroup (10.114.31.19) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 08:46:16 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5C.corporate.adroot.infra.ftgroup ([fe80::393d:418c:3f1d:991d%21]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 08:46:16 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAbdLaw/P390OEodGKh87GwAAGhxNwACmhiPAAAHjuYAAA8/8Q Date: Thu, 17 Jan 2019 07:46:16 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 07:46:22 -0000 UmUtLA0KDQpPSy4gDQoNCkdpdmVuIHRoYXQgd2UgZG9uJ3QgaGF2ZSBhbiBleHBsaWNpdCBtZW50 aW9uIGFib3V0IHRoaXMgaW4gODMwNSwgSSBhZGRlZCB0aGlzIE5FVyBzZW50ZW5jZSBlY2hvaW5n IHdoYXQgd2FzIGluIDY1NTU6DQoNCiAgIE5vdGUgdGhhdCB0aGUgRE9UUyBjbGllbnQgbXVzdCBj YWNoZSBpbmZvcm1hdGlvbiByZWdhcmRpbmcgdGhlDQogICBvdXRjb21lIG9mIGVhY2ggY29ubmVj dGlvbiBhdHRlbXB0LCBhbmQgaXQgdXNlcyB0aGF0IGluZm9ybWF0aW9uIHRvDQogICBhdm9pZCB0 aHJhc2hpbmcgdGhlIG5ldHdvcmsgd2l0aCBzdWJzZXF1ZW50IGF0dGVtcHRzLg0KDQpDaGVlcnMs DQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogS29uZGEsIFRp cnVtYWxlc3dhciBSZWRkeSBbbWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5j b21dDQo+IEVudm95w6nCoDogamV1ZGkgMTcgamFudmllciAyMDE5IDA4OjE2DQo+IMOAwqA6IEJP VUNBREFJUiBNb2hhbWVkIFRHSS9PTE47IEJlbmphbWluIEthZHVrOyBkcmFmdC1pZXRmLWRvdHMt c2lnbmFsLQ0KPiBjaGFubmVsQGlldGYub3JnDQo+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gT2Jq ZXTCoDogUkU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUg KDFzdCBQYXJ0KQ0KPiANCj4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206 IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiA8bW9oYW1lZC5ib3VjYWRhaXJAb3Jh bmdlLmNvbT4NCj4gPiBTZW50OiBUaHVyc2RheSwgSmFudWFyeSAxNywgMjAxOSAxMjozMyBQTQ0K PiA+IFRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25k YUBNY0FmZWUuY29tPjsNCj4gPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0 LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiA+IENjOiBkb3RzQGlldGYub3Jn DQo+ID4gU3ViamVjdDogUkU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMjUgKDFzdCBQYXJ0KQ0KPiA+DQo+ID4NCj4gPg0KPiA+IEhpIFRpcnUsDQo+ID4NCj4g PiBBcyB5b3Uga25vdyBSRkM4MzA1IG9ic29sZXRlcyBSRkM2NTU1Lg0KPiA+DQo+ID4gSSBmYWls IHRvIHNlZSB3aGVyZSBjYWNoaW5nIHJlc3VsdHMgaXMgbWVudGlvbmVkIGluIDgzMDUuIERvIHlv dT8NCj4gDQo+IFRob3VnaCBSRkM4MDM1IG9ic29sZXRlcyBSRkM2NTU1LCBpdCBpcyBzdGlsbCBj b21wYXRpYmxlIHdpdGggUkZDNjU1NSAoc2VlDQo+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9yZmM4MzA1I2FwcGVuZGl4LUEpLg0KPiBJdCBpcyB1c2VmdWwgdG8gY2FjaGUgdGhlIGhhcHB5 IGV5ZWJhbGwgcmVzdWx0cyBmb3IgYSBzcGVjaWZpYyB0aW1lLg0KPiANCj4gLVRpcnUNCj4gDQo+ ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4NCj4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdp bmUtLS0tLQ0KPiA+ID4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+ID4gW21h aWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiA+ID4gRW52b3nDqcKg OiBtZXJjcmVkaSAxNiBqYW52aWVyIDIwMTkgMTI6MTEgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQg VEdJL09MTjsNCj4gPiA+IEJlbmphbWluIEthZHVrOyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLSBj aGFubmVsQGlldGYub3JnIENjwqA6DQo+ID4gPiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFJFOiBB RCByZXZpZXcgb2YNCj4gPiA+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoMXN0 IFBhcnQpDQo+ID4gPg0KPiA+ID4gSGkgTWVkLA0KPiA+ID4NCj4gPiA+IFBsZWFzZSBzZWUgaW5s aW5lDQo+ID4gPg0KPiA+ID4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4gPiBG cm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiA+ID4gPiBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiA+IFNlbnQ6IFdlZG5lc2RheSwgSmFu dWFyeSAxNiwgMjAxOSAxOjMwIFBNDQo+ID4gPiA+IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtA bWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4gPiA+IGNoYW5uZWxAaWV0Zi5v cmcNCj4gPiA+ID4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gU3ViamVjdDogUmU6IFtEb3Rz XSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1DQo+ID4gPiA+ ICgxc3QNCj4gPiA+IFBhcnQpDQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgVGhlc2UgY29ubmVjdGlvbiBhdHRlbXB0cyBhcmUN Cj4gPiA+ID4gPiAgICBwZXJmb3JtZWQgYnkgdGhlIERPVFMgY2xpZW50IHdoZW4gaXQgaW5pdGlh bGl6ZXMuICBUaGUgcmVzdWx0cyBvZg0KPiB0aGUNCj4gPiA+ID4gPiAgICBIYXBweSBFeWViYWxs cyBwcm9jZWR1cmUgYXJlIHVzZWQgYnkgdGhlIERPVFMgY2xpZW50IGZvciBzZW5kaW5nDQo+IGl0 cw0KPiA+ID4gPiA+ICAgIHN1YnNlcXVlbnQgbWVzc2FnZXMgdG8gdGhlIERPVFMgc2VydmVyLg0K PiA+ID4gPiA+DQo+ID4gPiA+ID4gSSBzZWUgdGhpcyBpcyBzY29wZWQgdG8gIndoZW4gdGhlIGNs aWVudCBpbml0aWFsaXplcyIsIHNvIEkgZG9uJ3QNCj4gPiA+ID4gPiBrbm93IHdoZXRoZXIgaXQg YWRkcyBtb3JlIG9yIG5vdCB0byBlbmQgd2l0aCAiZm9yIHRoZSBkdXJhdGlvbiBvZg0KPiA+ID4g PiA+IHRoZSBET1RTIHNlc3Npb24iIG9yIHNvbWUgc2ltaWxhciBzY29waW5nIGZvciB0aGUgY2Fj aGluZyBvZiB0aGUNCj4gPiA+ID4gPiBoYXBweSBleWViYWxscyByZXN1bHRzLg0KPiA+ID4gPg0K PiA+ID4gPiBbTWVkXSBUaGUgY29ubmVjdGlvbiBhdHRlbXB0cyBhcmUgcGVyZm9ybWVkIGVhY2gg dGltZSB0aGUgY2xpZW50IGhhcw0KPiA+ID4gPiB0byBzZWxlY3QgYW1vbmcgYSBsaXN0IG9mIHY0 LCB2NiAodGxzLCBkdGxzKS4gVGhpcyBpcyBwYXJ0aWN1bGFybHkNCj4gPiA+ID4gdHJ1ZSB3aGVu DQo+ID4gPiB0aGUgY2xpZW50DQo+ID4gPiA+IGluaXRpYXRlcywgYnV0IHRoaXMgbWF5IGFsc28g YmUgdHJ1ZSBlYWNoIHRpbWUgdGhlIGNsaWVudCBoYXMgdG8NCj4gPiA+ID4gc2VsZWN0DQo+ID4g PiBhbW9uZw0KPiA+ID4gPiB2NCwgdjYsIERUTFMsIFRMUyAoZS5nLiwgdGhlIGNsaWVudCBhdHRh Y2hlcyB0byBhIG5ldyBuZXR3b3JrKS4NCj4gPiA+ID4NCj4gPiA+ID4gSSB1cGRhdGVkIHRoZSB0 ZXh0IHRvOg0KPiA+ID4gPg0KPiA+ID4gPiAiVGhlc2UgY29ubmVjdGlvbiBhdHRlbXB0cyBhcmUg cGVyZm9ybWVkIGJ5IHRoZSBET1RTIGNsaWVudCB3aGVuIGl0DQo+ID4gPiA+IGluaXRpYWxpemVz LCBvciBpbiBnZW5lcmFsIHdoZW4gaXQgaGFzIHRvIHNlbGVjdCBhbiBhZGRyZXNzIGZhbWlseQ0K PiA+ID4gPiBhbmQNCj4gPiA+IHRyYW5zcG9ydA0KPiA+ID4gPiB0byBjb250YWN0IGl0cyBET1RT IHNlcnZlci4iDQo+ID4gPg0KPiA+ID4gSGFwcHkgZXllYmFsbHMgbWFuZGF0ZXMgY2FjaGluZyB0 aGUgcmVzdWx0cywgc2VlDQo+ID4gPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjU1 NSNzZWN0aW9uLTQgKHRvIGF2b2lkIHRocmFzaGluZyB0aGUNCj4gPiA+IG5ldHdvcmspLg0KPiA+ ID4gV2UgbWF5IHdhbnQgdG8gdXBkYXRlIHRoZSBhYm92ZSBsaW5lIGFjY29yZGluZ2x5Lg0KPiA+ ID4NCj4gPiA+IENoZWVycywNCj4gPiA+IC1UaXJ1DQo= From nobody Thu Jan 17 00:04:22 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66692130DE5 for ; Thu, 17 Jan 2019 00:04:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nttv6.jp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j5CUffnkzc1L for ; Thu, 17 Jan 2019 00:04:18 -0800 (PST) Received: from guri.nttv6.jp (guri.nttv6.jp [115.69.228.140]) by ietfa.amsl.com (Postfix) with ESMTP id A4A4D12D4EA for ; Thu, 17 Jan 2019 00:04:18 -0800 (PST) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 9F01625F6B8; Thu, 17 Jan 2019 17:04:16 +0900 (JST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nttv6.jp; s=20180820; t=1547712256; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=JuwRZhzmgdRN0eEbGSzTjORzsOraWIfMpl3+HWeoguY=; b=KrTC1T6NVASCS21j7t+3rLUXggknizTZuAwSF+/XPCrvuu/cMA6ObjyegYrJpeoYK9dzOl p0yjN8S55rJHQu1MwnEDMkfvIQ2Cw0MeK49GXHSj/CCzHNnmm4wskfofqCmw5hcOaMoBIM KmAlJDoaUJqFFMD9OLIkTm6AZoV+joo= Received: from MacBook-Pro-17.local (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 6DB91763523; Thu, 17 Jan 2019 17:04:16 +0900 (JST) To: Roman Danyliw , "dots@ietf.org" References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> From: kaname nishizuka Message-ID: Date: Thu, 17 Jan 2019 17:04:16 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C733EB@marathon> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 08:04:22 -0000 I support the adoption of the draft. And I agree with the concern Dan mentioned last month. > However, I would really encourage the working group to analyze if all 4 discovery methods are really necessary. I believe that the draft can solve this issue. thanks, kaname On 2019/01/10 4:17, Roman Danyliw wrote: > Hello! > > Excluding support from the draft authors, the interest in adoption (or any response) was low on the list (one) and also at IETF 103. The previous discussion around this draft was more spirited. My concern is that this call may have been lost in the end of year holidays. To that end, I'm extending the call for adoption. > > Please provide feedback to the list/chairs if you believe that this document should be adopted as a WG document. This extended adoption call will end on Tuesday, January 22. > > Regards, > Roman and Frank > >> -----Original Message----- >> From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw >> Sent: Friday, November 30, 2018 5:22 PM >> To: dots@ietf.org >> Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discovery >> >> Hello! >> >> This is the start of a two week call for input on the WG adoption of the >> document: >> >> draft-boucadair-dots-server-discovery >> https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05 >> >> The document has been presented and discussed at IETF 103, IETF 100 and >> IETF 99; and revisions have been made based on WG feedback. Discussion >> of adoption of this draft was previously deferred pending submission of the >> signal draft for publication (which occurred in September 2018). >> >> At the IETF 103 meeting, there were not many participants who had read the >> draft. >> >> Please provide feedback to the list/chairs if you believe that this document >> should be adopted as a WG document. The adoption call will end on >> December 14 2018. >> >> Regards, >> Roman and Frank >> >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jan 17 00:17:47 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B2EC130E25; Thu, 17 Jan 2019 00:17:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pKsTfbJdvIOD; Thu, 17 Jan 2019 00:17:42 -0800 (PST) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C042130DC4; Thu, 17 Jan 2019 00:17:42 -0800 (PST) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 43gH4h66w4z1yfh; Thu, 17 Jan 2019 09:17:40 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 43gH4h582pzFpX5; Thu, 17 Jan 2019 09:17:40 +0100 (CET) Received: from OPEXCAUBM34.corporate.adroot.infra.ftgroup (10.114.13.92) by OPEXCLILM24.corporate.adroot.infra.ftgroup (10.114.31.17) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 09:17:40 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM34.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 09:17:40 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (2nd Part) Thread-Index: AdSth/4V4uJk+YuhSsWU4l/lLLRChwAFrvywABL91YAADwLuEAAEi3XQ Date: Thu, 17 Jan 2019 08:17:39 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08F0D@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08269@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190116222741.GK91727@kduck.mit.edu> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (2nd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 08:17:46 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IFtt YWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gRW52b3nDqcKgOiBq ZXVkaSAxNyBqYW52aWVyIDIwMTkgMDc6NTQNCj4gw4DCoDogQmVuamFtaW4gS2FkdWsNCj4gQ2PC oDogQk9VQ0FEQUlSIE1vaGFtZWQgVEdJL09MTjsgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsQGlldGYub3JnOw0KPiBkb3RzQGlldGYub3JnDQo+IE9iamV0wqA6IFJFOiBBRCByZXZpZXcg b2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgybmQgUGFydCkNCj4gDQo+ID4g LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2Fk dWtAbWl0LmVkdT4NCj4gPiBTZW50OiBUaHVyc2RheSwgSmFudWFyeSAxNywgMjAxOSAzOjU4IEFN DQo+ID4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tv bmRhQE1jQWZlZS5jb20+DQo+ID4gQ2M6IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb207IGRy YWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4gY2hhbm5lbEBpZXRmLm9yZzsgZG90c0BpZXRmLm9y Zw0KPiA+IFN1YmplY3Q6IFJlOiBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1j aGFubmVsLTI1ICgybmQgUGFydCkNCj4gPg0KPiA+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9t IG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzDQo+IG9yDQo+ ID4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBr bm93IHRoZSBjb250ZW50IGlzDQo+ID4gc2FmZS4NCj4gPg0KPiA+IE9uIFdlZCwgSmFuIDE2LCAy MDE5IGF0IDAxOjMwOjAxUE0gKzAwMDAsIEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiB3 cm90ZToNCj4gPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+ID4gRnJvbTog RG90cyA8ZG90cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YNCj4gPiA+ID4gbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+ID4gPiBTZW50OiBXZWRuZXNkYXksIEphbnVhcnkg MTYsIDIwMTkgNDoxMSBQTQ0KPiA+ID4gPiBUbzogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5l ZHU+OyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLQ0KPiA+ID4gPiBjaGFubmVsQGlldGYub3JnDQo+ ID4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gQUQg cmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNQ0KPiA+ID4gPiAoMm5k IFBhcnQpDQo+ID4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IFJlLSwNCj4gPiA+ID4N Cj4gPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPiA+DQo+ID4gPiA+IENoZWVycywNCj4g PiA+ID4gTWVkDQo+ID4gPiA+DQo+ID4gPiA+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0t DQo+ID4gPiA+ID4gRGXCoDogQmVuamFtaW4gS2FkdWsgW21haWx0bzprYWR1a0BtaXQuZWR1XSBF bnZvecOpwqA6IG1lcmNyZWRpIDE2DQo+ID4gPiA+ID4gamFudmllciAyMDE5IDAxOjE0IMOAwqA6 IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiA+ID4gPiA+IENjwqA6 IGRvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gPiBPYmpldMKgOiBBRCByZXZpZXcgb2YgZHJhZnQtaWV0 Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1DQo+ID4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ IFNlY3Rpb24gNC40DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAgICBHRVQ6ICAgIERPVFMgY2xpZW50 cyBtYXkgdXNlIHRoZSBHRVQgbWV0aG9kIHRvIHN1YnNjcmliZSB0byBET1RTDQo+ID4gPiA+ID4g ICAgICAgICAgICBzZXJ2ZXIgc3RhdHVzIG1lc3NhZ2VzLCBvciB0byByZXRyaWV2ZSB0aGUgbGlz dCBvZiBpdHMNCj4gPiA+ID4gPiAgICAgICAgICAgIG1pdGlnYXRpb25zIG1haW50YWluZWQgYnkg YSBET1RTIHNlcnZlciAoU2VjdGlvbiA0LjQuMikuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJJ20g bm90IHJlYWxseSBhIGNhbm9uaWNhbCBIVFRQIGV4cGVydCwgYnV0IEkgc3VzcGVjdCB0aGF0IHVz aW5nDQo+ID4gPiA+ID4gR0VUIHRvICJzdWJzY3JpYmUiIHdpbGwgcmFpc2Ugc29tZSBleWVicm93 cyBhdCBsYXRlciBzdGFnZXMgb2YNCj4gcmV2aWV3Lg0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBX ZSBhcmUgZm9sbG93aW5nIFJGQzc2NDEuIEkgd291bGQgYmUgc3VycHJpc2VkIGlmIHRoaXMgaXMg YW4NCj4gaXNzdWUuDQo+ID4gPiA+DQo+ID4gPiA+ICBNYXliZQ0KPiA+ID4gPiA+IHdlIHNob3Vs ZCBqdXN0IGxlYXZlIGl0IGFzLWlzIGFuZCB3YWl0IGZvciBzdWNoIHJldmlldyB0byBhcnJpdmUs DQo+ID4gPiA+ID4gdGhvdWdoLCByYXRoZXIgdGhhbiB0cnlpbmcgdG8gZG8gc29tZXRoaW5nIHBy ZWVtcHRpdmVseS4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gWWVzLg0KPiA+DQo+ID4gU291bmRz IGdvb2QuDQo+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IEkgZG9uJ3Qga25vdyBpZiB0aGlzIGlz IHRoZSBwcm9wZXIgc2VjdGlvbiB0byB0YWxrIGFib3V0IGl0LCBidXQNCj4gPiA+ID4gPiB3ZSBz aG91bGQgcHJvYmFibHkgaGF2ZSBzb21lIHRleHQganVzdGlmeWluZyB0aGUgdXNlIG9mDQo+ID4g PiA+ID4gYXBwbGljYXRpb24tbGF5ZXIgYWNrbm93bGVkZ21lbnQgYXMgb3Bwb3NlZCB0byBqdXN0 IHVzaW5nDQo+ID4gQ29uZmlybWFibGUgQ29BUCBtZXNzYWdlcy4NCj4gPiA+ID4NCj4gPiA+ID4g W01lZF0gSSdtIG5vdCBzdXJlIHRvIHVuZGVyc3RhbmQgdGhpcyBvbmUuIFdoaWNoICJhcHBsaWNh dGlvbi1sYXllcg0KPiA+ID4gPiBhY2tub3dsZWRnbWVudCIgYXJlIHlvdSByZWZlcnJpbmcgdG8/ DQo+ID4NCj4gPiBNYXliZSBJIHdhcyBqdXN0IG1pc3JlYWRpbmcuICBEb2VzDQo+ID4NCj4gPiAg ICBSZXF1ZXN0cyBtYXJrZWQgYnkgdGhlIERPVFMgY2xpZW50IGFzIE5vbi1jb25maXJtYWJsZSBt ZXNzYWdlcyBhcmUNCj4gPiAgICBzZW50IGF0IHJlZ3VsYXIgaW50ZXJ2YWxzIHVudGlsIGEgcmVz cG9uc2UgaXMgcmVjZWl2ZWQgZnJvbSB0aGUgRE9UUw0KPiA+ICAgIHNlcnZlci4NCj4gPg0KPiA+ IHJlZmVyIHRvIGEgInJlc3BvbnNlIiBhdCB0aGUgYXBwbGljYXRpb24gbGF5ZXIgKGFzIG9wcG9z ZWQgdG8gdGhlIENvQVANCj4gbGF5ZXIpPw0KPiANCj4gTm8sIHRoZSBub24tY29uZmlybWFibGUg cmVzcG9uc2UgaXMgcmV0dXJuZWQgYXQgdGhlIENvQVAgbGF5ZXIgaXRzZWxmLg0KDQpbTWVkXSBZ ZXMuIFdlIGNhbiBtYWtlIHRoaXMgY2hhbmdlIGlmIG5lZWVkOg0KDQpzL3VudGlsIGEgcmVzcG9u c2UvdW50aWwgYSBDb0FQIHJlc3BvbnNlLg0KDQoNCj4gDQo+ID4NCj4gPiA+ID4gPg0KPiA+ID4g PiA+IFNlY3Rpb24gNC40LjENCj4gPiA+ID4gPg0KPiA+ID4gPiA+IElmIEZpZ3VyZSA1IGlzIGdv aW5nIHRvIHVzZSBhY3R1YWwvZXhhbXBsZSB2YWx1ZXMgZm9yIGN1aWQgYW5kDQo+ID4gPiA+ID4g bWlkLCB0aGVuIEknZCBzdWdnZXN0IGFsc28gdXNpbmcgYWN0dWFsL2V4YW1wbGUgdmFsdWVzIGZv ciB0aGUNCj4gPiA+ID4gPiBKU09OIGZpZWxkcyAoaW5zdGVhZCBvZiAiaW50ZWdlciIgYW5kICJz dHJpbmciIGFuZCBzdWNoKS4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gSSBzcGxpdCB0aGUgZmln dXJlIGludG8gdHdvIHNvIHRoYXQgd2UgZG9uJ3QgaGF2ZSB0aGlzIHByb2JsZW0uDQo+ID4gPiA+ DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAgICBjdWlkOiAgU3RhbmRzIGZvciBDbGllbnQgVW5pcXVl IElkZW50aWZpZXIuICBBIGdsb2JhbGx5IHVuaXF1ZQ0KPiA+ID4gPiA+ICAgICAgIGlkZW50aWZp ZXIgdGhhdCBpcyBtZWFudCB0byBwcmV2ZW50IGNvbGxpc2lvbnMgYW1vbmcgRE9UUw0KPiBjbGll bnRzLA0KPiA+ID4gPiA+ICAgICAgIGVzcGVjaWFsbHkgdGhvc2UgZnJvbSB0aGUgc2FtZSBkb21h aW4uICBJdCBNVVNUIGJlIGdlbmVyYXRlZCBieQ0KPiA+ID4gPiA+ICAgICAgIERPVFMgY2xpZW50 cy4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IEluIG9yZGVyIHRvIGdldCBnbG9iYWwgdW5pcXVlbmVz cyB3ZSBlaXRoZXIgbmVlZCBzdWZmaWNpZW50DQo+ID4gPiA+ID4gcmFuZG9tbmVzcyBvciBhIGhp ZXJhcmNoaWNhbCBhbGxvY2F0aW9uIHN0cmF0ZWd5LiAgU2luY2Ugd2UNCj4gPiA+ID4gPiByZWNv bW1lbmQgYSBzdHJhdGVneSB0aGF0IGludm9sdmVzIGhhc2hpbmcgdGhlIChwdWJsaWMpIGNsaWVu dA0KPiA+ID4gPiA+IGNlcnRpZmljYXRlLCB3ZSBtYXkgYWxzbyB3YW50IHRvIG5vdGUgdGhhdCB0 aGlzIHZhbHVlIGRvZXMgbm90DQo+ID4gPiA+ID4gbmVlZCB0byBiZSB1bmd1ZXNzYWJsZS4gIElm IGEgcmFuZG9tIGFsbG9jYXRpb24gaXMgcG9zc2libGUsIEkNCj4gPiA+ID4gPiBzdWdnZXN0IGdp dmluZyBndWlkYW5jZSBvbiBob3cgbWFueSByYW5kb20gYml0cyBtdXN0IGJlIHVzZWQgdG8NCj4g PiA+ID4gPiBzdWZmaWNpZW50bHkgZW5zdXJlIGdsb2JhbCB1bmlxdWVuZXNzICgxMjggbWlnaHQg YmUgZW5vdWdoKS4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gQW4gYXR0YWNrIHZlY3RvciB0aGF0 IGNhbiBiZSBhY2hpZXZlZCBpZiB0aGUgY3VpZCBpcyBndWVzc2FibGUNCj4gPiA+ID4gaXMgaWYg YSBtaXNiZWhhdmluZyBjbGllbnQgZnJvbSB3aXRoaW4gdGhlIGNsaWVudCdzIGRvbWFpbiBzdWNj ZWVkcw0KPiA+ID4gPiB0byBiZSBncmFudGVkIGFjY2VzcyBieSB0aGUgc2VydmVyIGFuZCB0aGVu IHVzZXMgdGhlIGN1aWQgb2YgYW5vdGhlcg0KPiA+ID4gPiBjbGllbnQgb2YgdGhlIGRvbWFpbiB0 byBkZWxldGUgYWN0aXZlIG1pdGlnYXRpb24vZXRjLg0KPiA+ID4gPg0KPiA+ID4gPiBGb3IgdGhp cyBhdHRhY2sgdmVjdG9yIHRvIGhhcHBlbiwgdGhlIG1pc2JlaGF2aW5nIGNsaWVudCBuZWVkcyB0 bw0KPiA+ID4gPiBwYXNzIHNlY3VyaXR5IHZhbGlkYXRpb24gY2hlY2tzIGJ5IHRoZSBzZXJ2ZXIu IFRoZXJlZm9yZSwgSSdtIG5vdA0KPiA+ID4gPiBzdXJlIGlmIGl0IGlzIHdvcnRoIHRvIGFkZCBh biBhbGxvY2F0aW9uIHJlY28gZ2l2ZW4gdGhpcyBwZXJxdWlzaXRlLg0KPiA+ID4gPg0KPiA+ID4g PiBUaG91Z2h0cz8NCj4gPg0KPiA+IEkgZG9uJ3QgdGhpbmsgd2UgbmVlZCB0byBoYXZlIHRleHQg YXJvdW5kICdjdWlkJyBhbGxvY2F0aW9uLCBidXQgc2hvdWxkDQo+ID4gbWVudGlvbiB0aGUgcG9z c2liaWxpdHkgb2YgdGhpcyBzcG9vZmluZyBhdHRhY2sgYnkgYSBjb21wcm9taXNlZCBjbGllbnQs IGluDQo+ID4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLg0KDQpbTWVkXSBPSy4gDQoNCj4g Pg0KPiA+ID4gVVVJRCBkaXNjdXNzZWQgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3Jm YzQxMjIgaXMgYW5vdGhlciB3YXkgb2YNCj4gPiBnZW5lcmF0aW5nIGEgZ2xvYmFsbHkgdW5pcXVl IGlkZW50aWZpZXIuICBBIGNvbXByb21pc2VkIERPVFMgY2xpZW50IGNhbg0KPiBzbmlmZg0KPiA+ IHRoZSBUTFMgMS4yIGhhbmRzaGFrZSwgdXNlIHRoZSBjbGllbnQgY2VydGlmaWNhdGUgdG8gaWRl bnRpZnkgdGhlICJjdWlkIg0KPiB1c2VkDQo+ID4gYnkgYW5vdGhlciBET1RTIGNsaWVudC4gVGhp cyBhdHRhY2sgaXMgbm90IHBvc3NpYmxlIHdpdGggVExTIDEuMyAoVExTDQo+ID4gaGFuZHNoYWtl IGlzIGVuY3J5cHRlZCkuDQo+ID4NCj4gPiBGb3IgMS4zIHRoZSBhdHRhY2tlciB3b3VsZCBuZWVk IHRvIGhhdmUgZGF0YSBmcm9tIGEgc2VydmVyIGluIG9yZGVyIHRvIHNlZQ0KPiA+IGFub3RoZXIg Y2xpZW50J3MgY2VydGlmaWNhdGUsIHllcywgd2hpY2ggaXMgcHJlc3VtYWJseSBhIGhhcmRlciBh dHRhY2suDQo+IA0KPiBZdXAsIHdpbGwgdXBkYXRlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLg0K PiANCg0KW01lZF0gT0suDQoNCj4gPg0KPiA+IEkgZG9uJ3QgdGhpbmsgYSBVVUlEIHJlZmVyZW5j ZSB3b3VsZCBiZSB2ZXJ5IHZhbHVhYmxlIGhlcmUuDQo+IA0KPiBJZiBjdWlkIGNvbGxpc2lvbiBo YXBwZW5zLCBVVUlEIGNhbiBiZSB1c2VkIHRvIGdlbmVyYXRlIHRoZSBjdWlkLg0KDQpbTWVkXSBJ bmRlZWQuIFRleHQgdXBkYXRlZC4NCg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4g PiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgVGhlIG91dHB1dCBvZiB0aGUgY3J5cHRvZ3Jh cGhpYyBoYXNoDQo+IGFsZ29yaXRobQ0KPiA+ID4gPiA+ICAgICAgIGlzIHRydW5jYXRlZCB0byAx NiBieXRlczsgdHJ1bmNhdGlvbiBpcyBkb25lIGJ5IHN0cmlwcGluZyBvZmYNCj4gdGhlDQo+ID4g PiA+ID4gICAgICAgZmluYWwgMTYgYnl0ZXMuICBUaGUgdHJ1bmNhdGVkIG91dHB1dCBpcyBiYXNl NjR1cmwgZW5jb2RlZC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IHNpZGUgbm90ZTogVHJ1bmNhdGlv biB0byAxMjggYml0cyByZWR1Y2VzIHRoZSBjb2xsaXNpb24gcmVzaXN0YW5jZQ0KPiA+ID4gPiA+ IHRvIDY0LWJpdCBzdHJlbmd0aCwgdGhvdWdoIHRoaXMgaXMgcHJvYmFibHkgYWNjZXB0YWJsZSBp biB0aGlzIHVzZQ0KPiBjYXNlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gICAgICAgRE9UUyBzZXJ2 ZXJzIE1VU1QgcmV0dXJuIDQuMDkgKENvbmZsaWN0KSBlcnJvciBjb2RlIHRvIGEgRE9UUw0KPiBw ZWVyDQo+ID4gPiA+ID4gICAgICAgdG8gbm90aWZ5IHRoYXQgdGhlICdjdWlkJyBpcyBhbHJlYWR5 IGluLXVzZSBieSBhbm90aGVyIERPVFMNCj4gPiA+ID4gPiAgICAgICBjbGllbnQuICBVcG9uIHJl Y2VpcHQgb2YgdGhhdCBlcnJvciBjb2RlLCBhIG5ldyAnY3VpZCcgTVVTVCBiZQ0KPiA+ID4gPiA+ ICAgICAgIGdlbmVyYXRlZCBieSB0aGUgRE9UUyBwZWVyLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g SXMgdGhlcmUgYW55IHdheSBpbiB3aGljaCB0aGlzIHNpdHVhdGlvbiBjb3VsZCBhcmlzZSBkdXJp bmcgc29tZQ0KPiA+ID4gPiA+IHNvcnQgb2YgbWlncmF0aW9uIHNjZW5hcmlvPw0KPiA+ID4gPg0K PiA+ID4gPiBbTWVkXSBUaGlzIGNhbiBiZSBmb3IgZXhhbXBsZSBhIGNsaWVudCB3aGljaCBkb2Vz IG5vdCBmb2xsb3cgdGhlDQo+ID4gIlNIT1VMRCINCj4gPiA+ID4gZm9yIGNyZWF0aW5nIHRoZSBj dWlkLg0KPiA+DQo+ID4gT2YgY291cnNlLiAgSSdtIHdvbmRlcmluZyBpZiBhIGxlZ2l0bWlhdGUg Y2xpZW50IHRoYXQgZG9lcyBmb2xsb3cgdGhlDQo+ID4gIlNIT1VMRCIgY291bGQgZXZlciBzZWUg dGhpcyBlcnJvciBjb2RlIGluIHRoZSBhYnNlbmNlIG9mIGFuIGF0dGFjaywgZm9yDQo+ID4gZXhh bXBsZSBpZiB0aGUgY2xpZW50J3MgbmV0d29yayBhZGRyZXNzIGNoYW5nZXMuDQo+IA0KPiBZZXMs IEkgdG9vIGRvbid0IHRoaW5rIGEgbGVnaXRpbWF0ZSBjbGllbnQgd2lsbCBzZWUgdGhpcyBlcnJv ciBjb2RlIGluIHRoZQ0KPiBhYnNlbmNlIG9mIGFuIGF0dGFjay4NCj4gDQo+ID4NCj4gPiA+ID4g Pg0KPiA+ID4gPiA+ICAgICAgIENsaWVudC1kb21haW4gRE9UUyBnYXRld2F5cyBNVVNUIGhhbmRs ZSAnY3VpZCcgY29sbGlzaW9uDQo+IGRpcmVjdGx5DQo+ID4gPiA+ID4gICAgICAgYW5kIGl0IGlz IFJFQ09NTUVOREVEIHRoYXQgJ2N1aWQnIGNvbGxpc2lvbiBpcyBoYW5kbGVkIGRpcmVjdGx5DQo+ IGJ5DQo+ID4gPiA+ID4gICAgICAgc2VydmVyLWRvbWFpbiBET1RTIGdhdGV3YXlzLg0KPiA+ID4g PiA+DQo+ID4gPiA+ID4gSXMgYSBnYXRld2F5IHN1cHBvc2VkIHRvIGtub3cgaWYgaXQgaXMgImNs aWVudC1zaWRlIiBvciAic2VydmVyLXNpZGUiDQo+ID4gPiA+ID4gYnkgZXhwbGljaXQgY29uZmln dXJhdGlvbiBvciBzb21lIG1vcmUgYXV0b21hdGljIG1ldGhvZD8NCj4gPiA+ID4NCj4gPiA+ID4g W01lZF0gVGhpcyBjYW4gYmUgZG9uZSBieSBhbiBleHBsaWNpdCBjb25maWd1cmF0aW9uLg0KPiA+ DQo+ID4gT2theS4gIExldCdzIHdhaXQgdG8gc2VlIGlmIGFueSBvdGhlciByZXZpZXdlcnMgYXNr IGZvciBjbGFyaWZ5aW5nIHRleHQNCj4gdGhhdCB0aGlzDQo+ID4gY2FuIG9ubHkgYmUga25vd24g dmlhIGV4cGxpY2l0IGNvbmZpZ3VyYXRpb24uDQoNCltNZWRdIE9LLg0KDQo+ID4NCj4gPiA+ID4g Pg0KPiA+ID4gPiA+ICAgICdjdWlkJyBhbmQgJ21pZCcgTVVTVCBOT1QgYXBwZWFyIGluIHRoZSBQ VVQgcmVxdWVzdCBtZXNzYWdlIGJvZHkuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBEbyB3ZSBuZWVk IHRvIHNheSB0aGlzIGdpdmVuIHRoYXQgdGhlcmUncyBubyBvYnZpb3VzIHN0cnVjdHVyZSBpbg0K PiA+ID4gPiA+IHdoaWNoIHRvIHB1dCB0aGVtPyAgKFRoYXQgaXMsIGlzIHRoaXMganVzdCBhIHJl bWluZGVyIHRvDQo+ID4gPiA+ID4gaW1wbGVtZW50b3JzIG9mIGEgcHJldmlvdXMgdmVyc2lvbiBv ZiB0aGUgZHJhZnQgdmVyc3VzIGd1aWRhbmNlIHRvDQo+ID4gPiA+ID4gbmV3DQo+ID4gPiA+ID4g aW1wbGVtZW50YXRpb25zPykNCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gV2UgdXNlZCB0byBoYXZl IHRob3NlIGluIHRoZSBtZXNzYWdlIGJvZHkgaW4gcHJldmlvdXMgdmVyc2lvbnMNCj4gPiA+ID4g b2YgdGhlIHNwZWMvaW1wbGVtZW50YXRpb25zLiBGdXJ0aGVybW9yZSwgdGhlcmUgYXJlIGNhc2Vz IHdoZXJlDQo+ID4gPiA+ICJtaWQiIGlzIGFsbG93ZWQgdG8gYmUgaW5jbHVkZWQgaW4gdGhlIG1l c3NhZ2UgYm9keSAoZS5nLiwgUFVUDQo+ID4gPiA+IHJlc3BvbnNlKS4gV2UgaW5jbHVkZWQgdGhp cyBub3RlIGZvciBpbXBsZW1lbnRlcnMgYmVjYXVzZSBvZiBzb21lDQo+ID4gPiA+IGJlaGF2aW9y cyBvYnNlcnZlZCBkdXJpbmcgcGFzdCBpbnRlcm9wcy4NCj4gPg0KPiA+IE9rYXkuICAoSSB0aGlu ayB0aGlzIGlzIGFjdHVhbGx5IG9uZSBvZiB0aGUgdGhpbmdzIEkgYXNrZWQgYmVmb3JlIGFuZCB5 b3UNCj4gPiBhbHJlYWR5IGFuc3dlcmVkOyBzb3JyeSBmb3IgdGhlIGR1cGxpY2F0aW9uLikNCg0K W01lZF0gTm8gcHJvYmxlbS4NCg0KPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAgICAgICBUaGUg cHJlZml4IGxpc3QgTVVTVCBOT1QgaW5jbHVkZSBicm9hZGNhc3QsIGxvb3BiYWNrLCBvcg0KPiBt dWx0aWNhc3QNCj4gPiA+ID4gPiAgICAgICBhZGRyZXNzZXMuICBUaGVzZSBhZGRyZXNzZXMgYXJl IGNvbnNpZGVyZWQgYXMgaW52YWxpZCB2YWx1ZXMuDQo+ID4gPiA+ID4gSW4NCj4gPiA+ID4gPg0K PiA+ID4gPiA+IERvZXMgImludmFsaWQiIG1lYW4gdGhhdCB0aGUgcGFydGljdWxhciBhZGRyZXNz IGdldHMgaWdub3JlZCBvcg0KPiA+ID4gPiA+IHRoYXQgdGhlIGVudGlyZSByZXF1ZXN0IGlzIHJl amVjdGVkPw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBUaGUgZXhwZWN0ZWQgYmVoYXZpb3IgaXMg Y292ZXJlZCBieSB0aGlzIHRleHQ6DQo+ID4gPiA+DQo+ID4gPiA+ICIgLi4uIG9yIGNvbnRhaW5z IGludmFsaWQgb3IgdW5rbm93biBwYXJhbWV0ZXJzLCB0aGUgRE9UUyBzZXJ2ZXINCj4gPiA+ID4g TVVTVCByZXBseSB3aXRoIDQuMDAgKEJhZCBSZXF1ZXN0KS4iDQo+ID4gPiA+DQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiAgICB0YXJnZXQtZnFkbjogICBBIGxpc3Qgb2YgRnVsbHkgUXVhbGlmaWVkIERv bWFpbiBOYW1lcyAoRlFETnMpDQo+ID4gPiA+ID4gICAgICAgaWRlbnRpZnlpbmcgcmVzb3VyY2Vz IHVuZGVyIGF0dGFjay4gIEFuIEZRRE4gaXMgdGhlIGZ1bGwgbmFtZQ0KPiBvZiBhDQo+ID4gPiA+ ID4gICAgICAgcmVzb3VyY2UsIHJhdGhlciB0aGFuIGp1c3QgaXRzIGhvc3RuYW1lLiAgRm9yIGV4 YW1wbGUsICJ2ZW5lcmEiDQo+IGlzDQo+ID4gPiA+ID4gICAgICAgYSBob3N0bmFtZSwgYW5kICJ2 ZW5lcmEuaXNpLmVkdSIgaXMgYW4gRlFETiBbUkZDMTk4M10uDQo+ID4gPiA+ID4NCj4gPiA+ID4g PiBJIHdvdWxkIHN1Z2dlc3QgcmVmZXJyaW5nIHRvIGRyYWZ0LWlldGYtZG5zb3AtdGVybWlub2xv Z3ktYmlzDQo+ID4gPiA+ID4gcmF0aGVyIHRoYW4gdHJ5aW5nIHRvIHJlcHJvZHVjZSBhIGRlZmlu aXRpb24gb2YgRlFETi4NCj4gPiA+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBJIGFkZGVk IGFuIGluZm9ybWF0aXZlIHJlZmVyZW5jZSB0byBkcmFmdC1pZXRmLWRuc29wLXRlcm1pbm9sb2d5 LQ0KPiA+IGJpcy4NCj4gPg0KPiA+IFRoYW5rcw0KPiA+DQo+ID4gPiA+ID4gV2UgYWxzbyBtYXkg d2FudCB0byBub3RlIHRoYXQgdGhlIEROUyB2aWV3IGNhbiBjaGFuZ2UgZGVwZW5kaW5nIG9uDQo+ ID4gPiA+ID4gdGhlIHZhbnRhZ2UgcG9pbnQgdXNlZCB0byBtYWtlIHRoZSBvYnNlcnZhdGlvbi4N Cj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gTm90IHN1cmUgd2hhdCB0byBkbyB3aXRoIHRoaXMgb25l IGdpdmVuIHRoYXQgdGhlIHRleHQgc2F5czoNCj4gPiA+ID4NCj4gPiA+ID4gIkhvdyBhIG5hbWUg aXMgcGFzc2VkIHRvIGFuIHVuZGVybHlpbmcgbmFtZSByZXNvbHV0aW9uIGxpYnJhcnkgaXMNCj4g PiA+ID4gaW1wbGVtZW50YXRpb24tIGFuZCBkZXBsb3ltZW50LXNwZWNpZmljLiINCj4gPg0KPiA+ IEkgd2FzIHRoaW5raW5nIHNvbWV0aGluZyBsaWtlICJ0aGUgcmVzdWx0cyByZXR1cm5lZCBmb3Ig cmVzb2x2aW5nIGEgbmFtZQ0KPiBjYW4NCj4gPiBkZXBlbmQgb24gbWFueSBmYWN0b3JzLCBpbmNs dWRpbmcgd2hlbiB0aGUgcmVxdWVzdCB3YXMgbWFkZSBhbmQgdGhlDQo+ID4gYWRkcmVzcyBvZiB0 aGUgRE5TIHJlc29sdmVyIHVzZWQgLS0gdGhlcmUgaXMgbm8gZ3VhcmFudGVlIHRoYXQgdGhlIERP VFMNCj4gPiBzZXJ2ZXIgd2lsbCByZXNvbHZlIGEgbmFtZSB0byB0aGUgc2FtZSBhZGRyZXNzZXMg dGhhdCB0aGUgRE9UUyBjbGllbnQNCj4gZG9lcyIuDQo+IA0KDQpbTWVkXSBJIGFkZGVkIHRoaXMg TkVXIHRleHQ6IA0KDQogICAgICBUaGUgdXNlIG9mIEZRRE5zIG1heSBiZSBzdWJvcHRpbWFsIGJl Y2F1c2U6DQoNCiAgICAgICogIEl0IGluZHVjZXMgYm90aCBhbiBleHRyYSBsb2FkIGFuZCBpbmNy ZWFzZWQgZGVsYXlzIG9uIHRoZSBET1RTDQogICAgICAgICBzZXJ2ZXIgdG8gaGFuZGxlIGFuZCBt YW5hZ2UgRE5TIHJlc29sdXRpb24gcmVxdWVzdHMuDQoNCiAgICAgICogIEl0IGRvZXMgbm90IGd1 YXJhbnRlZSB0aGF0IHRoZSBET1RTIHNlcnZlciB3aWxsIHJlc29sdmUgYSBuYW1lDQogICAgICAg ICB0byB0aGUgc2FtZSBJUCBhZGRyZXNzZXMgdGhhdCB0aGUgRE9UUyBjbGllbnQgZG9lcy4NCg0K PiBHb29kIHBvaW50LCB3aWxsIHVwZGF0ZSBkcmFmdC4NCj4gDQo+ID4NCj4gPiA+ID4gPg0KPiA+ ID4gPiA+IE9uIHBhZ2UgMTggd2Ugc2F5IHRoYXQgc2VydmVyLWRvbWFpbiBET1RTIGdhdGV3YXlz ICJNVVNUIHN1cHBseQ0KPiA+ID4gPiA+IFsuLi5dICdjZGlkJyIsIGJ1dCB0aGUgcHJldmlvdXMg cGFyYWdyYXBoIHNheXMgdGhhdCB0aGVyZSBTSE9VTEQNCj4gPiA+ID4gPiBiZSBhIGNvbmZpZ3Vy YXRpb24gb3B0aW9uIGZvciB3aGV0aGVyIHRvIGluc2VydCAnY2RpZCcgb24gc3VjaA0KPiBzeXN0 ZW1zLg0KPiA+ID4gPiA+IFRoZSB0d28gcmVxdWlyZW1lbnRzIGFyZSBpbiBjb25mbGljdDsgd2hp Y2ggd2FzIGludGVuZGVkPyAgKEkNCj4gPiA+ID4gPiBhc3N1bWUgdGhlIE1VU1QgLS0gd2h5IHdv dWxkIGl0IGJlIGRlc2lyZWQgdG8gbm90IGhhdmUgdGhlDQo+ID4gPiA+ID4gaW5mb3JtYXRpb24N Cj4gPiA+ID4gPiBhdmFpbGFibGU/KQ0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBUaGlzIHRleHQg aXMgYWJvdXQgZ2F0ZXdheXMgdGhhdCBhcmUgaW5zdHJ1Y3RlZCB0byBpbnNlcnQgdGhlDQo+ID4g PiA+IGNkaWQgcGFyYW1ldGVyLiBnYXRld2F5cyBmYWNpbmcgYSBjbGllbnQncyBkb21haW4gYXJl IGluIHRoaXMgY2FzZS4NCj4gPiA+ID4NCj4gPiA+ID4gSSB1cGRhdGVkIHRoZSB0ZXh0IHdpdGgg InNlcnZlci1kb21haW4gRE9UUyBnYXRld2F5cyBpbnN0cnVjdGVkIHRvDQo+ID4gPiA+IGluc2Vy dCB0aGUgJ2NkaWQnIHBhcmFtZXRlciBNVVNUIHN1cHBseS4uIg0KPiA+DQo+ID4gQWgsIHRoYXQg bWFrZXMgc2Vuc2UgLS0gdGhhbmtzLg0KPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBUaGUgc2Ft ZSBwYXJhZ3JhcGggYWxzbyBzYXlzIHRoYXQgdGhlICdjZGlkJyBpcyAibGlrZWx5IHRvIGJlIHRo ZQ0KPiA+ID4gPiA+IHNhbWUgYXMiIHRoZSAnY3VpZCcsIHRob3VnaCBpbiBhZGRpdGlvbiB0byB0 aGUgbGlzdGVkIHJlYXNvbnMgdGhlDQo+ID4gPiA+ID4gY2xpZW50IG9ubHkgaGFzIGEgU0hPVUxE IHJlcXVpcmVtZW50IHRvIGZvbGxvdyB0aGlzIHByb2NlZHVyZSBmb3INCj4gPiA+ID4gPiBnZW5l cmF0aW5nICdjdWlkJzsgaXQgbWF5IGJlIHdvcnRoIG5vdGluZyB0aGUgY2xpZW50J3MgbGVld2F5 IGhlcmUgYXMNCj4gPiB3ZWxsLg0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBZZXMsIHRoaXMgaXMg d2h5IHdlIGhhdmUgImxpa2VseSIgaW4gdGhlIHRleHQuDQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4g PiA+ID4gPiAgICAgICBJZiBhIERPVFMgY2xpZW50IGlzIHByb3Zpc2lvbmVkLCBmb3IgZXhhbXBs ZSwgd2l0aCBkaXN0aW5jdA0KPiA+ID4gPiA+ICAgICAgIGNlcnRpZmljYXRlcyBhcyBhIGZ1bmN0 aW9uIG9mIHRoZSBwZWVyIHNlcnZlci1kb21haW4gRE9UUw0KPiBnYXRld2F5LA0KPiA+ID4gPiA+ ICAgICAgIGRpc3RpbmN0ICdjZGlkJyB2YWx1ZXMgbWF5IGJlIHN1cHBsaWVkIGJ5IGEgc2VydmVy LWRvbWFpbiBET1RTDQo+ID4gPiA+ID4gICAgICAgZ2F0ZXdheS4gIFRoZSB1bHRpbWF0ZSBET1RT IHNlcnZlciBNVVNUIHRyZWF0IHRob3NlICdjZGlkJw0KPiB2YWx1ZXMNCj4gPiA+ID4gPiAgICAg ICBhcyBlcXVpdmFsZW50Lg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSXMgdGhpcyBwYXJhZ3JhcGgg dHJ5aW5nIHRvIHNheSB0aGF0IGEgY2xpZW50IG1pZ2h0IHN1cHBseQ0KPiA+ID4gPiA+IGRpZmZl cmVudCBjZXJ0cyB0byBkaWZmZXJlbnQgZ2F0ZXdheXMgaW4gdGhlIHNhbWUgZG9tYWluDQo+ID4g PiA+DQo+ID4gPiA+IFtNZWRdIFllcy4NCj4gPiA+ID4NCj4gPiA+ID4gIChlLmcuLCBpZiBvbmUg c3VjaA0KPiA+ID4gPiA+IGdhdGV3YXkgZG9lcyBub3Qgc3VwcG9ydCBlY2RzYSBjZXJ0cyk/ICBJ dCB3YXMgcHJldHR5IGNvbmZ1c2luZyBvbg0KPiA+ID4gPiA+IHRoZSBmaXJzdCByZWFkLCBpbiBw YXJ0aWN1bGFyIGhvdyB0aGUgdWx0aW1hdGUgRE9UUyBzZXJ2ZXIgd291bGQNCj4gPiA+ID4gPiBr bm93IHRoYXQgdGhlIGRpZmZlcmVudCAnY2RpZCcgdmFsdWVzIGFjdHVhbGx5IGNvcnJlc3BvbmQg dG8gdGhlDQo+ID4gPiA+ID4gc2FtZSBjbGllbnQgW2RvbWFpbl0uDQo+ID4gPiA+DQo+ID4gPiA+ IFtNZWRdIFRoaXMgaXMgc3VwcG9zZWQgdG8gYmUgcHJvdmlzaW9uZWQgb24gdGhlIHNlcnZlci4g VGhpcyBpcw0KPiA+ID4gPiBkZXBsb3ltZW50LSBzcGVjaWZpYzsgaGVuY2Ugbm8gbWVudGlvbiBp biB0aGUgZHJhZnQuDQo+ID4NCj4gPiBBaCwgdGhhbmtzIGZvciB0aGUgZXhwbGFuYXRpb24uICBJ IGRvbid0IGhhdmUgYW55IHN1Z2dlc3RlZCByZXdvcmRpbmcgdGhhdA0KPiA+IHdvdWxkIGhlbHAg Y2xhcmlmeSAtLSBhbGwgSSBjYW4gY29tZSB1cCB3aXRoIGlzIHRvIGFkZCAiLCB3aGVuIGNvbmZp Z3VyZWQNCj4gdG8NCj4gPiBrbm93IHRoZXkgcmVwcmVzZW50IHRoZSBzYW1lIGNsaWVudCIsIHdo aWNoIGlzIGJvdGggbG9uZyBhbmQgbm90IHJlYWxseQ0KPiA+IHNheWluZyBhbnl0aGluZyBuZXcu DQo+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAgICAgIERPVFMgc2VydmVycyBNVVNUIGlnbm9y ZSAnY2RpZCcgYXR0cmlidXRlcyB0aGF0IGFyZSBkaXJlY3RseQ0KPiA+ID4gPiA+ICAgICAgIHN1 cHBsaWVkIGJ5IHNvdXJjZSBET1RTIGNsaWVudHMgb3IgY2xpZW50LWRvbWFpbiBET1RTIGdhdGV3 YXlzLg0KPiA+ID4gPiA+ICAgICAgIFRoaXMgaW1wbGllcyB0aGF0IGZpcnN0IHNlcnZlci1kb21h aW4gRE9UUyBnYXRld2F5cyBNVVNUIHN0cmlwDQo+ID4gPiA+ID4gICAgICAgJ2NkaWQnIGF0dHJp YnV0ZXMgc3VwcGxpZWQgYnkgRE9UUyBjbGllbnRzLiAgRE9UUyBzZXJ2ZXJzDQo+IFNIT1VMRA0K PiA+ID4gPiA+ICAgICAgIHN1cHBvcnQgYSBjb25maWd1cmF0aW9uIHBhcmFtZXRlciB0byBpZGVu dGlmeSBET1RTIGdhdGV3YXlzDQo+IHRoYXQNCj4gPiA+ID4gPiAgICAgICBhcmUgdHJ1c3RlZCB0 byBzdXBwbHkgJ2NkaWQnIGF0dHJpYnV0ZXMuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJcyB0aGVy ZSBhbnkgbWVjaGFuaXNtIChlLmcuLCBhdXRvZGV0ZWN0aW9uKSBvdGhlciB0aGFuIHRoaXMgYnkN Cj4gPiA+ID4gPiB3aGljaCBzZXJ2ZXJzL3Byb3hpZXMgY2FuIGxlYXJuIGFib3V0IHRoZSB0b3Bv bG9neSBpbmZvcm1hdGlvbg0KPiA+ID4gPiA+IG5lZWRlZCB0byBmdWxmaWwgdGhlc2UgcmVxdWly ZW1lbnRzPw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBJJ20gbm90IGF3YXJlIG9mIHN1Y2ggbWVj aGFuaXNtLg0KPiA+DQo+ID4gT2theSwgdGhhbmtzLg0KPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4g PiAgICBCZWNhdXNlIG9mIHRoZSBjb21wbGV4aXR5IHRvIGhhbmRsZSBwYXJ0aWFsIGZhaWx1cmUg Y2FzZXMsIHRoaXMNCj4gPiA+ID4gPiAgICBzcGVjaWZpY2F0aW9uIGRvZXMgbm90IGFsbG93IGZv ciBpbmNsdWRpbmcgbXVsdGlwbGUgbWl0aWdhdGlvbg0KPiA+ID4gPiA+ICAgIHJlcXVlc3RzIGlu IHRoZSBzYW1lIFBVVCByZXF1ZXN0LiAgQ29uY3JldGVseSwgYSBET1RTIGNsaWVudCBNVVNUDQo+ ID4gTk9UDQo+ID4gPiA+ID4gICAgaW5jbHVkZSBtdWx0aXBsZSAnc2NvcGUnIHBhcmFtZXRlcnMg aW4gdGhlIHNhbWUgUFVUIHJlcXVlc3QuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAibXVsdGlwbGUg J3Njb3BlJyBwYXJhbWV0ZXJzIiByZWFkcyBsaWtlIGEgQ0JPUiBvYmplY3Qgd2l0aA0KPiA+ID4g PiA+IGR1cGxpY2F0ZSBrZXlzOyBpcyB0aGlzIGludGVuZGVkIHRvIHJlZmVyIHRvIGEgbXVsdGkt dmFsdWVkIGFycmF5Pw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBXaGF0IGlzIGludGVuZGVkIGlz IHRoYXQgdGhlIHNjb3BlIGxpc3Qgc2hvdWxkIGluY2x1ZGUgb25seSBvbmUNCj4gPiBlbnRyeS4u DQo+ID4gPiA+DQo+ID4gPiA+IEkgY2FuIGNoYW5nZSB0byAibXVsdGlwbGUgJ3Njb3BlJyBjbGF1 c2VzIg0KPiA+DQo+ID4gSSdtIG5vdCBzdXJlIGhvdyBkaWZmZXJlbnQgdGhhdCBpcy4gIEl0IHNv dW5kcyBsaWtlIHlvdSdyZSB0cnlpbmcgdG8gYXZvaWQNCj4gPiAibXVsdGlwbGUgZW50cmllcyBp biB0aGUgJ3Njb3BlJyBhcnJheSI/DQo+IA0KPiBZZXMsIHByb3Bvc2VkIHdvcmRpbmcgdG8gc2F5 ICJNVVNUIE5PVCBpbmNsdWRlIG11bHRpcGxlIGVudHJpZXMgaW4gdGhlDQo+ICdzY29wZScgYXJy YXkiIGxvb2tzIGJldHRlci4NCg0KW01lZF0gRml4ZWQuIA0KDQo+IA0KPiA+DQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiAgICBUaGUgRE9UUyBzZXJ2ZXIgY291cGxlcyB0aGUgRE9UUyBzaWduYWwgYW5k IGRhdGEgY2hhbm5lbCBzZXNzaW9ucw0KPiA+ID4gPiA+ICAgIHVzaW5nIHRoZSBET1RTIGNsaWVu dCBpZGVudGl0eSBhbmQgb3B0aW9uYWxseSB0aGUgJ2NkaWQnDQo+ID4gPiA+ID4gcGFyYW1ldGVy DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBUaGlzIHJlcXVpcmVzIHRoZSBjbGllbnQgdG8gdXNlIHRo ZSBzYW1lIGNlcnRpZmljYXRlIHRvDQo+ID4gPiA+ID4gYXV0aGVudGljYXRlIHRoZSBzaWduYWwg YW5kIGRhdGEgY2hhbm5lbHMgdG8gYSBnaXZlbiBzZXJ2ZXIgKGV2ZW4NCj4gPiA+ID4gPiB3aGVu IGEgZ2F0ZXdheSBpcyBpbiB1c2UpLiAgQWJvdmUsIHdlIGRpc2N1c3NlZCBjYXNlcyB3aGVyZSBh DQo+ID4gPiA+ID4gY2xpZW50IG1pZ2h0IGhhdmUgbXVsdGlwbGUgY2VydGlmaWNhdGVzIGF2YWls YWJsZS4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gQWN0dWFsbHksIHRoZSB0ZXh0IGFib3ZlIGFw cGxpZXMgYWxzbyBpZiBkaXN0aW5jdCBjZXJ0aWZpY2F0ZXMNCj4gYXJlIHVzZWQuDQo+ID4gPiA+ IEVxdWl2YWxlbnQgImNsaWVudCBpZGVudGl0eSIgYXJlIHN1cHBvc2VkIHRvIGJlIGtub3duIHRv IHRoZSBzZXJ2ZXINCj4gPiA+ID4gYnkgYW4gb3V0IG9mIGJhbmQgbWVhbnMuIEluIGFsbCBjYXNl cywgdGhlIGlkZW50aXR5IChzYW1lIG9yDQo+ID4gPiA+IGVxdWl2YWxlbnQpIGlzIHVzZWQgdG8g Y291cGxlIHRoZSBzZXNzaW9ucy4NCj4gPg0KPiA+IEhtbS4gIElmIHdlIGFyZSB0YWxraW5nIGFu eXRoaW5nIGZhbmNpZXIgdGhhbiBqdXN0IGNvbXBhcmluZyBTdWJqZWN0DQo+ID4gaW5mb3JtYXRp b24gZnJvbSB0aGUgY2VydGlmaWNhdGUgKHdoaWNoIGFwcGFyZW50bHkgSSBmb3Jnb3QgYWJvdXQg d2hlbiBJDQo+ID4gd3JvdGUgdGhlIGFib3ZlISksIEkgdGhpbmsgd2UgbWF5IHdhbnQgdG8gaGF2 ZSBzb21lIHRleHQgaW4gdGhlIGRvY3VtZW50DQo+ID4gbWVudGlvbmluZyB0aGUgcG9zc2liaWxp dHkgb2Ygb3V0IG9mIGJhbmQgY29uZmlndXJhdGlvbi4NCj4gDQo+IE5vdGhpbmcgZmFuY3ksIHRo ZSB0d28gY2VydGlmaWNhdGVzIHdpbGwgaGF2ZSB0aGUgc2FtZSBkaXN0aW5ndWlzaGVkIG5hbWUN Cj4gKEROKSBpbiB0aGUgc3ViamVjdCBmaWVsZC4NCj4gQSBDQSBjYW4gaXNzdWUgbXVsdGlwbGUg Y2VydGlmaWNhdGVzIHdpdGggdGhlIHNhbWUgRE4gdG8gdGhlIERPVFMgY2xpZW50IChvcg0KPiBz dWJqZWN0KS4NCj4gDQo+ID4NCj4gPiA+ID4gICBXaGVyZSBkbyB3ZSBzcGVjaWZ5IHRoZSByZXF1 aXJlbWVudCB0byB1c2UgdGhlDQo+ID4gPiA+ID4gc2FtZSBjZXJ0aWZpY2F0ZSBmb3Igc2lnbmFs IGFuZCBkYXRhIGNoYW5uZWxzPw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBXZSBkb24ndCBoYXZl IHN1Y2ggcmVxdWlyZW1lbnQgaW4gZXhpc3RpbmcgRE9UUyBkb2N1bWVudHMuDQo+ID4gPiA+DQo+ ID4gPiA+ID4NCj4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIERPVFMgYWdlbnRzIGNhbiBzYWZlbHkNCj4gPiA+ID4gPiAgICBpZ25vcmUgVmVu ZG9yLVNwZWNpZmljIHBhcmFtZXRlcnMgdGhleSBkb24ndCB1bmRlcnN0YW5kLg0KPiA+ID4gPiA+ DQo+ID4gPiA+ID4gVGhpcyBpcyBub3QgYSB2ZXJ5IHVzZWZ1bCBzdGF0ZW1uZXQgaWYgdGhlIGFn ZW50IG11c3Qga25vdyB0aGF0IGENCj4gPiA+ID4gPiBwYXJhbWV0ZXIgaXMgdmVuZG9yLXNwZWNp ZmljIGluIG9yZGVyIHRvIHNhZmVseSBpZ25vcmUgaXQuDQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRd IFRoZSBhZ2VudCByZWxpZXMgb24gdGhlIGNib3Iga2V5IHZhbHVlIHRvIGRldGVybWluZSB0aGF0 IGENCj4gPiA+ID4gcGFyYW1ldGVyIGNhbiBiZSBzYWZlbHkgaWdub3JlZCBvciBub3QgKGNvbXBy ZWhlbnNpb24tcmVxdWlyZWQpLiBBDQo+ID4gPiA+IHJhbmdlIG9mIGtleXMgaXMgcmVzZXJ2ZWQg Zm9yIGNvbXByZWhlbnNpb24tb3B0aW9uYWwuIEFuIGFnZW50DQo+ID4gPiA+IGNoZWNrcyB0aGUg cmFuZ2UgdG8gd2hpY2ggYmVsb25nIGEgcGFyYW1ldGVyLCBhbmQgdGhlbiBiZWhhdmVzDQo+ID4g YWNjb3JkaW5nbHkuDQo+ID4NCj4gPiBJZiB3ZSByZWFsbHkgbWVhbiBjb21wcmVoZW5zaW9uLW9w dGlvbmFsLCBtYXliZSB3ZSBzaG91bGQganVzdCBzYXkgdGhhdCwNCj4gPiBpbnN0ZWFkIG9mICJW ZW5kb3ItU3BlY2lmaWMiLg0KPiANCj4gWWVzLCB3aWxsIHVwZGF0ZS4NCg0KW01lZF0gRml4ZWQu IA0KDQo+IA0KPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAgICBJZiB0aGUgRE9UUyBzZXJ2ZXIg ZG9lcyBub3QgZmluZCB0aGUgJ21pZCcgcGFyYW1ldGVyIHZhbHVlDQo+IGNvbnZleWVkDQo+ID4g PiA+ID4gICAgaW4gdGhlIFBVVCByZXF1ZXN0IGluIGl0cyBjb25maWd1cmF0aW9uIGRhdGEsIGl0 IE1BWSBhY2NlcHQgdGhlDQo+ID4gPiA+ID4gICAgbWl0aWdhdGlvbiByZXF1ZXN0IGJ5IHNlbmRp bmcgYmFjayBhIDIuMDEgKENyZWF0ZWQpIHJlc3BvbnNlIHRvDQo+IHRoZQ0KPiA+ID4gPiA+ICAg IERPVFMgY2xpZW50OyB0aGUgRE9UUyBzZXJ2ZXIgd2lsbCBjb25zZXF1ZW50bHkgdHJ5IHRvIG1p dGlnYXRlIHRoZQ0KPiA+ID4gPiA+ICAgIGF0dGFjay4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAg IElmIHRoZSBET1RTIHNlcnZlciBmaW5kcyB0aGUgJ21pZCcgcGFyYW1ldGVyIHZhbHVlIGNvbnZl eWVkIGluIHRoZQ0KPiA+ID4gPiA+ICAgIFBVVCByZXF1ZXN0IGluIGl0cyBjb25maWd1cmF0aW9u IGRhdGEgYm91bmQgdG8gdGhhdCBET1RTIGNsaWVudCwNCj4gaXQNCj4gPiA+ID4gPiAgICBNQVkg dXBkYXRlIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QsIGFuZCBhIDIuMDQgKENoYW5nZWQpIHJlc3Bv bnNlDQo+IGlzDQo+ID4gPiA+ID4gICAgcmV0dXJuZWQgdG8gaW5kaWNhdGUgYSBzdWNjZXNzZnVs IHVwZGF0ZSBvZiB0aGUgbWl0aWdhdGlvbg0KPiByZXF1ZXN0Lg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gVGhlcmUgYXJlIHR3byAiTUFZInMgc3ByZWFkIGFjcm9zcyB0aGVzZSB0d28gcGFyYWdyYXBo czsgZG8gd2UNCj4gPiA+ID4gPiB3YW50IHRvIHNheSBhbnl0aGluZyBhYm91dCBpbiB3aGF0IGNh c2VzIHRoZSBzZXJ2ZXIgbWlnaHQgd2FudCB0bw0KPiA+ID4gPiA+IGhhdmUgZGlmZmVyZW50IGJl aGF2aW9yIChpLmUuLCBpZ25vcmUgdGhlIE1BWSk/DQo+ID4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ ID4gW01lZF0gRm9yIHRoZSBmaXJzdCBNQVksIGEgdHlwaWNhbCBleGFtcGxlIGlzIHdoZW4gYSBy YXRlIGxpbWl0IGlzDQo+IGVuZm9yY2VkOg0KPiA+ID4gPg0KPiA+ID4gPiAgICBSYXRlLWxpbWl0 aW5nIERPVFMgcmVxdWVzdHMsIGluY2x1ZGluZyB0aG9zZSB3aXRoIG5ldyAnY3VpZCcgdmFsdWVz LA0KPiA+ID4gPiAgICBmcm9tIHRoZSBzYW1lIERPVFMgY2xpZW50IGRlZmVuZHMgYWdhaW5zdCBE b1MgYXR0YWNrcyB0aGF0IHdvdWxkDQo+ID4gPiA+ICAgIHJlc3VsdCBpbiB2YXJ5aW5nIHRoZSAn Y3VpZCcgdG8gZXhoYXVzdCBET1RTIHNlcnZlciByZXNvdXJjZXMuDQo+IFJhdGUtDQo+ID4gPiA+ ICAgIGxpbWl0IHBvbGljaWVzIFNIT1VMRCBiZSBlbmZvcmNlZCBvbiBET1RTIGdhdGV3YXlzIChp ZiBkZXBsb3llZCkgYW5kDQo+ID4gPiA+ICAgIERPVFMgc2VydmVycw0KPiA+ID4gPg0KPiA+ID4g PiBGb3IgdGhlIHNlY29uZCBNQVksIHRoZSBzZXJ2ZXIgbWF5IGhhdmUgbW9yZSB2aXNpYmlsaXR5 IG9uIHRoZQ0KPiA+ID4gPiBhdHRhY2sgYW5kIHRoZW4gbWF5IGRlY2lkZSB0byB1cGRhdGUgYWNj b3JkaW5nbHkuDQo+ID4gPiA+DQo+ID4gPiA+IEkgZG9uJ3Qga25vdyBpZiBpdCBpcyB3b3J0aCB0 byBhZGQgZXhhbXBsZXMuIEFueSBwcmVmZXJlbmNlPw0KPiA+DQo+ID4gSSB3b3VsZCBsZWFuIHRv d2FyZHMgYWRkaW5nICJBIHNlcnZlciBjb3VsZCByZWplY3QgbWl0aWdhdGlvbiByZXF1ZXN0cyB3 aGVuDQo+ID4gaXQgaXMgbmVhciBjYXBhY2l0eSBvciBuZWVkcyB0byByYXRlLWxpbWl0IGEgcGFy dGljdWxhciBjbGllbnQsIGZvcg0KPiBleGFtcGxlIiBmb3INCj4gPiB0aGUgZm9ybWVyLCBidXQg bGVhdmluZyB0aGUgbGF0dGVyIGFzLWlzLiAgQnV0IEkgaGF2ZSBubyBzdHJvbmcgcHJlZmVyZW5j ZXMNCj4gPiBoZXJlIGFuZCBhbSBoYXBweSB0byBhZHZhbmNlIHRoZSBkb2N1bWVudCBlaXRoZXIg d2F5Lg0KPiANCg0KW01lZF0gRml4ZWQuIFRoYW5rcy4NCg== From nobody Thu Jan 17 01:10:11 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E8F4128D0C; Thu, 17 Jan 2019 01:10:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ue3i2_KNM5hg; Thu, 17 Jan 2019 01:10:08 -0800 (PST) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 049D3126DBF; Thu, 17 Jan 2019 01:10:08 -0800 (PST) Received: from opfednr06.francetelecom.fr (unknown [xx.xx.xx.70]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id 43gJFB3kZhzCr36; Thu, 17 Jan 2019 10:10:06 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.32]) by opfednr06.francetelecom.fr (ESMTP service) with ESMTP id 43gJFB2ml0zDq7l; Thu, 17 Jan 2019 10:10:06 +0100 (CET) Received: from OPEXCAUBM5E.corporate.adroot.infra.ftgroup (10.114.13.82) by OPEXCLILM32.corporate.adroot.infra.ftgroup (10.114.31.32) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 10:10:06 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5E.corporate.adroot.infra.ftgroup ([fe80::849f:f804:b713:d99a%21]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 10:10:05 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (3rd Part) Thread-Index: AdStnwkIYLnL/STeQyWYhz1QpkBSPgAA8dOQABXjZoAADfjEUAAEBe6w Date: Thu, 17 Jan 2019 09:10:05 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA08F88@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08355@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190117001952.GN91727@kduck.mit.edu> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (3rd Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 09:10:10 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNz YWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgW21h aWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiBFbnZvecOpwqA6IGpl dWRpIDE3IGphbnZpZXIgMjAxOSAwODoyMQ0KPiDDgMKgOiBCZW5qYW1pbiBLYWR1aw0KPiBDY8Kg OiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWxAaWV0Zi5vcmc7DQo+IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUkU6IEFEIHJldmlldyBv ZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDNyZCBQYXJ0KQ0KPiANCj4gPiAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IEJlbmphbWluIEthZHVrIDxrYWR1 a0BtaXQuZWR1Pg0KPiA+IFNlbnQ6IFRodXJzZGF5LCBKYW51YXJ5IDE3LCAyMDE5IDU6NTAgQU0N Cj4gPiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29u ZGFATWNBZmVlLmNvbT4NCj4gPiBDYzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTsgZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gPiBjaGFubmVsQGlldGYub3JnOyBkb3RzQGlldGYub3Jn DQo+ID4gU3ViamVjdDogUmU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNo YW5uZWwtMjUgKDNyZCBQYXJ0KQ0KPiA+DQo+ID4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20g b3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3MNCj4gb3INCj4g PiBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtu b3cgdGhlIGNvbnRlbnQgaXMNCj4gPiBzYWZlLg0KPiA+DQo+ID4gT24gV2VkLCBKYW4gMTYsIDIw MTkgYXQgMDE6NTg6MzBQTSArMDAwMCwgS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+IHdy b3RlOg0KPiA+ID4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4gPiBGcm9tOiBE b3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiA+ID4gPiBtb2hhbWVk LmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiA+IFNlbnQ6IFdlZG5lc2RheSwgSmFudWFyeSAx NiwgMjAxOSA2OjU2IFBNDQo+ID4gPiA+IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVk dT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4gPiA+IGNoYW5uZWxAaWV0Zi5vcmcNCj4g PiA+ID4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBBRCBy ZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1DQo+ID4gPiA+ICgzcmQg UGFydCkNCj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gUmUtLA0KPiA+ID4gPg0K PiA+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4NCj4gPiA+ID4gQ2hlZXJzLA0KPiA+ ID4gPiBNZWQNCj4gPiA+ID4NCj4gPiA+ID4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0N Cj4gPiA+ID4gPiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVu dm95w6nCoDogbWVyY3JlZGkgMTYNCj4gPiA+ID4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDog ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnDQo+ID4gPiA+ID4gQ2PCoDog ZG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBUbyBhdm9p ZA0KPiBtYWludGFpbmluZyBhDQo+ID4gPiA+ID4gICAgbG9uZyBsaXN0IG9mIG92ZXJsYXBwaW5n IG1pdGlnYXRpb24gcmVxdWVzdHMgKGkuZS4sIHJlcXVlc3RzIHdpdGgNCj4gdGhlDQo+ID4gPiA+ ID4gICAgc2FtZSAndHJpZ2dlci1taXRpZ2F0aW9uJyB0eXBlIGFuZCBvdmVybGFwcGluZyBzY29w ZXMpIGZyb20gYSBET1RTDQo+ID4gPiA+ID4gICAgY2xpZW50IGFuZCBhdm9pZCBlcnJvci1wcm9u ZSBwcm92aXNpb25pbmcgb2YgbWl0aWdhdGlvbiByZXF1ZXN0cw0KPiBmcm9tDQo+ID4gPiA+ID4g ICAgYSBET1RTIGNsaWVudCwgdGhlIG92ZXJsYXBwZWQgbG93ZXIgbnVtZXJpYyAnbWlkJyBNVVNU IGJlDQo+ID4gPiA+ID4gICAgYXV0b21hdGljYWxseSBkZWxldGVkIGFuZCBubyBsb25nZXIgYXZh aWxhYmxlIGF0IHRoZSBET1RTIHNlcnZlci4NCj4gPiA+ID4gPiAgICBGb3IgZXhhbXBsZSwgaWYg dGhlIERPVFMgc2VydmVyIHJlY2VpdmVzIGEgbWl0aWdhdGlvbiByZXF1ZXN0DQo+IHdoaWNoDQo+ ID4gPiA+ID4gICAgb3ZlcmxhcHMgd2l0aCBhbiBleGlzdGluZyBtaXRpZ2F0aW9uIHdpdGggYSBo aWdoZXIgbnVtZXJpYyAnbWlkJywNCj4gdGhlDQo+ID4gPiA+ID4gICAgRE9UUyBzZXJ2ZXIgcmVq ZWN0cyB0aGUgcmVxdWVzdCBieSByZXR1cm5pbmcgNC4wOSAoQ29uZmxpY3QpIHRvDQo+IHRoZQ0K PiA+ID4gPiA+ICAgIERPVFMgY2xpZW50LiAgWy4uLl0NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFRo aXMgc2VlbXMgdG8gYmUgaW50ZXJuYWxseSBpbmNvbnNpc3RlbnQgLS0gZmlyc3Qgd2UgaGVhciB0 aGF0IHRoZQ0KPiA+ID4gPiA+IG92ZXJsYXBwZWQgbWl0aWdhdGlvbiByZXF1ZXN0IHdpdGggbG93 ZXIgJ21pZCcgTVVTVCBiZSBkZWxldGVkDQo+ID4gPiA+ID4gKEJUVywgbm90ZSBteSByZXdvcmRp bmcpLCBidXQgYXQgdGhlIGVuZCB3ZSBhcmUgaGVhcmluZyB0aGF0IGENCj4gPiA+ID4gPiByZXF1 ZXN0IHRvIGNyZWF0ZSBhbiBvdmVybGFwcGluZyBtaXRnaWF0aW9uIG11c3QgYmUgcmVqZWN0ZWQN Cj4gPiA+DQo+ID4gPg0KPiA+ID4gVGhlIGV4YW1wbGUgaXMgZGlzY3Vzc2luZyBvdXQgb2Ygb3Jk ZXIgZGVsaXZlcnkgb2YgbWl0aWdhdGlvbiByZXF1ZXN0cw0KPiA+ID4gKERPVFMgY2xpZW50IHNl bmRzIGxvd2VyIG51bWVyaWMgJ21pZCcgZm9sbG93ZWQgYnkgaGlnaGVyIG51bWVyaWMgJ21pZCcN Cj4gPiBidXQgdGhlIERPVFMgc2VydmVyIHJlY2VpdmVzIHRoZSBoaWdoZXIgbnVtZXJpYyAnbWlk JyBmaXJzdCBhbmQgYWNjZXB0cyB0aGUNCj4gPiByZXF1ZXN0LiBBdCBhIGxhdGVyIHBvaW50IG9m IHRpbWUsIHdoZW4gdGhlIHNlcnZlciByZWNlaXZlcyB0aGUgbG93ZXINCj4gbnVtZXJpYw0KPiA+ ICdtaWQnLCB0aGUgcmVxdWVzdCBpcyByZWplY3RlZCBieSB0aGUgc2VydmVyIHdpdGggNC4wOSBl cnJvciByZXNwb25zZS4NCj4gPg0KPiA+IEFoLCBJIGd1ZXNzIEkgd2FzIHJlYWRpbmcgdG9vIGZh c3Q7IHRoaXMgaXMgYWxyZWFkeSBjbGVhcmx5IHNwZWxsZWQgb3V0Lg0KPiA+DQo+ID4gPiAtVGly dQ0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gSXQgaXMgcmVqZWN0ZWQgYmVjYXVzZSBp dCBoYXMgYSBsb3dlciBudW1lcmljICdtaWQnLg0KPiA+ID4gPg0KPiA+ID4gPiAuLiAgKEEgY291 cGxlIHBhZ2VzDQo+ID4gPiA+ID4gbGF0ZXIgd2UgYWxzbyBzYXkgImNhbiBiZSBhY2hpZXZlZCBi eSBzZW5kaW5nIGEgUFVUIHJlcXVlc3QgWy4uLl0NCj4gPiA+ID4gPiB0aGF0IHdpbGwgb3ZlcnJp ZGUgdGhlIGV4aXN0aW5nIG9uZSB3aXRoIG92ZXJsYXBwaW5nIG1pdGlnYXRpb24NCj4gc2NvcGVz Ig0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBZZXMsIHRoZSBuZXcgb25lIHdpbGwgaGF2ZSBhIGhp Z2hlciAnbWlkJy4NCj4gPiA+ID4NCj4gPiA+ID4gLA0KPiA+ID4gPiA+IHdoaWNoIHN1Z2dlc3Rz IGEgcmVzb2x1dGlvbiBvZiB0aGUgY29uZmxpY3QuDQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIEkg ZG9uJ3Qgc2VlIGFueSBpbmNvbnNpc3RlbmN5LiBQbGVhc2UgY2xhcmlmeSBpZiBJIG1pc3NlZCB5 b3VyDQo+IHBvaW50Lg0KPiA+DQo+ID4gVGlydSBnb3QgaXQgLS0gZXJyb3Igb24gbXkgcGFydC4N Cj4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gICAgICAgICAgICAgICAgICBUaGUgcmVzcG9uc2Ug aW5jbHVkZXMgZW5vdWdoIGluZm9ybWF0aW9uIGZvciBhIERPVFMNCj4gPiA+ID4gPiAgICBjbGll bnQgdG8gcmVjb2duaXplIHRoZSBzb3VyY2Ugb2YgdGhlIGNvbmZsaWN0IGFzIGRlc2NyaWJlZCBi ZWxvdzoNCj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAgIGNvbmZsaWN0LWluZm9ybWF0aW9uOiAgSW5k aWNhdGVzIHRoYXQgYSBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMNCj4gPiA+ID4gPiAgICBbLi4uXQ0K PiA+ID4gPiA+DQo+ID4gPiA+ID4gSSdtIG5vdCBlbnRpcmVseSBzdXJlIHdoYXQgZW5jb2Rpbmcg dG8gaW5mZXIgZnJvbSBqdXN0IHRoaXMNCj4gPiA+ID4gPiBkZXNjcmlwdGlvbg0KPiA+ID4gPiA+ IC0tIGNvbmZsaWN0LWluZm9ybWF0aW9uLy1jYXVzZS8tc2NvcGUgYXJlIGluIHRoZSBZQU5HIG1v ZGVsLCBidXQNCj4gPiA+ID4gPiBkbyB3ZSBuZWVkIHRvIHNheSB0aGF0IHRoZSByZXNwb25zZSBj b250YWlucyBhIENCT1IgcmVwcmVzZW50YXRpb24NCj4gPiA+ID4gPiBvZiB0aGUgc3VidHJlZSBz dGFydGluZyBhdCBjb25mbGljdC1pbmZvcm1hdGlvbiAob3Igc29tZXRoaW5nIGxpa2UNCj4gPiA+ ID4gPiB0aGF0KSwgb3IgaXMgdGhpcyBpbXBsaWNpdGx5IHNwZWNpZmllZCBlbHNld2hlcmUgaW4g dGhlIGRvY3VtZW50Pw0KPiA+ID4gPiA+IEZvciBleGFtcGxlLCBGaWd1cmUgOSBoYXMgYW4gZXhw bGljaXQgSlNPTiBkaWFnbm9zdGljIG5vdGF0aW9uIGZvcg0KPiA+ID4gPiA+IGEgbWVzc2FnZSBy ZXNwb25zZS4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gVGhpcyBpcyBjb3ZlcmVkIGJ5IHRoaXMg dGV4dDoNCj4gPiA+ID4NCj4gPiA+ID4gICAgVGhoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEgWUFO RyBtb2R1bGUgZm9yDQo+ID4gPiA+ICAgIHJlcHJlc2VudGluZyBET1RTIG1pdGlnYXRpb24gc2Nv cGVzLCBET1RTIHNpZ25hbCBjaGFubmVsIHNlc3Npb24NCj4gPiA+ID4gICAgY29uZmlndXJhdGlv biBkYXRhLCBhbmQgRE9UUyByZWRpcmVjdGVkIHNpZ25hbGxpbmcgKFNlY3Rpb24gNSkuDQo+ID4g PiA+ICAgIFJlcHJlc2VudGluZyB0aGVzZSBkYXRhIGFzIENCT1IgZGF0YSBpcyBhc3N1bWVkIHRv IGZvbGxvdyB0aGUgcnVsZXMNCj4gPiA+ID4gICAgaW4gW0ktRC5pZXRmLWNvcmUteWFuZy1jYm9y XSBvciB0aG9zZSBpbiBbUkZDNzk1MV0gY29tYmluZWQgd2l0aA0KPiA+ID4gPiAgICBKU09OL0NC T1IgY29udmVyc2lvbiBydWxlcyBpbiBbUkZDNzA0OV0uICBBbGwgcGFyYW1ldGVycyBpbiB0aGUN Cj4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXg0KPiA+ID4gPiAgICBwYXlsb2FkIG9mIHRoZSBET1RTIHNpZ25h bCBjaGFubmVsIGFyZSBtYXBwZWQgdG8gQ0JPUiB0eXBlcyBhcw0KPiA+ID4gPg0KPiA+IF5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e DQo+ID4gPiA+ICAgIHNwZWNpZmllZCBpbiBTZWN0aW9uIDYuDQo+ID4gPiA+ICAgIF5eXl5eXl5e Xl5eXl5eXl5eXl5eXl4NCj4gPg0KPiA+IEkgd291bGQgc3RpbGwgcHJlZmVyIHRvIHNlZSBzb21l dGhpbmcgbGlrZSAiYXMgZGVzY3JpYmVkIGJlbG93IGluIHRoZQ0KPiAnY29uZmxpY3QtDQo+ID4g aW5mb3JtYXRpb24nIHN1YnRyZWUgd2l0aCBvbmx5IHRoZSByZWxldmFudCBub2RlcyBsaXN0ZWQi LCB0byB0cnkgdG8NCj4gZm9yZXN0YWxsDQo+ID4gYW55IG90aGVyIGNvbW1lbnRzIGZyb20gZGly ZWN0b3JhdGUgcmV2aWV3cy4NCg0KW01lZF0gRG9uZS4gDQoNCj4gPg0KPiA+ID4gPiA+DQo+ID4g PiA+ID4gICAgICAgY29uZmxpY3Qtc2NvcGU6ICBJbmRpY2F0ZXMgdGhlIGNvbmZsaWN0IHNjb3Bl LiAgSXQgbWF5IGluY2x1ZGUNCj4gYQ0KPiA+ID4gPiA+ICAgICAgICAgIGxpc3Qgb2YgSVAgYWRk cmVzc2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBvZiBwb3J0DQo+ID4gPiA+ID4gICAg ICAgICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMsIGEgbGlzdCBvZiBGUURO cywgYSBsaXN0DQo+IG9mDQo+ID4gPiA+ID4gICAgICAgICAgVVJJcywgYSBsaXN0IG9mIGFsaWFz LW5hbWVzLCBvciBhICdtaWQnLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gVGhpcyBmZWVscyBhIGxp dHRsZSB1bmRlci1zcGVjaWZpZWQgLS0gZG8gd2UgbmVlZCB0byBpbmNsdWRlDQo+ID4gPiA+ID4g ZXhhY3RseSB0aGUgY29uZmxpY3RpbmcgZW50cmllcz8gIE9yIHdvdWxkIHdlIGp1c3Qgc2F5IHNv bWV0aGluZw0KPiA+ID4gPiA+IGxpa2UgInRoaXMgY29uZmxpY3RzIHdpdGggJ21pZCcgODsgZmln dXJlIGl0IG91dCI/DQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIFRoaXMgY2xhdXNlIGluZGljYXRl cyB0aGUgZXhhY3QgY29uZmxpY3Qgc2NvcGUuIEl0IG1heSBiZSBmb3INCj4gPiBleGFtcGxlOg0K PiA+ID4gPiAtIGEgY29uZmxpY3Qgb2YgSVAgYWRkcmVzc2VzLiBUaGVuLCB0aGUgdGFyZ2V0IGFk ZHJlc3NlcyBpbiBjb25mbGljdA0KPiA+ID4gPiBhcmUgcmV0dXJuZWQuDQo+ID4gPiA+IC0gYSBj b25mbGljdCB3aXRoIGFub3RoZXIgcmVxdWVzdCwgdGhlbiB0aGUgbWlkIG9mIHRoYXQgcmVxdWVz dCBpcw0KPiA+ID4gPiByZXR1cm5lZA0KPiA+ID4gPiAtIGV0Yy4NCj4gPiA+ID4NCj4gPiA+ID4g V2UgY2FuIHVwZGF0ZSB0aGUgdGV4dCBhcyBmb2xsb3dzOg0KPiA+ID4gPg0KPiA+ID4gPiAgICAg ICBjb25mbGljdC1zY29wZTogIENoYXJhY3Rlcml6ZXMgdGhlIGV4YWN0IGNvbmZsaWN0IHNjb3Bl LiAgSXQgbWF5DQo+IGluY2x1ZGUNCj4gPiBhDQo+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAg ICAgXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eDQo+ID4gPiA+ICAgICAgICAgICBsaXN0IG9mIElQ IGFkZHJlc3NlcywgYSBsaXN0IG9mIHByZWZpeGVzLCBhIGxpc3Qgb2YgcG9ydA0KPiA+ID4gPiAg ICAgICAgICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMsIGEgbGlzdCBvZiBG UUROcywgYSBsaXN0DQo+IG9mDQo+ID4gPiA+ICAgICAgICAgICBVUklzLCBhIGxpc3Qgb2YgYWxp YXMtbmFtZXMsIG9yIGEgJ21pZCcuDQo+ID4NCj4gPiBUaGF0J3MgcHJvYmFibHkgYSBjbGFyaWZp Y2F0aW9uIHdvcnRoIG1ha2luZywgdGhhbmtzLg0KPiA+DQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4g PiA+ID4gPiAgICAgICAgICAzOiAgQ1VJRCBDb2xsaXNpb24uICBUaGlzIGNvZGUgaXMgcmV0dXJu ZWQgd2hlbiBhIERPVFMNCj4gY2xpZW50DQo+ID4gPiA+ID4gICAgICAgICAgICAgIHVzZXMgYSAn Y3VpZCcgdGhhdCBpcyBhbHJlYWR5IHVzZWQgYnkgYW5vdGhlciBET1RTDQo+IGNsaWVudC4NCj4g PiA+ID4gPiAgICAgICAgICAgICAgVGhpcyBjb2RlIGlzIGFuIGluZGljYXRpb24gdGhhdCB0aGUg cmVxdWVzdCBoYXMgYmVlbg0KPiA+ID4gPiA+ICAgICAgICAgICAgICByZWplY3RlZCBhbmQgYSBu ZXcgcmVxdWVzdCB3aXRoIGEgbmV3ICdjdWlkJyBpcyB0byBiZQ0KPiByZS0NCj4gPiA+ID4gPiAg ICAgICAgICAgICAgc2VudCBieSB0aGUgRE9UUyBjbGllbnQuICBOb3RlIHRoYXQgJ2NvbmZsaWN0 LXN0YXR1cycsDQo+ID4gPiA+ID4gICAgICAgICAgICAgICdjb25mbGljdC1zY29wZScsIGFuZCAn cmV0cnktdGltZXInIGFyZSBub3QgcmV0dXJuZWQgaW4NCj4gdGhlDQo+ID4gPiA+ID4gICAgICAg ICAgICAgIGVycm9yIHJlc3BvbnNlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gKERvIHdlIHdhbnQg Ik1VU1QgTk9UIiAyMTE5IGxhbmd1YWdlIHRvIHByZXZlbnQgdGhlaXIgaW5jbHVzaW9uIG9yDQo+ ID4gPiA+ID4gaXMgdGhlIGN1cnJlbnQgZGVzY3JpcHRpdmUgbGFuZ3VhZ2Ugc3VmZmljaWVudD8p DQo+ID4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gT0suDQo+ID4gPiA+DQo+ID4gPiA+ ID4gICAgICAgY29uZmxpY3Qtc2NvcGU6ICBJbmRpY2F0ZXMgdGhlIGNvbmZsaWN0IHNjb3BlLiAg SXQgbWF5IGluY2x1ZGUNCj4gYQ0KPiA+ID4gPiA+ICAgICAgICAgIGxpc3Qgb2YgSVAgYWRkcmVz c2VzLCBhIGxpc3Qgb2YgcHJlZml4ZXMsIGEgbGlzdCBvZiBwb3J0DQo+ID4gPiA+ID4gICAgICAg ICAgbnVtYmVycywgYSBsaXN0IG9mIHRhcmdldCBwcm90b2NvbHMsIGEgbGlzdCBvZiBGUUROcywg YSBsaXN0DQo+IG9mDQo+ID4gPiA+ID4gICAgICAgICAgVVJJcywgYSBsaXN0IG9mIGFsaWFzLW5h bWVzLCBvciByZWZlcmVuY2VzIHRvIGNvbmZsaWN0aW5nDQo+IEFDTHMuDQo+ID4gPiA+ID4NCj4g PiA+ID4gPiBIb3cgZG8gSSByZWZlcmVuY2UgYW4gQUNMPw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVk XSBCeSBhbiBhY2wtbmFtZS4gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvIGhpbnQgdGhpczoNCj4gPiA+ ID4NCj4gPiA+ID4gIihieSBhbiAnYWNsLW5hbWUnLCB0eXBpY2FsbHkgW0ktRC5pZXRmLWRvdHMt ZGF0YS1jaGFubmVsXSkiDQo+ID4NCj4gPiBBaCwgdGhhbmtzLg0KPiA+DQo+ID4gPiA+ID4NCj4g PiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoaXMgY2FuIGJlIGFjaGlldmVkIGJ5 IHNlbmRpbmcgYSBQVVQNCj4gcmVxdWVzdA0KPiA+ID4gPiA+ICAgIHdpdGggYSBuZXcgJ21pZCcg dmFsdWUgdGhhdCB3aWxsIG92ZXJyaWRlIHRoZSBleGlzdGluZyBvbmUgd2l0aA0KPiA+ID4gPiA+ ICAgIG92ZXJsYXBwaW5nIG1pdGlnYXRpb24gc2NvcGVzLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g RG8gd2Ugd2FudCB0byByZWl0ZXJhdGUgdGhhdCB0aGUgZXhpc3Rpbmcgb25lIHdpbGwgYmUgZGVs ZXRlZD8NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gVGhlIHRleHQgeW91IHF1b3RlZCByZW1pbmRz IHRoYXQgdGhlIG5ldyByZXF1ZXN0IHdpbGwgZGVsZXRlDQo+ID4gPiA+IHRoZSBleGlzdGluZyBv bmUuDQo+ID4NCj4gPiBJIHdhcyB0aGlua2luZyB0aGF0IHNvbWV0aW1lcyB0aGUgd29yZCAib3Zl cnJpZGUiIG1lYW5zIHRoYXQgdHdvIGl0ZW1zIGFyZQ0KPiA+IGJvdGggcHJlc2VudCwgYnV0IG9u ZSB0YWtlcyBwcmVjZWRlbmNlIG92ZXIgdGhlIG90aGVyIGR1cmluZyBwcm9jZXNzaW5nOw0KPiA+ ICJkZWxldGVkIiB3b3VsZCB0aGVuIG1lYW4gdGhhdCBvbmx5IG9uZSBvZiB0aGUgaXRlbXMgaXMg cHJlc2VudC4NCg0KW01lZF0gWW91IGFyZSByaWdodC4gRXZlbiBpZiBib3RoIGFyZSBtYWludGFp bmVkLCB3ZSBkbyBhbHJlYWR5IGhhdmUgdGhpcyB0ZXh0OiANCg0KVG8gYXZvaWQgbWFpbnRhaW5p bmcgYQ0KICAgbG9uZyBsaXN0IG9mIG92ZXJsYXBwaW5nIG1pdGlnYXRpb24gcmVxdWVzdHMgKGku ZS4sIHJlcXVlc3RzIHdpdGggdGhlDQogICBzYW1lICd0cmlnZ2VyLW1pdGlnYXRpb24nIHR5cGUg YW5kIG92ZXJsYXBwaW5nIHNjb3BlcykgZnJvbSBhIERPVFMNCiAgIGNsaWVudCBhbmQgYXZvaWQg ZXJyb3ItcHJvbmUgcHJvdmlzaW9uaW5nIG9mIG1pdGlnYXRpb24gcmVxdWVzdHMgZnJvbQ0KICAg YSBET1RTIGNsaWVudCwgdGhlIG92ZXJsYXBwZWQgbG93ZXIgbnVtZXJpYyAnbWlkJyBNVVNUIGJl DQogICBhdXRvbWF0aWNhbGx5IGRlbGV0ZWQgYW5kIG5vIGxvbmdlciBhdmFpbGFibGUgYXQgdGhl IERPVFMgc2VydmVyLg0KDQpObyBuZWVkIHRvIHJlcGVhdCBpdCBhZ2FpbiwgSU1PLg0KDQo+ID4N Cj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAgIEZvciBhIG1pdGlnYXRpb24gcmVxdWVzdCB0byBjb250 aW51ZSBiZXlvbmQgdGhlIGluaXRpYWwgbmVnb3RpYXRlZA0KPiA+ID4gPiA+ICAgIGxpZmV0aW1l LCB0aGUgRE9UUyBjbGllbnQgaGFzIHRvIHJlZnJlc2ggdGhlIGN1cnJlbnQgbWl0aWdhdGlvbg0K PiA+ID4gPiA+ICAgIHJlcXVlc3QgYnkgc2VuZGluZyBhIG5ldyBQVVQgcmVxdWVzdC4gIFRoaXMg UFVUIHJlcXVlc3QgTVVTVCB1c2UNCj4gPiB0aGUNCj4gPiA+ID4gPiAgICBzYW1lICdtaWQnIHZh bHVlLCBhbmQgTVVTVCByZXBlYXQgYWxsIHRoZSBvdGhlciBwYXJhbWV0ZXJzIGFzIHNlbnQNCj4g PiBpbg0KPiA+ID4gPiA+ICAgIHRoZSBvcmlnaW5hbCBtaXRpZ2F0aW9uIHJlcXVlc3QgYXBhcnQg ZnJvbSBhIHBvc3NpYmxlIGNoYW5nZSB0bw0KPiB0aGUNCj4gPiA+ID4gPiAgICBsaWZldGltZSBw YXJhbWV0ZXIgdmFsdWUuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJZiB0aGUgc2VydmVyIGRpZCBu b3QgaGF2ZSBhIGNoZWNrIHRoYXQgdGhlIG90aGVyIHBhcmFtZXRlcnMNCj4gPiA+ID4gPiBtYXRj aCwgd2hhdCB3b3VsZCBoYXBwZW4/DQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIEEgcmVxdWVzdCBt YXkgYmUgZm9yIGV4YW1wbGUgaW5hZHZlcnRlbnRseSB0cmFuc2l0aW9uZWQgZnJvbQ0KPiA+ID4g PiBwcmUtIGNvbmZpZ3VyZWQgdG8gaW1tZWRpYXRlIGFuZCB2aWNlIHZlcnNhLiBUbyBhdm9pZCBz dWNoIGlzc3VlcywNCj4gPiA+ID4gdGhlIHNwZWMgbWFuZGF0ZXMgdGhlIGZvbGxvd2luZzoNCj4g PiA+ID4NCj4gPiA+ID4gKiBhIGNsaWVudCBjYW4gYWRqdXN0IGl0cyBtaXRpZ2F0aW9uIHNjb3Bl IGJ5IHNlbmRpbmcgYSBuZXcgb25lIHRoYXQNCj4gPiA+ID4gd2lsbCBvdmVycmlkZSBhbiBleGlz dGluZyBvbmUuDQo+ID4gPiA+ICogYSBjbGllbnQgY2FuIHVwZGF0ZSBhbiBleGlzdGluZyBtaXRp Z2F0aW9uIGJ5IGVjaG9pbmcgdGhlIHNhbWUNCj4gPiA+ID4gcGFyYW1ldGVycyBhcyB0aG9zZSBp biB0aGUgaW5pdGlhbCBtaXRpZ2F0aW9uIHJlcXVlc3QuDQo+ID4gPiA+DQo+ID4gPiA+IEJ1dCBs ZWF2ZSBpdCB0byB0aGUgc2VydmVyIHRvIGRlY2lkZSBob3cgdG8gaGFuZGxlIHRoZSByZWZyZXNo Og0KPiA+ID4gPg0KPiA+ID4gPiAgICBJZiB0aGUgRE9UUyBzZXJ2ZXIgZmluZHMgdGhlICdtaWQn IHBhcmFtZXRlciB2YWx1ZSBjb252ZXllZCBpbiB0aGUNCj4gPiA+ID4gICAgUFVUIHJlcXVlc3Qg aW4gaXRzIGNvbmZpZ3VyYXRpb24gZGF0YSBib3VuZCB0byB0aGF0IERPVFMgY2xpZW50LCBpdA0K PiA+ID4gPiAgICBNQVkgdXBkYXRlIHRoZSBtaXRpZ2F0aW9uIHJlcXVlc3QsIGFuZCBhIDIuMDQg KENoYW5nZWQpIHJlc3BvbnNlIGlzDQo+ID4gPiA+ICAgIHJldHVybmVkIHRvIGluZGljYXRlIGEg c3VjY2Vzc2Z1bCB1cGRhdGUgb2YgdGhlIG1pdGlnYXRpb24gcmVxdWVzdC4NCj4gPg0KPiA+IFRo YXQgc2VlbXMgY29uc2lzdGVudCB3aXRoIHdoYXQgd2UgZG8gZWxzZXdoZXJlLCBzbyBzb3VuZHMg Z29vZC4NCj4gPg0KPiA+ID4gPiAgIChEbyB3ZSBuZWVkIG5vcm1hdGl2ZSBsYW5ndWFnZSB0aGF0 IHRoZSBzZXJ2ZXIgTVVTVA0KPiA+ID4gPiA+IHZlcmlmeSB0aGUgb3RoZXIgcGFyYW1ldGVycyB3 aGVuIHRoZSAnbWlkJyBtYXRjaGVzPykNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFNlY3Rpb24gNC40 LjINCj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgSWYgdGhl IHJlcHJlc2VudGF0aW9uIG9mIGFsbCB0aGUgYWN0aXZlDQo+ID4gPiA+ID4gICAgbWl0aWdhdGlv biByZXF1ZXN0cyBhc3NvY2lhdGVkIHdpdGggdGhlIERPVFMgY2xpZW50IGRvZXMgbm90IGZpdA0K PiA+ID4gPiA+ICAgIHdpdGhpbiBhIHNpbmdsZSBkYXRhZ3JhbSwgdGhlIERPVFMgc2VydmVyIE1V U1QgdXNlIHRoZSBCbG9jazINCj4gPiBPcHRpb24NCj4gPiA+ID4gPiAgICB3aXRoIE5VTSA9IDAg aW4gdGhlIEdFVCByZXNwb25zZS4gIFsuLi5dDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJJ20gbm90 IHZlcnkgZmFtaWxpYXIgd2l0aCBDb0FQIGJsb2Nrd2lzZSB0cmFuc2ZlcnM7IGlzIHRoaXMgaW4N Cj4gPiA+ID4gPiBjb25mbGljdCB3aXRoIHNvbWUgbm9ybWFsIGZlYXR1cmUtbmVnb3RpYXRpb24g c2NoZW1lIG9yIGlzIGl0IG9rYXkNCj4gPiA+ID4gPiB0byBhc3N1bWUgdGhhdCB0aGUgY2xpZW50 IHdpbGwgYmUgYWJsZSB0byBoYW5kbGUgdGhpcyBldmVuIGlmIHRoZQ0KPiA+ID4gPiA+IGNsaWVu dCBoYXMgbm90IGV4cGxpY3RseSBpbmRpY2F0ZWQgc3VwcG9ydD8NCj4gPiA+ID4NCj4gPiA+ID4g W01lZF0gUkZDNzk1OSBpbmRpY2F0ZXMgdGhlIGZvbGxvd2luZzoNCj4gPiA+ID4NCj4gPiA+ID4g ICAgQSBDb0FQIGltcGxlbWVudGF0aW9uIHRoYXQgZG9lcyBub3Qgc3VwcG9ydCB0aGVzZSBvcHRp b25zIGdlbmVyYWxseQ0KPiA+ID4gPiAgICBpcyBsaW1pdGVkIGluIHRoZSBzaXplIG9mIHRoZSBy ZXByZXNlbnRhdGlvbnMgdGhhdCBjYW4gYmUgZXhjaGFuZ2VkLA0KPiA+ID4gPiAgICBzZWUgU2Vj dGlvbiA0LjYgb2YgW1JGQzcyNTJdLiAgRXZlbiB0aG91Z2ggdGhlIG9wdGlvbnMgYXJlIENyaXRp Y2FsLA0KPiA+ID4gPiAgICBhIHNlcnZlciBtYXkgZGVjaWRlIHRvIHN0YXJ0IHVzaW5nIHRoZW0g aW4gYW4gdW5zb2xpY2l0ZWQgd2F5IGluIGENCj4gPiA+ID4gICAgcmVzcG9uc2UuICBObyBlZmZv cnQgd2FzIGV4cGVuZGVkIHRvIHByb3ZpZGUgYSBjYXBhYmlsaXR5IGluZGljYXRpb24NCj4gPiA+ ID4gICAgbWVjaGFuaXNtIHN1cHBvcnRpbmcgdGhhdCBkZWNpc2lvbjogc2luY2UgdGhlIGJsb2Nr LXdpc2UgdHJhbnNmZXINCj4gPiA+ID4gICAgbWVjaGFuaXNtcyBhcmUgc28gZnVuZGFtZW50YWwg dG8gdGhlIHVzZSBvZiBDb0FQIGZvciByZXByZXNlbnRhdGlvbnMNCj4gPiA+ID4gICAgbGFyZ2Vy IHRoYW4gYWJvdXQgYSBraWxvYnl0ZSwgdGhlcmUgaXMgYW4gZXhwZWN0YXRpb24gdGhhdCB0aGV5 IGFyZQ0KPiA+ID4gPiAgICB2ZXJ5IHdpZGVseSBpbXBsZW1lbnRlZC4NCj4gPg0KPiA+IEFoLCB0 aGF0J3MgcXVpdGUgZGVjaXNpdmUuICBUaGFua3MgZm9yIHBvaW50aW5nIG1lIHRvIHRoZSByZWZl cmVuY2UuDQo+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAgICAgIFRoaXMgaXMgYSBtYW5kYXRv cnkgYXR0cmlidXRlIHdoZW4gYW4gYXR0YWNrIG1pdGlnYXRpb24gaXMNCj4gPiA+ID4gPiAgICAg ICB0cmlnZ2VyZWQuICBQYXJ0aWN1bGFybHksICdtaXRpZ2F0aW9uLXN0YXJ0JyBpcyBub3QgcmV0 dXJuZWQNCj4gZm9yIGENCj4gPiA+ID4gPiAgICAgICBtaXRpZ2F0aW9uIHdpdGggJ3N0YXR1cycg Y29kZSBzZXQgdG8gOC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IElzIHRoaXMgYmV0dGVyIGFzICJ0 cmlnZ2VyZWQiIG9yIGFzICJhY3RpdmUiPw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBDaGFuZ2Vk IHRoZSB0ZXh0IHRvICJ3aGVuIGFuIGltbWVkaWF0ZSBhdHRhY2sgbWl0aWdhdGlvbiBpcw0KPiA+ ID4gPiB0cmlnZ2VyZWQiLg0KPiA+DQo+ID4gVGhhdCB0YWtlcyBjYXJlIG9mIHRoZSBkaXNhbWJp Z3VhdGlvbiBJIHdhcyBob3BpbmcgZm9yIC0tIHRoYW5rcyA6KQ0KPiANCj4gVGhlIGFib3ZlIGNo YW5nZSBkb2VzIG5vdCBsb29rIGNvbXBsZXRlLCBtaXRpZ2F0aW9uLXN0YXJ0IGlzIGFsc28gYSBt YW5kYXRvcnkNCj4gYXR0cmlidXRlIHdoZW4gYSBwcmUtY29uZmlndXJlZCBtaXRpZ2F0aW9uIHJl cXVlc3QgaXMgdHJpZ2dlcmVkIGFmdGVyDQo+IHRoZSBET1RTIHNpZ25hbCBjaGFubmVsIHNlc3Np b24gaXMgbG9zdC4NCg0KW01lZF0gSSBjaGFuZ2VkIHRoZSB0ZXh0IHRvICJhbiBhdHRhY2sgbWl0 aWdhdGlvbiBpcyBhY3RpdmUuIiB0byBhdm9pZCBhbnkgY29uZnVzaW9uLiAgDQoNCj4gDQo+ID4N Cj4gPiA+ID4gPg0KPiA+ID4gPiA+IGJwcy1kcm9wcGVkIGFuZCBwcHMtZHJvcHBlZCAiU0hPVUxE IGJlIGEgZml2ZS1taW51dGUgYXZlcmFnZSIsIGJ1dA0KPiA+ID4gPiA+IHRoYXQgZG9lcyBub3Qg c2VlbSBxdWl0ZSB3ZWxsLWRlZmluZWQuICBJcyBpdCBhIHJvbGxpbmcNCj4gPiA+ID4gPiBmaXZl LW1pbnV0ZSBhdmVyYWdlIG92ZXIgYmlucyBvZiBvbmUgc2Vjb25kLCBvciBhIGJpbm5lZA0KPiA+ ID4gPiA+IGZpdmUtbWludXRlIGF2ZXJhZ2UgZm9yIHRoZSBsYXN0IGZpdmUtbWludXRlIGludGVy dmFsIHRoYXQgZW5kcyBvbg0KPiA+ID4gPiA+IGEgbXVsdGlwbGUgb2YgJzUnLCBvciBzb21ldGhp bmcNCj4gPiA+ID4gZWxzZT8NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gV2hhdCBpcyBtZWFudCBp biBhbiBhdmVyYWdlIG92ZXIgNS1taW51dGUgaW50ZXJ2YWxzLiBVcGRhdGVkDQo+ID4gPiA+IHRo ZSB0ZXh0IGFjY29yZGluZ2x5Lg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gICAgVXBv biByZWNlaXB0IG9mIGEgY29uZmxpY3Qgbm90aWZpY2F0aW9uIG1lc3NhZ2UgaW5kaWNhdGluZyB0 aGF0IGENCj4gPiA+ID4gPiAgICBtaXRpZ2F0aW9uIHJlcXVlc3QgaXMgZGVhY3RpdmF0ZWQgYmVj YXVzZSBvZiBhIGNvbmZsaWN0LCBhIERPVFMNCj4gPiA+ID4gPiAgICBjbGllbnQgTVVTVCBOT1Qg cmVzZW5kIHRoZSBzYW1lIG1pdGlnYXRpb24gcmVxdWVzdCBiZWZvcmUgdGhlDQo+ID4gZXhwaXJ5 DQo+ID4gPiA+ID4gICAgb2YgJ3JldHJ5LXRpbWVyJy4gIEl0IGlzIGFsc28gcmVjb21tZW5kZWQg dGhhdCBET1RTIGNsaWVudHMNCj4gc3VwcG9ydA0KPiA+ID4gPiA+ICAgIG1lYW5zIHRvIGFsZXJ0 IGFkbWluaXN0cmF0b3JzIGFib3V0IG1pdGlnYXRpb24gY29uZmxpY3RzLg0KPiA+ID4gPiA+DQo+ ID4gPiA+ID4gRG8gd2UgbmVlZCB0byBzYXkgYW55dGhpbmcgcmVnYXJkaW5nIHRoZSBzZXJ2ZXIg YmVoYXZpb3Igd2hlbiBhDQo+ID4gPiA+ID4gcmV0cmFuc21pdCBvciBzaW1pbGFyIHdhcyBpbiBm bGlnaHQgYWxyZWFkeSB3aGVuIHRoZSBjb25mbGljdA0KPiA+ID4gPiA+IG5vdGlmaWNhdGlvbiB3 YXMgZ2VuZXJhdGVkPyAgKFRoYXQgaXMsIHRoZSBzZXJ2ZXIncyBlbmZvcmNlbWVudCBvZg0KPiA+ ID4gPiA+IHRoZSBNVVNUIE5PVCBtYXkgbmVlZCB0byBiZSByZXN0cmFpbmVkLikNCj4gPiA+ID4N Cj4gPiA+ID4gW01lZF0gVGhlIE1VU1QgTk9UIGlzIGludGVuZGVkIHRvIGF2b2lkIG92ZXJsb2Fk aW5nIHRoZSBzZXJ2ZXIsDQo+ID4gYmVjYXVzZToNCj4gPiA+ID4NCj4gPiA+ID4gICAgICAgICAg IkFueSByZXRyYW5zbWlzc2lvbiBvZiB0aGUgc2FtZQ0KPiA+ID4gPiAgICAgICAgICBtaXRpZ2F0 aW9uIHJlcXVlc3QgYmVmb3JlIHRoZSBleHBpcnkgb2YgdGhpcyB0aW1lciBpcyBsaWtlbHkNCj4g dG8NCj4gPiA+ID4gICAgICAgICAgYmUgcmVqZWN0ZWQgYnkgdGhlIERPVFMgc2VydmVyIGZvciB0 aGUgc2FtZSByZWFzb25zLiINCj4gPiA+ID4NCj4gPiA+ID4gVGhlIHRleHQgbGVhdmUgaXQgdG8g dGhlIHNlcnZlciB0byBkZWNpZGUgd2hpY2ggYWN0aW9uIHRvIHRha2Ugd2hlbg0KPiA+ID4gPiBN VVNUIE5PVCBpcyBub3QgZm9sbG93ZWQgYnkgYSBjbGllbnQuIFRoZSBzZXJ2ZXIgbWF5IGRlY2lk ZSB0aGUNCj4gPiA+ID4gc2lsZW50bHkgaWdub3JlIHRob3NlLCBldGMuDQo+ID4gPiA+DQo+ID4g PiA+IFdlIGNhbiBhZGQgc29tZSB0ZXh0IGlmIG5lZWRlZC4NCj4gPg0KPiA+IExldCdzIGxlYXZl IGl0IGFsb25lIGZvciBub3cuDQo+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ICAgIEFsdGVybmF0 aXZlbHksIHRoZSBET1RTIGNsaWVudCBjYW4gZXhwbGljaXRseSBkZXJlZ2lzdGVyIGl0c2VsZiBi eQ0KPiA+ID4gPiA+ICAgIGlzc3VpbmcgYSBHRVQgcmVxdWVzdCB0aGF0IGhhcyB0aGUgVG9rZW4g ZmllbGQgc2V0IHRvIHRoZSB0b2tlbiBvZg0KPiA+ID4gPiA+ICAgIHRoZSBvYnNlcnZhdGlvbiB0 byBiZSBjYW5jZWxsZWQgYW5kIGluY2x1ZGVzIGFuIE9ic2VydmUgT3B0aW9uDQo+IHdpdGgNCj4g PiA+ID4gPiAgICB0aGUgdmFsdWUgc2V0IHRvICcxJyAoZGVyZWdpc3RlcikuDQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiBUaGlzIHNlZW1zIGxpa2UgdGhlIG1vcmUgInBvbGl0ZSIgYmVoYXZpb3IgKGFz IG9wcG9zZWQgdG8ganVzdA0KPiA+ID4gPiA+ICJmb3JnZXR0aW5nIiAtLSB3aHkgaXMgdGhlIHBv bGl0ZSBiZWhhdmlvciBub3QgdGhlIGRlZmF1bHQgYmVoYXZpb3I/DQo+ID4gPiA+DQo+ID4gPiA+ IFtNZWRdIERvbmUgaW4gbXkgbG9jYWwgY29weS4NCj4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4g PiA+IERvZXMgdGhlIEdFVCBpbiAgRmlndXJlIDEzIG5lZWQgdG8gaGF2ZSBhICIud2VsbC1rbm93 biIgYW5kIG90aGVyDQo+ID4gPiA+ID4gcGF0aCBjb21wb25lbnRzPw0KPiA+ID4gPiA+DQo+ID4g PiA+DQo+ID4gPiA+IFtNZWRdIERvbid0IHRoaW5rIHNvLiBBY3R1YWxseSwgd2UgYXJlIG1pbWlj a2luZyBmaWd1cmUgMiBpbiBSRkM3NjQxLg0KPiA+DQo+ID4gQWgsIHRoYW5rcyBmb3IgdGhlIHJl ZmVyZW5jZS4NCj4gPg0KPiA+IC1CZW4NCg== From nobody Thu Jan 17 01:35:13 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D23712F1AC; Thu, 17 Jan 2019 01:35:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fSg3h6DJOLfm; Thu, 17 Jan 2019 01:35:05 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBD80126DBF; Thu, 17 Jan 2019 01:35:04 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547717727; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=U Bn5C2yK1PCZqZ5RIS2QM4tnzGdiO6xegW9lJAVPB+ Q=; b=RvixYeMo+n+AzPnqQR6+R0nui8wcj7TRZ1Ow1tjWEA9k NvWMOM0H2dzkJRvXqf0rhMIEkBa/2EP08BtIKozbA+GQSnUp44 YAxWEnhfKJGc9W3B3yxtFVh01it1FqVe06B+o9GynajJ1XviWo fozQx5IzTlnQi40Po9eGJ/CE4Rg= Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682f_21c6_b6ca5b92_a0cf_47f6_9baa_95cabe00126b; Thu, 17 Jan 2019 03:35:26 -0600 Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 02:33:25 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 02:33:25 -0700 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 02:33:25 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2917.namprd16.prod.outlook.com (20.178.235.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 09:33:24 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 09:33:24 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPAAAHjuYAABML0AAAOinHA= Date: Thu, 17 Jan 2019 09:33:23 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2917; 6:tsdWIQ5zCQdrldTX0ofKItHQNUWcTf/277bRTklIfNWI9DpQpWWAYYaVeuQQjLib+flA4BClJOSnYiWfMsMVI9T/f03S15Em/+iFGKnol3Wos9wguzXFleoib5fWF67y03dk+UtIFrpGSO0FpLuSXRwNvwWQqNuqsu+4GGy459gIGcN7IWU/DzxT8I0kMvUkBiVpdiVpRBkjAuM7hsblMitwVCtXRDEu4Sj1iJ+PH2JYIr5enp9CcRoJ/0dJpx1H7kPln3DUnmcrbW0V+IN7A6WLTDDGituWmUvY1ZBV1b6L0wmpXjfEAK0XY2F6FzKohE0/KPZ6J5izFcFebdK15orPkRcGBq2TxddY9Rp0/ibLZNkgqSb99mGyc+cGMeCdr+F2gbidQpT0qXYFuv3lfVbmAi3k/0E+TlbcGUnIz44tkBnaNbfT0x3/XieIGRQSPz6QLiNPbM5gMFReAKwLkg==; 5:guf3K20Ksp474V0gye7WEges0l+sjQzssboJJEBsDWBI9lH6ETPq3SdhlI8c5yvVYmSi9PgkutwosuKgsa6Ynd1jwMuMydJYHqD6om9g2C4zgNnO8GBQfEdqoEvNQvc3cAyzSw3XMQHiAnwzTXzx9Wk+A46xFaoEv0HoMqSYJZ1ltqhBNAJA5G84+KIfnPP69zwC8/vuri0QXtxsNsLl3Q==; 7:pY9mvH0uAoEvvEp1oioM16HdSCWXM/ZdZPNToymK422CoIhPXV9v/wq/6v99g2Pdmf1/XFpkmBF5Z/S6zfsUxDoOqb6Vjm52DWEUkp3HAJ9T5zE2yUOTauF8wdt9tznKm1cfm0JI6Cj66eYuw9lv3A== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 8190c308-fe9d-499b-ff19-08d67c5ed3c5 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2917; x-ms-traffictypediagnostic: BYAPR16MB2917: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(366004)(396003)(376002)(39860400002)(346002)(189003)(199004)(13464003)(32952001)(55784004)(71200400001)(71190400001)(256004)(3846002)(14444005)(5660300001)(6116002)(76176011)(229853002)(305945005)(6506007)(186003)(53546011)(55016002)(102836004)(74316002)(6436002)(80792005)(7736002)(81156014)(81166006)(7696005)(8936002)(66066001)(8676002)(26005)(97736004)(2501003)(25786009)(6246003)(4326008)(2171002)(14454004)(110136005)(5024004)(478600001)(72206003)(966005)(9686003)(53936002)(316002)(33656002)(476003)(11346002)(446003)(2906002)(86362001)(99286004)(93886005)(486006)(106356001)(68736007)(105586002)(6306002)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2917; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: Fbkz+grz/hY1j4phG9LiO2ZFFEUWaUB0g/VLnWZ4DklpGoOzi3mqq2f/a2S8qXuEsaMEFONCh4SiZUYMjiwh4doBXgpcq9vgkHdKmI0PQ2tuJBJHeCfpnHo4M31f9jZIMzU/r2Q28h9n4U29nQ/iL2RilAQgqJD2wWggNprhppOv6RkP7CT4QHJlUm1MP8udMRT6GB/SZDosCKTc/zDT12TYXk23KUZ77Kh9VRT6JmBplJG9Rqcz3o3g+uAVuYcOQHg1am6tv4s8FfI77hWcj+dQqTO15JYvviIA+rL4UjYzywcpUJ4PBM9BfqP25A3JU+xvsqREbyYAS36yQ2bN4kurQU/4LA6f2ATG8ljwvZVFxcb3/C1Id6zK1mOZUSXGxFm/od3ccHOk2u3xCPqcmezh1hIB4iL4G+yXQdJlNcs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 8190c308-fe9d-499b-ff19-08d67c5ed3c5 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 09:33:23.9781 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2917 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6462> : inlines <6996> : streams <1810329> : uri <2781238> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 09:35:12 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IFRodXJzZGF5LCBKYW51YXJ5IDE3LCAyMDE5IDE6MTYgUE0NCj4gVG86IEtvbmRhLCBU aXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0K PiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbEBpZXRmLm9yZw0KPiBDYzogZG90c0BpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0Rv dHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdCBQ YXJ0KQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3Jn YW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2htZW50cyB1bmxl c3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzDQo+IHNh ZmUuDQo+IA0KPiBSZS0sDQo+IA0KPiBPSy4NCj4gDQo+IEdpdmVuIHRoYXQgd2UgZG9uJ3QgaGF2 ZSBhbiBleHBsaWNpdCBtZW50aW9uIGFib3V0IHRoaXMgaW4gODMwNSwgSSBhZGRlZCB0aGlzDQo+ IE5FVyBzZW50ZW5jZSBlY2hvaW5nIHdoYXQgd2FzIGluIDY1NTU6DQo+IA0KPiAgICBOb3RlIHRo YXQgdGhlIERPVFMgY2xpZW50IG11c3QgY2FjaGUgaW5mb3JtYXRpb24gcmVnYXJkaW5nIHRoZQ0K PiAgICBvdXRjb21lIG9mIGVhY2ggY29ubmVjdGlvbiBhdHRlbXB0LCBhbmQgaXQgdXNlcyB0aGF0 IGluZm9ybWF0aW9uIHRvDQo+ICAgIGF2b2lkIHRocmFzaGluZyB0aGUgbmV0d29yayB3aXRoIHN1 YnNlcXVlbnQgYXR0ZW1wdHMuDQoNCk1pbm9yIGNoYW5nZToNCg0KTm90ZSB0aGF0IHRoZSBET1RT IGNsaWVudCBtdXN0IGNhY2hlIGluZm9ybWF0aW9uIHJlZ2FyZGluZyB0aGUNCm91dGNvbWUgb2Yg ZWFjaCBjb25uZWN0aW9uIGF0dGVtcHQgZm9yIGEgc3BlY2lmaWMgdGltZSBwZXJpb2QgKGUuZy4g MTAgbWludXRlcyksIGFuZCBpdCB1c2VzIHRoYXQgaW5mb3JtYXRpb24gdG8NCmF2b2lkIHRocmFz aGluZyB0aGUgbmV0d29yayB3aXRoIHN1YnNlcXVlbnQgYXR0ZW1wdHMuDQoNCi1UaXJ1DQoNCj4g DQo+IENoZWVycywNCj4gTWVkDQo+IA0KPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0K PiA+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiBbbWFpbHRvOlRpcnVtYWxl c3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+ID4gRW52b3nDqcKgOiBqZXVkaSAxNyBqYW52 aWVyIDIwMTkgMDg6MTYNCj4gPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOyBCZW5q YW1pbiBLYWR1azsgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC0NCj4gPiBjaGFubmVsQGlldGYub3Jn IENjwqA6IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUkU6IEFEIHJldmlldyBvZg0KPiA+IGRyYWZ0 LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoMXN0IFBhcnQpDQo+ID4NCj4gPiA+IC0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tDQo+ID4gPiA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4NCj4gPiA+IFNlbnQ6 IFRodXJzZGF5LCBKYW51YXJ5IDE3LCAyMDE5IDEyOjMzIFBNDQo+ID4gPiBUbzogS29uZGEsIFRp cnVtYWxlc3dhciBSZWRkeQ0KPiA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47 DQo+ID4gPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47DQo+ID4gPiBkcmFmdC1pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWxAaWV0Zi5vcmcNCj4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ ID4gPiBTdWJqZWN0OiBSRTogQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0yNSAoMXN0DQo+ID4gPiBQYXJ0KQ0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gSGkg VGlydSwNCj4gPiA+DQo+ID4gPiBBcyB5b3Uga25vdyBSRkM4MzA1IG9ic29sZXRlcyBSRkM2NTU1 Lg0KPiA+ID4NCj4gPiA+IEkgZmFpbCB0byBzZWUgd2hlcmUgY2FjaGluZyByZXN1bHRzIGlzIG1l bnRpb25lZCBpbiA4MzA1LiBEbyB5b3U/DQo+ID4NCj4gPiBUaG91Z2ggUkZDODAzNSBvYnNvbGV0 ZXMgUkZDNjU1NSwgaXQgaXMgc3RpbGwgY29tcGF0aWJsZSB3aXRoIFJGQzY1NTUNCj4gPiAoc2Vl IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4MzA1I2FwcGVuZGl4LUEpLg0KPiA+IEl0 IGlzIHVzZWZ1bCB0byBjYWNoZSB0aGUgaGFwcHkgZXllYmFsbCByZXN1bHRzIGZvciBhIHNwZWNp ZmljIHRpbWUuDQo+ID4NCj4gPiAtVGlydQ0KPiA+DQo+ID4gPg0KPiA+ID4gQ2hlZXJzLA0KPiA+ ID4gTWVkDQo+ID4gPg0KPiA+ID4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ ID4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+ID4gPiBbbWFpbHRvOlRpcnVt YWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+ID4gPiA+IEVudm95w6nCoDogbWVyY3Jl ZGkgMTYgamFudmllciAyMDE5IDEyOjExIMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkDQo+ID4gPiA+ IFRHSS9PTE47IEJlbmphbWluIEthZHVrOyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLSBjaGFubmVs QGlldGYub3JnIENjwqA6DQo+ID4gPiA+IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUkU6IEFEIHJl dmlldyBvZg0KPiA+ID4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdCBQ YXJ0KQ0KPiA+ID4gPg0KPiA+ID4gPiBIaSBNZWQsDQo+ID4gPiA+DQo+ID4gPiA+IFBsZWFzZSBz ZWUgaW5saW5lDQo+ID4gPiA+DQo+ID4gPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gPiA+ID4gPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBP Zg0KPiA+ID4gPiA+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiA+ID4gPiBTZW50 OiBXZWRuZXNkYXksIEphbnVhcnkgMTYsIDIwMTkgMTozMCBQTQ0KPiA+ID4gPiA+IFRvOiBCZW5q YW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4g PiA+ID4gY2hhbm5lbEBpZXRmLm9yZw0KPiA+ID4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4g PiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBBRCByZXZpZXcgb2YNCj4gPiA+ID4gPiBkcmFmdC1p ZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdA0KPiA+ID4gPiBQYXJ0KQ0KPiA+ID4gPiA+ DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFRoZXNlIGNvbm5lY3Rpb24gYXR0ZW1wdHMgYXJlDQo+ID4gPiA+ID4gPiAgICBwZXJmb3Jt ZWQgYnkgdGhlIERPVFMgY2xpZW50IHdoZW4gaXQgaW5pdGlhbGl6ZXMuICBUaGUNCj4gPiA+ID4g PiA+IHJlc3VsdHMgb2YNCj4gPiB0aGUNCj4gPiA+ID4gPiA+ICAgIEhhcHB5IEV5ZWJhbGxzIHBy b2NlZHVyZSBhcmUgdXNlZCBieSB0aGUgRE9UUyBjbGllbnQgZm9yDQo+ID4gPiA+ID4gPiBzZW5k aW5nDQo+ID4gaXRzDQo+ID4gPiA+ID4gPiAgICBzdWJzZXF1ZW50IG1lc3NhZ2VzIHRvIHRoZSBE T1RTIHNlcnZlci4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBJIHNlZSB0aGlzIGlzIHNjb3Bl ZCB0byAid2hlbiB0aGUgY2xpZW50IGluaXRpYWxpemVzIiwgc28gSQ0KPiA+ID4gPiA+ID4gZG9u J3Qga25vdyB3aGV0aGVyIGl0IGFkZHMgbW9yZSBvciBub3QgdG8gZW5kIHdpdGggImZvciB0aGUN Cj4gPiA+ID4gPiA+IGR1cmF0aW9uIG9mIHRoZSBET1RTIHNlc3Npb24iIG9yIHNvbWUgc2ltaWxh ciBzY29waW5nIGZvciB0aGUNCj4gPiA+ID4gPiA+IGNhY2hpbmcgb2YgdGhlIGhhcHB5IGV5ZWJh bGxzIHJlc3VsdHMuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBUaGUgY29ubmVjdGlvbiBh dHRlbXB0cyBhcmUgcGVyZm9ybWVkIGVhY2ggdGltZSB0aGUgY2xpZW50DQo+ID4gPiA+ID4gaGFz IHRvIHNlbGVjdCBhbW9uZyBhIGxpc3Qgb2YgdjQsIHY2ICh0bHMsIGR0bHMpLiBUaGlzIGlzDQo+ ID4gPiA+ID4gcGFydGljdWxhcmx5IHRydWUgd2hlbg0KPiA+ID4gPiB0aGUgY2xpZW50DQo+ID4g PiA+ID4gaW5pdGlhdGVzLCBidXQgdGhpcyBtYXkgYWxzbyBiZSB0cnVlIGVhY2ggdGltZSB0aGUg Y2xpZW50IGhhcyB0bw0KPiA+ID4gPiA+IHNlbGVjdA0KPiA+ID4gPiBhbW9uZw0KPiA+ID4gPiA+ IHY0LCB2NiwgRFRMUywgVExTIChlLmcuLCB0aGUgY2xpZW50IGF0dGFjaGVzIHRvIGEgbmV3IG5l dHdvcmspLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvOg0KPiA+ ID4gPiA+DQo+ID4gPiA+ID4gIlRoZXNlIGNvbm5lY3Rpb24gYXR0ZW1wdHMgYXJlIHBlcmZvcm1l ZCBieSB0aGUgRE9UUyBjbGllbnQgd2hlbg0KPiA+ID4gPiA+IGl0IGluaXRpYWxpemVzLCBvciBp biBnZW5lcmFsIHdoZW4gaXQgaGFzIHRvIHNlbGVjdCBhbiBhZGRyZXNzDQo+ID4gPiA+ID4gZmFt aWx5IGFuZA0KPiA+ID4gPiB0cmFuc3BvcnQNCj4gPiA+ID4gPiB0byBjb250YWN0IGl0cyBET1RT IHNlcnZlci4iDQo+ID4gPiA+DQo+ID4gPiA+IEhhcHB5IGV5ZWJhbGxzIG1hbmRhdGVzIGNhY2hp bmcgdGhlIHJlc3VsdHMsIHNlZQ0KPiA+ID4gPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv cmZjNjU1NSNzZWN0aW9uLTQgKHRvIGF2b2lkIHRocmFzaGluZw0KPiA+ID4gPiB0aGUgbmV0d29y aykuDQo+ID4gPiA+IFdlIG1heSB3YW50IHRvIHVwZGF0ZSB0aGUgYWJvdmUgbGluZSBhY2NvcmRp bmdseS4NCj4gPiA+ID4NCj4gPiA+ID4gQ2hlZXJzLA0KPiA+ID4gPiAtVGlydQ0KPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBEb3RzIG1haWxpbmcg bGlzdA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vZG90cw0K From nobody Thu Jan 17 02:08:44 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38578130F4A; Thu, 17 Jan 2019 02:08:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LOdfofniH_Bt; Thu, 17 Jan 2019 02:08:40 -0800 (PST) Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78054130F30; Thu, 17 Jan 2019 02:08:40 -0800 (PST) Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with esmtp (Exim 4.91) (envelope-from ) id 1gk4bE-0002jw-Ut; Thu, 17 Jan 2019 10:08:37 +0000 From: "Jon Shallow" To: "'Konda, Tirumaleswar Reddy'" , , , "'Benjamin Kaduk'" , References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Date: Thu, 17 Jan 2019 10:08:38 -0000 Message-ID: <06d301d4ae4c$9f60b650$de2222f0$@jpshallow.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIt0G4x4nPcIh7QQng3Q2EVCDCD8wHV6n3VAd+HKegCtUmiPwJcfUooAnnMJEukpu73UA== Content-Language: en-gb Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 10:08:43 -0000 > -----Original Message----- > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda, > Tirumaleswar Reddy > Sent: 17 January 2019 09:33 > To: mohamed.boucadair@orange.com; Benjamin Kaduk; = draft-ietf-dots-signal- > channel@ietf.org > Cc: dots@ietf.org > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 = (1st Part) >=20 > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Thursday, January 17, 2019 1:16 PM > > To: Konda, Tirumaleswar Reddy > ; > > Benjamin Kaduk ; = draft-ietf-dots-signal-channel@ietf.org > > Cc: dots@ietf.org > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 = (1st Part) > > > > This email originated from outside of the organization. Do not click = links or > > open attachments unless you recognize the sender and know the = content is > > safe. > > > > Re-, > > > > OK. > > > > Given that we don't have an explicit mention about this in 8305, I = added > this > > NEW sentence echoing what was in 6555: > > > > Note that the DOTS client must cache information regarding the > > outcome of each connection attempt, and it uses that information = to > > avoid thrashing the network with subsequent attempts. >=20 > Minor change: >=20 > Note that the DOTS client must cache information regarding the > outcome of each connection attempt for a specific time period (e.g. 10 > minutes), and it uses that information to > avoid thrashing the network with subsequent attempts. How frequently should the client retry when all 4 connection methods = fail - 10 minutes is excessive to me? ~Jon >=20 > -Tiru >=20 > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : Konda, Tirumaleswar Reddy > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > Envoy=C3=A9 : jeudi 17 janvier 2019 08:16 > > > =C3=80 : BOUCADAIR Mohamed TGI/OLN; Benjamin Kaduk; = draft-ietf-dots-signal- > > > channel@ietf.org Cc : dots@ietf.org Objet : RE: AD review of > > > draft-ietf-dots-signal-channel-25 (1st Part) > > > > > > > -----Original Message----- > > > > From: mohamed.boucadair@orange.com > > > > > > > > Sent: Thursday, January 17, 2019 12:33 PM > > > > To: Konda, Tirumaleswar Reddy > > ; > > > > Benjamin Kaduk ; > > > > draft-ietf-dots-signal-channel@ietf.org > > > > Cc: dots@ietf.org > > > > Subject: RE: AD review of draft-ietf-dots-signal-channel-25 (1st > > > > Part) > > > > > > > > > > > > > > > > Hi Tiru, > > > > > > > > As you know RFC8305 obsoletes RFC6555. > > > > > > > > I fail to see where caching results is mentioned in 8305. Do = you? > > > > > > Though RFC8035 obsoletes RFC6555, it is still compatible with = RFC6555 > > > (see https://tools.ietf.org/html/rfc8305#appendix-A). > > > It is useful to cache the happy eyeball results for a specific = time. > > > > > > -Tiru > > > > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De : Konda, Tirumaleswar Reddy > > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > > Envoy=C3=A9 : mercredi 16 janvier 2019 12:11 =C3=80 : = BOUCADAIR Mohamed > > > > > TGI/OLN; Benjamin Kaduk; draft-ietf-dots-signal- = channel@ietf.org Cc : > > > > > dots@ietf.org Objet : RE: AD review of > > > > > draft-ietf-dots-signal-channel-25 (1st Part) > > > > > > > > > > Hi Med, > > > > > > > > > > Please see inline > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots On Behalf Of > > > > > > mohamed.boucadair@orange.com > > > > > > Sent: Wednesday, January 16, 2019 1:30 PM > > > > > > To: Benjamin Kaduk ; draft-ietf-dots-signal- > > > > > > channel@ietf.org > > > > > > Cc: dots@ietf.org > > > > > > Subject: Re: [Dots] AD review of > > > > > > draft-ietf-dots-signal-channel-25 (1st > > > > > Part) > > > > > > > > > > > > > > > > > > > > These connection = attempts are > > > > > > > performed by the DOTS client when it initializes. The > > > > > > > results of > > > the > > > > > > > Happy Eyeballs procedure are used by the DOTS client = for > > > > > > > sending > > > its > > > > > > > subsequent messages to the DOTS server. > > > > > > > > > > > > > > I see this is scoped to "when the client initializes", so = I > > > > > > > don't know whether it adds more or not to end with "for = the > > > > > > > duration of the DOTS session" or some similar scoping for = the > > > > > > > caching of the happy eyeballs results. > > > > > > > > > > > > [Med] The connection attempts are performed each time the = client > > > > > > has to select among a list of v4, v6 (tls, dtls). This is > > > > > > particularly true when > > > > > the client > > > > > > initiates, but this may also be true each time the client = has to > > > > > > select > > > > > among > > > > > > v4, v6, DTLS, TLS (e.g., the client attaches to a new = network). > > > > > > > > > > > > I updated the text to: > > > > > > > > > > > > "These connection attempts are performed by the DOTS client = when > > > > > > it initializes, or in general when it has to select an = address > > > > > > family and > > > > > transport > > > > > > to contact its DOTS server." > > > > > > > > > > Happy eyeballs mandates caching the results, see > > > > > https://tools.ietf.org/html/rfc6555#section-4 (to avoid = thrashing > > > > > the network). > > > > > We may want to update the above line accordingly. > > > > > > > > > > Cheers, > > > > > -Tiru > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jan 17 02:35:46 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 992AD130E0A; Thu, 17 Jan 2019 02:35:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Xfjhpyp9DwY; Thu, 17 Jan 2019 02:35:43 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A356130DD8; Thu, 17 Jan 2019 02:35:42 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547721268; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=n ZcYfIDT4JdmudE/CwZwkMgmXQFpRV0wm2/E3Ar6Dm o=; b=MIQ09YBkSBngUtw+xQLlx1hw/FceXK65QdckA4mihGH8 VHYlxnvqofUBNONQDP04evHCpQUI4SYMKy6pV3c9Vk/C9+jw5H nAmAZOXj29HOrFGzEwdsRahopHMTIf2NOU2I5RL1XJQSNhF2+D RUAgdHpc964Q3KWyJvgGf5Zc1ME= Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682c_791e_d04f37b4_b0fa_465e_8de5_b7a813c6a606; Thu, 17 Jan 2019 04:34:27 -0600 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 03:32:13 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 03:32:13 -0700 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 03:32:12 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2808.namprd16.prod.outlook.com (20.178.233.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 10:32:12 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 10:32:11 +0000 From: "Konda, Tirumaleswar Reddy" To: Jon Shallow , "mohamed.boucadair@orange.com" , "dots@ietf.org" , "'Benjamin Kaduk'" , "draft-ietf-dots-signal-channel@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPAAAHjuYAABML0AAAOinHAAAVY/AAAAzJ1A Date: Thu, 17 Jan 2019 10:32:11 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <06d301d4ae4c$9f60b650$de2222f0$@jpshallow.com> In-Reply-To: <06d301d4ae4c$9f60b650$de2222f0$@jpshallow.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2808; 6:Xe/NV7GVcNfWB33KFoUu4DlEyKuwuNwvHuwDHlm3tCm4D18lnDdeby8IjRM2hxMeDGSINJ9U9tz2X9ZJNeye5gSXW+kk1Dz+phS+7WZ5VgAGQaEVp6pWgPkKIChXsOajnom5dd1zpbJKRgyBNzUjPsB5UMhd7SYjyiqQJBNrJgGrC0ZZkIg0Wk68QoQjV+1V0see4/Z14W5D0dhEDA2IIlFN/uqmCktxk1Xmhp/CVUdj2qQbJrUh4tOhYPCgHAi/q1Gk4bBP+u7Wo2W/ntDi+0CLyisarWvqxDwvTcDT4V6Z5uaR4WhNMmHOOzxHDbKLXLkMmrmcBAcyMaT/AxLqmir+XGvgallG3v+HiWnTqvccCdDSbdgmsjPGxcnqIBNZ5/oTFoS70dc7D7AogSKujk1+Cw32Wgf2L1rzrCa0U0dK2x7+QXxmhPznSvbzUiYo3wMDjY7iSJaBw6f9aCQoVA==; 5:hG2oOy1kZQ2wV9zMDw0Wfi3Z0xcy/AEP34vnSKvFk0E+97Ua4LRCwHrXT9nvzlmq/9XS535T6jGTlnr7ceGw4ptTH5s4kNFeHmDl0rih6jNken8KbXJw8BkXdA2Bro56xcbz7Z6qwnFcCJndqgL9tdWr6tg5KjzxnJgaa5ubyuHpB86owoU2Bmp7pmlQqWbScwbu7nQp1FnVfP6GKRlkRw==; 7:+MDyo3/xYCXCZ9xVeI9uhIEiFPM0vpU2Hw/VTkyIWn93KpyBGO6HfuVgHIgt6QyQ8xUy1A6N2uEnQpiCj2LyQPgl8AsrwCQLKsMXIYlM3X1rvpEcGyrIADtkgmr5UEWjhRANL4lzDNAs6lNSMIfMCQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: ad7dc36f-6a2e-4f52-4136-08d67c670a83 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2808; x-ms-traffictypediagnostic: BYAPR16MB2808: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(396003)(39860400002)(366004)(136003)(376002)(189003)(199004)(55784004)(13464003)(32952001)(6306002)(81166006)(8676002)(8936002)(81156014)(6246003)(229853002)(7736002)(26005)(110136005)(186003)(305945005)(66066001)(486006)(6116002)(93886005)(68736007)(2906002)(9686003)(106356001)(2171002)(105586002)(476003)(446003)(11346002)(25786009)(80792005)(6506007)(53546011)(33656002)(99286004)(3846002)(71190400001)(478600001)(5660300001)(71200400001)(74316002)(76176011)(97736004)(53936002)(7696005)(316002)(5024004)(966005)(256004)(14444005)(2201001)(14454004)(86362001)(72206003)(55016002)(102836004)(6436002)(2501003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2808; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: EY7oPIJRG+/4R5oZoYy4SrWXTZCSERgJLL2w/FwO86/uRYT5njLo81pgLca80R91cKRwF/IG3325Jne5/u9P2RsvfOVMsQs551n613rNiGlZWSF2NBA13Bi0v16Isj8K1bW4U6CvJH1NuzhQ36czEKxIHoPX4nOez523d3WXK8aqvZohslbEk0HPEeai3s0JUoQ1laEjq3I5kHadTLasV6xDDOU+riEeZajHkQ/RjTllCN/EAlQx1xexJjlWLfJwUnEZiSUOu9DIx+W2x9R0xQKFqxMu9Irsn0ytxQnN9plmqwI/IxPZwdlsA5cP0MelCd4WtMqBkHnjcRgpq9RjXjeifcByfaWs9buaLKJDCJsm4by10NBSxhNUP4h8NZgay9Ky6hNNS2QT+6/ZXrnDwOgw4nMjvvQ8SU1fvb+BQhc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: ad7dc36f-6a2e-4f52-4136-08d67c670a83 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 10:32:11.6671 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2808 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6463> : inlines <6996> : streams <1810333> : uri <2781262> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 10:35:45 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBKb24gU2hhbGxvdw0KPiBTZW50OiBUaHVyc2RheSwgSmFu dWFyeSAxNywgMjAxOSAzOjM5IFBNDQo+IFRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IDxU aXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4gbW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbTsgZG90c0BpZXRmLm9yZzsgJ0JlbmphbWluIEthZHVrJw0KPiA8a2FkdWtAbWl0 LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiBTdWJqZWN0 OiBSZTogW0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwt MjUgKDFzdCBQYXJ0KQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBv ZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2ht ZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50 IGlzDQo+IHNhZmUuDQo+IA0KPiANCj4gDQo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gPiBGcm9tOiBEb3RzIFttYWlsdG86IGRvdHMtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxm IE9mIEtvbmRhLA0KPiA+IFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+IFNlbnQ6IDE3IEphbnVhcnkg MjAxOSAwOTozMw0KPiA+IFRvOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tOyBCZW5qYW1p biBLYWR1azsNCj4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLSBjaGFubmVsQGlldGYub3JnDQo+ ID4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0OiBSZTogW0RvdHNdIEFEIHJldmlldyBv ZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPiAoMXN0IFBhcnQpDQo+ID4N Cj4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gPiBGcm9tOiBEb3RzIDxkb3Rz LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiA+ID4gbW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbQ0KPiA+ID4gU2VudDogVGh1cnNkYXksIEphbnVhcnkgMTcsIDIwMTkgMToxNiBQ TQ0KPiA+ID4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiA8VGlydW1hbGVzd2Fy UmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+ID4gPiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0 LmVkdT47DQo+ID4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWxAaWV0Zi5vcmcNCj4g PiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPiBTdWJqZWN0OiBSZTogW0RvdHNdIEFEIHJldmll dyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPiA+ICgxc3QgUGFydCkN Cj4gPiA+DQo+ID4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBv cmdhbml6YXRpb24uIERvIG5vdCBjbGljaw0KPiA+ID4gbGlua3Mgb3Igb3BlbiBhdHRhY2htZW50 cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93DQo+ID4gPiB0aGUgY29u dGVudCBpcyBzYWZlLg0KPiA+ID4NCj4gPiA+IFJlLSwNCj4gPiA+DQo+ID4gPiBPSy4NCj4gPiA+ DQo+ID4gPiBHaXZlbiB0aGF0IHdlIGRvbid0IGhhdmUgYW4gZXhwbGljaXQgbWVudGlvbiBhYm91 dCB0aGlzIGluIDgzMDUsIEkNCj4gPiA+IGFkZGVkDQo+ID4gdGhpcw0KPiA+ID4gTkVXIHNlbnRl bmNlIGVjaG9pbmcgd2hhdCB3YXMgaW4gNjU1NToNCj4gPiA+DQo+ID4gPiAgICBOb3RlIHRoYXQg dGhlIERPVFMgY2xpZW50IG11c3QgY2FjaGUgaW5mb3JtYXRpb24gcmVnYXJkaW5nIHRoZQ0KPiA+ ID4gICAgb3V0Y29tZSBvZiBlYWNoIGNvbm5lY3Rpb24gYXR0ZW1wdCwgYW5kIGl0IHVzZXMgdGhh dCBpbmZvcm1hdGlvbiB0bw0KPiA+ID4gICAgYXZvaWQgdGhyYXNoaW5nIHRoZSBuZXR3b3JrIHdp dGggc3Vic2VxdWVudCBhdHRlbXB0cy4NCj4gPg0KPiA+IE1pbm9yIGNoYW5nZToNCj4gPg0KPiA+ IE5vdGUgdGhhdCB0aGUgRE9UUyBjbGllbnQgbXVzdCBjYWNoZSBpbmZvcm1hdGlvbiByZWdhcmRp bmcgdGhlIG91dGNvbWUNCj4gPiBvZiBlYWNoIGNvbm5lY3Rpb24gYXR0ZW1wdCBmb3IgYSBzcGVj aWZpYyB0aW1lIHBlcmlvZCAoZS5nLiAxMA0KPiA+IG1pbnV0ZXMpLCBhbmQgaXQgdXNlcyB0aGF0 IGluZm9ybWF0aW9uIHRvIGF2b2lkIHRocmFzaGluZyB0aGUgbmV0d29yaw0KPiA+IHdpdGggc3Vi c2VxdWVudCBhdHRlbXB0cy4NCj4gDQo+IEhvdyBmcmVxdWVudGx5IHNob3VsZCB0aGUgY2xpZW50 IHJldHJ5IHdoZW4gYWxsIDQgY29ubmVjdGlvbiBtZXRob2RzIGZhaWwgLQ0KPiAxMCBtaW51dGVz IGlzIGV4Y2Vzc2l2ZSB0byBtZT8NCg0KMTAgbWludXRlIGNoYW5nZSBpcyBmb3Igc3VjY2Vzc2Z1 bCBvdXRjb21lIG9ubHkuDQoNCi1UaXJ1DQoNCj4gDQo+IH5Kb24NCj4gDQo+ID4NCj4gPiAtVGly dQ0KPiA+DQo+ID4gPg0KPiA+ID4gQ2hlZXJzLA0KPiA+ID4gTWVkDQo+ID4gPg0KPiA+ID4gPiAt LS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4gRGUgOiBLb25kYSwgVGlydW1hbGVz d2FyIFJlZGR5DQo+ID4gPiA+IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVl LmNvbV0NCj4gPiA+ID4gRW52b3nDqSA6IGpldWRpIDE3IGphbnZpZXIgMjAxOSAwODoxNiDDgCA6 IEJPVUNBREFJUiBNb2hhbWVkDQo+ID4gPiA+IFRHSS9PTE47IEJlbmphbWluIEthZHVrOyBkcmFm dC1pZXRmLWRvdHMtc2lnbmFsLSBjaGFubmVsQGlldGYub3JnDQo+ID4gPiA+IENjIDogZG90c0Bp ZXRmLm9yZyBPYmpldCA6IFJFOiBBRCByZXZpZXcgb2YNCj4gPiA+ID4gZHJhZnQtaWV0Zi1kb3Rz LXNpZ25hbC1jaGFubmVsLTI1ICgxc3QgUGFydCkNCj4gPiA+ID4NCj4gPiA+ID4gPiAtLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4gPiA+IEZyb206IG1vaGFtZWQuYm91Y2FkYWlyQG9y YW5nZS5jb20NCj4gPiA+ID4gPiA8bW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbT4NCj4gPiA+ ID4gPiBTZW50OiBUaHVyc2RheSwgSmFudWFyeSAxNywgMjAxOSAxMjozMyBQTQ0KPiA+ID4gPiA+ IFRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gPiA8VGlydW1hbGVzd2FyUmVkZHlf S29uZGFATWNBZmVlLmNvbT47DQo+ID4gPiA+ID4gQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5l ZHU+Ow0KPiA+ID4gPiA+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0K PiA+ID4gPiA+IENjOiBkb3RzQGlldGYub3JnDQo+ID4gPiA+ID4gU3ViamVjdDogUkU6IEFEIHJl dmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDFzdA0KPiA+ID4gPiA+ IFBhcnQpDQo+ID4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSGkgVGly dSwNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IEFzIHlvdSBrbm93IFJGQzgzMDUgb2Jzb2xldGVzIFJG QzY1NTUuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJIGZhaWwgdG8gc2VlIHdoZXJlIGNhY2hpbmcg cmVzdWx0cyBpcyBtZW50aW9uZWQgaW4gODMwNS4gRG8geW91Pw0KPiA+ID4gPg0KPiA+ID4gPiBU aG91Z2ggUkZDODAzNSBvYnNvbGV0ZXMgUkZDNjU1NSwgaXQgaXMgc3RpbGwgY29tcGF0aWJsZSB3 aXRoDQo+ID4gPiA+IFJGQzY1NTUgKHNlZSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZj ODMwNSNhcHBlbmRpeC1BKS4NCj4gPiA+ID4gSXQgaXMgdXNlZnVsIHRvIGNhY2hlIHRoZSBoYXBw eSBleWViYWxsIHJlc3VsdHMgZm9yIGEgc3BlY2lmaWMgdGltZS4NCj4gPiA+ID4NCj4gPiA+ID4g LVRpcnUNCj4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IENoZWVycywNCj4gPiA+ID4gPiBN ZWQNCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ ID4gPiA+ID4gPiBEZSA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiA+ID4gPiA+IFtt YWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gPiA+ID4gPiA+IEVu dm95w6kgOiBtZXJjcmVkaSAxNiBqYW52aWVyIDIwMTkgMTI6MTEgw4AgOiBCT1VDQURBSVIgTW9o YW1lZA0KPiA+ID4gPiA+ID4gVEdJL09MTjsgQmVuamFtaW4gS2FkdWs7IGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtIGNoYW5uZWxAaWV0Zi5vcmcNCj4gQ2MgOg0KPiA+ID4gPiA+ID4gZG90c0BpZXRm Lm9yZyBPYmpldCA6IFJFOiBBRCByZXZpZXcgb2YNCj4gPiA+ID4gPiA+IGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtY2hhbm5lbC0yNSAoMXN0IFBhcnQpDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4g SGkgTWVkLA0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFBsZWFzZSBzZWUgaW5saW5lDQo+ID4g PiA+ID4gPg0KPiA+ID4gPiA+ID4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4g PiA+ID4gPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0K PiA+ID4gPiA+ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiA+ID4gPiA+ IFNlbnQ6IFdlZG5lc2RheSwgSmFudWFyeSAxNiwgMjAxOSAxOjMwIFBNDQo+ID4gPiA+ID4gPiA+ IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWdu YWwtDQo+ID4gPiA+ID4gPiA+IGNoYW5uZWxAaWV0Zi5vcmcNCj4gPiA+ID4gPiA+ID4gQ2M6IGRv dHNAaWV0Zi5vcmcNCj4gPiA+ID4gPiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBBRCByZXZpZXcg b2YNCj4gPiA+ID4gPiA+ID4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICgxc3QN Cj4gPiA+ID4gPiA+IFBhcnQpDQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+ID4NCj4gPiA+ ID4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgVGhlc2UgY29ubmVj dGlvbiBhdHRlbXB0cyBhcmUNCj4gPiA+ID4gPiA+ID4gPiAgICBwZXJmb3JtZWQgYnkgdGhlIERP VFMgY2xpZW50IHdoZW4gaXQgaW5pdGlhbGl6ZXMuICBUaGUNCj4gPiA+ID4gPiA+ID4gPiByZXN1 bHRzIG9mDQo+ID4gPiA+IHRoZQ0KPiA+ID4gPiA+ID4gPiA+ICAgIEhhcHB5IEV5ZWJhbGxzIHBy b2NlZHVyZSBhcmUgdXNlZCBieSB0aGUgRE9UUyBjbGllbnQNCj4gPiA+ID4gPiA+ID4gPiBmb3Ig c2VuZGluZw0KPiA+ID4gPiBpdHMNCj4gPiA+ID4gPiA+ID4gPiAgICBzdWJzZXF1ZW50IG1lc3Nh Z2VzIHRvIHRoZSBET1RTIHNlcnZlci4NCj4gPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiA+ IEkgc2VlIHRoaXMgaXMgc2NvcGVkIHRvICJ3aGVuIHRoZSBjbGllbnQgaW5pdGlhbGl6ZXMiLCBz bw0KPiA+ID4gPiA+ID4gPiA+IEkgZG9uJ3Qga25vdyB3aGV0aGVyIGl0IGFkZHMgbW9yZSBvciBu b3QgdG8gZW5kIHdpdGggImZvcg0KPiA+ID4gPiA+ID4gPiA+IHRoZSBkdXJhdGlvbiBvZiB0aGUg RE9UUyBzZXNzaW9uIiBvciBzb21lIHNpbWlsYXIgc2NvcGluZw0KPiA+ID4gPiA+ID4gPiA+IGZv ciB0aGUgY2FjaGluZyBvZiB0aGUgaGFwcHkgZXllYmFsbHMgcmVzdWx0cy4NCj4gPiA+ID4gPiA+ ID4NCj4gPiA+ID4gPiA+ID4gW01lZF0gVGhlIGNvbm5lY3Rpb24gYXR0ZW1wdHMgYXJlIHBlcmZv cm1lZCBlYWNoIHRpbWUgdGhlDQo+ID4gPiA+ID4gPiA+IGNsaWVudCBoYXMgdG8gc2VsZWN0IGFt b25nIGEgbGlzdCBvZiB2NCwgdjYgKHRscywgZHRscykuDQo+ID4gPiA+ID4gPiA+IFRoaXMgaXMg cGFydGljdWxhcmx5IHRydWUgd2hlbg0KPiA+ID4gPiA+ID4gdGhlIGNsaWVudA0KPiA+ID4gPiA+ ID4gPiBpbml0aWF0ZXMsIGJ1dCB0aGlzIG1heSBhbHNvIGJlIHRydWUgZWFjaCB0aW1lIHRoZSBj bGllbnQNCj4gPiA+ID4gPiA+ID4gaGFzIHRvIHNlbGVjdA0KPiA+ID4gPiA+ID4gYW1vbmcNCj4g PiA+ID4gPiA+ID4gdjQsIHY2LCBEVExTLCBUTFMgKGUuZy4sIHRoZSBjbGllbnQgYXR0YWNoZXMg dG8gYSBuZXcgbmV0d29yaykuDQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IEkgdXBkYXRl ZCB0aGUgdGV4dCB0bzoNCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gIlRoZXNlIGNvbm5l Y3Rpb24gYXR0ZW1wdHMgYXJlIHBlcmZvcm1lZCBieSB0aGUgRE9UUyBjbGllbnQNCj4gPiA+ID4g PiA+ID4gd2hlbiBpdCBpbml0aWFsaXplcywgb3IgaW4gZ2VuZXJhbCB3aGVuIGl0IGhhcyB0byBz ZWxlY3QgYW4NCj4gPiA+ID4gPiA+ID4gYWRkcmVzcyBmYW1pbHkgYW5kDQo+ID4gPiA+ID4gPiB0 cmFuc3BvcnQNCj4gPiA+ID4gPiA+ID4gdG8gY29udGFjdCBpdHMgRE9UUyBzZXJ2ZXIuIg0KPiA+ ID4gPiA+ID4NCj4gPiA+ID4gPiA+IEhhcHB5IGV5ZWJhbGxzIG1hbmRhdGVzIGNhY2hpbmcgdGhl IHJlc3VsdHMsIHNlZQ0KPiA+ID4gPiA+ID4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3Jm YzY1NTUjc2VjdGlvbi00ICh0byBhdm9pZA0KPiA+ID4gPiA+ID4gdGhyYXNoaW5nIHRoZSBuZXR3 b3JrKS4NCj4gPiA+ID4gPiA+IFdlIG1heSB3YW50IHRvIHVwZGF0ZSB0aGUgYWJvdmUgbGluZSBh Y2NvcmRpbmdseS4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBDaGVlcnMsDQo+ID4gPiA+ID4g PiAtVGlydQ0KPiA+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4g PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCj4gPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGlu ZyBsaXN0DQo+ID4gRG90c0BpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vZG90cw0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Thu Jan 17 02:38:21 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31B95130DD8; Thu, 17 Jan 2019 02:38:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xjF35HusXBfb; Thu, 17 Jan 2019 02:38:17 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A624130E0A; Thu, 17 Jan 2019 02:38:16 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547721338; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=f b8WtX4wR5K8B4duOx9hYfkqIDQ4WvpR1VNLjWVqvD s=; b=XNuixe82M0r1E1iKc5aEcyzf4cEPKBPZH6Ryor2YFdlZ XJYjL+KnAEDeLjAct29ESLxJ52wZpERcUp5P2K8tBJfCutD+aK tsI2vHaYi2jKhS1INKRbbzX6bXx8+ea30qx3nl0KCp0yIhhkKt ST2wKiUuzYq2jiSW8B3OH3kOlb4= Received: from DNVEXAPP1N05.corpzone.internalzone.com (DNVEXAPP1N05.corpzone.internalzone.com [10.44.48.89]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682f_c3dc_de9ae41f_44ea_44c3_acf9_64da2178fb09; Thu, 17 Jan 2019 04:35:37 -0600 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 03:33:40 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 03:33:40 -0700 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 03:33:40 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2808.namprd16.prod.outlook.com (20.178.233.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 10:33:39 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 10:33:39 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuAABJymg Date: Thu, 17 Jan 2019 10:33:38 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2808; 6:53zRSn7pYEVqeGGZR5KIIH5P3Tt7xz9qk+qEg5s2OqHKvhWljJPaUw0qzOMkEOSH5oiMqQNf+HN8ocTq0IwDqHXClufIvtyymiG42JVv/EH9Y9JUfCDGfWf6GgomDa1BO2z8GWk2gRdF2TPVXIMGDoYm9YAH31SjMIquKzdB5Y+NzuEeDmP1pBGRh2Uge9mUiU695A4EFl2YdS05qYE2j0uB0X+LwFrzvV4CuQkPzVydZvyG+oyJfSTp7ZkrQWTY985bBjRu///mYbow0azMD1pPeP6f7f2NkRjIabBMWFnKvHeZJkq1ScJa30ktLVE4S8fZCrLG9jKcr9eFg3yVX6ZAap7YIuEFQqF7gWkKpAoBSLSrnEo24Uu+2rDfaoGhw20GB2rxNo+OsPFSXTvgb0WXpY86AmaUhoj7E8b6IS8Whx4scEcANCZAcoY2Y36nqrk0VcmpUlQyZ1pCw/vWEg==; 5:nJSUzWFnapgTseXoUAi8zh0iZh7tc36TP8ye4dkqn9x4QxU1NNoTuHQkmOwynYscU4MWFc1PiTpz5eUlljilLXx8HdzoXUBsG0gexPvwulSj5bfLhYywyeUh1ReWhwEXoqqPmRRJ31+z0xds8wgHgesSQaRj7CsWgixVzu29pk1z3IijCun9qOXYKelHb13nPw6MQTYtuQIrMlBrLLSoEQ==; 7:73N2cOQp2bfgBseejZOUKF2xt64EP/LAKCHQM5xeiGIJYDi/+GAnkPZSQ1+8ARUGmbgpjgXh6qpjQbLGUJ6Ugq3FThSgvHE8faB8v9HPRLtKCfIbqr0dUVytnolvJmD3bZMmM1jtotBmBrU43rHPuA== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: fb6a72da-af42-446b-6a49-08d67c673e80 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2808; x-ms-traffictypediagnostic: BYAPR16MB2808: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(396003)(39860400002)(366004)(136003)(376002)(189003)(199004)(55784004)(13464003)(32952001)(51444003)(6306002)(81166006)(8676002)(8936002)(81156014)(6246003)(229853002)(7736002)(26005)(110136005)(186003)(305945005)(66066001)(486006)(6116002)(68736007)(2906002)(9686003)(106356001)(2171002)(105586002)(476003)(446003)(11346002)(25786009)(80792005)(6506007)(53546011)(33656002)(99286004)(3846002)(71190400001)(478600001)(5660300001)(71200400001)(74316002)(76176011)(97736004)(4326008)(53936002)(7696005)(316002)(5024004)(966005)(256004)(14444005)(14454004)(86362001)(72206003)(55016002)(102836004)(6436002)(2501003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2808; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: TlQ+dqndd51vMpIpiuzv4cDVZx8hZBhzseLIcuac0uxOAVxHyzkLNNMLATE5d+2xlsrCwYrCz39p6IFJdbg69R9SAzIrRkPrQ83B1+GWOKv8yJLfF0kynM0ahP9xt7nfxme99JZFkmnTulrZ+qMjl+WyQN7VQluJoXhAMSMVF6a+HO+lS8KvXG4FI+CMbXWC/OGrR18NUSSHbw4ZxiPwVnH+rktfonqJG0dBOoFYt5wYErkVjkNwLP0Mq1lw+iYYfwi3LqcOaPYLtcDMg3b6+WY4Tgs84oSNqkshT3mAy8LaOW4CvUFnV1bGiWjJGSvyfjEjYUniy+N9gnToAce3HTWTfxmPoZDSU+LoFIy+Iov8CM1+sbhVuqTuFBJnDnjQesD9xqDsb6HFOm4ZngLHqEMzRWx1EQ9eGvW+8hv27YY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: fb6a72da-af42-446b-6a49-08d67c673e80 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 10:33:38.9241 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2808 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6463> : inlines <6996> : streams <1810333> : uri <2781262> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 10:38:20 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IFRodXJzZGF5LCBKYW51YXJ5IDE3LCAyMDE5IDEyOjIxIFBNDQo+IFRvOiBCZW5qYW1p biBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5u ZWxAaWV0Zi5vcmcNCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtEb3RzXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg1dGggUGFydCkN Cj4gDQo+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXph dGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yDQo+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlv dSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcw0KPiBzYWZlLg0K PiANCj4gSGkgQmVuLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVlcnMsDQo+ IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKgOiBCZW5q YW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3JlZGkgMTYN Cj4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsQGlldGYub3JnDQo+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+IE9iamV0wqA6IEFEIHJl dmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPg0KPiA+IFNlY3Rp b24gNy4yDQo+ID4NCj4gPiBUaGUgVExTIDEuMyBoYW5kc2hha2Ugd2l0aCAwLVJUVCBkaWFncmFt IG5lZWRzIHRvIGJlDQo+ID4gcmV2aXNpdGVkL3JlZnJlc2hlZCwgYXMgUkZDIDg0NDYgZG9lcyBu b3QgbG9vayBsaWtlIHRoYXQuDQo+ID4gQWRkaXRpb25hbGx5LCB0aGUgdXNhZ2Ugb2YgUFNLIGFz IHdlbGwgYXMgYSBjZXJ0aWZpY2F0ZSBpcyBub3QgZGVmaW5lZA0KPiA+IHVudGlsIGRyYWZ0LWhv dXNsZXktdGxzLXRsczEzLWNlcnQtd2l0aC1leHRlcm4tcHNrIGlzIHB1Ymxpc2hlZC4NCj4gPiBJ IGFsc28gbm90ZSB0aGF0IGluIHRoZSBkaWFncmFtIGFzIHByZXNlbnRlZCwgdGhlIGNsaWVudCBp cyBub3QgeWV0DQo+ID4ga25vd24gdG8gYmUgYXV0aGVudGljYXRlZCB3aGVuIHRoZSBzZXJ2ZXIg c2VuZHMgaXRzIGluaXRpYWwgKDAuNS1SVFQpDQo+ID4gRE9UUyBzaWduYWwgbWVzc2FnZS4NCj4g Pg0KPiANCj4gW01lZF0gTm90ZWQuIFRoYW5rcy4NCg0KVGhlIERPVFMgc2lnbmFsIGNoYW5uZWwg ZHJhZnQgaXMgZGlzY3Vzc2luZyBQU0sgd2l0aCAoRUMpREhFIGtleSBlc3RhYmxpc2htZW50IGV4 cGxhaW5lZCBpbiBSRkM4NDQ2LCBhbmQgSSBkb24ndCBzZWUgdGhlIG5lZWQgdG8gcmVmZXIgdG8g ZHJhZnQtaG91c2xleS10bHMtdGxzMTMtY2VydC13aXRoLWV4dGVybi1wc2stMDAuIA0KVGhlIDAt UlRUIGRpYWdyYW0gaXMgYSBzaW1wbGlmaWVkIHZlcnNpb24gb2YgMC1SVFQganVzdCBsaWtlIHRo ZSBGaWd1cmUgMSBpbiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1xdWlj LXRscy0xNy4NCg0KVGhlIG9ubHkgY29ycmVjdGlvbiByZXF1aXJlZCB0byB0aGUgZGlhZ3JhbSBp cyBlbmRfb2ZfZWFybHlfZGF0YSBtdXN0IGJlIHNlbnQgYWxvbmcgd2l0aCB0aGUgY2xpZW50IEZp bmlzaGVkIG1lc3NhZ2UuDQoNCj4gDQo+ID4gU2VjdGlvbiA3LjMNCj4gPg0KPiA+IFRoaXMgd2hv bGUgc2VjdGlvbiBzZWVtcyB0byBvbmx5IGJlIHJlbGV2YW50IGZvciBVRFAgdXNhZ2UsIHNvDQo+ ID4gcHJvYmFibHkgdGhlICJJZiBVRFAgaXMgdXNlZCIgY2xhdXNlIGNhbiBiZSBkcm9wcGVkIGFu ZCBhbg0KPiA+IGludHJvZHVjdG9yeSBzdGF0ZW1lbnQgYWRkZWQgZWFybGllciBvbi4NCj4gDQo+ IFtNZWRdIFdpbGwgY29uc2lkZXIgdGhhdC4NCj4gDQo+ID4NCj4gPiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBQYXRoIE1UVSBNVVNUIGJlIGdyZWF0ZXIgdGhhbiBvciBlcXVhbCB0bw0K PiA+ICAgIFtDb0FQIG1lc3NhZ2Ugc2l6ZSArIERUTFMgb3ZlcmhlYWQgb2YgMTMgb2N0ZXRzICsg YXV0aGVudGljYXRpb24NCj4gPiAgICBvdmVyaGVhZCBvZiB0aGUgbmVnb3RpYXRlZCBEVExTIGNp cGhlciBzdWl0ZSArIGJsb2NrIHBhZGRpbmddDQo+ID4gICAgKFNlY3Rpb24gNC4xLjEuMSBvZiBb UkZDNjM0N10pLiAgSWYgdGhlIHJlcXVlc3Qgc2l6ZSBleGNlZWRzIHRoZSBwYXRoDQo+ID4gICAg TVRVIHRoZW4gdGhlIERPVFMgY2xpZW50IE1VU1Qgc3BsaXQgdGhlIERPVFMgc2lnbmFsIGludG8g c2VwYXJhdGUNCj4gPiAgICBtZXNzYWdlcywgZm9yIGV4YW1wbGUgdGhlIGxpc3Qgb2YgYWRkcmVz c2VzIGluIHRoZSAndGFyZ2V0LXByZWZpeCcNCj4gPiAgICBwYXJhbWV0ZXIgY291bGQgYmUgc3Bs aXQgaW50byBtdWx0aXBsZSBsaXN0cyBhbmQgZWFjaCBsaXN0IGNvbnZleWVkDQo+ID4gICAgaW4g YSBuZXcgUFVUIHJlcXVlc3QuDQo+ID4NCj4gPiAoRFRMUyAxLjMgd2lsbCBoYXZlIGEgc2hvcnQg aGVhZGVyIGZvciBzb21lIHBhY2tldHMsIHRoYXQgaXMgbGVzcyB0aGFuDQo+ID4gMTMgb2N0ZXRz LikNCj4gDQo+IFtNZWRdIFRoZSB0ZXh0IGlzIG1vcmUgYWJvdXQgMS4yLiBXZSBjYW4gYWRkIGEg MS4zIG5vdGUgaWYgeW91IHRoaW5rIGl0IGlzDQo+IHVzZWZ1bCBmb3IgdGhlIGRpc2N1c3Npb24u DQoNCldlIHNob3VsZCBzYXkgIkRUTFMgMS4yIG92ZXJoZWFkIG9mIDEzIG9jdGV0cyINCkluIERU TFMgMS4zIERUTFNDaXBoZXJ0ZXh0IHN0cnVjdHVyZSBpcyB2YXJpYWJsZSBsZW5ndGggKGZ1bGwg aGVhZGVyIGlzIG9mIHNpemUgNiBvY3RldHMpLiANCg0KPiANCj4gPg0KPiA+IFNlY3Rpb24gOA0K PiA+DQo+ID4gV2UndmUgZ290IHNvbWUgcmVxdWlyZW1lbnRzIGluIGhlcmUgYWJvdXQgbGltaXRp bmcgYmVoYXZpb3Igb2YNCj4gPiBjbGllbnRzL3NlcnZlcnMgd2hlbiB0YWxraW5nIHRvIGdhdGV3 YXlzOyBpcyBrbm93aW5nIGFib3V0IHRoZQ0KPiA+IHByZXNlbmNlIG9mIGEgZ2F0ZXdheSBzb21l dGhpbmcgdGhhdCdzIHJlcXVpcmVkIHRvIGhhcHBlbiBvdXQgb2YgYmFuZA0KPiA+IG9yIGlzIHRo ZXJlIGFuIGluLWJhbmQgd2F5IHRvIGlkZW50aWZ5IHRoYXQgdGhlIHBlZXIgaXMgYSBnYXRld2F5 Pw0KPiANCj4gW01lZF0gQW4gYWdlbnQgZG9lcyBub3QgbmVjZXNzYXJ5IGtub3cgdGhhdCBpdCBw ZWVyIGlzIGdhdGV3YXkuIEEgZ2F0ZXdheQ0KPiBpcyBzZWVuIGFzIGEgc2VydmVyIGZvciB0aGUg Y2xpZW50LCBhbmQgYSBjbGllbnQgZm9yIGEgc2VydmVyLg0KPiANCj4gPg0KPiA+ICAgIG1lc3Nh Z2VzIGZyb20gYW4gYXV0aG9yaXplZCBET1RTIGdhdGV3YXksIHRoZXJlYnkgY3JlYXRpbmcgYSB0 d28tbGluaw0KPiA+ICAgIGNoYWluIG9mIHRyYW5zaXRpdmUgYXV0aGVudGljYXRpb24gYmV0d2Vl biB0aGUgRE9UUyBjbGllbnQgYW5kIHRoZQ0KPiA+ICAgIERPVFMgc2VydmVyLg0KPiA+DQo+ID4g VGhpcyBzZWVtcyB0byBpZ25vcmUgdGhlIHBvc3NpYmlsaXR5IG9mIHNldHVwcyB0aGF0IGluY2x1 ZGUgYm90aA0KPiA+IGNsaWVudC1kb21haW4gYW5kIHNlcnZlci1kb21haW4gZ2F0ZXdheXMuDQo+ IA0KPiBbTWVkXSBJIHVwZGF0ZWQgdGhlIHRleHQgdG8gbWVudGlvbiB0aGlzIGlzIG9ubHkgYW4g ZXhhbXBsZS4NCj4gDQo+ID4NCj4gPiAgICAgICAgICAgICAgICAgIERPVFMgY2xpZW50IGNlcnRp ZmljYXRlIHZhbGlkYXRpb24gTVVTVCBiZSBwZXJmb3JtZWQgYXMNCj4gPiAgICBwZXIgW1JGQzUy ODBdIGFuZCB0aGUgRE9UUyBjbGllbnQgY2VydGlmaWNhdGUgTVVTVCBjb25mb3JtIHRvIHRoZQ0K PiA+ICAgIFtSRkM1MjgwXSBjZXJ0aWZpY2F0ZSBwcm9maWxlLiAgWy4uLl0NCj4gPg0KPiA+IFRo aXMgc2VlbXMgdG8gZHVwbGljYXRlIGEgcmVxdWlyZW1lbnQgYWxyZWFkeSBzdGF0ZWQgaW4gU2Vj dGlvbiA3LjE7DQo+ID4gaXQncyBwcm9iYWJseSBiZXN0IHRvIG9ubHkgaGF2ZSBub3JtYXRpdmUg bGFuZ3VhZ2UgaW4gb25lIGxvY2F0aW9uLA0KPiA+IGV2ZW4gaWYgd2UgbmVlZCB0byBtZW50aW9u IHRoZSB0b3BpYyBpbiBtdWx0aXBsZSBsb2NhdGlvbnMuDQo+ID4gU2ltaWxhcmx5IGZvciB0aGUg bXV0dWFsIGF1dGhlbnRpY2F0aW9uIHJlcXVpcmVtZW50LCB3aGljaCB3ZQ0KPiA+IGR1cGxpY2F0 ZSBpbiB0aGUgc2Vjb25kIGFuZCBmb3VydGggcGFyYWdyYXBocyBvZiB0aGlzIHNlY3Rpb24uDQo+ IA0KPiBbTWVkXSBHb29kIHBvaW50LiBGaXhlZC4NCj4gDQo+ID4NCj4gPiBJZiB3ZSBkb24ndCB3 YW50IHRvIHVzZSBleGFtcGxlLmNvbSB2cy4gZXhhbXBsZS5uZXQgYXMgc2FtcGxlIGRvbWFpbnMs DQo+ID4gd2UgY2FuIGFsc28gdXNlIHdoYXRldmVyd2V3YW50LmV4YW1wbGUsIHBlciBSRkMgNjc2 MS4NCj4gDQo+IFtNZWRdIFdpbGwgbWFpbnRhaW4gdGhlIG9uZXMgYWxyZWFkeSBpbiB0aGUgZHJh ZnQuIFRoYW5rcy4NCj4gDQo+ID4NCj4gPiBTZWN0aW9uIDkNCj4gPg0KPiA+IFdlIHNob3VsZCBt ZW50aW9uIHRoZSBtZWRpYS10eXBlIGFsbG9jYXRpb24gaW4gdGhlIHRvcC1sZXZlbCBzZWN0aW9u Lg0KPiANCj4gW01lZF0gV2lsbCBmaXggdGhhdC4NCj4gDQo+ID4NCj4gPiAibWFwcGluZ3MgdG8g Q0JPUiIgZmVlbHMgY29uZnVzaW5nIHRvIG1lLCBzaW5jZSBpdCBsZWF2ZXMgZW1wdHkgd2hhdA0K PiA+IHdlIGFyZSBtYXBwaW5nIGZyb20uICBQZXJoYXBzIGp1c3QgdGFsa2luZyBhYm91dCBhIHJl Z2lzdHJ5IG9mICJDQk9SDQo+ID4gbWFwIGtleXMiIHdvdWxkIGJlIGJldHRlciwgYm90aCBoZXJl IGFuZCBpbiB0aGUgU2VjdGlvbiA5LjMgaW50cm8uDQo+ID4NCj4gDQo+IFtNZWRdIFVubGVzcyB0 aGVyZSBpcyBhbiBvYmplY3Rpb24sIEkgY2FuIHVzZSAiQ0JPUiBNYXAgS2V5cyIuDQoNCkkgZG9u J3Qgc2VlICJDQk9SIE1hcCBLZXlzIiBkZWZpbmVkIG9yIHVzZWQgYW55d2hlcmUgaW4gdGhlIGRy YWZ0LiANCg0KPiANCj4gPiBTZWN0aW9uIDkuMw0KPiA+DQo+ID4gSSBzdWdnZXN0IGJlaW5nIHZl cnkgZXhwbGljaXQgYWJvdXQgd2hldGhlciBuZXcgcmVxdWVzdHMgZm9yDQo+ID4gcmVnaXN0cmF0 aW9uIHNob3VsZCBiZSBkaXJlY3RlZCB0byB0aGUgbWFpbGluZyBsaXN0IG9yIHRvIElBTkEsIGFz DQo+ID4gd2UndmUgaGFkIHNvbWUgY29uZnVzaW9uIGFib3V0IHRoaXMgZWxzZXdoZXJlLg0KPiA+ DQo+ID4gVGhlIGNyaXRlcmlhIHVzZWQgYnkgdGhlIGV4cGVydHMgYWxzbyBqdXN0IGxpc3RzIHRo aW5ncyB0aGV5IHNob3VsZA0KPiA+IGNvbnNpZGVyLCBidXQgZG9lcyBub3QgcHJvdmlkZSBmdWxs IGNsYXJpdHkgb24gd2hpY2ggYW5zd2VyIHRvIHRoZQ0KPiA+IHF1ZXN0aW9uIGlzIG1vcmUgbGlr ZWx5IHRvIGJlIGFwcHJvdmVkLiAgKEFuZCB5ZXMsIEkga25vdyB0aGF0IHRoaXMNCj4gPiB0ZXh0 IGlzIGxhcmdlbHkgY29waWVkIGZyb20gYWxyZWFkeSBwdWJsaXNoZWQgUkZDcywgYnV0IHdlIGNh biBzdGlsbA0KPiA+IGRvDQo+ID4gYmV0dGVyLikNCj4gDQo+IFtNZWRdIFdpbGwgY2hlY2sgdGhp cy4NCj4gDQo+ID4NCj4gPiBTZWN0aW9uIDkuMy4xDQo+ID4NCj4gPiBJZiB3ZSB3YW50IHRoZSB2 YWx1ZSAwIHRvIGJlIHJlc2VydmVkIHdlIG5lZWQgdG8gc2F5IHNvLg0KPiANCj4gW01lZF0gMCBp cyBub3QgcGFydCBvZiB0aGUgYWxsb2NhdGlvbiByYW5nZS4NCj4gDQo+ID4gRG8gd2Ugd2FudCB0 byBzYXkgYW55dGhpbmcgYWJvdXQgdGhlIHVzYWdlIG9mIG5lZ2F0aXZlIGludGVnZXJzIGFzIG1h cA0KPiA+IGtleXM/DQo+ID4NCj4gPiBJIHN1Z2dlc3Qgbm90IG1lbnRpb25pbmcgdGhlIHBvc3Rh bCBhZGRyZXNzLCBnaXZlbiB0aGUgcmVjZW50IChlLmcuKQ0KPiA+IEdEUFIgcmVxdWlyZW1lbnRz Lg0KPiANCj4gW01lZF0gR29vZCBwb2ludC4gRG9uZS4NCj4gDQo+ID4NCj4gPiBTZWN0aW9uIDku My4yDQo+ID4NCj4gPiBJdCBtYXkgYmUgd29ydGggbWVudGlvbmluZyBUYWJsZSA0IGhlcmUgYXMg d2VsbC4NCj4gDQo+IFtNZWRdIE9LLg0KPiANCj4gPg0KPiA+IFNlY3Rpb24gOS41LjENCj4gPg0K PiA+IFdlIG5lZWQgdG8gc3BlY2lmeSB3aGljaCByYW5nZSBvZiB2YWx1ZXMgd2UgYXJlIGFza2lu ZyBmb3IgYW4NCj4gPiBhbGxvY2F0aW9uIGZyb20uDQo+IA0KPiBbTWVkXSBBZGRlZCBhIG1lbnRp b24gdG8gMC0yNTUgcmFuZ2UuDQoNCkFzIHBlciBodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25t ZW50cy9jYm9yLXRhZ3MvY2Jvci10YWdzLnhodG1sIHRoZSBhbGxvd2VkIHJhbmdlIGlzIDIzLTI1 NS4NCg0KPiANCj4gPg0KPiA+IFNlY3Rpb24gOS42LjENCj4gPg0KPiA+IEFzIGFib3ZlLCBzcGVj aWZ5IHdoYXQgcmFuZ2Ugd2UncmUgYXNraW5nIGFib3V0Lg0KPiANCj4gW01lZF0gT0suDQoNClRo ZSByYW5nZSBpcyBhbHJlYWR5IGRlZmluZWQgaW4gc2VjdGlvbiA5LjYuMS4xIA0KDQpDaGVlcnMN Ci1UaXJ1DQoNCj4gDQo+ID4NCj4gPiBJIGV4cGVjdCB0aGUgY3VycmVudCB0ZXh0IHRvIGdldCBz b21lIElFU0cgKG9yIGRpcmVjdG9yYXRlKSBmZWVkYmFjaw0KPiA+IHRoYXQgdGhlIERhdGEgSXRl bSBhbmQgU2VtYW50aWNzIGRlc2NyaXB0aW9ucyBhcmUgcmVwZXRpdGl2ZSBhbmQgYmFuYWwuDQo+ ID4NCj4gPiBTZWN0aW9uIDkuNw0KPiA+DQo+ID4gSUlVQywgSUFOQSBpcyBnb2luZyB0byBhc2sg aWYgd2Ugd2FudCB0aGlzIG1vZHVsZSB0byBiZSAibWFpbnRhaW5lZCBieQ0KPiA+IElBTkEiLCBz byBpdCB3b3VsZCBiZSBnb29kIHRvIGhhdmUgYW4gYW5zd2VyIHJlYWR5IGV2ZW4gaWYgd2UgZG9u J3QNCj4gPiBwdXQgaXQgaW4gdGhlIGRvY3VtZW50IHRleHQuDQo+IA0KPiBbTWVkXSBUaGlzIGlz IGRpc2N1c3NlZCBpbiAtMjYuDQo+IA0KPiA+DQo+ID4gICAgUmF0ZS1saW1pdGluZyBET1RTIHJl cXVlc3RzLCBpbmNsdWRpbmcgdGhvc2Ugd2l0aCBuZXcgJ2N1aWQnIHZhbHVlcywNCj4gPiAgICBm cm9tIHRoZSBzYW1lIERPVFMgY2xpZW50IGRlZmVuZHMgYWdhaW5zdCBEb1MgYXR0YWNrcyB0aGF0 IHdvdWxkDQo+ID4NCj4gPiBXaXRoIHJlc3BlY3QgdG8gIm5ldyIgJ2N1aWQnIHZhbHVlcywgaXMg dGhlIHNlcnZlciByZXF1aXJlZCB0bw0KPiA+IHJlbWVtYmVyIHdoaWNoIG9uZXMgaXQgaGFzIHNl ZW4gaW4gcGVycGV0dWl0eSwgb3IgY2FuIGl0IHRpbWUgdGhlbSBvdXQNCj4gPiBldmVudHVhbGx5 Pw0KPiANCj4gW01lZF0gVGhlIGF0dGFjayB2ZWN0b3IgaXMgYSBET1RTIGNsaWVudCB3aGljaCBj aGFuZ2VzIGZyZXF1ZW50bHkgaXRzIGN1aWQuDQo+IFRoZSBET1RTIHNlcnZlciBjYW4gc2V0IGFu IGludGVydmFsIGluIHdoaWNoIHRoZSBzYW1lIGNsaWVudCBjYW5ub3QgcHJlc2VudA0KPiBhIG5l dyBjdWlkLg0KPiANCj4gPg0KPiA+IFNlY3Rpb24gMTANCj4gPg0KPiA+IFRoZSBzZWN1cml0eSBj b25zaWRlcmF0aW9ucyBzZWVtIHRvIGJlIHRha2luZyBhIG5hcnJvdyBmb2N1cyBvbiB0aGUNCj4g PiByZXF1aXJlbWVudHMgZm9yIGFuZCBjb25zZXF1ZW5jZXMgb2Ygc3BlY2lmaWMgYml0cyBvbiB0 aGUgd2lyZSBpbiB0aGUNCj4gPiBzaWduYWwgY2hhbm5lbCBwcm90b2NvbC4gIEkgdGhpbmsgaXQn cyBhcHByb3ByaWF0ZSB0byBhbHNvIGluY2x1ZGUNCj4gPiBzb21lIGhpZ2gtbGV2ZWwgdGhvdWdo dHMgYWJvdXQgdGhlIGZ1bmN0aW9uYWwgYmVoYXZpb3Igb2YgdGhlDQo+ID4gcHJvdG9jb2wsIGFs bG93aW5nIHRvIHNpZ25hbCB0aGF0IGFuIGF0dGFjayBpcyB1bmRlcndheSBhbmQgdHJpZ2dlcg0K PiA+IG1pdGlnYXRpb24sIGluY3JlYXNpbmcgdGhlIGF2YWlsYWJpbGl0eSBvZiBzZXJ2aWNlcywg ZXRjLiwgYW5kIHRoZQ0KPiA+IHJpc2tzIHRoYXQgYXJlIHBvc2VkIGJ5IHRoZSBwcm90b2NvbCBm YWlsaW5nIHRvIHdvcmsgcHJvcGVybHksIHdoZXRoZXINCj4gPiB0aGF0IG1lYW5zIGxldHRpbmcg YXR0YWNrIHRyYWZmaWMgdGhyb3VnaCBvciBpbXByb3Blcmx5IGJsb2NraW5nDQo+ID4gbGVnaXRp bWF0ZSB0cmFmZmljLg0KPiANCj4gW01lZF0gV291bGQgYSBwb2ludGVyIHRvIHRoZSBhcmNoaXRl Y3R1cmUvcmVxdWlyZW1lbnRzIEktRHMgYmUgc3VmZmljaWVudCB0bw0KPiBjb3ZlciB0byBoaWdo LWxldmVsIGFzcGVjdHM/DQo+IA0KPiA+DQo+ID4gU2VjdGlvbiAxMy4xDQo+ID4NCj4gPiBJIHRo aW5rIHRoZSBJQU5BIHJlZ2lzdHJpZXMgc2hvdWxkIGJlIGxpc3RlZCBhcyBJbmZvcm1hdGlvbmFs IGFuZCBub3QNCj4gPiBOb3JtYXRpdmUgcmVmZXJlbmNlcy4NCj4gPg0KPiANCj4gW01lZF0gRG9u ZS4NCj4gDQo+ID4gU2VjdGlvbiAxMy4yDQo+ID4NCj4gPiBQZW5kaW5nIHJlc29sdXRpb24gb2Yg dGhlIHF1ZXN0aW9uIGFib3V0IHVzaW5nDQo+ID4gZHJhZnQtaWV0Zi1jb3JlLXlhbmctY2JvciBy dWxlcyBvciBSRkM3OTUxK1JGQzcwNDksIHRoZQ0KPiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLWNi b3IgcmVmZXJlbmNlIG1heSBuZWVkIHRvIGJlIE5vcm1hdGl2ZS4NCj4gDQo+IFtNZWRdIFBsZWFz ZSByZWZlciB0byBteSBhbnN3ZXIgdG8gdGhhdCBxdWVzdGlvbi4gZHJhZnQtaWV0Zi1jb3JlLXlh bmctY2JvciBpcw0KPiBpbmZvcm1hdGl2ZS4NCj4gDQo+ID4NCj4gPiBHaXZlbiB0aGF0ICJVUkki IGlzIGEgd2VsbC1rbm93biBhYmJyZXZpYXRpb24sIHdlIG1heSBiZSBhYmxlIHRvIGdldA0KPiA+ IGF3YXkgd2l0aCBub3QgY2l0aW5nIFJGQyAzOTg2LiAgT24gdGhlIG90aGVyIGhhbmQsIGl0J3Mg bm90IGNhdXNpbmcNCj4gPiBhbnkgaGFybSB0byBsZWF2ZSBpdCBpbi4uLg0KPiANCj4gW01lZF0g V2lsbCBsZWF2ZSBpdC4NCj4gDQo+ID4NCj4gPiBSRkMgNDYzMiBuZWVkcyB0byBiZSBOb3JtYXRp dmUsIHNpbmNlIHdlIG5lZWQgdG8ga25vdyBDSURSIHRvDQo+ID4gZW5jb2RlL2RlY29kZSB0YXJn ZXQtcHJlZml4ZXMuDQo+IA0KPiBbTWVkXSBXb3JrcyBmb3IgbWUuDQo+IA0KPiA+DQo+ID4gU2lt aWxhcmx5LCBJIHRoaW5rIHRoYXQgUkZDcyA2MjM0DQo+IA0KPiBbTWVkXSBUaGlzIG9uZSBpcyBu b3QgbGlzdGVkIGFzIG5vcm1hdGl2ZSBiZWNhdXNlIG90aGVyIGhhc2ggYWxnb3MgbWF5IGJlDQo+ IHVzZWQuDQo+IA0KPiAsIDc0MTMNCj4gW01lZF0gVGhlIHN1cHBvcnQgaWYgVEZPIGlzIG5vdCBt YW5kYXRvcnkuDQo+IA0KPiAsIDc1ODkNCj4gW01lZF0gVGhpcyBpcyBhIE1BWSBpbiB0aGUgc3Bl Yy4gSXQgaXMganVzdCBmaW5lIHRvIGxlYXZlIGl0IGFzIGluZm9ybWF0aXZlLi4NCj4gDQo+ICwg NzkxOA0KPiBbTWVkXSBJZGVtIGFzIFRGTy4NCj4gDQo+ICwgNzkyNA0KPiBbTWVkXSBJZGVtIGFz IFRGTy4NCj4gDQo+ICwgYW5kIDc5NTENCj4gW01lZF0gdGhpcyBvbmUgd2FzIG5vdCBsaXN0ZWQg YXMgbm9ybWF0aXZlIGJlY2F1c2UgdGhlIGRvY3VtZW50IGxpc3RzIHR3bw0KPiB3YXlzIHRvIGRv IHRoZSBtYXBwaW5nLg0KPiANCj4gPiBzaG91bGQgYWxzbyBiZSBOb3JtYXRpdmUuDQo+ID4NCj4g Pg0KPiA+IC1CZW4NCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Thu Jan 17 04:14:26 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8009D130F27; Thu, 17 Jan 2019 04:14:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kfmgrYu58koA; Thu, 17 Jan 2019 04:14:22 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B88F112950A; Thu, 17 Jan 2019 04:14:21 -0800 (PST) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 43gNKm28t2z2y6V; Thu, 17 Jan 2019 13:14:20 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.61]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 43gNKm12L0z2xCR; Thu, 17 Jan 2019 13:14:20 +0100 (CET) Received: from OPEXCAUBM7C.corporate.adroot.infra.ftgroup (10.114.13.32) by OPEXCLILM7E.corporate.adroot.infra.ftgroup (10.114.31.61) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 13:14:19 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7C.corporate.adroot.infra.ftgroup ([fe80::2c53:f99a:e2a9:19c6%21]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 13:14:19 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuAABJymgAAnDUxA= Date: Thu, 17 Jan 2019 12:14:19 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0919A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 12:14:25 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IFtt YWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gRW52b3nDqcKgOiBq ZXVkaSAxNyBqYW52aWVyIDIwMTkgMTE6MzQNCj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgVEdJ L09MTjsgQmVuamFtaW4gS2FkdWs7IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+IGNoYW5uZWxA aWV0Zi5vcmcNCj4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiBPYmpldMKgOiBSRTogQUQgcmV2aWV3 IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoNXRoIFBhcnQpDQo+IA0KPiA+ IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogRG90cyA8ZG90cy1ib3VuY2Vz QGlldGYub3JnPiBPbiBCZWhhbGYgT2YNCj4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29t DQo+ID4gU2VudDogVGh1cnNkYXksIEphbnVhcnkgMTcsIDIwMTkgMTI6MjEgUE0NCj4gPiBUbzog QmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+OyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLQ0K PiA+IGNoYW5uZWxAaWV0Zi5vcmcNCj4gPiBDYzogZG90c0BpZXRmLm9yZw0KPiA+IFN1YmplY3Q6 IFJlOiBbRG90c10gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0y NSAoNXRoDQo+IFBhcnQpDQo+ID4NCj4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRz aWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcw0KPiBvcg0KPiA+IG9w ZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0 aGUgY29udGVudCBpcw0KPiA+IHNhZmUuDQo+ID4NCj4gPiBIaSBCZW4sDQo+ID4NCj4gPiBQbGVh c2Ugc2VlIGlubGluZS4NCj4gPg0KPiA+IENoZWVycywNCj4gPiBNZWQNCj4gPg0KPiA+ID4gLS0t LS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFp bHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3JlZGkgMTYNCj4gPiA+IGphbnZpZXIg MjAxOSAwMToxNCDDgMKgOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWxAaWV0Zi5vcmcN Cj4gPiA+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBk cmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPiA+DQo+ID4gPiBTZWN0aW9uIDcu Mg0KPiA+ID4NCj4gPiA+IFRoZSBUTFMgMS4zIGhhbmRzaGFrZSB3aXRoIDAtUlRUIGRpYWdyYW0g bmVlZHMgdG8gYmUNCj4gPiA+IHJldmlzaXRlZC9yZWZyZXNoZWQsIGFzIFJGQyA4NDQ2IGRvZXMg bm90IGxvb2sgbGlrZSB0aGF0Lg0KPiA+ID4gQWRkaXRpb25hbGx5LCB0aGUgdXNhZ2Ugb2YgUFNL IGFzIHdlbGwgYXMgYSBjZXJ0aWZpY2F0ZSBpcyBub3QgZGVmaW5lZA0KPiA+ID4gdW50aWwgZHJh ZnQtaG91c2xleS10bHMtdGxzMTMtY2VydC13aXRoLWV4dGVybi1wc2sgaXMgcHVibGlzaGVkLg0K PiA+ID4gSSBhbHNvIG5vdGUgdGhhdCBpbiB0aGUgZGlhZ3JhbSBhcyBwcmVzZW50ZWQsIHRoZSBj bGllbnQgaXMgbm90IHlldA0KPiA+ID4ga25vd24gdG8gYmUgYXV0aGVudGljYXRlZCB3aGVuIHRo ZSBzZXJ2ZXIgc2VuZHMgaXRzIGluaXRpYWwgKDAuNS1SVFQpDQo+ID4gPiBET1RTIHNpZ25hbCBt ZXNzYWdlLg0KPiA+ID4NCj4gPg0KPiA+IFtNZWRdIE5vdGVkLiBUaGFua3MuDQo+IA0KPiBUaGUg RE9UUyBzaWduYWwgY2hhbm5lbCBkcmFmdCBpcyBkaXNjdXNzaW5nIFBTSyB3aXRoIChFQylESEUg a2V5DQo+IGVzdGFibGlzaG1lbnQgZXhwbGFpbmVkIGluIFJGQzg0NDYsIGFuZCBJIGRvbid0IHNl ZSB0aGUgbmVlZCB0byByZWZlciB0bw0KPiBkcmFmdC1ob3VzbGV5LXRscy10bHMxMy1jZXJ0LXdp dGgtZXh0ZXJuLXBzay0wMC4NCj4gVGhlIDAtUlRUIGRpYWdyYW0gaXMgYSBzaW1wbGlmaWVkIHZl cnNpb24gb2YgMC1SVFQganVzdCBsaWtlIHRoZSBGaWd1cmUgMSBpbg0KPiBodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1xdWljLXRscy0xNy4NCj4gDQo+IFRoZSBvbmx5IGNv cnJlY3Rpb24gcmVxdWlyZWQgdG8gdGhlIGRpYWdyYW0gaXMgZW5kX29mX2Vhcmx5X2RhdGEgbXVz dCBiZSBzZW50DQo+IGFsb25nIHdpdGggdGhlIGNsaWVudCBGaW5pc2hlZCBtZXNzYWdlLg0KPiAN Cj4gPg0KPiA+ID4gU2VjdGlvbiA3LjMNCj4gPiA+DQo+ID4gPiBUaGlzIHdob2xlIHNlY3Rpb24g c2VlbXMgdG8gb25seSBiZSByZWxldmFudCBmb3IgVURQIHVzYWdlLCBzbw0KPiA+ID4gcHJvYmFi bHkgdGhlICJJZiBVRFAgaXMgdXNlZCIgY2xhdXNlIGNhbiBiZSBkcm9wcGVkIGFuZCBhbg0KPiA+ ID4gaW50cm9kdWN0b3J5IHN0YXRlbWVudCBhZGRlZCBlYXJsaWVyIG9uLg0KPiA+DQo+ID4gW01l ZF0gV2lsbCBjb25zaWRlciB0aGF0Lg0KPiA+DQo+ID4gPg0KPiA+ID4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgUGF0aCBNVFUgTVVTVCBiZSBncmVhdGVyIHRoYW4gb3IgZXF1YWwgdG8N Cj4gPiA+ICAgIFtDb0FQIG1lc3NhZ2Ugc2l6ZSArIERUTFMgb3ZlcmhlYWQgb2YgMTMgb2N0ZXRz ICsgYXV0aGVudGljYXRpb24NCj4gPiA+ICAgIG92ZXJoZWFkIG9mIHRoZSBuZWdvdGlhdGVkIERU TFMgY2lwaGVyIHN1aXRlICsgYmxvY2sgcGFkZGluZ10NCj4gPiA+ICAgIChTZWN0aW9uIDQuMS4x LjEgb2YgW1JGQzYzNDddKS4gIElmIHRoZSByZXF1ZXN0IHNpemUgZXhjZWVkcyB0aGUgcGF0aA0K PiA+ID4gICAgTVRVIHRoZW4gdGhlIERPVFMgY2xpZW50IE1VU1Qgc3BsaXQgdGhlIERPVFMgc2ln bmFsIGludG8gc2VwYXJhdGUNCj4gPiA+ICAgIG1lc3NhZ2VzLCBmb3IgZXhhbXBsZSB0aGUgbGlz dCBvZiBhZGRyZXNzZXMgaW4gdGhlICd0YXJnZXQtcHJlZml4Jw0KPiA+ID4gICAgcGFyYW1ldGVy IGNvdWxkIGJlIHNwbGl0IGludG8gbXVsdGlwbGUgbGlzdHMgYW5kIGVhY2ggbGlzdCBjb252ZXll ZA0KPiA+ID4gICAgaW4gYSBuZXcgUFVUIHJlcXVlc3QuDQo+ID4gPg0KPiA+ID4gKERUTFMgMS4z IHdpbGwgaGF2ZSBhIHNob3J0IGhlYWRlciBmb3Igc29tZSBwYWNrZXRzLCB0aGF0IGlzIGxlc3Mg dGhhbg0KPiA+ID4gMTMgb2N0ZXRzLikNCj4gPg0KPiA+IFtNZWRdIFRoZSB0ZXh0IGlzIG1vcmUg YWJvdXQgMS4yLiBXZSBjYW4gYWRkIGEgMS4zIG5vdGUgaWYgeW91IHRoaW5rIGl0IGlzDQo+ID4g dXNlZnVsIGZvciB0aGUgZGlzY3Vzc2lvbi4NCj4gDQo+IFdlIHNob3VsZCBzYXkgIkRUTFMgMS4y IG92ZXJoZWFkIG9mIDEzIG9jdGV0cyINCj4gSW4gRFRMUyAxLjMgRFRMU0NpcGhlcnRleHQgc3Ry dWN0dXJlIGlzIHZhcmlhYmxlIGxlbmd0aCAoZnVsbCBoZWFkZXIgaXMgb2YNCj4gc2l6ZSA2IG9j dGV0cykuDQo+IA0KPiA+DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiA4DQo+ID4gPg0KPiA+ID4gV2Un dmUgZ290IHNvbWUgcmVxdWlyZW1lbnRzIGluIGhlcmUgYWJvdXQgbGltaXRpbmcgYmVoYXZpb3Ig b2YNCj4gPiA+IGNsaWVudHMvc2VydmVycyB3aGVuIHRhbGtpbmcgdG8gZ2F0ZXdheXM7IGlzIGtu b3dpbmcgYWJvdXQgdGhlDQo+ID4gPiBwcmVzZW5jZSBvZiBhIGdhdGV3YXkgc29tZXRoaW5nIHRo YXQncyByZXF1aXJlZCB0byBoYXBwZW4gb3V0IG9mIGJhbmQNCj4gPiA+IG9yIGlzIHRoZXJlIGFu IGluLWJhbmQgd2F5IHRvIGlkZW50aWZ5IHRoYXQgdGhlIHBlZXIgaXMgYSBnYXRld2F5Pw0KPiA+ DQo+ID4gW01lZF0gQW4gYWdlbnQgZG9lcyBub3QgbmVjZXNzYXJ5IGtub3cgdGhhdCBpdCBwZWVy IGlzIGdhdGV3YXkuIEEgZ2F0ZXdheQ0KPiA+IGlzIHNlZW4gYXMgYSBzZXJ2ZXIgZm9yIHRoZSBj bGllbnQsIGFuZCBhIGNsaWVudCBmb3IgYSBzZXJ2ZXIuDQo+ID4NCj4gPiA+DQo+ID4gPiAgICBt ZXNzYWdlcyBmcm9tIGFuIGF1dGhvcml6ZWQgRE9UUyBnYXRld2F5LCB0aGVyZWJ5IGNyZWF0aW5n IGEgdHdvLWxpbmsNCj4gPiA+ICAgIGNoYWluIG9mIHRyYW5zaXRpdmUgYXV0aGVudGljYXRpb24g YmV0d2VlbiB0aGUgRE9UUyBjbGllbnQgYW5kIHRoZQ0KPiA+ID4gICAgRE9UUyBzZXJ2ZXIuDQo+ ID4gPg0KPiA+ID4gVGhpcyBzZWVtcyB0byBpZ25vcmUgdGhlIHBvc3NpYmlsaXR5IG9mIHNldHVw cyB0aGF0IGluY2x1ZGUgYm90aA0KPiA+ID4gY2xpZW50LWRvbWFpbiBhbmQgc2VydmVyLWRvbWFp biBnYXRld2F5cy4NCj4gPg0KPiA+IFtNZWRdIEkgdXBkYXRlZCB0aGUgdGV4dCB0byBtZW50aW9u IHRoaXMgaXMgb25seSBhbiBleGFtcGxlLg0KPiA+DQo+ID4gPg0KPiA+ID4gICAgICAgICAgICAg ICAgICBET1RTIGNsaWVudCBjZXJ0aWZpY2F0ZSB2YWxpZGF0aW9uIE1VU1QgYmUgcGVyZm9ybWVk IGFzDQo+ID4gPiAgICBwZXIgW1JGQzUyODBdIGFuZCB0aGUgRE9UUyBjbGllbnQgY2VydGlmaWNh dGUgTVVTVCBjb25mb3JtIHRvIHRoZQ0KPiA+ID4gICAgW1JGQzUyODBdIGNlcnRpZmljYXRlIHBy b2ZpbGUuICBbLi4uXQ0KPiA+ID4NCj4gPiA+IFRoaXMgc2VlbXMgdG8gZHVwbGljYXRlIGEgcmVx dWlyZW1lbnQgYWxyZWFkeSBzdGF0ZWQgaW4gU2VjdGlvbiA3LjE7DQo+ID4gPiBpdCdzIHByb2Jh Ymx5IGJlc3QgdG8gb25seSBoYXZlIG5vcm1hdGl2ZSBsYW5ndWFnZSBpbiBvbmUgbG9jYXRpb24s DQo+ID4gPiBldmVuIGlmIHdlIG5lZWQgdG8gbWVudGlvbiB0aGUgdG9waWMgaW4gbXVsdGlwbGUg bG9jYXRpb25zLg0KPiA+ID4gU2ltaWxhcmx5IGZvciB0aGUgbXV0dWFsIGF1dGhlbnRpY2F0aW9u IHJlcXVpcmVtZW50LCB3aGljaCB3ZQ0KPiA+ID4gZHVwbGljYXRlIGluIHRoZSBzZWNvbmQgYW5k IGZvdXJ0aCBwYXJhZ3JhcGhzIG9mIHRoaXMgc2VjdGlvbi4NCj4gPg0KPiA+IFtNZWRdIEdvb2Qg cG9pbnQuIEZpeGVkLg0KPiA+DQo+ID4gPg0KPiA+ID4gSWYgd2UgZG9uJ3Qgd2FudCB0byB1c2Ug ZXhhbXBsZS5jb20gdnMuIGV4YW1wbGUubmV0IGFzIHNhbXBsZSBkb21haW5zLA0KPiA+ID4gd2Ug Y2FuIGFsc28gdXNlIHdoYXRldmVyd2V3YW50LmV4YW1wbGUsIHBlciBSRkMgNjc2MS4NCj4gPg0K PiA+IFtNZWRdIFdpbGwgbWFpbnRhaW4gdGhlIG9uZXMgYWxyZWFkeSBpbiB0aGUgZHJhZnQuIFRo YW5rcy4NCj4gPg0KPiA+ID4NCj4gPiA+IFNlY3Rpb24gOQ0KPiA+ID4NCj4gPiA+IFdlIHNob3Vs ZCBtZW50aW9uIHRoZSBtZWRpYS10eXBlIGFsbG9jYXRpb24gaW4gdGhlIHRvcC1sZXZlbCBzZWN0 aW9uLg0KPiA+DQo+ID4gW01lZF0gV2lsbCBmaXggdGhhdC4NCj4gPg0KPiA+ID4NCj4gPiA+ICJt YXBwaW5ncyB0byBDQk9SIiBmZWVscyBjb25mdXNpbmcgdG8gbWUsIHNpbmNlIGl0IGxlYXZlcyBl bXB0eSB3aGF0DQo+ID4gPiB3ZSBhcmUgbWFwcGluZyBmcm9tLiAgUGVyaGFwcyBqdXN0IHRhbGtp bmcgYWJvdXQgYSByZWdpc3RyeSBvZiAiQ0JPUg0KPiA+ID4gbWFwIGtleXMiIHdvdWxkIGJlIGJl dHRlciwgYm90aCBoZXJlIGFuZCBpbiB0aGUgU2VjdGlvbiA5LjMgaW50cm8uDQo+ID4gPg0KPiA+ DQo+ID4gW01lZF0gVW5sZXNzIHRoZXJlIGlzIGFuIG9iamVjdGlvbiwgSSBjYW4gdXNlICJDQk9S IE1hcCBLZXlzIi4NCj4gDQo+IEkgZG9uJ3Qgc2VlICJDQk9SIE1hcCBLZXlzIiBkZWZpbmVkIG9y IHVzZWQgYW55d2hlcmUgaW4gdGhlIGRyYWZ0Lg0KPiANCg0KW01lZF0gVGhlIHByb3Bvc2FsIHdh cyB0byBhZGQgaXQgaW4gLTE3LiBJbiBteSBsb2NhbCBjb3B5IEkgaGF2ZSBpbXBsZW1lbnRlZCAi Q0JPUiBLZXkgVmFsdWVzIi4gQmV0dGVyPyANCg0KPiA+DQo+ID4gPiBTZWN0aW9uIDkuMw0KPiA+ ID4NCj4gPiA+IEkgc3VnZ2VzdCBiZWluZyB2ZXJ5IGV4cGxpY2l0IGFib3V0IHdoZXRoZXIgbmV3 IHJlcXVlc3RzIGZvcg0KPiA+ID4gcmVnaXN0cmF0aW9uIHNob3VsZCBiZSBkaXJlY3RlZCB0byB0 aGUgbWFpbGluZyBsaXN0IG9yIHRvIElBTkEsIGFzDQo+ID4gPiB3ZSd2ZSBoYWQgc29tZSBjb25m dXNpb24gYWJvdXQgdGhpcyBlbHNld2hlcmUuDQo+ID4gPg0KPiA+ID4gVGhlIGNyaXRlcmlhIHVz ZWQgYnkgdGhlIGV4cGVydHMgYWxzbyBqdXN0IGxpc3RzIHRoaW5ncyB0aGV5IHNob3VsZA0KPiA+ ID4gY29uc2lkZXIsIGJ1dCBkb2VzIG5vdCBwcm92aWRlIGZ1bGwgY2xhcml0eSBvbiB3aGljaCBh bnN3ZXIgdG8gdGhlDQo+ID4gPiBxdWVzdGlvbiBpcyBtb3JlIGxpa2VseSB0byBiZSBhcHByb3Zl ZC4gIChBbmQgeWVzLCBJIGtub3cgdGhhdCB0aGlzDQo+ID4gPiB0ZXh0IGlzIGxhcmdlbHkgY29w aWVkIGZyb20gYWxyZWFkeSBwdWJsaXNoZWQgUkZDcywgYnV0IHdlIGNhbiBzdGlsbA0KPiA+ID4g ZG8NCj4gPiA+IGJldHRlci4pDQo+ID4NCj4gPiBbTWVkXSBXaWxsIGNoZWNrIHRoaXMuDQo+ID4N Cj4gPiA+DQo+ID4gPiBTZWN0aW9uIDkuMy4xDQo+ID4gPg0KPiA+ID4gSWYgd2Ugd2FudCB0aGUg dmFsdWUgMCB0byBiZSByZXNlcnZlZCB3ZSBuZWVkIHRvIHNheSBzby4NCj4gPg0KPiA+IFtNZWRd IDAgaXMgbm90IHBhcnQgb2YgdGhlIGFsbG9jYXRpb24gcmFuZ2UuDQo+ID4NCj4gPiA+IERvIHdl IHdhbnQgdG8gc2F5IGFueXRoaW5nIGFib3V0IHRoZSB1c2FnZSBvZiBuZWdhdGl2ZSBpbnRlZ2Vy cyBhcyBtYXANCj4gPiA+IGtleXM/DQo+ID4gPg0KPiA+ID4gSSBzdWdnZXN0IG5vdCBtZW50aW9u aW5nIHRoZSBwb3N0YWwgYWRkcmVzcywgZ2l2ZW4gdGhlIHJlY2VudCAoZS5nLikNCj4gPiA+IEdE UFIgcmVxdWlyZW1lbnRzLg0KPiA+DQo+ID4gW01lZF0gR29vZCBwb2ludC4gRG9uZS4NCj4gPg0K PiA+ID4NCj4gPiA+IFNlY3Rpb24gOS4zLjINCj4gPiA+DQo+ID4gPiBJdCBtYXkgYmUgd29ydGgg bWVudGlvbmluZyBUYWJsZSA0IGhlcmUgYXMgd2VsbC4NCj4gPg0KPiA+IFtNZWRdIE9LLg0KPiA+ DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiA5LjUuMQ0KPiA+ID4NCj4gPiA+IFdlIG5lZWQgdG8gc3Bl Y2lmeSB3aGljaCByYW5nZSBvZiB2YWx1ZXMgd2UgYXJlIGFza2luZyBmb3IgYW4NCj4gPiA+IGFs bG9jYXRpb24gZnJvbS4NCj4gPg0KPiA+IFtNZWRdIEFkZGVkIGEgbWVudGlvbiB0byAwLTI1NSBy YW5nZS4NCj4gDQo+IEFzIHBlciBodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9jYm9y LXRhZ3MvY2Jvci10YWdzLnhodG1sIHRoZSBhbGxvd2VkDQo+IHJhbmdlIGlzIDIzLTI1NS4NCg0K W01lZF0gQmVuIHdhcyByZWZlcnJpbmcgdG8gOS41LjEgd2hpY2ggaXMgbm93IDkuNC4xIGluIC0y Ni4gU28gdGhlIHJhbmdlIEkgaW5kaWNhdGVkIGlzIHRoZSBjb3JyZWN0IG9uZS4gDQoNCj4gDQo+ ID4NCj4gPiA+DQo+ID4gPiBTZWN0aW9uIDkuNi4xDQo+ID4gPg0KPiA+ID4gQXMgYWJvdmUsIHNw ZWNpZnkgd2hhdCByYW5nZSB3ZSdyZSBhc2tpbmcgYWJvdXQuDQo+ID4NCj4gPiBbTWVkXSBPSy4N Cj4gDQo+IFRoZSByYW5nZSBpcyBhbHJlYWR5IGRlZmluZWQgaW4gc2VjdGlvbiA5LjYuMS4xDQo+ IA0KDQpbTWVkXSBCZW4gd2FzIHJlZmVycmluZyB0byA5LjYuMSBvZiAtMjUsIHdoaWNoIGlzIG5v dyA5LjUuMSBpbiAtMjYuIFRoZSBjb21tZW50IGZyb20gQmVuIGlzIGEgdmFsaWQgb25lLiANCg0K PiBDaGVlcnMNCj4gLVRpcnUNCj4gDQo+ID4NCj4gPiA+DQo+ID4gPiBJIGV4cGVjdCB0aGUgY3Vy cmVudCB0ZXh0IHRvIGdldCBzb21lIElFU0cgKG9yIGRpcmVjdG9yYXRlKSBmZWVkYmFjaw0KPiA+ ID4gdGhhdCB0aGUgRGF0YSBJdGVtIGFuZCBTZW1hbnRpY3MgZGVzY3JpcHRpb25zIGFyZSByZXBl dGl0aXZlIGFuZCBiYW5hbC4NCj4gPiA+DQo+ID4gPiBTZWN0aW9uIDkuNw0KPiA+ID4NCj4gPiA+ IElJVUMsIElBTkEgaXMgZ29pbmcgdG8gYXNrIGlmIHdlIHdhbnQgdGhpcyBtb2R1bGUgdG8gYmUg Im1haW50YWluZWQgYnkNCj4gPiA+IElBTkEiLCBzbyBpdCB3b3VsZCBiZSBnb29kIHRvIGhhdmUg YW4gYW5zd2VyIHJlYWR5IGV2ZW4gaWYgd2UgZG9uJ3QNCj4gPiA+IHB1dCBpdCBpbiB0aGUgZG9j dW1lbnQgdGV4dC4NCj4gPg0KPiA+IFtNZWRdIFRoaXMgaXMgZGlzY3Vzc2VkIGluIC0yNi4NCj4g Pg0KPiA+ID4NCj4gPiA+ICAgIFJhdGUtbGltaXRpbmcgRE9UUyByZXF1ZXN0cywgaW5jbHVkaW5n IHRob3NlIHdpdGggbmV3ICdjdWlkJyB2YWx1ZXMsDQo+ID4gPiAgICBmcm9tIHRoZSBzYW1lIERP VFMgY2xpZW50IGRlZmVuZHMgYWdhaW5zdCBEb1MgYXR0YWNrcyB0aGF0IHdvdWxkDQo+ID4gPg0K PiA+ID4gV2l0aCByZXNwZWN0IHRvICJuZXciICdjdWlkJyB2YWx1ZXMsIGlzIHRoZSBzZXJ2ZXIg cmVxdWlyZWQgdG8NCj4gPiA+IHJlbWVtYmVyIHdoaWNoIG9uZXMgaXQgaGFzIHNlZW4gaW4gcGVy cGV0dWl0eSwgb3IgY2FuIGl0IHRpbWUgdGhlbSBvdXQNCj4gPiA+IGV2ZW50dWFsbHk/DQo+ID4N Cj4gPiBbTWVkXSBUaGUgYXR0YWNrIHZlY3RvciBpcyBhIERPVFMgY2xpZW50IHdoaWNoIGNoYW5n ZXMgZnJlcXVlbnRseSBpdHMgY3VpZC4NCj4gPiBUaGUgRE9UUyBzZXJ2ZXIgY2FuIHNldCBhbiBp bnRlcnZhbCBpbiB3aGljaCB0aGUgc2FtZSBjbGllbnQgY2Fubm90IHByZXNlbnQNCj4gPiBhIG5l dyBjdWlkLg0KPiA+DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiAxMA0KPiA+ID4NCj4gPiA+IFRoZSBz ZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWVtIHRvIGJlIHRha2luZyBhIG5hcnJvdyBmb2N1cyBv biB0aGUNCj4gPiA+IHJlcXVpcmVtZW50cyBmb3IgYW5kIGNvbnNlcXVlbmNlcyBvZiBzcGVjaWZp YyBiaXRzIG9uIHRoZSB3aXJlIGluIHRoZQ0KPiA+ID4gc2lnbmFsIGNoYW5uZWwgcHJvdG9jb2wu ICBJIHRoaW5rIGl0J3MgYXBwcm9wcmlhdGUgdG8gYWxzbyBpbmNsdWRlDQo+ID4gPiBzb21lIGhp Z2gtbGV2ZWwgdGhvdWdodHMgYWJvdXQgdGhlIGZ1bmN0aW9uYWwgYmVoYXZpb3Igb2YgdGhlDQo+ ID4gPiBwcm90b2NvbCwgYWxsb3dpbmcgdG8gc2lnbmFsIHRoYXQgYW4gYXR0YWNrIGlzIHVuZGVy d2F5IGFuZCB0cmlnZ2VyDQo+ID4gPiBtaXRpZ2F0aW9uLCBpbmNyZWFzaW5nIHRoZSBhdmFpbGFi aWxpdHkgb2Ygc2VydmljZXMsIGV0Yy4sIGFuZCB0aGUNCj4gPiA+IHJpc2tzIHRoYXQgYXJlIHBv c2VkIGJ5IHRoZSBwcm90b2NvbCBmYWlsaW5nIHRvIHdvcmsgcHJvcGVybHksIHdoZXRoZXINCj4g PiA+IHRoYXQgbWVhbnMgbGV0dGluZyBhdHRhY2sgdHJhZmZpYyB0aHJvdWdoIG9yIGltcHJvcGVy bHkgYmxvY2tpbmcNCj4gPiA+IGxlZ2l0aW1hdGUgdHJhZmZpYy4NCj4gPg0KPiA+IFtNZWRdIFdv dWxkIGEgcG9pbnRlciB0byB0aGUgYXJjaGl0ZWN0dXJlL3JlcXVpcmVtZW50cyBJLURzIGJlIHN1 ZmZpY2llbnQNCj4gdG8NCj4gPiBjb3ZlciB0byBoaWdoLWxldmVsIGFzcGVjdHM/DQo+ID4NCj4g PiA+DQo+ID4gPiBTZWN0aW9uIDEzLjENCj4gPiA+DQo+ID4gPiBJIHRoaW5rIHRoZSBJQU5BIHJl Z2lzdHJpZXMgc2hvdWxkIGJlIGxpc3RlZCBhcyBJbmZvcm1hdGlvbmFsIGFuZCBub3QNCj4gPiA+ IE5vcm1hdGl2ZSByZWZlcmVuY2VzLg0KPiA+ID4NCj4gPg0KPiA+IFtNZWRdIERvbmUuDQo+ID4N Cj4gPiA+IFNlY3Rpb24gMTMuMg0KPiA+ID4NCj4gPiA+IFBlbmRpbmcgcmVzb2x1dGlvbiBvZiB0 aGUgcXVlc3Rpb24gYWJvdXQgdXNpbmcNCj4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLWNib3Ig cnVsZXMgb3IgUkZDNzk1MStSRkM3MDQ5LCB0aGUNCj4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5n LWNib3IgcmVmZXJlbmNlIG1heSBuZWVkIHRvIGJlIE5vcm1hdGl2ZS4NCj4gPg0KPiA+IFtNZWRd IFBsZWFzZSByZWZlciB0byBteSBhbnN3ZXIgdG8gdGhhdCBxdWVzdGlvbi4gZHJhZnQtaWV0Zi1j b3JlLXlhbmctY2Jvcg0KPiBpcw0KPiA+IGluZm9ybWF0aXZlLg0KPiA+DQo+ID4gPg0KPiA+ID4g R2l2ZW4gdGhhdCAiVVJJIiBpcyBhIHdlbGwta25vd24gYWJicmV2aWF0aW9uLCB3ZSBtYXkgYmUg YWJsZSB0byBnZXQNCj4gPiA+IGF3YXkgd2l0aCBub3QgY2l0aW5nIFJGQyAzOTg2LiAgT24gdGhl IG90aGVyIGhhbmQsIGl0J3Mgbm90IGNhdXNpbmcNCj4gPiA+IGFueSBoYXJtIHRvIGxlYXZlIGl0 IGluLi4uDQo+ID4NCj4gPiBbTWVkXSBXaWxsIGxlYXZlIGl0Lg0KPiA+DQo+ID4gPg0KPiA+ID4g UkZDIDQ2MzIgbmVlZHMgdG8gYmUgTm9ybWF0aXZlLCBzaW5jZSB3ZSBuZWVkIHRvIGtub3cgQ0lE UiB0bw0KPiA+ID4gZW5jb2RlL2RlY29kZSB0YXJnZXQtcHJlZml4ZXMuDQo+ID4NCj4gPiBbTWVk XSBXb3JrcyBmb3IgbWUuDQo+ID4NCj4gPiA+DQo+ID4gPiBTaW1pbGFybHksIEkgdGhpbmsgdGhh dCBSRkNzIDYyMzQNCj4gPg0KPiA+IFtNZWRdIFRoaXMgb25lIGlzIG5vdCBsaXN0ZWQgYXMgbm9y bWF0aXZlIGJlY2F1c2Ugb3RoZXIgaGFzaCBhbGdvcyBtYXkgYmUNCj4gPiB1c2VkLg0KPiA+DQo+ ID4gLCA3NDEzDQo+ID4gW01lZF0gVGhlIHN1cHBvcnQgaWYgVEZPIGlzIG5vdCBtYW5kYXRvcnku DQo+ID4NCj4gPiAsIDc1ODkNCj4gPiBbTWVkXSBUaGlzIGlzIGEgTUFZIGluIHRoZSBzcGVjLiBJ dCBpcyBqdXN0IGZpbmUgdG8gbGVhdmUgaXQgYXMNCj4gaW5mb3JtYXRpdmUuLg0KPiA+DQo+ID4g LCA3OTE4DQo+ID4gW01lZF0gSWRlbSBhcyBURk8uDQo+ID4NCj4gPiAsIDc5MjQNCj4gPiBbTWVk XSBJZGVtIGFzIFRGTy4NCj4gPg0KPiA+ICwgYW5kIDc5NTENCj4gPiBbTWVkXSB0aGlzIG9uZSB3 YXMgbm90IGxpc3RlZCBhcyBub3JtYXRpdmUgYmVjYXVzZSB0aGUgZG9jdW1lbnQgbGlzdHMgdHdv DQo+ID4gd2F5cyB0byBkbyB0aGUgbWFwcGluZy4NCj4gPg0KPiA+ID4gc2hvdWxkIGFsc28gYmUg Tm9ybWF0aXZlLg0KPiA+ID4NCj4gPiA+DQo+ID4gPiAtQmVuDQo+ID4NCj4gPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGluZyBs aXN0DQo+ID4gRG90c0BpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZG90cw0K From nobody Thu Jan 17 05:04:54 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58A1B124D68; Thu, 17 Jan 2019 05:04:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.554 X-Spam-Level: X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VmljlK2-AQDg; Thu, 17 Jan 2019 05:04:48 -0800 (PST) Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4C62124C04; Thu, 17 Jan 2019 05:04:46 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547730213; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=d qlTNVlpikrPacgz5iC700Bea3cxA6Q4RoaJiswHty I=; b=kDzv2iJD9OzKSH2RQpDZtkEqgP6Hs5/3FtyT0pF6TaGz k5qbL60PytfJJh6DF/GVS0KLdToqrrLokB5di56uZD5tYTdFUC JVLaCzXhjhTwq0IpNxsj3GNojEZi6MgiK7leiuXvTLBGo8XoTh Fk+rAUaBuyGvNbL4fL5Cj7sFAgg= Received: from DNVEXAPP1N05.corpzone.internalzone.com (DNVEXAPP1N05.corpzone.internalzone.com [10.44.48.89]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682c_c537_319367fe_95de_43e2_b2c4_8566db1959b2; Thu, 17 Jan 2019 07:03:31 -0600 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 06:01:27 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 06:01:27 -0700 Received: from NAM03-DM3-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 06:01:26 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2774.namprd16.prod.outlook.com (20.178.233.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26; Thu, 17 Jan 2019 13:01:25 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 13:01:25 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" , "draft-ietf-dots-signal-channel@ietf.org" CC: "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuAABJymgAAnDUxAAAenHIA== Date: Thu, 17 Jan 2019 13:01:25 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA0919A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0919A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.171.119.30] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2774; 6:nmdT25K4UVS4Iutnfk5uJYi8BBopMtW4CtMKGzR7V19j9vgxzzdnqrOJAgOHHIT8pMtkL4h6RCHaNJtJdasBZAwPNReROuL94xmJ2BpgaPW8Gnures4HG1EmAgPyyPBe4/7luCc2YBDnFLJOiHEoG4NggmKKaYO+rxvQ5FqJ7D1JkIeusPVITxysQbWTJW2JwUce3Ivia+ppUzdSj9+lpDTLIXw4rmXtW5X98iqehDvHfSljEP5H7skRuqlOiT0NJ7qI2Jx5VdYLfA+9yPfdSKmD2Mzpcq278Syz8ndDAR4ApykpzZFD6lWzq/o+1Y3p+U2hW83KFRAuUjo+dziod8G651s2dUKY9s1dlTNK09T9jDt4XvFwgV6UPBHC+4uFGt4eEQfGSOF3oon6Y94gN24z3BMr6tM1p53h0t1k8ESK9SCtRg6lqmb1IIHxJ2l64tTt6ThwtUgJvRsedaE9YA==; 5:enO36dxmpTX7LJW7NMmoQj+0NYy3LhUqfeqZrZhkvc0aVl96uqQupJ11VGbP9iZM+yPjDcLDadn/hG4c+TGDi1DHcoDiFNZz+BOehuPL/7bzl//a1LPSsXL82uLvFQOf7zyk984uBpijAxYxxsypp8Ou9BSeeFOPP92CrtGwTWTymWeeLgUzhQ286yae/u3wVjJ3ORA2qGMHJqzueYO/Ew==; 7:GvvWpJtEK5ELyWiITE5uGXfUM2kZOUqaj9IreWZud0obYcpmqt7exwDhxf6xmlhQ8W+gjHSUD4pdsfIf9h9tCsxapQIqrMOv8ma/2PA106zQDqPN9WkVeJ9OgMuWjSigQbn1qCPSmEd0iBt4S24ByA== x-ms-office365-filtering-correlation-id: 01b4e6c9-a610-409b-6deb-08d67c7be350 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2774; x-ms-traffictypediagnostic: BYAPR16MB2774: x-microsoft-antispam-prvs: x-forefront-prvs: 0920602B08 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(366004)(136003)(39860400002)(396003)(13464003)(55784004)(189003)(199004)(51444003)(32952001)(966005)(72206003)(78486014)(4326008)(74316002)(81156014)(14444005)(5024004)(14454004)(68736007)(2906002)(561944003)(8676002)(256004)(6116002)(8936002)(81166006)(486006)(76176011)(105586002)(305945005)(186003)(6506007)(2501003)(30864003)(97736004)(229853002)(7736002)(106356001)(53546011)(7696005)(55016002)(26005)(102836004)(80792005)(99286004)(3846002)(66066001)(71200400001)(25786009)(71190400001)(446003)(476003)(6246003)(5660300001)(6436002)(11346002)(4744004)(2171002)(316002)(6306002)(53936002)(9686003)(33656002)(110136005)(478600001)(86362001)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2774; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: WVmjy4MpgZQy/xfiH7fL8FDaw7HAN8wZnH7DGjwC2hbyYINaLkMF9PnGuLfpOCoCl8i/wB3hJ3wN8dUTiJg/wrWESOJHzJ0RDujsXoSJskiTsZDFd7hJcmO2yvRsf7jj7QfPvnmHQ1CR1RIj2qod2NNnjOIYAHrDTXoWJVeR7kiiZLVJJ70Xtkn2xHn/vSBRs+ZfXibG2/LsJJT8LdxNdRwAC9LOlpLx/4Rpuuctd1dVA2dbp0D/I1anWh0CQULt9NjkOE81OoM/zW8KjXWMmiwGjhh0Yg8c27yIK2TbzGfRVelggtO5iP4PlkbBgKexXz9ZtzB8kxVzXWC8AIhSnNWB0w0kthyLNliucq3UqcnbHb6ygsrzZiS+G41uT/eXw00VmYp0k0sY2XpNN1TpYJtgI1A7y/JuBfnbHhEQlds= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 01b4e6c9-a610-409b-6deb-08d67c7be350 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 13:01:25.3722 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2774 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6463> : inlines <6996> : streams <1810343> : uri <2781323> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 13:04:53 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tDQo+IDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiBTZW50OiBUaHVy c2RheSwgSmFudWFyeSAxNywgMjAxOSA1OjQ0IFBNDQo+IFRvOiBLb25kYSwgVGlydW1hbGVzd2Fy IFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tPjsNCj4gQmVuamFtaW4g S2FkdWsgPGthZHVrQG1pdC5lZHU+OyBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWxAaWV0 Zi5vcmcNCj4gQ2M6IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUkU6IEFEIHJldmlldyBvZiBk cmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDV0aCBQYXJ0KQ0KPiANCj4gDQo+IA0K PiBSZS0sDQo+IA0KPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gDQo+IENoZWVycywNCj4gTWVkDQo+ IA0KPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+IERlwqA6IEtvbmRhLCBUaXJ1 bWFsZXN3YXIgUmVkZHkNCj4gPiBbbWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZl ZS5jb21dDQo+ID4gRW52b3nDqcKgOiBqZXVkaSAxNyBqYW52aWVyIDIwMTkgMTE6MzQNCj4gPiDD gMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOyBCZW5qYW1pbiBLYWR1azsgZHJhZnQtaWV0 Zi1kb3RzLXNpZ25hbC0NCj4gPiBjaGFubmVsQGlldGYub3JnIENjwqA6IGRvdHNAaWV0Zi5vcmcg T2JqZXTCoDogUkU6IEFEIHJldmlldyBvZg0KPiA+IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hh bm5lbC0yNSAoNXRoIFBhcnQpDQo+ID4NCj4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQo+ID4gPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0K PiA+ID4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+ID4gU2VudDogVGh1cnNkYXks IEphbnVhcnkgMTcsIDIwMTkgMTI6MjEgUE0NCj4gPiA+IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2Fk dWtAbWl0LmVkdT47IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtDQo+ID4gPiBjaGFubmVsQGlldGYu b3JnDQo+ID4gPiBDYzogZG90c0BpZXRmLm9yZw0KPiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1DQo+ID4gPiAoNXRo DQo+ID4gUGFydCkNCj4gPiA+DQo+ID4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRz aWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljaw0KPiA+ID4gbGlua3MNCj4gPiBv cg0KPiA+ID4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVy IGFuZCBrbm93IHRoZQ0KPiA+ID4gY29udGVudCBpcyBzYWZlLg0KPiA+ID4NCj4gPiA+IEhpIEJl biwNCj4gPiA+DQo+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+DQo+ID4gPiBDaGVlcnMs DQo+ID4gPiBNZWQNCj4gPiA+DQo+ID4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0K PiA+ID4gPiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95 w6nCoDogbWVyY3JlZGkgMTYNCj4gPiA+ID4gamFudmllciAyMDE5IDAxOjE0IMOAwqA6IGRyYWZ0 LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZw0KPiA+ID4gPiBDY8KgOiBkb3RzQGll dGYub3JnDQo+ID4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2ln bmFsLWNoYW5uZWwtMjUNCj4gPiA+ID4NCj4gPiA+ID4gU2VjdGlvbiA3LjINCj4gPiA+ID4NCj4g PiA+ID4gVGhlIFRMUyAxLjMgaGFuZHNoYWtlIHdpdGggMC1SVFQgZGlhZ3JhbSBuZWVkcyB0byBi ZQ0KPiA+ID4gPiByZXZpc2l0ZWQvcmVmcmVzaGVkLCBhcyBSRkMgODQ0NiBkb2VzIG5vdCBsb29r IGxpa2UgdGhhdC4NCj4gPiA+ID4gQWRkaXRpb25hbGx5LCB0aGUgdXNhZ2Ugb2YgUFNLIGFzIHdl bGwgYXMgYSBjZXJ0aWZpY2F0ZSBpcyBub3QNCj4gPiA+ID4gZGVmaW5lZCB1bnRpbCBkcmFmdC1o b3VzbGV5LXRscy10bHMxMy1jZXJ0LXdpdGgtZXh0ZXJuLXBzayBpcyBwdWJsaXNoZWQuDQo+ID4g PiA+IEkgYWxzbyBub3RlIHRoYXQgaW4gdGhlIGRpYWdyYW0gYXMgcHJlc2VudGVkLCB0aGUgY2xp ZW50IGlzIG5vdA0KPiA+ID4gPiB5ZXQga25vd24gdG8gYmUgYXV0aGVudGljYXRlZCB3aGVuIHRo ZSBzZXJ2ZXIgc2VuZHMgaXRzIGluaXRpYWwNCj4gPiA+ID4gKDAuNS1SVFQpIERPVFMgc2lnbmFs IG1lc3NhZ2UuDQo+ID4gPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gTm90ZWQuIFRoYW5rcy4NCj4g Pg0KPiA+IFRoZSBET1RTIHNpZ25hbCBjaGFubmVsIGRyYWZ0IGlzIGRpc2N1c3NpbmcgUFNLIHdp dGggKEVDKURIRSBrZXkNCj4gPiBlc3RhYmxpc2htZW50IGV4cGxhaW5lZCBpbiBSRkM4NDQ2LCBh bmQgSSBkb24ndCBzZWUgdGhlIG5lZWQgdG8gcmVmZXINCj4gPiB0byBkcmFmdC1ob3VzbGV5LXRs cy10bHMxMy1jZXJ0LXdpdGgtZXh0ZXJuLXBzay0wMC4NCj4gPiBUaGUgMC1SVFQgZGlhZ3JhbSBp cyBhIHNpbXBsaWZpZWQgdmVyc2lvbiBvZiAwLVJUVCBqdXN0IGxpa2UgdGhlDQo+ID4gRmlndXJl IDEgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtcXVpYy10bHMtMTcu DQo+ID4NCj4gPiBUaGUgb25seSBjb3JyZWN0aW9uIHJlcXVpcmVkIHRvIHRoZSBkaWFncmFtIGlz IGVuZF9vZl9lYXJseV9kYXRhIG11c3QNCj4gPiBiZSBzZW50IGFsb25nIHdpdGggdGhlIGNsaWVu dCBGaW5pc2hlZCBtZXNzYWdlLg0KPiA+DQo+ID4gPg0KPiA+ID4gPiBTZWN0aW9uIDcuMw0KPiA+ ID4gPg0KPiA+ID4gPiBUaGlzIHdob2xlIHNlY3Rpb24gc2VlbXMgdG8gb25seSBiZSByZWxldmFu dCBmb3IgVURQIHVzYWdlLCBzbw0KPiA+ID4gPiBwcm9iYWJseSB0aGUgIklmIFVEUCBpcyB1c2Vk IiBjbGF1c2UgY2FuIGJlIGRyb3BwZWQgYW5kIGFuDQo+ID4gPiA+IGludHJvZHVjdG9yeSBzdGF0 ZW1lbnQgYWRkZWQgZWFybGllciBvbi4NCj4gPiA+DQo+ID4gPiBbTWVkXSBXaWxsIGNvbnNpZGVy IHRoYXQuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBQYXRoIE1UVSBNVVNUIGJlIGdyZWF0ZXIgdGhhbiBvciBlcXVhbCB0bw0KPiA+ID4gPiAg ICBbQ29BUCBtZXNzYWdlIHNpemUgKyBEVExTIG92ZXJoZWFkIG9mIDEzIG9jdGV0cyArIGF1dGhl bnRpY2F0aW9uDQo+ID4gPiA+ICAgIG92ZXJoZWFkIG9mIHRoZSBuZWdvdGlhdGVkIERUTFMgY2lw aGVyIHN1aXRlICsgYmxvY2sgcGFkZGluZ10NCj4gPiA+ID4gICAgKFNlY3Rpb24gNC4xLjEuMSBv ZiBbUkZDNjM0N10pLiAgSWYgdGhlIHJlcXVlc3Qgc2l6ZSBleGNlZWRzIHRoZSBwYXRoDQo+ID4g PiA+ICAgIE1UVSB0aGVuIHRoZSBET1RTIGNsaWVudCBNVVNUIHNwbGl0IHRoZSBET1RTIHNpZ25h bCBpbnRvIHNlcGFyYXRlDQo+ID4gPiA+ICAgIG1lc3NhZ2VzLCBmb3IgZXhhbXBsZSB0aGUgbGlz dCBvZiBhZGRyZXNzZXMgaW4gdGhlICd0YXJnZXQtcHJlZml4Jw0KPiA+ID4gPiAgICBwYXJhbWV0 ZXIgY291bGQgYmUgc3BsaXQgaW50byBtdWx0aXBsZSBsaXN0cyBhbmQgZWFjaCBsaXN0IGNvbnZl eWVkDQo+ID4gPiA+ICAgIGluIGEgbmV3IFBVVCByZXF1ZXN0Lg0KPiA+ID4gPg0KPiA+ID4gPiAo RFRMUyAxLjMgd2lsbCBoYXZlIGEgc2hvcnQgaGVhZGVyIGZvciBzb21lIHBhY2tldHMsIHRoYXQg aXMgbGVzcw0KPiA+ID4gPiB0aGFuDQo+ID4gPiA+IDEzIG9jdGV0cy4pDQo+ID4gPg0KPiA+ID4g W01lZF0gVGhlIHRleHQgaXMgbW9yZSBhYm91dCAxLjIuIFdlIGNhbiBhZGQgYSAxLjMgbm90ZSBp ZiB5b3UgdGhpbmsNCj4gPiA+IGl0IGlzIHVzZWZ1bCBmb3IgdGhlIGRpc2N1c3Npb24uDQo+ID4N Cj4gPiBXZSBzaG91bGQgc2F5ICJEVExTIDEuMiBvdmVyaGVhZCBvZiAxMyBvY3RldHMiDQo+ID4g SW4gRFRMUyAxLjMgRFRMU0NpcGhlcnRleHQgc3RydWN0dXJlIGlzIHZhcmlhYmxlIGxlbmd0aCAo ZnVsbCBoZWFkZXINCj4gPiBpcyBvZiBzaXplIDYgb2N0ZXRzKS4NCj4gPg0KPiA+ID4NCj4gPiA+ ID4NCj4gPiA+ID4gU2VjdGlvbiA4DQo+ID4gPiA+DQo+ID4gPiA+IFdlJ3ZlIGdvdCBzb21lIHJl cXVpcmVtZW50cyBpbiBoZXJlIGFib3V0IGxpbWl0aW5nIGJlaGF2aW9yIG9mDQo+ID4gPiA+IGNs aWVudHMvc2VydmVycyB3aGVuIHRhbGtpbmcgdG8gZ2F0ZXdheXM7IGlzIGtub3dpbmcgYWJvdXQg dGhlDQo+ID4gPiA+IHByZXNlbmNlIG9mIGEgZ2F0ZXdheSBzb21ldGhpbmcgdGhhdCdzIHJlcXVp cmVkIHRvIGhhcHBlbiBvdXQgb2YNCj4gPiA+ID4gYmFuZCBvciBpcyB0aGVyZSBhbiBpbi1iYW5k IHdheSB0byBpZGVudGlmeSB0aGF0IHRoZSBwZWVyIGlzIGEgZ2F0ZXdheT8NCj4gPiA+DQo+ID4g PiBbTWVkXSBBbiBhZ2VudCBkb2VzIG5vdCBuZWNlc3Nhcnkga25vdyB0aGF0IGl0IHBlZXIgaXMg Z2F0ZXdheS4gQQ0KPiA+ID4gZ2F0ZXdheSBpcyBzZWVuIGFzIGEgc2VydmVyIGZvciB0aGUgY2xp ZW50LCBhbmQgYSBjbGllbnQgZm9yIGEgc2VydmVyLg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4g ICAgbWVzc2FnZXMgZnJvbSBhbiBhdXRob3JpemVkIERPVFMgZ2F0ZXdheSwgdGhlcmVieSBjcmVh dGluZyBhIHR3by0NCj4gbGluaw0KPiA+ID4gPiAgICBjaGFpbiBvZiB0cmFuc2l0aXZlIGF1dGhl bnRpY2F0aW9uIGJldHdlZW4gdGhlIERPVFMgY2xpZW50IGFuZCB0aGUNCj4gPiA+ID4gICAgRE9U UyBzZXJ2ZXIuDQo+ID4gPiA+DQo+ID4gPiA+IFRoaXMgc2VlbXMgdG8gaWdub3JlIHRoZSBwb3Nz aWJpbGl0eSBvZiBzZXR1cHMgdGhhdCBpbmNsdWRlIGJvdGgNCj4gPiA+ID4gY2xpZW50LWRvbWFp biBhbmQgc2VydmVyLWRvbWFpbiBnYXRld2F5cy4NCj4gPiA+DQo+ID4gPiBbTWVkXSBJIHVwZGF0 ZWQgdGhlIHRleHQgdG8gbWVudGlvbiB0aGlzIGlzIG9ubHkgYW4gZXhhbXBsZS4NCj4gPiA+DQo+ ID4gPiA+DQo+ID4gPiA+ICAgICAgICAgICAgICAgICAgRE9UUyBjbGllbnQgY2VydGlmaWNhdGUg dmFsaWRhdGlvbiBNVVNUIGJlIHBlcmZvcm1lZCBhcw0KPiA+ID4gPiAgICBwZXIgW1JGQzUyODBd IGFuZCB0aGUgRE9UUyBjbGllbnQgY2VydGlmaWNhdGUgTVVTVCBjb25mb3JtIHRvIHRoZQ0KPiA+ ID4gPiAgICBbUkZDNTI4MF0gY2VydGlmaWNhdGUgcHJvZmlsZS4gIFsuLi5dDQo+ID4gPiA+DQo+ ID4gPiA+IFRoaXMgc2VlbXMgdG8gZHVwbGljYXRlIGEgcmVxdWlyZW1lbnQgYWxyZWFkeSBzdGF0 ZWQgaW4gU2VjdGlvbg0KPiA+ID4gPiA3LjE7IGl0J3MgcHJvYmFibHkgYmVzdCB0byBvbmx5IGhh dmUgbm9ybWF0aXZlIGxhbmd1YWdlIGluIG9uZQ0KPiA+ID4gPiBsb2NhdGlvbiwgZXZlbiBpZiB3 ZSBuZWVkIHRvIG1lbnRpb24gdGhlIHRvcGljIGluIG11bHRpcGxlIGxvY2F0aW9ucy4NCj4gPiA+ ID4gU2ltaWxhcmx5IGZvciB0aGUgbXV0dWFsIGF1dGhlbnRpY2F0aW9uIHJlcXVpcmVtZW50LCB3 aGljaCB3ZQ0KPiA+ID4gPiBkdXBsaWNhdGUgaW4gdGhlIHNlY29uZCBhbmQgZm91cnRoIHBhcmFn cmFwaHMgb2YgdGhpcyBzZWN0aW9uLg0KPiA+ID4NCj4gPiA+IFtNZWRdIEdvb2QgcG9pbnQuIEZp eGVkLg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gSWYgd2UgZG9uJ3Qgd2FudCB0byB1c2UgZXhh bXBsZS5jb20gdnMuIGV4YW1wbGUubmV0IGFzIHNhbXBsZQ0KPiA+ID4gPiBkb21haW5zLCB3ZSBj YW4gYWxzbyB1c2Ugd2hhdGV2ZXJ3ZXdhbnQuZXhhbXBsZSwgcGVyIFJGQyA2NzYxLg0KPiA+ID4N Cj4gPiA+IFtNZWRdIFdpbGwgbWFpbnRhaW4gdGhlIG9uZXMgYWxyZWFkeSBpbiB0aGUgZHJhZnQu IFRoYW5rcy4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gOQ0KPiA+ID4gPg0KPiA+ ID4gPiBXZSBzaG91bGQgbWVudGlvbiB0aGUgbWVkaWEtdHlwZSBhbGxvY2F0aW9uIGluIHRoZSB0 b3AtbGV2ZWwgc2VjdGlvbi4NCj4gPiA+DQo+ID4gPiBbTWVkXSBXaWxsIGZpeCB0aGF0Lg0KPiA+ ID4NCj4gPiA+ID4NCj4gPiA+ID4gIm1hcHBpbmdzIHRvIENCT1IiIGZlZWxzIGNvbmZ1c2luZyB0 byBtZSwgc2luY2UgaXQgbGVhdmVzIGVtcHR5DQo+ID4gPiA+IHdoYXQgd2UgYXJlIG1hcHBpbmcg ZnJvbS4gIFBlcmhhcHMganVzdCB0YWxraW5nIGFib3V0IGEgcmVnaXN0cnkNCj4gPiA+ID4gb2Yg IkNCT1IgbWFwIGtleXMiIHdvdWxkIGJlIGJldHRlciwgYm90aCBoZXJlIGFuZCBpbiB0aGUgU2Vj dGlvbiA5LjMNCj4gaW50cm8uDQo+ID4gPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gVW5sZXNzIHRo ZXJlIGlzIGFuIG9iamVjdGlvbiwgSSBjYW4gdXNlICJDQk9SIE1hcCBLZXlzIi4NCj4gPg0KPiA+ IEkgZG9uJ3Qgc2VlICJDQk9SIE1hcCBLZXlzIiBkZWZpbmVkIG9yIHVzZWQgYW55d2hlcmUgaW4g dGhlIGRyYWZ0Lg0KPiA+DQo+IA0KPiBbTWVkXSBUaGUgcHJvcG9zYWwgd2FzIHRvIGFkZCBpdCBp biAtMTcuIEluIG15IGxvY2FsIGNvcHkgSSBoYXZlDQo+IGltcGxlbWVudGVkICJDQk9SIEtleSBW YWx1ZXMiLiBCZXR0ZXI/DQoNClllcywgdGhhbmtzLg0KDQo+IA0KPiA+ID4NCj4gPiA+ID4gU2Vj dGlvbiA5LjMNCj4gPiA+ID4NCj4gPiA+ID4gSSBzdWdnZXN0IGJlaW5nIHZlcnkgZXhwbGljaXQg YWJvdXQgd2hldGhlciBuZXcgcmVxdWVzdHMgZm9yDQo+ID4gPiA+IHJlZ2lzdHJhdGlvbiBzaG91 bGQgYmUgZGlyZWN0ZWQgdG8gdGhlIG1haWxpbmcgbGlzdCBvciB0byBJQU5BLCBhcw0KPiA+ID4g PiB3ZSd2ZSBoYWQgc29tZSBjb25mdXNpb24gYWJvdXQgdGhpcyBlbHNld2hlcmUuDQo+ID4gPiA+ DQo+ID4gPiA+IFRoZSBjcml0ZXJpYSB1c2VkIGJ5IHRoZSBleHBlcnRzIGFsc28ganVzdCBsaXN0 cyB0aGluZ3MgdGhleQ0KPiA+ID4gPiBzaG91bGQgY29uc2lkZXIsIGJ1dCBkb2VzIG5vdCBwcm92 aWRlIGZ1bGwgY2xhcml0eSBvbiB3aGljaCBhbnN3ZXINCj4gPiA+ID4gdG8gdGhlIHF1ZXN0aW9u IGlzIG1vcmUgbGlrZWx5IHRvIGJlIGFwcHJvdmVkLiAgKEFuZCB5ZXMsIEkga25vdw0KPiA+ID4g PiB0aGF0IHRoaXMgdGV4dCBpcyBsYXJnZWx5IGNvcGllZCBmcm9tIGFscmVhZHkgcHVibGlzaGVk IFJGQ3MsIGJ1dA0KPiA+ID4gPiB3ZSBjYW4gc3RpbGwgZG8NCj4gPiA+ID4gYmV0dGVyLikNCj4g PiA+DQo+ID4gPiBbTWVkXSBXaWxsIGNoZWNrIHRoaXMuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4g PiBTZWN0aW9uIDkuMy4xDQo+ID4gPiA+DQo+ID4gPiA+IElmIHdlIHdhbnQgdGhlIHZhbHVlIDAg dG8gYmUgcmVzZXJ2ZWQgd2UgbmVlZCB0byBzYXkgc28uDQo+ID4gPg0KPiA+ID4gW01lZF0gMCBp cyBub3QgcGFydCBvZiB0aGUgYWxsb2NhdGlvbiByYW5nZS4NCj4gPiA+DQo+ID4gPiA+IERvIHdl IHdhbnQgdG8gc2F5IGFueXRoaW5nIGFib3V0IHRoZSB1c2FnZSBvZiBuZWdhdGl2ZSBpbnRlZ2Vy cyBhcw0KPiA+ID4gPiBtYXAga2V5cz8NCj4gPiA+ID4NCj4gPiA+ID4gSSBzdWdnZXN0IG5vdCBt ZW50aW9uaW5nIHRoZSBwb3N0YWwgYWRkcmVzcywgZ2l2ZW4gdGhlIHJlY2VudA0KPiA+ID4gPiAo ZS5nLikgR0RQUiByZXF1aXJlbWVudHMuDQo+ID4gPg0KPiA+ID4gW01lZF0gR29vZCBwb2ludC4g RG9uZS4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gOS4zLjINCj4gPiA+ID4NCj4g PiA+ID4gSXQgbWF5IGJlIHdvcnRoIG1lbnRpb25pbmcgVGFibGUgNCBoZXJlIGFzIHdlbGwuDQo+ ID4gPg0KPiA+ID4gW01lZF0gT0suDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiBTZWN0aW9uIDku NS4xDQo+ID4gPiA+DQo+ID4gPiA+IFdlIG5lZWQgdG8gc3BlY2lmeSB3aGljaCByYW5nZSBvZiB2 YWx1ZXMgd2UgYXJlIGFza2luZyBmb3IgYW4NCj4gPiA+ID4gYWxsb2NhdGlvbiBmcm9tLg0KPiA+ ID4NCj4gPiA+IFtNZWRdIEFkZGVkIGEgbWVudGlvbiB0byAwLTI1NSByYW5nZS4NCj4gPg0KPiA+ IEFzIHBlciBodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9jYm9yLXRhZ3MvY2Jvci10 YWdzLnhodG1sIHRoZQ0KPiA+IGFsbG93ZWQgcmFuZ2UgaXMgMjMtMjU1Lg0KPiANCj4gW01lZF0g QmVuIHdhcyByZWZlcnJpbmcgdG8gOS41LjEgd2hpY2ggaXMgbm93IDkuNC4xIGluIC0yNi4gU28g dGhlIHJhbmdlIEkNCj4gaW5kaWNhdGVkIGlzIHRoZSBjb3JyZWN0IG9uZS4NCg0KR290IGl0Lg0K DQo+IA0KPiA+DQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiBTZWN0aW9uIDkuNi4xDQo+ID4gPiA+ DQo+ID4gPiA+IEFzIGFib3ZlLCBzcGVjaWZ5IHdoYXQgcmFuZ2Ugd2UncmUgYXNraW5nIGFib3V0 Lg0KPiA+ID4NCj4gPiA+IFtNZWRdIE9LLg0KPiA+DQo+ID4gVGhlIHJhbmdlIGlzIGFscmVhZHkg ZGVmaW5lZCBpbiBzZWN0aW9uIDkuNi4xLjENCj4gPg0KPiANCj4gW01lZF0gQmVuIHdhcyByZWZl cnJpbmcgdG8gOS42LjEgb2YgLTI1LCB3aGljaCBpcyBub3cgOS41LjEgaW4gLTI2LiBUaGUNCj4g Y29tbWVudCBmcm9tIEJlbiBpcyBhIHZhbGlkIG9uZS4NCg0KT2theS4NCg0KVGhhbmtzLA0KLVRp cnUNCg0KPiANCj4gPiBDaGVlcnMNCj4gPiAtVGlydQ0KPiA+DQo+ID4gPg0KPiA+ID4gPg0KPiA+ ID4gPiBJIGV4cGVjdCB0aGUgY3VycmVudCB0ZXh0IHRvIGdldCBzb21lIElFU0cgKG9yIGRpcmVj dG9yYXRlKQ0KPiA+ID4gPiBmZWVkYmFjayB0aGF0IHRoZSBEYXRhIEl0ZW0gYW5kIFNlbWFudGlj cyBkZXNjcmlwdGlvbnMgYXJlIHJlcGV0aXRpdmUNCj4gYW5kIGJhbmFsLg0KPiA+ID4gPg0KPiA+ ID4gPiBTZWN0aW9uIDkuNw0KPiA+ID4gPg0KPiA+ID4gPiBJSVVDLCBJQU5BIGlzIGdvaW5nIHRv IGFzayBpZiB3ZSB3YW50IHRoaXMgbW9kdWxlIHRvIGJlDQo+ID4gPiA+ICJtYWludGFpbmVkIGJ5 IElBTkEiLCBzbyBpdCB3b3VsZCBiZSBnb29kIHRvIGhhdmUgYW4gYW5zd2VyIHJlYWR5DQo+ID4g PiA+IGV2ZW4gaWYgd2UgZG9uJ3QgcHV0IGl0IGluIHRoZSBkb2N1bWVudCB0ZXh0Lg0KPiA+ID4N Cj4gPiA+IFtNZWRdIFRoaXMgaXMgZGlzY3Vzc2VkIGluIC0yNi4NCj4gPiA+DQo+ID4gPiA+DQo+ ID4gPiA+ICAgIFJhdGUtbGltaXRpbmcgRE9UUyByZXF1ZXN0cywgaW5jbHVkaW5nIHRob3NlIHdp dGggbmV3ICdjdWlkJyB2YWx1ZXMsDQo+ID4gPiA+ICAgIGZyb20gdGhlIHNhbWUgRE9UUyBjbGll bnQgZGVmZW5kcyBhZ2FpbnN0IERvUyBhdHRhY2tzIHRoYXQNCj4gPiA+ID4gd291bGQNCj4gPiA+ ID4NCj4gPiA+ID4gV2l0aCByZXNwZWN0IHRvICJuZXciICdjdWlkJyB2YWx1ZXMsIGlzIHRoZSBz ZXJ2ZXIgcmVxdWlyZWQgdG8NCj4gPiA+ID4gcmVtZW1iZXIgd2hpY2ggb25lcyBpdCBoYXMgc2Vl biBpbiBwZXJwZXR1aXR5LCBvciBjYW4gaXQgdGltZSB0aGVtDQo+ID4gPiA+IG91dCBldmVudHVh bGx5Pw0KPiA+ID4NCj4gPiA+IFtNZWRdIFRoZSBhdHRhY2sgdmVjdG9yIGlzIGEgRE9UUyBjbGll bnQgd2hpY2ggY2hhbmdlcyBmcmVxdWVudGx5IGl0cyBjdWlkLg0KPiA+ID4gVGhlIERPVFMgc2Vy dmVyIGNhbiBzZXQgYW4gaW50ZXJ2YWwgaW4gd2hpY2ggdGhlIHNhbWUgY2xpZW50IGNhbm5vdA0K PiA+ID4gcHJlc2VudCBhIG5ldyBjdWlkLg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gU2VjdGlv biAxMA0KPiA+ID4gPg0KPiA+ID4gPiBUaGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VlbSB0 byBiZSB0YWtpbmcgYSBuYXJyb3cgZm9jdXMgb24NCj4gPiA+ID4gdGhlIHJlcXVpcmVtZW50cyBm b3IgYW5kIGNvbnNlcXVlbmNlcyBvZiBzcGVjaWZpYyBiaXRzIG9uIHRoZSB3aXJlDQo+ID4gPiA+ IGluIHRoZSBzaWduYWwgY2hhbm5lbCBwcm90b2NvbC4gIEkgdGhpbmsgaXQncyBhcHByb3ByaWF0 ZSB0byBhbHNvDQo+ID4gPiA+IGluY2x1ZGUgc29tZSBoaWdoLWxldmVsIHRob3VnaHRzIGFib3V0 IHRoZSBmdW5jdGlvbmFsIGJlaGF2aW9yIG9mDQo+ID4gPiA+IHRoZSBwcm90b2NvbCwgYWxsb3dp bmcgdG8gc2lnbmFsIHRoYXQgYW4gYXR0YWNrIGlzIHVuZGVyd2F5IGFuZA0KPiA+ID4gPiB0cmln Z2VyIG1pdGlnYXRpb24sIGluY3JlYXNpbmcgdGhlIGF2YWlsYWJpbGl0eSBvZiBzZXJ2aWNlcywg ZXRjLiwNCj4gPiA+ID4gYW5kIHRoZSByaXNrcyB0aGF0IGFyZSBwb3NlZCBieSB0aGUgcHJvdG9j b2wgZmFpbGluZyB0byB3b3JrDQo+ID4gPiA+IHByb3Blcmx5LCB3aGV0aGVyIHRoYXQgbWVhbnMg bGV0dGluZyBhdHRhY2sgdHJhZmZpYyB0aHJvdWdoIG9yDQo+ID4gPiA+IGltcHJvcGVybHkgYmxv Y2tpbmcgbGVnaXRpbWF0ZSB0cmFmZmljLg0KPiA+ID4NCj4gPiA+IFtNZWRdIFdvdWxkIGEgcG9p bnRlciB0byB0aGUgYXJjaGl0ZWN0dXJlL3JlcXVpcmVtZW50cyBJLURzIGJlDQo+ID4gPiBzdWZm aWNpZW50DQo+ID4gdG8NCj4gPiA+IGNvdmVyIHRvIGhpZ2gtbGV2ZWwgYXNwZWN0cz8NCj4gPiA+ DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gMTMuMQ0KPiA+ID4gPg0KPiA+ID4gPiBJIHRoaW5r IHRoZSBJQU5BIHJlZ2lzdHJpZXMgc2hvdWxkIGJlIGxpc3RlZCBhcyBJbmZvcm1hdGlvbmFsIGFu ZA0KPiA+ID4gPiBub3QgTm9ybWF0aXZlIHJlZmVyZW5jZXMuDQo+ID4gPiA+DQo+ID4gPg0KPiA+ ID4gW01lZF0gRG9uZS4NCj4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gMTMuMg0KPiA+ID4gPg0KPiA+ ID4gPiBQZW5kaW5nIHJlc29sdXRpb24gb2YgdGhlIHF1ZXN0aW9uIGFib3V0IHVzaW5nDQo+ID4g PiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLWNib3IgcnVsZXMgb3IgUkZDNzk1MStSRkM3MDQ5LCB0 aGUNCj4gPiA+ID4gZHJhZnQtaWV0Zi1jb3JlLXlhbmctY2JvciByZWZlcmVuY2UgbWF5IG5lZWQg dG8gYmUgTm9ybWF0aXZlLg0KPiA+ID4NCj4gPiA+IFtNZWRdIFBsZWFzZSByZWZlciB0byBteSBh bnN3ZXIgdG8gdGhhdCBxdWVzdGlvbi4NCj4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLWNib3IN Cj4gPiBpcw0KPiA+ID4gaW5mb3JtYXRpdmUuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiBHaXZl biB0aGF0ICJVUkkiIGlzIGEgd2VsbC1rbm93biBhYmJyZXZpYXRpb24sIHdlIG1heSBiZSBhYmxl IHRvDQo+ID4gPiA+IGdldCBhd2F5IHdpdGggbm90IGNpdGluZyBSRkMgMzk4Ni4gIE9uIHRoZSBv dGhlciBoYW5kLCBpdCdzIG5vdA0KPiA+ID4gPiBjYXVzaW5nIGFueSBoYXJtIHRvIGxlYXZlIGl0 IGluLi4uDQo+ID4gPg0KPiA+ID4gW01lZF0gV2lsbCBsZWF2ZSBpdC4NCj4gPiA+DQo+ID4gPiA+ DQo+ID4gPiA+IFJGQyA0NjMyIG5lZWRzIHRvIGJlIE5vcm1hdGl2ZSwgc2luY2Ugd2UgbmVlZCB0 byBrbm93IENJRFIgdG8NCj4gPiA+ID4gZW5jb2RlL2RlY29kZSB0YXJnZXQtcHJlZml4ZXMuDQo+ ID4gPg0KPiA+ID4gW01lZF0gV29ya3MgZm9yIG1lLg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4g U2ltaWxhcmx5LCBJIHRoaW5rIHRoYXQgUkZDcyA2MjM0DQo+ID4gPg0KPiA+ID4gW01lZF0gVGhp cyBvbmUgaXMgbm90IGxpc3RlZCBhcyBub3JtYXRpdmUgYmVjYXVzZSBvdGhlciBoYXNoIGFsZ29z DQo+ID4gPiBtYXkgYmUgdXNlZC4NCj4gPiA+DQo+ID4gPiAsIDc0MTMNCj4gPiA+IFtNZWRdIFRo ZSBzdXBwb3J0IGlmIFRGTyBpcyBub3QgbWFuZGF0b3J5Lg0KPiA+ID4NCj4gPiA+ICwgNzU4OQ0K PiA+ID4gW01lZF0gVGhpcyBpcyBhIE1BWSBpbiB0aGUgc3BlYy4gSXQgaXMganVzdCBmaW5lIHRv IGxlYXZlIGl0IGFzDQo+ID4gaW5mb3JtYXRpdmUuLg0KPiA+ID4NCj4gPiA+ICwgNzkxOA0KPiA+ ID4gW01lZF0gSWRlbSBhcyBURk8uDQo+ID4gPg0KPiA+ID4gLCA3OTI0DQo+ID4gPiBbTWVkXSBJ ZGVtIGFzIFRGTy4NCj4gPiA+DQo+ID4gPiAsIGFuZCA3OTUxDQo+ID4gPiBbTWVkXSB0aGlzIG9u ZSB3YXMgbm90IGxpc3RlZCBhcyBub3JtYXRpdmUgYmVjYXVzZSB0aGUgZG9jdW1lbnQNCj4gPiA+ IGxpc3RzIHR3byB3YXlzIHRvIGRvIHRoZSBtYXBwaW5nLg0KPiA+ID4NCj4gPiA+ID4gc2hvdWxk IGFsc28gYmUgTm9ybWF0aXZlLg0KPiA+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAtQmVuDQo+ID4g Pg0KPiA+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N Cj4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4gPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Thu Jan 17 05:10:17 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 595BB124C04; Thu, 17 Jan 2019 05:10:15 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154773061531.27340.11046185714580402360@ietfa.amsl.com> Date: Thu, 17 Jan 2019 05:10:15 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-data-channel-25.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 13:10:16 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification Authors : Mohamed Boucadair Tirumaleswar Reddy Kaname Nishizuka Liang Xia Prashanth Patil Andrew Mortensen Nik Teague Filename : draft-ietf-dots-data-channel-25.txt Pages : 69 Date : 2019-01-17 Abstract: The document specifies a Distributed Denial-of-Service Open Threat Signaling (DOTS) data channel used for bulk exchange of data that cannot easily or appropriately communicated through the DOTS signal channel under attack conditions. This is a companion document to the DOTS signal channel specification. Editorial Note (To be removed by RFC Editor) Please update these statements within the document with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification"; o reference: RFC XXXX Please update these statements with the RFC number to be assigned to the following document: o "RFC ZZZZ: Network Access Control List (ACL) YANG Data Model" (used to be [I-D.ietf-netmod-acl-model]) Please update the "revision" date of the YANG module. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-data-channel/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-data-channel-25 https://datatracker.ietf.org/doc/html/draft-ietf-dots-data-channel-25 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-data-channel-25 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Jan 17 05:13:39 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D951126C7E for ; Thu, 17 Jan 2019 05:13:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qVBlWzGb_MxF for ; Thu, 17 Jan 2019 05:13:36 -0800 (PST) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C58DB124D68 for ; Thu, 17 Jan 2019 05:13:35 -0800 (PST) Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr24.francetelecom.fr (ESMTP service) with ESMTP id 43gPf53S6Tz1yhY; Thu, 17 Jan 2019 14:13:33 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.63]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 43gPf52SrczDq7t; Thu, 17 Jan 2019 14:13:33 +0100 (CET) Received: from OPEXCAUBM7C.corporate.adroot.infra.ftgroup (10.114.13.32) by OPEXCLILM6E.corporate.adroot.infra.ftgroup (10.114.31.63) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 17 Jan 2019 14:13:33 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7C.corporate.adroot.infra.ftgroup ([fe80::2c53:f99a:e2a9:19c6%21]) with mapi id 14.03.0415.000; Thu, 17 Jan 2019 14:13:32 +0100 From: To: "dots@ietf.org" , "Benjamin Kaduk (kaduk@mit.edu)" Thread-Topic: [Dots] I-D Action: draft-ietf-dots-data-channel-25.txt Thread-Index: AQHUrmYD7r0kZfPefEWwe3FAjNrKv6Wzb2eQ Date: Thu, 17 Jan 2019 13:13:31 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA092AA@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <154773061531.27340.11046185714580402360@ietfa.amsl.com> In-Reply-To: <154773061531.27340.11046185714580402360@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] I-D Action: draft-ietf-dots-data-channel-25.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2019 13:13:38 -0000 Hi all,=20 This version fixes two issues with the YANG module (upper-port, any protoco= l). These two were reported by Ben in his AD review of the signal channel.= =20 Cheers, Med=20 > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de internet- > drafts@ietf.org > Envoy=E9=A0: jeudi 17 janvier 2019 14:10 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: [Dots] I-D Action: draft-ietf-dots-data-channel-25.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the IET= F. >=20 > Title : Distributed Denial-of-Service Open Threat Signa= ling > (DOTS) Data Channel Specification > Authors : Mohamed Boucadair > Tirumaleswar Reddy > Kaname Nishizuka > Liang Xia > Prashanth Patil > Andrew Mortensen > Nik Teague > Filename : draft-ietf-dots-data-channel-25.txt > Pages : 69 > Date : 2019-01-17 >=20 > Abstract: > The document specifies a Distributed Denial-of-Service Open Threat > Signaling (DOTS) data channel used for bulk exchange of data that > cannot easily or appropriately communicated through the DOTS signal > channel under attack conditions. >=20 > This is a companion document to the DOTS signal channel > specification. >=20 > Editorial Note (To be removed by RFC Editor) >=20 > Please update these statements within the document with the RFC > number to be assigned to this document: >=20 > o "This version of this YANG module is part of RFC XXXX;" >=20 > o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Data Channel Specification"; >=20 > o reference: RFC XXXX >=20 > Please update these statements with the RFC number to be assigned to > the following document: >=20 > o "RFC ZZZZ: Network Access Control List (ACL) YANG Data Model" > (used to be [I-D.ietf-netmod-acl-model]) > Please update the "revision" date of the YANG module. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-data-channel/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-data-channel-25 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-data-channel-25 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-data-channel-25 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jan 17 23:07:20 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80E02131136 for ; Thu, 17 Jan 2019 23:07:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TjuIcBzqJu6M for ; Thu, 17 Jan 2019 23:07:18 -0800 (PST) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1D00130D7A for ; Thu, 17 Jan 2019 23:07:17 -0800 (PST) Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr22.francetelecom.fr (ESMTP service) with ESMTP id 43gsT00fr6z10pn; Fri, 18 Jan 2019 08:07:16 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.32]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 43gsSz6tphzDq78; Fri, 18 Jan 2019 08:07:15 +0100 (CET) Received: from OPEXCAUBM7E.corporate.adroot.infra.ftgroup (10.114.13.76) by OPEXCLILM32.corporate.adroot.infra.ftgroup (10.114.31.32) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 18 Jan 2019 08:07:15 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7E.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Fri, 18 Jan 2019 08:07:15 +0100 From: To: Takahiko Nagata , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQnkWiStgbyYE2xxNF5buShSqW0llQw Date: Fri, 18 Jan 2019 07:07:14 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 07:07:19 -0000 Hi Takahiko,=20 Thank you for sharing the comments.=20 Please see inline. Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de Takahiko Nagata > Envoy=E9=A0: jeudi 17 janvier 2019 08:13 > =C0=A0: dots@ietf.org > Objet=A0: [Dots] Comments on dots-signal-control-filtering-01 >=20 > Hi Kaname, >=20 > I would like to 2 comments on dots-signal-control-filtering-01. >=20 > (Comment1) Minimal attributes for control-filtering. ("lifetime" behavior= ) > Minimal attributes of SignalChannel MitigationRequest > for control-filtering is only the followings, I think. > - acl-list(acl-name, activation-type) > - lifetime >=20 > So, We can send acl-list via SignalChannel without > other Mitigation request parameters. [Med] When the same mid is used, the request is considered as a refresh. As= such the attributes that were included in the first request must be includ= ed. =20 >=20 > In this case, we need to decide behavior of "lifetime". > I think "lifetime" is ignored in this case. [Med] No. This is a particular case of this text from the signal channel sp= ec: For a mitigation request to continue beyond the initial negotiated lifetime, the DOTS client has to refresh the current mitigation request by sending a new PUT request. This PUT request MUST use the same 'mid' value, and MUST repeat all the other parameters as sent in the original mitigation request apart from a possible change to the lifetime parameter value. > Because acl-list(acl-name, activation-type) should be > managed only DataChannel side for specification simply. >=20 >=20 > (Comment2) Should be specified behavior. > (a) Not be affected by "trigger-mitigation" > acl-list(acl-name, activation-type) is soon be applied > even if "trigger-mitigation" is false. [Med] The procedure applies independently of the value of "trigger-mitigati= on". We can say this explicitly on the draft. >=20 > (b) Do not affect to "Efficacy Update" > acl-list(acl-name, activation-type) would be ignored > at "Efficacy Update" success or reject. [Med] Agree. We are not updating that part of the signal channel spec. acl-= list clauses won't be included in the efficacy update.=20 >=20 > (c) GET response of Mitigation Request > acl-list(acl-name, activation-type) would not be included > on respose of GET Mitigation Request. [Med] Yes. Will be make this clear in the draft. >=20 > (d) In DELETE, no behavior(ex: rollback) for acl-list. [Med] Yes.=20 >=20 >=20 > Best Regards, > Takahiko Nagata >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jan 17 23:14:20 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E2BB131139 for ; Thu, 17 Jan 2019 23:14:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.853 X-Spam-Level: X-Spam-Status: No, score=-8.853 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TmmpVoYQyC34 for ; Thu, 17 Jan 2019 23:14:16 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57075130D7A for ; Thu, 17 Jan 2019 23:14:16 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547795634; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=s5rPlZl9djbUjxAaJHRGUlci9X6rCTelx+rJ8P byBaM=; b=VkNjgC4j6RZEoGa1yXDkVVjFXYp06nOTOTzmScu3 nX6LVBQcPfwNy8tBmG1vws+AUpJX/Q5vMxwdEIASE4GtsPA+RT UFYipVQ151yu2cQ0d5n7zONI0LGmGv9IYsCHrTOzKsIukW19Cq EinIAdEXt4Q7jzPLA2nnfIP4VEyj9C0= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2a18_d738_f15dc8f3_a070_4a58_afe1_8a607a1b1aab; Fri, 18 Jan 2019 01:13:54 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 00:14:00 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 Jan 2019 00:14:00 -0700 Received: from NAM05-BY2-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 00:13:59 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2775.namprd16.prod.outlook.com (20.178.233.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Fri, 18 Jan 2019 07:13:58 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Fri, 18 Jan 2019 07:13:58 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHA= Date: Fri, 18 Jan 2019 07:13:58 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2775; 6:5o7aSiNRfOHBqWGNXtNRfDVkiS17s/6+0pTS4jCXqBHa2VS+EgfRMCvP6xxNvTfQvz3L17IB6E1gf/OXoHg4NUj2pspWjFZ+2IZXlaGTgFEhrYAJuCBBGtdx2XkzQu8XKP7RM9q36DwxvoOBQUOfLNAeeLhmOH3ZRxRYVMYjjQ+wleHL/9oWeY0HdiVgVyEKpTjKQ0orA/xff4A0vFqHt3vG6ikoCxQPsBetr9Z1JiLVrYj/uJHcUHAf5jiNWkQeapfwPf2Txd4k7Ct/xxXdWBRBfChzNhHL/Z1zhdgVq+M6D+Q8FShTu7DVAlvZCHH0GcwyiG8wiArFp/8XhbTZ5HQbA22dyEPLWP0W6eJn6FVrgT/zA6VJy5tMV4QCWKdXFjxEqK6/j3Z2sV6N1VVFZgSpKR7IaPnNACGubdEiZT2lTkx4TQ1PCPeKt0a95BxPIqcYQiMlDt1wFTWaIxD9dA==; 5:c10L2DmARLqplFFvXwTIgyTlRfikyV34FDcEC0pUVvYFHnluXpUCep8enA9gBOpdexKr/cPElu53IgPUeY7ELe3tbcb7SvM02tecdBR9/Lfmfgw8Jom6TJgjZmsPaJ7vbAY5GkKOwp48KspBVWyMg+Ne97hqZH9EizGoAHc0UkiXlK06VPWTMuAPw9jdyr7UgzG1IR72Bk2CWrFL2cSXlA==; 7:2xqm/wjNKP7gqx+vbUpmaCp+OZb6SObMILql6GhkV+ceKbJBsOtb3hd64UPEnBPy3cBGQ/MR+ITkZhsAJIDwC8E++BvisoK5dphYtZYXi4s/AoI0hhcVS10W8TXbDOQMN5N/i0MsPfww5todgGoFcQ== x-ms-office365-filtering-correlation-id: aef6a390-c5c0-491a-e2c4-08d67d1483f7 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2775; x-ms-traffictypediagnostic: BYAPR16MB2775: x-microsoft-antispam-prvs: x-forefront-prvs: 0921D55E4F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(346002)(376002)(136003)(396003)(32952001)(55784004)(13464003)(189003)(199004)(33656002)(3846002)(5660300001)(6116002)(105586002)(229853002)(186003)(14454004)(80792005)(486006)(305945005)(68736007)(106356001)(7736002)(26005)(478600001)(99286004)(97736004)(102836004)(72206003)(55016002)(6246003)(74316002)(2501003)(6436002)(966005)(25786009)(7696005)(76176011)(6306002)(9686003)(71190400001)(71200400001)(81166006)(53546011)(8676002)(316002)(81156014)(53936002)(345774005)(6506007)(8936002)(11346002)(2906002)(256004)(5024004)(476003)(14444005)(446003)(66066001)(86362001)(110136005)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2775; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: Kzh35p7Dd5qAOjmEjuqueCqCc729Ipi4P0A2HX9oBWrrvsr37bYdsBJ4F8R1C09J4m+Qhm6jUAS0HWRa99kMZ24HX8Bh7ikt1y+zODYgf0jN0k7PlpP7h9r+MkPuQBfYhDmFdrbuKSMB2zQqyJbvbcXYkCDF4LPXRfs0cfvdkyOeiOOiGUbsmux1jO0LCk0+xdGxe4fVG5A72yGy9+2iYMBwGOHL7jojspksWcOYgx52GOdEb32KquSGKrVp+yKlxOiVVY41nXVGr2vHbR7rZ9Cs6/WbFZ5xcelYgtYxs9H1yTXtSfuLMxt5RTf0TiZcoRxcXhnakfn5faZa9c1M3NiwQr/MBRoqmwFWngpDGoPnHQO2+DpsZ/eqUEwc+ZmU3RavtcP7CDWs+1UWdhK/cQHZBTeQZ8/bO64Qb+8rZJk= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: aef6a390-c5c0-491a-e2c4-08d67d1483f7 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jan 2019 07:13:58.5161 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2775 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6463> : inlines <6997> : streams <1810416> : uri <2781704> Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 07:14:19 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNA aWV0Zi5vcmc+IE9uIEJlaGFsZiBPZg0KPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ IFNlbnQ6IEZyaWRheSwgSmFudWFyeSAxOCwgMjAxOSAxMjozNyBQTQ0KPiBUbzogVGFrYWhpa28g TmFnYXRhIDxuYWdhdGFAbGVwaWR1bS5jby5qcD47IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDog UmU6IFtEb3RzXSBDb21tZW50cyBvbiBkb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMQ0K PiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0 aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91 IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuDQo+IA0K PiBIaSBUYWthaGlrbywNCj4gDQo+IFRoYW5rIHlvdSBmb3Igc2hhcmluZyB0aGUgY29tbWVudHMu DQo+IA0KPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gDQo+IENoZWVycywNCj4gTWVkDQo+IA0KPiA+ IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+IERlwqA6IERvdHMgW21haWx0bzpkb3Rz LWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUgVGFrYWhpa28gTmFnYXRhDQo+ID4gRW52 b3nDqcKgOiBqZXVkaSAxNyBqYW52aWVyIDIwMTkgMDg6MTMgw4DCoDogZG90c0BpZXRmLm9yZyBP YmpldMKgOiBbRG90c10NCj4gPiBDb21tZW50cyBvbiBkb3RzLXNpZ25hbC1jb250cm9sLWZpbHRl cmluZy0wMQ0KPiA+DQo+ID4gSGkgS2FuYW1lLA0KPiA+DQo+ID4gSSB3b3VsZCBsaWtlIHRvIDIg Y29tbWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDEuDQo+ID4NCj4gPiAo Q29tbWVudDEpIE1pbmltYWwgYXR0cmlidXRlcyBmb3IgY29udHJvbC1maWx0ZXJpbmcuICgibGlm ZXRpbWUiIGJlaGF2aW9yKQ0KPiA+ICAgTWluaW1hbCBhdHRyaWJ1dGVzIG9mIFNpZ25hbENoYW5u ZWwgTWl0aWdhdGlvblJlcXVlc3QNCj4gPiAgIGZvciBjb250cm9sLWZpbHRlcmluZyBpcyBvbmx5 IHRoZSBmb2xsb3dpbmdzLCBJIHRoaW5rLg0KPiA+ICAgLSBhY2wtbGlzdChhY2wtbmFtZSwgYWN0 aXZhdGlvbi10eXBlKQ0KPiA+ICAgLSBsaWZldGltZQ0KPiA+DQo+ID4gICBTbywgV2UgY2FuIHNl bmQgYWNsLWxpc3QgdmlhIFNpZ25hbENoYW5uZWwgd2l0aG91dA0KPiA+ICAgb3RoZXIgTWl0aWdh dGlvbiByZXF1ZXN0IHBhcmFtZXRlcnMuDQo+IA0KPiBbTWVkXSBXaGVuIHRoZSBzYW1lIG1pZCBp cyB1c2VkLCB0aGUgcmVxdWVzdCBpcyBjb25zaWRlcmVkIGFzIGEgcmVmcmVzaC4gQXMNCj4gc3Vj aCB0aGUgYXR0cmlidXRlcyB0aGF0IHdlcmUgaW5jbHVkZWQgaW4gdGhlIGZpcnN0IHJlcXVlc3Qg bXVzdCBiZSBpbmNsdWRlZC4NCj4gDQo+ID4NCj4gPiAgIEluIHRoaXMgY2FzZSwgd2UgbmVlZCB0 byBkZWNpZGUgYmVoYXZpb3Igb2YgImxpZmV0aW1lIi4NCj4gPiAgIEkgdGhpbmsgImxpZmV0aW1l IiBpcyBpZ25vcmVkIGluIHRoaXMgY2FzZS4NCj4gDQo+IFtNZWRdIE5vLiBUaGlzIGlzIGEgcGFy dGljdWxhciBjYXNlIG9mIHRoaXMgdGV4dCBmcm9tIHRoZSBzaWduYWwgY2hhbm5lbCBzcGVjOg0K PiANCj4gICAgRm9yIGEgbWl0aWdhdGlvbiByZXF1ZXN0IHRvIGNvbnRpbnVlIGJleW9uZCB0aGUg aW5pdGlhbCBuZWdvdGlhdGVkDQo+ICAgIGxpZmV0aW1lLCB0aGUgRE9UUyBjbGllbnQgaGFzIHRv IHJlZnJlc2ggdGhlIGN1cnJlbnQgbWl0aWdhdGlvbg0KPiAgICByZXF1ZXN0IGJ5IHNlbmRpbmcg YSBuZXcgUFVUIHJlcXVlc3QuICBUaGlzIFBVVCByZXF1ZXN0IE1VU1QgdXNlIHRoZQ0KPiAgICBz YW1lICdtaWQnIHZhbHVlLCBhbmQgTVVTVCByZXBlYXQgYWxsIHRoZSBvdGhlciBwYXJhbWV0ZXJz IGFzIHNlbnQgaW4NCj4gICAgdGhlIG9yaWdpbmFsIG1pdGlnYXRpb24gcmVxdWVzdCBhcGFydCBm cm9tIGEgcG9zc2libGUgY2hhbmdlIHRvIHRoZQ0KPiAgICBsaWZldGltZSBwYXJhbWV0ZXIgdmFs dWUuDQo+IA0KPiA+ICAgQmVjYXVzZSBhY2wtbGlzdChhY2wtbmFtZSwgYWN0aXZhdGlvbi10eXBl KSBzaG91bGQgYmUNCj4gPiAgIG1hbmFnZWQgb25seSBEYXRhQ2hhbm5lbCBzaWRlIGZvciBzcGVj aWZpY2F0aW9uIHNpbXBseS4NCj4gPg0KPiA+DQo+ID4gKENvbW1lbnQyKSBTaG91bGQgYmUgc3Bl Y2lmaWVkIGJlaGF2aW9yLg0KPiA+IChhKSBOb3QgYmUgYWZmZWN0ZWQgYnkgInRyaWdnZXItbWl0 aWdhdGlvbiINCj4gPiAgIGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpIGlzIHNv b24gYmUgYXBwbGllZA0KPiA+ICAgZXZlbiBpZiAidHJpZ2dlci1taXRpZ2F0aW9uIiBpcyBmYWxz ZS4NCj4gDQo+IFtNZWRdIFRoZSBwcm9jZWR1cmUgYXBwbGllcyBpbmRlcGVuZGVudGx5IG9mIHRo ZSB2YWx1ZSBvZiAidHJpZ2dlci1taXRpZ2F0aW9uIi4NCj4gV2UgY2FuIHNheSB0aGlzIGV4cGxp Y2l0bHkgb24gdGhlIGRyYWZ0Lg0KDQpBIE1pdGlnYXRpb24gcmVxdWVzdCB3aXRoICJ0cmlnZ2Vy LW1pdGlnYXRpb24iIHNldCB0byBmYWxzZSBtdXN0IG9ubHkgYmUgc2VudCBpbiB0aGUgcGVhY2Ug dGltZSBhbmQgbm90IGR1cmluZyB0aGUgYXR0YWNrIHRpbWUuIER1cmluZyB0aGUgcGVhY2UgdGlt ZSwgSSBkb24ndCBzZWUgdGhlIG5lZWQgdG8gYWN0aXZhdGUvZGUtYWN0aXZhdGUgDQpBQ0xzIHVz aW5nIERPVFMgc2lnbmFsIGNoYW5uZWwgcHJvdG9jb2wuDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4g DQo+ID4NCj4gPiAoYikgRG8gbm90IGFmZmVjdCB0byAiRWZmaWNhY3kgVXBkYXRlIg0KPiA+ICAg YWNsLWxpc3QoYWNsLW5hbWUsIGFjdGl2YXRpb24tdHlwZSkgd291bGQgYmUgaWdub3JlZA0KPiA+ ICAgYXQgIkVmZmljYWN5IFVwZGF0ZSIgc3VjY2VzcyBvciByZWplY3QuDQo+IA0KPiBbTWVkXSBB Z3JlZS4gV2UgYXJlIG5vdCB1cGRhdGluZyB0aGF0IHBhcnQgb2YgdGhlIHNpZ25hbCBjaGFubmVs IHNwZWMuIGFjbC1saXN0DQo+IGNsYXVzZXMgd29uJ3QgYmUgaW5jbHVkZWQgaW4gdGhlIGVmZmlj YWN5IHVwZGF0ZS4NCj4gDQo+ID4NCj4gPiAoYykgR0VUIHJlc3BvbnNlIG9mIE1pdGlnYXRpb24g UmVxdWVzdA0KPiA+ICAgYWNsLWxpc3QoYWNsLW5hbWUsIGFjdGl2YXRpb24tdHlwZSkgd291bGQg bm90IGJlIGluY2x1ZGVkDQo+ID4gICBvbiByZXNwb3NlIG9mIEdFVCBNaXRpZ2F0aW9uIFJlcXVl c3QuDQo+IA0KPiBbTWVkXSBZZXMuIFdpbGwgYmUgbWFrZSB0aGlzIGNsZWFyIGluIHRoZSBkcmFm dC4NCj4gDQo+ID4NCj4gPiAoZCkgSW4gREVMRVRFLCBubyBiZWhhdmlvcihleDogcm9sbGJhY2sp IGZvciBhY2wtbGlzdC4NCj4gDQo+IFtNZWRdIFllcy4NCj4gDQo+ID4NCj4gPg0KPiA+IEJlc3Qg UmVnYXJkcywNCj4gPiBUYWthaGlrbyBOYWdhdGENCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4g PiBEb3RzQGlldGYub3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9kb3RzDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KPiBEb3RzIG1haWxpbmcgbGlzdA0KPiBEb3RzQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0K From nobody Thu Jan 17 23:31:29 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A240131148 for ; Thu, 17 Jan 2019 23:31:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lOWYH636G5uH for ; Thu, 17 Jan 2019 23:31:26 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35695130F93 for ; Thu, 17 Jan 2019 23:31:26 -0800 (PST) Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id 43gt0r282Kz7v9W; Fri, 18 Jan 2019 08:31:24 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.3]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 43gt0r15tHzCqkY; Fri, 18 Jan 2019 08:31:24 +0100 (CET) Received: from OPEXCAUBM6E.corporate.adroot.infra.ftgroup (10.114.13.79) by OPEXCLILM5D.corporate.adroot.infra.ftgroup (10.114.31.3) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 18 Jan 2019 08:31:23 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6E.corporate.adroot.infra.ftgroup ([fe80::d89a:9017:59c2:9724%21]) with mapi id 14.03.0415.000; Fri, 18 Jan 2019 08:31:23 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHCAAAQ70A== Date: Fri, 18 Jan 2019 07:31:23 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 07:31:28 -0000 VGlydSwgDQoNClBsZWFzZSBzZWUgaW5saW5lLg0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1l c3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeSBb bWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+IEVudm95w6nCoDog dmVuZHJlZGkgMTggamFudmllciAyMDE5IDA4OjE0DQo+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVk IFRHSS9PTE47IFRha2FoaWtvIE5hZ2F0YTsgZG90c0BpZXRmLm9yZw0KPiBPYmpldMKgOiBSRTog W0RvdHNdIENvbW1lbnRzIG9uIGRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAxDQo+IA0K PiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gRnJvbTogRG90cyA8ZG90cy1ib3Vu Y2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YNCj4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tDQo+ID4gU2VudDogRnJpZGF5LCBKYW51YXJ5IDE4LCAyMDE5IDEyOjM3IFBNDQo+ID4gVG86 IFRha2FoaWtvIE5hZ2F0YSA8bmFnYXRhQGxlcGlkdW0uY28uanA+OyBkb3RzQGlldGYub3JnDQo+ ID4gU3ViamVjdDogUmU6IFtEb3RzXSBDb21tZW50cyBvbiBkb3RzLXNpZ25hbC1jb250cm9sLWZp bHRlcmluZy0wMQ0KPiA+DQo+ID4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBv ZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3MNCj4gb3INCj4gPiBvcGVuIGF0 dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlIGNv bnRlbnQgaXMNCj4gc2FmZS4NCj4gPg0KPiA+IEhpIFRha2FoaWtvLA0KPiA+DQo+ID4gVGhhbmsg eW91IGZvciBzaGFyaW5nIHRoZSBjb21tZW50cy4NCj4gPg0KPiA+IFBsZWFzZSBzZWUgaW5saW5l Lg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+DQo+ID4gPiAtLS0tLU1lc3NhZ2UgZCdv cmlnaW5lLS0tLS0NCj4gPiA+IERlwqA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5v cmddIERlIGxhIHBhcnQgZGUgVGFrYWhpa28gTmFnYXRhDQo+ID4gPiBFbnZvecOpwqA6IGpldWRp IDE3IGphbnZpZXIgMjAxOSAwODoxMyDDgMKgOiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFtEb3Rz XQ0KPiA+ID4gQ29tbWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDENCj4g PiA+DQo+ID4gPiBIaSBLYW5hbWUsDQo+ID4gPg0KPiA+ID4gSSB3b3VsZCBsaWtlIHRvIDIgY29t bWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDEuDQo+ID4gPg0KPiA+ID4g KENvbW1lbnQxKSBNaW5pbWFsIGF0dHJpYnV0ZXMgZm9yIGNvbnRyb2wtZmlsdGVyaW5nLiAoImxp ZmV0aW1lIg0KPiBiZWhhdmlvcikNCj4gPiA+ICAgTWluaW1hbCBhdHRyaWJ1dGVzIG9mIFNpZ25h bENoYW5uZWwgTWl0aWdhdGlvblJlcXVlc3QNCj4gPiA+ICAgZm9yIGNvbnRyb2wtZmlsdGVyaW5n IGlzIG9ubHkgdGhlIGZvbGxvd2luZ3MsIEkgdGhpbmsuDQo+ID4gPiAgIC0gYWNsLWxpc3QoYWNs LW5hbWUsIGFjdGl2YXRpb24tdHlwZSkNCj4gPiA+ICAgLSBsaWZldGltZQ0KPiA+ID4NCj4gPiA+ ICAgU28sIFdlIGNhbiBzZW5kIGFjbC1saXN0IHZpYSBTaWduYWxDaGFubmVsIHdpdGhvdXQNCj4g PiA+ICAgb3RoZXIgTWl0aWdhdGlvbiByZXF1ZXN0IHBhcmFtZXRlcnMuDQo+ID4NCj4gPiBbTWVk XSBXaGVuIHRoZSBzYW1lIG1pZCBpcyB1c2VkLCB0aGUgcmVxdWVzdCBpcyBjb25zaWRlcmVkIGFz IGEgcmVmcmVzaC4gQXMNCj4gPiBzdWNoIHRoZSBhdHRyaWJ1dGVzIHRoYXQgd2VyZSBpbmNsdWRl ZCBpbiB0aGUgZmlyc3QgcmVxdWVzdCBtdXN0IGJlDQo+IGluY2x1ZGVkLg0KPiA+DQo+ID4gPg0K PiA+ID4gICBJbiB0aGlzIGNhc2UsIHdlIG5lZWQgdG8gZGVjaWRlIGJlaGF2aW9yIG9mICJsaWZl dGltZSIuDQo+ID4gPiAgIEkgdGhpbmsgImxpZmV0aW1lIiBpcyBpZ25vcmVkIGluIHRoaXMgY2Fz ZS4NCj4gPg0KPiA+IFtNZWRdIE5vLiBUaGlzIGlzIGEgcGFydGljdWxhciBjYXNlIG9mIHRoaXMg dGV4dCBmcm9tIHRoZSBzaWduYWwgY2hhbm5lbA0KPiBzcGVjOg0KPiA+DQo+ID4gICAgRm9yIGEg bWl0aWdhdGlvbiByZXF1ZXN0IHRvIGNvbnRpbnVlIGJleW9uZCB0aGUgaW5pdGlhbCBuZWdvdGlh dGVkDQo+ID4gICAgbGlmZXRpbWUsIHRoZSBET1RTIGNsaWVudCBoYXMgdG8gcmVmcmVzaCB0aGUg Y3VycmVudCBtaXRpZ2F0aW9uDQo+ID4gICAgcmVxdWVzdCBieSBzZW5kaW5nIGEgbmV3IFBVVCBy ZXF1ZXN0LiAgVGhpcyBQVVQgcmVxdWVzdCBNVVNUIHVzZSB0aGUNCj4gPiAgICBzYW1lICdtaWQn IHZhbHVlLCBhbmQgTVVTVCByZXBlYXQgYWxsIHRoZSBvdGhlciBwYXJhbWV0ZXJzIGFzIHNlbnQg aW4NCj4gPiAgICB0aGUgb3JpZ2luYWwgbWl0aWdhdGlvbiByZXF1ZXN0IGFwYXJ0IGZyb20gYSBw b3NzaWJsZSBjaGFuZ2UgdG8gdGhlDQo+ID4gICAgbGlmZXRpbWUgcGFyYW1ldGVyIHZhbHVlLg0K PiA+DQo+ID4gPiAgIEJlY2F1c2UgYWNsLWxpc3QoYWNsLW5hbWUsIGFjdGl2YXRpb24tdHlwZSkg c2hvdWxkIGJlDQo+ID4gPiAgIG1hbmFnZWQgb25seSBEYXRhQ2hhbm5lbCBzaWRlIGZvciBzcGVj aWZpY2F0aW9uIHNpbXBseS4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gKENvbW1lbnQyKSBTaG91bGQg YmUgc3BlY2lmaWVkIGJlaGF2aW9yLg0KPiA+ID4gKGEpIE5vdCBiZSBhZmZlY3RlZCBieSAidHJp Z2dlci1taXRpZ2F0aW9uIg0KPiA+ID4gICBhY2wtbGlzdChhY2wtbmFtZSwgYWN0aXZhdGlvbi10 eXBlKSBpcyBzb29uIGJlIGFwcGxpZWQNCj4gPiA+ICAgZXZlbiBpZiAidHJpZ2dlci1taXRpZ2F0 aW9uIiBpcyBmYWxzZS4NCj4gPg0KPiA+IFtNZWRdIFRoZSBwcm9jZWR1cmUgYXBwbGllcyBpbmRl cGVuZGVudGx5IG9mIHRoZSB2YWx1ZSBvZiAidHJpZ2dlci0NCj4gbWl0aWdhdGlvbiIuDQo+ID4g V2UgY2FuIHNheSB0aGlzIGV4cGxpY2l0bHkgb24gdGhlIGRyYWZ0Lg0KPiANCj4gQSBNaXRpZ2F0 aW9uIHJlcXVlc3Qgd2l0aCAidHJpZ2dlci1taXRpZ2F0aW9uIiBzZXQgdG8gZmFsc2UgbXVzdCBv bmx5IGJlIHNlbnQNCj4gaW4gdGhlIHBlYWNlIHRpbWUgYW5kIG5vdCBkdXJpbmcgdGhlIGF0dGFj ayB0aW1lLiBEdXJpbmcgdGhlIHBlYWNlIHRpbWUsIEkNCj4gZG9uJ3Qgc2VlIHRoZSBuZWVkIHRv IGFjdGl2YXRlL2RlLWFjdGl2YXRlDQo+IEFDTHMgdXNpbmcgRE9UUyBzaWduYWwgY2hhbm5lbCBw cm90b2NvbC4NCg0KW01lZF0gVGhlIHBvaW50IGlzIHRoYXQgdGhlIGNvbnRyb2wgZnVuY3Rpb25h bGl0eSB3aWxsIGJlIHRoZXJlLiBJdCBpcyB1cCB0byB0aGUgY2xpZW50IHRvIGRlY2lkZSB0byB1 c2U6DQoNCiogaXRzIGRhdGEgY2hhbm5lbCB0byBhbHRlciB0aGUgYWNsIGFuZCB0aGVuIHdhaXQg Zm9yIGEgc2lnbmFsIGNoYW5uZWwgbm90aWZpY2F0aW9uLiBUaGVzZSBub3RpZmljYXRpb25zIG1h eSBub3QgYmUgc2V0IGJ5IHRoZSBjbGllbnQuDQoqIGl0cyBzaWduYWwgY2hhbm5lbCB0byBhbHRl ciB0aGUgYWNsLiAgIA0KDQpXaXRoIHRoYXQgYXBwcm9hY2ggd2UgZG9uJ3Qgb3ZlcmxvYWQgdGhl IHNlcnZlciB3aXRoIGV4dHJhIHZhbGlkYXRpb24gb24gdHJpZ2dlci1taXRpZ2F0aW9uIHRvIGRl Y2lkZSBhYm91dCB0aGUgYmVoYXZpb3IgdG8gZm9sbG93LiANCg0KPiANCj4gQ2hlZXJzLA0KPiAt VGlydQ0KPiANCj4gPg0KPiA+ID4NCj4gPiA+IChiKSBEbyBub3QgYWZmZWN0IHRvICJFZmZpY2Fj eSBVcGRhdGUiDQo+ID4gPiAgIGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpIHdv dWxkIGJlIGlnbm9yZWQNCj4gPiA+ICAgYXQgIkVmZmljYWN5IFVwZGF0ZSIgc3VjY2VzcyBvciBy ZWplY3QuDQo+ID4NCj4gPiBbTWVkXSBBZ3JlZS4gV2UgYXJlIG5vdCB1cGRhdGluZyB0aGF0IHBh cnQgb2YgdGhlIHNpZ25hbCBjaGFubmVsIHNwZWMuIGFjbC0NCj4gbGlzdA0KPiA+IGNsYXVzZXMg d29uJ3QgYmUgaW5jbHVkZWQgaW4gdGhlIGVmZmljYWN5IHVwZGF0ZS4NCj4gPg0KPiA+ID4NCj4g PiA+IChjKSBHRVQgcmVzcG9uc2Ugb2YgTWl0aWdhdGlvbiBSZXF1ZXN0DQo+ID4gPiAgIGFjbC1s aXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpIHdvdWxkIG5vdCBiZSBpbmNsdWRlZA0KPiA+ ID4gICBvbiByZXNwb3NlIG9mIEdFVCBNaXRpZ2F0aW9uIFJlcXVlc3QuDQo+ID4NCj4gPiBbTWVk XSBZZXMuIFdpbGwgYmUgbWFrZSB0aGlzIGNsZWFyIGluIHRoZSBkcmFmdC4NCj4gPg0KPiA+ID4N Cj4gPiA+IChkKSBJbiBERUxFVEUsIG5vIGJlaGF2aW9yKGV4OiByb2xsYmFjaykgZm9yIGFjbC1s aXN0Lg0KPiA+DQo+ID4gW01lZF0gWWVzLg0KPiA+DQo+ID4gPg0KPiA+ID4NCj4gPiA+IEJlc3Qg UmVnYXJkcywNCj4gPiA+IFRha2FoaWtvIE5hZ2F0YQ0KPiA+ID4NCj4gPiA+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiBEb3RzIG1haWxpbmcg bGlzdA0KPiA+ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9kb3RzDQo+ID4NCj4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gRG90c0BpZXRm Lm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0K From nobody Thu Jan 17 23:48:37 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C936D131151 for ; Thu, 17 Jan 2019 23:48:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.853 X-Spam-Level: X-Spam-Status: No, score=-8.853 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 490vpCFZmZTA for ; Thu, 17 Jan 2019 23:48:32 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7B02131150 for ; Thu, 17 Jan 2019 23:48:31 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547797700; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=ua0w9pVzFpwI/V48PZVV81zqgCiVIDfTdjFahx +wSaw=; b=iugR5SlDYXygtoZGN7Vi9UHeGLcUnWKhwsWMxbaM L0VJRwV8Vhn8ocsFCAQ/8a7gcCxkdGWqa8XN3YsmoiNi7UGwi9 Jdf2Bm3H6YyJcReKv+XOXVKv6E0jnzQ58KqLHLeaKknKrc7TYy DvGySNDHe9SKKgIuEyOPn5nclYyVHmQ= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2a18_083d_91166d2b_ab44_4e78_b64c_87a7cb0b344a; Fri, 18 Jan 2019 01:48:19 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 00:48:07 -0700 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 00:48:06 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 Jan 2019 00:48:06 -0700 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 00:48:05 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2568.namprd16.prod.outlook.com (20.177.226.75) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.27; Fri, 18 Jan 2019 07:48:03 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Fri, 18 Jan 2019 07:48:03 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHCAAAQ70IAAA/zA Date: Fri, 18 Jan 2019 07:48:03 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2568; 6:JxlAS1ElkGHycmItt3BX+Yut+5ygCrBtd3AxWmPzE+YyWS/uc7YLIvp9l3NmUscg17RO+ZD+uH7bTaQ+ubopGxiI+DoIvf30cB21PqTtGcAJWXtzLG9rnwwmWRr+CQjxDq1sHIluvg55YSN8UBmDIFxF6JWocITsp5kaikQceDSBuxlwgiUBru/gx6yO5ooniwqhDIHtW9HBblKqHHW6ulNeUQECiIhL50EcS8jBtY9sP292+rRbUfEJvtKUEUsKNwCLd3hGGfBpfyCrlY0bbckMl97rd+jPfM7tJnu//6UgORI0jsd0P2IZpTCivB2nLIlKg0BWMQVaUZmhbS1m/KmM/KGDulUB/ETzZRqBiEiW/S2aBKdxJgM4qzoD8waS9Prbqpfq4UgvbdT+4gVdfoBdrPetPXpXrwWYFKggt7gTl3jgTQwk0Icb9iSabpVScEP2Hd7ZK8CrCzMpuFne9g==; 5:YLV/7FL11ef+GFEy7vq588y3VSv2GEC33VMycz+kSgPUgL7zX1u4sWIaFET2JreCc+ECYvubHKcrOfuXrJjprLs9b8Ef6LMmlgvlTOoEdJ5OkTpAw1vT1wNWel1Tuydiu6fSsA/Ys0oi3/5/RNJOg7+1RjkMDU/nMUMFjuUrV2/fTQ8Lh6vvNSY26N5UDkhrOlTdbKpX9a/L+C5EBzC3AA==; 7:0ppj0Y2zqzP0Uy+E0A7KNRQQtvVMw2iLYv9FBCH8sd48qQg12uY0lPhgsQ7/eciPdbko32eoEjD4mguDmxvzcwl6MZEq9BQ2LWgGIvTA9XsqPb4bLVBQWs5FAZrlAaU+XUW+iVyKCi7CUFFJeMPxXg== x-ms-office365-filtering-correlation-id: 71baa797-6328-4311-1612-08d67d1946ab x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2568; x-ms-traffictypediagnostic: BYAPR16MB2568: x-microsoft-antispam-prvs: x-forefront-prvs: 0921D55E4F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(396003)(346002)(39860400002)(136003)(376002)(13464003)(189003)(199004)(32952001)(55784004)(72206003)(446003)(6246003)(106356001)(11346002)(55016002)(76176011)(6506007)(5660300001)(99286004)(102836004)(53546011)(2906002)(476003)(316002)(110136005)(305945005)(9686003)(7696005)(486006)(26005)(186003)(966005)(229853002)(93886005)(33656002)(105586002)(14454004)(345774005)(97736004)(80792005)(71190400001)(71200400001)(68736007)(66066001)(3846002)(6306002)(25786009)(8936002)(81156014)(8676002)(81166006)(6116002)(86362001)(14444005)(53936002)(256004)(478600001)(74316002)(6436002)(5024004)(2501003)(7736002)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2568; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: eorkGTMaOdOREMSfS6QeEmzxluK+Q+mC/X2lrZxmUy1YGhRKrwI3/HLWPKZ9T27woNslUO1/NiBsrQ2b/r4gtBi+f2s1p/Qw1q/MsuBqgynViMqFqqmmQDDcigWck7Dz7MQjm0xbDza6G8DkaR8nQovrjYTk7LFueEKbEPw+6TNeWnWUxiTxxgNLqQ/OIo6pLWIcLD0DfsZdBIpOSEvOFDjO7F9PLrM63hgo5azJvnW6PzC/zwK1ITgAh0hGTbmUWgoZNwUu5dtOUl60HSOrftpsFfFsfvlnTdDUVjSuMBBoHU8iTQGA8GUgZbro+MVe825jF352XuEmxaH/6LeiRkwM7+fJY5VJ7d/Pb9kcw9aW3bo/OAWFwW21yPom1lc8KnOyDXMEgINNh4bcolGdbAUeZaKygGwX6/CSngWyNqQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 71baa797-6328-4311-1612-08d67d1946ab X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jan 2019 07:48:03.1324 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2568 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6463> : inlines <6997> : streams <1810418> : uri <2781717> Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 07:48:35 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiBTZW50OiBGcmlkYXks IEphbnVhcnkgMTgsIDIwMTkgMTowMSBQTQ0KPiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRk eSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+IFRha2FoaWtvIE5hZ2F0 YSA8bmFnYXRhQGxlcGlkdW0uY28uanA+OyBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJFOiBb RG90c10gQ29tbWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDENCj4gDQo+ IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4g RG8gbm90IGNsaWNrIGxpbmtzIG9yDQo+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNv Z25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KPiANCj4gVGly dSwNCj4gDQo+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiANCj4gQ2hlZXJzLA0KPiBNZWQNCj4gDQo+ ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gRGXCoDogS29uZGEsIFRpcnVtYWxl c3dhciBSZWRkeQ0KPiA+IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNv bV0NCj4gPiBFbnZvecOpwqA6IHZlbmRyZWRpIDE4IGphbnZpZXIgMjAxOSAwODoxNCDDgMKgOiBC T1VDQURBSVIgTW9oYW1lZCBUR0kvT0xOOw0KPiA+IFRha2FoaWtvIE5hZ2F0YTsgZG90c0BpZXRm Lm9yZyBPYmpldMKgOiBSRTogW0RvdHNdIENvbW1lbnRzIG9uDQo+ID4gZG90cy1zaWduYWwtY29u dHJvbC1maWx0ZXJpbmctMDENCj4gPg0KPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gPiA+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mDQo+ ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiBTZW50OiBGcmlkYXksIEph bnVhcnkgMTgsIDIwMTkgMTI6MzcgUE0NCj4gPiA+IFRvOiBUYWthaGlrbyBOYWdhdGEgPG5hZ2F0 YUBsZXBpZHVtLmNvLmpwPjsgZG90c0BpZXRmLm9yZw0KPiA+ID4gU3ViamVjdDogUmU6IFtEb3Rz XSBDb21tZW50cyBvbiBkb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMQ0KPiA+ID4NCj4g PiA+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlv bi4gRG8gbm90IGNsaWNrDQo+ID4gPiBsaW5rcw0KPiA+IG9yDQo+ID4gPiBvcGVuIGF0dGFjaG1l bnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhlDQo+ID4gPiBj b250ZW50IGlzDQo+ID4gc2FmZS4NCj4gPiA+DQo+ID4gPiBIaSBUYWthaGlrbywNCj4gPiA+DQo+ ID4gPiBUaGFuayB5b3UgZm9yIHNoYXJpbmcgdGhlIGNvbW1lbnRzLg0KPiA+ID4NCj4gPiA+IFBs ZWFzZSBzZWUgaW5saW5lLg0KPiA+ID4NCj4gPiA+IENoZWVycywNCj4gPiA+IE1lZA0KPiA+ID4N Cj4gPiA+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiA+IERlwqA6IERvdHMg W21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIERlIGxhIHBhcnQgZGUgVGFrYWhpa28NCj4g PiA+ID4gTmFnYXRhIEVudm95w6nCoDogamV1ZGkgMTcgamFudmllciAyMDE5IDA4OjEzIMOAwqA6 IGRvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gT2JqZXTCoDogW0RvdHNdIENvbW1lbnRzIG9uIGRvdHMt c2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAxDQo+ID4gPiA+DQo+ID4gPiA+IEhpIEthbmFtZSwN Cj4gPiA+ID4NCj4gPiA+ID4gSSB3b3VsZCBsaWtlIHRvIDIgY29tbWVudHMgb24gZG90cy1zaWdu YWwtY29udHJvbC1maWx0ZXJpbmctMDEuDQo+ID4gPiA+DQo+ID4gPiA+IChDb21tZW50MSkgTWlu aW1hbCBhdHRyaWJ1dGVzIGZvciBjb250cm9sLWZpbHRlcmluZy4gKCJsaWZldGltZSINCj4gPiBi ZWhhdmlvcikNCj4gPiA+ID4gICBNaW5pbWFsIGF0dHJpYnV0ZXMgb2YgU2lnbmFsQ2hhbm5lbCBN aXRpZ2F0aW9uUmVxdWVzdA0KPiA+ID4gPiAgIGZvciBjb250cm9sLWZpbHRlcmluZyBpcyBvbmx5 IHRoZSBmb2xsb3dpbmdzLCBJIHRoaW5rLg0KPiA+ID4gPiAgIC0gYWNsLWxpc3QoYWNsLW5hbWUs IGFjdGl2YXRpb24tdHlwZSkNCj4gPiA+ID4gICAtIGxpZmV0aW1lDQo+ID4gPiA+DQo+ID4gPiA+ ICAgU28sIFdlIGNhbiBzZW5kIGFjbC1saXN0IHZpYSBTaWduYWxDaGFubmVsIHdpdGhvdXQNCj4g PiA+ID4gICBvdGhlciBNaXRpZ2F0aW9uIHJlcXVlc3QgcGFyYW1ldGVycy4NCj4gPiA+DQo+ID4g PiBbTWVkXSBXaGVuIHRoZSBzYW1lIG1pZCBpcyB1c2VkLCB0aGUgcmVxdWVzdCBpcyBjb25zaWRl cmVkIGFzIGENCj4gPiA+IHJlZnJlc2guIEFzIHN1Y2ggdGhlIGF0dHJpYnV0ZXMgdGhhdCB3ZXJl IGluY2x1ZGVkIGluIHRoZSBmaXJzdA0KPiA+ID4gcmVxdWVzdCBtdXN0IGJlDQo+ID4gaW5jbHVk ZWQuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAgIEluIHRoaXMgY2FzZSwgd2UgbmVlZCB0byBk ZWNpZGUgYmVoYXZpb3Igb2YgImxpZmV0aW1lIi4NCj4gPiA+ID4gICBJIHRoaW5rICJsaWZldGlt ZSIgaXMgaWdub3JlZCBpbiB0aGlzIGNhc2UuDQo+ID4gPg0KPiA+ID4gW01lZF0gTm8uIFRoaXMg aXMgYSBwYXJ0aWN1bGFyIGNhc2Ugb2YgdGhpcyB0ZXh0IGZyb20gdGhlIHNpZ25hbA0KPiA+ID4g Y2hhbm5lbA0KPiA+IHNwZWM6DQo+ID4gPg0KPiA+ID4gICAgRm9yIGEgbWl0aWdhdGlvbiByZXF1 ZXN0IHRvIGNvbnRpbnVlIGJleW9uZCB0aGUgaW5pdGlhbCBuZWdvdGlhdGVkDQo+ID4gPiAgICBs aWZldGltZSwgdGhlIERPVFMgY2xpZW50IGhhcyB0byByZWZyZXNoIHRoZSBjdXJyZW50IG1pdGln YXRpb24NCj4gPiA+ICAgIHJlcXVlc3QgYnkgc2VuZGluZyBhIG5ldyBQVVQgcmVxdWVzdC4gIFRo aXMgUFVUIHJlcXVlc3QgTVVTVCB1c2UgdGhlDQo+ID4gPiAgICBzYW1lICdtaWQnIHZhbHVlLCBh bmQgTVVTVCByZXBlYXQgYWxsIHRoZSBvdGhlciBwYXJhbWV0ZXJzIGFzIHNlbnQgaW4NCj4gPiA+ ICAgIHRoZSBvcmlnaW5hbCBtaXRpZ2F0aW9uIHJlcXVlc3QgYXBhcnQgZnJvbSBhIHBvc3NpYmxl IGNoYW5nZSB0byB0aGUNCj4gPiA+ICAgIGxpZmV0aW1lIHBhcmFtZXRlciB2YWx1ZS4NCj4gPiA+ DQo+ID4gPiA+ICAgQmVjYXVzZSBhY2wtbGlzdChhY2wtbmFtZSwgYWN0aXZhdGlvbi10eXBlKSBz aG91bGQgYmUNCj4gPiA+ID4gICBtYW5hZ2VkIG9ubHkgRGF0YUNoYW5uZWwgc2lkZSBmb3Igc3Bl Y2lmaWNhdGlvbiBzaW1wbHkuDQo+ID4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IChDb21tZW50Mikg U2hvdWxkIGJlIHNwZWNpZmllZCBiZWhhdmlvci4NCj4gPiA+ID4gKGEpIE5vdCBiZSBhZmZlY3Rl ZCBieSAidHJpZ2dlci1taXRpZ2F0aW9uIg0KPiA+ID4gPiAgIGFjbC1saXN0KGFjbC1uYW1lLCBh Y3RpdmF0aW9uLXR5cGUpIGlzIHNvb24gYmUgYXBwbGllZA0KPiA+ID4gPiAgIGV2ZW4gaWYgInRy aWdnZXItbWl0aWdhdGlvbiIgaXMgZmFsc2UuDQo+ID4gPg0KPiA+ID4gW01lZF0gVGhlIHByb2Nl ZHVyZSBhcHBsaWVzIGluZGVwZW5kZW50bHkgb2YgdGhlIHZhbHVlIG9mICJ0cmlnZ2VyLQ0KPiA+ IG1pdGlnYXRpb24iLg0KPiA+ID4gV2UgY2FuIHNheSB0aGlzIGV4cGxpY2l0bHkgb24gdGhlIGRy YWZ0Lg0KPiA+DQo+ID4gQSBNaXRpZ2F0aW9uIHJlcXVlc3Qgd2l0aCAidHJpZ2dlci1taXRpZ2F0 aW9uIiBzZXQgdG8gZmFsc2UgbXVzdCBvbmx5DQo+ID4gYmUgc2VudCBpbiB0aGUgcGVhY2UgdGlt ZSBhbmQgbm90IGR1cmluZyB0aGUgYXR0YWNrIHRpbWUuIER1cmluZyB0aGUNCj4gPiBwZWFjZSB0 aW1lLCBJIGRvbid0IHNlZSB0aGUgbmVlZCB0byBhY3RpdmF0ZS9kZS1hY3RpdmF0ZSBBQ0xzIHVz aW5nDQo+ID4gRE9UUyBzaWduYWwgY2hhbm5lbCBwcm90b2NvbC4NCj4gDQo+IFtNZWRdIFRoZSBw b2ludCBpcyB0aGF0IHRoZSBjb250cm9sIGZ1bmN0aW9uYWxpdHkgd2lsbCBiZSB0aGVyZS4gSXQg aXMgdXAgdG8gdGhlDQo+IGNsaWVudCB0byBkZWNpZGUgdG8gdXNlOg0KPiANCj4gKiBpdHMgZGF0 YSBjaGFubmVsIHRvIGFsdGVyIHRoZSBhY2wgYW5kIHRoZW4gd2FpdCBmb3IgYSBzaWduYWwgY2hh bm5lbCBub3RpZmljYXRpb24uDQo+IFRoZXNlIG5vdGlmaWNhdGlvbnMgbWF5IG5vdCBiZSBzZXQg YnkgdGhlIGNsaWVudC4NCj4gKiBpdHMgc2lnbmFsIGNoYW5uZWwgdG8gYWx0ZXIgdGhlIGFjbC4N Cj4gDQo+IFdpdGggdGhhdCBhcHByb2FjaCB3ZSBkb24ndCBvdmVybG9hZCB0aGUgc2VydmVyIHdp dGggZXh0cmEgdmFsaWRhdGlvbiBvbg0KPiB0cmlnZ2VyLW1pdGlnYXRpb24gdG8gZGVjaWRlIGFi b3V0IHRoZSBiZWhhdmlvciB0byBmb2xsb3cuDQoNClRoaXMgZHJhZnQgaXMgaW50cm9kdWNlZCB0 byBhbHRlciB0aGUgQUNMIHVzaW5nIERPVFMgc2lnbmFsIGNoYW5uZWwgb25seSBkdXJpbmcgbWl0 aWdhdGlvbiB0aW1lIGJlY2F1c2UgZGF0YSBjaGFubmVsIGRvZXMgbm90IHdvcmsgZHVyaW5nIGF0 dGFjayB0aW1lLCBhbmQgQUNMIGFsdGVyYXRpb24gdXNpbmcgRE9UUyBzaWduYWwgY2hhbm5lbCAg c2hvdWxkIG5vdCBiZSBhbGxvd2VkIGR1cmluZyBwZWFjZSB0aW1lLg0KSWYgYWxsb3dlZCwgdGhl IGNsaWVudCBjYW4gdXNlIGJvdGggdGhlIERPVFMgZGF0YSBhbmQgc2lnbmFsIGNoYW5uZWxzIHRv IGFsdGVyIHRoZSBBQ0wgZHVyaW5nIHBlYWNlIHRpbWUgYW5kIGNhbiBjcmVhdGUgaW5jb25zaXN0 ZW50IGNvbmZpZ3VyYXRpb24uIFdoeSB1c2UgdHdvIHByb3RvY29scyB0byBkbyB0aGUgc2FtZSBq b2IgPw0KDQotVGlydQ0KDQo+IA0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IC1UaXJ1DQo+ID4NCj4g PiA+DQo+ID4gPiA+DQo+ID4gPiA+IChiKSBEbyBub3QgYWZmZWN0IHRvICJFZmZpY2FjeSBVcGRh dGUiDQo+ID4gPiA+ICAgYWNsLWxpc3QoYWNsLW5hbWUsIGFjdGl2YXRpb24tdHlwZSkgd291bGQg YmUgaWdub3JlZA0KPiA+ID4gPiAgIGF0ICJFZmZpY2FjeSBVcGRhdGUiIHN1Y2Nlc3Mgb3IgcmVq ZWN0Lg0KPiA+ID4NCj4gPiA+IFtNZWRdIEFncmVlLiBXZSBhcmUgbm90IHVwZGF0aW5nIHRoYXQg cGFydCBvZiB0aGUgc2lnbmFsIGNoYW5uZWwNCj4gPiA+IHNwZWMuIGFjbC0NCj4gPiBsaXN0DQo+ ID4gPiBjbGF1c2VzIHdvbid0IGJlIGluY2x1ZGVkIGluIHRoZSBlZmZpY2FjeSB1cGRhdGUuDQo+ ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAoYykgR0VUIHJlc3BvbnNlIG9mIE1pdGlnYXRpb24gUmVx dWVzdA0KPiA+ID4gPiAgIGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpIHdvdWxk IG5vdCBiZSBpbmNsdWRlZA0KPiA+ID4gPiAgIG9uIHJlc3Bvc2Ugb2YgR0VUIE1pdGlnYXRpb24g UmVxdWVzdC4NCj4gPiA+DQo+ID4gPiBbTWVkXSBZZXMuIFdpbGwgYmUgbWFrZSB0aGlzIGNsZWFy IGluIHRoZSBkcmFmdC4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IChkKSBJbiBERUxFVEUsIG5v IGJlaGF2aW9yKGV4OiByb2xsYmFjaykgZm9yIGFjbC1saXN0Lg0KPiA+ID4NCj4gPiA+IFtNZWRd IFllcy4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IEJlc3QgUmVnYXJkcywNCj4g PiA+ID4gVGFrYWhpa28gTmFnYXRhDQo+ID4gPiA+DQo+ID4gPiA+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPiA+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gPiA+IERvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9kb3RzDQo+ID4gPg0KPiA+ID4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiBE b3RzQGlldGYub3JnDQo+ID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2RvdHMNCg== From nobody Fri Jan 18 00:17:10 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2D43131168 for ; Fri, 18 Jan 2019 00:17:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OWwAOUeVxz3P for ; Fri, 18 Jan 2019 00:17:07 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D908B13115C for ; Fri, 18 Jan 2019 00:17:06 -0800 (PST) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 43gv1Y0MM8z2yBj; Fri, 18 Jan 2019 09:17:05 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 43gv1X6Yk3z5vp1; Fri, 18 Jan 2019 09:17:04 +0100 (CET) Received: from OPEXCAUBM21.corporate.adroot.infra.ftgroup (10.114.13.29) by OPEXCLILM24.corporate.adroot.infra.ftgroup (10.114.31.17) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 18 Jan 2019 09:17:04 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM21.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Fri, 18 Jan 2019 09:17:04 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHCAAAQ70IAAA/zAgAAJc2A= Date: Fri, 18 Jan 2019 08:17:03 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA09FB4@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 08:17:10 -0000 UmUtLA0KDQpTZWUgaW5saW5lLiANCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNzYWdlIGQn b3JpZ2luZS0tLS0tDQo+IERlwqA6IERvdHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmdd IERlIGxhIHBhcnQgZGUgS29uZGEsIFRpcnVtYWxlc3dhcg0KPiBSZWRkeQ0KPiBFbnZvecOpwqA6 IHZlbmRyZWRpIDE4IGphbnZpZXIgMjAxOSAwODo0OA0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1l ZCBUR0kvT0xOOyBUYWthaGlrbyBOYWdhdGE7IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUmU6 IFtEb3RzXSBDb21tZW50cyBvbiBkb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMQ0KPiAN Cj4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IG1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20gPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+DQo+ID4gU2VudDog RnJpZGF5LCBKYW51YXJ5IDE4LCAyMDE5IDE6MDEgUE0NCj4gPiBUbzogS29uZGEsIFRpcnVtYWxl c3dhciBSZWRkeSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+ID4gVGFr YWhpa28gTmFnYXRhIDxuYWdhdGFAbGVwaWR1bS5jby5qcD47IGRvdHNAaWV0Zi5vcmcNCj4gPiBT dWJqZWN0OiBSRTogW0RvdHNdIENvbW1lbnRzIG9uIGRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVy aW5nLTAxDQo+ID4NCj4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRo ZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljayBsaW5rcw0KPiBvcg0KPiA+IG9wZW4gYXR0YWNo bWVudHMgdW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVu dCBpcw0KPiBzYWZlLg0KPiA+DQo+ID4gVGlydSwNCj4gPg0KPiA+IFBsZWFzZSBzZWUgaW5saW5l Lg0KPiA+DQo+ID4gQ2hlZXJzLA0KPiA+IE1lZA0KPiA+DQo+ID4gPiAtLS0tLU1lc3NhZ2UgZCdv cmlnaW5lLS0tLS0NCj4gPiA+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiA+ IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gPiA+IEVudm95 w6nCoDogdmVuZHJlZGkgMTggamFudmllciAyMDE5IDA4OjE0IMOAwqA6IEJPVUNBREFJUiBNb2hh bWVkIFRHSS9PTE47DQo+ID4gPiBUYWthaGlrbyBOYWdhdGE7IGRvdHNAaWV0Zi5vcmcgT2JqZXTC oDogUkU6IFtEb3RzXSBDb21tZW50cyBvbg0KPiA+ID4gZG90cy1zaWduYWwtY29udHJvbC1maWx0 ZXJpbmctMDENCj4gPiA+DQo+ID4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4g PiA+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mDQo+ID4g PiA+IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiA+ID4gU2VudDogRnJpZGF5LCBK YW51YXJ5IDE4LCAyMDE5IDEyOjM3IFBNDQo+ID4gPiA+IFRvOiBUYWthaGlrbyBOYWdhdGEgPG5h Z2F0YUBsZXBpZHVtLmNvLmpwPjsgZG90c0BpZXRmLm9yZw0KPiA+ID4gPiBTdWJqZWN0OiBSZTog W0RvdHNdIENvbW1lbnRzIG9uIGRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAxDQo+ID4g PiA+DQo+ID4gPiA+IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9y Z2FuaXphdGlvbi4gRG8gbm90IGNsaWNrDQo+ID4gPiA+IGxpbmtzDQo+ID4gPiBvcg0KPiA+ID4g PiBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtu b3cgdGhlDQo+ID4gPiA+IGNvbnRlbnQgaXMNCj4gPiA+IHNhZmUuDQo+ID4gPiA+DQo+ID4gPiA+ IEhpIFRha2FoaWtvLA0KPiA+ID4gPg0KPiA+ID4gPiBUaGFuayB5b3UgZm9yIHNoYXJpbmcgdGhl IGNvbW1lbnRzLg0KPiA+ID4gPg0KPiA+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+ID4N Cj4gPiA+ID4gQ2hlZXJzLA0KPiA+ID4gPiBNZWQNCj4gPiA+ID4NCj4gPiA+ID4gPiAtLS0tLU1l c3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4gPiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1i b3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlIFRha2FoaWtvDQo+ID4gPiA+ID4gTmFnYXRh IEVudm95w6nCoDogamV1ZGkgMTcgamFudmllciAyMDE5IDA4OjEzIMOAwqA6IGRvdHNAaWV0Zi5v cmcNCj4gPiA+ID4gPiBPYmpldMKgOiBbRG90c10gQ29tbWVudHMgb24gZG90cy1zaWduYWwtY29u dHJvbC1maWx0ZXJpbmctMDENCj4gPiA+ID4gPg0KPiA+ID4gPiA+IEhpIEthbmFtZSwNCj4gPiA+ ID4gPg0KPiA+ID4gPiA+IEkgd291bGQgbGlrZSB0byAyIGNvbW1lbnRzIG9uIGRvdHMtc2lnbmFs LWNvbnRyb2wtZmlsdGVyaW5nLTAxLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gKENvbW1lbnQxKSBN aW5pbWFsIGF0dHJpYnV0ZXMgZm9yIGNvbnRyb2wtZmlsdGVyaW5nLiAoImxpZmV0aW1lIg0KPiA+ ID4gYmVoYXZpb3IpDQo+ID4gPiA+ID4gICBNaW5pbWFsIGF0dHJpYnV0ZXMgb2YgU2lnbmFsQ2hh bm5lbCBNaXRpZ2F0aW9uUmVxdWVzdA0KPiA+ID4gPiA+ICAgZm9yIGNvbnRyb2wtZmlsdGVyaW5n IGlzIG9ubHkgdGhlIGZvbGxvd2luZ3MsIEkgdGhpbmsuDQo+ID4gPiA+ID4gICAtIGFjbC1saXN0 KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpDQo+ID4gPiA+ID4gICAtIGxpZmV0aW1lDQo+ID4g PiA+ID4NCj4gPiA+ID4gPiAgIFNvLCBXZSBjYW4gc2VuZCBhY2wtbGlzdCB2aWEgU2lnbmFsQ2hh bm5lbCB3aXRob3V0DQo+ID4gPiA+ID4gICBvdGhlciBNaXRpZ2F0aW9uIHJlcXVlc3QgcGFyYW1l dGVycy4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gV2hlbiB0aGUgc2FtZSBtaWQgaXMgdXNlZCwg dGhlIHJlcXVlc3QgaXMgY29uc2lkZXJlZCBhcyBhDQo+ID4gPiA+IHJlZnJlc2guIEFzIHN1Y2gg dGhlIGF0dHJpYnV0ZXMgdGhhdCB3ZXJlIGluY2x1ZGVkIGluIHRoZSBmaXJzdA0KPiA+ID4gPiBy ZXF1ZXN0IG11c3QgYmUNCj4gPiA+IGluY2x1ZGVkLg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4g PiA+ID4gICBJbiB0aGlzIGNhc2UsIHdlIG5lZWQgdG8gZGVjaWRlIGJlaGF2aW9yIG9mICJsaWZl dGltZSIuDQo+ID4gPiA+ID4gICBJIHRoaW5rICJsaWZldGltZSIgaXMgaWdub3JlZCBpbiB0aGlz IGNhc2UuDQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIE5vLiBUaGlzIGlzIGEgcGFydGljdWxhciBj YXNlIG9mIHRoaXMgdGV4dCBmcm9tIHRoZSBzaWduYWwNCj4gPiA+ID4gY2hhbm5lbA0KPiA+ID4g c3BlYzoNCj4gPiA+ID4NCj4gPiA+ID4gICAgRm9yIGEgbWl0aWdhdGlvbiByZXF1ZXN0IHRvIGNv bnRpbnVlIGJleW9uZCB0aGUgaW5pdGlhbCBuZWdvdGlhdGVkDQo+ID4gPiA+ICAgIGxpZmV0aW1l LCB0aGUgRE9UUyBjbGllbnQgaGFzIHRvIHJlZnJlc2ggdGhlIGN1cnJlbnQgbWl0aWdhdGlvbg0K PiA+ID4gPiAgICByZXF1ZXN0IGJ5IHNlbmRpbmcgYSBuZXcgUFVUIHJlcXVlc3QuICBUaGlzIFBV VCByZXF1ZXN0IE1VU1QgdXNlIHRoZQ0KPiA+ID4gPiAgICBzYW1lICdtaWQnIHZhbHVlLCBhbmQg TVVTVCByZXBlYXQgYWxsIHRoZSBvdGhlciBwYXJhbWV0ZXJzIGFzIHNlbnQNCj4gaW4NCj4gPiA+ ID4gICAgdGhlIG9yaWdpbmFsIG1pdGlnYXRpb24gcmVxdWVzdCBhcGFydCBmcm9tIGEgcG9zc2li bGUgY2hhbmdlIHRvIHRoZQ0KPiA+ID4gPiAgICBsaWZldGltZSBwYXJhbWV0ZXIgdmFsdWUuDQo+ ID4gPiA+DQo+ID4gPiA+ID4gICBCZWNhdXNlIGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9u LXR5cGUpIHNob3VsZCBiZQ0KPiA+ID4gPiA+ICAgbWFuYWdlZCBvbmx5IERhdGFDaGFubmVsIHNp ZGUgZm9yIHNwZWNpZmljYXRpb24gc2ltcGx5Lg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ ID4gPiAoQ29tbWVudDIpIFNob3VsZCBiZSBzcGVjaWZpZWQgYmVoYXZpb3IuDQo+ID4gPiA+ID4g KGEpIE5vdCBiZSBhZmZlY3RlZCBieSAidHJpZ2dlci1taXRpZ2F0aW9uIg0KPiA+ID4gPiA+ICAg YWNsLWxpc3QoYWNsLW5hbWUsIGFjdGl2YXRpb24tdHlwZSkgaXMgc29vbiBiZSBhcHBsaWVkDQo+ ID4gPiA+ID4gICBldmVuIGlmICJ0cmlnZ2VyLW1pdGlnYXRpb24iIGlzIGZhbHNlLg0KPiA+ID4g Pg0KPiA+ID4gPiBbTWVkXSBUaGUgcHJvY2VkdXJlIGFwcGxpZXMgaW5kZXBlbmRlbnRseSBvZiB0 aGUgdmFsdWUgb2YgInRyaWdnZXItDQo+ID4gPiBtaXRpZ2F0aW9uIi4NCj4gPiA+ID4gV2UgY2Fu IHNheSB0aGlzIGV4cGxpY2l0bHkgb24gdGhlIGRyYWZ0Lg0KPiA+ID4NCj4gPiA+IEEgTWl0aWdh dGlvbiByZXF1ZXN0IHdpdGggInRyaWdnZXItbWl0aWdhdGlvbiIgc2V0IHRvIGZhbHNlIG11c3Qg b25seQ0KPiA+ID4gYmUgc2VudCBpbiB0aGUgcGVhY2UgdGltZSBhbmQgbm90IGR1cmluZyB0aGUg YXR0YWNrIHRpbWUuIER1cmluZyB0aGUNCj4gPiA+IHBlYWNlIHRpbWUsIEkgZG9uJ3Qgc2VlIHRo ZSBuZWVkIHRvIGFjdGl2YXRlL2RlLWFjdGl2YXRlIEFDTHMgdXNpbmcNCj4gPiA+IERPVFMgc2ln bmFsIGNoYW5uZWwgcHJvdG9jb2wuDQo+ID4NCj4gPiBbTWVkXSBUaGUgcG9pbnQgaXMgdGhhdCB0 aGUgY29udHJvbCBmdW5jdGlvbmFsaXR5IHdpbGwgYmUgdGhlcmUuIEl0IGlzIHVwDQo+IHRvIHRo ZQ0KPiA+IGNsaWVudCB0byBkZWNpZGUgdG8gdXNlOg0KPiA+DQo+ID4gKiBpdHMgZGF0YSBjaGFu bmVsIHRvIGFsdGVyIHRoZSBhY2wgYW5kIHRoZW4gd2FpdCBmb3IgYSBzaWduYWwgY2hhbm5lbA0K PiBub3RpZmljYXRpb24uDQo+ID4gVGhlc2Ugbm90aWZpY2F0aW9ucyBtYXkgbm90IGJlIHNldCBi eSB0aGUgY2xpZW50Lg0KPiA+ICogaXRzIHNpZ25hbCBjaGFubmVsIHRvIGFsdGVyIHRoZSBhY2wu DQo+ID4NCj4gPiBXaXRoIHRoYXQgYXBwcm9hY2ggd2UgZG9uJ3Qgb3ZlcmxvYWQgdGhlIHNlcnZl ciB3aXRoIGV4dHJhIHZhbGlkYXRpb24gb24NCj4gPiB0cmlnZ2VyLW1pdGlnYXRpb24gdG8gZGVj aWRlIGFib3V0IHRoZSBiZWhhdmlvciB0byBmb2xsb3cuDQo+IA0KPiBUaGlzIGRyYWZ0IGlzIGlu dHJvZHVjZWQgdG8gYWx0ZXIgdGhlIEFDTCB1c2luZyBET1RTIHNpZ25hbCBjaGFubmVsIG9ubHkN Cj4gZHVyaW5nIG1pdGlnYXRpb24gdGltZSBiZWNhdXNlIGRhdGEgY2hhbm5lbCBkb2VzIG5vdCB3 b3JrIGR1cmluZyBhdHRhY2sgdGltZSwNCj4gYW5kIEFDTCBhbHRlcmF0aW9uIHVzaW5nIERPVFMg c2lnbmFsIGNoYW5uZWwgIHNob3VsZCBub3QgYmUgYWxsb3dlZCBkdXJpbmcNCj4gcGVhY2UgdGlt ZS4NCj4gSWYgYWxsb3dlZCwgdGhlIGNsaWVudCBjYW4gdXNlIGJvdGggdGhlIERPVFMgZGF0YSBh bmQgc2lnbmFsIGNoYW5uZWxzIHRvDQo+IGFsdGVyIHRoZSBBQ0wgZHVyaW5nIHBlYWNlIHRpbWUg YW5kIGNhbiBjcmVhdGUgaW5jb25zaXN0ZW50IGNvbmZpZ3VyYXRpb24uDQoNCltNZWRdIElmIHRo ZXJlIGlzIGEgcmlzayBvZiBpbmNvbnNpc3RlbnQgY29uZmlndXJhdGlvbiwgaXQgd29uJ3QgYmUg c3BlY2lmaWMgdG8gdGhpcyBjYXNlIGJ1dCBhIGdlbmVyaWMgb25lLg0KDQo+IFdoeSB1c2UgdHdv IHByb3RvY29scyB0byBkbyB0aGUgc2FtZSBqb2IgPw0KDQpbTWVkXSBCZWNhdXNlOiANCiogdGhl IGZ1bmN0aW9uYWxpdHkgaXMgdGhlcmUgYW5kIGl0cyB1c2Ugd2lsbCBiZSBmb3IgZnJlZS4NCiog dGhlIHNlcnZlciBjaGVja3MgYXJlIHNpbXBsaWZpZWQuIE5vIG5lZWQgdG8gZG8gZXh0cmEgY2hl Y2tzIGJhc2VkIG9uICJ0cmlnZ2VyLW1pdGlnYXRpb24iDQoqIHRoZSBjbGllbnQgbWF5IG5vdCBz dWJzY3JpYmUgdG8gbm90aWZpY2F0aW9uLiBQbGVhc2Ugbm90ZSB0aGF0IHdlIGRvbid0IGhhdmUg YSBNVVNULCBidXQgYSBTSE9VTEQuIA0KDQo+IA0KPiAtVGlydQ0KPiANCj4gPg0KPiA+ID4NCj4g PiA+IENoZWVycywNCj4gPiA+IC1UaXJ1DQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4g PiA+ID4gKGIpIERvIG5vdCBhZmZlY3QgdG8gIkVmZmljYWN5IFVwZGF0ZSINCj4gPiA+ID4gPiAg IGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpIHdvdWxkIGJlIGlnbm9yZWQNCj4g PiA+ID4gPiAgIGF0ICJFZmZpY2FjeSBVcGRhdGUiIHN1Y2Nlc3Mgb3IgcmVqZWN0Lg0KPiA+ID4g Pg0KPiA+ID4gPiBbTWVkXSBBZ3JlZS4gV2UgYXJlIG5vdCB1cGRhdGluZyB0aGF0IHBhcnQgb2Yg dGhlIHNpZ25hbCBjaGFubmVsDQo+ID4gPiA+IHNwZWMuIGFjbC0NCj4gPiA+IGxpc3QNCj4gPiA+ ID4gY2xhdXNlcyB3b24ndCBiZSBpbmNsdWRlZCBpbiB0aGUgZWZmaWNhY3kgdXBkYXRlLg0KPiA+ ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gKGMpIEdFVCByZXNwb25zZSBvZiBNaXRpZ2F0aW9u IFJlcXVlc3QNCj4gPiA+ID4gPiAgIGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUp IHdvdWxkIG5vdCBiZSBpbmNsdWRlZA0KPiA+ID4gPiA+ICAgb24gcmVzcG9zZSBvZiBHRVQgTWl0 aWdhdGlvbiBSZXF1ZXN0Lg0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBZZXMuIFdpbGwgYmUgbWFr ZSB0aGlzIGNsZWFyIGluIHRoZSBkcmFmdC4NCj4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ IChkKSBJbiBERUxFVEUsIG5vIGJlaGF2aW9yKGV4OiByb2xsYmFjaykgZm9yIGFjbC1saXN0Lg0K PiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBZZXMuDQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4g Pg0KPiA+ID4gPiA+IEJlc3QgUmVnYXJkcywNCj4gPiA+ID4gPiBUYWthaGlrbyBOYWdhdGENCj4g PiA+ID4gPg0KPiA+ID4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+ID4gPiA+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiA+ID4gPiBEb3RzQGll dGYub3JnDQo+ID4gPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9k b3RzDQo+ID4gPiA+DQo+ID4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+ID4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+IERvdHNAaWV0 Zi5vcmcNCj4gPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3Rz DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IERv dHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Fri Jan 18 05:54:33 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B4EF124BE5 for ; Fri, 18 Jan 2019 05:54:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.853 X-Spam-Level: X-Spam-Status: No, score=-8.853 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DbjmfryHNnCb for ; Fri, 18 Jan 2019 05:54:28 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D170124D68 for ; Fri, 18 Jan 2019 05:54:27 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547819641; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=CjiZ40SdXQMqkbfMu27WhmJDfz0HbhYAyS1uOI Tsuxc=; b=ozzyPPwJQ9STMwnr3XQ4kDwYY62TPBQB9dZmY91f 8+gUaU0ZDD42eiQr1oPdAzyF5Sia6eypeK2YP06lVzosAhOMey 7tFenmgROhSrpigLww14mQ2KWWYaODPG8zn4K9694wlehBQBao PSLNcOo25Fv3EvmS+4Rqyh2ADKtbWUE= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 2a18_a82b_e4415c45_6e3f_443d_be5b_ead8f0e0f14a; Fri, 18 Jan 2019 07:54:00 -0600 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 06:53:51 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 Jan 2019 06:53:51 -0700 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 06:53:50 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2837.namprd16.prod.outlook.com (20.178.234.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Fri, 18 Jan 2019 13:53:49 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Fri, 18 Jan 2019 13:53:49 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHCAAAQ70IAAA/zAgAAJc2CAAEc+cA== Date: Fri, 18 Jan 2019 13:53:49 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09FB4@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA09FB4@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [122.171.119.30] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2837; 6:X442w3bd7cHjAM7NCMTNPOC2d9P7apgrCwuNcVdWYYjYCtghjZN3LyN8G1pf0VDPVgz4rS8k3dyacSixG3dDReeIZ3/FxQaX83WUOrF3PO1SnqfjLdAYg1+MXZVvTgDlB0Q/FHisIHNsmA30BNjnzFHAwfOoZKtPmuvm4L/SX0A/PrK5Cfw0UUH4zcrrao0mv4E/U49/iSUJQH0h+eTP0sIMNleTvPgZPTg+YUBSQ5qXSeI6UFUYYwlHBNuBagO91BoqVDeUfFWqy0NaNgq58UXn9Sls/lcKEHMT1Ke9hPME4XISXZM5JDXR3/9NMJlo2pqz4Y7ZDiKJQ11P6FXyNtS6eb859teZ7oWp4OUAD5hu0iLrX0gz0ipUx2wLs70tQicqXqWO4NYw6CO/ktkBXmMBcgNS7urWccBNzKAcbwXuT3o0G1ZJtEIhFi4TsD+bOcRAE/lyX8rzWt/hEyS78Q==; 5:YcMER2YJ4i475MBGLXo1Pgu6vf1CyXkRs2HfiJyBY3RcmFTCvvjeBdcDHkbiG0MHMFjOAUKZezbzQmSy/Z5yvN8eOW8AdpZ6T4+hkkM+vYXzULA5UCAH8aZcsUkBOkX+nm9Yl3MVEY5bNN/V4VGaz64roTE5xAUy6Tos9ZLLK837O0iK0++4I4iVk2yEKduD5ySbJ5lFfpoTbMuONZOdBg==; 7:r1dZRKhInjSLX9ECaZWMePDI0n/V8eGXNlda9J8nWE8rCWFcoI3anfdBKz3M61jPvgzqv/cK1AzBdgJRKCMjnrCV67cgelpQIxozybifYcEzIGHqgTF/d3uvCEBjnFXRnCdH656W4J2O6Skx1BXSgQ== x-ms-office365-filtering-correlation-id: 63402daa-dfc5-4a7c-9018-08d67d4c5faf x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600109)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2837; x-ms-traffictypediagnostic: BYAPR16MB2837: x-microsoft-antispam-prvs: x-forefront-prvs: 0921D55E4F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(136003)(396003)(366004)(376002)(346002)(55784004)(13464003)(32952001)(199004)(189003)(7696005)(316002)(71200400001)(110136005)(476003)(106356001)(486006)(72206003)(186003)(345774005)(71190400001)(8936002)(25786009)(68736007)(5024004)(2906002)(256004)(14444005)(76176011)(86362001)(78486014)(99286004)(93886005)(66066001)(6306002)(3846002)(478600001)(446003)(53936002)(229853002)(6246003)(80792005)(33656002)(6116002)(102836004)(14454004)(74316002)(305945005)(966005)(2501003)(55016002)(7736002)(105586002)(11346002)(9686003)(6436002)(26005)(6506007)(5660300001)(53546011)(81156014)(81166006)(8676002)(97736004)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2837; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: j0TpOs8lv0d3M9hFlW5m/yh3FAB5aUIQx3+QUMAv0IsXzYhgA8ksM0OxolAjXguLa7NMSryNNGOTaGEaQEHZBF7tKEH6xwfIoChv84v4zw3n9jbMs4IJCDboi6q3kQ3L3ho7r329wVuIAUEnIJULidYnYcuQKY7MfYzBv2KASEHPsaPuFHr1UeoJRLbvLMElJU7zfM9VwbWGrQC/VgpqVbd0NIFIegOSXHLJG8xXP3elGUORt92PqC7wbZE0eJHeezKPkkVbPA3ad7XPYvh+qDquZjjnVredztZv47JvcgWqAGl0fh+U8rpSg7x9SaiNj8HxxWm6hKJiDeutbVYcYiyzqOxIqsSFb+RJ1LPwFTrlfF4GXGiIu4zG1lxsfuXvvgt2yKVWcoTaHj61kk7jJVlkdVn8cScZ5INu+EvsNfI= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 63402daa-dfc5-4a7c-9018-08d67d4c5faf X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jan 2019 13:53:49.4710 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2837 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6464> : inlines <6997> : streams <1810442> : uri <2781865> Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 13:54:31 -0000 SGkgTWVkLA0KDQpQbGVhc2Ugc2VlIGlubGluZQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQo+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mDQo+ IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gU2VudDogRnJpZGF5LCBKYW51YXJ5IDE4 LCAyMDE5IDE6NDcgUE0NCj4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxl c3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiBUYWthaGlrbyBOYWdhdGEgPG5hZ2F0YUBs ZXBpZHVtLmNvLmpwPjsgZG90c0BpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0RvdHNdIENvbW1l bnRzIG9uIGRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAxDQo+IA0KPiBUaGlzIGVtYWls IG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGlj ayBsaW5rcyBvcg0KPiBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBz ZW5kZXIgYW5kIGtub3cgdGhlIGNvbnRlbnQgaXMgc2FmZS4NCj4gDQo+IFJlLSwNCj4gDQo+IFNl ZSBpbmxpbmUuDQo+IA0KPiBDaGVlcnMsDQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdv cmlnaW5lLS0tLS0NCj4gPiBEZcKgOiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3Jn XSBEZSBsYSBwYXJ0IGRlIEtvbmRhLA0KPiA+IFRpcnVtYWxlc3dhciBSZWRkeSBFbnZvecOpwqA6 IHZlbmRyZWRpIDE4IGphbnZpZXIgMjAxOSAwODo0OCDDgMKgOg0KPiA+IEJPVUNBREFJUiBNb2hh bWVkIFRHSS9PTE47IFRha2FoaWtvIE5hZ2F0YTsgZG90c0BpZXRmLm9yZyBPYmpldMKgOiBSZToN Cj4gPiBbRG90c10gQ29tbWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDEN Cj4gPg0KPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiA+IEZyb206IG1vaGFt ZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+ DQo+ID4gPiBTZW50OiBGcmlkYXksIEphbnVhcnkgMTgsIDIwMTkgMTowMSBQTQ0KPiA+ID4gVG86 IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1j QWZlZS5jb20+Ow0KPiA+ID4gVGFrYWhpa28gTmFnYXRhIDxuYWdhdGFAbGVwaWR1bS5jby5qcD47 IGRvdHNAaWV0Zi5vcmcNCj4gPiA+IFN1YmplY3Q6IFJFOiBbRG90c10gQ29tbWVudHMgb24gZG90 cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDENCj4gPiA+DQo+ID4gPiBUaGlzIGVtYWlsIG9y aWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljaw0K PiA+ID4gbGlua3MNCj4gPiBvcg0KPiA+ID4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJl Y29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZQ0KPiA+ID4gY29udGVudCBpcw0KPiA+IHNh ZmUuDQo+ID4gPg0KPiA+ID4gVGlydSwNCj4gPiA+DQo+ID4gPiBQbGVhc2Ugc2VlIGlubGluZS4N Cj4gPiA+DQo+ID4gPiBDaGVlcnMsDQo+ID4gPiBNZWQNCj4gPiA+DQo+ID4gPiA+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gPiBEZcKgOiBLb25kYSwgVGlydW1hbGVzd2FyIFJl ZGR5DQo+ID4gPiA+IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0N Cj4gPiA+ID4gRW52b3nDqcKgOiB2ZW5kcmVkaSAxOCBqYW52aWVyIDIwMTkgMDg6MTQgw4DCoDog Qk9VQ0FEQUlSIE1vaGFtZWQNCj4gPiA+ID4gVEdJL09MTjsgVGFrYWhpa28gTmFnYXRhOyBkb3Rz QGlldGYub3JnIE9iamV0wqA6IFJFOiBbRG90c10NCj4gPiA+ID4gQ29tbWVudHMgb24NCj4gPiA+ ID4gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDENCj4gPiA+ID4NCj4gPiA+ID4gPiAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+ID4gPiA+IEZyb206IERvdHMgPGRvdHMtYm91 bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mDQo+ID4gPiA+ID4gbW9oYW1lZC5ib3VjYWRhaXJA b3JhbmdlLmNvbQ0KPiA+ID4gPiA+IFNlbnQ6IEZyaWRheSwgSmFudWFyeSAxOCwgMjAxOSAxMjoz NyBQTQ0KPiA+ID4gPiA+IFRvOiBUYWthaGlrbyBOYWdhdGEgPG5hZ2F0YUBsZXBpZHVtLmNvLmpw PjsgZG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gQ29tbWVudHMg b24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDENCj4gPiA+ID4gPg0KPiA+ID4gPiA+ IFRoaXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4g RG8gbm90DQo+ID4gPiA+ID4gY2xpY2sgbGlua3MNCj4gPiA+ID4gb3INCj4gPiA+ID4gPiBvcGVu IGF0dGFjaG1lbnRzIHVubGVzcyB5b3UgcmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cgdGhl DQo+ID4gPiA+ID4gY29udGVudCBpcw0KPiA+ID4gPiBzYWZlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gSGkgVGFrYWhpa28sDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBUaGFuayB5b3UgZm9yIHNoYXJp bmcgdGhlIGNvbW1lbnRzLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUu DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBDaGVlcnMsDQo+ID4gPiA+ID4gTWVkDQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gPiA+ID4gRGXC oDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZQ0KPiA+ ID4gPiA+ID4gVGFrYWhpa28gTmFnYXRhIEVudm95w6nCoDogamV1ZGkgMTcgamFudmllciAyMDE5 IDA4OjEzIMOAwqA6DQo+ID4gPiA+ID4gPiBkb3RzQGlldGYub3JnIE9iamV0wqA6IFtEb3RzXSBD b21tZW50cyBvbg0KPiA+ID4gPiA+ID4gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDEN Cj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBIaSBLYW5hbWUsDQo+ID4gPiA+ID4gPg0KPiA+ID4g PiA+ID4gSSB3b3VsZCBsaWtlIHRvIDIgY29tbWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1m aWx0ZXJpbmctMDEuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gKENvbW1lbnQxKSBNaW5pbWFs IGF0dHJpYnV0ZXMgZm9yIGNvbnRyb2wtZmlsdGVyaW5nLiAoImxpZmV0aW1lIg0KPiA+ID4gPiBi ZWhhdmlvcikNCj4gPiA+ID4gPiA+ICAgTWluaW1hbCBhdHRyaWJ1dGVzIG9mIFNpZ25hbENoYW5u ZWwgTWl0aWdhdGlvblJlcXVlc3QNCj4gPiA+ID4gPiA+ICAgZm9yIGNvbnRyb2wtZmlsdGVyaW5n IGlzIG9ubHkgdGhlIGZvbGxvd2luZ3MsIEkgdGhpbmsuDQo+ID4gPiA+ID4gPiAgIC0gYWNsLWxp c3QoYWNsLW5hbWUsIGFjdGl2YXRpb24tdHlwZSkNCj4gPiA+ID4gPiA+ICAgLSBsaWZldGltZQ0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ICAgU28sIFdlIGNhbiBzZW5kIGFjbC1saXN0IHZpYSBT aWduYWxDaGFubmVsIHdpdGhvdXQNCj4gPiA+ID4gPiA+ICAgb3RoZXIgTWl0aWdhdGlvbiByZXF1 ZXN0IHBhcmFtZXRlcnMuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBXaGVuIHRoZSBzYW1l IG1pZCBpcyB1c2VkLCB0aGUgcmVxdWVzdCBpcyBjb25zaWRlcmVkIGFzIGENCj4gPiA+ID4gPiBy ZWZyZXNoLiBBcyBzdWNoIHRoZSBhdHRyaWJ1dGVzIHRoYXQgd2VyZSBpbmNsdWRlZCBpbiB0aGUg Zmlyc3QNCj4gPiA+ID4gPiByZXF1ZXN0IG11c3QgYmUNCj4gPiA+ID4gaW5jbHVkZWQuDQo+ID4g PiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiAgIEluIHRoaXMgY2FzZSwgd2UgbmVlZCB0 byBkZWNpZGUgYmVoYXZpb3Igb2YgImxpZmV0aW1lIi4NCj4gPiA+ID4gPiA+ICAgSSB0aGluayAi bGlmZXRpbWUiIGlzIGlnbm9yZWQgaW4gdGhpcyBjYXNlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g W01lZF0gTm8uIFRoaXMgaXMgYSBwYXJ0aWN1bGFyIGNhc2Ugb2YgdGhpcyB0ZXh0IGZyb20gdGhl IHNpZ25hbA0KPiA+ID4gPiA+IGNoYW5uZWwNCj4gPiA+ID4gc3BlYzoNCj4gPiA+ID4gPg0KPiA+ ID4gPiA+ICAgIEZvciBhIG1pdGlnYXRpb24gcmVxdWVzdCB0byBjb250aW51ZSBiZXlvbmQgdGhl IGluaXRpYWwgbmVnb3RpYXRlZA0KPiA+ID4gPiA+ICAgIGxpZmV0aW1lLCB0aGUgRE9UUyBjbGll bnQgaGFzIHRvIHJlZnJlc2ggdGhlIGN1cnJlbnQgbWl0aWdhdGlvbg0KPiA+ID4gPiA+ICAgIHJl cXVlc3QgYnkgc2VuZGluZyBhIG5ldyBQVVQgcmVxdWVzdC4gIFRoaXMgUFVUIHJlcXVlc3QgTVVT VCB1c2UNCj4gdGhlDQo+ID4gPiA+ID4gICAgc2FtZSAnbWlkJyB2YWx1ZSwgYW5kIE1VU1QgcmVw ZWF0IGFsbCB0aGUgb3RoZXIgcGFyYW1ldGVycyBhcw0KPiA+ID4gPiA+IHNlbnQNCj4gPiBpbg0K PiA+ID4gPiA+ICAgIHRoZSBvcmlnaW5hbCBtaXRpZ2F0aW9uIHJlcXVlc3QgYXBhcnQgZnJvbSBh IHBvc3NpYmxlIGNoYW5nZSB0byB0aGUNCj4gPiA+ID4gPiAgICBsaWZldGltZSBwYXJhbWV0ZXIg dmFsdWUuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ICAgQmVjYXVzZSBhY2wtbGlzdChhY2wtbmFt ZSwgYWN0aXZhdGlvbi10eXBlKSBzaG91bGQgYmUNCj4gPiA+ID4gPiA+ICAgbWFuYWdlZCBvbmx5 IERhdGFDaGFubmVsIHNpZGUgZm9yIHNwZWNpZmljYXRpb24gc2ltcGx5Lg0KPiA+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiAoQ29tbWVudDIpIFNob3VsZCBiZSBzcGVjaWZpZWQg YmVoYXZpb3IuDQo+ID4gPiA+ID4gPiAoYSkgTm90IGJlIGFmZmVjdGVkIGJ5ICJ0cmlnZ2VyLW1p dGlnYXRpb24iDQo+ID4gPiA+ID4gPiAgIGFjbC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5 cGUpIGlzIHNvb24gYmUgYXBwbGllZA0KPiA+ID4gPiA+ID4gICBldmVuIGlmICJ0cmlnZ2VyLW1p dGlnYXRpb24iIGlzIGZhbHNlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gVGhlIHByb2Nl ZHVyZSBhcHBsaWVzIGluZGVwZW5kZW50bHkgb2YgdGhlIHZhbHVlIG9mDQo+ID4gPiA+ID4gInRy aWdnZXItDQo+ID4gPiA+IG1pdGlnYXRpb24iLg0KPiA+ID4gPiA+IFdlIGNhbiBzYXkgdGhpcyBl eHBsaWNpdGx5IG9uIHRoZSBkcmFmdC4NCj4gPiA+ID4NCj4gPiA+ID4gQSBNaXRpZ2F0aW9uIHJl cXVlc3Qgd2l0aCAidHJpZ2dlci1taXRpZ2F0aW9uIiBzZXQgdG8gZmFsc2UgbXVzdA0KPiA+ID4g PiBvbmx5IGJlIHNlbnQgaW4gdGhlIHBlYWNlIHRpbWUgYW5kIG5vdCBkdXJpbmcgdGhlIGF0dGFj ayB0aW1lLg0KPiA+ID4gPiBEdXJpbmcgdGhlIHBlYWNlIHRpbWUsIEkgZG9uJ3Qgc2VlIHRoZSBu ZWVkIHRvDQo+ID4gPiA+IGFjdGl2YXRlL2RlLWFjdGl2YXRlIEFDTHMgdXNpbmcgRE9UUyBzaWdu YWwgY2hhbm5lbCBwcm90b2NvbC4NCj4gPiA+DQo+ID4gPiBbTWVkXSBUaGUgcG9pbnQgaXMgdGhh dCB0aGUgY29udHJvbCBmdW5jdGlvbmFsaXR5IHdpbGwgYmUgdGhlcmUuIEl0DQo+ID4gPiBpcyB1 cA0KPiA+IHRvIHRoZQ0KPiA+ID4gY2xpZW50IHRvIGRlY2lkZSB0byB1c2U6DQo+ID4gPg0KPiA+ ID4gKiBpdHMgZGF0YSBjaGFubmVsIHRvIGFsdGVyIHRoZSBhY2wgYW5kIHRoZW4gd2FpdCBmb3Ig YSBzaWduYWwNCj4gPiA+IGNoYW5uZWwNCj4gPiBub3RpZmljYXRpb24uDQo+ID4gPiBUaGVzZSBu b3RpZmljYXRpb25zIG1heSBub3QgYmUgc2V0IGJ5IHRoZSBjbGllbnQuDQo+ID4gPiAqIGl0cyBz aWduYWwgY2hhbm5lbCB0byBhbHRlciB0aGUgYWNsLg0KPiA+ID4NCj4gPiA+IFdpdGggdGhhdCBh cHByb2FjaCB3ZSBkb24ndCBvdmVybG9hZCB0aGUgc2VydmVyIHdpdGggZXh0cmENCj4gPiA+IHZh bGlkYXRpb24gb24gdHJpZ2dlci1taXRpZ2F0aW9uIHRvIGRlY2lkZSBhYm91dCB0aGUgYmVoYXZp b3IgdG8gZm9sbG93Lg0KPiA+DQo+ID4gVGhpcyBkcmFmdCBpcyBpbnRyb2R1Y2VkIHRvIGFsdGVy IHRoZSBBQ0wgdXNpbmcgRE9UUyBzaWduYWwgY2hhbm5lbA0KPiA+IG9ubHkgZHVyaW5nIG1pdGln YXRpb24gdGltZSBiZWNhdXNlIGRhdGEgY2hhbm5lbCBkb2VzIG5vdCB3b3JrIGR1cmluZw0KPiA+ IGF0dGFjayB0aW1lLCBhbmQgQUNMIGFsdGVyYXRpb24gdXNpbmcgRE9UUyBzaWduYWwgY2hhbm5l bCAgc2hvdWxkIG5vdA0KPiA+IGJlIGFsbG93ZWQgZHVyaW5nIHBlYWNlIHRpbWUuDQo+ID4gSWYg YWxsb3dlZCwgdGhlIGNsaWVudCBjYW4gdXNlIGJvdGggdGhlIERPVFMgZGF0YSBhbmQgc2lnbmFs IGNoYW5uZWxzDQo+ID4gdG8gYWx0ZXIgdGhlIEFDTCBkdXJpbmcgcGVhY2UgdGltZSBhbmQgY2Fu IGNyZWF0ZSBpbmNvbnNpc3RlbnQgY29uZmlndXJhdGlvbi4NCj4gDQo+IFtNZWRdIElmIHRoZXJl IGlzIGEgcmlzayBvZiBpbmNvbnNpc3RlbnQgY29uZmlndXJhdGlvbiwgaXQgd29uJ3QgYmUgc3Bl Y2lmaWMgdG8gdGhpcw0KPiBjYXNlIGJ1dCBhIGdlbmVyaWMgb25lLg0KDQpJdCdzIG5vdCBhIGdl bmVyaWMgc2NlbmFyaW8sIHRoZSBpbmNvbnNpc3RlbnQgY29uZmlndXJhdGlvbiBpcyBiZSBiZWNh dXNlIHR3byBwcm90b2NvbHMgYXJlIGFsbG93ZWQgdG8gYWx0ZXIgdGhlIEFDTCBhdCB0aGUgc2Ft ZSB0aW1lLg0KDQo+IA0KPiA+IFdoeSB1c2UgdHdvIHByb3RvY29scyB0byBkbyB0aGUgc2FtZSBq b2IgPw0KPiANCj4gW01lZF0gQmVjYXVzZToNCj4gKiB0aGUgZnVuY3Rpb25hbGl0eSBpcyB0aGVy ZSBhbmQgaXRzIHVzZSB3aWxsIGJlIGZvciBmcmVlLg0KPiAqIHRoZSBzZXJ2ZXIgY2hlY2tzIGFy ZSBzaW1wbGlmaWVkLiBObyBuZWVkIHRvIGRvIGV4dHJhIGNoZWNrcyBiYXNlZCBvbg0KPiAidHJp Z2dlci1taXRpZ2F0aW9uIg0KPiAqIHRoZSBjbGllbnQgbWF5IG5vdCBzdWJzY3JpYmUgdG8gbm90 aWZpY2F0aW9uLiBQbGVhc2Ugbm90ZSB0aGF0IHdlIGRvbid0IGhhdmUgYQ0KPiBNVVNULCBidXQg YSBTSE9VTEQuDQoNCldpdGhvdXQgdGhlIG5vdGlmaWNhdGlvbiBmcm9tIHRoZSBzZXJ2ZXIsIEhv dyB3aWxsIHRoZSBjbGllbnQga25vdyB0aGUgQUNMIG5lZWRzIHRvIGJlIGFsdGVyZWQgPw0KSWYg dGhlIGNsaWVudCBkZXRlY3RzIHRoZSB3aGl0ZS1saXN0ZWQgdHJhZmZpYyBpcyBhdHRhY2tpbmcg dGhlIHRhcmdldCBieSBpdHNlbGYsIGl0IGNhbiB1c2UgRE9UUyBkYXRhIGNoYW5uZWwgcHJvdG9j b2wgdG8gYWx0ZXIgdGhlIEFDTC4gDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt bmlzaGl6dWthLWRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAxI3NlY3Rpb24tMS4xIG9u bHkgZGlzY3Vzc2VzIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBpcyB1c2VmdWwgdG8gYWx0ZXIgdGhl IEFDTCB1c2luZyBzaWduYWwgY2hhbm5lbCBkdXJpbmcgYXR0YWNrIHRpbWUsIA0KUGxlYXNlIHBy b3ZpZGUgYW4gYXR0YWNrIHNjZW5hcmlvIHdoZXJlIGFsbG93aW5nIHRoaXMgYWx0ZXJuYXRpb24g dXNpbmcgc2lnbmFsIGNoYW5uZWwgaXMgdXNlZnVsIGR1cmluZyBwZWFjZSB0aW1lLg0KDQpDaGVl cnMNCi1UaXJ1DQoNCj4gDQo+ID4NCj4gPiAtVGlydQ0KPiA+DQo+ID4gPg0KPiA+ID4gPg0KPiA+ ID4gPiBDaGVlcnMsDQo+ID4gPiA+IC1UaXJ1DQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4g PiA+DQo+ID4gPiA+ID4gPiAoYikgRG8gbm90IGFmZmVjdCB0byAiRWZmaWNhY3kgVXBkYXRlIg0K PiA+ID4gPiA+ID4gICBhY2wtbGlzdChhY2wtbmFtZSwgYWN0aXZhdGlvbi10eXBlKSB3b3VsZCBi ZSBpZ25vcmVkDQo+ID4gPiA+ID4gPiAgIGF0ICJFZmZpY2FjeSBVcGRhdGUiIHN1Y2Nlc3Mgb3Ig cmVqZWN0Lg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gQWdyZWUuIFdlIGFyZSBub3QgdXBk YXRpbmcgdGhhdCBwYXJ0IG9mIHRoZSBzaWduYWwgY2hhbm5lbA0KPiA+ID4gPiA+IHNwZWMuIGFj bC0NCj4gPiA+ID4gbGlzdA0KPiA+ID4gPiA+IGNsYXVzZXMgd29uJ3QgYmUgaW5jbHVkZWQgaW4g dGhlIGVmZmljYWN5IHVwZGF0ZS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ IChjKSBHRVQgcmVzcG9uc2Ugb2YgTWl0aWdhdGlvbiBSZXF1ZXN0DQo+ID4gPiA+ID4gPiAgIGFj bC1saXN0KGFjbC1uYW1lLCBhY3RpdmF0aW9uLXR5cGUpIHdvdWxkIG5vdCBiZSBpbmNsdWRlZA0K PiA+ID4gPiA+ID4gICBvbiByZXNwb3NlIG9mIEdFVCBNaXRpZ2F0aW9uIFJlcXVlc3QuDQo+ID4g PiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBZZXMuIFdpbGwgYmUgbWFrZSB0aGlzIGNsZWFyIGluIHRo ZSBkcmFmdC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IChkKSBJbiBERUxF VEUsIG5vIGJlaGF2aW9yKGV4OiByb2xsYmFjaykgZm9yIGFjbC1saXN0Lg0KPiA+ID4gPiA+DQo+ ID4gPiA+ID4gW01lZF0gWWVzLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+IEJlc3QgUmVnYXJkcywNCj4gPiA+ID4gPiA+IFRha2FoaWtvIE5hZ2F0YQ0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+ID4gPiA+ID4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4gPiA+ ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9kb3RzDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4gPiA+IERvdHMgbWFpbGluZyBsaXN0 DQo+ID4gPiA+ID4gRG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vZG90cw0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+ID4gRG90cyBtYWlsaW5nIGxpc3QNCj4gPiBEb3RzQGlldGYu b3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IERvdHMgbWFp bGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9kb3RzDQo= From nobody Fri Jan 18 06:49:39 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 781AA127133; Fri, 18 Jan 2019 06:49:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154782297244.17345.14554656320885459219@ietfa.amsl.com> Date: Fri, 18 Jan 2019 06:49:32 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-signal-channel-27.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 14:49:33 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification Authors : Tirumaleswar Reddy Mohamed Boucadair Prashanth Patil Andrew Mortensen Nik Teague Filename : draft-ietf-dots-signal-channel-27.txt Pages : 98 Date : 2019-01-18 Abstract: This document specifies the DOTS signal channel, a protocol for signaling the need for protection against Distributed Denial-of- Service (DDoS) attacks to a server capable of enabling network traffic mitigation on behalf of the requesting client. A companion document defines the DOTS data channel, a separate reliable communication layer for DOTS management and configuration purposes. Editorial Note (To be removed by RFC Editor) Please update these statements within the document with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification"; o "| [RFCXXXX] |" o reference: RFC XXXX Please update this statement with the RFC number to be assigned to the following documents: o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification (used to be [I-D.ietf-dots-data-channel]) Please update TBD/TBD1/TBD2 statements with the assignments made by IANA to DOTS Signal Channel Protocol. Also, please update the "revision" date of the YANG modules. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-signal-channel-27 https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-27 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-27 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jan 18 06:54:54 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 914FE126BED for ; Fri, 18 Jan 2019 06:54:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f-V8TGxHGivm for ; Fri, 18 Jan 2019 06:54:50 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F38DB124D68 for ; Fri, 18 Jan 2019 06:54:49 -0800 (PST) Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 43h3rS0Y7kzFqX8; Fri, 18 Jan 2019 15:54:48 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.3]) by opfedar00.francetelecom.fr (ESMTP service) with ESMTP id 43h3rR6jJ1zCqjj; Fri, 18 Jan 2019 15:54:47 +0100 (CET) Received: from OPEXCAUBM7F.corporate.adroot.infra.ftgroup (10.114.13.98) by OPEXCLILM5D.corporate.adroot.infra.ftgroup (10.114.31.3) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 18 Jan 2019 15:54:47 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7F.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Fri, 18 Jan 2019 15:54:47 +0100 From: To: "Benjamin Kaduk (kaduk@mit.edu)" CC: "dots@ietf.org" Thread-Topic: I-D Action: draft-ietf-dots-signal-channel-27.txt (AD Review) Thread-Index: AdSvPcBkW9shs1KNQl6YfqF6aMTumQ== Date: Fri, 18 Jan 2019 14:54:46 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0A563@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] TR: I-D Action: draft-ietf-dots-signal-channel-27.txt (AD Review) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 14:54:53 -0000 Hi Ben,=20 I'm pleased to share this -27 version which takes into account your AD revi= ew. You can check the diff to track the changes. Thank you again for the detailed review.=20 Cheers, Med > -----Message d'origine----- > De=A0: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] De la part de > internet-drafts@ietf.org > Envoy=E9=A0: vendredi 18 janvier 2019 15:50 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: I-D Action: draft-ietf-dots-signal-channel-27.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the IET= F. >=20 > Title : Distributed Denial-of-Service Open Threat Signa= ling > (DOTS) Signal Channel Specification > Authors : Tirumaleswar Reddy > Mohamed Boucadair > Prashanth Patil > Andrew Mortensen > Nik Teague > Filename : draft-ietf-dots-signal-channel-27.txt > Pages : 98 > Date : 2019-01-18 >=20 > Abstract: > This document specifies the DOTS signal channel, a protocol for > signaling the need for protection against Distributed Denial-of- > Service (DDoS) attacks to a server capable of enabling network > traffic mitigation on behalf of the requesting client. >=20 > A companion document defines the DOTS data channel, a separate > reliable communication layer for DOTS management and configuration > purposes. >=20 > Editorial Note (To be removed by RFC Editor) >=20 > Please update these statements within the document with the RFC > number to be assigned to this document: >=20 > o "This version of this YANG module is part of RFC XXXX;" >=20 > o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Signal Channel Specification"; >=20 > o "| [RFCXXXX] |" >=20 > o reference: RFC XXXX >=20 > Please update this statement with the RFC number to be assigned to > the following documents: >=20 > o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Data Channel Specification (used to be > [I-D.ietf-dots-data-channel]) >=20 > Please update TBD/TBD1/TBD2 statements with the assignments made by > IANA to DOTS Signal Channel Protocol. >=20 > Also, please update the "revision" date of the YANG modules. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-signal-channel-27 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-27 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-signal-channel-27 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From nobody Fri Jan 18 07:06:15 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E16341276D0 for ; Fri, 18 Jan 2019 07:06:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Io7ZWXfr04uR for ; Fri, 18 Jan 2019 07:06:11 -0800 (PST) Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D2101127133 for ; Fri, 18 Jan 2019 07:06:10 -0800 (PST) Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 43h45Y2HRmzFpxd; Fri, 18 Jan 2019 16:06:09 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.24]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 43h45Y17DwzCqky; Fri, 18 Jan 2019 16:06:09 +0100 (CET) Received: from OPEXCAUBM5D.corporate.adroot.infra.ftgroup (10.114.13.60) by OPEXCLILM7D.corporate.adroot.infra.ftgroup (10.114.31.24) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 18 Jan 2019 16:06:08 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5D.corporate.adroot.infra.ftgroup ([fe80::8899:bbc3:9726:cd5e%22]) with mapi id 14.03.0415.000; Fri, 18 Jan 2019 16:06:08 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHCAAAQ70IAAA/zAgAAJc2CAAEc+cIAAKT7g Date: Fri, 18 Jan 2019 15:06:07 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0A586@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09FB4@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 15:06:14 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4gDQoNCkNoZWVycywNCk1lZA0KDQo+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZcKgOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IFtt YWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbV0NCj4gRW52b3nDqcKgOiB2 ZW5kcmVkaSAxOCBqYW52aWVyIDIwMTkgMTQ6NTQNCj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQg VEdJL09MTjsgVGFrYWhpa28gTmFnYXRhOyBkb3RzQGlldGYub3JnDQo+IE9iamV0wqA6IFJFOiBb RG90c10gQ29tbWVudHMgb24gZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDENCj4gDQo+ IEhpIE1lZCwNCj4gDQo+IFBsZWFzZSBzZWUgaW5saW5lDQo+IA0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gQSBNaXRpZ2F0aW9uIHJlcXVlc3Qgd2l0aCAidHJpZ2dlci1taXRpZ2F0aW9uIiBzZXQgdG8g ZmFsc2UgbXVzdA0KPiA+ID4gPiA+IG9ubHkgYmUgc2VudCBpbiB0aGUgcGVhY2UgdGltZSBhbmQg bm90IGR1cmluZyB0aGUgYXR0YWNrIHRpbWUuDQo+ID4gPiA+ID4gRHVyaW5nIHRoZSBwZWFjZSB0 aW1lLCBJIGRvbid0IHNlZSB0aGUgbmVlZCB0bw0KPiA+ID4gPiA+IGFjdGl2YXRlL2RlLWFjdGl2 YXRlIEFDTHMgdXNpbmcgRE9UUyBzaWduYWwgY2hhbm5lbCBwcm90b2NvbC4NCj4gPiA+ID4NCj4g PiA+ID4gW01lZF0gVGhlIHBvaW50IGlzIHRoYXQgdGhlIGNvbnRyb2wgZnVuY3Rpb25hbGl0eSB3 aWxsIGJlIHRoZXJlLiBJdA0KPiA+ID4gPiBpcyB1cA0KPiA+ID4gdG8gdGhlDQo+ID4gPiA+IGNs aWVudCB0byBkZWNpZGUgdG8gdXNlOg0KPiA+ID4gPg0KPiA+ID4gPiAqIGl0cyBkYXRhIGNoYW5u ZWwgdG8gYWx0ZXIgdGhlIGFjbCBhbmQgdGhlbiB3YWl0IGZvciBhIHNpZ25hbA0KPiA+ID4gPiBj aGFubmVsDQo+ID4gPiBub3RpZmljYXRpb24uDQo+ID4gPiA+IFRoZXNlIG5vdGlmaWNhdGlvbnMg bWF5IG5vdCBiZSBzZXQgYnkgdGhlIGNsaWVudC4NCj4gPiA+ID4gKiBpdHMgc2lnbmFsIGNoYW5u ZWwgdG8gYWx0ZXIgdGhlIGFjbC4NCj4gPiA+ID4NCj4gPiA+ID4gV2l0aCB0aGF0IGFwcHJvYWNo IHdlIGRvbid0IG92ZXJsb2FkIHRoZSBzZXJ2ZXIgd2l0aCBleHRyYQ0KPiA+ID4gPiB2YWxpZGF0 aW9uIG9uIHRyaWdnZXItbWl0aWdhdGlvbiB0byBkZWNpZGUgYWJvdXQgdGhlIGJlaGF2aW9yIHRv DQo+IGZvbGxvdy4NCj4gPiA+DQo+ID4gPiBUaGlzIGRyYWZ0IGlzIGludHJvZHVjZWQgdG8gYWx0 ZXIgdGhlIEFDTCB1c2luZyBET1RTIHNpZ25hbCBjaGFubmVsDQo+ID4gPiBvbmx5IGR1cmluZyBt aXRpZ2F0aW9uIHRpbWUgYmVjYXVzZSBkYXRhIGNoYW5uZWwgZG9lcyBub3Qgd29yayBkdXJpbmcN Cj4gPiA+IGF0dGFjayB0aW1lLCBhbmQgQUNMIGFsdGVyYXRpb24gdXNpbmcgRE9UUyBzaWduYWwg Y2hhbm5lbCAgc2hvdWxkIG5vdA0KPiA+ID4gYmUgYWxsb3dlZCBkdXJpbmcgcGVhY2UgdGltZS4N Cj4gPiA+IElmIGFsbG93ZWQsIHRoZSBjbGllbnQgY2FuIHVzZSBib3RoIHRoZSBET1RTIGRhdGEg YW5kIHNpZ25hbCBjaGFubmVscw0KPiA+ID4gdG8gYWx0ZXIgdGhlIEFDTCBkdXJpbmcgcGVhY2Ug dGltZSBhbmQgY2FuIGNyZWF0ZSBpbmNvbnNpc3RlbnQNCj4gY29uZmlndXJhdGlvbi4NCj4gPg0K PiA+IFtNZWRdIElmIHRoZXJlIGlzIGEgcmlzayBvZiBpbmNvbnNpc3RlbnQgY29uZmlndXJhdGlv biwgaXQgd29uJ3QgYmUNCj4gc3BlY2lmaWMgdG8gdGhpcw0KPiA+IGNhc2UgYnV0IGEgZ2VuZXJp YyBvbmUuDQo+IA0KPiBJdCdzIG5vdCBhIGdlbmVyaWMgc2NlbmFyaW8sIHRoZSBpbmNvbnNpc3Rl bnQgY29uZmlndXJhdGlvbiBpcyBiZSBiZWNhdXNlIHR3bw0KPiBwcm90b2NvbHMgYXJlIGFsbG93 ZWQgdG8gYWx0ZXIgdGhlIEFDTCBhdCB0aGUgc2FtZSB0aW1lLg0KDQpbTWVkXSBCdXQgdGhpcyBp cyB3aGF0IHdlIGFyZSBkb2luZyBpbiBkb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy4gSXQg aXMgdHJ1ZSB0aGF0IHdoZW4gYW4gYXR0YWNrIGlzIG9uZ29pbmcsIHRoZSBjbGllbnQgd2lsbCB1 c2UgdGhlIHNpZ25hbCBjaGFubmVsIHRvIGNvbnRyb2wgdGhlIEFDTCwgc3RpbGwgdGhlIG9iamVj dCBpcyBjb250cm9sbGFibGUgZWl0aGVyIGJ5IHNpZ25hbCBvciBkYXRhIGNoYW5uZWxzLiANCg0K PiANCj4gPg0KPiA+ID4gV2h5IHVzZSB0d28gcHJvdG9jb2xzIHRvIGRvIHRoZSBzYW1lIGpvYiA/ DQo+ID4NCj4gPiBbTWVkXSBCZWNhdXNlOg0KPiA+ICogdGhlIGZ1bmN0aW9uYWxpdHkgaXMgdGhl cmUgYW5kIGl0cyB1c2Ugd2lsbCBiZSBmb3IgZnJlZS4NCj4gPiAqIHRoZSBzZXJ2ZXIgY2hlY2tz IGFyZSBzaW1wbGlmaWVkLiBObyBuZWVkIHRvIGRvIGV4dHJhIGNoZWNrcyBiYXNlZCBvbg0KPiA+ ICJ0cmlnZ2VyLW1pdGlnYXRpb24iDQo+ID4gKiB0aGUgY2xpZW50IG1heSBub3Qgc3Vic2NyaWJl IHRvIG5vdGlmaWNhdGlvbi4gUGxlYXNlIG5vdGUgdGhhdCB3ZSBkb24ndA0KPiBoYXZlIGENCj4g PiBNVVNULCBidXQgYSBTSE9VTEQuDQo+IA0KPiBXaXRob3V0IHRoZSBub3RpZmljYXRpb24gZnJv bSB0aGUgc2VydmVyLCBIb3cgd2lsbCB0aGUgY2xpZW50IGtub3cgdGhlIEFDTA0KPiBuZWVkcyB0 byBiZSBhbHRlcmVkID8NCg0KW01lZF0gdGhpcyBpcyBjb3ZlcmVkIGJ5IHRoaXMgcGFydCBpbiB0 aGUgZHJhZnQ6IA0KDQogICBJZiBub3QsIHRoZQ0KICAgcG9sbGluZyBtZWNoYW5pc20gaW4gU2Vj dGlvbiA0LjQuMi4yIG9mDQogICBbSS1ELmlldGYtZG90cy1zaWduYWwtY2hhbm5lbF0gaGFzIHRv IGJlIGZvbGxvd2VkIGJ5IHRoZSBET1RTIGNsaWVudC4NCg0KDQo+IElmIHRoZSBjbGllbnQgZGV0 ZWN0cyB0aGUgd2hpdGUtbGlzdGVkIHRyYWZmaWMgaXMgYXR0YWNraW5nIHRoZSB0YXJnZXQgYnkN Cj4gaXRzZWxmLCBpdCBjYW4gdXNlIERPVFMgZGF0YSBjaGFubmVsIHByb3RvY29sIHRvIGFsdGVy IHRoZSBBQ0wuDQoNCltNZWRdIFllcy4gVGhhdCB3b3VsZCBiZSBzdHJhaWdodGZvcndhcmQsIGJ1 dCB0aGUgY2xpZW50IG5lZWRzIHRvIGdldCBhbiB1cGRhdGUgKGVpdGhlciBieSBub3RpZmljYXRp b24gb3IgYnkgcG9sbGluZyB0aGUgc2VydmVyKS4gIA0KDQo+IGh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1uaXNoaXp1a2EtZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctDQo+ IDAxI3NlY3Rpb24tMS4xIG9ubHkgZGlzY3Vzc2VzIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBpcyB1 c2VmdWwgdG8gYWx0ZXIgdGhlDQo+IEFDTCB1c2luZyBzaWduYWwgY2hhbm5lbCBkdXJpbmcgYXR0 YWNrIHRpbWUsDQo+IFBsZWFzZSBwcm92aWRlIGFuIGF0dGFjayBzY2VuYXJpbyB3aGVyZSBhbGxv d2luZyB0aGlzIGFsdGVybmF0aW9uIHVzaW5nDQo+IHNpZ25hbCBjaGFubmVsIGlzIHVzZWZ1bCBk dXJpbmcgcGVhY2UgdGltZS4NCg0KW01lZF0gWW91IHNlZW0gdG8gbWlzcyBteSBwb2ludCwgVGly dS4gV2hhdCBJJ20gc2F5aW5nIGlzIHRoYXQgdGhlcmUgaXNuJ3QgYSBzaWduaWZpY2FudCBiZW5l Zml0IGluIGFza2luZyB0aGUgc2VydmVyIHRvIGVuZm9yY2UgdmFsaWRhdGlvbiBjaGVja3MgYmFz ZWQgb24gdGhlIHRyaWdnZXItbWl0aWdhdGlvbi4gSWYgdGhlIHNlcnZlciBpcyBhYmxlIHRvIGdl dCBjb250cm9sIHdoZW4gYW4gYXR0YWNrIGlzIG9uZ29pbmcsIGl0IHdpbGwgYmUgYWJsZSB0byBk byBzbyB3aGVuIGZvciBwcmUtY29uZmlndXJlZCByZXF1ZXN0cywgdG9vLiANCg0KV2UgbWF5IHBy b3ZpZGUgYSBndWlkYW5jZSBmb3IgdGhlIGNsaWVudCB0byByZWNvbW1lbmQgZGMgZm9yIHByZS1j b25maWd1cmVkIHJlcXVlc3RzLCBidXQgd2Ugc2hvdWxkIG5vdCBkaXNjYXJkIGNvbnRyb2wgbWVz c2FnZSB3aGVuIHRoZXkgc2hvdyB1cCAoZWl0aGVyKS4gDQoNCj4gDQo+IENoZWVycw0KPiAtVGly dQ0K From nobody Fri Jan 18 11:42:23 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 940F8130EC5; Fri, 18 Jan 2019 11:42:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MoIco27txR6E; Fri, 18 Jan 2019 11:42:19 -0800 (PST) Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-co1nam04on071a.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe4d::71a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F90C131350; Fri, 18 Jan 2019 11:42:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=M0QRR8vvDtrPFmc/OJGGKLE9iUUhIk3KEDlTZE8Ijzc=; b=AULH5pxrJb7tBIcED1SzEgRtPPHkU+f0+58tbIbZmj3FGd1GE3wSAzQh5GqTg/v4hcdC4nSNb4Q+03UnhgTvi/7JPQAMIg4RFBZkzTJbAsnL9tzSWIUgpqm7cON4vZMieuiQIFL7km3RGt4+TnGH6Vngxw7R3hdFAUX9rwv+t60= Received: from CY4PR01CA0012.prod.exchangelabs.com (2603:10b6:903:1f::22) by DM5PR0101MB2986.prod.exchangelabs.com (2603:10b6:4:2e::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1516.17; Fri, 18 Jan 2019 19:42:16 +0000 Received: from DM3NAM03FT005.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::209) by CY4PR01CA0012.outlook.office365.com (2603:10b6:903:1f::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1537.24 via Frontend Transport; Fri, 18 Jan 2019 19:42:16 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT005.mail.protection.outlook.com (10.152.82.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1471.13 via Frontend Transport; Fri, 18 Jan 2019 19:42:15 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0IJgBNj003914 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 18 Jan 2019 14:42:13 -0500 Date: Fri, 18 Jan 2019 13:42:11 -0600 From: Benjamin Kaduk To: "Konda, Tirumaleswar Reddy" CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190118194210.GM81907@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(39860400002)(376002)(136003)(396003)(346002)(2980300002)(13464003)(189003)(199004)(50466002)(8676002)(46406003)(93886005)(1076003)(229853002)(16586007)(5660300001)(54906003)(305945005)(786003)(36906005)(47776003)(53416004)(104016004)(97756001)(336012)(106002)(23726003)(316002)(58126008)(33656002)(26005)(8936002)(246002)(76176011)(426003)(126002)(6916009)(7696005)(956004)(186003)(106466001)(356004)(4326008)(446003)(2906002)(478600001)(53546011)(88552002)(75432002)(11346002)(55016002)(86362001)(26826003)(6246003)(476003)(486006)(5024004)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR0101MB2986; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; DM3NAM03FT005; 1:9w/gBBa8C6giKBqn7VPd+lmZ5EPAxNt3JAGOi+qLBwp8bjMtLR5WyVX3HAJuOWfFE0v7ev505uCClJqpXhRP14qqvtvazRy95Ugt4o+S9W0MzZPOBYfvavZXBeIt84yl X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 534e17a6-30c2-404b-24fa-08d67d7d0cdb X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600109)(711020)(4608076)(4709027)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060); SRVR:DM5PR0101MB2986; X-Microsoft-Exchange-Diagnostics: 1; DM5PR0101MB2986; 3:8vDORkEnKoRszTQBekqtDSLKc8YA8SbYylrkrGqRuT5TkWaV8OJ9wBNLT7wr28YOem+hSFrfw6rx42sTc1eL8B9W0cDISPBfeKqceAJcVdpvfrYNvH6f5tJxXs6nLi9G+O7sYeTAu+BFXFLSnky0LYYUbJIjqPTuRhsmCGScqUo8GrhEiWHqsjcmC6tTmD7qmaM+kSDN8mhyY13vHCeOllO/AqaFdFeJdsdgzl0by7+VIdj2lRnk9N1+s5wwSFC00CbBBEWd9MdMf/SHtMPFKhhhtuP/EQEJjKrlcAk1k0sH6cQ7mrjWNtTN/qjmz6e+ZZeILBMMFuhGKSuoC+w2SJuhwEXzEBjUkEdaMQzNi37m1pXXMQm7i3FsRfMpXFPd; 25:2ePa1aUal/C9Sn3H44HjBK3zEXnYufX7JcQ8lrRpiTvAdFOyJ8/J/fUneoLgsHNEDuSPFitB/iCJJf3Oe7X5vL6QCGK/STckL8lpk6yM9o+QfLDS8aDc4Y7BfVZP2ga7dN1AgcDfOAksywfnrGNOYTpGhJyvTOIL/uSIt5CrWVMm/P6Ka2Y1GAR4gyFzw7fRr9U4VQOUQmN2ULWvMlr82XFXl1BXfwjyirozTAPLP2jJ277Ue9vXF5TeSph5q47LQzX9LhLqVpXrJ/xce9JXLtPY8B8StLZdYzFupL1UcG6m8lHPTeUkiG2oxX2Bcd9jI5mHIuo9QyHKoCKMPrveZA== X-MS-TrafficTypeDiagnostic: DM5PR0101MB2986: X-Microsoft-Exchange-Diagnostics: 1; DM5PR0101MB2986; 31:0HtwNkNE27PBV1hrkZaAfmhqqb7XT78FI6weYglE6FoSx2jXFLGDIcGPmzGAaAP/lZGBoc/BbiyKpZNyPjED74fph83ZQotaYEOpdGATu94z6chsygdKIGpwRfqcA2+WOTRLolnw9vsiHIazi+YS3RRV1Sgc56GS++/42PusHA3mAqSkdoC7gnXj8HDGg76SFCp3dvXB6ANJXu2yb5NGoAfoDT+W+VjC0Wv7pM1LFB0=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; DM5PR0101MB2986; 4:GzqG1BFFLjPf/26jEv91oKS4lwIPH+ZmUSZLZ2RDu4yHMD1fjfbiAsEBZ0CeqqiAEIYWDLMm8ahV4v+WuFfacbBqQv8IoyMyzPgKVx80eIzj8XzDiN8pPh5fUFD8DZumrADnX6aYI6rNaDUCWH1NdXpKLA8CyvNUpd7HSxizT6gN1s1usuRi+5H78O6Kz5e/h5MP4anID4N/pJmdg8p8nR8ecmch+iNbtg0nyJM8a/OUAgQAz+TTI+roJoUuLGXhee86mRV15LCpxFQArWnTvArhqN0z7hCDjB6XfTvlzw4uw99iYo7mgOeWpCbVUaGp X-Forefront-PRVS: 0921D55E4F X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM5PR0101MB2986; 23:JGjblATxSyiVyS7YkJkZqLWS2wt1sFdcDtJdyT6?= =?us-ascii?Q?DL39MBEIUQJhx8sqHVtqdWo5f9LT6uGG92Ain2PpggrroTu0rj4xoJsxj8GQ?= =?us-ascii?Q?+VyN6WjMvcsHb1g1JNT2hoCgxhfwD0M3iztqmcI8Nxwlfqp0kp0haHbX4KN/?= =?us-ascii?Q?I4ZxwrPx/1vQPhYN7qrE55nS4GP8sQU45/AkOs+OeIOtMyxXthfnAQb4EPDw?= =?us-ascii?Q?7ABRGJPfe5sShT7K1r737S8WZ5Clv6Q1lWVltMMGM3kVC/FOwHr4b2hBFrnh?= =?us-ascii?Q?k+/YdbIBj829LOlDkqbr/ZWsdhZK9cvLzUcfu81X6YWhRE5tKRNWAASNd+V/?= =?us-ascii?Q?UCgvd7BPE2OkVK3gbp6nFoLShhvdq6PzcMxdpX6OvMLAuX+DDMVetlqqLQvl?= =?us-ascii?Q?DFv8ltH6bJA7oFqD/kbvm1y6NmczWchJ9BvTCKkgrj0beGwLnte/JnQYEA4l?= =?us-ascii?Q?Jnz8jfjLvXOqgxKokeHGGEV6CHijidATAsJauPQcG595bSs2puSuwEbGEASy?= =?us-ascii?Q?7Z8hYXjnrOPTLS/kDAsjzM8LnH4xdYq/BhwyGmKDHpzH/jUiAHEkkhoCMTHy?= =?us-ascii?Q?x/UAAddFKjY7pONrIvf8F1gV6HemKcXSnUCaxITff3u9QYvlYuDlYXYD1KuF?= =?us-ascii?Q?CE21yPZ3P0SeJmAhQkTkDkXLDtZTpyLPhoYsw30MkPs6vAtz7EvXTIwzeN5t?= =?us-ascii?Q?d9itPeOBcuSdWKI8Xi0BQ04TDjaRTcAcEQfRHsuZhFDssK40kY0792dabNrl?= =?us-ascii?Q?aqWgtnhxEa5cQi+b5/9mEtvgHbOFDqw28sx/qD4W6Gp+MNL4mTiSBmrvRmBj?= =?us-ascii?Q?FA902pfIlISiOC8q2yBMX//oYJr3sMhLek40Ae/cPgOK9KMDN/hab0g5/G4H?= =?us-ascii?Q?hRcWyYZa1wOHwQ82lCUu5VzHoDWkFJRHyjSwAEQD+eK3nam2I0APROcSM7gh?= =?us-ascii?Q?h+WFxGvMayeyvjpgRmwmlq+ZXVcfmpjfC25OO/79t9E1Xc/mE40hTkGMXZDn?= =?us-ascii?Q?mxlZkE5Kv3Fv5GkJJegGh8I0eSvuOehdtUL1GTOG5LKap2TbhIrzrCnDVjUx?= =?us-ascii?Q?sKsoE9Gjmva+ySA91iXcVdUuP0rzxfRBIoT+jKKipyokq9CQgL68dYNCiEnN?= =?us-ascii?Q?KxWBIHWQid52+JiQIXBUV1DgvMR+J5XSXyFbuR9kx/XGXId0zCkAH8Zed12u?= =?us-ascii?Q?4LcnIOXmPGYuF8MKgYw5PD/qZVbP1oUkFgPMLrHqtvwLGgjzMgqZEEJE2hV6?= =?us-ascii?Q?N2qzxp33HZpRktjzbaoM1YOxqgMrvNvIVGY3KBQbTlrcH3L0k88GfZ6IpI23?= =?us-ascii?Q?9kg=3D=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: sZpAiHWXwwEEiLmDPhcaCQ7Ma+XrjqfHgbcQBW2+mTx+GW1DWNhcDjnCYT7icDbmZH4XuKxCxjRktaBugrcfsOioMaGieTh1TOFgIYD9KoNEdZq/4WWJsSN5yfrvFFNfzdOpuMv7YmV0S1MfPW1vocfQImEFDzSTaWNwcQo/c12ighaZEbUKYv5b2ToRTNw4lkyreF8qUJo1Ljf+Y0+94NplpNrbgFaZFEo1EwLzWsO9ueWSBHwaugQ1yzZmKFKw6o3wODNdwlF6vKLG10d7gtwZoIwK2Y48vGhFRINgWae2RWOTMRCXdEK9Mr4G1acxb7r75T4V82K5t7IEDzzlr1Y6MvhxIGIx8NCyIbkFiLeMllarsJkqrZuQK1umSDTiWO+XMl1xtbxKHUfS28JKBx0/R/uOUeFPCT/lI/iNixo= X-Microsoft-Exchange-Diagnostics: 1; DM5PR0101MB2986; 6:WU6GQ1yCHH8ztWMBUwRdI49bl4rxZCR4axedEYWrRr755QUuUPa40dCWkCQgaw3jiROznuwFI7eO+0BmldJtv2hZR7O9LZ9cqT55hWtNzbU9SS+t5o6IfMoLC/LuAd/gSIJmhrM8o7aC8oIsz9SXl4/AhouxRfHjPwV3TJfxvb7xKayt5n8vv9cN+CcbM3WJ3XbGnNqFUcCfxNK8i5rpiMlW1UngNI7UM1p/q0A5/aD//qFRSfDT+REwPBHwJ3qjY2s3UAEnU3Myvnejh8djWbD9iFkl6sJE67qq/nOXQPcb+3vCln5E2CCsZTK+xwY25ImG5HDHWYpgwfyVC0eEE83z7biA1TdJcLnfyHLrYHH3EeP0EF0hQbdhJMqNVZmiBUpB56Qs3ZBvhu+fs3hrEb4wjWSAvX54ZbeRqllJRhBTsx8iZccX5TKdI5Y54Xs0KXvFvS36Wcw9QhN8EH7v6Q==; 5:S/B0i3/lM1PEDFtC29z5jvt4UI1cs1yMtEck6M4v0UedJJQYVaTsGXLBJkVTcKZ+AYuiee8EHdmQvW6j/bJPoeKwGAfluWrqdQXCxDAN2juGbD2rIOjnIGj5UHd0MWovYhzwuDg23pJPRt0kW62Auw78Si7QHhKS0LEqQxE3Tkkkuces3Af04hrOw2sn1oNNtQ7PTLfLfa0usxq7XPUAng==; 7:78stv59Ke+R+g7wMqXMfEdfwdGm1OJAE4PJoqA4sCpMCbLQ+qDsqC6Ohe7y8cX1Re00MajYxTF6IgR9WYFNH8Uk7oFx/3I0jhuMEkNAdfcXfRSvfxfAul51flftD44qdvfOUSbQzHESpqK8UtvE+pw== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jan 2019 19:42:15.5826 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 534e17a6-30c2-404b-24fa-08d67d7d0cdb X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR0101MB2986 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 19:42:22 -0000 On Thu, Jan 17, 2019 at 09:33:23AM +0000, Konda, Tirumaleswar Reddy wrote: > > -----Original Message----- > > From: Dots On Behalf Of > > mohamed.boucadair@orange.com > > Sent: Thursday, January 17, 2019 1:16 PM > > To: Konda, Tirumaleswar Reddy ; > > Benjamin Kaduk ; draft-ietf-dots-signal-channel@ietf.org > > Cc: dots@ietf.org > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) > > > > This email originated from outside of the organization. Do not click links or > > open attachments unless you recognize the sender and know the content is > > safe. > > > > Re-, > > > > OK. > > > > Given that we don't have an explicit mention about this in 8305, I added this > > NEW sentence echoing what was in 6555: > > > > Note that the DOTS client must cache information regarding the > > outcome of each connection attempt, and it uses that information to > > avoid thrashing the network with subsequent attempts. > > Minor change: > > Note that the DOTS client must cache information regarding the > outcome of each connection attempt for a specific time period (e.g. 10 minutes), and it uses that information to > avoid thrashing the network with subsequent attempts. We'll probably get somebody asking why it's not a "MUST", but that's not enough to hold up the IETF LC. -Ben From nobody Fri Jan 18 12:01:14 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E3C2131395; Fri, 18 Jan 2019 12:01:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kB9G2nxac-Kz; Fri, 18 Jan 2019 12:01:03 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0710.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe49::710]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78056131401; Fri, 18 Jan 2019 12:00:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FM9yzE1NWxOADYUckPpYrDKaUu44dbP796jUB7f7k0w=; b=h/6u8OG0AfUtqcEyumlYxR9D3xq41BTFItRIibvW2s0SjQTpMn5ZIGjxWumaM02kpc985Sp6IgY7p5Hlkc09a8QQia5bMw5Q1VFROW9sOvBvd2Ds2hLlNgBT62a6pnYRhNVAgg5q7lhH4UKVVns0i//MupAfSTjkZUPkNox+HfY= Received: from CY4PR01CA0012.prod.exchangelabs.com (2603:10b6:903:1f::22) by DM5PR01MB2442.prod.exchangelabs.com (2603:10b6:3:3b::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26; Fri, 18 Jan 2019 20:00:56 +0000 Received: from DM3NAM03FT009.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::207) by CY4PR01CA0012.outlook.office365.com (2603:10b6:903:1f::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1537.24 via Frontend Transport; Fri, 18 Jan 2019 20:00:56 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT009.mail.protection.outlook.com (10.152.82.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1471.13 via Frontend Transport; Fri, 18 Jan 2019 20:00:56 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0IK0rjb010522 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 18 Jan 2019 15:00:55 -0500 Date: Fri, 18 Jan 2019 14:00:53 -0600 From: Benjamin Kaduk To: CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190118200052.GN81907@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA0846A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0846A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(136003)(396003)(346002)(39860400002)(376002)(2980300002)(189003)(199004)(55784004)(4326008)(53416004)(14444005)(30864003)(8676002)(2351001)(2906002)(186003)(229853002)(26826003)(6246003)(106466001)(246002)(8936002)(5660300001)(1076003)(75432002)(23756003)(305945005)(36906005)(104016004)(486006)(47776003)(426003)(336012)(76176011)(476003)(446003)(956004)(126002)(54906003)(2870700001)(88552002)(106002)(58126008)(356004)(86362001)(786003)(33656002)(316002)(478600001)(6916009)(55016002)(50466002)(26005)(561944003)(7696005)(11346002)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR01MB2442; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; DM3NAM03FT009; 1:ryknSULR742TWxfuZSBDZyI9eOlvgeIVIE8qRngUVMpP8+0+VYuDliXv7UrHFouAaCnA/s9E4ianOld9V5VhOsFE76A398WA+/bYngJIhHKPRbSJWkmwDBm/dxWTDY2T X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 7cb3f5f6-e20a-41f9-2a0f-08d67d7fa8e4 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:DM5PR01MB2442; X-Microsoft-Exchange-Diagnostics: 1; DM5PR01MB2442; 3:0YvGSoz6nQUOlqVC6Jmev5JJF1GcfHSvFPlxPZw5adhMniQMPy88fUdDqDVJjo+XAZFZ4UYHYMWkT0lmQ/+gw0fjvfwctykBqj9HOQN6mYxX8DvCzNpuYfH+bImxNrz/OGZG87c9YdoDwl30i9Tqrckyir+SeZg/VINpfbUel/+KseBWnbGrcL7ZH2g3KNw90ap9nzsWfONs1gTWqqIhK1H+Wndw3lZlny3xfcLuUUyERn7FW8wWEgtcFn0U5hirhpL/laRCdPCjHkLO7wM3+RaDWoxKY8Br1vw3+Yz7aIx5XOMirUyBCv4Ubin/1I+5aLLOwREndoDEQ12bticvLkbTYDRgRoIs7FdYpKWhJfh0NX/uwdWAeL4aKgElrNg2; 25:rr/F55KmN2u+nVv1S7b37uSF4RxXs9cYiQBsce7BEF/XZB3yyKNDGWO5vuQDlHrCqOLcOAPnpB080zrnsM/6OmyCGJcaypitEP5eGYgfqP3mlwOPqAdaq6q44zcvt/KKfpD2B916Cm+NSH2rpivGKtMq9utEUElk9ml4piGCVZOA11kKv/FMY2Bp2iwCLAiiNjFs02TuJbkKoIPOW4MNoPUip4ASMbm6GDYPE9RgBGQdjsKPR180J0rgp7z6/aoOYdDES0YNVI11HBpn7RLQ+r1JbLWyHmjbgzEE5XaxcU2JFE1ojef/5M93zGm+bEu0xeWl6HnQAvqhBha2MtMl0Q== X-MS-TrafficTypeDiagnostic: DM5PR01MB2442: X-Microsoft-Exchange-Diagnostics: 1; DM5PR01MB2442; 31:f+xNUrgZ/f6haXBFX+NbsUy/ecJqHcpZuHlUEUnoCliQxOqhIsvWVhT1iNOIDdNv66ePRZDFrM3Lw0qzUWI2pzzE1026P4qysUrET9VFydYI5W/pr2qZ9JL/DTvGOIYLz2Vg0HNaEY9hzYHj9xX8eOrSsBWe3aIqkRGlPqJZ2C7nx99viQAdKttwEK/ceZSBYfXMuginbaAY/3tU+oflwWX0uLclVUiNdkDmTQrmGLg=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; DM5PR01MB2442; 4:yqzv4gfuI4jFgr+eSSPdpGF7P1WMYmnQH37adz1GS9Fwc97GvCjMWOznyZ+LEaTEtqYYub68FQEr8d6INcQXW3KbsMcbd0uCt19csJQ75/am6yB8VR3ceIp6SewN3hs2qH+L1csyuFQiHaL/k/O74BgBX2CNDigIw8i940Q16LwxFSYDTc00urACLX1qCmBqaKSkaqmU62otC/NfTMi+g3jjg+7rPeojhXC5Qf+uinec8biYZ0upYHAfqXHPCvgL+YgkSG47H7giWes/DDh5URePUwNI6mSChXCkOSFFz7lQ82mSOufk27CsJ4KMadgP X-Forefront-PRVS: 0921D55E4F X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; DM5PR01MB2442; 23:g6S7QrLi4FqkyrJdiULO19mRw7iOPhmB3nl032Q?= =?iso-8859-1?Q?anrknd629lnmPdWYr1FPhIF0Su82imwGNxp1N5GvcSYsmLKIQpJPKzd7Yb?= =?iso-8859-1?Q?5j3clhCfEjFtmqjoYwwyAd5f0LiqcCe0TnnnrfzJ7ZbjbXl5hAtb82SDmZ?= =?iso-8859-1?Q?Syl/z3qqq2GT94880sRlCM/Y63pn3wyIRl7znCCTNz1Yq9UxWgjj4js7ng?= =?iso-8859-1?Q?89J0FbqgWd+e57o4U8UZkt5/alhi18Dd5y0Ia/rD5/wf2iQNkYM1wL4K7D?= =?iso-8859-1?Q?G9X/t8ACiaXvPFNa3G8RRo51YtYjHJpW1nssNQFPXf8+bp0B9z4HaZVuSm?= =?iso-8859-1?Q?H3ezrFNPT0fMJaoaNRnpLo4yS3PSGMDL1SLi8gaKldI+p5mCmnH5/cq/sP?= =?iso-8859-1?Q?sKy92c1e+okxogACnoDoSeaKD64ONQOSRSINdAqpgscy6T8V8h4h8Haaie?= =?iso-8859-1?Q?nJt4CzQjuN9ABxKOpDKRiCKfSxa5DcJCibo23J3Wy/uUCkwsGCkXYjgo/R?= =?iso-8859-1?Q?D4hgun6TCAbvdq1YcZv6LBRYgMEgXTptBoM7xZ9Q0FvOTo3Q9qZMbQfaKi?= =?iso-8859-1?Q?ktn0XMPxEIgoq9Tw6avxJ2R2nEnEbacR9Bh5hrNjl9s7f20C7Hh9KAJJbH?= =?iso-8859-1?Q?SQAGkXMcZa2yKWG4BobOoOJnumboRXxvpnS19dcwT/09XH4Na762MvwHO8?= =?iso-8859-1?Q?c5+gbE2aRj3jxmm1ScaR9k2lFSJw4hmMQ+lV0LPHESLZQi9EPieItfSn7P?= =?iso-8859-1?Q?RTgjQId8jnm76EdEnInFfm9WIo5DjgeFf8cpO/O19YIoVwua9VcewPdOfZ?= =?iso-8859-1?Q?natj6XSUcSq53JT6bCyintF7VvY8Lkf2Ps7S6f1qvhtrypPsDPf5HC/p1X?= =?iso-8859-1?Q?9jHQ7jPMlKeaiOe57kJrsZuqCOjENNWfLnibirmOF7iDJbkBYjeaGxlq15?= =?iso-8859-1?Q?u5vw60yY/RpgLCxd8Uwt5m/tY3tQcsykpTnS4qEBL7+wAHWgdQlDPaBghq?= =?iso-8859-1?Q?3s24/IkS9ByjP/Lzizin1qmiaWjxHI8JiKRG+6oFZfQhbNImjvK1oQ+k36?= =?iso-8859-1?Q?gR8cSaCMwsvUxSIAnZmD0eEdeig3qWpTfBY3IOzBYb6fbT1cYfOMjfCq+N?= =?iso-8859-1?Q?gIexuZNPhPysGE7XGyTQU9tfsVvTR2RiUZCPL5jV4iewalDdbMDlNTDaZU?= =?iso-8859-1?Q?ihwKgjKofD7peIvFGSuH4qth7Xui9oaWC8Hy0YLTJbuKmHXvJ/Lyek9wYY?= =?iso-8859-1?Q?C/bVtm/KkGQX+bAVlbm38Au9HUYjUnvE4jnuCfW1G/ZUnkr6JlQ1Vahqlj?= =?iso-8859-1?Q?np60UrlnXgi1w5wur9Y89GF?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: UrmImV8NhlmWeeYaUCt/aWtMqWTQNv81+0aru3f+KJquEM+g9ZXET/ZkAfTgDTtItp9WEY5jhCow58uX8cBHJf3Z6L7/sL721rZe1Er1mL0rKmXfSN22ad9rZWyr6xiqS14jKRyKOJHDG4MW4c/sgkjvt0p8LgfJh7Cuk1d15yp6Poz3ksHi3WjAQcBtHSxhGOMaiv/+qvJs+BhWUVWNxgyVZs0vVWR0/EhTkY40z85Lr7uyFy0qYfpuLQ64smz2tNc3IWSfREFCTeJ0Tod5HIRKho3sYCHV/BZC7r/AD4dkSF0d5wz/GVkVib3GUHhQdA2XxjEPgvX9lEMuA+lYkCi09p0gZAnDiS1M1vPfu7R+1dozwm0sPCQ0gwjRhvCwncmdPXSfZCjUnsBnAoebH7BU1ED0n5VCpssh3b/nHhU= X-Microsoft-Exchange-Diagnostics: 1; DM5PR01MB2442; 6:pQ2psDx8BphiLmKS1yRbqw4fW1RbeyKpvf0f7jc0ZVb305JIqIENs3FTH4t+UF5kYReme1lPCdKfRxFqEFVxIO8u8EvJZP5LKM3k1UIr0Z0VGCmCt2zYU+SL7EjVzAl8pW+7EOmz7EMoMolhelP8XYIMW/xRj11tHHEB6afG917mI3w9yU4rLMqQNr5mKgIXMvsnzZ4uwOHtxsVbkZ8dqB/q9JbD2ie8roTyi66qav8CVzd0l/18cdCW6Fzzfh3m8gW5kyArrJPFnbktIi5O/web4hh19HHhywKza/CKQkRCr08TilXBMidNdfBsQ7Z5c4aawEm+e20ID8MvRRvM/SbEcBP3RQc/vbRcwQOVl1hdGMcxcHTIKHhyR4YPbKQTXrz1E2ShKsP6RMIzT81ATvp2igkxmo2C7aJQj5vgIdsPH5QWSuqYxEdp51RcLXZZRwG7EwhvJsQ+rUYy8+F5+w==; 5:sJ/+Bye4VnlyTjEdLfBwIVksx+AfJHXw7lEu71S4Hm+PHYWfEoOCwNDhT/owHX66j4Mh2iUIfR7wtRsyN6afavrI6iUvn+G0AXCBppMLcM5EaEdf1kuyCdMwpeAJ78ktsdve7vu528fC/9RDzeUjuWPgIaugxq9P504vjGEItoj5ry+hLdg62YEjaQm9PCgCE1SQqDQP9S3Gw7/kSIjECw==; 7:MHaRtwEKgC+CkT5rVgG0TqjjusM5Zi66N9a6RDPSNnKEmIiLqLqzC5723hSk3MkwhHtkdWp4Rh9yDeDZ5lB89wI28XnFLcPf2Hilhz+BH256Njt2pRlTFDnuhAEYI9RLHSSMgPXb9TgMFnU0ujKWsA== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jan 2019 20:00:56.4847 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 7cb3f5f6-e20a-41f9-2a0f-08d67d7fa8e4 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR01MB2442 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (4th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 20:01:13 -0000 On Wed, Jan 16, 2019 at 03:29:45PM +0000, mohamed.boucadair@orange.com wrote: > Re-, > > Please see inline. > > Cheers, > Med > > > -----Message d'origine----- > > De : Benjamin Kaduk [mailto:kaduk@mit.edu] > > Envoyé : mercredi 16 janvier 2019 01:14 > > À : draft-ietf-dots-signal-channel@ietf.org > > Cc : dots@ietf.org > > Objet : AD review of draft-ietf-dots-signal-channel-25 > > > > > > Section 4.4.3 > > > > I'm not questioning the decision, but I am a bit curious how we ended up > > with a boolean "attack-status" parameter and no quantitative > > measurements. > > > > [Med] This is not a Boolean. The attack-status reflects the status as observed by the client. Actually, we restricted the information to the minimum information that can be reported by the client without leaking privacy/local information that may be subject to local policies at the client domain. > > > The DOTS server indicates the result of processing a PUT request > > using CoAP response codes. The response code 2.04 (Changed) is > > returned if the DOTS server has accepted the mitigation efficacy > > update. The error response code 5.03 (Service Unavailable) is > > returned if the DOTS server has erred or is incapable of performing > > the mitigation. > > > > What (if anythin) should the client do in response? Should the client > > assume the server is dead and move to a different one? > > [Med] 5.03 uses Max-Age option to indicate when to retry. This is discussed in RFC7252. I can update the text if you think this is helpful to remind this. > > > > > Section 4.4.4 > > > > terminating period SHOULD be set by default to 120 seconds. If the > > client requests mitigation again before the initial active-but- > > terminating period elapses, the DOTS server MAY exponentially > > increase the active-but-terminating period up to a maximum of 300 > > seconds (5 minutes). > > > > Is the base of the exponent supposed to be 2 (i.e., a doubling of the > > delay)? This should probably be made explicit. > > [Med] Done. Thanks. > > Also, is the input to > > the doubling the previous total delay, or the amount of delay remaining > > when the repeated request arrives? > > [Med] The server sets active-but-terminating, then if it receives a request before that timer expires, it doubles the active-but-terminating and so on. The server repeats this process at most for 5 minutes. > > > > > If a mitigation is triggered due to a signal channel loss, the DOTS > > server relies upon normal triggers to stop that mitigation > > (typically, receipt of a valid DELETE request, expiry of the > > mitigation lifetime, or observation of traffic to the attack target). > > > > I think "observation of traffic" probably needs more explanation -- as > > written, it sounds like any packet arriving would be sufficient, which > > is probably not the intended behavior... > > [Med] We meant "inspecting the traffic", but avoided to use the word because this term is not well perceived. > > I can update the text If you are OK with "inspecting". I would be, but Tiru's note about "scrubbing" is better. > > > > Section 4.5.1 > > > > Does the "max-retransmit" value exclude the initial transmission? > > [Med] Yes. > > > > > I'm not sure whether there are any particularly interesting security > > considerations to mention about what happens when ack-random-factor is > > insufficiently random; it seems like things would only get really bad if > > the value was constant across peers. > > > > [Med] A brief discussion on this change's impact can be found in Section 4.8.1 of RFC7252. > > > Section 4.5.2 > > > > A DOTS client MUST NOT > > transmit a "CoAP Ping" while waiting for the previous "CoAP Ping" > > response from the same DOTS server. > > > > Is this intended to block retransmissions of the same CoAP Ping? > > [Med] This is intended to block retransmission before the retransmission timeout expires. > > > > > > sid: Session Identifier is an identifier for the DOTS signal channel > > session configuration data represented as an integer. This > > identifier MUST be generated by DOTS clients. 'sid' values MUST > > increase monotonically. > > > > What event triggers the increase? > > [Med] Send a PUT request for configuration purpose. > > > > > Section 4.5.3 > > > > When a DDoS attack is active, > > refresh requests MUST NOT be sent by DOTS clients and the DOTS server > > MUST NOT terminate the (D)TLS session after the expiry of the value > > returned in Max-Age Option. > > > > It seems like there's a bit of a race condition with attacks and refresh > > requests coming in in parallel. > > > > [Med] Is there any change that you see to the text? I don't think so -- it's only an issue if the server decides to enforce the "refresh requests MUST NOT be sent", but we don't say anything to indicate that it should do such enforcement. > > Section 4.6 > > > > The DOTS server can return the error response code 5.03 in response > > to a request from the DOTS client or convey the error response code > > 5.03 in a unidirectional notification response from the DOTS server. > > > > Just to check my understanding, this unidirectional notification would > > only happen if there was a previous Observe to establish the channel? > > [Med] Yes. > > > > > The "alt-server-record" description here is pretty vague on the string > > formatting used, v4 vs. v6, etc.; > > [Med] "IP addresses" is used on purpose to refer to both IPv4 and IPv6 addresses. > > I guess that the actual "type > > inet:ip-address" in the YANG module is probably specific enough, though. > > > > [Med] Yes, indeed. > > > > Section 4.7 > > > > The first two paragraphs seem to have high overlap and would probably > > benefit from at least being joined together if not also trimmed down a > > bit. > > [Med] Joined together in the my local copy with the 2nd para which starts now with "Concretely, ". > > > > > In case of a massive DDoS attack that saturates the incoming link(s) > > to the DOTS client, all traffic from the DOTS server to the DOTS > > client will likely be dropped, although the DOTS server receives > > heartbeat requests in addition to DOTS messages sent by the DOTS > > client. In this scenario, the DOTS agents MUST behave differently to > > handle message transmission and DOTS session liveliness during link > > saturation: > > > > Do we need to say how the agents independently detect the > > link-saturation situation? > > > > [Med] When the agents are aware that an attack is ongoing, they will infer links are likely to be saturated. Okay. > > Section 5.1 > > > > It looks like the tree diagram and the module differ about the > > "mandatory false" nature of some nodes, e.g., upper-port. Perhaps the > > tree diagram should be regenerated? > > > > [Med] Will double check. > > > Section 5.2 > > > > I mostly expect some heartburn from various folks about overriding > > protocol number 0's interpretation as the IPv6 hop-by-hop option to mean > > "all protocols", though it will probably be fine in practice. I am > > including a suggested rewording in my editorial changes that may help > > alleviate concerns. > > [Med] Good catch. We can fix this by updating the text to: > > "If 'target-protocol' is not specified, then the request applies to any protocol." > > Will also check your proposal. Thanks. > > > > > Section 6 > > > > I have several thoughts about the CBOR encoding, some of which I > > mentioned in some previous emails. (I also don't have much experience > > with CBOR encoding, so I probably have some things wrong, too...) > > > > It seems that CBOR major type 0 also encodes some width information for > > integers. Do we want to require that the CBOR encoding always uses the > > width that matches the types in the YANG module, or do we permit a > > smaller encoding when the value in question fits? (Presumably the > > answer falls out naturally if we expect people to use off-the-shelf CBOR > > libraries...) > > > > We say that the initial set of key values is comprehension-required; > > does that mean that any other future extensions are necessarily > > comprehension-optional, and there can be no additional > > comprehension-required keys? > > [Med] Future extensions can be either comprehension-required or comprehension-optional. This will depend on each use case. > > > > > It's probably appropriate to make a statement in the initial text here > > about the port number and/or media type indicating that this is the > > syntax used for the top-level object. > > > > I already mentioned that the encoding of the integer form of the key > > values takes a different number of bytes depending on the integer value, > > so I think those keys are rearranged in the -26 (I reviewed the -25). > > [Med] I guess Tiru has already addressed that comment. > > > > > Section 7.1 > > > > A key challenge to deploying DOTS is the provisioning of DOTS > > clients, including the distribution of keying material to DOTS > > clients to enable the required mutual authentication of DOTS agents. > > EST defines a method of certificate enrollment by which domains > > > > I think we need a reference for EST. > > [Med] Done. Thanks. > > > > > o TLS False Start [RFC7918] which reduces round-trips by allowing > > the TLS second flight of messages (ChangeCipherSpec) to also > > contain the DOTS signal. > > [...] > > o TCP Fast Open [RFC7413] can reduce the number of round-trips to > > convey DOTS signal channel message. > > > > These are in something of a specification limbo, as they both appear to > > only be formally defined for use with TLS, but TLS False Start seems to > > have a straightforward extension to DTLS. It may be worth tweaking the > > text a little to acknowledge the situation here. > > [Med] Can you please indicate which tweaking do you have in mind? > > TFO allows to send data in the SYN without waiting for the completion of the 3WHS. Obviously, such delay is specific to TCP. My suggestions, which you can tweak or ignore as you like while waiting for IETF LC review: "TLS False Start is formally defined for use with DTLS, but the same techniques are applicable to DTLS as well." "Being TCP-specific, TCP Fast Open is only suitable for TLS and not DTLS." -Ben From nobody Fri Jan 18 13:03:11 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB7CC1313E5; Fri, 18 Jan 2019 13:03:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v0dipNgZBrHg; Fri, 18 Jan 2019 13:03:07 -0800 (PST) Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680092.outbound.protection.outlook.com [40.107.68.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A86C9130FB4; Fri, 18 Jan 2019 13:03:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=c4fD/T7OFWT+zZhQRdXrNuHgx7revyplJWOcEEy3qG0=; b=S/7Gpj5ijOuG0ZRFor4zakUY8pk3xBhLzamqgaY7j149FSMSxZnx8yVqP8o0iAege2p5aQzFwjGexGig2nHDpBrPH9yxUogOi1P07typzcbKA0i/FTEUKhqim1Mw3AJmMkVx7YVkp7kG0gf8Xq64srX3gCRTOXpHr6zKy+EF+Fg= Received: from BL0PR0102CA0030.prod.exchangelabs.com (2603:10b6:207:18::43) by SN2PR01MB2032.prod.exchangelabs.com (2603:10b6:804:9::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26; Fri, 18 Jan 2019 21:03:04 +0000 Received: from BY2NAM03FT030.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e4a::206) by BL0PR0102CA0030.outlook.office365.com (2603:10b6:207:18::43) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1537.26 via Frontend Transport; Fri, 18 Jan 2019 21:03:03 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by BY2NAM03FT030.mail.protection.outlook.com (10.152.84.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1471.13 via Frontend Transport; Fri, 18 Jan 2019 21:03:02 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0IL2wri031068 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 18 Jan 2019 16:03:00 -0500 Date: Fri, 18 Jan 2019 15:02:58 -0600 From: Benjamin Kaduk To: CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190118210258.GO81907@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(376002)(346002)(396003)(39860400002)(136003)(2980300002)(53754006)(55784004)(189003)(199004)(51444003)(446003)(30864003)(11346002)(2906002)(33656002)(956004)(58126008)(6916009)(356004)(126002)(54906003)(5660300001)(336012)(8936002)(36906005)(476003)(229853002)(966005)(75432002)(186003)(426003)(7696005)(23756003)(316002)(246002)(104016004)(1076003)(486006)(76176011)(786003)(47776003)(8676002)(55016002)(305945005)(106002)(26005)(508600001)(6246003)(106466001)(4326008)(50466002)(2351001)(26826003)(6306002)(53416004)(14444005)(2870700001)(88552002)(86362001)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR01MB2032; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; BY2NAM03FT030; 1:HyrSWJc0K1UieOelUbgsIqp6eWg81TNJpYWX3SNQnTrOPtxH6RobJYhMmPcMd8Dh0PN60pbOg9UIuFnvxA4wlki+I0DuOZj8RJ9EeF5W0jDFeztdRd/rwSYO7CRZxO71 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: ef7d4ce1-5067-4199-e133-08d67d88560c X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:SN2PR01MB2032; X-Microsoft-Exchange-Diagnostics: 1; SN2PR01MB2032; 3:Bdhjj8p3sdXXqzH42KUUn2IkHvCcxHIwEatpuKBFCw7CpAB2QwuwAuclgOWvV4UqYd4b0DpmUNswDDKWYYCKnB5ZEwFWFVSVqXTiKSwPjrXy3bibkp77u8tJAxGdoUs0EZ996btzAqAs1NOmeq7bUd0G2VCzPzIcXQmOC7+wXZ1iNhKGmirLej/YduafolCtatihM4z6dmRO5xA1D6HiHNxb0eUvjMHWQAI+cVnR3lDIzKEF/1uYfpkxLy59CCY4r3hPT/UbhmobKk04lGpsFopSturSdKL+bXvOGxIiFMBFtzvFmxJVN2uM/RMvztag1EGDK+uYt+epYyE2Y15FiJFzBsdgAQEvrT5v0qJU6IcmgFumOPwjIf1gIwMKRQv7; 25:RlWRs2AyJrTROJKybPErX5+YClRHbonw9CPbX6aqaD8yDU/94SaNmaD3Gy0Jq5b0zKeivlVXbf37vNt787g9ib44msCG4lQ5cOjPFq8womGHUCj9nGmghRiAr0m/m3+GKMFchjTFA6A61lwJB2id+8D7ecEmFmW16QZ9xeJpeuPmyrOC/dUYuBAzLhbYRkDwuNJYW5WAnTyH1rDw9NCAj1jfv6/0RuYlMYD2jfNWykFjV/o8rG//SaXEMObsTpRyeB2nvatXZ5KUBmA0QeVgvrRIVYSUdb0Vyl2NaGhzU/cuq/WyevcdNJ9SyhLy5q7GiVE7XE1cN8vAq0J/C48oBA== X-MS-TrafficTypeDiagnostic: SN2PR01MB2032: X-Microsoft-Exchange-Diagnostics: 1; SN2PR01MB2032; 31:6L5O2dc8q8MVexntA21zCLZsBTIo4tReeQZZIXW6+WpueBNpNum6/Om9zqqwsXFtmCQ6djevv44JjKmehveXabaMdqCrIRPxLgKyilixsmDNSl4P4tpVl9IVIqqweSSAo8a6urnRPdjM4QJISctRmXm5ilyT6bEMSqn+B8tHezYHu29+oFH2lMuGqFUudZhZsHDXqRgUO+HhKE1PJecYaEQy6iT52ZKM39K11Ikp1ko=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; SN2PR01MB2032; 4:DYrO3Mf2lBxMXuOvhsfW2ttn/TThxibvP9vVwYidr67Um+Veic0nkM/r0C29AHSwBy1VHhb8HWsjDgvHHVqMj+Nf0p4h9+HQ4ODn7TkWx9yom0xSQhfGyzR+8ivnlWV1WN5epJaUO6mF25+BSfX4E0by+16wx/bFQSxzPruq/ghxbvvNkbygpedm8Vc094lGqV3VrGk1KCeyDzP+/LBus/yWG0H10kDA5kLzLn9Kw6OBGPRpPAWS6H3fhJGcBvSaDliMS3r/X1pbRbMprxaz5cK6ujgzAyQ3p7KjtqqlpDZg6XVIRCIMBmUicvF17vSt X-Forefront-PRVS: 0921D55E4F X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; SN2PR01MB2032; 23:YVVM+aHg1HoNcZuutuhYBpQPwXvb3lt15XTZhON?= =?iso-8859-1?Q?ZyHR0kYz07GbkbYBoiMA1y63EOpcvggBTGsnxJuduNxghMZxIXJlZHVnGq?= =?iso-8859-1?Q?KKsiTooQ3C8kbFkALyI21xkapbmOLfhJUqLbW7ZROEnrFaPxEQHPtAFE6T?= =?iso-8859-1?Q?wQIVTB7aLTzP3wBFpeoh7BNJkVnHJtcICmvpws0Fpe46omfHgRqGYhPQLS?= =?iso-8859-1?Q?azRhvqt4O0ogPgPTNaNbSsj00pAirk1wtvxjO4hmHhezYlPU1naOdCPSG3?= =?iso-8859-1?Q?XUGyrb0Q8FuZjXbJ/oDUzQWfOwechgYcG2QwMd+aBHOKxrm4gjC12KudGc?= =?iso-8859-1?Q?qL0ayKt39BkiV1AZPnEYPNoUdns9mXfwfYrjedLv8WlMxOra0O6uWjyB4M?= =?iso-8859-1?Q?mdxiOCZprDXkWcXHVTBEWPJ9vn9ZfumKo1RR6Wp/DEyeDHePTD6YuoGONu?= =?iso-8859-1?Q?NfDPy3uAI3h5iaYJr3Srtwv8sUXnkaKfL/psOCxTfGmmCvIDnzeh6TF/nz?= =?iso-8859-1?Q?TdYAxSG8YQt0JAx8Gj0hw3Sj+JVDkFfPmNvD/dA93eFgMrSudhtKOSkhHd?= =?iso-8859-1?Q?F6VYdAqAbFhBYvqKAt+tiQi9GvHXX/414xFyRUQ38LoeLdNY01l34W3GvO?= =?iso-8859-1?Q?bDrIGlHxPgtgHNR2JiDU4KvK87JNljq3USR3QcbDhR0RlPM34WJyyUQvJ2?= =?iso-8859-1?Q?TvmrPFW+QTLuD1kkbtqnCOWQlI593QDJ3VMXSuPJz7vpYVmAx8/+Xa8Ss7?= =?iso-8859-1?Q?dukLQuKirIV0FoIZhaLC4geXvQZom4f6jK0PWun4u8Kh+AduNWRVI/FDTQ?= =?iso-8859-1?Q?46S0sB/CfEuW2eUWIWlK2r9bS0gdGNFDVd50uG01xp1xuseO7aABVqbZmS?= =?iso-8859-1?Q?wnGJtCiUEaJ28z0j+fcehq6jrme2y3yiuQUDScWy63slW8u/NrtrUIJh3Y?= =?iso-8859-1?Q?1ZNEaR8G82d6iEZofymJ2tL0qDItnOZS2natyjf1bLJHXQeO4MQtfkubXW?= =?iso-8859-1?Q?EYs8N52OQodULL0HPzIHtLdv6+3VWUJNdv+tQZZG/dxCTY13V0yeFRGtEw?= =?iso-8859-1?Q?iovj+yjxpsIp/Gurf7wxYnaZ5kPiwjkJ8pNPbTkk+hodAUbJBuwfeEjPxd?= =?iso-8859-1?Q?pEfgri1LLZYcpyLsL2Gom7HJRzTyvtcyqtBB6SFWCLM928Cs4IjTrkPtp5?= =?iso-8859-1?Q?2i1f82loRRhGB4a6UmQm2d+1zvlJSN7q5KSxWCzPNyfi16v0OIhv0Zi6hV?= =?iso-8859-1?Q?X3vxi8/Z8TAEXSzqNP3v9BHD6tEKmz9jrQ1t4KHDMFAGDaTOCBDvBJxK7M?= =?iso-8859-1?Q?2mrSmG8tmccy5uOuzGIQgay5eCA2c5ESqDHGRw/1td1yVSlJE09RnBx7/M?= =?iso-8859-1?Q?tn2a7vZjBCS4MFmplKuYIg2nCE0rJ?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: OeCCaXIEZGW52Iqm5jcfJMFvjInmRx/pjr0fepmxWTN5JZFvKpQ8hiVPajevcPUBx50e0EOHYyir+b1MyMKgK/Cq0BCH5gEz/Eus2DWB5WvflVbGQ/CK4bvFK4x3vVn2SWLfB/Xadggbi+k/qPb7A0gYSh8jMsg/yN6xPjViFfbA6ew3caV6gx7TVwm0ecLTZQLvn0j7ZbdAjydANV656j/jn2cS6VSav2CpeHofGsu9PiB8N4Q8jNWFfYRY1jKBcBZ40k7xDGWDCsjEE/kZnJZoN6FHZyT6MIlzXBaMAMII0Ul0t6NxPaxjOGV1JS8eJghoYG3dt6H42JtDKINrOUf8Oh/oI0YjX8EyEh83A11r2+/FZ22etTLsJMVrFsEWKJ/uSNdlZ7oUZzo9VnDt4AXjn8tW8t3KuBhxdJNSykQ= X-Microsoft-Exchange-Diagnostics: 1; SN2PR01MB2032; 6:6sM9jypqryUrizIPWs3MAo7i5tVOstWXFuk3HOob6JD7RN18BogKppO3kEMAuviS6VrUeXTOlVFresf+/H5ACdnuxpBh47sHv4e2AaZQmv540DEksCoxBZopvVotyDvpZxpg9e4u7gcmD/6bMzf8Mi1YlxeyLb0mzHCcWioWl6iHmz+7MtXMhl9XB/m95hWGzzYuUK4EZ58dqv+G+uOj6C0Xm/NAUtHRSkPPHp3Tgg6JhdvvFrA5gadXGKfzJIOKIMbu4uZIU9NRddpESF/VxkOTFnFBwZ5e0aH/d2+4aUL79MwV57+OVPnyfwIhKtT4v5yslGfYzntz1Ts4P3GomQhDqpyP1D2q7YqQPt5VyCgmQTCZQCn4cxY3/Bk7L5sUpTSqmYxpcISIqScSB2Cv33D09411VGkLfOR9po7UPdsWoi6vLCvVrHwEsw296uqYWXMVI/KyonuNDMtsJ7gy+A==; 5:H3MrBsLHWXINJYcueVaiBAGe6vnEJs3Z89Pc6pYU38q8i0KHODT9Y68nPlKokGa0HnzKjusaNDP20NgE70R0d4BUQL4iPfxT1YZ6qqtsKXbkDxUJzayMAH3wbOD+Nhp5dvhQziPEgkCE0Bf8iKzUYdIE3uaCTN141OwyXM8LcTAt9AP931urKIT8tucyNgJ7tv1MAOemx+KXjBZQP1FnHA==; 7:4XB/NnA+CLD0eoT3MsH1yzldni+1ecEmwDwbrsy7zkR39wagdxSrvPpQ6XN1Msc75s2WpIdsqdoSiVa5bHx4a344hrtB7Jiz15jPJybz9aJWNQ/7utu5E98Fi9ulV+yqTDGnEMFt44HAF4jsYkVPiQ== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jan 2019 21:03:02.2681 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ef7d4ce1-5067-4199-e133-08d67d88560c X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR01MB2032 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2019 21:03:10 -0000 Hi all, Thanks for all the edits and the published -27. Assuming I'm actually caught up on all the review/response threads, I think we're pretty close to being able to go to IETF LC -- here's what I see as still left: - We need to settle the risk of needing normative downrefs called out for the last call - I just noticed while reviewing the diff that we also need to say a little more about (D)TLS 1.3 0-RTT data (more below) - It looks like we lost the guidance to the Experts and text about the review mailing list from the IANA Considerations, during the reshuffling around having IANA manage more things Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that "Application protocols MUST NOT use 0-RTT data without a profile that defines its use. That profile needs to identify which messages or interactions are safe to use with 0-RTT and how to handle the situation when the server rejects 0-RTT and falls back to 1-RTT." So we either need to say which client requests are 0-RTT safe (and why) or defer that profile to another document. draft-ietf-dnsop-session-signal is perhaps an example of a document that specifies which messages are/aren't allowed in early data. (draft-ietf-acme-acme is another, but an uninteresting one, since they make every request include a single-use nonce, and all messages are 0-RTT safe.) Our use of increasing 'mid' values may help here, in terms of allowing DELETEs to be safe, but I'd have to think a little more to be sure that requesting mitigation would be safe. (On first glance the session-managemnet bits would not be safe, but I may be missing something.) Further notes inline. On Thu, Jan 17, 2019 at 06:51:04AM +0000, mohamed.boucadair@orange.com wrote: > Hi Ben, > > Please see inline. > > Cheers, > Med > > > -----Message d'origine----- > > De : Benjamin Kaduk [mailto:kaduk@mit.edu] > > Envoyé : mercredi 16 janvier 2019 01:14 > > À : draft-ietf-dots-signal-channel@ietf.org > > Cc : dots@ietf.org > > Objet : AD review of draft-ietf-dots-signal-channel-25 > > > > Section 7.2 > > > > The TLS 1.3 handshake with 0-RTT diagram needs to be > > revisited/refreshed, as RFC 8446 does not look like that. Additionally, > > the usage of PSK as well as a certificate is not defined until > > draft-housley-tls-tls13-cert-with-extern-psk is published. > > I also note that in the diagram as presented, the client is not yet > > known to be authenticated when the server sends its initial (0.5-RTT) > > DOTS signal message. > > > > [Med] Noted. Thanks. > > > Section 7.3 > > > > This whole section seems to only be relevant for UDP usage, so probably > > the "If UDP is used" clause can be dropped and an introductory statement > > added earlier on. > > [Med] Will consider that. > > > > > Path MTU MUST be greater than or equal to > > [CoAP message size + DTLS overhead of 13 octets + authentication > > overhead of the negotiated DTLS cipher suite + block padding] > > (Section 4.1.1.1 of [RFC6347]). If the request size exceeds the path > > MTU then the DOTS client MUST split the DOTS signal into separate > > messages, for example the list of addresses in the 'target-prefix' > > parameter could be split into multiple lists and each list conveyed > > in a new PUT request. > > > > (DTLS 1.3 will have a short header for some packets, that is less than > > 13 octets.) > > [Med] The text is more about 1.2. We can add a 1.3 note if you think it is useful for the discussion. > > > > > Section 8 > > > > We've got some requirements in here about limiting behavior of > > clients/servers when talking to gateways; is knowing about the presence > > of a gateway something that's required to happen out of band or is there > > an in-band way to identify that the peer is a gateway? > > [Med] An agent does not necessary know that it peer is gateway. A gateway is seen as a server for the client, and a client for a server. > > > > > messages from an authorized DOTS gateway, thereby creating a two-link > > chain of transitive authentication between the DOTS client and the > > DOTS server. > > > > This seems to ignore the possibility of setups that include both > > client-domain and server-domain gateways. > > [Med] I updated the text to mention this is only an example. > > > > > DOTS client certificate validation MUST be performed as > > per [RFC5280] and the DOTS client certificate MUST conform to the > > [RFC5280] certificate profile. [...] > > > > This seems to duplicate a requirement already stated in Section 7.1; > > it's probably best to only have normative language in one location, even > > if we need to mention the topic in multiple locations. > > Similarly for the mutual authentication requirement, which we duplicate > > in the second and fourth paragraphs of this section. > > [Med] Good point. Fixed. > > > > > If we don't want to use example.com vs. example.net as sample domains, > > we can also use whateverwewant.example, per RFC 6761. > > [Med] Will maintain the ones already in the draft. Thanks. > > > > > Section 9 > > > > We should mention the media-type allocation in the top-level section. > > [Med] Will fix that. > > > > > "mappings to CBOR" feels confusing to me, since it leaves empty what we > > are mapping from. Perhaps just talking about a registry of "CBOR map > > keys" would be better, both here and in the Section 9.3 intro. > > > > [Med] Unless there is an objection, I can use "CBOR Map Keys". > > > Section 9.3 > > > > I suggest being very explicit about whether new requests for > > registration should be directed to the mailing list or to IANA, as we've > > had some confusion about this elsewhere. > > > > The criteria used by the experts also just lists things they should > > consider, but does not provide full clarity on which answer to the > > question is more likely to be approved. (And yes, I know that this text > > is largely copied from already published RFCs, but we can still do > > better.) > > [Med] Will check this. > > > > > Section 9.3.1 > > > > If we want the value 0 to be reserved we need to say so. > > [Med] 0 is not part of the allocation range. > > > Do we want to say anything about the usage of negative integers as map > > keys? > > > > I suggest not mentioning the postal address, given the recent (e.g.) > > GDPR requirements. > > [Med] Good point. Done. > > > > > Section 9.3.2 > > > > It may be worth mentioning Table 4 here as well. > > [Med] OK. > > > > > Section 9.5.1 > > > > We need to specify which range of values we are asking for an allocation > > from. > > [Med] Added a mention to 0-255 range. > > > > > Section 9.6.1 > > > > As above, specify what range we're asking about. > > [Med] OK. > > > > > I expect the current text to get some IESG (or directorate) feedback > > that the Data Item and Semantics descriptions are repetitive and banal. > > > > Section 9.7 > > > > IIUC, IANA is going to ask if we want this module to be "maintained by > > IANA", so it would be good to have an answer ready even if we don't put > > it in the document text. > > [Med] This is discussed in -26. > > > > > Rate-limiting DOTS requests, including those with new 'cuid' values, > > from the same DOTS client defends against DoS attacks that would > > > > With respect to "new" 'cuid' values, is the server required to remember > > which ones it has seen in perpetuity, or can it time them out > > eventually? > > [Med] The attack vector is a DOTS client which changes frequently its cuid. The DOTS server can set an interval in which the same client cannot present a new cuid. > > > > > Section 10 > > > > The security considerations seem to be taking a narrow focus on the > > requirements for and consequences of specific bits on the wire in the > > signal channel protocol. I think it's appropriate to also include some > > high-level thoughts about the functional behavior of the protocol, > > allowing to signal that an attack is underway and trigger mitigation, > > increasing the availability of services, etc., and the risks that are > > posed by the protocol failing to work properly, whether that means > > letting attack traffic through or improperly blocking legitimate > > traffic. > > [Med] Would a pointer to the architecture/requirements I-Ds be sufficient to cover to high-level aspects? Those documents' security considerations do seem to cover the relevant points, yes. > > > > Section 13.1 > > > > I think the IANA registries should be listed as Informational and not > > Normative references. > > > > [Med] Done. > > > Section 13.2 > > > > Pending resolution of the question about using draft-ietf-core-yang-cbor > > rules or RFC7951+RFC7049, the draft-ietf-core-yang-cbor reference may > > need to be Normative. > > [Med] Please refer to my answer to that question. draft-ietf-core-yang-cbor is informative. > > > > > Given that "URI" is a well-known abbreviation, we may be able to get > > away with not citing RFC 3986. On the other hand, it's not causing any > > harm to leave it in... > > [Med] Will leave it. > > > > > RFC 4632 needs to be Normative, since we need to know CIDR to > > encode/decode target-prefixes. > > [Med] Works for me. > > > > > Similarly, I think that RFCs 6234 > > [Med] This one is not listed as normative because other hash algos may be used. It's a lower-case "recommended", which can probably eke by as descriptive and not a "protocol feature" (see below). > , 7413 > [Med] The support if TFO is not mandatory. It's a SHOULD ("SHOULD implement all of the following items"), though... > , 7589 > [Med] This is a MAY in the spec. It is just fine to leave it as informative. ...per https://www.ietf.org/blog/iesg-statement-normative-and-informative-references/ note 1, "Even references that are relevant only for optional features must be classified as normative if they meet the above conditions for normative references." This does seem to be something we actually need to care about before IETF LC, though, as 7413 is Experimental and not listed in the downref registry (https://datatracker.ietf.org/doc/downref/), so if we leave it as Informational and have to change it later, we'd need to also restart/re-run the IETF LC. > , 7918 > [Med] Idem as TFO. This is Informational (i.e., also susceptible to the downref issue). > , 7924 > [Med] Idem as TFO. (idem x2), though this is standards-track at least, so we have more leeway to move things around later. I think the most expedient thing to do here would just be to relax the requirement for TLS Falst STart, TFO, and Cached Information, perhaps to text like "The following items are additional mechanisms that can reduce the delay required to deliver a DOTS signal channel message, which implementations are encouraged to implement as possible.", but I am open to other suggestions for what to do. > , and 7951 > [Med] this one was not listed as normative because the document lists two ways to do the mapping. Agreed. -Ben > > should also be Normative. > > > > > > -Ben > From nobody Fri Jan 18 18:47:41 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A9FE130ECE; Fri, 18 Jan 2019 18:47:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.854 X-Spam-Level: X-Spam-Status: No, score=-8.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 43dALVCBvmbt; Fri, 18 Jan 2019 18:47:38 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D542C126F72; Fri, 18 Jan 2019 18:47:37 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547866054; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:x-originating-ip: x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:authentication-results: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=3vCxQBm8oCFQ6Ac57fa6QMYt+GJQ8FlEbfC+ck lwW5A=; b=hO6wNgrOSRApOX6dFAcNFG2n4nlTzPffqWEGXxX7 DsI43ZrNUNUtIG6YBPYqbc0RVOJq2ByZxx5GJucUeSEv+Zk6Av rcE2CkLbX+TLVgnrk13jJu2lhhJtnA6pENa84VQ+AEByEnP0JJ OuPf8+A2gcvn2u6Rtmhgz3gFgiy4ALU= Received: from DNVEXAPP1N04.corpzone.internalzone.com (unknown [10.44.48.88]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 3842_26e5_8aeaf9f9_995c_4897_a7f4_464c4c5373ff; Fri, 18 Jan 2019 19:47:33 -0700 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 19:47:33 -0700 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 19:47:32 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 Jan 2019 19:47:32 -0700 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 19:47:32 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2696.namprd16.prod.outlook.com (20.178.197.218) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.25; Sat, 19 Jan 2019 02:47:29 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Sat, 19 Jan 2019 02:47:29 +0000 From: "Konda, Tirumaleswar Reddy" To: Benjamin Kaduk CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part) Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPAAAHjuYAABML0AAAOinHAAR6jJgAAO0pLA Date: Sat, 19 Jan 2019 02:47:29 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118194210.GM81907@kduck.mit.edu> In-Reply-To: <20190118194210.GM81907@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action x-originating-ip: [185.221.69.46] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2696; 6:Z2R9mvGTzD+EvfS+ZUXI/CYfqXLwq56bfuKssqm2eFGYQu3GWW6tfJLZfgndrsswh6PdSjphGYjWMxwVE4D18jdDxSD5DGtul1sQ05HZe24HxwDbBwYTKAhQxd5GEXKMfJSVQHpItMiwidCAFWyMiwowsL08wOc1IUNKkrUX6mxiwP+appGJXYRS+wv0qtapfEKU7kzrjq7VeJZ1l40fJn7DN4QekPg3kCxBdVIlRm0TbCb2CpzjXqrRQmijetYw3NjUSjPXArel422A1kZ2av+QJo5SHz1vMXoeEbRzvdGu6ikAX1IWYQKcAxJe7LYVvnHu68dYFGmTPtgG87aXjvkNHtDKqWr1btnDC6OVugPE3lurrpEebApZn2T1/ksiG/BHl5jbqeLD95xd0I/aRibhrHfdMucW02IUvGclkh1WmOr3REem3mNquAHMcKe8Vm7arMMlHxdDi2+f9Y+kGg==; 5:LQfBH+YWunLBnCaOLPZmV8ILZirGbrSo2P/+BnLb8WxhEb7xpfN83C18R8tRblmaAWIqKr1z/9MdcaXOnPyOfwV1Pvr9UOA8AhfcmKNdqLPgTRvBrxSQmXWd4Ipu6NIpfTYNuflQQ+w2C5rGRZpR2k/k1+5JQwd1BtOHIf76Uu84tLkbBAb5m4148vZvbv31AuNLpvt1Xh8Dzee5sQRUSw==; 7:5gjd3Rlcmr38SNKDG4Y0nvHzHKe1AQUN+mj+5J3RrxiDGmVZCXn49uP99qtvGhndYV2PH3g85BeA5XagBcdU6OnUyPpLlBC5DVBjFKteAzpHGLO9sJcfXqJCbItH6VjfBXuwc9o/Tp3A9124/hVNUA== x-ms-office365-filtering-correlation-id: dea8dc31-4940-4972-7925-08d67db87441 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2696; x-ms-traffictypediagnostic: BYAPR16MB2696: authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-microsoft-antispam-prvs: x-forefront-prvs: 09222B39F5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39860400002)(376002)(366004)(346002)(136003)(32952001)(13464003)(199004)(189003)(2171002)(6246003)(2906002)(4326008)(486006)(446003)(106356001)(33656002)(105586002)(11346002)(316002)(476003)(74316002)(25786009)(53936002)(93886005)(9686003)(71200400001)(71190400001)(186003)(68736007)(102836004)(14454004)(5024004)(256004)(229853002)(97736004)(66066001)(72206003)(478600001)(99286004)(6916009)(53546011)(81166006)(80792005)(6506007)(86362001)(81156014)(8676002)(76176011)(8936002)(55016002)(26005)(7696005)(54906003)(5660300001)(6436002)(305945005)(7736002)(3846002)(6116002)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2696; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: PAzsnrseinRQ9JN2QOFiX1HwT1MDEQt8RbzLqiipEFv5oxnlgLhpmD5cv5V75THKM52KY5g+4++XCXlb0PLIdTh6E2gIJUoXSTRNv+N8DC3a51ZYGQQJy6gUoiEGMeZKOkoWrGbgR0DWqKjVC6MBz3sLQOKSDMl46P7jUz06IU+4cywZPjuEdHPcJXrS9M6i27jWGe6wxTLdpHG71nmQ4jY6egnI9K65Tpa805I7qHKcAyPbyY/P5V9PiM+dQ2I8XMIbtNgNL8bNwnrkgH9om78RV6yxl93RY0hF99RPHjz8+/6eQvE/P0dny/MW3h9QAVpEtw6ApImHXlxJkUrVDSn0KRzm8aufAMdrcopYsh2+4wfQVFo146ojuSkR/z848iNfDWPwoI80G6zyz010K4O4/cVcFg6qrFaBgwmCsOc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: dea8dc31-4940-4972-7925-08d67db87441 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Jan 2019 02:47:29.6575 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2696 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6464> : inlines <6998> : streams <1810493> : uri <2782156> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jan 2019 02:47:40 -0000 > -----Original Message----- > From: Benjamin Kaduk > Sent: Saturday, January 19, 2019 1:12 AM > To: Konda, Tirumaleswar Reddy > Cc: mohamed.boucadair@orange.com; draft-ietf-dots-signal-channel@ietf.org= ; > dots@ietf.org > Subject: Re: AD review of draft-ietf-dots-signal-channel-25 (1st Part) >=20 >=20 >=20 > On Thu, Jan 17, 2019 at 09:33:23AM +0000, Konda, Tirumaleswar Reddy wrote= : > > > -----Original Message----- > > > From: Dots On Behalf Of > > > mohamed.boucadair@orange.com > > > Sent: Thursday, January 17, 2019 1:16 PM > > > To: Konda, Tirumaleswar Reddy > ; > > > Benjamin Kaduk ; > > > draft-ietf-dots-signal-channel@ietf.org > > > Cc: dots@ietf.org > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 > > > (1st Part) > > > > > > This email originated from outside of the organization. Do not click > > > links or open attachments unless you recognize the sender and know > > > the content is safe. > > > > > > Re-, > > > > > > OK. > > > > > > Given that we don't have an explicit mention about this in 8305, I > > > added this NEW sentence echoing what was in 6555: > > > > > > Note that the DOTS client must cache information regarding the > > > outcome of each connection attempt, and it uses that information t= o > > > avoid thrashing the network with subsequent attempts. > > > > Minor change: > > > > Note that the DOTS client must cache information regarding the outcome > > of each connection attempt for a specific time period (e.g. 10 > > minutes), and it uses that information to avoid thrashing the network w= ith > subsequent attempts. >=20 > We'll probably get somebody asking why it's not a "MUST", but that's not > enough to hold up the IETF LC. Yes, will fix. -Tiru >=20 > -Ben From nobody Fri Jan 18 22:32:28 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6592130E68; Fri, 18 Jan 2019 22:32:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.854 X-Spam-Level: X-Spam-Status: No, score=-8.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wJSw37qbV-Ro; Fri, 18 Jan 2019 22:32:24 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C138312F19D; Fri, 18 Jan 2019 22:32:23 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547879539; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=WBU88VU6jPgkIzP7GmAnPOe4INH3AywvHGhJBI iWkrw=; b=P9KfYtdHRKEnNiPI2XGtld5tyLaSCZnfStV1qC9r JOSpaPcXztkM7Ig+7sf0toErALcRrbwRY36UnsPTBPt4ukl2LD Nls1Q5tatfFCTBheUk2MVlyEMbbNWy0MmHdKQ4aBBtEHqLNZaN +T0T9pVfhSEUdjFY2+9OwpP9c3VRkoo= Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6bc7_1396_9a659f25_5551_4bdf_8975_fff609de597f; Fri, 18 Jan 2019 23:32:18 -0700 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 23:32:20 -0700 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 23:32:20 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 Jan 2019 23:32:19 -0700 Received: from NAM03-DM3-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 Jan 2019 23:32:19 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2918.namprd16.prod.outlook.com (20.178.235.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.29; Sat, 19 Jan 2019 06:32:17 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Sat, 19 Jan 2019 06:32:17 +0000 From: "Konda, Tirumaleswar Reddy" To: Benjamin Kaduk , "mohamed.boucadair@orange.com" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuABQDVAAAAzXK9A= Date: Sat, 19 Jan 2019 06:32:17 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> In-Reply-To: <20190118210258.GO81907@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [185.221.69.46] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2918; 6:2cjTxNEXXzw00r9ky4tsd9bSBKsa4MEJ8gKdcIZcCe4wTpPpTuLg5VPli3DvRug1qNb/psZIIEYRrhY7zCHC2KjAHmkx6/taWC8fSjD0l1hxOztg8Bjm9fLozL6xfIEtxr9lNMed0Q040rKRD2q9VjVv9VBtpINNmZU5EgiiSmiKgGmOIBqnZ7QtXFIYfmaC7PfBYWvKkujdspDSKSVDuFClWsb5P2NJLgDRRcRL906Fzu4imaMaXnYmpEdvahExs12IHOkbRUkLjokcCfhg6OpxnUxb1wKyLoc4LXLXNMdui3HkZR/AchLOnbPj4LfHBeCZp3d498xWI2E9I+Qa+m54/jGrKrPHbh7uw/aBz/WzzBuZmoSwRJepFwFzqgEebYaU2+PM/DLC+VhLMx/Lar3A5i6QbwV8FM27z2fh8XYuevbVgUQg+stxwGPaEUeAN9hv6Sv6g2U3A3O2+/ogwA==; 5:nPuMOV45KfxAqXZQ7S/zlodIhUBmwSWIb0mbIteIZzTnuD8YpBZjMvfxJm4FkRxWu+l7qphlG4TH3pdlSFMfzi9NGeRpa6j6vTKO0U8CGuSu+M5WgzRc4jGjdgEUoafoRLMaIKeCh5LBUI4A1aOGbmSrqw8nZLNi/xExUkONCDOVhg3QgryHrLLqHE2CR0DzwQdHjUZAsrCzUNqbsrFVYA==; 7:uufi1+VGMZTW+obSK0GKMlaugPTmIVkh0C6SKpl5n66F6Xi9M08yl8XPnnjDwt45xCp5UU2c7cq8G5gXDUzWBHMeCZJ/pED/ZSN7Hh0BsuJUYsoCZD8Tlu7MJUXBE761CA8leKm4DcFAQz6wppOeOA== x-ms-office365-filtering-correlation-id: d1ac02f4-a754-4adb-5977-08d67dd7dbc9 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2918; x-ms-traffictypediagnostic: BYAPR16MB2918: x-microsoft-antispam-prvs: x-forefront-prvs: 09222B39F5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39860400002)(366004)(136003)(396003)(346002)(13464003)(199004)(189003)(51444003)(32952001)(55784004)(53754006)(446003)(81166006)(68736007)(9686003)(966005)(305945005)(110136005)(316002)(76176011)(6506007)(81156014)(6306002)(8676002)(54906003)(476003)(6436002)(80792005)(2501003)(30864003)(53546011)(71200400001)(71190400001)(97736004)(7736002)(72206003)(229853002)(478600001)(99286004)(86362001)(486006)(55016002)(66066001)(105586002)(6116002)(3846002)(26005)(74316002)(102836004)(25786009)(11346002)(14454004)(33656002)(8936002)(53936002)(5660300001)(4326008)(14444005)(186003)(256004)(106356001)(5024004)(7696005)(2171002)(2906002)(6246003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2918; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 3s4FtHNs6+Q6WEp2kmoCt9GFKpodaJ0E4WFOThfesk6efHS9wLetc/MFgUechI1dPptUxYiHPh9l/55bIyUM3ai/TuRoew6LhgrKHRtnn9arcvCa3oyi1NaulLZbb2RvozJ37aDIbIszFGlJOUnEN3Qn0S+OgsGXU+pCv6oWvjzEttkxRQ67WPGBv31G4PTDjsEL/4ZiM2vbibQFgDkyoK7SCaDM8mUonuuzdWk8gmkfLNc6BdQFChiuRhH+71qX34KwsEFFFuzqs3vO0izbsqKFTrFLgiRs9zY+7WAEnQ01V7p4T0FmhuC7Qu6AWCbqpvi2fF59SN5Na4uW+iN69A6Bu5iYQyL/nZq5dTJnTnonhsTAXd/GNWCyJFH3Vhw0Z+rIBzXZB4MmjmWKD3cV+D0LJyZUsgCAGy8c/0n5owY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: d1ac02f4-a754-4adb-5977-08d67dd7dbc9 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Jan 2019 06:32:17.5988 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2918 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6464> : inlines <6998> : streams <1810508> : uri <2782228> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jan 2019 06:32:27 -0000 SGkgQmVuLA0KDQpQbGVhc2Ugc2VlIGlubGluZQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQo+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEJl bmphbWluIEthZHVrDQo+IFNlbnQ6IFNhdHVyZGF5LCBKYW51YXJ5IDE5LCAyMDE5IDI6MzMgQU0N Cj4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gQ2M6IGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZzsgZG90c0BpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTog W0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDV0 aCBQYXJ0KQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUg b3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4gb3BlbiBhdHRhY2htZW50cyB1 bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93IHRoZSBjb250ZW50IGlzIHNh ZmUuDQo+IA0KPiBIaSBhbGwsDQo+IA0KPiBUaGFua3MgZm9yIGFsbCB0aGUgZWRpdHMgYW5kIHRo ZSBwdWJsaXNoZWQgLTI3Lg0KPiBBc3N1bWluZyBJJ20gYWN0dWFsbHkgY2F1Z2h0IHVwIG9uIGFs bCB0aGUgcmV2aWV3L3Jlc3BvbnNlIHRocmVhZHMsIEkgdGhpbmsNCj4gd2UncmUgcHJldHR5IGNs b3NlIHRvIGJlaW5nIGFibGUgdG8gZ28gdG8gSUVURiBMQyAtLSBoZXJlJ3Mgd2hhdCBJIHNlZSBh cyBzdGlsbCBsZWZ0Og0KPiANCj4gLSBXZSBuZWVkIHRvIHNldHRsZSB0aGUgcmlzayBvZiBuZWVk aW5nIG5vcm1hdGl2ZSBkb3ducmVmcyBjYWxsZWQgb3V0IGZvcg0KPiAgIHRoZSBsYXN0IGNhbGwN Cj4gLSBJIGp1c3Qgbm90aWNlZCB3aGlsZSByZXZpZXdpbmcgdGhlIGRpZmYgdGhhdCB3ZSBhbHNv IG5lZWQgdG8gc2F5IGENCj4gICBsaXR0bGUgbW9yZSBhYm91dCAoRClUTFMgMS4zIDAtUlRUIGRh dGEgKG1vcmUgYmVsb3cpDQo+IC0gSXQgbG9va3MgbGlrZSB3ZSBsb3N0IHRoZSBndWlkYW5jZSB0 byB0aGUgRXhwZXJ0cyBhbmQgdGV4dCBhYm91dCB0aGUNCj4gICByZXZpZXcgbWFpbGluZyBsaXN0 IGZyb20gdGhlIElBTkEgQ29uc2lkZXJhdGlvbnMsIGR1cmluZyB0aGUgcmVzaHVmZmxpbmcNCj4g ICBhcm91bmQgaGF2aW5nIElBTkEgbWFuYWdlIG1vcmUgdGhpbmdzDQo+IA0KPiBSZWdhcmRpbmcg dGhlIChEKVRMUyAxLjMgMC1SVFQgZGF0YSwgUkZDIDg0NDYgbm90ZXMgdGhhdCAiQXBwbGljYXRp b24NCj4gcHJvdG9jb2xzIE1VU1QgTk9UIHVzZSAwLVJUVCBkYXRhIHdpdGhvdXQgYSBwcm9maWxl IHRoYXQgZGVmaW5lcyBpdHMgdXNlLg0KPiBUaGF0IHByb2ZpbGUgbmVlZHMgdG8gaWRlbnRpZnkg d2hpY2ggbWVzc2FnZXMgb3IgaW50ZXJhY3Rpb25zIGFyZSBzYWZlIHRvIHVzZQ0KPiB3aXRoIDAt UlRUIGFuZCBob3cgdG8gaGFuZGxlIHRoZSBzaXR1YXRpb24gd2hlbiB0aGUgc2VydmVyIHJlamVj dHMgMC1SVFQgYW5kDQo+IGZhbGxzIGJhY2sgdG8gMS1SVFQuIiAgU28gd2UgZWl0aGVyIG5lZWQg dG8gc2F5IHdoaWNoIGNsaWVudCByZXF1ZXN0cyBhcmUgMC1SVFQNCj4gc2FmZSAoYW5kIHdoeSkg b3IgZGVmZXIgdGhhdCBwcm9maWxlIHRvIGFub3RoZXIgZG9jdW1lbnQuICBkcmFmdC1pZXRmLWRu c29wLQ0KPiBzZXNzaW9uLXNpZ25hbCBpcyBwZXJoYXBzIGFuIGV4YW1wbGUgb2YgYSBkb2N1bWVu dCB0aGF0IHNwZWNpZmllcyB3aGljaA0KPiBtZXNzYWdlcyBhcmUvYXJlbid0IGFsbG93ZWQgaW4g ZWFybHkgZGF0YS4NCj4gKGRyYWZ0LWlldGYtYWNtZS1hY21lIGlzIGFub3RoZXIsIGJ1dCBhbiB1 bmludGVyZXN0aW5nIG9uZSwgc2luY2UgdGhleSBtYWtlDQo+IGV2ZXJ5IHJlcXVlc3QgaW5jbHVk ZSBhIHNpbmdsZS11c2Ugbm9uY2UsIGFuZCBhbGwgbWVzc2FnZXMgYXJlIDAtUlRUIHNhZmUuKQ0K PiBPdXIgdXNlIG9mIGluY3JlYXNpbmcgJ21pZCcgdmFsdWVzIG1heSBoZWxwIGhlcmUsIGluIHRl cm1zIG9mIGFsbG93aW5nIERFTEVURXMNCj4gdG8gYmUgc2FmZSwgYnV0IEknZCBoYXZlIHRvIHRo aW5rIGEgbGl0dGxlIG1vcmUgdG8gYmUgc3VyZSB0aGF0IHJlcXVlc3RpbmcNCj4gbWl0aWdhdGlv biB3b3VsZCBiZSBzYWZlLiAgKE9uIGZpcnN0IGdsYW5jZSB0aGUgc2Vzc2lvbi1tYW5hZ2VtbmV0 IGJpdHMgd291bGQNCj4gbm90IGJlIHNhZmUsIGJ1dCBJIG1heSBiZSBtaXNzaW5nIHNvbWV0aGlu Zy4pDQoNClRoZSBkcmFmdCBvbmx5IHVzZXMgaWRlbXBvdGVudCByZXF1ZXN0cyAoR0VULCBQVVQg YW5kIERFTEVURSksIGFuZCBDb0FQIGlzIGNhcGFibGUgb2YgZGV0ZWN0aW5nIG1lc3NhZ2UgZHVw bGljYXRpb24gKHNlZSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzI1MiNzZWN0aW9u LTQuNSkgZm9yIGJvdGggY29uZmlybWFibGUgYW5kIG5vbi1jb25maXJtYWJsZSBtZXNzYWdlcy4g IA0KIFsxXSBBbiBhdHRhY2tlciByZXBsYXlpbmcgREVMRVRFIHdpbGwgbm90IGhhdmUgYW55IGFk dmVyc2UgaW1wYWN0LCAyLjAyIChEZWxldGVkKSBSZXNwb25zZSBDb2RlIGlzIHJldHVybmVkIGV2 ZW4gaWYgdGhlIG1pdGlnYXRpb24gcmVxdWVzdCBkb2VzIG5vdCBleGlzdC4NClsyXSBUaGUgdGVj aG5pcXVlcyBkaXNjdXNzZWQgaW4gU2VjdGlvbiA4IG9mIFJGQzg0NDYgc2hvdWxkIHN1ZmZpY2Ug dG8gaGFuZGxlIGFudGktcmVwbGF5IChlLmcuIGFuIGF0dGFja2VyIHJlcGxheWluZyBhIDAtUlRU IGRhdGEgY2FycnlpbmcgYW4gb2xkIG1pdGlnYXRpb24gcmVxdWVzdCByZXBsYWNlZCBieSBhIG5l dyBtaXRpZ2F0aW9uIHNjb3BlKS4gDQoNCj4gDQo+IEZ1cnRoZXIgbm90ZXMgaW5saW5lLg0KPiAN Cj4gT24gVGh1LCBKYW4gMTcsIDIwMTkgYXQgMDY6NTE6MDRBTSArMDAwMCwgbW9oYW1lZC5ib3Vj YWRhaXJAb3JhbmdlLmNvbQ0KPiB3cm90ZToNCj4gPiBIaSBCZW4sDQo+ID4NCj4gPiBQbGVhc2Ug c2VlIGlubGluZS4NCj4gPg0KPiA+IENoZWVycywNCj4gPiBNZWQNCj4gPg0KPiA+ID4gLS0tLS1N ZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRv OmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVyY3JlZGkgMTYNCj4gPiA+IGphbnZpZXIgMjAx OSAwMToxNCDDgMKgOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWxAaWV0Zi5vcmcNCj4g PiA+IENjwqA6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBkcmFm dC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPiA+DQo+ID4gPiBTZWN0aW9uIDcuMg0K PiA+ID4NCj4gPiA+IFRoZSBUTFMgMS4zIGhhbmRzaGFrZSB3aXRoIDAtUlRUIGRpYWdyYW0gbmVl ZHMgdG8gYmUNCj4gPiA+IHJldmlzaXRlZC9yZWZyZXNoZWQsIGFzIFJGQyA4NDQ2IGRvZXMgbm90 IGxvb2sgbGlrZSB0aGF0Lg0KPiA+ID4gQWRkaXRpb25hbGx5LCB0aGUgdXNhZ2Ugb2YgUFNLIGFz IHdlbGwgYXMgYSBjZXJ0aWZpY2F0ZSBpcyBub3QNCj4gPiA+IGRlZmluZWQgdW50aWwgZHJhZnQt aG91c2xleS10bHMtdGxzMTMtY2VydC13aXRoLWV4dGVybi1wc2sgaXMgcHVibGlzaGVkLg0KPiA+ ID4gSSBhbHNvIG5vdGUgdGhhdCBpbiB0aGUgZGlhZ3JhbSBhcyBwcmVzZW50ZWQsIHRoZSBjbGll bnQgaXMgbm90IHlldA0KPiA+ID4ga25vd24gdG8gYmUgYXV0aGVudGljYXRlZCB3aGVuIHRoZSBz ZXJ2ZXIgc2VuZHMgaXRzIGluaXRpYWwNCj4gPiA+ICgwLjUtUlRUKSBET1RTIHNpZ25hbCBtZXNz YWdlLg0KPiA+ID4NCj4gPg0KPiA+IFtNZWRdIE5vdGVkLiBUaGFua3MuDQo+ID4NCj4gPiA+IFNl Y3Rpb24gNy4zDQo+ID4gPg0KPiA+ID4gVGhpcyB3aG9sZSBzZWN0aW9uIHNlZW1zIHRvIG9ubHkg YmUgcmVsZXZhbnQgZm9yIFVEUCB1c2FnZSwgc28NCj4gPiA+IHByb2JhYmx5IHRoZSAiSWYgVURQ IGlzIHVzZWQiIGNsYXVzZSBjYW4gYmUgZHJvcHBlZCBhbmQgYW4NCj4gPiA+IGludHJvZHVjdG9y eSBzdGF0ZW1lbnQgYWRkZWQgZWFybGllciBvbi4NCj4gPg0KPiA+IFtNZWRdIFdpbGwgY29uc2lk ZXIgdGhhdC4NCj4gPg0KPiA+ID4NCj4gPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFBhdGggTVRVIE1VU1QgYmUgZ3JlYXRlciB0aGFuIG9yIGVxdWFsIHRvDQo+ID4gPiAgICBbQ29B UCBtZXNzYWdlIHNpemUgKyBEVExTIG92ZXJoZWFkIG9mIDEzIG9jdGV0cyArIGF1dGhlbnRpY2F0 aW9uDQo+ID4gPiAgICBvdmVyaGVhZCBvZiB0aGUgbmVnb3RpYXRlZCBEVExTIGNpcGhlciBzdWl0 ZSArIGJsb2NrIHBhZGRpbmddDQo+ID4gPiAgICAoU2VjdGlvbiA0LjEuMS4xIG9mIFtSRkM2MzQ3 XSkuICBJZiB0aGUgcmVxdWVzdCBzaXplIGV4Y2VlZHMgdGhlIHBhdGgNCj4gPiA+ICAgIE1UVSB0 aGVuIHRoZSBET1RTIGNsaWVudCBNVVNUIHNwbGl0IHRoZSBET1RTIHNpZ25hbCBpbnRvIHNlcGFy YXRlDQo+ID4gPiAgICBtZXNzYWdlcywgZm9yIGV4YW1wbGUgdGhlIGxpc3Qgb2YgYWRkcmVzc2Vz IGluIHRoZSAndGFyZ2V0LXByZWZpeCcNCj4gPiA+ICAgIHBhcmFtZXRlciBjb3VsZCBiZSBzcGxp dCBpbnRvIG11bHRpcGxlIGxpc3RzIGFuZCBlYWNoIGxpc3QgY29udmV5ZWQNCj4gPiA+ICAgIGlu IGEgbmV3IFBVVCByZXF1ZXN0Lg0KPiA+ID4NCj4gPiA+IChEVExTIDEuMyB3aWxsIGhhdmUgYSBz aG9ydCBoZWFkZXIgZm9yIHNvbWUgcGFja2V0cywgdGhhdCBpcyBsZXNzDQo+ID4gPiB0aGFuDQo+ ID4gPiAxMyBvY3RldHMuKQ0KPiA+DQo+ID4gW01lZF0gVGhlIHRleHQgaXMgbW9yZSBhYm91dCAx LjIuIFdlIGNhbiBhZGQgYSAxLjMgbm90ZSBpZiB5b3UgdGhpbmsgaXQgaXMNCj4gdXNlZnVsIGZv ciB0aGUgZGlzY3Vzc2lvbi4NCj4gPg0KPiA+ID4NCj4gPiA+IFNlY3Rpb24gOA0KPiA+ID4NCj4g PiA+IFdlJ3ZlIGdvdCBzb21lIHJlcXVpcmVtZW50cyBpbiBoZXJlIGFib3V0IGxpbWl0aW5nIGJl aGF2aW9yIG9mDQo+ID4gPiBjbGllbnRzL3NlcnZlcnMgd2hlbiB0YWxraW5nIHRvIGdhdGV3YXlz OyBpcyBrbm93aW5nIGFib3V0IHRoZQ0KPiA+ID4gcHJlc2VuY2Ugb2YgYSBnYXRld2F5IHNvbWV0 aGluZyB0aGF0J3MgcmVxdWlyZWQgdG8gaGFwcGVuIG91dCBvZg0KPiA+ID4gYmFuZCBvciBpcyB0 aGVyZSBhbiBpbi1iYW5kIHdheSB0byBpZGVudGlmeSB0aGF0IHRoZSBwZWVyIGlzIGEgZ2F0ZXdh eT8NCj4gPg0KPiA+IFtNZWRdIEFuIGFnZW50IGRvZXMgbm90IG5lY2Vzc2FyeSBrbm93IHRoYXQg aXQgcGVlciBpcyBnYXRld2F5LiBBIGdhdGV3YXkgaXMNCj4gc2VlbiBhcyBhIHNlcnZlciBmb3Ig dGhlIGNsaWVudCwgYW5kIGEgY2xpZW50IGZvciBhIHNlcnZlci4NCj4gPg0KPiA+ID4NCj4gPiA+ ICAgIG1lc3NhZ2VzIGZyb20gYW4gYXV0aG9yaXplZCBET1RTIGdhdGV3YXksIHRoZXJlYnkgY3Jl YXRpbmcgYSB0d28tbGluaw0KPiA+ID4gICAgY2hhaW4gb2YgdHJhbnNpdGl2ZSBhdXRoZW50aWNh dGlvbiBiZXR3ZWVuIHRoZSBET1RTIGNsaWVudCBhbmQgdGhlDQo+ID4gPiAgICBET1RTIHNlcnZl ci4NCj4gPiA+DQo+ID4gPiBUaGlzIHNlZW1zIHRvIGlnbm9yZSB0aGUgcG9zc2liaWxpdHkgb2Yg c2V0dXBzIHRoYXQgaW5jbHVkZSBib3RoDQo+ID4gPiBjbGllbnQtZG9tYWluIGFuZCBzZXJ2ZXIt ZG9tYWluIGdhdGV3YXlzLg0KPiA+DQo+ID4gW01lZF0gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvIG1l bnRpb24gdGhpcyBpcyBvbmx5IGFuIGV4YW1wbGUuDQo+ID4NCj4gPiA+DQo+ID4gPiAgICAgICAg ICAgICAgICAgIERPVFMgY2xpZW50IGNlcnRpZmljYXRlIHZhbGlkYXRpb24gTVVTVCBiZSBwZXJm b3JtZWQgYXMNCj4gPiA+ICAgIHBlciBbUkZDNTI4MF0gYW5kIHRoZSBET1RTIGNsaWVudCBjZXJ0 aWZpY2F0ZSBNVVNUIGNvbmZvcm0gdG8gdGhlDQo+ID4gPiAgICBbUkZDNTI4MF0gY2VydGlmaWNh dGUgcHJvZmlsZS4gIFsuLi5dDQo+ID4gPg0KPiA+ID4gVGhpcyBzZWVtcyB0byBkdXBsaWNhdGUg YSByZXF1aXJlbWVudCBhbHJlYWR5IHN0YXRlZCBpbiBTZWN0aW9uIDcuMTsNCj4gPiA+IGl0J3Mg cHJvYmFibHkgYmVzdCB0byBvbmx5IGhhdmUgbm9ybWF0aXZlIGxhbmd1YWdlIGluIG9uZSBsb2Nh dGlvbiwNCj4gPiA+IGV2ZW4gaWYgd2UgbmVlZCB0byBtZW50aW9uIHRoZSB0b3BpYyBpbiBtdWx0 aXBsZSBsb2NhdGlvbnMuDQo+ID4gPiBTaW1pbGFybHkgZm9yIHRoZSBtdXR1YWwgYXV0aGVudGlj YXRpb24gcmVxdWlyZW1lbnQsIHdoaWNoIHdlDQo+ID4gPiBkdXBsaWNhdGUgaW4gdGhlIHNlY29u ZCBhbmQgZm91cnRoIHBhcmFncmFwaHMgb2YgdGhpcyBzZWN0aW9uLg0KPiA+DQo+ID4gW01lZF0g R29vZCBwb2ludC4gRml4ZWQuDQo+ID4NCj4gPiA+DQo+ID4gPiBJZiB3ZSBkb24ndCB3YW50IHRv IHVzZSBleGFtcGxlLmNvbSB2cy4gZXhhbXBsZS5uZXQgYXMgc2FtcGxlDQo+ID4gPiBkb21haW5z LCB3ZSBjYW4gYWxzbyB1c2Ugd2hhdGV2ZXJ3ZXdhbnQuZXhhbXBsZSwgcGVyIFJGQyA2NzYxLg0K PiA+DQo+ID4gW01lZF0gV2lsbCBtYWludGFpbiB0aGUgb25lcyBhbHJlYWR5IGluIHRoZSBkcmFm dC4gVGhhbmtzLg0KPiA+DQo+ID4gPg0KPiA+ID4gU2VjdGlvbiA5DQo+ID4gPg0KPiA+ID4gV2Ug c2hvdWxkIG1lbnRpb24gdGhlIG1lZGlhLXR5cGUgYWxsb2NhdGlvbiBpbiB0aGUgdG9wLWxldmVs IHNlY3Rpb24uDQo+ID4NCj4gPiBbTWVkXSBXaWxsIGZpeCB0aGF0Lg0KPiA+DQo+ID4gPg0KPiA+ ID4gIm1hcHBpbmdzIHRvIENCT1IiIGZlZWxzIGNvbmZ1c2luZyB0byBtZSwgc2luY2UgaXQgbGVh dmVzIGVtcHR5IHdoYXQNCj4gPiA+IHdlIGFyZSBtYXBwaW5nIGZyb20uICBQZXJoYXBzIGp1c3Qg dGFsa2luZyBhYm91dCBhIHJlZ2lzdHJ5IG9mICJDQk9SDQo+ID4gPiBtYXAga2V5cyIgd291bGQg YmUgYmV0dGVyLCBib3RoIGhlcmUgYW5kIGluIHRoZSBTZWN0aW9uIDkuMyBpbnRyby4NCj4gPiA+ DQo+ID4NCj4gPiBbTWVkXSBVbmxlc3MgdGhlcmUgaXMgYW4gb2JqZWN0aW9uLCBJIGNhbiB1c2Ug IkNCT1IgTWFwIEtleXMiLg0KPiA+DQo+ID4gPiBTZWN0aW9uIDkuMw0KPiA+ID4NCj4gPiA+IEkg c3VnZ2VzdCBiZWluZyB2ZXJ5IGV4cGxpY2l0IGFib3V0IHdoZXRoZXIgbmV3IHJlcXVlc3RzIGZv cg0KPiA+ID4gcmVnaXN0cmF0aW9uIHNob3VsZCBiZSBkaXJlY3RlZCB0byB0aGUgbWFpbGluZyBs aXN0IG9yIHRvIElBTkEsIGFzDQo+ID4gPiB3ZSd2ZSBoYWQgc29tZSBjb25mdXNpb24gYWJvdXQg dGhpcyBlbHNld2hlcmUuDQo+ID4gPg0KPiA+ID4gVGhlIGNyaXRlcmlhIHVzZWQgYnkgdGhlIGV4 cGVydHMgYWxzbyBqdXN0IGxpc3RzIHRoaW5ncyB0aGV5IHNob3VsZA0KPiA+ID4gY29uc2lkZXIs IGJ1dCBkb2VzIG5vdCBwcm92aWRlIGZ1bGwgY2xhcml0eSBvbiB3aGljaCBhbnN3ZXIgdG8gdGhl DQo+ID4gPiBxdWVzdGlvbiBpcyBtb3JlIGxpa2VseSB0byBiZSBhcHByb3ZlZC4gIChBbmQgeWVz LCBJIGtub3cgdGhhdCB0aGlzDQo+ID4gPiB0ZXh0IGlzIGxhcmdlbHkgY29waWVkIGZyb20gYWxy ZWFkeSBwdWJsaXNoZWQgUkZDcywgYnV0IHdlIGNhbiBzdGlsbA0KPiA+ID4gZG8NCj4gPiA+IGJl dHRlci4pDQo+ID4NCj4gPiBbTWVkXSBXaWxsIGNoZWNrIHRoaXMuDQo+ID4NCj4gPiA+DQo+ID4g PiBTZWN0aW9uIDkuMy4xDQo+ID4gPg0KPiA+ID4gSWYgd2Ugd2FudCB0aGUgdmFsdWUgMCB0byBi ZSByZXNlcnZlZCB3ZSBuZWVkIHRvIHNheSBzby4NCj4gPg0KPiA+IFtNZWRdIDAgaXMgbm90IHBh cnQgb2YgdGhlIGFsbG9jYXRpb24gcmFuZ2UuDQo+ID4NCj4gPiA+IERvIHdlIHdhbnQgdG8gc2F5 IGFueXRoaW5nIGFib3V0IHRoZSB1c2FnZSBvZiBuZWdhdGl2ZSBpbnRlZ2VycyBhcw0KPiA+ID4g bWFwIGtleXM/DQo+ID4gPg0KPiA+ID4gSSBzdWdnZXN0IG5vdCBtZW50aW9uaW5nIHRoZSBwb3N0 YWwgYWRkcmVzcywgZ2l2ZW4gdGhlIHJlY2VudCAoZS5nLikNCj4gPiA+IEdEUFIgcmVxdWlyZW1l bnRzLg0KPiA+DQo+ID4gW01lZF0gR29vZCBwb2ludC4gRG9uZS4NCj4gPg0KPiA+ID4NCj4gPiA+ IFNlY3Rpb24gOS4zLjINCj4gPiA+DQo+ID4gPiBJdCBtYXkgYmUgd29ydGggbWVudGlvbmluZyBU YWJsZSA0IGhlcmUgYXMgd2VsbC4NCj4gPg0KPiA+IFtNZWRdIE9LLg0KPiA+DQo+ID4gPg0KPiA+ ID4gU2VjdGlvbiA5LjUuMQ0KPiA+ID4NCj4gPiA+IFdlIG5lZWQgdG8gc3BlY2lmeSB3aGljaCBy YW5nZSBvZiB2YWx1ZXMgd2UgYXJlIGFza2luZyBmb3IgYW4NCj4gPiA+IGFsbG9jYXRpb24gZnJv bS4NCj4gPg0KPiA+IFtNZWRdIEFkZGVkIGEgbWVudGlvbiB0byAwLTI1NSByYW5nZS4NCj4gPg0K PiA+ID4NCj4gPiA+IFNlY3Rpb24gOS42LjENCj4gPiA+DQo+ID4gPiBBcyBhYm92ZSwgc3BlY2lm eSB3aGF0IHJhbmdlIHdlJ3JlIGFza2luZyBhYm91dC4NCj4gPg0KPiA+IFtNZWRdIE9LLg0KPiA+ DQo+ID4gPg0KPiA+ID4gSSBleHBlY3QgdGhlIGN1cnJlbnQgdGV4dCB0byBnZXQgc29tZSBJRVNH IChvciBkaXJlY3RvcmF0ZSkgZmVlZGJhY2sNCj4gPiA+IHRoYXQgdGhlIERhdGEgSXRlbSBhbmQg U2VtYW50aWNzIGRlc2NyaXB0aW9ucyBhcmUgcmVwZXRpdGl2ZSBhbmQgYmFuYWwuDQo+ID4gPg0K PiA+ID4gU2VjdGlvbiA5LjcNCj4gPiA+DQo+ID4gPiBJSVVDLCBJQU5BIGlzIGdvaW5nIHRvIGFz ayBpZiB3ZSB3YW50IHRoaXMgbW9kdWxlIHRvIGJlICJtYWludGFpbmVkDQo+ID4gPiBieSBJQU5B Iiwgc28gaXQgd291bGQgYmUgZ29vZCB0byBoYXZlIGFuIGFuc3dlciByZWFkeSBldmVuIGlmIHdl DQo+ID4gPiBkb24ndCBwdXQgaXQgaW4gdGhlIGRvY3VtZW50IHRleHQuDQo+ID4NCj4gPiBbTWVk XSBUaGlzIGlzIGRpc2N1c3NlZCBpbiAtMjYuDQo+ID4NCj4gPiA+DQo+ID4gPiAgICBSYXRlLWxp bWl0aW5nIERPVFMgcmVxdWVzdHMsIGluY2x1ZGluZyB0aG9zZSB3aXRoIG5ldyAnY3VpZCcgdmFs dWVzLA0KPiA+ID4gICAgZnJvbSB0aGUgc2FtZSBET1RTIGNsaWVudCBkZWZlbmRzIGFnYWluc3Qg RG9TIGF0dGFja3MgdGhhdCB3b3VsZA0KPiA+ID4NCj4gPiA+IFdpdGggcmVzcGVjdCB0byAibmV3 IiAnY3VpZCcgdmFsdWVzLCBpcyB0aGUgc2VydmVyIHJlcXVpcmVkIHRvDQo+ID4gPiByZW1lbWJl ciB3aGljaCBvbmVzIGl0IGhhcyBzZWVuIGluIHBlcnBldHVpdHksIG9yIGNhbiBpdCB0aW1lIHRo ZW0NCj4gPiA+IG91dCBldmVudHVhbGx5Pw0KPiA+DQo+ID4gW01lZF0gVGhlIGF0dGFjayB2ZWN0 b3IgaXMgYSBET1RTIGNsaWVudCB3aGljaCBjaGFuZ2VzIGZyZXF1ZW50bHkgaXRzIGN1aWQuDQo+ IFRoZSBET1RTIHNlcnZlciBjYW4gc2V0IGFuIGludGVydmFsIGluIHdoaWNoIHRoZSBzYW1lIGNs aWVudCBjYW5ub3QgcHJlc2VudCBhDQo+IG5ldyBjdWlkLg0KPiA+DQo+ID4gPg0KPiA+ID4gU2Vj dGlvbiAxMA0KPiA+ID4NCj4gPiA+IFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWVtIHRv IGJlIHRha2luZyBhIG5hcnJvdyBmb2N1cyBvbiB0aGUNCj4gPiA+IHJlcXVpcmVtZW50cyBmb3Ig YW5kIGNvbnNlcXVlbmNlcyBvZiBzcGVjaWZpYyBiaXRzIG9uIHRoZSB3aXJlIGluDQo+ID4gPiB0 aGUgc2lnbmFsIGNoYW5uZWwgcHJvdG9jb2wuICBJIHRoaW5rIGl0J3MgYXBwcm9wcmlhdGUgdG8g YWxzbw0KPiA+ID4gaW5jbHVkZSBzb21lIGhpZ2gtbGV2ZWwgdGhvdWdodHMgYWJvdXQgdGhlIGZ1 bmN0aW9uYWwgYmVoYXZpb3Igb2YNCj4gPiA+IHRoZSBwcm90b2NvbCwgYWxsb3dpbmcgdG8gc2ln bmFsIHRoYXQgYW4gYXR0YWNrIGlzIHVuZGVyd2F5IGFuZA0KPiA+ID4gdHJpZ2dlciBtaXRpZ2F0 aW9uLCBpbmNyZWFzaW5nIHRoZSBhdmFpbGFiaWxpdHkgb2Ygc2VydmljZXMsIGV0Yy4sDQo+ID4g PiBhbmQgdGhlIHJpc2tzIHRoYXQgYXJlIHBvc2VkIGJ5IHRoZSBwcm90b2NvbCBmYWlsaW5nIHRv IHdvcmsNCj4gPiA+IHByb3Blcmx5LCB3aGV0aGVyIHRoYXQgbWVhbnMgbGV0dGluZyBhdHRhY2sg dHJhZmZpYyB0aHJvdWdoIG9yDQo+ID4gPiBpbXByb3Blcmx5IGJsb2NraW5nIGxlZ2l0aW1hdGUg dHJhZmZpYy4NCj4gPg0KPiA+IFtNZWRdIFdvdWxkIGEgcG9pbnRlciB0byB0aGUgYXJjaGl0ZWN0 dXJlL3JlcXVpcmVtZW50cyBJLURzIGJlIHN1ZmZpY2llbnQgdG8NCj4gY292ZXIgdG8gaGlnaC1s ZXZlbCBhc3BlY3RzPw0KPiANCj4gVGhvc2UgZG9jdW1lbnRzJyBzZWN1cml0eSBjb25zaWRlcmF0 aW9ucyBkbyBzZWVtIHRvIGNvdmVyIHRoZSByZWxldmFudCBwb2ludHMsDQo+IHllcy4NCj4gDQo+ ID4gPg0KPiA+ID4gU2VjdGlvbiAxMy4xDQo+ID4gPg0KPiA+ID4gSSB0aGluayB0aGUgSUFOQSBy ZWdpc3RyaWVzIHNob3VsZCBiZSBsaXN0ZWQgYXMgSW5mb3JtYXRpb25hbCBhbmQNCj4gPiA+IG5v dCBOb3JtYXRpdmUgcmVmZXJlbmNlcy4NCj4gPiA+DQo+ID4NCj4gPiBbTWVkXSBEb25lLg0KPiA+ DQo+ID4gPiBTZWN0aW9uIDEzLjINCj4gPiA+DQo+ID4gPiBQZW5kaW5nIHJlc29sdXRpb24gb2Yg dGhlIHF1ZXN0aW9uIGFib3V0IHVzaW5nDQo+ID4gPiBkcmFmdC1pZXRmLWNvcmUteWFuZy1jYm9y IHJ1bGVzIG9yIFJGQzc5NTErUkZDNzA0OSwgdGhlDQo+ID4gPiBkcmFmdC1pZXRmLWNvcmUteWFu Zy1jYm9yIHJlZmVyZW5jZSBtYXkgbmVlZCB0byBiZSBOb3JtYXRpdmUuDQo+ID4NCj4gPiBbTWVk XSBQbGVhc2UgcmVmZXIgdG8gbXkgYW5zd2VyIHRvIHRoYXQgcXVlc3Rpb24uIGRyYWZ0LWlldGYt Y29yZS15YW5nLWNib3IgaXMNCj4gaW5mb3JtYXRpdmUuDQo+ID4NCj4gPiA+DQo+ID4gPiBHaXZl biB0aGF0ICJVUkkiIGlzIGEgd2VsbC1rbm93biBhYmJyZXZpYXRpb24sIHdlIG1heSBiZSBhYmxl IHRvIGdldA0KPiA+ID4gYXdheSB3aXRoIG5vdCBjaXRpbmcgUkZDIDM5ODYuICBPbiB0aGUgb3Ro ZXIgaGFuZCwgaXQncyBub3QgY2F1c2luZw0KPiA+ID4gYW55IGhhcm0gdG8gbGVhdmUgaXQgaW4u Li4NCj4gPg0KPiA+IFtNZWRdIFdpbGwgbGVhdmUgaXQuDQo+ID4NCj4gPiA+DQo+ID4gPiBSRkMg NDYzMiBuZWVkcyB0byBiZSBOb3JtYXRpdmUsIHNpbmNlIHdlIG5lZWQgdG8ga25vdyBDSURSIHRv DQo+ID4gPiBlbmNvZGUvZGVjb2RlIHRhcmdldC1wcmVmaXhlcy4NCj4gPg0KPiA+IFtNZWRdIFdv cmtzIGZvciBtZS4NCj4gPg0KPiA+ID4NCj4gPiA+IFNpbWlsYXJseSwgSSB0aGluayB0aGF0IFJG Q3MgNjIzNA0KPiA+DQo+ID4gW01lZF0gVGhpcyBvbmUgaXMgbm90IGxpc3RlZCBhcyBub3JtYXRp dmUgYmVjYXVzZSBvdGhlciBoYXNoIGFsZ29zIG1heSBiZQ0KPiB1c2VkLg0KPiANCj4gSXQncyBh IGxvd2VyLWNhc2UgInJlY29tbWVuZGVkIiwgd2hpY2ggY2FuIHByb2JhYmx5IGVrZSBieSBhcyBk ZXNjcmlwdGl2ZSBhbmQNCj4gbm90IGEgInByb3RvY29sIGZlYXR1cmUiIChzZWUgYmVsb3cpLg0K PiANCj4gPiAsIDc0MTMNCj4gPiBbTWVkXSBUaGUgc3VwcG9ydCBpZiBURk8gaXMgbm90IG1hbmRh dG9yeS4NCj4gDQo+IEl0J3MgYSBTSE9VTEQgKCJTSE9VTEQgaW1wbGVtZW50IGFsbCBvZiB0aGUg Zm9sbG93aW5nIGl0ZW1zIiksIHRob3VnaC4uLg0KPiANCj4gPiAsIDc1ODkNCj4gPiBbTWVkXSBU aGlzIGlzIGEgTUFZIGluIHRoZSBzcGVjLiBJdCBpcyBqdXN0IGZpbmUgdG8gbGVhdmUgaXQgYXMg aW5mb3JtYXRpdmUuDQo+IA0KPiAuLi4ucGVyDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL2Jsb2cv aWVzZy1zdGF0ZW1lbnQtbm9ybWF0aXZlLWFuZC1pbmZvcm1hdGl2ZS0NCj4gcmVmZXJlbmNlcy8N Cj4gbm90ZSAxLCAiRXZlbiByZWZlcmVuY2VzIHRoYXQgYXJlIHJlbGV2YW50IG9ubHkgZm9yIG9w dGlvbmFsIGZlYXR1cmVzIG11c3QgYmUNCj4gY2xhc3NpZmllZCBhcyBub3JtYXRpdmUgaWYgdGhl eSBtZWV0IHRoZSBhYm92ZSBjb25kaXRpb25zIGZvciBub3JtYXRpdmUNCj4gcmVmZXJlbmNlcy4i DQo+IA0KPiBUaGlzIGRvZXMgc2VlbSB0byBiZSBzb21ldGhpbmcgd2UgYWN0dWFsbHkgbmVlZCB0 byBjYXJlIGFib3V0IGJlZm9yZSBJRVRGIExDLA0KPiB0aG91Z2gsIGFzIDc0MTMgaXMgRXhwZXJp bWVudGFsIGFuZCBub3QgbGlzdGVkIGluIHRoZSBkb3ducmVmIHJlZ2lzdHJ5DQo+IChodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kb3ducmVmLyksIHNvIGlmIHdlIGxlYXZlIGl0IGFz IEluZm9ybWF0aW9uYWwNCj4gYW5kIGhhdmUgdG8gY2hhbmdlIGl0IGxhdGVyLCB3ZSdkIG5lZWQg dG8gYWxzbyByZXN0YXJ0L3JlLXJ1biB0aGUgSUVURiBMQy4NCj4gDQo+ID4gLCA3OTE4DQo+ID4g W01lZF0gSWRlbSBhcyBURk8uDQo+IA0KPiBUaGlzIGlzIEluZm9ybWF0aW9uYWwgKGkuZS4sIGFs c28gc3VzY2VwdGlibGUgdG8gdGhlIGRvd25yZWYgaXNzdWUpLg0KPiANCj4gPiAsIDc5MjQNCj4g PiBbTWVkXSBJZGVtIGFzIFRGTy4NCj4gDQo+IChpZGVtIHgyKSwgdGhvdWdoIHRoaXMgaXMgc3Rh bmRhcmRzLXRyYWNrIGF0IGxlYXN0LCBzbyB3ZSBoYXZlIG1vcmUgbGVld2F5IHRvDQo+IG1vdmUg dGhpbmdzIGFyb3VuZCBsYXRlci4NCj4gDQo+IA0KPiANCj4gSSB0aGluayB0aGUgbW9zdCBleHBl ZGllbnQgdGhpbmcgdG8gZG8gaGVyZSB3b3VsZCBqdXN0IGJlIHRvIHJlbGF4IHRoZQ0KPiByZXF1 aXJlbWVudCBmb3IgVExTIEZhbHN0IFNUYXJ0LCBURk8sIGFuZCBDYWNoZWQgSW5mb3JtYXRpb24s IHBlcmhhcHMgdG8gdGV4dA0KPiBsaWtlICJUaGUgZm9sbG93aW5nIGl0ZW1zIGFyZSBhZGRpdGlv bmFsIG1lY2hhbmlzbXMgdGhhdCBjYW4gcmVkdWNlIHRoZSBkZWxheQ0KPiByZXF1aXJlZCB0byBk ZWxpdmVyIGEgRE9UUyBzaWduYWwgY2hhbm5lbCBtZXNzYWdlLCB3aGljaCBpbXBsZW1lbnRhdGlv bnMgYXJlDQo+IGVuY291cmFnZWQgdG8gaW1wbGVtZW50IGFzIHBvc3NpYmxlLiIsIGJ1dCBJIGFt IG9wZW4gdG8gb3RoZXIgc3VnZ2VzdGlvbnMgZm9yDQo+IHdoYXQgdG8gZG8uDQoNClRMUyBGYWxz ZSBTdGFydCBhbmQgQ2FjaGVkIEluZm9ybWF0aW9uIGNhbiBiZSBtYWRlIG5vcm1hdGl2ZSByZWZl cmVuY2VzIChqdXN0IGxpa2Ugd2UgcmVmZXJlbmNlZCB0aGVzZSBpdGVtcyBpbiBvdXIgc3BlYyBo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODMxMCkNClRGTyBpcyBmb3IgVENQIG9ubHkg YW5kIHRoYXQgdG9vIGZvciBleGNlcHRpb24gc2NlbmFyaW9zIHdoZXJlIFVEUCBpcyBibG9ja2Vk LiBURk8gY2FuIHJlbW92ZWQgZnJvbSB0aGUgbGlzdCBvZiBpdGVtcyB0aGUgRE9UUyBhZ2VudHMg U0hPVUxEIGltcGxlbWVudC4NCg0KTkVXOg0KQ29tcGFyZWQgdG8gVURQLCBET1RTIHNpZ25hbCBj aGFubmVsIG92ZXIgVENQIHJlcXVpcmVzIGFuIGFkZGl0aW9uYWwgcm91bmQtdHJpcCB0aW1lIChS VFQpIG9mIGxhdGVuY3kgdG8gZXN0YWJsaXNoIGEgVENQIGNvbm5lY3Rpb24uICBJbXBsZW1lbnRh dGlvbnMgYXJlIGVuY291cmFnZWQgdG8gaW1wbGVtZW50IFRDUA0KRmFzdCBPcGVuIFtSRkM3NDEz XSB0byBlbGltaW5hdGUgdGhhdCBSVFQgd2hlbiBpbmZvcm1hdGlvbiBleGlzdHMgZnJvbSBwcmlv ciBUQ1AgY29ubmVjdGlvbi4gDQoNCi1UaXJ1DQoNCj4gDQo+IA0KPiA+ICwgYW5kIDc5NTENCj4g PiBbTWVkXSB0aGlzIG9uZSB3YXMgbm90IGxpc3RlZCBhcyBub3JtYXRpdmUgYmVjYXVzZSB0aGUg ZG9jdW1lbnQgbGlzdHMgdHdvDQo+IHdheXMgdG8gZG8gdGhlIG1hcHBpbmcuDQo+IA0KPiBBZ3Jl ZWQuDQo+IA0KPiAtQmVuDQo+IA0KPiA+ID4gc2hvdWxkIGFsc28gYmUgTm9ybWF0aXZlLg0KPiA+ ID4NCj4gPiA+DQo+ID4gPiAtQmVuDQo+ID4NCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0 Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzDQo= From nobody Sun Jan 20 23:31:35 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AECE7130F70; Sun, 20 Jan 2019 23:31:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xc9COsjfSrnq; Sun, 20 Jan 2019 23:31:32 -0800 (PST) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DB9A130F55; Sun, 20 Jan 2019 23:31:32 -0800 (PST) Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr22.francetelecom.fr (ESMTP service) with ESMTP id 43jjsZ0wB8z10kW; Mon, 21 Jan 2019 08:31:30 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 43jjsY6kZLz8sYn; Mon, 21 Jan 2019 08:31:29 +0100 (CET) Received: from OPEXCAUBM5D.corporate.adroot.infra.ftgroup (10.114.13.60) by OPEXCLILMA2.corporate.adroot.infra.ftgroup (10.114.31.69) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 21 Jan 2019 08:31:29 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5D.corporate.adroot.infra.ftgroup ([fe80::8899:bbc3:9726:cd5e%22]) with mapi id 14.03.0415.000; Mon, 21 Jan 2019 08:31:29 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AQHUr3Ewz5rRJt5UT++zbKjLtGqWuKW2EcuAgAM4YMA= Date: Mon, 21 Jan 2019 07:31:28 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 07:31:35 -0000 SGkgQmVuLCBhbGwsIA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCj4g LS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIg UmVkZHkgW21haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiBFbnZv ecOpwqA6IHNhbWVkaSAxOSBqYW52aWVyIDIwMTkgMDc6MzINCj4gw4DCoDogQmVuamFtaW4gS2Fk dWs7IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE4NCj4gQ2PCoDogZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsQGlldGYub3JnOyBkb3RzQGlldGYub3JnDQo+IE9iamV0wqA6IFJFOiBbRG90 c10gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoNXRoIFBh cnQpDQo+IA0KPiBIaSBCZW4sDQo+IA0KPiBQbGVhc2Ugc2VlIGlubGluZQ0KPiANCj4gPiAtLS0t LU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+IEZyb206IERvdHMgPGRvdHMtYm91bmNlc0BpZXRm Lm9yZz4gT24gQmVoYWxmIE9mIEJlbmphbWluIEthZHVrDQo+ID4gU2VudDogU2F0dXJkYXksIEph bnVhcnkgMTksIDIwMTkgMjozMyBBTQ0KPiA+IFRvOiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tDQo+ID4gQ2M6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRmLm9yZzsgZG90 c0BpZXRmLm9yZw0KPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gQUQgcmV2aWV3IG9mIGRyYWZ0LWll dGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoNXRoDQo+IFBhcnQpDQo+ID4NCj4gPiBUaGlzIGVt YWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6YXRpb24uIERvIG5vdCBj bGljayBsaW5rcw0KPiBvcg0KPiA+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25p emUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcw0KPiBzYWZlLg0KPiA+DQo+ID4g SGkgYWxsLA0KPiA+DQo+ID4gVGhhbmtzIGZvciBhbGwgdGhlIGVkaXRzIGFuZCB0aGUgcHVibGlz aGVkIC0yNy4NCj4gPiBBc3N1bWluZyBJJ20gYWN0dWFsbHkgY2F1Z2h0IHVwIG9uIGFsbCB0aGUg cmV2aWV3L3Jlc3BvbnNlIHRocmVhZHMsIEkgdGhpbmsNCj4gPiB3ZSdyZSBwcmV0dHkgY2xvc2Ug dG8gYmVpbmcgYWJsZSB0byBnbyB0byBJRVRGIExDIC0tIGhlcmUncyB3aGF0IEkgc2VlIGFzDQo+ IHN0aWxsIGxlZnQ6DQo+ID4NCj4gPiAtIFdlIG5lZWQgdG8gc2V0dGxlIHRoZSByaXNrIG9mIG5l ZWRpbmcgbm9ybWF0aXZlIGRvd25yZWZzIGNhbGxlZCBvdXQgZm9yDQo+ID4gICB0aGUgbGFzdCBj YWxsDQoNCltNZWRdIEkgdXBkYXRlZCB0aGUgdGV4dCB0bzoNCiogY2l0ZSA3NjE4Lzc2MjQgYXMg bm9ybWF0aXZlICgrIGluZGljYXRlIHRoYXQgYSBzaW1pbGFyIG1lY2hhbmlzbSB0byBmYWxzZSBz dGFydCBtYXkgYWxzbyBiZSBkZWZpbmVkIGZvciBEVExTKS4NCiogdHdlYWsgdGhlIFRGTyB0ZXh0 IHRvIG1haW50YWluIGl0IGFzIGluZm9ybWF0aXZlLiANCg0KPiA+IC0gSSBqdXN0IG5vdGljZWQg d2hpbGUgcmV2aWV3aW5nIHRoZSBkaWZmIHRoYXQgd2UgYWxzbyBuZWVkIHRvIHNheSBhDQo+ID4g ICBsaXR0bGUgbW9yZSBhYm91dCAoRClUTFMgMS4zIDAtUlRUIGRhdGEgKG1vcmUgYmVsb3cpDQo+ ID4gLSBJdCBsb29rcyBsaWtlIHdlIGxvc3QgdGhlIGd1aWRhbmNlIHRvIHRoZSBFeHBlcnRzIGFu ZCB0ZXh0IGFib3V0IHRoZQ0KPiA+ICAgcmV2aWV3IG1haWxpbmcgbGlzdCBmcm9tIHRoZSBJQU5B IENvbnNpZGVyYXRpb25zLCBkdXJpbmcgdGhlIHJlc2h1ZmZsaW5nDQo+ID4gICBhcm91bmQgaGF2 aW5nIElBTkEgbWFuYWdlIG1vcmUgdGhpbmdzDQo+ID4NCg0KW01lZF0gVGhhdCB3YXMgb24gcHVy cG9zZS4gV2Ugd291bGQgbGlrZSB0byByZWx5IG9uIFJGQzgxMjYgcnVsZXMgZm9yIGRlaWduZWQg ZXhwZXJ0IHJldmlld3MuIA0KDQo+ID4gUmVnYXJkaW5nIHRoZSAoRClUTFMgMS4zIDAtUlRUIGRh dGEsIFJGQyA4NDQ2IG5vdGVzIHRoYXQgIkFwcGxpY2F0aW9uDQo+ID4gcHJvdG9jb2xzIE1VU1Qg Tk9UIHVzZSAwLVJUVCBkYXRhIHdpdGhvdXQgYSBwcm9maWxlIHRoYXQgZGVmaW5lcyBpdHMgdXNl Lg0KPiA+IFRoYXQgcHJvZmlsZSBuZWVkcyB0byBpZGVudGlmeSB3aGljaCBtZXNzYWdlcyBvciBp bnRlcmFjdGlvbnMgYXJlIHNhZmUgdG8NCj4gdXNlDQo+ID4gd2l0aCAwLVJUVCBhbmQgaG93IHRv IGhhbmRsZSB0aGUgc2l0dWF0aW9uIHdoZW4gdGhlIHNlcnZlciByZWplY3RzIDAtUlRUDQo+IGFu ZA0KPiA+IGZhbGxzIGJhY2sgdG8gMS1SVFQuIiAgU28gd2UgZWl0aGVyIG5lZWQgdG8gc2F5IHdo aWNoIGNsaWVudCByZXF1ZXN0cyBhcmUNCj4gMC1SVFQNCj4gPiBzYWZlIChhbmQgd2h5KSBvciBk ZWZlciB0aGF0IHByb2ZpbGUgdG8gYW5vdGhlciBkb2N1bWVudC4gIGRyYWZ0LWlldGYtDQo+IGRu c29wLQ0KPiA+IHNlc3Npb24tc2lnbmFsIGlzIHBlcmhhcHMgYW4gZXhhbXBsZSBvZiBhIGRvY3Vt ZW50IHRoYXQgc3BlY2lmaWVzIHdoaWNoDQo+ID4gbWVzc2FnZXMgYXJlL2FyZW4ndCBhbGxvd2Vk IGluIGVhcmx5IGRhdGEuDQo+ID4gKGRyYWZ0LWlldGYtYWNtZS1hY21lIGlzIGFub3RoZXIsIGJ1 dCBhbiB1bmludGVyZXN0aW5nIG9uZSwgc2luY2UgdGhleSBtYWtlDQo+ID4gZXZlcnkgcmVxdWVz dCBpbmNsdWRlIGEgc2luZ2xlLXVzZSBub25jZSwgYW5kIGFsbCBtZXNzYWdlcyBhcmUgMC1SVFQg c2FmZS4pDQo+ID4gT3VyIHVzZSBvZiBpbmNyZWFzaW5nICdtaWQnIHZhbHVlcyBtYXkgaGVscCBo ZXJlLCBpbiB0ZXJtcyBvZiBhbGxvd2luZw0KPiBERUxFVEVzDQo+ID4gdG8gYmUgc2FmZSwgYnV0 IEknZCBoYXZlIHRvIHRoaW5rIGEgbGl0dGxlIG1vcmUgdG8gYmUgc3VyZSB0aGF0IHJlcXVlc3Rp bmcNCj4gPiBtaXRpZ2F0aW9uIHdvdWxkIGJlIHNhZmUuICAoT24gZmlyc3QgZ2xhbmNlIHRoZSBz ZXNzaW9uLW1hbmFnZW1uZXQgYml0cw0KPiB3b3VsZA0KPiA+IG5vdCBiZSBzYWZlLCBidXQgSSBt YXkgYmUgbWlzc2luZyBzb21ldGhpbmcuKQ0KPiANCj4gVGhlIGRyYWZ0IG9ubHkgdXNlcyBpZGVt cG90ZW50IHJlcXVlc3RzIChHRVQsIFBVVCBhbmQgREVMRVRFKSwgYW5kIENvQVAgaXMNCj4gY2Fw YWJsZSBvZiBkZXRlY3RpbmcgbWVzc2FnZSBkdXBsaWNhdGlvbiAoc2VlDQo+IGh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9yZmM3MjUyI3NlY3Rpb24tNC41KSBmb3IgYm90aCBjb25maXJtYWJs ZSBhbmQNCj4gbm9uLWNvbmZpcm1hYmxlIG1lc3NhZ2VzLg0KPiAgWzFdIEFuIGF0dGFja2VyIHJl cGxheWluZyBERUxFVEUgd2lsbCBub3QgaGF2ZSBhbnkgYWR2ZXJzZSBpbXBhY3QsIDIuMDINCj4g KERlbGV0ZWQpIFJlc3BvbnNlIENvZGUgaXMgcmV0dXJuZWQgZXZlbiBpZiB0aGUgbWl0aWdhdGlv biByZXF1ZXN0IGRvZXMgbm90DQo+IGV4aXN0Lg0KPiBbMl0gVGhlIHRlY2huaXF1ZXMgZGlzY3Vz c2VkIGluIFNlY3Rpb24gOCBvZiBSRkM4NDQ2IHNob3VsZCBzdWZmaWNlIHRvIGhhbmRsZQ0KPiBh bnRpLXJlcGxheSAoZS5nLiBhbiBhdHRhY2tlciByZXBsYXlpbmcgYSAwLVJUVCBkYXRhIGNhcnJ5 aW5nIGFuIG9sZA0KPiBtaXRpZ2F0aW9uIHJlcXVlc3QgcmVwbGFjZWQgYnkgYSBuZXcgbWl0aWdh dGlvbiBzY29wZSkuDQo+IA0KDQpbTWVkXSBGV0lXLCB3ZSBkbyBhbHJlYWR5IGhhdmUgdGhpcyB0 ZXh0IGluIHRoZSBkcmFmdDogDQoNCiAgICAgIFNlY3Rpb24gOCBvZiBbUkZDODQ0Nl0gZGlzY3Vz c2VzIHNvbWUgbWVjaGFuaXNtcyB0byBpbXBsZW1lbnQgdG8NCiAgICAgIGxpbWl0IHRoZSBpbXBh Y3Qgb2YgcmVwbGF5IGF0dGFja3Mgb24gMC1SVFQgZGF0YS4gIElmIHRoZSBET1RTDQogICAgICBz ZXJ2ZXIgYWNjZXB0cyAwLVJUVCwgaXQgTVVTVCBpbXBsZW1lbnQgb25lIG9mIHRoZXNlIG1lY2hh bmlzbXMuDQogICAgICBBIERPVFMgc2VydmVyIGNhbiByZWplY3QgMC1SVFQgYnkgc2VuZGluZyBh IFRMUyBIZWxsb1JldHJ5UmVxdWVzdC4NCg0KPiA+DQo+ID4gRnVydGhlciBub3RlcyBpbmxpbmUu DQo+ID4NCj4gPiBPbiBUaHUsIEphbiAxNywgMjAxOSBhdCAwNjo1MTowNEFNICswMDAwLCBtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gd3JvdGU6DQo+ID4gPiBIaSBCZW4sDQo+ID4g Pg0KPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPg0KPiA+ID4gQ2hlZXJzLA0KPiA+ID4g TWVkDQo+ID4gPg0KPiA+ID4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4g RGXCoDogQmVuamFtaW4gS2FkdWsgW21haWx0bzprYWR1a0BtaXQuZWR1XSBFbnZvecOpwqA6IG1l cmNyZWRpIDE2DQo+ID4gPiA+IGphbnZpZXIgMjAxOSAwMToxNCDDgMKgOiBkcmFmdC1pZXRmLWRv dHMtc2lnbmFsLWNoYW5uZWxAaWV0Zi5vcmcNCj4gPiA+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0K PiA+ID4gPiBPYmpldMKgOiBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsLTI1DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gNy4yDQo+ID4gPiA+DQo+ID4gPiA+IFRo ZSBUTFMgMS4zIGhhbmRzaGFrZSB3aXRoIDAtUlRUIGRpYWdyYW0gbmVlZHMgdG8gYmUNCj4gPiA+ ID4gcmV2aXNpdGVkL3JlZnJlc2hlZCwgYXMgUkZDIDg0NDYgZG9lcyBub3QgbG9vayBsaWtlIHRo YXQuDQo+ID4gPiA+IEFkZGl0aW9uYWxseSwgdGhlIHVzYWdlIG9mIFBTSyBhcyB3ZWxsIGFzIGEg Y2VydGlmaWNhdGUgaXMgbm90DQo+ID4gPiA+IGRlZmluZWQgdW50aWwgZHJhZnQtaG91c2xleS10 bHMtdGxzMTMtY2VydC13aXRoLWV4dGVybi1wc2sgaXMNCj4gcHVibGlzaGVkLg0KPiA+ID4gPiBJ IGFsc28gbm90ZSB0aGF0IGluIHRoZSBkaWFncmFtIGFzIHByZXNlbnRlZCwgdGhlIGNsaWVudCBp cyBub3QgeWV0DQo+ID4gPiA+IGtub3duIHRvIGJlIGF1dGhlbnRpY2F0ZWQgd2hlbiB0aGUgc2Vy dmVyIHNlbmRzIGl0cyBpbml0aWFsDQo+ID4gPiA+ICgwLjUtUlRUKSBET1RTIHNpZ25hbCBtZXNz YWdlLg0KPiA+ID4gPg0KPiA+ID4NCj4gPiA+IFtNZWRdIE5vdGVkLiBUaGFua3MuDQo+ID4gPg0K PiA+ID4gPiBTZWN0aW9uIDcuMw0KPiA+ID4gPg0KPiA+ID4gPiBUaGlzIHdob2xlIHNlY3Rpb24g c2VlbXMgdG8gb25seSBiZSByZWxldmFudCBmb3IgVURQIHVzYWdlLCBzbw0KPiA+ID4gPiBwcm9i YWJseSB0aGUgIklmIFVEUCBpcyB1c2VkIiBjbGF1c2UgY2FuIGJlIGRyb3BwZWQgYW5kIGFuDQo+ ID4gPiA+IGludHJvZHVjdG9yeSBzdGF0ZW1lbnQgYWRkZWQgZWFybGllciBvbi4NCj4gPiA+DQo+ ID4gPiBbTWVkXSBXaWxsIGNvbnNpZGVyIHRoYXQuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQYXRoIE1UVSBNVVNUIGJlIGdyZWF0ZXIgdGhh biBvciBlcXVhbCB0bw0KPiA+ID4gPiAgICBbQ29BUCBtZXNzYWdlIHNpemUgKyBEVExTIG92ZXJo ZWFkIG9mIDEzIG9jdGV0cyArIGF1dGhlbnRpY2F0aW9uDQo+ID4gPiA+ICAgIG92ZXJoZWFkIG9m IHRoZSBuZWdvdGlhdGVkIERUTFMgY2lwaGVyIHN1aXRlICsgYmxvY2sgcGFkZGluZ10NCj4gPiA+ ID4gICAgKFNlY3Rpb24gNC4xLjEuMSBvZiBbUkZDNjM0N10pLiAgSWYgdGhlIHJlcXVlc3Qgc2l6 ZSBleGNlZWRzIHRoZQ0KPiBwYXRoDQo+ID4gPiA+ICAgIE1UVSB0aGVuIHRoZSBET1RTIGNsaWVu dCBNVVNUIHNwbGl0IHRoZSBET1RTIHNpZ25hbCBpbnRvIHNlcGFyYXRlDQo+ID4gPiA+ICAgIG1l c3NhZ2VzLCBmb3IgZXhhbXBsZSB0aGUgbGlzdCBvZiBhZGRyZXNzZXMgaW4gdGhlICd0YXJnZXQt cHJlZml4Jw0KPiA+ID4gPiAgICBwYXJhbWV0ZXIgY291bGQgYmUgc3BsaXQgaW50byBtdWx0aXBs ZSBsaXN0cyBhbmQgZWFjaCBsaXN0IGNvbnZleWVkDQo+ID4gPiA+ICAgIGluIGEgbmV3IFBVVCBy ZXF1ZXN0Lg0KPiA+ID4gPg0KPiA+ID4gPiAoRFRMUyAxLjMgd2lsbCBoYXZlIGEgc2hvcnQgaGVh ZGVyIGZvciBzb21lIHBhY2tldHMsIHRoYXQgaXMgbGVzcw0KPiA+ID4gPiB0aGFuDQo+ID4gPiA+ IDEzIG9jdGV0cy4pDQo+ID4gPg0KPiA+ID4gW01lZF0gVGhlIHRleHQgaXMgbW9yZSBhYm91dCAx LjIuIFdlIGNhbiBhZGQgYSAxLjMgbm90ZSBpZiB5b3UgdGhpbmsgaXQNCj4gaXMNCj4gPiB1c2Vm dWwgZm9yIHRoZSBkaXNjdXNzaW9uLg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gU2VjdGlvbiA4 DQo+ID4gPiA+DQo+ID4gPiA+IFdlJ3ZlIGdvdCBzb21lIHJlcXVpcmVtZW50cyBpbiBoZXJlIGFi b3V0IGxpbWl0aW5nIGJlaGF2aW9yIG9mDQo+ID4gPiA+IGNsaWVudHMvc2VydmVycyB3aGVuIHRh bGtpbmcgdG8gZ2F0ZXdheXM7IGlzIGtub3dpbmcgYWJvdXQgdGhlDQo+ID4gPiA+IHByZXNlbmNl IG9mIGEgZ2F0ZXdheSBzb21ldGhpbmcgdGhhdCdzIHJlcXVpcmVkIHRvIGhhcHBlbiBvdXQgb2YN Cj4gPiA+ID4gYmFuZCBvciBpcyB0aGVyZSBhbiBpbi1iYW5kIHdheSB0byBpZGVudGlmeSB0aGF0 IHRoZSBwZWVyIGlzIGEgZ2F0ZXdheT8NCj4gPiA+DQo+ID4gPiBbTWVkXSBBbiBhZ2VudCBkb2Vz IG5vdCBuZWNlc3Nhcnkga25vdyB0aGF0IGl0IHBlZXIgaXMgZ2F0ZXdheS4gQSBnYXRld2F5DQo+ IGlzDQo+ID4gc2VlbiBhcyBhIHNlcnZlciBmb3IgdGhlIGNsaWVudCwgYW5kIGEgY2xpZW50IGZv ciBhIHNlcnZlci4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+ICAgIG1lc3NhZ2VzIGZyb20gYW4g YXV0aG9yaXplZCBET1RTIGdhdGV3YXksIHRoZXJlYnkgY3JlYXRpbmcgYSB0d28tDQo+IGxpbmsN Cj4gPiA+ID4gICAgY2hhaW4gb2YgdHJhbnNpdGl2ZSBhdXRoZW50aWNhdGlvbiBiZXR3ZWVuIHRo ZSBET1RTIGNsaWVudCBhbmQgdGhlDQo+ID4gPiA+ICAgIERPVFMgc2VydmVyLg0KPiA+ID4gPg0K PiA+ID4gPiBUaGlzIHNlZW1zIHRvIGlnbm9yZSB0aGUgcG9zc2liaWxpdHkgb2Ygc2V0dXBzIHRo YXQgaW5jbHVkZSBib3RoDQo+ID4gPiA+IGNsaWVudC1kb21haW4gYW5kIHNlcnZlci1kb21haW4g Z2F0ZXdheXMuDQo+ID4gPg0KPiA+ID4gW01lZF0gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvIG1lbnRp b24gdGhpcyBpcyBvbmx5IGFuIGV4YW1wbGUuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiAgICAg ICAgICAgICAgICAgIERPVFMgY2xpZW50IGNlcnRpZmljYXRlIHZhbGlkYXRpb24gTVVTVCBiZSBw ZXJmb3JtZWQNCj4gYXMNCj4gPiA+ID4gICAgcGVyIFtSRkM1MjgwXSBhbmQgdGhlIERPVFMgY2xp ZW50IGNlcnRpZmljYXRlIE1VU1QgY29uZm9ybSB0byB0aGUNCj4gPiA+ID4gICAgW1JGQzUyODBd IGNlcnRpZmljYXRlIHByb2ZpbGUuICBbLi4uXQ0KPiA+ID4gPg0KPiA+ID4gPiBUaGlzIHNlZW1z IHRvIGR1cGxpY2F0ZSBhIHJlcXVpcmVtZW50IGFscmVhZHkgc3RhdGVkIGluIFNlY3Rpb24gNy4x Ow0KPiA+ID4gPiBpdCdzIHByb2JhYmx5IGJlc3QgdG8gb25seSBoYXZlIG5vcm1hdGl2ZSBsYW5n dWFnZSBpbiBvbmUgbG9jYXRpb24sDQo+ID4gPiA+IGV2ZW4gaWYgd2UgbmVlZCB0byBtZW50aW9u IHRoZSB0b3BpYyBpbiBtdWx0aXBsZSBsb2NhdGlvbnMuDQo+ID4gPiA+IFNpbWlsYXJseSBmb3Ig dGhlIG11dHVhbCBhdXRoZW50aWNhdGlvbiByZXF1aXJlbWVudCwgd2hpY2ggd2UNCj4gPiA+ID4g ZHVwbGljYXRlIGluIHRoZSBzZWNvbmQgYW5kIGZvdXJ0aCBwYXJhZ3JhcGhzIG9mIHRoaXMgc2Vj dGlvbi4NCj4gPiA+DQo+ID4gPiBbTWVkXSBHb29kIHBvaW50LiBGaXhlZC4NCj4gPiA+DQo+ID4g PiA+DQo+ID4gPiA+IElmIHdlIGRvbid0IHdhbnQgdG8gdXNlIGV4YW1wbGUuY29tIHZzLiBleGFt cGxlLm5ldCBhcyBzYW1wbGUNCj4gPiA+ID4gZG9tYWlucywgd2UgY2FuIGFsc28gdXNlIHdoYXRl dmVyd2V3YW50LmV4YW1wbGUsIHBlciBSRkMgNjc2MS4NCj4gPiA+DQo+ID4gPiBbTWVkXSBXaWxs IG1haW50YWluIHRoZSBvbmVzIGFscmVhZHkgaW4gdGhlIGRyYWZ0LiBUaGFua3MuDQo+ID4gPg0K PiA+ID4gPg0KPiA+ID4gPiBTZWN0aW9uIDkNCj4gPiA+ID4NCj4gPiA+ID4gV2Ugc2hvdWxkIG1l bnRpb24gdGhlIG1lZGlhLXR5cGUgYWxsb2NhdGlvbiBpbiB0aGUgdG9wLWxldmVsIHNlY3Rpb24u DQo+ID4gPg0KPiA+ID4gW01lZF0gV2lsbCBmaXggdGhhdC4NCj4gPiA+DQo+ID4gPiA+DQo+ID4g PiA+ICJtYXBwaW5ncyB0byBDQk9SIiBmZWVscyBjb25mdXNpbmcgdG8gbWUsIHNpbmNlIGl0IGxl YXZlcyBlbXB0eSB3aGF0DQo+ID4gPiA+IHdlIGFyZSBtYXBwaW5nIGZyb20uICBQZXJoYXBzIGp1 c3QgdGFsa2luZyBhYm91dCBhIHJlZ2lzdHJ5IG9mICJDQk9SDQo+ID4gPiA+IG1hcCBrZXlzIiB3 b3VsZCBiZSBiZXR0ZXIsIGJvdGggaGVyZSBhbmQgaW4gdGhlIFNlY3Rpb24gOS4zIGludHJvLg0K PiA+ID4gPg0KPiA+ID4NCj4gPiA+IFtNZWRdIFVubGVzcyB0aGVyZSBpcyBhbiBvYmplY3Rpb24s IEkgY2FuIHVzZSAiQ0JPUiBNYXAgS2V5cyIuDQo+ID4gPg0KPiA+ID4gPiBTZWN0aW9uIDkuMw0K PiA+ID4gPg0KPiA+ID4gPiBJIHN1Z2dlc3QgYmVpbmcgdmVyeSBleHBsaWNpdCBhYm91dCB3aGV0 aGVyIG5ldyByZXF1ZXN0cyBmb3INCj4gPiA+ID4gcmVnaXN0cmF0aW9uIHNob3VsZCBiZSBkaXJl Y3RlZCB0byB0aGUgbWFpbGluZyBsaXN0IG9yIHRvIElBTkEsIGFzDQo+ID4gPiA+IHdlJ3ZlIGhh ZCBzb21lIGNvbmZ1c2lvbiBhYm91dCB0aGlzIGVsc2V3aGVyZS4NCj4gPiA+ID4NCj4gPiA+ID4g VGhlIGNyaXRlcmlhIHVzZWQgYnkgdGhlIGV4cGVydHMgYWxzbyBqdXN0IGxpc3RzIHRoaW5ncyB0 aGV5IHNob3VsZA0KPiA+ID4gPiBjb25zaWRlciwgYnV0IGRvZXMgbm90IHByb3ZpZGUgZnVsbCBj bGFyaXR5IG9uIHdoaWNoIGFuc3dlciB0byB0aGUNCj4gPiA+ID4gcXVlc3Rpb24gaXMgbW9yZSBs aWtlbHkgdG8gYmUgYXBwcm92ZWQuICAoQW5kIHllcywgSSBrbm93IHRoYXQgdGhpcw0KPiA+ID4g PiB0ZXh0IGlzIGxhcmdlbHkgY29waWVkIGZyb20gYWxyZWFkeSBwdWJsaXNoZWQgUkZDcywgYnV0 IHdlIGNhbiBzdGlsbA0KPiA+ID4gPiBkbw0KPiA+ID4gPiBiZXR0ZXIuKQ0KPiA+ID4NCj4gPiA+ IFtNZWRdIFdpbGwgY2hlY2sgdGhpcy4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24g OS4zLjENCj4gPiA+ID4NCj4gPiA+ID4gSWYgd2Ugd2FudCB0aGUgdmFsdWUgMCB0byBiZSByZXNl cnZlZCB3ZSBuZWVkIHRvIHNheSBzby4NCj4gPiA+DQo+ID4gPiBbTWVkXSAwIGlzIG5vdCBwYXJ0 IG9mIHRoZSBhbGxvY2F0aW9uIHJhbmdlLg0KPiA+ID4NCj4gPiA+ID4gRG8gd2Ugd2FudCB0byBz YXkgYW55dGhpbmcgYWJvdXQgdGhlIHVzYWdlIG9mIG5lZ2F0aXZlIGludGVnZXJzIGFzDQo+ID4g PiA+IG1hcCBrZXlzPw0KPiA+ID4gPg0KPiA+ID4gPiBJIHN1Z2dlc3Qgbm90IG1lbnRpb25pbmcg dGhlIHBvc3RhbCBhZGRyZXNzLCBnaXZlbiB0aGUgcmVjZW50IChlLmcuKQ0KPiA+ID4gPiBHRFBS IHJlcXVpcmVtZW50cy4NCj4gPiA+DQo+ID4gPiBbTWVkXSBHb29kIHBvaW50LiBEb25lLg0KPiA+ ID4NCj4gPiA+ID4NCj4gPiA+ID4gU2VjdGlvbiA5LjMuMg0KPiA+ID4gPg0KPiA+ID4gPiBJdCBt YXkgYmUgd29ydGggbWVudGlvbmluZyBUYWJsZSA0IGhlcmUgYXMgd2VsbC4NCj4gPiA+DQo+ID4g PiBbTWVkXSBPSy4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gOS41LjENCj4gPiA+ ID4NCj4gPiA+ID4gV2UgbmVlZCB0byBzcGVjaWZ5IHdoaWNoIHJhbmdlIG9mIHZhbHVlcyB3ZSBh cmUgYXNraW5nIGZvciBhbg0KPiA+ID4gPiBhbGxvY2F0aW9uIGZyb20uDQo+ID4gPg0KPiA+ID4g W01lZF0gQWRkZWQgYSBtZW50aW9uIHRvIDAtMjU1IHJhbmdlLg0KPiA+ID4NCj4gPiA+ID4NCj4g PiA+ID4gU2VjdGlvbiA5LjYuMQ0KPiA+ID4gPg0KPiA+ID4gPiBBcyBhYm92ZSwgc3BlY2lmeSB3 aGF0IHJhbmdlIHdlJ3JlIGFza2luZyBhYm91dC4NCj4gPiA+DQo+ID4gPiBbTWVkXSBPSy4NCj4g PiA+DQo+ID4gPiA+DQo+ID4gPiA+IEkgZXhwZWN0IHRoZSBjdXJyZW50IHRleHQgdG8gZ2V0IHNv bWUgSUVTRyAob3IgZGlyZWN0b3JhdGUpIGZlZWRiYWNrDQo+ID4gPiA+IHRoYXQgdGhlIERhdGEg SXRlbSBhbmQgU2VtYW50aWNzIGRlc2NyaXB0aW9ucyBhcmUgcmVwZXRpdGl2ZSBhbmQgYmFuYWwu DQo+ID4gPiA+DQo+ID4gPiA+IFNlY3Rpb24gOS43DQo+ID4gPiA+DQo+ID4gPiA+IElJVUMsIElB TkEgaXMgZ29pbmcgdG8gYXNrIGlmIHdlIHdhbnQgdGhpcyBtb2R1bGUgdG8gYmUgIm1haW50YWlu ZWQNCj4gPiA+ID4gYnkgSUFOQSIsIHNvIGl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhbiBhbnN3 ZXIgcmVhZHkgZXZlbiBpZiB3ZQ0KPiA+ID4gPiBkb24ndCBwdXQgaXQgaW4gdGhlIGRvY3VtZW50 IHRleHQuDQo+ID4gPg0KPiA+ID4gW01lZF0gVGhpcyBpcyBkaXNjdXNzZWQgaW4gLTI2Lg0KPiA+ ID4NCj4gPiA+ID4NCj4gPiA+ID4gICAgUmF0ZS1saW1pdGluZyBET1RTIHJlcXVlc3RzLCBpbmNs dWRpbmcgdGhvc2Ugd2l0aCBuZXcgJ2N1aWQnIHZhbHVlcywNCj4gPiA+ID4gICAgZnJvbSB0aGUg c2FtZSBET1RTIGNsaWVudCBkZWZlbmRzIGFnYWluc3QgRG9TIGF0dGFja3MgdGhhdCB3b3VsZA0K PiA+ID4gPg0KPiA+ID4gPiBXaXRoIHJlc3BlY3QgdG8gIm5ldyIgJ2N1aWQnIHZhbHVlcywgaXMg dGhlIHNlcnZlciByZXF1aXJlZCB0bw0KPiA+ID4gPiByZW1lbWJlciB3aGljaCBvbmVzIGl0IGhh cyBzZWVuIGluIHBlcnBldHVpdHksIG9yIGNhbiBpdCB0aW1lIHRoZW0NCj4gPiA+ID4gb3V0IGV2 ZW50dWFsbHk/DQo+ID4gPg0KPiA+ID4gW01lZF0gVGhlIGF0dGFjayB2ZWN0b3IgaXMgYSBET1RT IGNsaWVudCB3aGljaCBjaGFuZ2VzIGZyZXF1ZW50bHkgaXRzDQo+IGN1aWQuDQo+ID4gVGhlIERP VFMgc2VydmVyIGNhbiBzZXQgYW4gaW50ZXJ2YWwgaW4gd2hpY2ggdGhlIHNhbWUgY2xpZW50IGNh bm5vdCBwcmVzZW50DQo+IGENCj4gPiBuZXcgY3VpZC4NCj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+ IFNlY3Rpb24gMTANCj4gPiA+ID4NCj4gPiA+ID4gVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25z IHNlZW0gdG8gYmUgdGFraW5nIGEgbmFycm93IGZvY3VzIG9uIHRoZQ0KPiA+ID4gPiByZXF1aXJl bWVudHMgZm9yIGFuZCBjb25zZXF1ZW5jZXMgb2Ygc3BlY2lmaWMgYml0cyBvbiB0aGUgd2lyZSBp bg0KPiA+ID4gPiB0aGUgc2lnbmFsIGNoYW5uZWwgcHJvdG9jb2wuICBJIHRoaW5rIGl0J3MgYXBw cm9wcmlhdGUgdG8gYWxzbw0KPiA+ID4gPiBpbmNsdWRlIHNvbWUgaGlnaC1sZXZlbCB0aG91Z2h0 cyBhYm91dCB0aGUgZnVuY3Rpb25hbCBiZWhhdmlvciBvZg0KPiA+ID4gPiB0aGUgcHJvdG9jb2ws IGFsbG93aW5nIHRvIHNpZ25hbCB0aGF0IGFuIGF0dGFjayBpcyB1bmRlcndheSBhbmQNCj4gPiA+ ID4gdHJpZ2dlciBtaXRpZ2F0aW9uLCBpbmNyZWFzaW5nIHRoZSBhdmFpbGFiaWxpdHkgb2Ygc2Vy dmljZXMsIGV0Yy4sDQo+ID4gPiA+IGFuZCB0aGUgcmlza3MgdGhhdCBhcmUgcG9zZWQgYnkgdGhl IHByb3RvY29sIGZhaWxpbmcgdG8gd29yaw0KPiA+ID4gPiBwcm9wZXJseSwgd2hldGhlciB0aGF0 IG1lYW5zIGxldHRpbmcgYXR0YWNrIHRyYWZmaWMgdGhyb3VnaCBvcg0KPiA+ID4gPiBpbXByb3Bl cmx5IGJsb2NraW5nIGxlZ2l0aW1hdGUgdHJhZmZpYy4NCj4gPiA+DQo+ID4gPiBbTWVkXSBXb3Vs ZCBhIHBvaW50ZXIgdG8gdGhlIGFyY2hpdGVjdHVyZS9yZXF1aXJlbWVudHMgSS1EcyBiZSBzdWZm aWNpZW50DQo+IHRvDQo+ID4gY292ZXIgdG8gaGlnaC1sZXZlbCBhc3BlY3RzPw0KPiA+DQo+ID4g VGhvc2UgZG9jdW1lbnRzJyBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBkbyBzZWVtIHRvIGNvdmVy IHRoZSByZWxldmFudA0KPiBwb2ludHMsDQo+ID4geWVzLg0KPiA+DQo+ID4gPiA+DQo+ID4gPiA+ IFNlY3Rpb24gMTMuMQ0KPiA+ID4gPg0KPiA+ID4gPiBJIHRoaW5rIHRoZSBJQU5BIHJlZ2lzdHJp ZXMgc2hvdWxkIGJlIGxpc3RlZCBhcyBJbmZvcm1hdGlvbmFsIGFuZA0KPiA+ID4gPiBub3QgTm9y bWF0aXZlIHJlZmVyZW5jZXMuDQo+ID4gPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gRG9uZS4NCj4g PiA+DQo+ID4gPiA+IFNlY3Rpb24gMTMuMg0KPiA+ID4gPg0KPiA+ID4gPiBQZW5kaW5nIHJlc29s dXRpb24gb2YgdGhlIHF1ZXN0aW9uIGFib3V0IHVzaW5nDQo+ID4gPiA+IGRyYWZ0LWlldGYtY29y ZS15YW5nLWNib3IgcnVsZXMgb3IgUkZDNzk1MStSRkM3MDQ5LCB0aGUNCj4gPiA+ID4gZHJhZnQt aWV0Zi1jb3JlLXlhbmctY2JvciByZWZlcmVuY2UgbWF5IG5lZWQgdG8gYmUgTm9ybWF0aXZlLg0K PiA+ID4NCj4gPiA+IFtNZWRdIFBsZWFzZSByZWZlciB0byBteSBhbnN3ZXIgdG8gdGhhdCBxdWVz dGlvbi4gZHJhZnQtaWV0Zi1jb3JlLXlhbmctDQo+IGNib3IgaXMNCj4gPiBpbmZvcm1hdGl2ZS4N Cj4gPiA+DQo+ID4gPiA+DQo+ID4gPiA+IEdpdmVuIHRoYXQgIlVSSSIgaXMgYSB3ZWxsLWtub3du IGFiYnJldmlhdGlvbiwgd2UgbWF5IGJlIGFibGUgdG8gZ2V0DQo+ID4gPiA+IGF3YXkgd2l0aCBu b3QgY2l0aW5nIFJGQyAzOTg2LiAgT24gdGhlIG90aGVyIGhhbmQsIGl0J3Mgbm90IGNhdXNpbmcN Cj4gPiA+ID4gYW55IGhhcm0gdG8gbGVhdmUgaXQgaW4uLi4NCj4gPiA+DQo+ID4gPiBbTWVkXSBX aWxsIGxlYXZlIGl0Lg0KPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gUkZDIDQ2MzIgbmVlZHMgdG8g YmUgTm9ybWF0aXZlLCBzaW5jZSB3ZSBuZWVkIHRvIGtub3cgQ0lEUiB0bw0KPiA+ID4gPiBlbmNv ZGUvZGVjb2RlIHRhcmdldC1wcmVmaXhlcy4NCj4gPiA+DQo+ID4gPiBbTWVkXSBXb3JrcyBmb3Ig bWUuDQo+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiBTaW1pbGFybHksIEkgdGhpbmsgdGhhdCBSRkNz IDYyMzQNCj4gPiA+DQo+ID4gPiBbTWVkXSBUaGlzIG9uZSBpcyBub3QgbGlzdGVkIGFzIG5vcm1h dGl2ZSBiZWNhdXNlIG90aGVyIGhhc2ggYWxnb3MgbWF5IGJlDQo+ID4gdXNlZC4NCj4gPg0KPiA+ IEl0J3MgYSBsb3dlci1jYXNlICJyZWNvbW1lbmRlZCIsIHdoaWNoIGNhbiBwcm9iYWJseSBla2Ug YnkgYXMgZGVzY3JpcHRpdmUNCj4gYW5kDQo+ID4gbm90IGEgInByb3RvY29sIGZlYXR1cmUiIChz ZWUgYmVsb3cpLg0KPiA+DQo+ID4gPiAsIDc0MTMNCj4gPiA+IFtNZWRdIFRoZSBzdXBwb3J0IGlm IFRGTyBpcyBub3QgbWFuZGF0b3J5Lg0KPiA+DQo+ID4gSXQncyBhIFNIT1VMRCAoIlNIT1VMRCBp bXBsZW1lbnQgYWxsIG9mIHRoZSBmb2xsb3dpbmcgaXRlbXMiKSwgdGhvdWdoLi4uDQo+ID4NCj4g PiA+ICwgNzU4OQ0KPiA+ID4gW01lZF0gVGhpcyBpcyBhIE1BWSBpbiB0aGUgc3BlYy4gSXQgaXMg anVzdCBmaW5lIHRvIGxlYXZlIGl0IGFzDQo+IGluZm9ybWF0aXZlLg0KPiA+DQo+ID4gLi4uLnBl cg0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL2Jsb2cvaWVzZy1zdGF0ZW1lbnQtbm9ybWF0aXZl LWFuZC1pbmZvcm1hdGl2ZS0NCj4gPiByZWZlcmVuY2VzLw0KPiA+IG5vdGUgMSwgIkV2ZW4gcmVm ZXJlbmNlcyB0aGF0IGFyZSByZWxldmFudCBvbmx5IGZvciBvcHRpb25hbCBmZWF0dXJlcyBtdXN0 DQo+IGJlDQo+ID4gY2xhc3NpZmllZCBhcyBub3JtYXRpdmUgaWYgdGhleSBtZWV0IHRoZSBhYm92 ZSBjb25kaXRpb25zIGZvciBub3JtYXRpdmUNCj4gPiByZWZlcmVuY2VzLiINCj4gPg0KPiA+IFRo aXMgZG9lcyBzZWVtIHRvIGJlIHNvbWV0aGluZyB3ZSBhY3R1YWxseSBuZWVkIHRvIGNhcmUgYWJv dXQgYmVmb3JlIElFVEYNCj4gTEMsDQo+ID4gdGhvdWdoLCBhcyA3NDEzIGlzIEV4cGVyaW1lbnRh bCBhbmQgbm90IGxpc3RlZCBpbiB0aGUgZG93bnJlZiByZWdpc3RyeQ0KPiA+IChodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kb3ducmVmLyksIHNvIGlmIHdlIGxlYXZlIGl0IGFzDQo+ IEluZm9ybWF0aW9uYWwNCj4gPiBhbmQgaGF2ZSB0byBjaGFuZ2UgaXQgbGF0ZXIsIHdlJ2QgbmVl ZCB0byBhbHNvIHJlc3RhcnQvcmUtcnVuIHRoZSBJRVRGIExDLg0KPiA+DQo+ID4gPiAsIDc5MTgN Cj4gPiA+IFtNZWRdIElkZW0gYXMgVEZPLg0KPiA+DQo+ID4gVGhpcyBpcyBJbmZvcm1hdGlvbmFs IChpLmUuLCBhbHNvIHN1c2NlcHRpYmxlIHRvIHRoZSBkb3ducmVmIGlzc3VlKS4NCj4gPg0KPiA+ ID4gLCA3OTI0DQo+ID4gPiBbTWVkXSBJZGVtIGFzIFRGTy4NCj4gPg0KPiA+IChpZGVtIHgyKSwg dGhvdWdoIHRoaXMgaXMgc3RhbmRhcmRzLXRyYWNrIGF0IGxlYXN0LCBzbyB3ZSBoYXZlIG1vcmUg bGVld2F5DQo+IHRvDQo+ID4gbW92ZSB0aGluZ3MgYXJvdW5kIGxhdGVyLg0KPiA+DQo+ID4NCj4g Pg0KPiA+IEkgdGhpbmsgdGhlIG1vc3QgZXhwZWRpZW50IHRoaW5nIHRvIGRvIGhlcmUgd291bGQg anVzdCBiZSB0byByZWxheCB0aGUNCj4gPiByZXF1aXJlbWVudCBmb3IgVExTIEZhbHN0IFNUYXJ0 LCBURk8sIGFuZCBDYWNoZWQgSW5mb3JtYXRpb24sIHBlcmhhcHMgdG8NCj4gdGV4dA0KPiA+IGxp a2UgIlRoZSBmb2xsb3dpbmcgaXRlbXMgYXJlIGFkZGl0aW9uYWwgbWVjaGFuaXNtcyB0aGF0IGNh biByZWR1Y2UgdGhlDQo+IGRlbGF5DQo+ID4gcmVxdWlyZWQgdG8gZGVsaXZlciBhIERPVFMgc2ln bmFsIGNoYW5uZWwgbWVzc2FnZSwgd2hpY2ggaW1wbGVtZW50YXRpb25zDQo+IGFyZQ0KPiA+IGVu Y291cmFnZWQgdG8gaW1wbGVtZW50IGFzIHBvc3NpYmxlLiIsIGJ1dCBJIGFtIG9wZW4gdG8gb3Ro ZXIgc3VnZ2VzdGlvbnMNCj4gZm9yDQo+ID4gd2hhdCB0byBkby4NCj4gDQo+IFRMUyBGYWxzZSBT dGFydCBhbmQgQ2FjaGVkIEluZm9ybWF0aW9uIGNhbiBiZSBtYWRlIG5vcm1hdGl2ZSByZWZlcmVu Y2VzIChqdXN0DQo+IGxpa2Ugd2UgcmVmZXJlbmNlZCB0aGVzZSBpdGVtcyBpbiBvdXIgc3BlYw0K PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODMxMCkNCj4gVEZPIGlzIGZvciBUQ1Ag b25seSBhbmQgdGhhdCB0b28gZm9yIGV4Y2VwdGlvbiBzY2VuYXJpb3Mgd2hlcmUgVURQIGlzDQo+ IGJsb2NrZWQuIFRGTyBjYW4gcmVtb3ZlZCBmcm9tIHRoZSBsaXN0IG9mIGl0ZW1zIHRoZSBET1RT IGFnZW50cyBTSE9VTEQNCj4gaW1wbGVtZW50Lg0KPiANCj4gTkVXOg0KPiBDb21wYXJlZCB0byBV RFAsIERPVFMgc2lnbmFsIGNoYW5uZWwgb3ZlciBUQ1AgcmVxdWlyZXMgYW4gYWRkaXRpb25hbCBy b3VuZC0NCj4gdHJpcCB0aW1lIChSVFQpIG9mIGxhdGVuY3kgdG8gZXN0YWJsaXNoIGEgVENQIGNv bm5lY3Rpb24uICBJbXBsZW1lbnRhdGlvbnMNCj4gYXJlIGVuY291cmFnZWQgdG8gaW1wbGVtZW50 IFRDUA0KPiBGYXN0IE9wZW4gW1JGQzc0MTNdIHRvIGVsaW1pbmF0ZSB0aGF0IFJUVCB3aGVuIGlu Zm9ybWF0aW9uIGV4aXN0cyBmcm9tIHByaW9yDQo+IFRDUCBjb25uZWN0aW9uLg0KPiANCj4gLVRp cnUNCj4gDQo+ID4NCj4gPg0KPiA+ID4gLCBhbmQgNzk1MQ0KPiA+ID4gW01lZF0gdGhpcyBvbmUg d2FzIG5vdCBsaXN0ZWQgYXMgbm9ybWF0aXZlIGJlY2F1c2UgdGhlIGRvY3VtZW50IGxpc3RzIHR3 bw0KPiA+IHdheXMgdG8gZG8gdGhlIG1hcHBpbmcuDQo+ID4NCj4gPiBBZ3JlZWQuDQo+ID4NCj4g PiAtQmVuDQo+ID4NCj4gPiA+ID4gc2hvdWxkIGFsc28gYmUgTm9ybWF0aXZlLg0KPiA+ID4gPg0K PiA+ID4gPg0KPiA+ID4gPiAtQmVuDQo+ID4gPg0KPiA+DQo+ID4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ IERvdHNAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2RvdHMNCg== From nobody Sun Jan 20 23:37:59 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61E25130F7C for ; Sun, 20 Jan 2019 23:37:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.854 X-Spam-Level: X-Spam-Status: No, score=-8.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SEm1ZSTiRM5R for ; Sun, 20 Jan 2019 23:37:55 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F29D130F7B for ; Sun, 20 Jan 2019 23:37:55 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1548056253; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=sAOgFt5yIdNNBsv/lUSzhGHcY4cvH2jlY5dXbB u+s3s=; b=JYzxqMAxSJwZQi4vCat2lkykG8uOzDm5sMoNnWlE A2KmeuqYRDi3QbmDSCdz2EaCQ40QAlikb9gYNES90WhKwjRv0D au8xhdzkKwFa8s5LBmvKbgUCRUEQedLtL1WqQXOSXA6bKCkD8W rk2DoKRxS/7uvmfFfbmM7j7dDHAH6hs= Received: from DNVEXAPP1N05.corpzone.internalzone.com (DNVEXAPP1N05.corpzone.internalzone.com [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6494_200f_b3f10833_bbd4_47ed_bf62_6b8b92b94d90; Mon, 21 Jan 2019 00:37:32 -0700 Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 00:37:42 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Mon, 21 Jan 2019 00:37:42 -0700 Received: from NAM05-BY2-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 00:37:41 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2485.namprd16.prod.outlook.com (20.177.224.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.28; Mon, 21 Jan 2019 07:37:39 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.031; Mon, 21 Jan 2019 07:37:39 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Takahiko Nagata" , "dots@ietf.org" Thread-Topic: [Dots] Comments on dots-signal-control-filtering-01 Thread-Index: AQHUrjQ7qebvBkLi4EG6xztFHqgLVaW0nHgAgAAAoHCAAAQ70IAAA/zAgAAJc2CAAEc+cIAAKT7ggAQpdbA= Date: Mon, 21 Jan 2019 07:37:39 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA09E84@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09EC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA09FB4@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA0A586@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0A586@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2485; 6:k7PL2dw1PqVP1BrY9kzZ3C3VtMI9q3/FoboSciEY+BuqMgXhX2JS7W709Jz1aDGQvECCn2PUlP/nlVQ5cJFcwKzoMArm01oMkIPwEICFO2aWyI7TK/WYuDboyq073rACNMZJQZ69mzu3BxGUM9z/51c/SyMdMZ8EA6mLzMOQYqCVIbapz0N4/7+/wwVfhNUXfrheSwW+Zy5V4MLmh3TyjaFmMTKNnkusBEMCvJ+JsI8OzTluelA3IT9apb8Q1qOYAG2r6q2L5DPDAtaFtdprYnE4/N8YNNmJxF0iPXlvHHoL/vEXbKRucxikNshP9/ZXxh+8UxGlJVEJHXp2uGDMmkjChGl+sfuunmwO7C8FlhntGrFuEE6uHW4Ml5kB4FjqIoMzTtGLI/uqTPn0cIzt4Yn0pNtoSbSHUNBOVxX/a1elM8SnYaB1gA5Rno+pOm0ZtUxmTF3hzBAAgK7JwwVO4Q==; 5:obCZPonj9noityTaGyCntkgVipi1Ukain7G5lXsWZO0MjYvE31dXVHVXQMJke6RPjY+JC1bVuTuakKGWrCK5WcIRratYTDXYmlK5I/oUgsCOKvX2/xYxAzkUpTks00FocJy/vDyRXHLNcA794NHMA9oRYrneWR6JcrYfF2KF9hl42ZHIm8FD0TGtJ0hblm2cpdO6LogWMUZ9fTvvvQXUcw==; 7:M9ifHyKr1WViZLAm8bKvA0Jtz8JpZObvCcFi4jwBbkvu2TykHn3D8FCJuvukey41MTHcbBsaHlJPx8U2meDD78WFgjldKBUeW1spCwKYqbUKpHD4IESjhiyXlrLoE2vZmWfKQPTOruxWUuTnW9napA== x-ms-office365-filtering-correlation-id: 6fd507c9-5ae8-4022-dbc4-08d67f735220 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2485; x-ms-traffictypediagnostic: BYAPR16MB2485: x-microsoft-antispam-prvs: x-forefront-prvs: 0924C6A0D5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39850400004)(396003)(376002)(366004)(346002)(136003)(199004)(189003)(13464003)(55784004)(32952001)(256004)(14444005)(5024004)(26005)(86362001)(72206003)(8676002)(81156014)(229853002)(74316002)(25786009)(9686003)(6306002)(66066001)(966005)(486006)(53936002)(2906002)(11346002)(476003)(93886005)(478600001)(186003)(14454004)(446003)(76176011)(7696005)(6116002)(316002)(110136005)(80792005)(68736007)(71200400001)(3846002)(99286004)(7736002)(33656002)(6246003)(71190400001)(6506007)(8936002)(53546011)(102836004)(97736004)(81166006)(106356001)(55016002)(305945005)(6436002)(105586002)(2501003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2485; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: vlhpNITjHXgbDzrZMS06eptM1olzTMfvHtin/Ubv5Z9xXRaykBrlowyArkbQUxTEt4Aaw9HK4A8l0vxCB+z9Y6KGFe1ncnH4fbJQxpLfLLC5RibkmZaBu/uLOf+cUdJtoni/Eq+0WnK8yMlZ43otMkyv9Zji9ubYS2eByqGe1zkTG4vM1lZdS1AW3R4RJKTe6rXIRFFg7wtgw1w/LAwXCgBxbtqtW2hL+qaeWP1eHuKBtjh3idQX7R5ULFfqHMQn3zmnVUTUelg2Uyz/b7jJYCZt1q2XT7oBJESs4sJ9zaiA98ogNKouP2aUJCwQp58nAStRiXs8iIZSOo1ZSbPnLtn5fcdMYV9fkQwtZEaukGmmY673beQ6myyU3mJcgblvGySZ/MIL3cxcrilj/F3YJ67XwhTy9LpA2ovZjumeMhE= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 6fd507c9-5ae8-4022-dbc4-08d67f735220 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2019 07:37:39.4144 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2485 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.5 X-NAI-Spam-Version: 2.3.0.9418 : core <6464> : inlines <6998> : streams <1810703> : uri <2783225> Archived-At: Subject: Re: [Dots] Comments on dots-signal-control-filtering-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 07:37:57 -0000 SGkgTWVkLA0KDQpQbGVhc2Ugc2VlIGlubGluZQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQo+IEZyb206IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gPG1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb20+DQo+IFNlbnQ6IEZyaWRheSwgSmFudWFyeSAxOCwgMjAxOSA4OjM2IFBN DQo+IFRvOiBLb25kYSwgVGlydW1hbGVzd2FyIFJlZGR5IDxUaXJ1bWFsZXN3YXJSZWRkeV9Lb25k YUBNY0FmZWUuY29tPjsNCj4gVGFrYWhpa28gTmFnYXRhIDxuYWdhdGFAbGVwaWR1bS5jby5qcD47 IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUkU6IFtEb3RzXSBDb21tZW50cyBvbiBkb3RzLXNp Z25hbC1jb250cm9sLWZpbHRlcmluZy0wMQ0KPiANCj4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZy b20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QgY2xpY2sgbGlua3Mgb3INCj4g b3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFuZCBrbm93 IHRoZSBjb250ZW50IGlzIHNhZmUuDQo+IA0KPiBSZS0sDQo+IA0KPiBQbGVhc2Ugc2VlIGlubGlu ZS4NCj4gDQo+IENoZWVycywNCj4gTWVkDQo+IA0KPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUt LS0tLQ0KPiA+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4gPiBbbWFpbHRvOlRp cnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+ID4gRW52b3nDqcKgOiB2ZW5kcmVk aSAxOCBqYW52aWVyIDIwMTkgMTQ6NTQgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgVEdJL09MTjsN Cj4gPiBUYWthaGlrbyBOYWdhdGE7IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUkU6IFtEb3RzXSBD b21tZW50cyBvbg0KPiA+IGRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAxDQo+ID4NCj4g PiBIaSBNZWQsDQo+ID4NCj4gPiBQbGVhc2Ugc2VlIGlubGluZQ0KPiA+DQo+ID4gPiA+ID4gPg0K PiA+ID4gPiA+ID4gQSBNaXRpZ2F0aW9uIHJlcXVlc3Qgd2l0aCAidHJpZ2dlci1taXRpZ2F0aW9u IiBzZXQgdG8gZmFsc2UNCj4gPiA+ID4gPiA+IG11c3Qgb25seSBiZSBzZW50IGluIHRoZSBwZWFj ZSB0aW1lIGFuZCBub3QgZHVyaW5nIHRoZSBhdHRhY2sgdGltZS4NCj4gPiA+ID4gPiA+IER1cmlu ZyB0aGUgcGVhY2UgdGltZSwgSSBkb24ndCBzZWUgdGhlIG5lZWQgdG8NCj4gPiA+ID4gPiA+IGFj dGl2YXRlL2RlLWFjdGl2YXRlIEFDTHMgdXNpbmcgRE9UUyBzaWduYWwgY2hhbm5lbCBwcm90b2Nv bC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRdIFRoZSBwb2ludCBpcyB0aGF0IHRoZSBjb250 cm9sIGZ1bmN0aW9uYWxpdHkgd2lsbCBiZSB0aGVyZS4NCj4gPiA+ID4gPiBJdCBpcyB1cA0KPiA+ ID4gPiB0byB0aGUNCj4gPiA+ID4gPiBjbGllbnQgdG8gZGVjaWRlIHRvIHVzZToNCj4gPiA+ID4g Pg0KPiA+ID4gPiA+ICogaXRzIGRhdGEgY2hhbm5lbCB0byBhbHRlciB0aGUgYWNsIGFuZCB0aGVu IHdhaXQgZm9yIGEgc2lnbmFsDQo+ID4gPiA+ID4gY2hhbm5lbA0KPiA+ID4gPiBub3RpZmljYXRp b24uDQo+ID4gPiA+ID4gVGhlc2Ugbm90aWZpY2F0aW9ucyBtYXkgbm90IGJlIHNldCBieSB0aGUg Y2xpZW50Lg0KPiA+ID4gPiA+ICogaXRzIHNpZ25hbCBjaGFubmVsIHRvIGFsdGVyIHRoZSBhY2wu DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBXaXRoIHRoYXQgYXBwcm9hY2ggd2UgZG9uJ3Qgb3Zlcmxv YWQgdGhlIHNlcnZlciB3aXRoIGV4dHJhDQo+ID4gPiA+ID4gdmFsaWRhdGlvbiBvbiB0cmlnZ2Vy LW1pdGlnYXRpb24gdG8gZGVjaWRlIGFib3V0IHRoZSBiZWhhdmlvciB0bw0KPiA+IGZvbGxvdy4N Cj4gPiA+ID4NCj4gPiA+ID4gVGhpcyBkcmFmdCBpcyBpbnRyb2R1Y2VkIHRvIGFsdGVyIHRoZSBB Q0wgdXNpbmcgRE9UUyBzaWduYWwNCj4gPiA+ID4gY2hhbm5lbCBvbmx5IGR1cmluZyBtaXRpZ2F0 aW9uIHRpbWUgYmVjYXVzZSBkYXRhIGNoYW5uZWwgZG9lcyBub3QNCj4gPiA+ID4gd29yayBkdXJp bmcgYXR0YWNrIHRpbWUsIGFuZCBBQ0wgYWx0ZXJhdGlvbiB1c2luZyBET1RTIHNpZ25hbA0KPiA+ ID4gPiBjaGFubmVsICBzaG91bGQgbm90IGJlIGFsbG93ZWQgZHVyaW5nIHBlYWNlIHRpbWUuDQo+ ID4gPiA+IElmIGFsbG93ZWQsIHRoZSBjbGllbnQgY2FuIHVzZSBib3RoIHRoZSBET1RTIGRhdGEg YW5kIHNpZ25hbA0KPiA+ID4gPiBjaGFubmVscyB0byBhbHRlciB0aGUgQUNMIGR1cmluZyBwZWFj ZSB0aW1lIGFuZCBjYW4gY3JlYXRlDQo+ID4gPiA+IGluY29uc2lzdGVudA0KPiA+IGNvbmZpZ3Vy YXRpb24uDQo+ID4gPg0KPiA+ID4gW01lZF0gSWYgdGhlcmUgaXMgYSByaXNrIG9mIGluY29uc2lz dGVudCBjb25maWd1cmF0aW9uLCBpdCB3b24ndCBiZQ0KPiA+IHNwZWNpZmljIHRvIHRoaXMNCj4g PiA+IGNhc2UgYnV0IGEgZ2VuZXJpYyBvbmUuDQo+ID4NCj4gPiBJdCdzIG5vdCBhIGdlbmVyaWMg c2NlbmFyaW8sIHRoZSBpbmNvbnNpc3RlbnQgY29uZmlndXJhdGlvbiBpcyBiZQ0KPiA+IGJlY2F1 c2UgdHdvIHByb3RvY29scyBhcmUgYWxsb3dlZCB0byBhbHRlciB0aGUgQUNMIGF0IHRoZSBzYW1l IHRpbWUuDQo+IA0KPiBbTWVkXSBCdXQgdGhpcyBpcyB3aGF0IHdlIGFyZSBkb2luZyBpbiBkb3Rz LXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy4gSXQgaXMgdHJ1ZQ0KPiB0aGF0IHdoZW4gYW4gYXR0 YWNrIGlzIG9uZ29pbmcsIHRoZSBjbGllbnQgd2lsbCB1c2UgdGhlIHNpZ25hbCBjaGFubmVsIHRv IGNvbnRyb2wNCj4gdGhlIEFDTCwgc3RpbGwgdGhlIG9iamVjdCBpcyBjb250cm9sbGFibGUgZWl0 aGVyIGJ5IHNpZ25hbCBvciBkYXRhIGNoYW5uZWxzLg0KPiANCj4gPg0KPiA+ID4NCj4gPiA+ID4g V2h5IHVzZSB0d28gcHJvdG9jb2xzIHRvIGRvIHRoZSBzYW1lIGpvYiA/DQo+ID4gPg0KPiA+ID4g W01lZF0gQmVjYXVzZToNCj4gPiA+ICogdGhlIGZ1bmN0aW9uYWxpdHkgaXMgdGhlcmUgYW5kIGl0 cyB1c2Ugd2lsbCBiZSBmb3IgZnJlZS4NCj4gPiA+ICogdGhlIHNlcnZlciBjaGVja3MgYXJlIHNp bXBsaWZpZWQuIE5vIG5lZWQgdG8gZG8gZXh0cmEgY2hlY2tzIGJhc2VkDQo+ID4gPiBvbiAidHJp Z2dlci1taXRpZ2F0aW9uIg0KPiA+ID4gKiB0aGUgY2xpZW50IG1heSBub3Qgc3Vic2NyaWJlIHRv IG5vdGlmaWNhdGlvbi4gUGxlYXNlIG5vdGUgdGhhdCB3ZQ0KPiA+ID4gZG9uJ3QNCj4gPiBoYXZl IGENCj4gPiA+IE1VU1QsIGJ1dCBhIFNIT1VMRC4NCj4gPg0KPiA+IFdpdGhvdXQgdGhlIG5vdGlm aWNhdGlvbiBmcm9tIHRoZSBzZXJ2ZXIsIEhvdyB3aWxsIHRoZSBjbGllbnQga25vdyB0aGUNCj4g PiBBQ0wgbmVlZHMgdG8gYmUgYWx0ZXJlZCA/DQo+IA0KPiBbTWVkXSB0aGlzIGlzIGNvdmVyZWQg YnkgdGhpcyBwYXJ0IGluIHRoZSBkcmFmdDoNCj4gDQo+ICAgIElmIG5vdCwgdGhlDQo+ICAgIHBv bGxpbmcgbWVjaGFuaXNtIGluIFNlY3Rpb24gNC40LjIuMiBvZg0KPiAgICBbSS1ELmlldGYtZG90 cy1zaWduYWwtY2hhbm5lbF0gaGFzIHRvIGJlIGZvbGxvd2VkIGJ5IHRoZSBET1RTIGNsaWVudC4N Cj4gDQo+IA0KPiA+IElmIHRoZSBjbGllbnQgZGV0ZWN0cyB0aGUgd2hpdGUtbGlzdGVkIHRyYWZm aWMgaXMgYXR0YWNraW5nIHRoZSB0YXJnZXQNCj4gPiBieSBpdHNlbGYsIGl0IGNhbiB1c2UgRE9U UyBkYXRhIGNoYW5uZWwgcHJvdG9jb2wgdG8gYWx0ZXIgdGhlIEFDTC4NCj4gDQo+IFtNZWRdIFll cy4gVGhhdCB3b3VsZCBiZSBzdHJhaWdodGZvcndhcmQsIGJ1dCB0aGUgY2xpZW50IG5lZWRzIHRv IGdldCBhbiB1cGRhdGUNCj4gKGVpdGhlciBieSBub3RpZmljYXRpb24gb3IgYnkgcG9sbGluZyB0 aGUgc2VydmVyKS4NCj4gDQo+ID4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW5p c2hpenVrYS1kb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcg0KPiA+IGluZy0NCj4gPiAwMSNzZWN0 aW9uLTEuMSBvbmx5IGRpc2N1c3NlcyB0aGUgc2NlbmFyaW8gd2hlcmUgaXQgaXMgdXNlZnVsIHRv IGFsdGVyDQo+ID4gdGhlIEFDTCB1c2luZyBzaWduYWwgY2hhbm5lbCBkdXJpbmcgYXR0YWNrIHRp bWUsIFBsZWFzZSBwcm92aWRlIGFuDQo+ID4gYXR0YWNrIHNjZW5hcmlvIHdoZXJlIGFsbG93aW5n IHRoaXMgYWx0ZXJuYXRpb24gdXNpbmcgc2lnbmFsIGNoYW5uZWwNCj4gPiBpcyB1c2VmdWwgZHVy aW5nIHBlYWNlIHRpbWUuDQo+IA0KPiBbTWVkXSBZb3Ugc2VlbSB0byBtaXNzIG15IHBvaW50LCBU aXJ1LiBXaGF0IEknbSBzYXlpbmcgaXMgdGhhdCB0aGVyZSBpc24ndCBhDQo+IHNpZ25pZmljYW50 IGJlbmVmaXQgaW4gYXNraW5nIHRoZSBzZXJ2ZXIgdG8gZW5mb3JjZSB2YWxpZGF0aW9uIGNoZWNr cyBiYXNlZCBvbg0KPiB0aGUgdHJpZ2dlci1taXRpZ2F0aW9uLiBJZiB0aGUgc2VydmVyIGlzIGFi bGUgdG8gZ2V0IGNvbnRyb2wgd2hlbiBhbiBhdHRhY2sgaXMNCj4gb25nb2luZywgaXQgd2lsbCBi ZSBhYmxlIHRvIGRvIHNvIHdoZW4gZm9yIHByZS1jb25maWd1cmVkIHJlcXVlc3RzLCB0b28uDQoN CllvdSBzZWVtIHRvIG1pc3NpbmcgdGhlIHNpZ25pZmljYW50IGJlbmVmaXQsIGNvbnNpZGVyIGEg c2NlbmFyaW8gd2hlcmUgdGhlIERPVFMgY2xpZW50IHVzZXMgZGlmZmVyZW50IERPVFMgc2VydmVy cyBpbiB0aGUgc2FtZSBkb21haW4gZm9yIHNpZ25hbCBhbmQgZGF0YSBjaGFubmVsIHByb3RvY29s cy4gIFRoZXNlIHNlcnZlcnMgY291bGQgYmUgaW4gZGlmZmVyZW50IHpvbmVzLCBhbmQgcG9saWN5 IHN5bmNocm9uaXphdGlvbiB3aWxsIG5vdCBiZSBpbnN0YW50YW5lb3VzLCBhbmQgd2lsbCB0YWtl IHNvbWUgdGltZS4gIElmIHRoZSBET1RTIGNsaWVudCB1c2VzIHRoZSBzYW1lIHNlcnZlciB0byBh bHRlciB0aGUgQUNMIGR1cmluZyBwZWFjZSB0aW1lLCBwb2xpY3kgaW5jb25zaXN0ZW5jaWVzIHdp bGwgbm90IGFyaXNlIGF0IGFsbCwgYW5kIHRoZSBET1RTIHNlcnZlciBzeXN0ZW0gb25seSBuZWVk cyB0byBzaGFyZSB0aGUgc3RhdGUgZHVyaW5nIGF0dGFjayB0aW1lIGFuZCByZWR1Y2VzIHRoZSBv cGVyYXRpb25hbCBjb25jZXJucywgYW5kIHRoZSBkZWxheSBpbmN1cnJlZCB0byByZXNwb25kIHRv IHRoZSBjbGllbnQuDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4gDQo+IFdlIG1heSBwcm92aWRlIGEg Z3VpZGFuY2UgZm9yIHRoZSBjbGllbnQgdG8gcmVjb21tZW5kIGRjIGZvciBwcmUtY29uZmlndXJl ZA0KPiByZXF1ZXN0cywgYnV0IHdlIHNob3VsZCBub3QgZGlzY2FyZCBjb250cm9sIG1lc3NhZ2Ug d2hlbiB0aGV5IHNob3cgdXANCj4gKGVpdGhlcikuDQo+IA0KPiA+DQo+ID4gQ2hlZXJzDQo+ID4g LVRpcnUNCg== From nobody Mon Jan 21 01:13:36 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2910A130F11; Mon, 21 Jan 2019 01:13:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.854 X-Spam-Level: X-Spam-Status: No, score=-8.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cp1vNDQvSVlp; Mon, 21 Jan 2019 01:13:32 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28EC0130E99; Mon, 21 Jan 2019 01:13:31 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1548061988; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=Z fyNwk/es8y5wBuhyX+zgxPgp2TArcaOVpG4g3Wqcm A=; b=WJao+XeygwOo/mfovuygHHsuiVEbzp7XmPFo0gsr2VOc wzgGrFkZ+gsN9dCOi68FgVmdxuXoUW2dLnDW+lg42jcUbNWh82 6PXcW0reMJ5tB275qbGWhnh3CSBI20IEH5U0B/SebISsCiNiWS VTLLoLMB2Ec03y6GUC+1mnJF+cI= Received: from DNVEXAPP1N04.corpzone.internalzone.com (DNVEXAPP1N04.corpzone.internalzone.com [10.44.48.88]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6499_46c9_f6b9422d_5051_4e96_a15a_689470866ff6; Mon, 21 Jan 2019 02:13:07 -0700 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 02:13:13 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Mon, 21 Jan 2019 02:13:12 -0700 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 02:13:12 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2917.namprd16.prod.outlook.com (20.178.235.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Mon, 21 Jan 2019 09:13:11 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.031; Mon, 21 Jan 2019 09:13:11 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuABQDVAAAAzXK9AAbbFEAAAAVkFw Date: Mon, 21 Jan 2019 09:13:10 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2917; 6:F47xCPA1hoNlvcVyasWIuQwlpl+7Kz2H0lyHKHUP9hOsJmSmRldhxYH5KaYDlEoRRgaxIkQ89KmjxCYasQpDqtKqv7bPqekL15pHA7W0JLKOjgqGVwT0MI0c5lcvEytINJgZxL7NWdM0fmh5AanIBo8TnDsxyMc/YfsqWByCbQdsP9IsHNndilXgNwzue0/dK1zsGP2YmfKSP9S16/OoOVQLAmIMsnwpQVKqijTiRk/oabMthz24tstqn0o5ToMdRhU3/zCdxf8UC01JApj29/j0ZsQ9+RPLPO4CbPadPefK7EpFoYbyqAZltuEk57JtO8LVCq0oq+ACMTXh2VDFF27s0kH10WjlEcbFFQAs4EUSUFHGQEqxJF9VuCKK8imobC0+HuAdC2JmDXwKi0MIR2zZx3GFhyiYSND+JdYU0TLT4KneuJPqd1D2m6qKlNkASjI1t6Xc9ucbhfLcgGS01w==; 5:EATwJjLzMGVaKjWii+DfzjPr/6RRncIe/ksdHa14Vjth0eA/VK5InejfgE8P8I+NL7HpH1hqCpti91nl2hDuf2fCjOgoBFnmfDBa49clDwWLJSeKKYg8melqkC3yQtUHXmhOS2bbMjgFoUSoYY8A6by0WDxdj4MnAnlF6ksvTHARxMMJTVH7sO/vmJ0VkNBxwJXJ1Pp2SEw6eL8AdThs0A==; 7:MS36xa+ijP1Z9s0n0OjvMHjm5WvM90ac91Af6Oo27+Xq97AcSLHut/NPCmApXWItJ8z4LHdsjhUFBbZBJLQVTbzinRMXC06f6gzKgLwtbxkAS9Hw3inWxcY/9OFvgYIz2vP54h+HtIk2b1haQiVYfw== x-ms-office365-filtering-correlation-id: e736509f-f30b-49d2-a8dc-08d67f80aa5f x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2917; x-ms-traffictypediagnostic: BYAPR16MB2917: x-microsoft-antispam-prvs: x-forefront-prvs: 0924C6A0D5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(346002)(396003)(376002)(136003)(39850400004)(13464003)(199004)(189003)(55784004)(53754006)(32952001)(51444003)(81166006)(99286004)(14444005)(54906003)(4326008)(53936002)(256004)(86362001)(7736002)(3846002)(6116002)(9686003)(8676002)(5024004)(53546011)(6506007)(7696005)(8936002)(81156014)(102836004)(68736007)(53946003)(6306002)(2906002)(80792005)(305945005)(97736004)(33656002)(93886005)(316002)(110136005)(486006)(11346002)(446003)(476003)(2171002)(478600001)(6246003)(76176011)(72206003)(30864003)(186003)(14454004)(966005)(2501003)(106356001)(105586002)(26005)(229853002)(74316002)(55016002)(66066001)(6436002)(71200400001)(71190400001)(25786009)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2917; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: kOKiCd/3xa25daZCPqeb8M3qawp6J+RsFGsXmbb8TWgwNr0oYwB+hwhejivVes+gCwjeSB7ryCfKxKpTZfcOK/HxA1rU+mEcs58PMQx0Nokqr181TxCbnv7MBIdyDQl34h1ydge88DSpXPsaOxcQtY1N0eHAjdYH4Dx2wqcAG2wKnpVj41rMNNzDM/EokDGyfhKq2TphBlCTKpt70DU0FVvvbggL+TrTv0vMRQc6HHYIS/et2fgB2jwJSk2ZS+5ZT7v+DQGhT5fGZMylH/4rSEsCINxNncT9o5kauxBFsEweCvZ/+WPaB4Sk1RU0GzJH0P+9Zh4kZuz/NAXgr7LXA8RFq6TbBq9g6PK4qsT2M+5Ajm7bebn4PAz2wOvUkDKsfbQ6WpbjzHGU/y0Tf6EZ50d+u37nXov7VoIz8q5ASQk= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: e736509f-f30b-49d2-a8dc-08d67f80aa5f X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2019 09:13:10.9240 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2917 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6464> : inlines <6998> : streams <1810710> : uri <2783263> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 09:13:35 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiBTZW50OiBNb25kYXks IEphbnVhcnkgMjEsIDIwMTkgMTowMSBQTQ0KPiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRk eSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+IEJlbmphbWluIEthZHVr IDxrYWR1a0BtaXQuZWR1Pg0KPiBDYzogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGll dGYub3JnOyBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJFOiBbRG90c10gQUQgcmV2aWV3IG9m IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoNXRoIFBhcnQpDQo+IA0KPiANCj4g DQo+IEhpIEJlbiwgYWxsLA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVlcnMs DQo+IE1lZA0KPiANCj4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKgOiBL b25kYSwgVGlydW1hbGVzd2FyIFJlZGR5DQo+ID4gW21haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9L b25kYUBNY0FmZWUuY29tXQ0KPiA+IEVudm95w6nCoDogc2FtZWRpIDE5IGphbnZpZXIgMjAxOSAw NzozMg0KPiA+IMOAwqA6IEJlbmphbWluIEthZHVrOyBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xO IENjwqA6DQo+ID4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnOyBkb3Rz QGlldGYub3JnIE9iamV0wqA6IFJFOg0KPiA+IFtEb3RzXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0 Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg1dGggUGFydCkNCj4gPg0KPiA+IEhpIEJlbiwNCj4g Pg0KPiA+IFBsZWFzZSBzZWUgaW5saW5lDQo+ID4NCj4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+ID4gPiBGcm9tOiBEb3RzIDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFs ZiBPZiBCZW5qYW1pbiBLYWR1aw0KPiA+ID4gU2VudDogU2F0dXJkYXksIEphbnVhcnkgMTksIDIw MTkgMjozMyBBTQ0KPiA+ID4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPiA+ IENjOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5v cmcNCj4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90 cy1zaWduYWwtY2hhbm5lbC0yNQ0KPiA+ID4gKDV0aA0KPiA+IFBhcnQpDQo+ID4gPg0KPiA+ID4g VGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBE byBub3QgY2xpY2sNCj4gPiA+IGxpbmtzDQo+ID4gb3INCj4gPiA+IG9wZW4gYXR0YWNobWVudHMg dW5sZXNzIHlvdSByZWNvZ25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUNCj4gPiA+IGNvbnRl bnQgaXMNCj4gPiBzYWZlLg0KPiA+ID4NCj4gPiA+IEhpIGFsbCwNCj4gPiA+DQo+ID4gPiBUaGFu a3MgZm9yIGFsbCB0aGUgZWRpdHMgYW5kIHRoZSBwdWJsaXNoZWQgLTI3Lg0KPiA+ID4gQXNzdW1p bmcgSSdtIGFjdHVhbGx5IGNhdWdodCB1cCBvbiBhbGwgdGhlIHJldmlldy9yZXNwb25zZSB0aHJl YWRzLA0KPiA+ID4gSSB0aGluayB3ZSdyZSBwcmV0dHkgY2xvc2UgdG8gYmVpbmcgYWJsZSB0byBn byB0byBJRVRGIExDIC0tIGhlcmUncw0KPiA+ID4gd2hhdCBJIHNlZSBhcw0KPiA+IHN0aWxsIGxl ZnQ6DQo+ID4gPg0KPiA+ID4gLSBXZSBuZWVkIHRvIHNldHRsZSB0aGUgcmlzayBvZiBuZWVkaW5n IG5vcm1hdGl2ZSBkb3ducmVmcyBjYWxsZWQgb3V0IGZvcg0KPiA+ID4gICB0aGUgbGFzdCBjYWxs DQo+IA0KPiBbTWVkXSBJIHVwZGF0ZWQgdGhlIHRleHQgdG86DQo+ICogY2l0ZSA3NjE4Lzc2MjQg YXMgbm9ybWF0aXZlICgrIGluZGljYXRlIHRoYXQgYSBzaW1pbGFyIG1lY2hhbmlzbSB0byBmYWxz ZQ0KPiBzdGFydCBtYXkgYWxzbyBiZSBkZWZpbmVkIGZvciBEVExTKS4NCg0KaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL3JmYzc5MTggZG9lcyBub3QgcmVxdWlyZSBhbnkgY2hhbmdlcyB0byAo RClUTFMgb24tdGhlLXdpcmUgcHJvdG9jb2wgZGF0YSwgYW5kIERMVFMgYWxzbyBzdXBwb3J0cyBm YWxzZSBzdGFydCAoc2VlIHRoZSAoRClUTFMgcHJvZmlsZSBmb3IgSW9UIGRldmljZXMgc3BlY2lm aWVkIGluIA0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc5MjUjc2VjdGlvbi0yMSku DQoNCj4gKiB0d2VhayB0aGUgVEZPIHRleHQgdG8gbWFpbnRhaW4gaXQgYXMgaW5mb3JtYXRpdmUu DQo+IA0KPiA+ID4gLSBJIGp1c3Qgbm90aWNlZCB3aGlsZSByZXZpZXdpbmcgdGhlIGRpZmYgdGhh dCB3ZSBhbHNvIG5lZWQgdG8gc2F5IGENCj4gPiA+ICAgbGl0dGxlIG1vcmUgYWJvdXQgKEQpVExT IDEuMyAwLVJUVCBkYXRhIChtb3JlIGJlbG93KQ0KPiA+ID4gLSBJdCBsb29rcyBsaWtlIHdlIGxv c3QgdGhlIGd1aWRhbmNlIHRvIHRoZSBFeHBlcnRzIGFuZCB0ZXh0IGFib3V0IHRoZQ0KPiA+ID4g ICByZXZpZXcgbWFpbGluZyBsaXN0IGZyb20gdGhlIElBTkEgQ29uc2lkZXJhdGlvbnMsIGR1cmlu ZyB0aGUgcmVzaHVmZmxpbmcNCj4gPiA+ICAgYXJvdW5kIGhhdmluZyBJQU5BIG1hbmFnZSBtb3Jl IHRoaW5ncw0KPiA+ID4NCj4gDQo+IFtNZWRdIFRoYXQgd2FzIG9uIHB1cnBvc2UuIFdlIHdvdWxk IGxpa2UgdG8gcmVseSBvbiBSRkM4MTI2IHJ1bGVzIGZvcg0KPiBkZWlnbmVkIGV4cGVydCByZXZp ZXdzLg0KDQpJbiBhZGRpdGlvbiB0byBSRkM4MTI2IHRvIGRlZmVuZCBhZ2FpbnN0IHJlcGxheSBh dHRhY2tzLCB3ZSBjYW4gYWRkIHRoZSBmb2xsb3dpbmcgYWRkaXRpb25hbCBydWxlczoNCg0KVGhl IERPVFMgc2lnbmFsIGNoYW5uZWwgbWVzc2FnZXMgc2VudCBhcyBlYXJseSBkYXRhIGJ5IHRoZSBE T1RTIGNsaWVudA0KYXJlIGlkZW1wb3RlbnQgcmVxdWVzdHMuIEZ1cnRoZXIsIENvQVAgKGFzIGRp c2N1c3NlZCBpbiBTZWN0aW9uIDQuNCBvZiBSRkM3MjUyKSBpcyBjYXBhYmxlIG9mIHBlcmZvcm1p bmcgbWVzc2FnZSBkZWR1cGxpY2F0aW9uDQp0byBoYW5kbGUgcmVwbGF5IG9mIENvQVAgcmVxdWVz dHMuDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4gDQo+ID4gPiBSZWdhcmRpbmcgdGhlIChEKVRMUyAx LjMgMC1SVFQgZGF0YSwgUkZDIDg0NDYgbm90ZXMgdGhhdA0KPiA+ID4gIkFwcGxpY2F0aW9uIHBy b3RvY29scyBNVVNUIE5PVCB1c2UgMC1SVFQgZGF0YSB3aXRob3V0IGEgcHJvZmlsZSB0aGF0DQo+ IGRlZmluZXMgaXRzIHVzZS4NCj4gPiA+IFRoYXQgcHJvZmlsZSBuZWVkcyB0byBpZGVudGlmeSB3 aGljaCBtZXNzYWdlcyBvciBpbnRlcmFjdGlvbnMgYXJlDQo+ID4gPiBzYWZlIHRvDQo+ID4gdXNl DQo+ID4gPiB3aXRoIDAtUlRUIGFuZCBob3cgdG8gaGFuZGxlIHRoZSBzaXR1YXRpb24gd2hlbiB0 aGUgc2VydmVyIHJlamVjdHMNCj4gPiA+IDAtUlRUDQo+ID4gYW5kDQo+ID4gPiBmYWxscyBiYWNr IHRvIDEtUlRULiIgIFNvIHdlIGVpdGhlciBuZWVkIHRvIHNheSB3aGljaCBjbGllbnQNCj4gPiA+ IHJlcXVlc3RzIGFyZQ0KPiA+IDAtUlRUDQo+ID4gPiBzYWZlIChhbmQgd2h5KSBvciBkZWZlciB0 aGF0IHByb2ZpbGUgdG8gYW5vdGhlciBkb2N1bWVudC4NCj4gPiA+IGRyYWZ0LWlldGYtDQo+ID4g ZG5zb3AtDQo+ID4gPiBzZXNzaW9uLXNpZ25hbCBpcyBwZXJoYXBzIGFuIGV4YW1wbGUgb2YgYSBk b2N1bWVudCB0aGF0IHNwZWNpZmllcw0KPiA+ID4gd2hpY2ggbWVzc2FnZXMgYXJlL2FyZW4ndCBh bGxvd2VkIGluIGVhcmx5IGRhdGEuDQo+ID4gPiAoZHJhZnQtaWV0Zi1hY21lLWFjbWUgaXMgYW5v dGhlciwgYnV0IGFuIHVuaW50ZXJlc3Rpbmcgb25lLCBzaW5jZQ0KPiA+ID4gdGhleSBtYWtlIGV2 ZXJ5IHJlcXVlc3QgaW5jbHVkZSBhIHNpbmdsZS11c2Ugbm9uY2UsIGFuZCBhbGwgbWVzc2FnZXMN Cj4gPiA+IGFyZSAwLVJUVCBzYWZlLikgT3VyIHVzZSBvZiBpbmNyZWFzaW5nICdtaWQnIHZhbHVl cyBtYXkgaGVscCBoZXJlLA0KPiA+ID4gaW4gdGVybXMgb2YgYWxsb3dpbmcNCj4gPiBERUxFVEVz DQo+ID4gPiB0byBiZSBzYWZlLCBidXQgSSdkIGhhdmUgdG8gdGhpbmsgYSBsaXR0bGUgbW9yZSB0 byBiZSBzdXJlIHRoYXQNCj4gPiA+IHJlcXVlc3RpbmcgbWl0aWdhdGlvbiB3b3VsZCBiZSBzYWZl LiAgKE9uIGZpcnN0IGdsYW5jZSB0aGUNCj4gPiA+IHNlc3Npb24tbWFuYWdlbW5ldCBiaXRzDQo+ ID4gd291bGQNCj4gPiA+IG5vdCBiZSBzYWZlLCBidXQgSSBtYXkgYmUgbWlzc2luZyBzb21ldGhp bmcuKQ0KPiA+DQo+ID4gVGhlIGRyYWZ0IG9ubHkgdXNlcyBpZGVtcG90ZW50IHJlcXVlc3RzIChH RVQsIFBVVCBhbmQgREVMRVRFKSwgYW5kDQo+ID4gQ29BUCBpcyBjYXBhYmxlIG9mIGRldGVjdGlu ZyBtZXNzYWdlIGR1cGxpY2F0aW9uIChzZWUNCj4gPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvcmZjNzI1MiNzZWN0aW9uLTQuNSkgZm9yIGJvdGggY29uZmlybWFibGUNCj4gPiBhbmQgbm9u LWNvbmZpcm1hYmxlIG1lc3NhZ2VzLg0KPiA+ICBbMV0gQW4gYXR0YWNrZXIgcmVwbGF5aW5nIERF TEVURSB3aWxsIG5vdCBoYXZlIGFueSBhZHZlcnNlIGltcGFjdCwNCj4gPiAyLjAyDQo+ID4gKERl bGV0ZWQpIFJlc3BvbnNlIENvZGUgaXMgcmV0dXJuZWQgZXZlbiBpZiB0aGUgbWl0aWdhdGlvbiBy ZXF1ZXN0DQo+ID4gZG9lcyBub3QgZXhpc3QuDQo+ID4gWzJdIFRoZSB0ZWNobmlxdWVzIGRpc2N1 c3NlZCBpbiBTZWN0aW9uIDggb2YgUkZDODQ0NiBzaG91bGQgc3VmZmljZSB0bw0KPiA+IGhhbmRs ZSBhbnRpLXJlcGxheSAoZS5nLiBhbiBhdHRhY2tlciByZXBsYXlpbmcgYSAwLVJUVCBkYXRhIGNh cnJ5aW5nDQo+ID4gYW4gb2xkIG1pdGlnYXRpb24gcmVxdWVzdCByZXBsYWNlZCBieSBhIG5ldyBt aXRpZ2F0aW9uIHNjb3BlKS4NCj4gPg0KPiANCj4gW01lZF0gRldJVywgd2UgZG8gYWxyZWFkeSBo YXZlIHRoaXMgdGV4dCBpbiB0aGUgZHJhZnQ6DQo+IA0KPiAgICAgICBTZWN0aW9uIDggb2YgW1JG Qzg0NDZdIGRpc2N1c3NlcyBzb21lIG1lY2hhbmlzbXMgdG8gaW1wbGVtZW50IHRvDQo+ICAgICAg IGxpbWl0IHRoZSBpbXBhY3Qgb2YgcmVwbGF5IGF0dGFja3Mgb24gMC1SVFQgZGF0YS4gIElmIHRo ZSBET1RTDQo+ICAgICAgIHNlcnZlciBhY2NlcHRzIDAtUlRULCBpdCBNVVNUIGltcGxlbWVudCBv bmUgb2YgdGhlc2UgbWVjaGFuaXNtcy4NCj4gICAgICAgQSBET1RTIHNlcnZlciBjYW4gcmVqZWN0 IDAtUlRUIGJ5IHNlbmRpbmcgYSBUTFMgSGVsbG9SZXRyeVJlcXVlc3QuDQo+IA0KPiA+ID4NCj4g PiA+IEZ1cnRoZXIgbm90ZXMgaW5saW5lLg0KPiA+ID4NCj4gPiA+IE9uIFRodSwgSmFuIDE3LCAy MDE5IGF0IDA2OjUxOjA0QU0gKzAwMDAsDQo+ID4gPiBtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2Uu Y29tDQo+ID4gPiB3cm90ZToNCj4gPiA+ID4gSGkgQmVuLA0KPiA+ID4gPg0KPiA+ID4gPiBQbGVh c2Ugc2VlIGlubGluZS4NCj4gPiA+ID4NCj4gPiA+ID4gQ2hlZXJzLA0KPiA+ID4gPiBNZWQNCj4g PiA+ID4NCj4gPiA+ID4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4gPiBE ZcKgOiBCZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbWVy Y3JlZGkgMTYNCj4gPiA+ID4gPiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDogZHJhZnQtaWV0Zi1k b3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnDQo+ID4gPiA+ID4gQ2PCoDogZG90c0BpZXRmLm9y Zw0KPiA+ID4gPiA+IE9iamV0wqA6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWwtMjUNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFNlY3Rpb24gNy4yDQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiBUaGUgVExTIDEuMyBoYW5kc2hha2Ugd2l0aCAwLVJUVCBkaWFncmFtIG5lZWRz IHRvIGJlDQo+ID4gPiA+ID4gcmV2aXNpdGVkL3JlZnJlc2hlZCwgYXMgUkZDIDg0NDYgZG9lcyBu b3QgbG9vayBsaWtlIHRoYXQuDQo+ID4gPiA+ID4gQWRkaXRpb25hbGx5LCB0aGUgdXNhZ2Ugb2Yg UFNLIGFzIHdlbGwgYXMgYSBjZXJ0aWZpY2F0ZSBpcyBub3QNCj4gPiA+ID4gPiBkZWZpbmVkIHVu dGlsIGRyYWZ0LWhvdXNsZXktdGxzLXRsczEzLWNlcnQtd2l0aC1leHRlcm4tcHNrIGlzDQo+ID4g cHVibGlzaGVkLg0KPiA+ID4gPiA+IEkgYWxzbyBub3RlIHRoYXQgaW4gdGhlIGRpYWdyYW0gYXMg cHJlc2VudGVkLCB0aGUgY2xpZW50IGlzIG5vdA0KPiA+ID4gPiA+IHlldCBrbm93biB0byBiZSBh dXRoZW50aWNhdGVkIHdoZW4gdGhlIHNlcnZlciBzZW5kcyBpdHMgaW5pdGlhbA0KPiA+ID4gPiA+ ICgwLjUtUlRUKSBET1RTIHNpZ25hbCBtZXNzYWdlLg0KPiA+ID4gPiA+DQo+ID4gPiA+DQo+ID4g PiA+IFtNZWRdIE5vdGVkLiBUaGFua3MuDQo+ID4gPiA+DQo+ID4gPiA+ID4gU2VjdGlvbiA3LjMN Cj4gPiA+ID4gPg0KPiA+ID4gPiA+IFRoaXMgd2hvbGUgc2VjdGlvbiBzZWVtcyB0byBvbmx5IGJl IHJlbGV2YW50IGZvciBVRFAgdXNhZ2UsIHNvDQo+ID4gPiA+ID4gcHJvYmFibHkgdGhlICJJZiBV RFAgaXMgdXNlZCIgY2xhdXNlIGNhbiBiZSBkcm9wcGVkIGFuZCBhbg0KPiA+ID4gPiA+IGludHJv ZHVjdG9yeSBzdGF0ZW1lbnQgYWRkZWQgZWFybGllciBvbi4NCj4gPiA+ID4NCj4gPiA+ID4gW01l ZF0gV2lsbCBjb25zaWRlciB0aGF0Lg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgUGF0aCBNVFUgTVVTVCBiZSBncmVhdGVyIHRoYW4g b3IgZXF1YWwgdG8NCj4gPiA+ID4gPiAgICBbQ29BUCBtZXNzYWdlIHNpemUgKyBEVExTIG92ZXJo ZWFkIG9mIDEzIG9jdGV0cyArIGF1dGhlbnRpY2F0aW9uDQo+ID4gPiA+ID4gICAgb3ZlcmhlYWQg b2YgdGhlIG5lZ290aWF0ZWQgRFRMUyBjaXBoZXIgc3VpdGUgKyBibG9jayBwYWRkaW5nXQ0KPiA+ ID4gPiA+ICAgIChTZWN0aW9uIDQuMS4xLjEgb2YgW1JGQzYzNDddKS4gIElmIHRoZSByZXF1ZXN0 IHNpemUgZXhjZWVkcw0KPiA+ID4gPiA+IHRoZQ0KPiA+IHBhdGgNCj4gPiA+ID4gPiAgICBNVFUg dGhlbiB0aGUgRE9UUyBjbGllbnQgTVVTVCBzcGxpdCB0aGUgRE9UUyBzaWduYWwgaW50byBzZXBh cmF0ZQ0KPiA+ID4gPiA+ICAgIG1lc3NhZ2VzLCBmb3IgZXhhbXBsZSB0aGUgbGlzdCBvZiBhZGRy ZXNzZXMgaW4gdGhlICd0YXJnZXQtcHJlZml4Jw0KPiA+ID4gPiA+ICAgIHBhcmFtZXRlciBjb3Vs ZCBiZSBzcGxpdCBpbnRvIG11bHRpcGxlIGxpc3RzIGFuZCBlYWNoIGxpc3QgY29udmV5ZWQNCj4g PiA+ID4gPiAgICBpbiBhIG5ldyBQVVQgcmVxdWVzdC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IChE VExTIDEuMyB3aWxsIGhhdmUgYSBzaG9ydCBoZWFkZXIgZm9yIHNvbWUgcGFja2V0cywgdGhhdCBp cw0KPiA+ID4gPiA+IGxlc3MgdGhhbg0KPiA+ID4gPiA+IDEzIG9jdGV0cy4pDQo+ID4gPiA+DQo+ ID4gPiA+IFtNZWRdIFRoZSB0ZXh0IGlzIG1vcmUgYWJvdXQgMS4yLiBXZSBjYW4gYWRkIGEgMS4z IG5vdGUgaWYgeW91DQo+ID4gPiA+IHRoaW5rIGl0DQo+ID4gaXMNCj4gPiA+IHVzZWZ1bCBmb3Ig dGhlIGRpc2N1c3Npb24uDQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBTZWN0aW9uIDgN Cj4gPiA+ID4gPg0KPiA+ID4gPiA+IFdlJ3ZlIGdvdCBzb21lIHJlcXVpcmVtZW50cyBpbiBoZXJl IGFib3V0IGxpbWl0aW5nIGJlaGF2aW9yIG9mDQo+ID4gPiA+ID4gY2xpZW50cy9zZXJ2ZXJzIHdo ZW4gdGFsa2luZyB0byBnYXRld2F5czsgaXMga25vd2luZyBhYm91dCB0aGUNCj4gPiA+ID4gPiBw cmVzZW5jZSBvZiBhIGdhdGV3YXkgc29tZXRoaW5nIHRoYXQncyByZXF1aXJlZCB0byBoYXBwZW4g b3V0IG9mDQo+ID4gPiA+ID4gYmFuZCBvciBpcyB0aGVyZSBhbiBpbi1iYW5kIHdheSB0byBpZGVu dGlmeSB0aGF0IHRoZSBwZWVyIGlzIGEgZ2F0ZXdheT8NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0g QW4gYWdlbnQgZG9lcyBub3QgbmVjZXNzYXJ5IGtub3cgdGhhdCBpdCBwZWVyIGlzIGdhdGV3YXku IEENCj4gPiA+ID4gZ2F0ZXdheQ0KPiA+IGlzDQo+ID4gPiBzZWVuIGFzIGEgc2VydmVyIGZvciB0 aGUgY2xpZW50LCBhbmQgYSBjbGllbnQgZm9yIGEgc2VydmVyLg0KPiA+ID4gPg0KPiA+ID4gPiA+ DQo+ID4gPiA+ID4gICAgbWVzc2FnZXMgZnJvbSBhbiBhdXRob3JpemVkIERPVFMgZ2F0ZXdheSwg dGhlcmVieSBjcmVhdGluZyBhDQo+ID4gPiA+ID4gdHdvLQ0KPiA+IGxpbmsNCj4gPiA+ID4gPiAg ICBjaGFpbiBvZiB0cmFuc2l0aXZlIGF1dGhlbnRpY2F0aW9uIGJldHdlZW4gdGhlIERPVFMgY2xp ZW50IGFuZCB0aGUNCj4gPiA+ID4gPiAgICBET1RTIHNlcnZlci4NCj4gPiA+ID4gPg0KPiA+ID4g PiA+IFRoaXMgc2VlbXMgdG8gaWdub3JlIHRoZSBwb3NzaWJpbGl0eSBvZiBzZXR1cHMgdGhhdCBp bmNsdWRlIGJvdGgNCj4gPiA+ID4gPiBjbGllbnQtZG9tYWluIGFuZCBzZXJ2ZXItZG9tYWluIGdh dGV3YXlzLg0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBJIHVwZGF0ZWQgdGhlIHRleHQgdG8gbWVu dGlvbiB0aGlzIGlzIG9ubHkgYW4gZXhhbXBsZS4NCj4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4g PiA+ICAgICAgICAgICAgICAgICAgRE9UUyBjbGllbnQgY2VydGlmaWNhdGUgdmFsaWRhdGlvbiBN VVNUIGJlDQo+ID4gPiA+ID4gcGVyZm9ybWVkDQo+ID4gYXMNCj4gPiA+ID4gPiAgICBwZXIgW1JG QzUyODBdIGFuZCB0aGUgRE9UUyBjbGllbnQgY2VydGlmaWNhdGUgTVVTVCBjb25mb3JtIHRvIHRo ZQ0KPiA+ID4gPiA+ICAgIFtSRkM1MjgwXSBjZXJ0aWZpY2F0ZSBwcm9maWxlLiAgWy4uLl0NCj4g PiA+ID4gPg0KPiA+ID4gPiA+IFRoaXMgc2VlbXMgdG8gZHVwbGljYXRlIGEgcmVxdWlyZW1lbnQg YWxyZWFkeSBzdGF0ZWQgaW4gU2VjdGlvbg0KPiA+ID4gPiA+IDcuMTsgaXQncyBwcm9iYWJseSBi ZXN0IHRvIG9ubHkgaGF2ZSBub3JtYXRpdmUgbGFuZ3VhZ2UgaW4gb25lDQo+ID4gPiA+ID4gbG9j YXRpb24sIGV2ZW4gaWYgd2UgbmVlZCB0byBtZW50aW9uIHRoZSB0b3BpYyBpbiBtdWx0aXBsZSBs b2NhdGlvbnMuDQo+ID4gPiA+ID4gU2ltaWxhcmx5IGZvciB0aGUgbXV0dWFsIGF1dGhlbnRpY2F0 aW9uIHJlcXVpcmVtZW50LCB3aGljaCB3ZQ0KPiA+ID4gPiA+IGR1cGxpY2F0ZSBpbiB0aGUgc2Vj b25kIGFuZCBmb3VydGggcGFyYWdyYXBocyBvZiB0aGlzIHNlY3Rpb24uDQo+ID4gPiA+DQo+ID4g PiA+IFtNZWRdIEdvb2QgcG9pbnQuIEZpeGVkLg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gSWYgd2UgZG9uJ3Qgd2FudCB0byB1c2UgZXhhbXBsZS5jb20gdnMuIGV4YW1wbGUubmV0IGFz IHNhbXBsZQ0KPiA+ID4gPiA+IGRvbWFpbnMsIHdlIGNhbiBhbHNvIHVzZSB3aGF0ZXZlcndld2Fu dC5leGFtcGxlLCBwZXIgUkZDIDY3NjEuDQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIFdpbGwgbWFp bnRhaW4gdGhlIG9uZXMgYWxyZWFkeSBpbiB0aGUgZHJhZnQuIFRoYW5rcy4NCj4gPiA+ID4NCj4g PiA+ID4gPg0KPiA+ID4gPiA+IFNlY3Rpb24gOQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gV2Ugc2hv dWxkIG1lbnRpb24gdGhlIG1lZGlhLXR5cGUgYWxsb2NhdGlvbiBpbiB0aGUgdG9wLWxldmVsIHNl Y3Rpb24uDQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIFdpbGwgZml4IHRoYXQuDQo+ID4gPiA+DQo+ ID4gPiA+ID4NCj4gPiA+ID4gPiAibWFwcGluZ3MgdG8gQ0JPUiIgZmVlbHMgY29uZnVzaW5nIHRv IG1lLCBzaW5jZSBpdCBsZWF2ZXMgZW1wdHkNCj4gPiA+ID4gPiB3aGF0IHdlIGFyZSBtYXBwaW5n IGZyb20uICBQZXJoYXBzIGp1c3QgdGFsa2luZyBhYm91dCBhIHJlZ2lzdHJ5DQo+ID4gPiA+ID4g b2YgIkNCT1IgbWFwIGtleXMiIHdvdWxkIGJlIGJldHRlciwgYm90aCBoZXJlIGFuZCBpbiB0aGUg U2VjdGlvbiA5LjMNCj4gaW50cm8uDQo+ID4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0g VW5sZXNzIHRoZXJlIGlzIGFuIG9iamVjdGlvbiwgSSBjYW4gdXNlICJDQk9SIE1hcCBLZXlzIi4N Cj4gPiA+ID4NCj4gPiA+ID4gPiBTZWN0aW9uIDkuMw0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSSBz dWdnZXN0IGJlaW5nIHZlcnkgZXhwbGljaXQgYWJvdXQgd2hldGhlciBuZXcgcmVxdWVzdHMgZm9y DQo+ID4gPiA+ID4gcmVnaXN0cmF0aW9uIHNob3VsZCBiZSBkaXJlY3RlZCB0byB0aGUgbWFpbGlu ZyBsaXN0IG9yIHRvIElBTkEsDQo+ID4gPiA+ID4gYXMgd2UndmUgaGFkIHNvbWUgY29uZnVzaW9u IGFib3V0IHRoaXMgZWxzZXdoZXJlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gVGhlIGNyaXRlcmlh IHVzZWQgYnkgdGhlIGV4cGVydHMgYWxzbyBqdXN0IGxpc3RzIHRoaW5ncyB0aGV5DQo+ID4gPiA+ ID4gc2hvdWxkIGNvbnNpZGVyLCBidXQgZG9lcyBub3QgcHJvdmlkZSBmdWxsIGNsYXJpdHkgb24g d2hpY2gNCj4gPiA+ID4gPiBhbnN3ZXIgdG8gdGhlIHF1ZXN0aW9uIGlzIG1vcmUgbGlrZWx5IHRv IGJlIGFwcHJvdmVkLiAgKEFuZCB5ZXMsDQo+ID4gPiA+ID4gSSBrbm93IHRoYXQgdGhpcyB0ZXh0 IGlzIGxhcmdlbHkgY29waWVkIGZyb20gYWxyZWFkeSBwdWJsaXNoZWQNCj4gPiA+ID4gPiBSRkNz LCBidXQgd2UgY2FuIHN0aWxsIGRvDQo+ID4gPiA+ID4gYmV0dGVyLikNCj4gPiA+ID4NCj4gPiA+ ID4gW01lZF0gV2lsbCBjaGVjayB0aGlzLg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g U2VjdGlvbiA5LjMuMQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSWYgd2Ugd2FudCB0aGUgdmFsdWUg MCB0byBiZSByZXNlcnZlZCB3ZSBuZWVkIHRvIHNheSBzby4NCj4gPiA+ID4NCj4gPiA+ID4gW01l ZF0gMCBpcyBub3QgcGFydCBvZiB0aGUgYWxsb2NhdGlvbiByYW5nZS4NCj4gPiA+ID4NCj4gPiA+ ID4gPiBEbyB3ZSB3YW50IHRvIHNheSBhbnl0aGluZyBhYm91dCB0aGUgdXNhZ2Ugb2YgbmVnYXRp dmUgaW50ZWdlcnMNCj4gPiA+ID4gPiBhcyBtYXAga2V5cz8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ IEkgc3VnZ2VzdCBub3QgbWVudGlvbmluZyB0aGUgcG9zdGFsIGFkZHJlc3MsIGdpdmVuIHRoZSBy ZWNlbnQNCj4gPiA+ID4gPiAoZS5nLikgR0RQUiByZXF1aXJlbWVudHMuDQo+ID4gPiA+DQo+ID4g PiA+IFtNZWRdIEdvb2QgcG9pbnQuIERvbmUuDQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4g PiBTZWN0aW9uIDkuMy4yDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJdCBtYXkgYmUgd29ydGggbWVu dGlvbmluZyBUYWJsZSA0IGhlcmUgYXMgd2VsbC4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gT0su DQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBTZWN0aW9uIDkuNS4xDQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiBXZSBuZWVkIHRvIHNwZWNpZnkgd2hpY2ggcmFuZ2Ugb2YgdmFsdWVzIHdlIGFy ZSBhc2tpbmcgZm9yIGFuDQo+ID4gPiA+ID4gYWxsb2NhdGlvbiBmcm9tLg0KPiA+ID4gPg0KPiA+ ID4gPiBbTWVkXSBBZGRlZCBhIG1lbnRpb24gdG8gMC0yNTUgcmFuZ2UuDQo+ID4gPiA+DQo+ID4g PiA+ID4NCj4gPiA+ID4gPiBTZWN0aW9uIDkuNi4xDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBBcyBh Ym92ZSwgc3BlY2lmeSB3aGF0IHJhbmdlIHdlJ3JlIGFza2luZyBhYm91dC4NCj4gPiA+ID4NCj4g PiA+ID4gW01lZF0gT0suDQo+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBJIGV4cGVjdCB0 aGUgY3VycmVudCB0ZXh0IHRvIGdldCBzb21lIElFU0cgKG9yIGRpcmVjdG9yYXRlKQ0KPiA+ID4g PiA+IGZlZWRiYWNrIHRoYXQgdGhlIERhdGEgSXRlbSBhbmQgU2VtYW50aWNzIGRlc2NyaXB0aW9u cyBhcmUgcmVwZXRpdGl2ZQ0KPiBhbmQgYmFuYWwuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBTZWN0 aW9uIDkuNw0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSUlVQywgSUFOQSBpcyBnb2luZyB0byBhc2sg aWYgd2Ugd2FudCB0aGlzIG1vZHVsZSB0byBiZQ0KPiA+ID4gPiA+ICJtYWludGFpbmVkIGJ5IElB TkEiLCBzbyBpdCB3b3VsZCBiZSBnb29kIHRvIGhhdmUgYW4gYW5zd2VyDQo+ID4gPiA+ID4gcmVh ZHkgZXZlbiBpZiB3ZSBkb24ndCBwdXQgaXQgaW4gdGhlIGRvY3VtZW50IHRleHQuDQo+ID4gPiA+ DQo+ID4gPiA+IFtNZWRdIFRoaXMgaXMgZGlzY3Vzc2VkIGluIC0yNi4NCj4gPiA+ID4NCj4gPiA+ ID4gPg0KPiA+ID4gPiA+ICAgIFJhdGUtbGltaXRpbmcgRE9UUyByZXF1ZXN0cywgaW5jbHVkaW5n IHRob3NlIHdpdGggbmV3ICdjdWlkJyB2YWx1ZXMsDQo+ID4gPiA+ID4gICAgZnJvbSB0aGUgc2Ft ZSBET1RTIGNsaWVudCBkZWZlbmRzIGFnYWluc3QgRG9TIGF0dGFja3MgdGhhdA0KPiA+ID4gPiA+ IHdvdWxkDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBXaXRoIHJlc3BlY3QgdG8gIm5ldyIgJ2N1aWQn IHZhbHVlcywgaXMgdGhlIHNlcnZlciByZXF1aXJlZCB0bw0KPiA+ID4gPiA+IHJlbWVtYmVyIHdo aWNoIG9uZXMgaXQgaGFzIHNlZW4gaW4gcGVycGV0dWl0eSwgb3IgY2FuIGl0IHRpbWUNCj4gPiA+ ID4gPiB0aGVtIG91dCBldmVudHVhbGx5Pw0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBUaGUgYXR0 YWNrIHZlY3RvciBpcyBhIERPVFMgY2xpZW50IHdoaWNoIGNoYW5nZXMgZnJlcXVlbnRseQ0KPiA+ ID4gPiBpdHMNCj4gPiBjdWlkLg0KPiA+ID4gVGhlIERPVFMgc2VydmVyIGNhbiBzZXQgYW4gaW50 ZXJ2YWwgaW4gd2hpY2ggdGhlIHNhbWUgY2xpZW50IGNhbm5vdA0KPiA+ID4gcHJlc2VudA0KPiA+ IGENCj4gPiA+IG5ldyBjdWlkLg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gU2VjdGlv biAxMA0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNl ZW0gdG8gYmUgdGFraW5nIGEgbmFycm93IGZvY3VzIG9uDQo+ID4gPiA+ID4gdGhlIHJlcXVpcmVt ZW50cyBmb3IgYW5kIGNvbnNlcXVlbmNlcyBvZiBzcGVjaWZpYyBiaXRzIG9uIHRoZQ0KPiA+ID4g PiA+IHdpcmUgaW4gdGhlIHNpZ25hbCBjaGFubmVsIHByb3RvY29sLiAgSSB0aGluayBpdCdzIGFw cHJvcHJpYXRlDQo+ID4gPiA+ID4gdG8gYWxzbyBpbmNsdWRlIHNvbWUgaGlnaC1sZXZlbCB0aG91 Z2h0cyBhYm91dCB0aGUgZnVuY3Rpb25hbA0KPiA+ID4gPiA+IGJlaGF2aW9yIG9mIHRoZSBwcm90 b2NvbCwgYWxsb3dpbmcgdG8gc2lnbmFsIHRoYXQgYW4gYXR0YWNrIGlzDQo+ID4gPiA+ID4gdW5k ZXJ3YXkgYW5kIHRyaWdnZXIgbWl0aWdhdGlvbiwgaW5jcmVhc2luZyB0aGUgYXZhaWxhYmlsaXR5 IG9mDQo+ID4gPiA+ID4gc2VydmljZXMsIGV0Yy4sIGFuZCB0aGUgcmlza3MgdGhhdCBhcmUgcG9z ZWQgYnkgdGhlIHByb3RvY29sDQo+ID4gPiA+ID4gZmFpbGluZyB0byB3b3JrIHByb3Blcmx5LCB3 aGV0aGVyIHRoYXQgbWVhbnMgbGV0dGluZyBhdHRhY2sNCj4gPiA+ID4gPiB0cmFmZmljIHRocm91 Z2ggb3IgaW1wcm9wZXJseSBibG9ja2luZyBsZWdpdGltYXRlIHRyYWZmaWMuDQo+ID4gPiA+DQo+ ID4gPiA+IFtNZWRdIFdvdWxkIGEgcG9pbnRlciB0byB0aGUgYXJjaGl0ZWN0dXJlL3JlcXVpcmVt ZW50cyBJLURzIGJlDQo+ID4gPiA+IHN1ZmZpY2llbnQNCj4gPiB0bw0KPiA+ID4gY292ZXIgdG8g aGlnaC1sZXZlbCBhc3BlY3RzPw0KPiA+ID4NCj4gPiA+IFRob3NlIGRvY3VtZW50cycgc2VjdXJp dHkgY29uc2lkZXJhdGlvbnMgZG8gc2VlbSB0byBjb3ZlciB0aGUNCj4gPiA+IHJlbGV2YW50DQo+ ID4gcG9pbnRzLA0KPiA+ID4geWVzLg0KPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFNlY3Rp b24gMTMuMQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSSB0aGluayB0aGUgSUFOQSByZWdpc3RyaWVz IHNob3VsZCBiZSBsaXN0ZWQgYXMgSW5mb3JtYXRpb25hbA0KPiA+ID4gPiA+IGFuZCBub3QgTm9y bWF0aXZlIHJlZmVyZW5jZXMuDQo+ID4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gRG9u ZS4NCj4gPiA+ID4NCj4gPiA+ID4gPiBTZWN0aW9uIDEzLjINCj4gPiA+ID4gPg0KPiA+ID4gPiA+ IFBlbmRpbmcgcmVzb2x1dGlvbiBvZiB0aGUgcXVlc3Rpb24gYWJvdXQgdXNpbmcNCj4gPiA+ID4g PiBkcmFmdC1pZXRmLWNvcmUteWFuZy1jYm9yIHJ1bGVzIG9yIFJGQzc5NTErUkZDNzA0OSwgdGhl DQo+ID4gPiA+ID4gZHJhZnQtaWV0Zi1jb3JlLXlhbmctY2JvciByZWZlcmVuY2UgbWF5IG5lZWQg dG8gYmUgTm9ybWF0aXZlLg0KPiA+ID4gPg0KPiA+ID4gPiBbTWVkXSBQbGVhc2UgcmVmZXIgdG8g bXkgYW5zd2VyIHRvIHRoYXQgcXVlc3Rpb24uDQo+ID4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5n LQ0KPiA+IGNib3IgaXMNCj4gPiA+IGluZm9ybWF0aXZlLg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ ID4gPiA+ID4gR2l2ZW4gdGhhdCAiVVJJIiBpcyBhIHdlbGwta25vd24gYWJicmV2aWF0aW9uLCB3 ZSBtYXkgYmUgYWJsZSB0bw0KPiA+ID4gPiA+IGdldCBhd2F5IHdpdGggbm90IGNpdGluZyBSRkMg Mzk4Ni4gIE9uIHRoZSBvdGhlciBoYW5kLCBpdCdzIG5vdA0KPiA+ID4gPiA+IGNhdXNpbmcgYW55 IGhhcm0gdG8gbGVhdmUgaXQgaW4uLi4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gV2lsbCBsZWF2 ZSBpdC4NCj4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFJGQyA0NjMyIG5lZWRzIHRvIGJl IE5vcm1hdGl2ZSwgc2luY2Ugd2UgbmVlZCB0byBrbm93IENJRFIgdG8NCj4gPiA+ID4gPiBlbmNv ZGUvZGVjb2RlIHRhcmdldC1wcmVmaXhlcy4NCj4gPiA+ID4NCj4gPiA+ID4gW01lZF0gV29ya3Mg Zm9yIG1lLg0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gU2ltaWxhcmx5LCBJIHRoaW5r IHRoYXQgUkZDcyA2MjM0DQo+ID4gPiA+DQo+ID4gPiA+IFtNZWRdIFRoaXMgb25lIGlzIG5vdCBs aXN0ZWQgYXMgbm9ybWF0aXZlIGJlY2F1c2Ugb3RoZXIgaGFzaCBhbGdvcw0KPiA+ID4gPiBtYXkg YmUNCj4gPiA+IHVzZWQuDQo+ID4gPg0KPiA+ID4gSXQncyBhIGxvd2VyLWNhc2UgInJlY29tbWVu ZGVkIiwgd2hpY2ggY2FuIHByb2JhYmx5IGVrZSBieSBhcw0KPiA+ID4gZGVzY3JpcHRpdmUNCj4g PiBhbmQNCj4gPiA+IG5vdCBhICJwcm90b2NvbCBmZWF0dXJlIiAoc2VlIGJlbG93KS4NCj4gPiA+ DQo+ID4gPiA+ICwgNzQxMw0KPiA+ID4gPiBbTWVkXSBUaGUgc3VwcG9ydCBpZiBURk8gaXMgbm90 IG1hbmRhdG9yeS4NCj4gPiA+DQo+ID4gPiBJdCdzIGEgU0hPVUxEICgiU0hPVUxEIGltcGxlbWVu dCBhbGwgb2YgdGhlIGZvbGxvd2luZyBpdGVtcyIpLCB0aG91Z2guLi4NCj4gPiA+DQo+ID4gPiA+ ICwgNzU4OQ0KPiA+ID4gPiBbTWVkXSBUaGlzIGlzIGEgTUFZIGluIHRoZSBzcGVjLiBJdCBpcyBq dXN0IGZpbmUgdG8gbGVhdmUgaXQgYXMNCj4gPiBpbmZvcm1hdGl2ZS4NCj4gPiA+DQo+ID4gPiAu Li4ucGVyDQo+ID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9ibG9nL2llc2ctc3RhdGVtZW50LW5v cm1hdGl2ZS1hbmQtaW5mb3JtYXRpdmUtDQo+ID4gPiByZWZlcmVuY2VzLw0KPiA+ID4gbm90ZSAx LCAiRXZlbiByZWZlcmVuY2VzIHRoYXQgYXJlIHJlbGV2YW50IG9ubHkgZm9yIG9wdGlvbmFsDQo+ ID4gPiBmZWF0dXJlcyBtdXN0DQo+ID4gYmUNCj4gPiA+IGNsYXNzaWZpZWQgYXMgbm9ybWF0aXZl IGlmIHRoZXkgbWVldCB0aGUgYWJvdmUgY29uZGl0aW9ucyBmb3INCj4gPiA+IG5vcm1hdGl2ZSBy ZWZlcmVuY2VzLiINCj4gPiA+DQo+ID4gPiBUaGlzIGRvZXMgc2VlbSB0byBiZSBzb21ldGhpbmcg d2UgYWN0dWFsbHkgbmVlZCB0byBjYXJlIGFib3V0IGJlZm9yZQ0KPiA+ID4gSUVURg0KPiA+IExD LA0KPiA+ID4gdGhvdWdoLCBhcyA3NDEzIGlzIEV4cGVyaW1lbnRhbCBhbmQgbm90IGxpc3RlZCBp biB0aGUgZG93bnJlZg0KPiA+ID4gcmVnaXN0cnkgKGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2Rvd25yZWYvKSwgc28gaWYgd2UgbGVhdmUNCj4gPiA+IGl0IGFzDQo+ID4gSW5mb3Jt YXRpb25hbA0KPiA+ID4gYW5kIGhhdmUgdG8gY2hhbmdlIGl0IGxhdGVyLCB3ZSdkIG5lZWQgdG8g YWxzbyByZXN0YXJ0L3JlLXJ1biB0aGUgSUVURiBMQy4NCj4gPiA+DQo+ID4gPiA+ICwgNzkxOA0K PiA+ID4gPiBbTWVkXSBJZGVtIGFzIFRGTy4NCj4gPiA+DQo+ID4gPiBUaGlzIGlzIEluZm9ybWF0 aW9uYWwgKGkuZS4sIGFsc28gc3VzY2VwdGlibGUgdG8gdGhlIGRvd25yZWYgaXNzdWUpLg0KPiA+ ID4NCj4gPiA+ID4gLCA3OTI0DQo+ID4gPiA+IFtNZWRdIElkZW0gYXMgVEZPLg0KPiA+ID4NCj4g PiA+IChpZGVtIHgyKSwgdGhvdWdoIHRoaXMgaXMgc3RhbmRhcmRzLXRyYWNrIGF0IGxlYXN0LCBz byB3ZSBoYXZlIG1vcmUNCj4gPiA+IGxlZXdheQ0KPiA+IHRvDQo+ID4gPiBtb3ZlIHRoaW5ncyBh cm91bmQgbGF0ZXIuDQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPiBJIHRoaW5rIHRoZSBtb3N0 IGV4cGVkaWVudCB0aGluZyB0byBkbyBoZXJlIHdvdWxkIGp1c3QgYmUgdG8gcmVsYXgNCj4gPiA+ IHRoZSByZXF1aXJlbWVudCBmb3IgVExTIEZhbHN0IFNUYXJ0LCBURk8sIGFuZCBDYWNoZWQgSW5m b3JtYXRpb24sDQo+ID4gPiBwZXJoYXBzIHRvDQo+ID4gdGV4dA0KPiA+ID4gbGlrZSAiVGhlIGZv bGxvd2luZyBpdGVtcyBhcmUgYWRkaXRpb25hbCBtZWNoYW5pc21zIHRoYXQgY2FuIHJlZHVjZQ0K PiA+ID4gdGhlDQo+ID4gZGVsYXkNCj4gPiA+IHJlcXVpcmVkIHRvIGRlbGl2ZXIgYSBET1RTIHNp Z25hbCBjaGFubmVsIG1lc3NhZ2UsIHdoaWNoDQo+ID4gPiBpbXBsZW1lbnRhdGlvbnMNCj4gPiBh cmUNCj4gPiA+IGVuY291cmFnZWQgdG8gaW1wbGVtZW50IGFzIHBvc3NpYmxlLiIsIGJ1dCBJIGFt IG9wZW4gdG8gb3RoZXINCj4gPiA+IHN1Z2dlc3Rpb25zDQo+ID4gZm9yDQo+ID4gPiB3aGF0IHRv IGRvLg0KPiA+DQo+ID4gVExTIEZhbHNlIFN0YXJ0IGFuZCBDYWNoZWQgSW5mb3JtYXRpb24gY2Fu IGJlIG1hZGUgbm9ybWF0aXZlDQo+ID4gcmVmZXJlbmNlcyAoanVzdCBsaWtlIHdlIHJlZmVyZW5j ZWQgdGhlc2UgaXRlbXMgaW4gb3VyIHNwZWMNCj4gPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvcmZjODMxMCkNCj4gPiBURk8gaXMgZm9yIFRDUCBvbmx5IGFuZCB0aGF0IHRvbyBmb3IgZXhj ZXB0aW9uIHNjZW5hcmlvcyB3aGVyZSBVRFAgaXMNCj4gPiBibG9ja2VkLiBURk8gY2FuIHJlbW92 ZWQgZnJvbSB0aGUgbGlzdCBvZiBpdGVtcyB0aGUgRE9UUyBhZ2VudHMgU0hPVUxEDQo+ID4gaW1w bGVtZW50Lg0KPiA+DQo+ID4gTkVXOg0KPiA+IENvbXBhcmVkIHRvIFVEUCwgRE9UUyBzaWduYWwg Y2hhbm5lbCBvdmVyIFRDUCByZXF1aXJlcyBhbiBhZGRpdGlvbmFsDQo+ID4gcm91bmQtIHRyaXAg dGltZSAoUlRUKSBvZiBsYXRlbmN5IHRvIGVzdGFibGlzaCBhIFRDUCBjb25uZWN0aW9uLg0KPiA+ IEltcGxlbWVudGF0aW9ucyBhcmUgZW5jb3VyYWdlZCB0byBpbXBsZW1lbnQgVENQIEZhc3QgT3Bl biBbUkZDNzQxM10gdG8NCj4gPiBlbGltaW5hdGUgdGhhdCBSVFQgd2hlbiBpbmZvcm1hdGlvbiBl eGlzdHMgZnJvbSBwcmlvciBUQ1AgY29ubmVjdGlvbi4NCj4gPg0KPiA+IC1UaXJ1DQo+ID4NCj4g PiA+DQo+ID4gPg0KPiA+ID4gPiAsIGFuZCA3OTUxDQo+ID4gPiA+IFtNZWRdIHRoaXMgb25lIHdh cyBub3QgbGlzdGVkIGFzIG5vcm1hdGl2ZSBiZWNhdXNlIHRoZSBkb2N1bWVudA0KPiA+ID4gPiBs aXN0cyB0d28NCj4gPiA+IHdheXMgdG8gZG8gdGhlIG1hcHBpbmcuDQo+ID4gPg0KPiA+ID4gQWdy ZWVkLg0KPiA+ID4NCj4gPiA+IC1CZW4NCj4gPiA+DQo+ID4gPiA+ID4gc2hvdWxkIGFsc28gYmUg Tm9ybWF0aXZlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiAtQmVuDQo+ID4gPiA+ DQo+ID4gPg0KPiA+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4g PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMNCg== From nobody Mon Jan 21 03:55:20 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B273812867A; Mon, 21 Jan 2019 03:55:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w_5vZP4m3Yve; Mon, 21 Jan 2019 03:55:16 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE71C12E043; Mon, 21 Jan 2019 03:55:15 -0800 (PST) Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 43jqjr6ZDqz5vpX; Mon, 21 Jan 2019 12:55:12 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.27]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 43jqjr5hn2zBrLR; Mon, 21 Jan 2019 12:55:12 +0100 (CET) Received: from OPEXCAUBM6F.corporate.adroot.infra.ftgroup (10.114.13.101) by OPEXCLILM7C.corporate.adroot.infra.ftgroup (10.114.31.27) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 21 Jan 2019 12:55:12 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6F.corporate.adroot.infra.ftgroup ([fe80::c489:b768:686a:545b%23]) with mapi id 14.03.0415.000; Mon, 21 Jan 2019 12:55:12 +0100 From: To: "Konda, Tirumaleswar Reddy" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuABQDVAAAAzXK9AAbbFEAAAAVkFwAAi2QcA= Date: Mon, 21 Jan 2019 11:55:11 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0AE14@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 11:55:20 -0000 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0tLS1NZXNz YWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgW21h aWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiBFbnZvecOpwqA6IGx1 bmRpIDIxIGphbnZpZXIgMjAxOSAxMDoxMw0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kv T0xOOyBCZW5qYW1pbiBLYWR1aw0KPiBDY8KgOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcNCj4gT2JqZXTCoDogUkU6IFtEb3RzXSBBRCByZXZp ZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg1dGggUGFydCkNCj4gDQo+ ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFp ckBvcmFuZ2UuY29tIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiA+IFNlbnQ6IE1v bmRheSwgSmFudWFyeSAyMSwgMjAxOSAxOjAxIFBNDQo+ID4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3 YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiA+IEJlbmph bWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KPiA+IENjOiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0OiBSRTogW0RvdHNd IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDV0aA0KPiBQ YXJ0KQ0KPiA+DQo+ID4NCj4gPg0KPiA+IEhpIEJlbiwgYWxsLA0KPiA+DQo+ID4gUGxlYXNlIHNl ZSBpbmxpbmUuDQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4NCj4gPiA+IC0tLS0tTWVz c2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gRGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRk eQ0KPiA+ID4gW21haWx0bzpUaXJ1bWFsZXN3YXJSZWRkeV9Lb25kYUBNY0FmZWUuY29tXQ0KPiA+ ID4gRW52b3nDqcKgOiBzYW1lZGkgMTkgamFudmllciAyMDE5IDA3OjMyDQo+ID4gPiDDgMKgOiBC ZW5qYW1pbiBLYWR1azsgQk9VQ0FEQUlSIE1vaGFtZWQgVEdJL09MTiBDY8KgOg0KPiA+ID4gZHJh ZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnOyBkb3RzQGlldGYub3JnIE9iamV0 wqA6IFJFOg0KPiA+ID4gW0RvdHNdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWwtMjUgKDV0aCBQYXJ0KQ0KPiA+ID4NCj4gPiA+IEhpIEJlbiwNCj4gPiA+DQo+ID4g PiBQbGVhc2Ugc2VlIGlubGluZQ0KPiA+ID4NCj4gPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gPiA+ID4gRnJvbTogRG90cyA8ZG90cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhh bGYgT2YgQmVuamFtaW4gS2FkdWsNCj4gPiA+ID4gU2VudDogU2F0dXJkYXksIEphbnVhcnkgMTks IDIwMTkgMjozMyBBTQ0KPiA+ID4gPiBUbzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0K PiA+ID4gPiBDYzogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnOyBkb3Rz QGlldGYub3JnDQo+ID4gPiA+IFN1YmplY3Q6IFJlOiBbRG90c10gQUQgcmV2aWV3IG9mIGRyYWZ0 LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNQ0KPiA+ID4gPiAoNXRoDQo+ID4gPiBQYXJ0KQ0K PiA+ID4gPg0KPiA+ID4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRo ZSBvcmdhbml6YXRpb24uIERvIG5vdCBjbGljaw0KPiA+ID4gPiBsaW5rcw0KPiA+ID4gb3INCj4g PiA+ID4gb3BlbiBhdHRhY2htZW50cyB1bmxlc3MgeW91IHJlY29nbml6ZSB0aGUgc2VuZGVyIGFu ZCBrbm93IHRoZQ0KPiA+ID4gPiBjb250ZW50IGlzDQo+ID4gPiBzYWZlLg0KPiA+ID4gPg0KPiA+ ID4gPiBIaSBhbGwsDQo+ID4gPiA+DQo+ID4gPiA+IFRoYW5rcyBmb3IgYWxsIHRoZSBlZGl0cyBh bmQgdGhlIHB1Ymxpc2hlZCAtMjcuDQo+ID4gPiA+IEFzc3VtaW5nIEknbSBhY3R1YWxseSBjYXVn aHQgdXAgb24gYWxsIHRoZSByZXZpZXcvcmVzcG9uc2UgdGhyZWFkcywNCj4gPiA+ID4gSSB0aGlu ayB3ZSdyZSBwcmV0dHkgY2xvc2UgdG8gYmVpbmcgYWJsZSB0byBnbyB0byBJRVRGIExDIC0tIGhl cmUncw0KPiA+ID4gPiB3aGF0IEkgc2VlIGFzDQo+ID4gPiBzdGlsbCBsZWZ0Og0KPiA+ID4gPg0K PiA+ID4gPiAtIFdlIG5lZWQgdG8gc2V0dGxlIHRoZSByaXNrIG9mIG5lZWRpbmcgbm9ybWF0aXZl IGRvd25yZWZzIGNhbGxlZCBvdXQNCj4gZm9yDQo+ID4gPiA+ICAgdGhlIGxhc3QgY2FsbA0KPiA+ DQo+ID4gW01lZF0gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvOg0KPiA+ICogY2l0ZSA3NjE4Lzc2MjQg YXMgbm9ybWF0aXZlICgrIGluZGljYXRlIHRoYXQgYSBzaW1pbGFyIG1lY2hhbmlzbSB0byBmYWxz ZQ0KPiA+IHN0YXJ0IG1heSBhbHNvIGJlIGRlZmluZWQgZm9yIERUTFMpLg0KPiANCj4gaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc5MTggZG9lcyBub3QgcmVxdWlyZSBhbnkgY2hhbmdl cyB0byAoRClUTFMNCj4gb24tdGhlLXdpcmUgcHJvdG9jb2wgZGF0YSwgYW5kIERMVFMgYWxzbyBz dXBwb3J0cyBmYWxzZSBzdGFydCAoc2VlIHRoZSAoRClUTFMNCj4gcHJvZmlsZSBmb3IgSW9UIGRl dmljZXMgc3BlY2lmaWVkIGluDQo+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3OTI1 I3NlY3Rpb24tMjEpLg0KPiANCg0KW01lZF0gTm90IHN1cmUgdG8gZ2V0IHlvdXIgY29tbWVudC4g VGhlIGluaXRpYWwgcG9pbnQgZnJvbSBCZW4gaXMgdmFsaWQsIGhlbmNlIHRoaXMgYWRkaXRpb24g dG8gdGhlIGRyYWZ0OiANCg0KIlRMUyBGYWxzZSBTdGFydCBpcyBmb3JtYWxseSBkZWZpbmVkIGZv ciB1c2Ugd2l0aCBUTFMsIGJ1dCB0aGUgc2FtZSB0ZWNobmlxdWVzIGFyZSBhcHBsaWNhYmxlIHRv IERUTFMgYXMgd2VsbC4iIA0KDQo+ID4gKiB0d2VhayB0aGUgVEZPIHRleHQgdG8gbWFpbnRhaW4g aXQgYXMgaW5mb3JtYXRpdmUuDQo+ID4NCj4gPiA+ID4gLSBJIGp1c3Qgbm90aWNlZCB3aGlsZSBy ZXZpZXdpbmcgdGhlIGRpZmYgdGhhdCB3ZSBhbHNvIG5lZWQgdG8gc2F5IGENCj4gPiA+ID4gICBs aXR0bGUgbW9yZSBhYm91dCAoRClUTFMgMS4zIDAtUlRUIGRhdGEgKG1vcmUgYmVsb3cpDQo+ID4g PiA+IC0gSXQgbG9va3MgbGlrZSB3ZSBsb3N0IHRoZSBndWlkYW5jZSB0byB0aGUgRXhwZXJ0cyBh bmQgdGV4dCBhYm91dCB0aGUNCj4gPiA+ID4gICByZXZpZXcgbWFpbGluZyBsaXN0IGZyb20gdGhl IElBTkEgQ29uc2lkZXJhdGlvbnMsIGR1cmluZyB0aGUNCj4gcmVzaHVmZmxpbmcNCj4gPiA+ID4g ICBhcm91bmQgaGF2aW5nIElBTkEgbWFuYWdlIG1vcmUgdGhpbmdzDQo+ID4gPiA+DQo+ID4NCj4g PiBbTWVkXSBUaGF0IHdhcyBvbiBwdXJwb3NlLiBXZSB3b3VsZCBsaWtlIHRvIHJlbHkgb24gUkZD ODEyNiBydWxlcyBmb3INCj4gPiBkZWlnbmVkIGV4cGVydCByZXZpZXdzLg0KPiANCj4gSW4gYWRk aXRpb24gdG8gUkZDODEyNiB0byBkZWZlbmQgYWdhaW5zdCByZXBsYXkgYXR0YWNrcywgd2UgY2Fu IGFkZCB0aGUNCj4gZm9sbG93aW5nIGFkZGl0aW9uYWwgcnVsZXM6DQo+IA0KPiBUaGUgRE9UUyBz aWduYWwgY2hhbm5lbCBtZXNzYWdlcyBzZW50IGFzIGVhcmx5IGRhdGEgYnkgdGhlIERPVFMgY2xp ZW50DQo+IGFyZSBpZGVtcG90ZW50IHJlcXVlc3RzLiBGdXJ0aGVyLCBDb0FQIChhcyBkaXNjdXNz ZWQgaW4gU2VjdGlvbiA0LjQgb2YNCj4gUkZDNzI1MikgaXMgY2FwYWJsZSBvZiBwZXJmb3JtaW5n IG1lc3NhZ2UgZGVkdXBsaWNhdGlvbg0KPiB0byBoYW5kbGUgcmVwbGF5IG9mIENvQVAgcmVxdWVz dHMuDQo+IA0KDQpbTWVkXSBXb3JrcyBmb3IgbWUuIA0KDQo+IENoZWVycywNCj4gLVRpcnUNCj4g DQo+ID4NCj4gPiA+ID4gUmVnYXJkaW5nIHRoZSAoRClUTFMgMS4zIDAtUlRUIGRhdGEsIFJGQyA4 NDQ2IG5vdGVzIHRoYXQNCj4gPiA+ID4gIkFwcGxpY2F0aW9uIHByb3RvY29scyBNVVNUIE5PVCB1 c2UgMC1SVFQgZGF0YSB3aXRob3V0IGEgcHJvZmlsZSB0aGF0DQo+ID4gZGVmaW5lcyBpdHMgdXNl Lg0KPiA+ID4gPiBUaGF0IHByb2ZpbGUgbmVlZHMgdG8gaWRlbnRpZnkgd2hpY2ggbWVzc2FnZXMg b3IgaW50ZXJhY3Rpb25zIGFyZQ0KPiA+ID4gPiBzYWZlIHRvDQo+ID4gPiB1c2UNCj4gPiA+ID4g d2l0aCAwLVJUVCBhbmQgaG93IHRvIGhhbmRsZSB0aGUgc2l0dWF0aW9uIHdoZW4gdGhlIHNlcnZl ciByZWplY3RzDQo+ID4gPiA+IDAtUlRUDQo+ID4gPiBhbmQNCj4gPiA+ID4gZmFsbHMgYmFjayB0 byAxLVJUVC4iICBTbyB3ZSBlaXRoZXIgbmVlZCB0byBzYXkgd2hpY2ggY2xpZW50DQo+ID4gPiA+ IHJlcXVlc3RzIGFyZQ0KPiA+ID4gMC1SVFQNCj4gPiA+ID4gc2FmZSAoYW5kIHdoeSkgb3IgZGVm ZXIgdGhhdCBwcm9maWxlIHRvIGFub3RoZXIgZG9jdW1lbnQuDQo+ID4gPiA+IGRyYWZ0LWlldGYt DQo+ID4gPiBkbnNvcC0NCj4gPiA+ID4gc2Vzc2lvbi1zaWduYWwgaXMgcGVyaGFwcyBhbiBleGFt cGxlIG9mIGEgZG9jdW1lbnQgdGhhdCBzcGVjaWZpZXMNCj4gPiA+ID4gd2hpY2ggbWVzc2FnZXMg YXJlL2FyZW4ndCBhbGxvd2VkIGluIGVhcmx5IGRhdGEuDQo+ID4gPiA+IChkcmFmdC1pZXRmLWFj bWUtYWNtZSBpcyBhbm90aGVyLCBidXQgYW4gdW5pbnRlcmVzdGluZyBvbmUsIHNpbmNlDQo+ID4g PiA+IHRoZXkgbWFrZSBldmVyeSByZXF1ZXN0IGluY2x1ZGUgYSBzaW5nbGUtdXNlIG5vbmNlLCBh bmQgYWxsIG1lc3NhZ2VzDQo+ID4gPiA+IGFyZSAwLVJUVCBzYWZlLikgT3VyIHVzZSBvZiBpbmNy ZWFzaW5nICdtaWQnIHZhbHVlcyBtYXkgaGVscCBoZXJlLA0KPiA+ID4gPiBpbiB0ZXJtcyBvZiBh bGxvd2luZw0KPiA+ID4gREVMRVRFcw0KPiA+ID4gPiB0byBiZSBzYWZlLCBidXQgSSdkIGhhdmUg dG8gdGhpbmsgYSBsaXR0bGUgbW9yZSB0byBiZSBzdXJlIHRoYXQNCj4gPiA+ID4gcmVxdWVzdGlu ZyBtaXRpZ2F0aW9uIHdvdWxkIGJlIHNhZmUuICAoT24gZmlyc3QgZ2xhbmNlIHRoZQ0KPiA+ID4g PiBzZXNzaW9uLW1hbmFnZW1uZXQgYml0cw0KPiA+ID4gd291bGQNCj4gPiA+ID4gbm90IGJlIHNh ZmUsIGJ1dCBJIG1heSBiZSBtaXNzaW5nIHNvbWV0aGluZy4pDQo+ID4gPg0KPiA+ID4gVGhlIGRy YWZ0IG9ubHkgdXNlcyBpZGVtcG90ZW50IHJlcXVlc3RzIChHRVQsIFBVVCBhbmQgREVMRVRFKSwg YW5kDQo+ID4gPiBDb0FQIGlzIGNhcGFibGUgb2YgZGV0ZWN0aW5nIG1lc3NhZ2UgZHVwbGljYXRp b24gKHNlZQ0KPiA+ID4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcyNTIjc2VjdGlv bi00LjUpIGZvciBib3RoIGNvbmZpcm1hYmxlDQo+ID4gPiBhbmQgbm9uLWNvbmZpcm1hYmxlIG1l c3NhZ2VzLg0KPiA+ID4gIFsxXSBBbiBhdHRhY2tlciByZXBsYXlpbmcgREVMRVRFIHdpbGwgbm90 IGhhdmUgYW55IGFkdmVyc2UgaW1wYWN0LA0KPiA+ID4gMi4wMg0KPiA+ID4gKERlbGV0ZWQpIFJl c3BvbnNlIENvZGUgaXMgcmV0dXJuZWQgZXZlbiBpZiB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0DQo+ ID4gPiBkb2VzIG5vdCBleGlzdC4NCj4gPiA+IFsyXSBUaGUgdGVjaG5pcXVlcyBkaXNjdXNzZWQg aW4gU2VjdGlvbiA4IG9mIFJGQzg0NDYgc2hvdWxkIHN1ZmZpY2UgdG8NCj4gPiA+IGhhbmRsZSBh bnRpLXJlcGxheSAoZS5nLiBhbiBhdHRhY2tlciByZXBsYXlpbmcgYSAwLVJUVCBkYXRhIGNhcnJ5 aW5nDQo+ID4gPiBhbiBvbGQgbWl0aWdhdGlvbiByZXF1ZXN0IHJlcGxhY2VkIGJ5IGEgbmV3IG1p dGlnYXRpb24gc2NvcGUpLg0KPiA+ID4NCj4gPg0KPiA+IFtNZWRdIEZXSVcsIHdlIGRvIGFscmVh ZHkgaGF2ZSB0aGlzIHRleHQgaW4gdGhlIGRyYWZ0Og0KPiA+DQo+ID4gICAgICAgU2VjdGlvbiA4 IG9mIFtSRkM4NDQ2XSBkaXNjdXNzZXMgc29tZSBtZWNoYW5pc21zIHRvIGltcGxlbWVudCB0bw0K PiA+ICAgICAgIGxpbWl0IHRoZSBpbXBhY3Qgb2YgcmVwbGF5IGF0dGFja3Mgb24gMC1SVFQgZGF0 YS4gIElmIHRoZSBET1RTDQo+ID4gICAgICAgc2VydmVyIGFjY2VwdHMgMC1SVFQsIGl0IE1VU1Qg aW1wbGVtZW50IG9uZSBvZiB0aGVzZSBtZWNoYW5pc21zLg0KPiA+ICAgICAgIEEgRE9UUyBzZXJ2 ZXIgY2FuIHJlamVjdCAwLVJUVCBieSBzZW5kaW5nIGEgVExTIEhlbGxvUmV0cnlSZXF1ZXN0Lg0K PiA+DQo+ID4gPiA+DQo+ID4gPiA+IEZ1cnRoZXIgbm90ZXMgaW5saW5lLg0KPiA+ID4gPg0KPiA+ ID4gPiBPbiBUaHUsIEphbiAxNywgMjAxOSBhdCAwNjo1MTowNEFNICswMDAwLA0KPiA+ID4gPiBt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tDQo+ID4gPiA+IHdyb3RlOg0KPiA+ID4gPiA+IEhp IEJlbiwNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+ID4gPiA+ DQo+ID4gPiA+ID4gQ2hlZXJzLA0KPiA+ID4gPiA+IE1lZA0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4gPiA+IERlwqA6IEJlbmphbWlu IEthZHVrIFttYWlsdG86a2FkdWtAbWl0LmVkdV0gRW52b3nDqcKgOiBtZXJjcmVkaSAxNg0KPiA+ ID4gPiA+ID4gamFudmllciAyMDE5IDAxOjE0IMOAwqA6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwt Y2hhbm5lbEBpZXRmLm9yZw0KPiA+ID4gPiA+ID4gQ2PCoDogZG90c0BpZXRmLm9yZw0KPiA+ID4g PiA+ID4gT2JqZXTCoDogQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5l bC0yNQ0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFNlY3Rpb24gNy4yDQo+ID4gPiA+ID4gPg0K PiA+ID4gPiA+ID4gVGhlIFRMUyAxLjMgaGFuZHNoYWtlIHdpdGggMC1SVFQgZGlhZ3JhbSBuZWVk cyB0byBiZQ0KPiA+ID4gPiA+ID4gcmV2aXNpdGVkL3JlZnJlc2hlZCwgYXMgUkZDIDg0NDYgZG9l cyBub3QgbG9vayBsaWtlIHRoYXQuDQo+ID4gPiA+ID4gPiBBZGRpdGlvbmFsbHksIHRoZSB1c2Fn ZSBvZiBQU0sgYXMgd2VsbCBhcyBhIGNlcnRpZmljYXRlIGlzIG5vdA0KPiA+ID4gPiA+ID4gZGVm aW5lZCB1bnRpbCBkcmFmdC1ob3VzbGV5LXRscy10bHMxMy1jZXJ0LXdpdGgtZXh0ZXJuLXBzayBp cw0KPiA+ID4gcHVibGlzaGVkLg0KPiA+ID4gPiA+ID4gSSBhbHNvIG5vdGUgdGhhdCBpbiB0aGUg ZGlhZ3JhbSBhcyBwcmVzZW50ZWQsIHRoZSBjbGllbnQgaXMgbm90DQo+ID4gPiA+ID4gPiB5ZXQg a25vd24gdG8gYmUgYXV0aGVudGljYXRlZCB3aGVuIHRoZSBzZXJ2ZXIgc2VuZHMgaXRzIGluaXRp YWwNCj4gPiA+ID4gPiA+ICgwLjUtUlRUKSBET1RTIHNpZ25hbCBtZXNzYWdlLg0KPiA+ID4gPiA+ ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRdIE5vdGVkLiBUaGFua3MuDQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+IFNlY3Rpb24gNy4zDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gVGhpcyB3 aG9sZSBzZWN0aW9uIHNlZW1zIHRvIG9ubHkgYmUgcmVsZXZhbnQgZm9yIFVEUCB1c2FnZSwgc28N Cj4gPiA+ID4gPiA+IHByb2JhYmx5IHRoZSAiSWYgVURQIGlzIHVzZWQiIGNsYXVzZSBjYW4gYmUg ZHJvcHBlZCBhbmQgYW4NCj4gPiA+ID4gPiA+IGludHJvZHVjdG9yeSBzdGF0ZW1lbnQgYWRkZWQg ZWFybGllciBvbi4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRdIFdpbGwgY29uc2lkZXIgdGhh dC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFBhdGggTVRVIE1VU1QgYmUgZ3JlYXRlciB0aGFuIG9yDQo+IGVxdWFsIHRv DQo+ID4gPiA+ID4gPiAgICBbQ29BUCBtZXNzYWdlIHNpemUgKyBEVExTIG92ZXJoZWFkIG9mIDEz IG9jdGV0cyArIGF1dGhlbnRpY2F0aW9uDQo+ID4gPiA+ID4gPiAgICBvdmVyaGVhZCBvZiB0aGUg bmVnb3RpYXRlZCBEVExTIGNpcGhlciBzdWl0ZSArIGJsb2NrIHBhZGRpbmddDQo+ID4gPiA+ID4g PiAgICAoU2VjdGlvbiA0LjEuMS4xIG9mIFtSRkM2MzQ3XSkuICBJZiB0aGUgcmVxdWVzdCBzaXpl IGV4Y2VlZHMNCj4gPiA+ID4gPiA+IHRoZQ0KPiA+ID4gcGF0aA0KPiA+ID4gPiA+ID4gICAgTVRV IHRoZW4gdGhlIERPVFMgY2xpZW50IE1VU1Qgc3BsaXQgdGhlIERPVFMgc2lnbmFsIGludG8NCj4g c2VwYXJhdGUNCj4gPiA+ID4gPiA+ICAgIG1lc3NhZ2VzLCBmb3IgZXhhbXBsZSB0aGUgbGlzdCBv ZiBhZGRyZXNzZXMgaW4gdGhlICd0YXJnZXQtDQo+IHByZWZpeCcNCj4gPiA+ID4gPiA+ICAgIHBh cmFtZXRlciBjb3VsZCBiZSBzcGxpdCBpbnRvIG11bHRpcGxlIGxpc3RzIGFuZCBlYWNoIGxpc3QN Cj4gY29udmV5ZWQNCj4gPiA+ID4gPiA+ICAgIGluIGEgbmV3IFBVVCByZXF1ZXN0Lg0KPiA+ID4g PiA+ID4NCj4gPiA+ID4gPiA+IChEVExTIDEuMyB3aWxsIGhhdmUgYSBzaG9ydCBoZWFkZXIgZm9y IHNvbWUgcGFja2V0cywgdGhhdCBpcw0KPiA+ID4gPiA+ID4gbGVzcyB0aGFuDQo+ID4gPiA+ID4g PiAxMyBvY3RldHMuKQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gVGhlIHRleHQgaXMgbW9y ZSBhYm91dCAxLjIuIFdlIGNhbiBhZGQgYSAxLjMgbm90ZSBpZiB5b3UNCj4gPiA+ID4gPiB0aGlu ayBpdA0KPiA+ID4gaXMNCj4gPiA+ID4gdXNlZnVsIGZvciB0aGUgZGlzY3Vzc2lvbi4NCj4gPiA+ ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFNlY3Rpb24gOA0KPiA+ID4gPiA+ID4NCj4g PiA+ID4gPiA+IFdlJ3ZlIGdvdCBzb21lIHJlcXVpcmVtZW50cyBpbiBoZXJlIGFib3V0IGxpbWl0 aW5nIGJlaGF2aW9yIG9mDQo+ID4gPiA+ID4gPiBjbGllbnRzL3NlcnZlcnMgd2hlbiB0YWxraW5n IHRvIGdhdGV3YXlzOyBpcyBrbm93aW5nIGFib3V0IHRoZQ0KPiA+ID4gPiA+ID4gcHJlc2VuY2Ug b2YgYSBnYXRld2F5IHNvbWV0aGluZyB0aGF0J3MgcmVxdWlyZWQgdG8gaGFwcGVuIG91dCBvZg0K PiA+ID4gPiA+ID4gYmFuZCBvciBpcyB0aGVyZSBhbiBpbi1iYW5kIHdheSB0byBpZGVudGlmeSB0 aGF0IHRoZSBwZWVyIGlzIGENCj4gZ2F0ZXdheT8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRd IEFuIGFnZW50IGRvZXMgbm90IG5lY2Vzc2FyeSBrbm93IHRoYXQgaXQgcGVlciBpcyBnYXRld2F5 LiBBDQo+ID4gPiA+ID4gZ2F0ZXdheQ0KPiA+ID4gaXMNCj4gPiA+ID4gc2VlbiBhcyBhIHNlcnZl ciBmb3IgdGhlIGNsaWVudCwgYW5kIGEgY2xpZW50IGZvciBhIHNlcnZlci4NCj4gPiA+ID4gPg0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ICAgIG1lc3NhZ2VzIGZyb20gYW4gYXV0aG9yaXplZCBE T1RTIGdhdGV3YXksIHRoZXJlYnkgY3JlYXRpbmcgYQ0KPiA+ID4gPiA+ID4gdHdvLQ0KPiA+ID4g bGluaw0KPiA+ID4gPiA+ID4gICAgY2hhaW4gb2YgdHJhbnNpdGl2ZSBhdXRoZW50aWNhdGlvbiBi ZXR3ZWVuIHRoZSBET1RTIGNsaWVudCBhbmQNCj4gdGhlDQo+ID4gPiA+ID4gPiAgICBET1RTIHNl cnZlci4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBUaGlzIHNlZW1zIHRvIGlnbm9yZSB0aGUg cG9zc2liaWxpdHkgb2Ygc2V0dXBzIHRoYXQgaW5jbHVkZSBib3RoDQo+ID4gPiA+ID4gPiBjbGll bnQtZG9tYWluIGFuZCBzZXJ2ZXItZG9tYWluIGdhdGV3YXlzLg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gW01lZF0gSSB1cGRhdGVkIHRoZSB0ZXh0IHRvIG1lbnRpb24gdGhpcyBpcyBvbmx5IGFuIGV4 YW1wbGUuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiAgICAgICAgICAgICAg ICAgIERPVFMgY2xpZW50IGNlcnRpZmljYXRlIHZhbGlkYXRpb24gTVVTVCBiZQ0KPiA+ID4gPiA+ ID4gcGVyZm9ybWVkDQo+ID4gPiBhcw0KPiA+ID4gPiA+ID4gICAgcGVyIFtSRkM1MjgwXSBhbmQg dGhlIERPVFMgY2xpZW50IGNlcnRpZmljYXRlIE1VU1QgY29uZm9ybSB0bw0KPiB0aGUNCj4gPiA+ ID4gPiA+ICAgIFtSRkM1MjgwXSBjZXJ0aWZpY2F0ZSBwcm9maWxlLiAgWy4uLl0NCj4gPiA+ID4g PiA+DQo+ID4gPiA+ID4gPiBUaGlzIHNlZW1zIHRvIGR1cGxpY2F0ZSBhIHJlcXVpcmVtZW50IGFs cmVhZHkgc3RhdGVkIGluIFNlY3Rpb24NCj4gPiA+ID4gPiA+IDcuMTsgaXQncyBwcm9iYWJseSBi ZXN0IHRvIG9ubHkgaGF2ZSBub3JtYXRpdmUgbGFuZ3VhZ2UgaW4gb25lDQo+ID4gPiA+ID4gPiBs b2NhdGlvbiwgZXZlbiBpZiB3ZSBuZWVkIHRvIG1lbnRpb24gdGhlIHRvcGljIGluIG11bHRpcGxl DQo+IGxvY2F0aW9ucy4NCj4gPiA+ID4gPiA+IFNpbWlsYXJseSBmb3IgdGhlIG11dHVhbCBhdXRo ZW50aWNhdGlvbiByZXF1aXJlbWVudCwgd2hpY2ggd2UNCj4gPiA+ID4gPiA+IGR1cGxpY2F0ZSBp biB0aGUgc2Vjb25kIGFuZCBmb3VydGggcGFyYWdyYXBocyBvZiB0aGlzIHNlY3Rpb24uDQo+ID4g PiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBHb29kIHBvaW50LiBGaXhlZC4NCj4gPiA+ID4gPg0KPiA+ ID4gPiA+ID4NCj4gPiA+ID4gPiA+IElmIHdlIGRvbid0IHdhbnQgdG8gdXNlIGV4YW1wbGUuY29t IHZzLiBleGFtcGxlLm5ldCBhcyBzYW1wbGUNCj4gPiA+ID4gPiA+IGRvbWFpbnMsIHdlIGNhbiBh bHNvIHVzZSB3aGF0ZXZlcndld2FudC5leGFtcGxlLCBwZXIgUkZDIDY3NjEuDQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiBbTWVkXSBXaWxsIG1haW50YWluIHRoZSBvbmVzIGFscmVhZHkgaW4gdGhlIGRy YWZ0LiBUaGFua3MuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBTZWN0aW9u IDkNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBXZSBzaG91bGQgbWVudGlvbiB0aGUgbWVkaWEt dHlwZSBhbGxvY2F0aW9uIGluIHRoZSB0b3AtbGV2ZWwNCj4gc2VjdGlvbi4NCj4gPiA+ID4gPg0K PiA+ID4gPiA+IFtNZWRdIFdpbGwgZml4IHRoYXQuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ ID4gPiA+ID4gPiAibWFwcGluZ3MgdG8gQ0JPUiIgZmVlbHMgY29uZnVzaW5nIHRvIG1lLCBzaW5j ZSBpdCBsZWF2ZXMgZW1wdHkNCj4gPiA+ID4gPiA+IHdoYXQgd2UgYXJlIG1hcHBpbmcgZnJvbS4g IFBlcmhhcHMganVzdCB0YWxraW5nIGFib3V0IGEgcmVnaXN0cnkNCj4gPiA+ID4gPiA+IG9mICJD Qk9SIG1hcCBrZXlzIiB3b3VsZCBiZSBiZXR0ZXIsIGJvdGggaGVyZSBhbmQgaW4gdGhlIFNlY3Rp b24NCj4gOS4zDQo+ID4gaW50cm8uDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g W01lZF0gVW5sZXNzIHRoZXJlIGlzIGFuIG9iamVjdGlvbiwgSSBjYW4gdXNlICJDQk9SIE1hcCBL ZXlzIi4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gU2VjdGlvbiA5LjMNCj4gPiA+ID4gPiA+DQo+ ID4gPiA+ID4gPiBJIHN1Z2dlc3QgYmVpbmcgdmVyeSBleHBsaWNpdCBhYm91dCB3aGV0aGVyIG5l dyByZXF1ZXN0cyBmb3INCj4gPiA+ID4gPiA+IHJlZ2lzdHJhdGlvbiBzaG91bGQgYmUgZGlyZWN0 ZWQgdG8gdGhlIG1haWxpbmcgbGlzdCBvciB0byBJQU5BLA0KPiA+ID4gPiA+ID4gYXMgd2UndmUg aGFkIHNvbWUgY29uZnVzaW9uIGFib3V0IHRoaXMgZWxzZXdoZXJlLg0KPiA+ID4gPiA+ID4NCj4g PiA+ID4gPiA+IFRoZSBjcml0ZXJpYSB1c2VkIGJ5IHRoZSBleHBlcnRzIGFsc28ganVzdCBsaXN0 cyB0aGluZ3MgdGhleQ0KPiA+ID4gPiA+ID4gc2hvdWxkIGNvbnNpZGVyLCBidXQgZG9lcyBub3Qg cHJvdmlkZSBmdWxsIGNsYXJpdHkgb24gd2hpY2gNCj4gPiA+ID4gPiA+IGFuc3dlciB0byB0aGUg cXVlc3Rpb24gaXMgbW9yZSBsaWtlbHkgdG8gYmUgYXBwcm92ZWQuICAoQW5kIHllcywNCj4gPiA+ ID4gPiA+IEkga25vdyB0aGF0IHRoaXMgdGV4dCBpcyBsYXJnZWx5IGNvcGllZCBmcm9tIGFscmVh ZHkgcHVibGlzaGVkDQo+ID4gPiA+ID4gPiBSRkNzLCBidXQgd2UgY2FuIHN0aWxsIGRvDQo+ID4g PiA+ID4gPiBiZXR0ZXIuKQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gV2lsbCBjaGVjayB0 aGlzLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gU2VjdGlvbiA5LjMuMQ0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IElmIHdlIHdhbnQgdGhlIHZhbHVlIDAgdG8gYmUgcmVz ZXJ2ZWQgd2UgbmVlZCB0byBzYXkgc28uDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBbTWVkXSAwIGlz IG5vdCBwYXJ0IG9mIHRoZSBhbGxvY2F0aW9uIHJhbmdlLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g PiBEbyB3ZSB3YW50IHRvIHNheSBhbnl0aGluZyBhYm91dCB0aGUgdXNhZ2Ugb2YgbmVnYXRpdmUg aW50ZWdlcnMNCj4gPiA+ID4gPiA+IGFzIG1hcCBrZXlzPw0KPiA+ID4gPiA+ID4NCj4gPiA+ID4g PiA+IEkgc3VnZ2VzdCBub3QgbWVudGlvbmluZyB0aGUgcG9zdGFsIGFkZHJlc3MsIGdpdmVuIHRo ZSByZWNlbnQNCj4gPiA+ID4gPiA+IChlLmcuKSBHRFBSIHJlcXVpcmVtZW50cy4NCj4gPiA+ID4g Pg0KPiA+ID4gPiA+IFtNZWRdIEdvb2QgcG9pbnQuIERvbmUuDQo+ID4gPiA+ID4NCj4gPiA+ID4g PiA+DQo+ID4gPiA+ID4gPiBTZWN0aW9uIDkuMy4yDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4g SXQgbWF5IGJlIHdvcnRoIG1lbnRpb25pbmcgVGFibGUgNCBoZXJlIGFzIHdlbGwuDQo+ID4gPiA+ ID4NCj4gPiA+ID4gPiBbTWVkXSBPSy4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4g PiA+IFNlY3Rpb24gOS41LjENCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBXZSBuZWVkIHRvIHNw ZWNpZnkgd2hpY2ggcmFuZ2Ugb2YgdmFsdWVzIHdlIGFyZSBhc2tpbmcgZm9yIGFuDQo+ID4gPiA+ ID4gPiBhbGxvY2F0aW9uIGZyb20uDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBBZGRlZCBh IG1lbnRpb24gdG8gMC0yNTUgcmFuZ2UuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ ID4gPiBTZWN0aW9uIDkuNi4xDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gQXMgYWJvdmUsIHNw ZWNpZnkgd2hhdCByYW5nZSB3ZSdyZSBhc2tpbmcgYWJvdXQuDQo+ID4gPiA+ID4NCj4gPiA+ID4g PiBbTWVkXSBPSy4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IEkgZXhwZWN0 IHRoZSBjdXJyZW50IHRleHQgdG8gZ2V0IHNvbWUgSUVTRyAob3IgZGlyZWN0b3JhdGUpDQo+ID4g PiA+ID4gPiBmZWVkYmFjayB0aGF0IHRoZSBEYXRhIEl0ZW0gYW5kIFNlbWFudGljcyBkZXNjcmlw dGlvbnMgYXJlDQo+IHJlcGV0aXRpdmUNCj4gPiBhbmQgYmFuYWwuDQo+ID4gPiA+ID4gPg0KPiA+ ID4gPiA+ID4gU2VjdGlvbiA5LjcNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBJSVVDLCBJQU5B IGlzIGdvaW5nIHRvIGFzayBpZiB3ZSB3YW50IHRoaXMgbW9kdWxlIHRvIGJlDQo+ID4gPiA+ID4g PiAibWFpbnRhaW5lZCBieSBJQU5BIiwgc28gaXQgd291bGQgYmUgZ29vZCB0byBoYXZlIGFuIGFu c3dlcg0KPiA+ID4gPiA+ID4gcmVhZHkgZXZlbiBpZiB3ZSBkb24ndCBwdXQgaXQgaW4gdGhlIGRv Y3VtZW50IHRleHQuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBUaGlzIGlzIGRpc2N1c3Nl ZCBpbiAtMjYuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiAgICBSYXRlLWxp bWl0aW5nIERPVFMgcmVxdWVzdHMsIGluY2x1ZGluZyB0aG9zZSB3aXRoIG5ldyAnY3VpZCcNCj4g dmFsdWVzLA0KPiA+ID4gPiA+ID4gICAgZnJvbSB0aGUgc2FtZSBET1RTIGNsaWVudCBkZWZlbmRz IGFnYWluc3QgRG9TIGF0dGFja3MgdGhhdA0KPiA+ID4gPiA+ID4gd291bGQNCj4gPiA+ID4gPiA+ DQo+ID4gPiA+ID4gPiBXaXRoIHJlc3BlY3QgdG8gIm5ldyIgJ2N1aWQnIHZhbHVlcywgaXMgdGhl IHNlcnZlciByZXF1aXJlZCB0bw0KPiA+ID4gPiA+ID4gcmVtZW1iZXIgd2hpY2ggb25lcyBpdCBo YXMgc2VlbiBpbiBwZXJwZXR1aXR5LCBvciBjYW4gaXQgdGltZQ0KPiA+ID4gPiA+ID4gdGhlbSBv dXQgZXZlbnR1YWxseT8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRdIFRoZSBhdHRhY2sgdmVj dG9yIGlzIGEgRE9UUyBjbGllbnQgd2hpY2ggY2hhbmdlcyBmcmVxdWVudGx5DQo+ID4gPiA+ID4g aXRzDQo+ID4gPiBjdWlkLg0KPiA+ID4gPiBUaGUgRE9UUyBzZXJ2ZXIgY2FuIHNldCBhbiBpbnRl cnZhbCBpbiB3aGljaCB0aGUgc2FtZSBjbGllbnQgY2Fubm90DQo+ID4gPiA+IHByZXNlbnQNCj4g PiA+IGENCj4gPiA+ID4gbmV3IGN1aWQuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ ID4gPiBTZWN0aW9uIDEwDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gVGhlIHNlY3VyaXR5IGNv bnNpZGVyYXRpb25zIHNlZW0gdG8gYmUgdGFraW5nIGEgbmFycm93IGZvY3VzIG9uDQo+ID4gPiA+ ID4gPiB0aGUgcmVxdWlyZW1lbnRzIGZvciBhbmQgY29uc2VxdWVuY2VzIG9mIHNwZWNpZmljIGJp dHMgb24gdGhlDQo+ID4gPiA+ID4gPiB3aXJlIGluIHRoZSBzaWduYWwgY2hhbm5lbCBwcm90b2Nv bC4gIEkgdGhpbmsgaXQncyBhcHByb3ByaWF0ZQ0KPiA+ID4gPiA+ID4gdG8gYWxzbyBpbmNsdWRl IHNvbWUgaGlnaC1sZXZlbCB0aG91Z2h0cyBhYm91dCB0aGUgZnVuY3Rpb25hbA0KPiA+ID4gPiA+ ID4gYmVoYXZpb3Igb2YgdGhlIHByb3RvY29sLCBhbGxvd2luZyB0byBzaWduYWwgdGhhdCBhbiBh dHRhY2sgaXMNCj4gPiA+ID4gPiA+IHVuZGVyd2F5IGFuZCB0cmlnZ2VyIG1pdGlnYXRpb24sIGlu Y3JlYXNpbmcgdGhlIGF2YWlsYWJpbGl0eSBvZg0KPiA+ID4gPiA+ID4gc2VydmljZXMsIGV0Yy4s IGFuZCB0aGUgcmlza3MgdGhhdCBhcmUgcG9zZWQgYnkgdGhlIHByb3RvY29sDQo+ID4gPiA+ID4g PiBmYWlsaW5nIHRvIHdvcmsgcHJvcGVybHksIHdoZXRoZXIgdGhhdCBtZWFucyBsZXR0aW5nIGF0 dGFjaw0KPiA+ID4gPiA+ID4gdHJhZmZpYyB0aHJvdWdoIG9yIGltcHJvcGVybHkgYmxvY2tpbmcg bGVnaXRpbWF0ZSB0cmFmZmljLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gV291bGQgYSBw b2ludGVyIHRvIHRoZSBhcmNoaXRlY3R1cmUvcmVxdWlyZW1lbnRzIEktRHMgYmUNCj4gPiA+ID4g PiBzdWZmaWNpZW50DQo+ID4gPiB0bw0KPiA+ID4gPiBjb3ZlciB0byBoaWdoLWxldmVsIGFzcGVj dHM/DQo+ID4gPiA+DQo+ID4gPiA+IFRob3NlIGRvY3VtZW50cycgc2VjdXJpdHkgY29uc2lkZXJh dGlvbnMgZG8gc2VlbSB0byBjb3ZlciB0aGUNCj4gPiA+ID4gcmVsZXZhbnQNCj4gPiA+IHBvaW50 cywNCj4gPiA+ID4geWVzLg0KPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFNlY3Rp b24gMTMuMQ0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IEkgdGhpbmsgdGhlIElBTkEgcmVnaXN0 cmllcyBzaG91bGQgYmUgbGlzdGVkIGFzIEluZm9ybWF0aW9uYWwNCj4gPiA+ID4gPiA+IGFuZCBu b3QgTm9ybWF0aXZlIHJlZmVyZW5jZXMuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gW01lZF0gRG9uZS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gU2VjdGlvbiAxMy4yDQo+ID4g PiA+ID4gPg0KPiA+ID4gPiA+ID4gUGVuZGluZyByZXNvbHV0aW9uIG9mIHRoZSBxdWVzdGlvbiBh Ym91dCB1c2luZw0KPiA+ID4gPiA+ID4gZHJhZnQtaWV0Zi1jb3JlLXlhbmctY2JvciBydWxlcyBv ciBSRkM3OTUxK1JGQzcwNDksIHRoZQ0KPiA+ID4gPiA+ID4gZHJhZnQtaWV0Zi1jb3JlLXlhbmct Y2JvciByZWZlcmVuY2UgbWF5IG5lZWQgdG8gYmUgTm9ybWF0aXZlLg0KPiA+ID4gPiA+DQo+ID4g PiA+ID4gW01lZF0gUGxlYXNlIHJlZmVyIHRvIG15IGFuc3dlciB0byB0aGF0IHF1ZXN0aW9uLg0K PiA+ID4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLQ0KPiA+ID4gY2JvciBpcw0KPiA+ID4gPiBp bmZvcm1hdGl2ZS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IEdpdmVuIHRo YXQgIlVSSSIgaXMgYSB3ZWxsLWtub3duIGFiYnJldmlhdGlvbiwgd2UgbWF5IGJlIGFibGUgdG8N Cj4gPiA+ID4gPiA+IGdldCBhd2F5IHdpdGggbm90IGNpdGluZyBSRkMgMzk4Ni4gIE9uIHRoZSBv dGhlciBoYW5kLCBpdCdzIG5vdA0KPiA+ID4gPiA+ID4gY2F1c2luZyBhbnkgaGFybSB0byBsZWF2 ZSBpdCBpbi4uLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gV2lsbCBsZWF2ZSBpdC4NCj4g PiA+ID4gPg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFJGQyA0NjMyIG5lZWRzIHRvIGJlIE5v cm1hdGl2ZSwgc2luY2Ugd2UgbmVlZCB0byBrbm93IENJRFIgdG8NCj4gPiA+ID4gPiA+IGVuY29k ZS9kZWNvZGUgdGFyZ2V0LXByZWZpeGVzLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gW01lZF0gV29y a3MgZm9yIG1lLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gU2ltaWxhcmx5 LCBJIHRoaW5rIHRoYXQgUkZDcyA2MjM0DQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBbTWVkXSBUaGlz IG9uZSBpcyBub3QgbGlzdGVkIGFzIG5vcm1hdGl2ZSBiZWNhdXNlIG90aGVyIGhhc2ggYWxnb3MN Cj4gPiA+ID4gPiBtYXkgYmUNCj4gPiA+ID4gdXNlZC4NCj4gPiA+ID4NCj4gPiA+ID4gSXQncyBh IGxvd2VyLWNhc2UgInJlY29tbWVuZGVkIiwgd2hpY2ggY2FuIHByb2JhYmx5IGVrZSBieSBhcw0K PiA+ID4gPiBkZXNjcmlwdGl2ZQ0KPiA+ID4gYW5kDQo+ID4gPiA+IG5vdCBhICJwcm90b2NvbCBm ZWF0dXJlIiAoc2VlIGJlbG93KS4NCj4gPiA+ID4NCj4gPiA+ID4gPiAsIDc0MTMNCj4gPiA+ID4g PiBbTWVkXSBUaGUgc3VwcG9ydCBpZiBURk8gaXMgbm90IG1hbmRhdG9yeS4NCj4gPiA+ID4NCj4g PiA+ID4gSXQncyBhIFNIT1VMRCAoIlNIT1VMRCBpbXBsZW1lbnQgYWxsIG9mIHRoZSBmb2xsb3dp bmcgaXRlbXMiKSwNCj4gdGhvdWdoLi4uDQo+ID4gPiA+DQo+ID4gPiA+ID4gLCA3NTg5DQo+ID4g PiA+ID4gW01lZF0gVGhpcyBpcyBhIE1BWSBpbiB0aGUgc3BlYy4gSXQgaXMganVzdCBmaW5lIHRv IGxlYXZlIGl0IGFzDQo+ID4gPiBpbmZvcm1hdGl2ZS4NCj4gPiA+ID4NCj4gPiA+ID4gLi4uLnBl cg0KPiA+ID4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9ibG9nL2llc2ctc3RhdGVtZW50LW5vcm1h dGl2ZS1hbmQtaW5mb3JtYXRpdmUtDQo+ID4gPiA+IHJlZmVyZW5jZXMvDQo+ID4gPiA+IG5vdGUg MSwgIkV2ZW4gcmVmZXJlbmNlcyB0aGF0IGFyZSByZWxldmFudCBvbmx5IGZvciBvcHRpb25hbA0K PiA+ID4gPiBmZWF0dXJlcyBtdXN0DQo+ID4gPiBiZQ0KPiA+ID4gPiBjbGFzc2lmaWVkIGFzIG5v cm1hdGl2ZSBpZiB0aGV5IG1lZXQgdGhlIGFib3ZlIGNvbmRpdGlvbnMgZm9yDQo+ID4gPiA+IG5v cm1hdGl2ZSByZWZlcmVuY2VzLiINCj4gPiA+ID4NCj4gPiA+ID4gVGhpcyBkb2VzIHNlZW0gdG8g YmUgc29tZXRoaW5nIHdlIGFjdHVhbGx5IG5lZWQgdG8gY2FyZSBhYm91dCBiZWZvcmUNCj4gPiA+ ID4gSUVURg0KPiA+ID4gTEMsDQo+ID4gPiA+IHRob3VnaCwgYXMgNzQxMyBpcyBFeHBlcmltZW50 YWwgYW5kIG5vdCBsaXN0ZWQgaW4gdGhlIGRvd25yZWYNCj4gPiA+ID4gcmVnaXN0cnkgKGh0dHBz Oi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Rvd25yZWYvKSwgc28gaWYgd2UgbGVhdmUNCj4g PiA+ID4gaXQgYXMNCj4gPiA+IEluZm9ybWF0aW9uYWwNCj4gPiA+ID4gYW5kIGhhdmUgdG8gY2hh bmdlIGl0IGxhdGVyLCB3ZSdkIG5lZWQgdG8gYWxzbyByZXN0YXJ0L3JlLXJ1biB0aGUgSUVURg0K PiBMQy4NCj4gPiA+ID4NCj4gPiA+ID4gPiAsIDc5MTgNCj4gPiA+ID4gPiBbTWVkXSBJZGVtIGFz IFRGTy4NCj4gPiA+ID4NCj4gPiA+ID4gVGhpcyBpcyBJbmZvcm1hdGlvbmFsIChpLmUuLCBhbHNv IHN1c2NlcHRpYmxlIHRvIHRoZSBkb3ducmVmIGlzc3VlKS4NCj4gPiA+ID4NCj4gPiA+ID4gPiAs IDc5MjQNCj4gPiA+ID4gPiBbTWVkXSBJZGVtIGFzIFRGTy4NCj4gPiA+ID4NCj4gPiA+ID4gKGlk ZW0geDIpLCB0aG91Z2ggdGhpcyBpcyBzdGFuZGFyZHMtdHJhY2sgYXQgbGVhc3QsIHNvIHdlIGhh dmUgbW9yZQ0KPiA+ID4gPiBsZWV3YXkNCj4gPiA+IHRvDQo+ID4gPiA+IG1vdmUgdGhpbmdzIGFy b3VuZCBsYXRlci4NCj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4NCj4gPiA+ID4gSSB0aGluayB0 aGUgbW9zdCBleHBlZGllbnQgdGhpbmcgdG8gZG8gaGVyZSB3b3VsZCBqdXN0IGJlIHRvIHJlbGF4 DQo+ID4gPiA+IHRoZSByZXF1aXJlbWVudCBmb3IgVExTIEZhbHN0IFNUYXJ0LCBURk8sIGFuZCBD YWNoZWQgSW5mb3JtYXRpb24sDQo+ID4gPiA+IHBlcmhhcHMgdG8NCj4gPiA+IHRleHQNCj4gPiA+ ID4gbGlrZSAiVGhlIGZvbGxvd2luZyBpdGVtcyBhcmUgYWRkaXRpb25hbCBtZWNoYW5pc21zIHRo YXQgY2FuIHJlZHVjZQ0KPiA+ID4gPiB0aGUNCj4gPiA+IGRlbGF5DQo+ID4gPiA+IHJlcXVpcmVk IHRvIGRlbGl2ZXIgYSBET1RTIHNpZ25hbCBjaGFubmVsIG1lc3NhZ2UsIHdoaWNoDQo+ID4gPiA+ IGltcGxlbWVudGF0aW9ucw0KPiA+ID4gYXJlDQo+ID4gPiA+IGVuY291cmFnZWQgdG8gaW1wbGVt ZW50IGFzIHBvc3NpYmxlLiIsIGJ1dCBJIGFtIG9wZW4gdG8gb3RoZXINCj4gPiA+ID4gc3VnZ2Vz dGlvbnMNCj4gPiA+IGZvcg0KPiA+ID4gPiB3aGF0IHRvIGRvLg0KPiA+ID4NCj4gPiA+IFRMUyBG YWxzZSBTdGFydCBhbmQgQ2FjaGVkIEluZm9ybWF0aW9uIGNhbiBiZSBtYWRlIG5vcm1hdGl2ZQ0K PiA+ID4gcmVmZXJlbmNlcyAoanVzdCBsaWtlIHdlIHJlZmVyZW5jZWQgdGhlc2UgaXRlbXMgaW4g b3VyIHNwZWMNCj4gPiA+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4MzEwKQ0KPiA+ ID4gVEZPIGlzIGZvciBUQ1Agb25seSBhbmQgdGhhdCB0b28gZm9yIGV4Y2VwdGlvbiBzY2VuYXJp b3Mgd2hlcmUgVURQIGlzDQo+ID4gPiBibG9ja2VkLiBURk8gY2FuIHJlbW92ZWQgZnJvbSB0aGUg bGlzdCBvZiBpdGVtcyB0aGUgRE9UUyBhZ2VudHMgU0hPVUxEDQo+ID4gPiBpbXBsZW1lbnQuDQo+ ID4gPg0KPiA+ID4gTkVXOg0KPiA+ID4gQ29tcGFyZWQgdG8gVURQLCBET1RTIHNpZ25hbCBjaGFu bmVsIG92ZXIgVENQIHJlcXVpcmVzIGFuIGFkZGl0aW9uYWwNCj4gPiA+IHJvdW5kLSB0cmlwIHRp bWUgKFJUVCkgb2YgbGF0ZW5jeSB0byBlc3RhYmxpc2ggYSBUQ1AgY29ubmVjdGlvbi4NCj4gPiA+ IEltcGxlbWVudGF0aW9ucyBhcmUgZW5jb3VyYWdlZCB0byBpbXBsZW1lbnQgVENQIEZhc3QgT3Bl biBbUkZDNzQxM10gdG8NCj4gPiA+IGVsaW1pbmF0ZSB0aGF0IFJUVCB3aGVuIGluZm9ybWF0aW9u IGV4aXN0cyBmcm9tIHByaW9yIFRDUCBjb25uZWN0aW9uLg0KPiA+ID4NCj4gPiA+IC1UaXJ1DQo+ ID4gPg0KPiA+ID4gPg0KPiA+ID4gPg0KPiA+ID4gPiA+ICwgYW5kIDc5NTENCj4gPiA+ID4gPiBb TWVkXSB0aGlzIG9uZSB3YXMgbm90IGxpc3RlZCBhcyBub3JtYXRpdmUgYmVjYXVzZSB0aGUgZG9j dW1lbnQNCj4gPiA+ID4gPiBsaXN0cyB0d28NCj4gPiA+ID4gd2F5cyB0byBkbyB0aGUgbWFwcGlu Zy4NCj4gPiA+ID4NCj4gPiA+ID4gQWdyZWVkLg0KPiA+ID4gPg0KPiA+ID4gPiAtQmVuDQo+ID4g PiA+DQo+ID4gPiA+ID4gPiBzaG91bGQgYWxzbyBiZSBOb3JtYXRpdmUuDQo+ID4gPiA+ID4gPg0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IC1CZW4NCj4gPiA+ID4gPg0KPiA+ID4gPg0KPiA+ID4g PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+ID4g PiBEb3RzIG1haWxpbmcgbGlzdA0KPiA+ID4gPiBEb3RzQGlldGYub3JnDQo+ID4gPiA+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0K From nobody Mon Jan 21 06:13:23 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A48C130EEF for ; Mon, 21 Jan 2019 06:13:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TjSEqxH7N8CV for ; Mon, 21 Jan 2019 06:13:18 -0800 (PST) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C6F3130DC4 for ; Mon, 21 Jan 2019 06:13:18 -0800 (PST) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 43jtn76wNgz1ykV; Mon, 21 Jan 2019 15:13:15 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.42]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id 43jtn75jCLz1xpN; Mon, 21 Jan 2019 15:13:15 +0100 (CET) Received: from OPEXCAUBMA4.corporate.adroot.infra.ftgroup (10.114.13.86) by OPEXCLILM41.corporate.adroot.infra.ftgroup (10.114.31.42) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 21 Jan 2019 15:13:15 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBMA4.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Mon, 21 Jan 2019 15:13:15 +0100 From: To: "Panwei (William)" , "dots@ietf.org" Thread-Topic: Wei Pan's comments-2nd part (RE: Call for adoption on draft-boucadair-dots-multihoming) Thread-Index: AdSxk3GuxzHmlXOdSTu8pLCKnkL6gw== Date: Mon, 21 Jan 2019 14:13:15 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0AFA3@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302EA0AFA3OPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: [Dots] Wei Pan's comments-2nd part (RE: Call for adoption on draft-boucadair-dots-multihoming) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 14:13:21 -0000 --_000_787AE7BB302AE849A7480A190F8B93302EA0AFA3OPEXCAUBMA2corp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Wei, Please see inline. Cheers, Med De : Dots [mailto:dots-bounces@ietf.org] De la part de Panwei (William) Envoy=E9 : mercredi 26 d=E9cembre 2018 11:17 =C0 : dots@ietf.org Objet : Re: [Dots] Call for adoption on draft-boucadair-dots-multihoming 4. In section 5.2, in the case of figure 7, it describes some complica= tions will arise if PA addresses/prefixes are used. Although the draft says= these complications are not specific to DOTS, but it doesn't clarify what = should DOTS do to handle these complications. [Med] This is covered by this text: "Each DOTS client is provided with policies (e.g., prefix filter) that will= trigger DOTS communications with the DOTS servers." I rearranged the text so that this statement is easily associated with both= figures (7/8). 5. Different descriptions of PI addresses/prefixes are as followings: The case of figure 6 describes: Nevertheless, when PI addresses/prefixes are assigned, the DOTS gateway MUST sent the same request to all its DOTS servers. The case of figure 7 describes: If PI addresses/prefixes are in use, the DOTS client can send the mitigation request for all its PI addresses/prefixes to any one of the DOTS servers. The use of anycast addresses is NOT RECOMMENDED. The case of figure 9 describes: When PI addresses/prefixes are used, DOTS clients can contact any of the DOTS gateways to send a DOTS message. DOTS gateway will then relay the request to the DOTS server. I don't get the reason why the mitigation request need to be sent to all DO= TS servers in the case of figure 6 but only to one of the DOTS servers in t= he cases of figure 7 and figure 9. I don't figure out the need of such diff= erences. [Med] Good catch. The correct behavior is the one described for Figure 6. I= updated the text for figures 7/9. 6. About the anycast addresses: 6.1. There are several places in the draft saying that the use of anyc= ast addresses is NOT RECOMMENDED, but the reason isn't clarified. So I get= confused why anycast is problematic in these cases. For example, the cases of figure 7 and figure 9 describe that when PI addre= sses/prefixes are used the DOTS client can send request to any one of the D= OTS servers/DOTS gateways, using anycast addresses can achieve this more ea= sily but it is not recommended. [Med] This is problematic because the requests won't be received by all GWs= . 6.2. Does it imply that the use of anycast addresses for DOTS servers = is appropriate for those cases which don't say "anycast is not recommended"= ? Because not all cases describe the use of anycast addresses for DOTS serv= ers. For example, in the case of figure 6, it doesn't mention the anycast addres= ses for DOTS servers, can the anycast addresses for DOTS servers be used? [Med] Will add a note about this. 7. In section 5.3, in the case of figure 9, it describes: When PA addresses/prefixes are used, but no filter rules are provided to DOTS clients, these later MUST contact all DOTS gateways simultaneously to send a DOTS message. Upon receipt of a request by a DOTS gateway, it MUST check whether the request is to be forwarded upstream or be rejected. It doesn't clarify the rule that the DOTS gateway should be according to. I= n which condition should the DOTS gateway forward the request or reject the= request? [Med] The check is whether the target IP prefix is managed by the upstream = server. Will update the text. Best Regards Wei Pan > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw > Sent: Saturday, December 01, 2018 6:31 AM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-multihoming > > Hello! > > This is the start of a two week call for input on the WG adoption of the > document: > > draft-boucadair-dots-multihoming > https://tools.ietf.org/html/draft-boucadair-dots-multihoming-04 > > The document has been presented and discussed at IETF 103, IETF 100 and > IETF 99; and revisions have been made based on WG feedback. This > document was created and deferred in the interest of simplifying the > requirements and architecture drafts now getting ready for publication.. > > At the IETF 103 meeting, there were not many participants who had read th= e > draft. > > Please provide feedback to the list/chairs if you believe that this docum= ent > should be adopted as a WG document. The adoption call will end on > December 14 2018. > > Regards, > Roman and Frank > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots --_000_787AE7BB302AE849A7480A190F8B93302EA0AFA3OPEXCAUBMA2corp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi Wei,

 

Please see inline.

 

Cheers,

Med

 

De : Dots= [mailto:dots-bounces@ietf.org] De la part de Panwei (William)
Envoy=E9 : mercredi 26 d=E9cembre 2018 11:17
=C0 : dots@ietf.org
Objet : Re: [Dots] Call for adoption on draft-boucadair-dots-mu= ltihoming

 

4.    &n= bsp; In section 5.2, in the case of figure 7, it describes some= complications will arise if PA addresses/prefixes are used. Although the d= raft says these complications are not specific to DOTS, but it doesn’t clarify what should DOTS do to handle these complicat= ions.

<= o:p> 

[Med] This is covered by this text:  <= /span>

 

“Each DOTS client is provided with policies (e.g., prefix fi= lter) that will trigger DOTS communications with the DOTS servers.”

 

I rearranged the text so that this statement is easily associated = with both figures (7/8).

<= o:p> 

5.    &n= bsp; Different descriptions of PI addresses/prefixes are as fol= lowings:

The case of figure 6 describes:

Nevertheless, when PI ad= dresses/prefixes are assigned, the DOTS

gateway MUST sent the sa= me request to all its DOTS servers.

The case of figure 7 describes:

If PI addresses/prefixes= are in use, the DOTS client can send the

mitigation request for a= ll its PI addresses/prefixes to any one of

the DOTS servers. The us= e of anycast addresses is NOT RECOMMENDED.

The case of figure 9 describes:

When PI addresses/prefix= es are used, DOTS clients can contact any of

the DOTS gateways to sen= d a DOTS message. DOTS gateway will then

relay the request to the= DOTS server.

I don’t get the reason why the mitigation request need to b= e sent to all DOTS servers in the case of figure 6 but only to one of the D= OTS servers in the cases of figure 7 and figure 9. I don’t figure out the need of such differences.

[= Med] Good catch. The correct behavior is the one described for Figure 6. I = updated the text for figures 7/9.

 <= /o:p>

6.    &n= bsp; About the anycast addresses:

6.1.    =   There are several places in the draft saying that the use = of anycast addresses is NOT RECOMMENDED, but  the reason isn’t c= larified. So I get confused why anycast is problematic in these cases.=

For example, the cases of figure 7 and figure 9 describe that whe= n PI addresses/prefixes are used the DOTS client can send request to any on= e of the DOTS servers/DOTS gateways, using anycast addresses can achieve this more easily but it is not recommended.<= /p>

[= Med] This is problematic because the requests won’t be received by al= l GWs.

<= o:p> 

6.2.    =   Does it imply that the use of anycast addresses for DOTS s= ervers is appropriate for those cases which don’t say “anycast = is not recommended”? Because not all cases describe the use of anycas= t addresses for DOTS servers.

For example, in the case of figure 6, it doesn’t mention th= e anycast addresses for DOTS servers, can the anycast addresses for DOTS se= rvers be used?

<= o:p> 

[= Med] Will add a note about this.

 <= /o:p>

7.    &n= bsp; In section 5.3, in the case of figure 9, it describes:

When PA addresses/prefix= es are used, but no filter rules are provided

to DOTS clients, these l= ater MUST contact all DOTS gateways

simultaneously to send a= DOTS message. Upon receipt of a request by

a DOTS gateway, it MUST = check whether the request is to be forwarded

upstream or be rejected.=

It doesn’t clarify the rule that the DOTS gateway should be= according to. In which condition should the DOTS gateway forward the reque= st or reject the request?

=  

[= Med] The check is whether the target IP prefix is managed by the upstream s= erver. Will update the text.

 <= /o:p>

Best Regards=

Wei Pan=

 <= /o:p>

<= o:p> 

&= gt; -----Original Message-----

&= gt; From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw

&= gt; Sent: Saturday, December 01, 2018 6:31 AM

&= gt; To: dots@ietf.org

&= gt; Subject: [Dots] Call for adoption on draft-boucadair-dots-multihoming

&= gt;

&= gt; Hello!

&= gt;

&= gt; This is the start of a two week call for input on the WG adoption of th= e

&= gt; document:

&= gt;

&= gt; draft-boucadair-dots-multihoming

&= gt; https://tools.ietf.org/html/draft-boucadair-dots-multihoming-04

&= gt;

&= gt; The document has been presented and discussed at IETF 103, IETF 100 and=

&= gt; IETF 99;  and revisions have been made based on WG feedback. = This

&= gt; document was created and deferred in the interest of simplifying the

&= gt; requirements and architecture drafts now getting ready for publication.= .

&= gt;

&= gt; At the IETF 103 meeting, there were not many participants who had read = the

&= gt; draft.

&= gt;

&= gt; Please provide feedback to the list/chairs if you believe that this doc= ument

&= gt; should be adopted as a WG document.  The adoption call will end on=

&= gt; December 14 2018.

&= gt;

&= gt; Regards,

&= gt; Roman and Frank

&= gt;

&= gt; _______________________________________________

&= gt; Dots mailing list

&= gt; Dots@ietf.org

&= gt; https://www.ietf.org/mailman/listinfo/dots

--_000_787AE7BB302AE849A7480A190F8B93302EA0AFA3OPEXCAUBMA2corp_-- From nobody Mon Jan 21 06:19:41 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95FE4130F2B; Mon, 21 Jan 2019 06:19:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.854 X-Spam-Level: X-Spam-Status: No, score=-8.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ylGtoQbNaQRf; Mon, 21 Jan 2019 06:19:35 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49B74130EFC; Mon, 21 Jan 2019 06:19:34 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1548080349; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=Q CPwJ6pQQSQC6poqTOQ9ZJmQyhQRB9QSmDO0TDUA2H E=; b=P8TAGEyAlQk+md27AFv7B3sr7UC0WMMJbVZiDENEm9jr kegsVc9xLwgJ0v8amySEntVtLMRo0xaJgtUHow9zVaT4DrypbI mphImVR0gq6xrn7XWWzkHzwrjGyR6mDSZGvYXvJslc8ecvHQPB yxpWHOeOmmv/kwWqIfYuTCfbtmU= Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6491_4e7c_758fe18a_da8a_4df2_bfed_28e55d6ace7f; Mon, 21 Jan 2019 07:19:08 -0700 Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 07:19:16 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Mon, 21 Jan 2019 07:19:16 -0700 Received: from NAM05-DM3-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 07:19:15 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2984.namprd16.prod.outlook.com (20.178.235.210) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.25; Mon, 21 Jan 2019 14:19:14 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.031; Mon, 21 Jan 2019 14:19:14 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuABQDVAAAAzXK9AAbbFEAAAAVkFwAAi2QcAABRzd4A== Date: Mon, 21 Jan 2019 14:19:14 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <787AE7BB302AE849A7480A190F8B93302EA0AE14@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0AE14@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2984; 6:LY4XjO8EOxOC7uR4gF/KjFE6OiVpbj5L5LNHDCJE3onsOvYbRHWR8lOxUSnSeUJRPqPAvOarlu6A5LR4xLdBhGrs2aTPBtt3xJg7T/mWKifrQQJorB0ZmAY46qahMiRhw2ysbIZoDRbqXYyCbvAG2cpSw47GLH04aAusZE3zebAaa/NYN82Wbckbvt3swsn3nOaTk+o8XkiKa6n+Y80HI1vqzeGvf4CDewqtpPQbVE+TBVs6qwDJVFmj0JeSBpzvnBJUTIc/Gk++y3AufUYroxo3ABmFsl//Ms/bIZVEgk7RnviOF+lrMd2Pyr5YXRW8SoKW7n76aR+o1icadUSO5sxhUyFF87RDauq7lfXg66J8xq4cZlBacGJLhsPZWedCBszyyGEgnEnosEqYuSXo0wKy0R1XVx2zrn+3slZ8sYcCHFxA73n1G6nrNx6TKouQEotn7xpN0H+5pHQYzz/Whg==; 5:erZHbdfR1fPz7RzjXb4apxwek38cNMj/ZOdtMuxD0MeHJmf1txHfXBkua5xeK6LlSLHKzPLJwvZiinmDNMUlzQLZBt3TXQ/fzBlVtQWOalQeSIfyE7xl7/gd1OEaaiKj1Dt/ibSC3dgBFJ/LdAEMQoBM8jgfYGf5G6l68ShfqZPZiZcQdorkjcH/NbUvMZ6I1MhkpgC3YqkEARFP40EUkg==; 7:YN1oLU+yVFFiDfwxHwjflIvZel/joH/ERMTNN0AcXauli4tPhfq0GQCeucx29dGzYpNI4a5iTM1kG13XPxOZZLrLaRfWJSlfRC8XlHW+nnUoEietNq5odQASWBMX3qDjT7U8NI02A//jREUAfzcfuw== x-ms-office365-filtering-correlation-id: a5483274-49e9-4bdb-d7d9-08d67fab6c0e x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2984; x-ms-traffictypediagnostic: BYAPR16MB2984: x-microsoft-antispam-prvs: x-forefront-prvs: 0924C6A0D5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(39860400002)(366004)(136003)(396003)(376002)(189003)(51444003)(199004)(53754006)(55784004)(13464003)(32952001)(86362001)(2501003)(74316002)(105586002)(80792005)(2906002)(229853002)(33656002)(6506007)(102836004)(53546011)(106356001)(97736004)(30864003)(305945005)(966005)(72206003)(14454004)(71190400001)(71200400001)(4744004)(478600001)(7736002)(7696005)(68736007)(256004)(14444005)(54906003)(110136005)(316002)(6246003)(2171002)(25786009)(6306002)(55016002)(26005)(9686003)(3846002)(4326008)(11346002)(66066001)(53946003)(446003)(93886005)(5024004)(486006)(186003)(8936002)(53936002)(76176011)(81166006)(81156014)(8676002)(99286004)(476003)(6116002)(6436002)(85282002)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2984; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: YAkqgQBeT1AQM/W8hArflvZPWHpcSQMyGfMdXnHBc9KH8q3Q/+bUwnpL71Ze0EpgA3Ezi5DJ0zXs4/WwUV/WbFxGC7dSrwE84oddB4LhTEYmQcW4aGLPukkIAapMgAFdil8N7LMyN3QKQPF5aPgwbfps7lTktN/ipIIt45kvIdvItg/jGEqkDZTRi11y7B69F1zpa4MaUh9bIQJrRKmMyTPTniUFY1g3JsdK3oo2YZRCdwA+SAP7LXZbLJbKE4WyqYmaCTsNdoqM1HPf+p6yjcqDv9gEpUgHhkc5Rt/BBi986V9EmWzVV/QDXOAxLXGtTNWLwTLGeHlfJUR7dIgC3dmA7ffRdFMus8ULBiJsfvIHpHockIyamY7K1rCon7wXPX8juB3XAmNsnzUh3Le3DZboIkWk6EByr7BFmZh/2pg= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: a5483274-49e9-4bdb-d7d9-08d67fab6c0e X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2019 14:19:14.7570 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2984 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6465> : inlines <6998> : streams <1810730> : uri <2783378> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 14:19:40 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiBTZW50OiBNb25kYXks IEphbnVhcnkgMjEsIDIwMTkgNToyNSBQTQ0KPiBUbzogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRk eSA8VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNBZmVlLmNvbT47DQo+IEJlbmphbWluIEthZHVr IDxrYWR1a0BtaXQuZWR1Pg0KPiBDYzogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGll dGYub3JnOyBkb3RzQGlldGYub3JnDQo+IFN1YmplY3Q6IFJFOiBbRG90c10gQUQgcmV2aWV3IG9m IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNSAoNXRoIFBhcnQpDQo+IA0KPiANCj4g DQo+IFJlLSwNCj4gDQo+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiANCj4gQ2hlZXJzLA0KPiBNZWQN Cj4gDQo+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gRGXCoDogS29uZGEsIFRp cnVtYWxlc3dhciBSZWRkeQ0KPiA+IFttYWlsdG86VGlydW1hbGVzd2FyUmVkZHlfS29uZGFATWNB ZmVlLmNvbV0NCj4gPiBFbnZvecOpwqA6IGx1bmRpIDIxIGphbnZpZXIgMjAxOSAxMDoxMw0KPiA+ IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE47IEJlbmphbWluIEthZHVrIENjwqA6DQo+ ID4gZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnOyBkb3RzQGlldGYub3Jn IE9iamV0wqA6IFJFOg0KPiA+IFtEb3RzXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNp Z25hbC1jaGFubmVsLTI1ICg1dGggUGFydCkNCj4gPg0KPiA+ID4gLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCj4gPiA+IEZyb206IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20NCj4gPG1v aGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+DQo+ID4gPiBTZW50OiBNb25kYXksIEphbnVhcnkg MjEsIDIwMTkgMTowMSBQTQ0KPiA+ID4gVG86IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkNCj4g PFRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiA+ID4gQmVuamFtaW4gS2Fk dWsgPGthZHVrQG1pdC5lZHU+DQo+ID4gPiBDYzogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFu bmVsQGlldGYub3JnOyBkb3RzQGlldGYub3JnDQo+ID4gPiBTdWJqZWN0OiBSRTogW0RvdHNdIEFE IHJldmlldyBvZiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUNCj4gPiA+ICg1dGgN Cj4gPiBQYXJ0KQ0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4gSGkgQmVuLCBhbGwsDQo+ID4g Pg0KPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPg0KPiA+ID4gQ2hlZXJzLA0KPiA+ID4g TWVkDQo+ID4gPg0KPiA+ID4gPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiA+ID4g RGXCoDogS29uZGEsIFRpcnVtYWxlc3dhciBSZWRkeQ0KPiA+ID4gPiBbbWFpbHRvOlRpcnVtYWxl c3dhclJlZGR5X0tvbmRhQE1jQWZlZS5jb21dDQo+ID4gPiA+IEVudm95w6nCoDogc2FtZWRpIDE5 IGphbnZpZXIgMjAxOSAwNzozMiDDgMKgOiBCZW5qYW1pbiBLYWR1azsNCj4gPiA+ID4gQk9VQ0FE QUlSIE1vaGFtZWQgVEdJL09MTiBDY8KgOg0KPiA+ID4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFs LWNoYW5uZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDogUkU6DQo+ID4gPiA+IFtE b3RzXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg1dGgg UGFydCkNCj4gPiA+ID4NCj4gPiA+ID4gSGkgQmVuLA0KPiA+ID4gPg0KPiA+ID4gPiBQbGVhc2Ug c2VlIGlubGluZQ0KPiA+ID4gPg0KPiA+ID4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQo+ID4gPiA+ID4gRnJvbTogRG90cyA8ZG90cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYg T2YgQmVuamFtaW4gS2FkdWsNCj4gPiA+ID4gPiBTZW50OiBTYXR1cmRheSwgSmFudWFyeSAxOSwg MjAxOSAyOjMzIEFNDQo+ID4gPiA+ID4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20N Cj4gPiA+ID4gPiBDYzogZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnOyBk b3RzQGlldGYub3JnDQo+ID4gPiA+ID4gU3ViamVjdDogUmU6IFtEb3RzXSBBRCByZXZpZXcgb2YN Cj4gPiA+ID4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWwtMjUgKDV0aA0KPiA+ID4g PiBQYXJ0KQ0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20g b3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLiBEbyBub3QNCj4gPiA+ID4gPiBjbGljayBsaW5r cw0KPiA+ID4gPiBvcg0KPiA+ID4gPiA+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNv Z25pemUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUNCj4gPiA+ID4gPiBjb250ZW50IGlzDQo+ID4g PiA+IHNhZmUuDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiBIaSBhbGwsDQo+ID4gPiA+ID4NCj4gPiA+ ID4gPiBUaGFua3MgZm9yIGFsbCB0aGUgZWRpdHMgYW5kIHRoZSBwdWJsaXNoZWQgLTI3Lg0KPiA+ ID4gPiA+IEFzc3VtaW5nIEknbSBhY3R1YWxseSBjYXVnaHQgdXAgb24gYWxsIHRoZSByZXZpZXcv cmVzcG9uc2UNCj4gPiA+ID4gPiB0aHJlYWRzLCBJIHRoaW5rIHdlJ3JlIHByZXR0eSBjbG9zZSB0 byBiZWluZyBhYmxlIHRvIGdvIHRvIElFVEYNCj4gPiA+ID4gPiBMQyAtLSBoZXJlJ3Mgd2hhdCBJ IHNlZSBhcw0KPiA+ID4gPiBzdGlsbCBsZWZ0Og0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gLSBXZSBu ZWVkIHRvIHNldHRsZSB0aGUgcmlzayBvZiBuZWVkaW5nIG5vcm1hdGl2ZSBkb3ducmVmcw0KPiA+ ID4gPiA+IGNhbGxlZCBvdXQNCj4gPiBmb3INCj4gPiA+ID4gPiAgIHRoZSBsYXN0IGNhbGwNCj4g PiA+DQo+ID4gPiBbTWVkXSBJIHVwZGF0ZWQgdGhlIHRleHQgdG86DQo+ID4gPiAqIGNpdGUgNzYx OC83NjI0IGFzIG5vcm1hdGl2ZSAoKyBpbmRpY2F0ZSB0aGF0IGEgc2ltaWxhciBtZWNoYW5pc20N Cj4gPiA+IHRvIGZhbHNlIHN0YXJ0IG1heSBhbHNvIGJlIGRlZmluZWQgZm9yIERUTFMpLg0KPiA+ DQo+ID4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc5MTggZG9lcyBub3QgcmVxdWly ZSBhbnkgY2hhbmdlcyB0bw0KPiA+IChEKVRMUyBvbi10aGUtd2lyZSBwcm90b2NvbCBkYXRhLCBh bmQgRExUUyBhbHNvIHN1cHBvcnRzIGZhbHNlIHN0YXJ0DQo+ID4gKHNlZSB0aGUgKEQpVExTIHBy b2ZpbGUgZm9yIElvVCBkZXZpY2VzIHNwZWNpZmllZCBpbg0KPiA+IGh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9yZmM3OTI1I3NlY3Rpb24tMjEpLg0KPiA+DQo+IA0KPiBbTWVkXSBOb3Qgc3Vy ZSB0byBnZXQgeW91ciBjb21tZW50LiBUaGUgaW5pdGlhbCBwb2ludCBmcm9tIEJlbiBpcyB2YWxp ZCwgaGVuY2UNCj4gdGhpcyBhZGRpdGlvbiB0byB0aGUgZHJhZnQ6DQo+IA0KPiAiVExTIEZhbHNl IFN0YXJ0IGlzIGZvcm1hbGx5IGRlZmluZWQgZm9yIHVzZSB3aXRoIFRMUywgYnV0IHRoZSBzYW1l IHRlY2huaXF1ZXMNCj4gYXJlIGFwcGxpY2FibGUgdG8gRFRMUyBhcyB3ZWxsLiINCg0KUHJvcG9z ZWQgdXBkYXRlIGxvb2tzIGdvb2QsIG15IHJlc3BvbnNlIHdhcyB0byB5b3VyIHJlcGx5ICJUTFMg ZmFsc2Ugc3RhcnQgbWF5IGFsc28gYmUgZGVmaW5lZCBmb3IgRFRMUyIgKEkgbWVhbnQgaXQncyBh bHNvIGFwcGxpY2FibGUgZm9yIERUTFMgOikpLg0KDQpDaGVlcnMsDQotVGlydQ0KDQo+IA0KPiA+ ID4gKiB0d2VhayB0aGUgVEZPIHRleHQgdG8gbWFpbnRhaW4gaXQgYXMgaW5mb3JtYXRpdmUuDQo+ ID4gPg0KPiA+ID4gPiA+IC0gSSBqdXN0IG5vdGljZWQgd2hpbGUgcmV2aWV3aW5nIHRoZSBkaWZm IHRoYXQgd2UgYWxzbyBuZWVkIHRvIHNheSBhDQo+ID4gPiA+ID4gICBsaXR0bGUgbW9yZSBhYm91 dCAoRClUTFMgMS4zIDAtUlRUIGRhdGEgKG1vcmUgYmVsb3cpDQo+ID4gPiA+ID4gLSBJdCBsb29r cyBsaWtlIHdlIGxvc3QgdGhlIGd1aWRhbmNlIHRvIHRoZSBFeHBlcnRzIGFuZCB0ZXh0IGFib3V0 IHRoZQ0KPiA+ID4gPiA+ICAgcmV2aWV3IG1haWxpbmcgbGlzdCBmcm9tIHRoZSBJQU5BIENvbnNp ZGVyYXRpb25zLCBkdXJpbmcgdGhlDQo+ID4gcmVzaHVmZmxpbmcNCj4gPiA+ID4gPiAgIGFyb3Vu ZCBoYXZpbmcgSUFOQSBtYW5hZ2UgbW9yZSB0aGluZ3MNCj4gPiA+ID4gPg0KPiA+ID4NCj4gPiA+ IFtNZWRdIFRoYXQgd2FzIG9uIHB1cnBvc2UuIFdlIHdvdWxkIGxpa2UgdG8gcmVseSBvbiBSRkM4 MTI2IHJ1bGVzDQo+ID4gPiBmb3IgZGVpZ25lZCBleHBlcnQgcmV2aWV3cy4NCj4gPg0KPiA+IElu IGFkZGl0aW9uIHRvIFJGQzgxMjYgdG8gZGVmZW5kIGFnYWluc3QgcmVwbGF5IGF0dGFja3MsIHdl IGNhbiBhZGQNCj4gPiB0aGUgZm9sbG93aW5nIGFkZGl0aW9uYWwgcnVsZXM6DQo+ID4NCj4gPiBU aGUgRE9UUyBzaWduYWwgY2hhbm5lbCBtZXNzYWdlcyBzZW50IGFzIGVhcmx5IGRhdGEgYnkgdGhl IERPVFMgY2xpZW50DQo+ID4gYXJlIGlkZW1wb3RlbnQgcmVxdWVzdHMuIEZ1cnRoZXIsIENvQVAg KGFzIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDQuNCBvZg0KPiA+IFJGQzcyNTIpIGlzIGNhcGFibGUg b2YgcGVyZm9ybWluZyBtZXNzYWdlIGRlZHVwbGljYXRpb24gdG8gaGFuZGxlDQo+ID4gcmVwbGF5 IG9mIENvQVAgcmVxdWVzdHMuDQo+ID4NCj4gDQo+IFtNZWRdIFdvcmtzIGZvciBtZS4NCj4gDQo+ ID4gQ2hlZXJzLA0KPiA+IC1UaXJ1DQo+ID4NCj4gPiA+DQo+ID4gPiA+ID4gUmVnYXJkaW5nIHRo ZSAoRClUTFMgMS4zIDAtUlRUIGRhdGEsIFJGQyA4NDQ2IG5vdGVzIHRoYXQNCj4gPiA+ID4gPiAi QXBwbGljYXRpb24gcHJvdG9jb2xzIE1VU1QgTk9UIHVzZSAwLVJUVCBkYXRhIHdpdGhvdXQgYSBw cm9maWxlDQo+ID4gPiA+ID4gdGhhdA0KPiA+ID4gZGVmaW5lcyBpdHMgdXNlLg0KPiA+ID4gPiA+ IFRoYXQgcHJvZmlsZSBuZWVkcyB0byBpZGVudGlmeSB3aGljaCBtZXNzYWdlcyBvciBpbnRlcmFj dGlvbnMNCj4gPiA+ID4gPiBhcmUgc2FmZSB0bw0KPiA+ID4gPiB1c2UNCj4gPiA+ID4gPiB3aXRo IDAtUlRUIGFuZCBob3cgdG8gaGFuZGxlIHRoZSBzaXR1YXRpb24gd2hlbiB0aGUgc2VydmVyDQo+ ID4gPiA+ID4gcmVqZWN0cyAwLVJUVA0KPiA+ID4gPiBhbmQNCj4gPiA+ID4gPiBmYWxscyBiYWNr IHRvIDEtUlRULiIgIFNvIHdlIGVpdGhlciBuZWVkIHRvIHNheSB3aGljaCBjbGllbnQNCj4gPiA+ ID4gPiByZXF1ZXN0cyBhcmUNCj4gPiA+ID4gMC1SVFQNCj4gPiA+ID4gPiBzYWZlIChhbmQgd2h5 KSBvciBkZWZlciB0aGF0IHByb2ZpbGUgdG8gYW5vdGhlciBkb2N1bWVudC4NCj4gPiA+ID4gPiBk cmFmdC1pZXRmLQ0KPiA+ID4gPiBkbnNvcC0NCj4gPiA+ID4gPiBzZXNzaW9uLXNpZ25hbCBpcyBw ZXJoYXBzIGFuIGV4YW1wbGUgb2YgYSBkb2N1bWVudCB0aGF0DQo+ID4gPiA+ID4gc3BlY2lmaWVz IHdoaWNoIG1lc3NhZ2VzIGFyZS9hcmVuJ3QgYWxsb3dlZCBpbiBlYXJseSBkYXRhLg0KPiA+ID4g PiA+IChkcmFmdC1pZXRmLWFjbWUtYWNtZSBpcyBhbm90aGVyLCBidXQgYW4gdW5pbnRlcmVzdGlu ZyBvbmUsDQo+ID4gPiA+ID4gc2luY2UgdGhleSBtYWtlIGV2ZXJ5IHJlcXVlc3QgaW5jbHVkZSBh IHNpbmdsZS11c2Ugbm9uY2UsIGFuZA0KPiA+ID4gPiA+IGFsbCBtZXNzYWdlcyBhcmUgMC1SVFQg c2FmZS4pIE91ciB1c2Ugb2YgaW5jcmVhc2luZyAnbWlkJyB2YWx1ZXMNCj4gPiA+ID4gPiBtYXkg aGVscCBoZXJlLCBpbiB0ZXJtcyBvZiBhbGxvd2luZw0KPiA+ID4gPiBERUxFVEVzDQo+ID4gPiA+ ID4gdG8gYmUgc2FmZSwgYnV0IEknZCBoYXZlIHRvIHRoaW5rIGEgbGl0dGxlIG1vcmUgdG8gYmUg c3VyZSB0aGF0DQo+ID4gPiA+ID4gcmVxdWVzdGluZyBtaXRpZ2F0aW9uIHdvdWxkIGJlIHNhZmUu ICAoT24gZmlyc3QgZ2xhbmNlIHRoZQ0KPiA+ID4gPiA+IHNlc3Npb24tbWFuYWdlbW5ldCBiaXRz DQo+ID4gPiA+IHdvdWxkDQo+ID4gPiA+ID4gbm90IGJlIHNhZmUsIGJ1dCBJIG1heSBiZSBtaXNz aW5nIHNvbWV0aGluZy4pDQo+ID4gPiA+DQo+ID4gPiA+IFRoZSBkcmFmdCBvbmx5IHVzZXMgaWRl bXBvdGVudCByZXF1ZXN0cyAoR0VULCBQVVQgYW5kIERFTEVURSksIGFuZA0KPiA+ID4gPiBDb0FQ IGlzIGNhcGFibGUgb2YgZGV0ZWN0aW5nIG1lc3NhZ2UgZHVwbGljYXRpb24gKHNlZQ0KPiA+ID4g PiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzI1MiNzZWN0aW9uLTQuNSkgZm9yIGJv dGgNCj4gPiA+ID4gY29uZmlybWFibGUgYW5kIG5vbi1jb25maXJtYWJsZSBtZXNzYWdlcy4NCj4g PiA+ID4gIFsxXSBBbiBhdHRhY2tlciByZXBsYXlpbmcgREVMRVRFIHdpbGwgbm90IGhhdmUgYW55 IGFkdmVyc2UNCj4gPiA+ID4gaW1wYWN0LA0KPiA+ID4gPiAyLjAyDQo+ID4gPiA+IChEZWxldGVk KSBSZXNwb25zZSBDb2RlIGlzIHJldHVybmVkIGV2ZW4gaWYgdGhlIG1pdGlnYXRpb24gcmVxdWVz dA0KPiA+ID4gPiBkb2VzIG5vdCBleGlzdC4NCj4gPiA+ID4gWzJdIFRoZSB0ZWNobmlxdWVzIGRp c2N1c3NlZCBpbiBTZWN0aW9uIDggb2YgUkZDODQ0NiBzaG91bGQNCj4gPiA+ID4gc3VmZmljZSB0 byBoYW5kbGUgYW50aS1yZXBsYXkgKGUuZy4gYW4gYXR0YWNrZXIgcmVwbGF5aW5nIGEgMC1SVFQN Cj4gPiA+ID4gZGF0YSBjYXJyeWluZyBhbiBvbGQgbWl0aWdhdGlvbiByZXF1ZXN0IHJlcGxhY2Vk IGJ5IGEgbmV3IG1pdGlnYXRpb24NCj4gc2NvcGUpLg0KPiA+ID4gPg0KPiA+ID4NCj4gPiA+IFtN ZWRdIEZXSVcsIHdlIGRvIGFscmVhZHkgaGF2ZSB0aGlzIHRleHQgaW4gdGhlIGRyYWZ0Og0KPiA+ ID4NCj4gPiA+ICAgICAgIFNlY3Rpb24gOCBvZiBbUkZDODQ0Nl0gZGlzY3Vzc2VzIHNvbWUgbWVj aGFuaXNtcyB0byBpbXBsZW1lbnQgdG8NCj4gPiA+ICAgICAgIGxpbWl0IHRoZSBpbXBhY3Qgb2Yg cmVwbGF5IGF0dGFja3Mgb24gMC1SVFQgZGF0YS4gIElmIHRoZSBET1RTDQo+ID4gPiAgICAgICBz ZXJ2ZXIgYWNjZXB0cyAwLVJUVCwgaXQgTVVTVCBpbXBsZW1lbnQgb25lIG9mIHRoZXNlIG1lY2hh bmlzbXMuDQo+ID4gPiAgICAgICBBIERPVFMgc2VydmVyIGNhbiByZWplY3QgMC1SVFQgYnkgc2Vu ZGluZyBhIFRMUyBIZWxsb1JldHJ5UmVxdWVzdC4NCj4gPiA+DQo+ID4gPiA+ID4NCj4gPiA+ID4g PiBGdXJ0aGVyIG5vdGVzIGlubGluZS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IE9uIFRodSwgSmFu IDE3LCAyMDE5IGF0IDA2OjUxOjA0QU0gKzAwMDAsDQo+ID4gPiA+ID4gbW9oYW1lZC5ib3VjYWRh aXJAb3JhbmdlLmNvbQ0KPiA+ID4gPiA+IHdyb3RlOg0KPiA+ID4gPiA+ID4gSGkgQmVuLA0KPiA+ ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFBsZWFzZSBzZWUgaW5saW5lLg0KPiA+ID4gPiA+ID4NCj4g PiA+ID4gPiA+IENoZWVycywNCj4gPiA+ID4gPiA+IE1lZA0KPiA+ID4gPiA+ID4NCj4gPiA+ID4g PiA+ID4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+ID4gPiA+ID4gPiA+IERlwqA6IEJl bmphbWluIEthZHVrIFttYWlsdG86a2FkdWtAbWl0LmVkdV0gRW52b3nDqcKgOiBtZXJjcmVkaQ0K PiA+ID4gPiA+ID4gPiAxNiBqYW52aWVyIDIwMTkgMDE6MTQgw4DCoDoNCj4gPiA+ID4gPiA+ID4g ZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnDQo+ID4gPiA+ID4gPiA+IENj wqA6IGRvdHNAaWV0Zi5vcmcNCj4gPiA+ID4gPiA+ID4gT2JqZXTCoDogQUQgcmV2aWV3IG9mIGRy YWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNQ0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ ID4gPiBTZWN0aW9uIDcuMg0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBUaGUgVExTIDEu MyBoYW5kc2hha2Ugd2l0aCAwLVJUVCBkaWFncmFtIG5lZWRzIHRvIGJlDQo+ID4gPiA+ID4gPiA+ IHJldmlzaXRlZC9yZWZyZXNoZWQsIGFzIFJGQyA4NDQ2IGRvZXMgbm90IGxvb2sgbGlrZSB0aGF0 Lg0KPiA+ID4gPiA+ID4gPiBBZGRpdGlvbmFsbHksIHRoZSB1c2FnZSBvZiBQU0sgYXMgd2VsbCBh cyBhIGNlcnRpZmljYXRlIGlzDQo+ID4gPiA+ID4gPiA+IG5vdCBkZWZpbmVkIHVudGlsDQo+ID4g PiA+ID4gPiA+IGRyYWZ0LWhvdXNsZXktdGxzLXRsczEzLWNlcnQtd2l0aC1leHRlcm4tcHNrIGlz DQo+ID4gPiA+IHB1Ymxpc2hlZC4NCj4gPiA+ID4gPiA+ID4gSSBhbHNvIG5vdGUgdGhhdCBpbiB0 aGUgZGlhZ3JhbSBhcyBwcmVzZW50ZWQsIHRoZSBjbGllbnQgaXMNCj4gPiA+ID4gPiA+ID4gbm90 IHlldCBrbm93biB0byBiZSBhdXRoZW50aWNhdGVkIHdoZW4gdGhlIHNlcnZlciBzZW5kcyBpdHMN Cj4gPiA+ID4gPiA+ID4gaW5pdGlhbA0KPiA+ID4gPiA+ID4gPiAoMC41LVJUVCkgRE9UUyBzaWdu YWwgbWVzc2FnZS4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBbTWVk XSBOb3RlZC4gVGhhbmtzLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gU2VjdGlvbiA3LjMN Cj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gVGhpcyB3aG9sZSBzZWN0aW9uIHNlZW1zIHRv IG9ubHkgYmUgcmVsZXZhbnQgZm9yIFVEUCB1c2FnZSwNCj4gPiA+ID4gPiA+ID4gc28gcHJvYmFi bHkgdGhlICJJZiBVRFAgaXMgdXNlZCIgY2xhdXNlIGNhbiBiZSBkcm9wcGVkIGFuZA0KPiA+ID4g PiA+ID4gPiBhbiBpbnRyb2R1Y3Rvcnkgc3RhdGVtZW50IGFkZGVkIGVhcmxpZXIgb24uDQo+ID4g PiA+ID4gPg0KPiA+ID4gPiA+ID4gW01lZF0gV2lsbCBjb25zaWRlciB0aGF0Lg0KPiA+ID4gPiA+ ID4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgUGF0aCBNVFUgTVVTVCBiZSBncmVhdGVyIHRoYW4NCj4gPiA+ID4gPiA+ID4gb3INCj4g PiBlcXVhbCB0bw0KPiA+ID4gPiA+ID4gPiAgICBbQ29BUCBtZXNzYWdlIHNpemUgKyBEVExTIG92 ZXJoZWFkIG9mIDEzIG9jdGV0cyArIGF1dGhlbnRpY2F0aW9uDQo+ID4gPiA+ID4gPiA+ICAgIG92 ZXJoZWFkIG9mIHRoZSBuZWdvdGlhdGVkIERUTFMgY2lwaGVyIHN1aXRlICsgYmxvY2sgcGFkZGlu Z10NCj4gPiA+ID4gPiA+ID4gICAgKFNlY3Rpb24gNC4xLjEuMSBvZiBbUkZDNjM0N10pLiAgSWYg dGhlIHJlcXVlc3Qgc2l6ZQ0KPiA+ID4gPiA+ID4gPiBleGNlZWRzIHRoZQ0KPiA+ID4gPiBwYXRo DQo+ID4gPiA+ID4gPiA+ICAgIE1UVSB0aGVuIHRoZSBET1RTIGNsaWVudCBNVVNUIHNwbGl0IHRo ZSBET1RTIHNpZ25hbCBpbnRvDQo+ID4gc2VwYXJhdGUNCj4gPiA+ID4gPiA+ID4gICAgbWVzc2Fn ZXMsIGZvciBleGFtcGxlIHRoZSBsaXN0IG9mIGFkZHJlc3NlcyBpbiB0aGUNCj4gPiA+ID4gPiA+ ID4gJ3RhcmdldC0NCj4gPiBwcmVmaXgnDQo+ID4gPiA+ID4gPiA+ICAgIHBhcmFtZXRlciBjb3Vs ZCBiZSBzcGxpdCBpbnRvIG11bHRpcGxlIGxpc3RzIGFuZCBlYWNoDQo+ID4gPiA+ID4gPiA+IGxp c3QNCj4gPiBjb252ZXllZA0KPiA+ID4gPiA+ID4gPiAgICBpbiBhIG5ldyBQVVQgcmVxdWVzdC4N Cj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gKERUTFMgMS4zIHdpbGwgaGF2ZSBhIHNob3J0 IGhlYWRlciBmb3Igc29tZSBwYWNrZXRzLCB0aGF0IGlzDQo+ID4gPiA+ID4gPiA+IGxlc3MgdGhh bg0KPiA+ID4gPiA+ID4gPiAxMyBvY3RldHMuKQ0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFtN ZWRdIFRoZSB0ZXh0IGlzIG1vcmUgYWJvdXQgMS4yLiBXZSBjYW4gYWRkIGEgMS4zIG5vdGUgaWYg eW91DQo+ID4gPiA+ID4gPiB0aGluayBpdA0KPiA+ID4gPiBpcw0KPiA+ID4gPiA+IHVzZWZ1bCBm b3IgdGhlIGRpc2N1c3Npb24uDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ ID4gPiBTZWN0aW9uIDgNCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gV2UndmUgZ290IHNv bWUgcmVxdWlyZW1lbnRzIGluIGhlcmUgYWJvdXQgbGltaXRpbmcgYmVoYXZpb3INCj4gPiA+ID4g PiA+ID4gb2YgY2xpZW50cy9zZXJ2ZXJzIHdoZW4gdGFsa2luZyB0byBnYXRld2F5czsgaXMga25v d2luZw0KPiA+ID4gPiA+ID4gPiBhYm91dCB0aGUgcHJlc2VuY2Ugb2YgYSBnYXRld2F5IHNvbWV0 aGluZyB0aGF0J3MgcmVxdWlyZWQgdG8NCj4gPiA+ID4gPiA+ID4gaGFwcGVuIG91dCBvZiBiYW5k IG9yIGlzIHRoZXJlIGFuIGluLWJhbmQgd2F5IHRvIGlkZW50aWZ5DQo+ID4gPiA+ID4gPiA+IHRo YXQgdGhlIHBlZXIgaXMgYQ0KPiA+IGdhdGV3YXk/DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4g W01lZF0gQW4gYWdlbnQgZG9lcyBub3QgbmVjZXNzYXJ5IGtub3cgdGhhdCBpdCBwZWVyIGlzDQo+ ID4gPiA+ID4gPiBnYXRld2F5LiBBIGdhdGV3YXkNCj4gPiA+ID4gaXMNCj4gPiA+ID4gPiBzZWVu IGFzIGEgc2VydmVyIGZvciB0aGUgY2xpZW50LCBhbmQgYSBjbGllbnQgZm9yIGEgc2VydmVyLg0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gICAgbWVzc2FnZXMgZnJv bSBhbiBhdXRob3JpemVkIERPVFMgZ2F0ZXdheSwgdGhlcmVieQ0KPiA+ID4gPiA+ID4gPiBjcmVh dGluZyBhDQo+ID4gPiA+ID4gPiA+IHR3by0NCj4gPiA+ID4gbGluaw0KPiA+ID4gPiA+ID4gPiAg ICBjaGFpbiBvZiB0cmFuc2l0aXZlIGF1dGhlbnRpY2F0aW9uIGJldHdlZW4gdGhlIERPVFMNCj4g PiA+ID4gPiA+ID4gY2xpZW50IGFuZA0KPiA+IHRoZQ0KPiA+ID4gPiA+ID4gPiAgICBET1RTIHNl cnZlci4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gVGhpcyBzZWVtcyB0byBpZ25vcmUg dGhlIHBvc3NpYmlsaXR5IG9mIHNldHVwcyB0aGF0IGluY2x1ZGUNCj4gPiA+ID4gPiA+ID4gYm90 aCBjbGllbnQtZG9tYWluIGFuZCBzZXJ2ZXItZG9tYWluIGdhdGV3YXlzLg0KPiA+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+IFtNZWRdIEkgdXBkYXRlZCB0aGUgdGV4dCB0byBtZW50aW9uIHRoaXMgaXMg b25seSBhbiBleGFtcGxlLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ ID4gICAgICAgICAgICAgICAgICBET1RTIGNsaWVudCBjZXJ0aWZpY2F0ZSB2YWxpZGF0aW9uIE1V U1QgYmUNCj4gPiA+ID4gPiA+ID4gcGVyZm9ybWVkDQo+ID4gPiA+IGFzDQo+ID4gPiA+ID4gPiA+ ICAgIHBlciBbUkZDNTI4MF0gYW5kIHRoZSBET1RTIGNsaWVudCBjZXJ0aWZpY2F0ZSBNVVNUDQo+ ID4gPiA+ID4gPiA+IGNvbmZvcm0gdG8NCj4gPiB0aGUNCj4gPiA+ID4gPiA+ID4gICAgW1JGQzUy ODBdIGNlcnRpZmljYXRlIHByb2ZpbGUuICBbLi4uXQ0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ ID4gPiBUaGlzIHNlZW1zIHRvIGR1cGxpY2F0ZSBhIHJlcXVpcmVtZW50IGFscmVhZHkgc3RhdGVk IGluDQo+ID4gPiA+ID4gPiA+IFNlY3Rpb24gNy4xOyBpdCdzIHByb2JhYmx5IGJlc3QgdG8gb25s eSBoYXZlIG5vcm1hdGl2ZQ0KPiA+ID4gPiA+ID4gPiBsYW5ndWFnZSBpbiBvbmUgbG9jYXRpb24s IGV2ZW4gaWYgd2UgbmVlZCB0byBtZW50aW9uIHRoZQ0KPiA+ID4gPiA+ID4gPiB0b3BpYyBpbiBt dWx0aXBsZQ0KPiA+IGxvY2F0aW9ucy4NCj4gPiA+ID4gPiA+ID4gU2ltaWxhcmx5IGZvciB0aGUg bXV0dWFsIGF1dGhlbnRpY2F0aW9uIHJlcXVpcmVtZW50LCB3aGljaA0KPiA+ID4gPiA+ID4gPiB3 ZSBkdXBsaWNhdGUgaW4gdGhlIHNlY29uZCBhbmQgZm91cnRoIHBhcmFncmFwaHMgb2YgdGhpcyBz ZWN0aW9uLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFtNZWRdIEdvb2QgcG9pbnQuIEZpeGVk Lg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gSWYgd2UgZG9uJ3Qg d2FudCB0byB1c2UgZXhhbXBsZS5jb20gdnMuIGV4YW1wbGUubmV0IGFzDQo+ID4gPiA+ID4gPiA+ IHNhbXBsZSBkb21haW5zLCB3ZSBjYW4gYWxzbyB1c2Ugd2hhdGV2ZXJ3ZXdhbnQuZXhhbXBsZSwg cGVyDQo+IFJGQyA2NzYxLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFtNZWRdIFdpbGwgbWFp bnRhaW4gdGhlIG9uZXMgYWxyZWFkeSBpbiB0aGUgZHJhZnQuIFRoYW5rcy4NCj4gPiA+ID4gPiA+ DQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFNlY3Rpb24gOQ0KPiA+ID4gPiA+ID4gPg0K PiA+ID4gPiA+ID4gPiBXZSBzaG91bGQgbWVudGlvbiB0aGUgbWVkaWEtdHlwZSBhbGxvY2F0aW9u IGluIHRoZSB0b3AtbGV2ZWwNCj4gPiBzZWN0aW9uLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ IFtNZWRdIFdpbGwgZml4IHRoYXQuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPg0KPiA+ID4g PiA+ID4gPiAibWFwcGluZ3MgdG8gQ0JPUiIgZmVlbHMgY29uZnVzaW5nIHRvIG1lLCBzaW5jZSBp dCBsZWF2ZXMNCj4gPiA+ID4gPiA+ID4gZW1wdHkgd2hhdCB3ZSBhcmUgbWFwcGluZyBmcm9tLiAg UGVyaGFwcyBqdXN0IHRhbGtpbmcgYWJvdXQNCj4gPiA+ID4gPiA+ID4gYSByZWdpc3RyeSBvZiAi Q0JPUiBtYXAga2V5cyIgd291bGQgYmUgYmV0dGVyLCBib3RoIGhlcmUgYW5kDQo+ID4gPiA+ID4g PiA+IGluIHRoZSBTZWN0aW9uDQo+ID4gOS4zDQo+ID4gPiBpbnRyby4NCj4gPiA+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBbTWVkXSBVbmxlc3MgdGhlcmUgaXMgYW4gb2JqZWN0 aW9uLCBJIGNhbiB1c2UgIkNCT1IgTWFwIEtleXMiLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ ID4gU2VjdGlvbiA5LjMNCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gSSBzdWdnZXN0IGJl aW5nIHZlcnkgZXhwbGljaXQgYWJvdXQgd2hldGhlciBuZXcgcmVxdWVzdHMgZm9yDQo+ID4gPiA+ ID4gPiA+IHJlZ2lzdHJhdGlvbiBzaG91bGQgYmUgZGlyZWN0ZWQgdG8gdGhlIG1haWxpbmcgbGlz dCBvciB0bw0KPiA+ID4gPiA+ID4gPiBJQU5BLCBhcyB3ZSd2ZSBoYWQgc29tZSBjb25mdXNpb24g YWJvdXQgdGhpcyBlbHNld2hlcmUuDQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFRoZSBj cml0ZXJpYSB1c2VkIGJ5IHRoZSBleHBlcnRzIGFsc28ganVzdCBsaXN0cyB0aGluZ3MgdGhleQ0K PiA+ID4gPiA+ID4gPiBzaG91bGQgY29uc2lkZXIsIGJ1dCBkb2VzIG5vdCBwcm92aWRlIGZ1bGwg Y2xhcml0eSBvbiB3aGljaA0KPiA+ID4gPiA+ID4gPiBhbnN3ZXIgdG8gdGhlIHF1ZXN0aW9uIGlz IG1vcmUgbGlrZWx5IHRvIGJlIGFwcHJvdmVkLiAgKEFuZA0KPiA+ID4gPiA+ID4gPiB5ZXMsIEkg a25vdyB0aGF0IHRoaXMgdGV4dCBpcyBsYXJnZWx5IGNvcGllZCBmcm9tIGFscmVhZHkNCj4gPiA+ ID4gPiA+ID4gcHVibGlzaGVkIFJGQ3MsIGJ1dCB3ZSBjYW4gc3RpbGwgZG8NCj4gPiA+ID4gPiA+ ID4gYmV0dGVyLikNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBbTWVkXSBXaWxsIGNoZWNrIHRo aXMuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBTZWN0aW9uIDku My4xDQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IElmIHdlIHdhbnQgdGhlIHZhbHVlIDAg dG8gYmUgcmVzZXJ2ZWQgd2UgbmVlZCB0byBzYXkgc28uDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ ID4gW01lZF0gMCBpcyBub3QgcGFydCBvZiB0aGUgYWxsb2NhdGlvbiByYW5nZS4NCj4gPiA+ID4g PiA+DQo+ID4gPiA+ID4gPiA+IERvIHdlIHdhbnQgdG8gc2F5IGFueXRoaW5nIGFib3V0IHRoZSB1 c2FnZSBvZiBuZWdhdGl2ZQ0KPiA+ID4gPiA+ID4gPiBpbnRlZ2VycyBhcyBtYXAga2V5cz8NCj4g PiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gSSBzdWdnZXN0IG5vdCBtZW50aW9uaW5nIHRoZSBw b3N0YWwgYWRkcmVzcywgZ2l2ZW4gdGhlDQo+ID4gPiA+ID4gPiA+IHJlY2VudA0KPiA+ID4gPiA+ ID4gPiAoZS5nLikgR0RQUiByZXF1aXJlbWVudHMuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4g W01lZF0gR29vZCBwb2ludC4gRG9uZS4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+DQo+ID4g PiA+ID4gPiA+IFNlY3Rpb24gOS4zLjINCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gSXQg bWF5IGJlIHdvcnRoIG1lbnRpb25pbmcgVGFibGUgNCBoZXJlIGFzIHdlbGwuDQo+ID4gPiA+ID4g Pg0KPiA+ID4gPiA+ID4gW01lZF0gT0suDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPg0KPiA+ ID4gPiA+ID4gPiBTZWN0aW9uIDkuNS4xDQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFdl IG5lZWQgdG8gc3BlY2lmeSB3aGljaCByYW5nZSBvZiB2YWx1ZXMgd2UgYXJlIGFza2luZyBmb3IN Cj4gPiA+ID4gPiA+ID4gYW4gYWxsb2NhdGlvbiBmcm9tLg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4g PiA+IFtNZWRdIEFkZGVkIGEgbWVudGlvbiB0byAwLTI1NSByYW5nZS4NCj4gPiA+ID4gPiA+DQo+ ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFNlY3Rpb24gOS42LjENCj4gPiA+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+ID4gQXMgYWJvdmUsIHNwZWNpZnkgd2hhdCByYW5nZSB3ZSdyZSBhc2tpbmcg YWJvdXQuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gW01lZF0gT0suDQo+ID4gPiA+ID4gPg0K PiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBJIGV4cGVjdCB0aGUgY3VycmVudCB0ZXh0IHRv IGdldCBzb21lIElFU0cgKG9yIGRpcmVjdG9yYXRlKQ0KPiA+ID4gPiA+ID4gPiBmZWVkYmFjayB0 aGF0IHRoZSBEYXRhIEl0ZW0gYW5kIFNlbWFudGljcyBkZXNjcmlwdGlvbnMgYXJlDQo+ID4gcmVw ZXRpdGl2ZQ0KPiA+ID4gYW5kIGJhbmFsLg0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBT ZWN0aW9uIDkuNw0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBJSVVDLCBJQU5BIGlzIGdv aW5nIHRvIGFzayBpZiB3ZSB3YW50IHRoaXMgbW9kdWxlIHRvIGJlDQo+ID4gPiA+ID4gPiA+ICJt YWludGFpbmVkIGJ5IElBTkEiLCBzbyBpdCB3b3VsZCBiZSBnb29kIHRvIGhhdmUgYW4gYW5zd2Vy DQo+ID4gPiA+ID4gPiA+IHJlYWR5IGV2ZW4gaWYgd2UgZG9uJ3QgcHV0IGl0IGluIHRoZSBkb2N1 bWVudCB0ZXh0Lg0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFtNZWRdIFRoaXMgaXMgZGlzY3Vz c2VkIGluIC0yNi4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+ICAg IFJhdGUtbGltaXRpbmcgRE9UUyByZXF1ZXN0cywgaW5jbHVkaW5nIHRob3NlIHdpdGggbmV3ICdj dWlkJw0KPiA+IHZhbHVlcywNCj4gPiA+ID4gPiA+ID4gICAgZnJvbSB0aGUgc2FtZSBET1RTIGNs aWVudCBkZWZlbmRzIGFnYWluc3QgRG9TIGF0dGFja3MNCj4gPiA+ID4gPiA+ID4gdGhhdCB3b3Vs ZA0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBXaXRoIHJlc3BlY3QgdG8gIm5ldyIgJ2N1 aWQnIHZhbHVlcywgaXMgdGhlIHNlcnZlciByZXF1aXJlZA0KPiA+ID4gPiA+ID4gPiB0byByZW1l bWJlciB3aGljaCBvbmVzIGl0IGhhcyBzZWVuIGluIHBlcnBldHVpdHksIG9yIGNhbiBpdA0KPiA+ ID4gPiA+ID4gPiB0aW1lIHRoZW0gb3V0IGV2ZW50dWFsbHk/DQo+ID4gPiA+ID4gPg0KPiA+ID4g PiA+ID4gW01lZF0gVGhlIGF0dGFjayB2ZWN0b3IgaXMgYSBET1RTIGNsaWVudCB3aGljaCBjaGFu Z2VzDQo+ID4gPiA+ID4gPiBmcmVxdWVudGx5IGl0cw0KPiA+ID4gPiBjdWlkLg0KPiA+ID4gPiA+ IFRoZSBET1RTIHNlcnZlciBjYW4gc2V0IGFuIGludGVydmFsIGluIHdoaWNoIHRoZSBzYW1lIGNs aWVudA0KPiA+ID4gPiA+IGNhbm5vdCBwcmVzZW50DQo+ID4gPiA+IGENCj4gPiA+ID4gPiBuZXcg Y3VpZC4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFNlY3Rpb24g MTANCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRp b25zIHNlZW0gdG8gYmUgdGFraW5nIGEgbmFycm93IGZvY3VzDQo+ID4gPiA+ID4gPiA+IG9uIHRo ZSByZXF1aXJlbWVudHMgZm9yIGFuZCBjb25zZXF1ZW5jZXMgb2Ygc3BlY2lmaWMgYml0cyBvbg0K PiA+ID4gPiA+ID4gPiB0aGUgd2lyZSBpbiB0aGUgc2lnbmFsIGNoYW5uZWwgcHJvdG9jb2wuICBJ IHRoaW5rIGl0J3MNCj4gPiA+ID4gPiA+ID4gYXBwcm9wcmlhdGUgdG8gYWxzbyBpbmNsdWRlIHNv bWUgaGlnaC1sZXZlbCB0aG91Z2h0cyBhYm91dA0KPiA+ID4gPiA+ID4gPiB0aGUgZnVuY3Rpb25h bCBiZWhhdmlvciBvZiB0aGUgcHJvdG9jb2wsIGFsbG93aW5nIHRvIHNpZ25hbA0KPiA+ID4gPiA+ ID4gPiB0aGF0IGFuIGF0dGFjayBpcyB1bmRlcndheSBhbmQgdHJpZ2dlciBtaXRpZ2F0aW9uLA0K PiA+ID4gPiA+ID4gPiBpbmNyZWFzaW5nIHRoZSBhdmFpbGFiaWxpdHkgb2Ygc2VydmljZXMsIGV0 Yy4sIGFuZCB0aGUgcmlza3MNCj4gPiA+ID4gPiA+ID4gdGhhdCBhcmUgcG9zZWQgYnkgdGhlIHBy b3RvY29sIGZhaWxpbmcgdG8gd29yayBwcm9wZXJseSwNCj4gPiA+ID4gPiA+ID4gd2hldGhlciB0 aGF0IG1lYW5zIGxldHRpbmcgYXR0YWNrIHRyYWZmaWMgdGhyb3VnaCBvciBpbXByb3Blcmx5DQo+ IGJsb2NraW5nIGxlZ2l0aW1hdGUgdHJhZmZpYy4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBb TWVkXSBXb3VsZCBhIHBvaW50ZXIgdG8gdGhlIGFyY2hpdGVjdHVyZS9yZXF1aXJlbWVudHMgSS1E cyBiZQ0KPiA+ID4gPiA+ID4gc3VmZmljaWVudA0KPiA+ID4gPiB0bw0KPiA+ID4gPiA+IGNvdmVy IHRvIGhpZ2gtbGV2ZWwgYXNwZWN0cz8NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFRob3NlIGRvY3Vt ZW50cycgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgZG8gc2VlbSB0byBjb3ZlciB0aGUNCj4gPiA+ ID4gPiByZWxldmFudA0KPiA+ID4gPiBwb2ludHMsDQo+ID4gPiA+ID4geWVzLg0KPiA+ID4gPiA+ DQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFNlY3Rpb24gMTMuMQ0KPiA+ID4gPiA+ID4g Pg0KPiA+ID4gPiA+ID4gPiBJIHRoaW5rIHRoZSBJQU5BIHJlZ2lzdHJpZXMgc2hvdWxkIGJlIGxp c3RlZCBhcw0KPiA+ID4gPiA+ID4gPiBJbmZvcm1hdGlvbmFsIGFuZCBub3QgTm9ybWF0aXZlIHJl ZmVyZW5jZXMuDQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gW01lZF0g RG9uZS4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IFNlY3Rpb24gMTMuMg0KPiA+ID4gPiA+ ID4gPg0KPiA+ID4gPiA+ID4gPiBQZW5kaW5nIHJlc29sdXRpb24gb2YgdGhlIHF1ZXN0aW9uIGFi b3V0IHVzaW5nDQo+ID4gPiA+ID4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLWNib3IgcnVsZXMg b3IgUkZDNzk1MStSRkM3MDQ5LCB0aGUNCj4gPiA+ID4gPiA+ID4gZHJhZnQtaWV0Zi1jb3JlLXlh bmctY2JvciByZWZlcmVuY2UgbWF5IG5lZWQgdG8gYmUgTm9ybWF0aXZlLg0KPiA+ID4gPiA+ID4N Cj4gPiA+ID4gPiA+IFtNZWRdIFBsZWFzZSByZWZlciB0byBteSBhbnN3ZXIgdG8gdGhhdCBxdWVz dGlvbi4NCj4gPiA+ID4gPiA+IGRyYWZ0LWlldGYtY29yZS15YW5nLQ0KPiA+ID4gPiBjYm9yIGlz DQo+ID4gPiA+ID4gaW5mb3JtYXRpdmUuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPg0KPiA+ ID4gPiA+ID4gPiBHaXZlbiB0aGF0ICJVUkkiIGlzIGEgd2VsbC1rbm93biBhYmJyZXZpYXRpb24s IHdlIG1heSBiZQ0KPiA+ID4gPiA+ID4gPiBhYmxlIHRvIGdldCBhd2F5IHdpdGggbm90IGNpdGlu ZyBSRkMgMzk4Ni4gIE9uIHRoZSBvdGhlcg0KPiA+ID4gPiA+ID4gPiBoYW5kLCBpdCdzIG5vdCBj YXVzaW5nIGFueSBoYXJtIHRvIGxlYXZlIGl0IGluLi4uDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ ID4gW01lZF0gV2lsbCBsZWF2ZSBpdC4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+DQo+ID4g PiA+ID4gPiA+IFJGQyA0NjMyIG5lZWRzIHRvIGJlIE5vcm1hdGl2ZSwgc2luY2Ugd2UgbmVlZCB0 byBrbm93IENJRFINCj4gPiA+ID4gPiA+ID4gdG8gZW5jb2RlL2RlY29kZSB0YXJnZXQtcHJlZml4 ZXMuDQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gW01lZF0gV29ya3MgZm9yIG1lLg0KPiA+ID4g PiA+ID4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gU2ltaWxhcmx5LCBJIHRoaW5rIHRo YXQgUkZDcyA2MjM0DQo+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gW01lZF0gVGhpcyBvbmUgaXMg bm90IGxpc3RlZCBhcyBub3JtYXRpdmUgYmVjYXVzZSBvdGhlciBoYXNoDQo+ID4gPiA+ID4gPiBh bGdvcyBtYXkgYmUNCj4gPiA+ID4gPiB1c2VkLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gSXQncyBh IGxvd2VyLWNhc2UgInJlY29tbWVuZGVkIiwgd2hpY2ggY2FuIHByb2JhYmx5IGVrZSBieSBhcw0K PiA+ID4gPiA+IGRlc2NyaXB0aXZlDQo+ID4gPiA+IGFuZA0KPiA+ID4gPiA+IG5vdCBhICJwcm90 b2NvbCBmZWF0dXJlIiAoc2VlIGJlbG93KS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gLCA3NDEz DQo+ID4gPiA+ID4gPiBbTWVkXSBUaGUgc3VwcG9ydCBpZiBURk8gaXMgbm90IG1hbmRhdG9yeS4N Cj4gPiA+ID4gPg0KPiA+ID4gPiA+IEl0J3MgYSBTSE9VTEQgKCJTSE9VTEQgaW1wbGVtZW50IGFs bCBvZiB0aGUgZm9sbG93aW5nIGl0ZW1zIiksDQo+ID4gdGhvdWdoLi4uDQo+ID4gPiA+ID4NCj4g PiA+ID4gPiA+ICwgNzU4OQ0KPiA+ID4gPiA+ID4gW01lZF0gVGhpcyBpcyBhIE1BWSBpbiB0aGUg c3BlYy4gSXQgaXMganVzdCBmaW5lIHRvIGxlYXZlIGl0DQo+ID4gPiA+ID4gPiBhcw0KPiA+ID4g PiBpbmZvcm1hdGl2ZS4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IC4uLi5wZXINCj4gPiA+ID4gPiBo dHRwczovL3d3dy5pZXRmLm9yZy9ibG9nL2llc2ctc3RhdGVtZW50LW5vcm1hdGl2ZS1hbmQtaW5m b3JtYXRpDQo+ID4gPiA+ID4gdmUtDQo+ID4gPiA+ID4gcmVmZXJlbmNlcy8NCj4gPiA+ID4gPiBu b3RlIDEsICJFdmVuIHJlZmVyZW5jZXMgdGhhdCBhcmUgcmVsZXZhbnQgb25seSBmb3Igb3B0aW9u YWwNCj4gPiA+ID4gPiBmZWF0dXJlcyBtdXN0DQo+ID4gPiA+IGJlDQo+ID4gPiA+ID4gY2xhc3Np ZmllZCBhcyBub3JtYXRpdmUgaWYgdGhleSBtZWV0IHRoZSBhYm92ZSBjb25kaXRpb25zIGZvcg0K PiA+ID4gPiA+IG5vcm1hdGl2ZSByZWZlcmVuY2VzLiINCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFRo aXMgZG9lcyBzZWVtIHRvIGJlIHNvbWV0aGluZyB3ZSBhY3R1YWxseSBuZWVkIHRvIGNhcmUgYWJv dXQNCj4gPiA+ID4gPiBiZWZvcmUgSUVURg0KPiA+ID4gPiBMQywNCj4gPiA+ID4gPiB0aG91Z2gs IGFzIDc0MTMgaXMgRXhwZXJpbWVudGFsIGFuZCBub3QgbGlzdGVkIGluIHRoZSBkb3ducmVmDQo+ ID4gPiA+ID4gcmVnaXN0cnkgKGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Rvd25y ZWYvKSwgc28gaWYgd2UNCj4gPiA+ID4gPiBsZWF2ZSBpdCBhcw0KPiA+ID4gPiBJbmZvcm1hdGlv bmFsDQo+ID4gPiA+ID4gYW5kIGhhdmUgdG8gY2hhbmdlIGl0IGxhdGVyLCB3ZSdkIG5lZWQgdG8g YWxzbyByZXN0YXJ0L3JlLXJ1bg0KPiA+ID4gPiA+IHRoZSBJRVRGDQo+ID4gTEMuDQo+ID4gPiA+ ID4NCj4gPiA+ID4gPiA+ICwgNzkxOA0KPiA+ID4gPiA+ID4gW01lZF0gSWRlbSBhcyBURk8uDQo+ ID4gPiA+ID4NCj4gPiA+ID4gPiBUaGlzIGlzIEluZm9ybWF0aW9uYWwgKGkuZS4sIGFsc28gc3Vz Y2VwdGlibGUgdG8gdGhlIGRvd25yZWYgaXNzdWUpLg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiAs IDc5MjQNCj4gPiA+ID4gPiA+IFtNZWRdIElkZW0gYXMgVEZPLg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4gKGlkZW0geDIpLCB0aG91Z2ggdGhpcyBpcyBzdGFuZGFyZHMtdHJhY2sgYXQgbGVhc3QsIHNv IHdlIGhhdmUNCj4gPiA+ID4gPiBtb3JlIGxlZXdheQ0KPiA+ID4gPiB0bw0KPiA+ID4gPiA+IG1v dmUgdGhpbmdzIGFyb3VuZCBsYXRlci4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4N Cj4gPiA+ID4gPiBJIHRoaW5rIHRoZSBtb3N0IGV4cGVkaWVudCB0aGluZyB0byBkbyBoZXJlIHdv dWxkIGp1c3QgYmUgdG8NCj4gPiA+ID4gPiByZWxheCB0aGUgcmVxdWlyZW1lbnQgZm9yIFRMUyBG YWxzdCBTVGFydCwgVEZPLCBhbmQgQ2FjaGVkDQo+ID4gPiA+ID4gSW5mb3JtYXRpb24sIHBlcmhh cHMgdG8NCj4gPiA+ID4gdGV4dA0KPiA+ID4gPiA+IGxpa2UgIlRoZSBmb2xsb3dpbmcgaXRlbXMg YXJlIGFkZGl0aW9uYWwgbWVjaGFuaXNtcyB0aGF0IGNhbg0KPiA+ID4gPiA+IHJlZHVjZSB0aGUN Cj4gPiA+ID4gZGVsYXkNCj4gPiA+ID4gPiByZXF1aXJlZCB0byBkZWxpdmVyIGEgRE9UUyBzaWdu YWwgY2hhbm5lbCBtZXNzYWdlLCB3aGljaA0KPiA+ID4gPiA+IGltcGxlbWVudGF0aW9ucw0KPiA+ ID4gPiBhcmUNCj4gPiA+ID4gPiBlbmNvdXJhZ2VkIHRvIGltcGxlbWVudCBhcyBwb3NzaWJsZS4i LCBidXQgSSBhbSBvcGVuIHRvIG90aGVyDQo+ID4gPiA+ID4gc3VnZ2VzdGlvbnMNCj4gPiA+ID4g Zm9yDQo+ID4gPiA+ID4gd2hhdCB0byBkby4NCj4gPiA+ID4NCj4gPiA+ID4gVExTIEZhbHNlIFN0 YXJ0IGFuZCBDYWNoZWQgSW5mb3JtYXRpb24gY2FuIGJlIG1hZGUgbm9ybWF0aXZlDQo+ID4gPiA+ IHJlZmVyZW5jZXMgKGp1c3QgbGlrZSB3ZSByZWZlcmVuY2VkIHRoZXNlIGl0ZW1zIGluIG91ciBz cGVjDQo+ID4gPiA+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4MzEwKQ0KPiA+ID4g PiBURk8gaXMgZm9yIFRDUCBvbmx5IGFuZCB0aGF0IHRvbyBmb3IgZXhjZXB0aW9uIHNjZW5hcmlv cyB3aGVyZSBVRFANCj4gPiA+ID4gaXMgYmxvY2tlZC4gVEZPIGNhbiByZW1vdmVkIGZyb20gdGhl IGxpc3Qgb2YgaXRlbXMgdGhlIERPVFMgYWdlbnRzDQo+ID4gPiA+IFNIT1VMRCBpbXBsZW1lbnQu DQo+ID4gPiA+DQo+ID4gPiA+IE5FVzoNCj4gPiA+ID4gQ29tcGFyZWQgdG8gVURQLCBET1RTIHNp Z25hbCBjaGFubmVsIG92ZXIgVENQIHJlcXVpcmVzIGFuDQo+ID4gPiA+IGFkZGl0aW9uYWwNCj4g PiA+ID4gcm91bmQtIHRyaXAgdGltZSAoUlRUKSBvZiBsYXRlbmN5IHRvIGVzdGFibGlzaCBhIFRD UCBjb25uZWN0aW9uLg0KPiA+ID4gPiBJbXBsZW1lbnRhdGlvbnMgYXJlIGVuY291cmFnZWQgdG8g aW1wbGVtZW50IFRDUCBGYXN0IE9wZW4NCj4gPiA+ID4gW1JGQzc0MTNdIHRvIGVsaW1pbmF0ZSB0 aGF0IFJUVCB3aGVuIGluZm9ybWF0aW9uIGV4aXN0cyBmcm9tIHByaW9yIFRDUA0KPiBjb25uZWN0 aW9uLg0KPiA+ID4gPg0KPiA+ID4gPiAtVGlydQ0KPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ ID4NCj4gPiA+ID4gPiA+ICwgYW5kIDc5NTENCj4gPiA+ID4gPiA+IFtNZWRdIHRoaXMgb25lIHdh cyBub3QgbGlzdGVkIGFzIG5vcm1hdGl2ZSBiZWNhdXNlIHRoZQ0KPiA+ID4gPiA+ID4gZG9jdW1l bnQgbGlzdHMgdHdvDQo+ID4gPiA+ID4gd2F5cyB0byBkbyB0aGUgbWFwcGluZy4NCj4gPiA+ID4g Pg0KPiA+ID4gPiA+IEFncmVlZC4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IC1CZW4NCj4gPiA+ID4g Pg0KPiA+ID4gPiA+ID4gPiBzaG91bGQgYWxzbyBiZSBOb3JtYXRpdmUuDQo+ID4gPiA+ID4gPiA+ DQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IC1CZW4NCj4gPiA+ID4gPiA+DQo+ID4gPiA+ ID4NCj4gPiA+ID4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KPiA+ID4gPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gPiA+ID4gRG90c0BpZXRmLm9y Zw0KPiA+ID4gPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0K From nobody Mon Jan 21 06:25:28 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26B99130EEF for ; Mon, 21 Jan 2019 06:25:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ww-5XV3RBdsp for ; Mon, 21 Jan 2019 06:25:24 -0800 (PST) Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84ABB130DC4 for ; Mon, 21 Jan 2019 06:25:23 -0800 (PST) Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar23.francetelecom.fr (ESMTP service) with ESMTP id 43jv343kGNzBrn4; Mon, 21 Jan 2019 15:25:20 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.72]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 43jv342mzkzBrLR; Mon, 21 Jan 2019 15:25:20 +0100 (CET) Received: from OPEXCAUBM5C.corporate.adroot.infra.ftgroup (10.114.13.38) by OPEXCLILMA3.corporate.adroot.infra.ftgroup (10.114.31.72) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 21 Jan 2019 15:25:20 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5C.corporate.adroot.infra.ftgroup ([fe80::393d:418c:3f1d:991d%21]) with mapi id 14.03.0415.000; Mon, 21 Jan 2019 15:25:19 +0100 From: To: Takahiko Nagata CC: "dots@ietf.org" Thread-Topic: New Version Notification for draft-nishizuka-dots-signal-control-filtering-02.txt Thread-Index: AQHUsZSTGMTSbdBqkk2xGa77+OXjFKW5xiYA Date: Mon, 21 Jan 2019 14:25:18 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0AFE4@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <154808047532.8261.13887766521569519982.idtracker@ietfa.amsl.com> In-Reply-To: <154808047532.8261.13887766521569519982.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Dots] TR: New Version Notification for draft-nishizuka-dots-signal-control-filtering-02.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 14:25:26 -0000 SGkgVGFrYWhpa28sIA0KDQpJIHVwZGF0ZWQgdGhlIGRyYWZ0IHRvIHRha2UgaW50byBhY2NvdW50 IHlvdXIgY29tbWVudHM6IA0KDQoqIE1ha2Ugc3VyZSB0aGF0IGJ5IGRlZmF1bHQsIHRoZSBkYXRh IGNoYW5uZWwgaXMgdXNlZCBmb3IgQUNMLXJlbGF0ZWQgb3BlcmF0aW9ucy4gDQoqIE5vIHVwZGF0 ZSBpcyByZXF1aXJlZCB0byBlZmZpY2FjeSB1cGRhdGUsIGdldCwgYW5kIGRlbGV0ZS4gDQoNClBs ZWFzZSBsZXQgdXMga25vdyBpZiB0aGUgY2hhbmdlcyBhZGRyZXNzZXMgeW91ciBjb21tZW50cy4g DQoNCkRvbid0IGhlc2l0YXRlIHRvIHNoYXJlIGFueSBmdXJ0aGVyIGNvbW1lbnQgeW91IG1heSBo YXZlLiBUaGFua3MuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5l LS0tLS0NCj4gRGXCoDogaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQt ZHJhZnRzQGlldGYub3JnXQ0KPiBFbnZvecOpwqA6IGx1bmRpIDIxIGphbnZpZXIgMjAxOSAxNToy MQ0KPiDDgMKgOiBUYWthaGlrbyBOYWdhdGE7IFRpcnVtYWxlc3dhciBSZWRkeTsgQk9VQ0FEQUlS IE1vaGFtZWQgVEdJL09MTjsgUmVkZHkgSzsNCj4gS2FuYW1lIE5pc2hpenVrYQ0KPiBPYmpldMKg OiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LW5pc2hpenVrYS1kb3RzLXNpZ25h bC1jb250cm9sLQ0KPiBmaWx0ZXJpbmctMDIudHh0DQo+IA0KPiANCj4gQSBuZXcgdmVyc2lvbiBv ZiBJLUQsIGRyYWZ0LW5pc2hpenVrYS1kb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMi50 eHQNCj4gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBNb2hhbWVkIEJvdWNhZGFp ciBhbmQgcG9zdGVkIHRvIHRoZQ0KPiBJRVRGIHJlcG9zaXRvcnkuDQo+IA0KPiBOYW1lOgkJZHJh ZnQtbmlzaGl6dWthLWRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nDQo+IFJldmlzaW9uOgkw Mg0KPiBUaXRsZToJCUNvbnRyb2xsaW5nIEZpbHRlcmluZyBSdWxlcyBVc2luZyBET1RTIFNpZ25h bCBDaGFubmVsDQo+IERvY3VtZW50IGRhdGU6CTIwMTktMDEtMjENCj4gR3JvdXA6CQlJbmRpdmlk dWFsIFN1Ym1pc3Npb24NCj4gUGFnZXM6CQkxNQ0KPiBVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LW5pc2hpenVrYS1kb3RzLQ0KPiBzaWdu YWwtY29udHJvbC1maWx0ZXJpbmctMDIudHh0DQo+IFN0YXR1czogICAgICAgICBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1uaXNoaXp1a2EtZG90cy1zaWduYWwtDQo+IGNv bnRyb2wtZmlsdGVyaW5nLw0KPiBIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LW5pc2hpenVrYS1kb3RzLXNpZ25hbC0NCj4gY29udHJvbC1maWx0ZXJpbmct MDINCj4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0 bWwvZHJhZnQtbmlzaGl6dWthLWRvdHMtDQo+IHNpZ25hbC1jb250cm9sLWZpbHRlcmluZw0KPiBE aWZmOiAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LW5p c2hpenVrYS1kb3RzLQ0KPiBzaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDINCj4gDQo+IEFic3Ry YWN0Og0KPiAgICBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyBhbiBleHRlbnNpb24gdG8gdGhlIERP VFMgc2lnbmFsIGNoYW5uZWwgdG8NCj4gICAgY29udHJvbCB0aGUgZmlsdGVyaW5nIHJ1bGVzIHdo ZW4gYW4gYXR0YWNrIG1pdGlnYXRpb24gaXMgYWN0aXZlLg0KPiANCj4gICAgUGFydGljdWxhcmx5 LCB0aGlzIGV4dGVuc2lvbiBhbGxvd3MgYSBET1RTIGNsaWVudCB0byBhY3RpdmF0ZSBvciBkZS0N Cj4gICAgYWN0aXZhdGUgZmlsdGVyaW5nIHJ1bGVzIGR1cmluZyBhIEREb1MgYXR0YWNrLiAgVGhl IGNoYXJhY3Rlcml6YXRpb24NCj4gICAgb2YgdGhlc2UgZmlsdGVyaW5nIHJ1bGVzIGlzIHN1cHBv c2VkIHRvIGJlIGNvbnZleWVkIGJ5IGEgRE9UUyBjbGllbnQNCj4gICAgZHVyaW5nIHBlYWNlIHRp bWUgYnkgbWVhbnMgb2YgRE9UUyBkYXRhIGNoYW5uZWwuDQo+IA0KPiBFZGl0b3JpYWwgTm90ZSAo VG8gYmUgcmVtb3ZlZCBieSBSRkMgRWRpdG9yKQ0KPiANCj4gICAgUGxlYXNlIHVwZGF0ZSB0aGVz ZSBzdGF0ZW1lbnRzIHdpdGhpbiB0aGUgZG9jdW1lbnQgd2l0aCB0aGUgUkZDDQo+ICAgIG51bWJl ciB0byBiZSBhc3NpZ25lZCB0byB0aGlzIGRvY3VtZW50Og0KPiANCj4gICAgbyAgIlRoaXMgdmVy c2lvbiBvZiB0aGlzIFlBTkcgbW9kdWxlIGlzIHBhcnQgb2YgUkZDIFhYWFg7Ig0KPiANCj4gICAg byAgIlJGQyBYWFhYOiBDb250cm9sbGluZyBGaWx0ZXJpbmcgUnVsZXMgVXNpbmcgRE9UUyBTaWdu YWwgQ2hhbm5lbCI7DQo+IA0KPiAgICBvICByZWZlcmVuY2U6IFJGQyBYWFhYDQo+IA0KPiAgICBv ICBbUkZDWFhYWF0NCj4gDQo+ICAgIFBsZWFzZSB1cGRhdGUgdGhlc2Ugc3RhdGVtZW50cyB3aXRo IHRoZSBSRkMgbnVtYmVyIHRvIGJlIGFzc2lnbmVkIHRvDQo+ICAgIHRoZSBmb2xsb3dpbmcgZG9j dW1lbnRzOg0KPiANCj4gICAgbyAgIlJGQyBTU1NTOiBEaXN0cmlidXRlZCBEZW5pYWwtb2YtU2Vy dmljZSBPcGVuIFRocmVhdCBTaWduYWxpbmcNCj4gICAgICAgKERPVFMpIFNpZ25hbCBDaGFubmVs IFNwZWNpZmljYXRpb24iICh1c2VkIHRvIGJlDQo+ICAgICAgIFtJLUQuaWV0Zi1kb3RzLXNpZ25h bC1jaGFubmVsXSkNCj4gDQo+ICAgIG8gICJSRkMgRERERDogRGlzdHJpYnV0ZWQgRGVuaWFsLW9m LVNlcnZpY2UgT3BlbiBUaHJlYXQgU2lnbmFsaW5nDQo+ICAgICAgIChET1RTKSBEYXRhIENoYW5u ZWwgU3BlY2lmaWNhdGlvbiIgKHVzZWQgdG8gYmUNCj4gICAgICAgW0ktRC5pZXRmLWRvdHMtZGF0 YS1jaGFubmVsXSkNCj4gDQo+ICAgIFBsZWFzZSB1cGRhdGUgdGhlICJyZXZpc2lvbiIgZGF0ZSBv ZiB0aGUgWUFORyBtb2R1bGUuDQo+IA0KPiANCj4gDQo+IA0KPiBQbGVhc2Ugbm90ZSB0aGF0IGl0 IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9u DQo+IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQg dG9vbHMuaWV0Zi5vcmcuDQo+IA0KPiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KDQo= From nobody Mon Jan 21 06:32:55 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2608212DDA3; Mon, 21 Jan 2019 06:32:54 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154808117412.8253.6509773657484516411@ietfa.amsl.com> Date: Mon, 21 Jan 2019 06:32:54 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-multihoming-01.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 14:32:54 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Multi-homing Deployment Considerations for Distributed-Denial-of-Service Open Threat Signaling (DOTS) Authors : Mohamed Boucadair Tirumaleswar Reddy Filename : draft-ietf-dots-multihoming-01.txt Pages : 14 Date : 2019-01-21 Abstract: This document discusses multi-homing considerations for Distributed- Denial-of-Service Open Threat Signaling (DOTS). The goal is to provide some guidance for DOTS clients/gateways when multihomed. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-multihoming/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-multihoming-01 https://datatracker.ietf.org/doc/html/draft-ietf-dots-multihoming-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-multihoming-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jan 21 06:34:44 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E28B612DDA3 for ; Mon, 21 Jan 2019 06:34:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t_BYjn2Ag67D for ; Mon, 21 Jan 2019 06:34:40 -0800 (PST) Received: from orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A455E130DC4 for ; Mon, 21 Jan 2019 06:34:40 -0800 (PST) Received: from opfednr03.francetelecom.fr (unknown [xx.xx.xx.67]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 43jvFp5QKNz4x4r for ; Mon, 21 Jan 2019 15:34:38 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.17]) by opfednr03.francetelecom.fr (ESMTP service) with ESMTP id 43jvFp4XFCzDq7n for ; Mon, 21 Jan 2019 15:34:38 +0100 (CET) Received: from OPEXCAUBM43.corporate.adroot.infra.ftgroup (10.114.13.67) by OPEXCLILM24.corporate.adroot.infra.ftgroup (10.114.31.17) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 21 Jan 2019 15:34:38 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM43.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Mon, 21 Jan 2019 15:34:35 +0100 From: To: "dots@ietf.org" CC: JACQUENET Christian TGI/OLN Thread-Topic: [Dots] I-D Action: draft-ietf-dots-multihoming-01.txt Thread-Index: AQHUsZY3bk893ZsSJ0+Dy73y5TTwBaW5yWOg Date: Mon, 21 Jan 2019 14:34:34 +0000 Message-ID: References: <154808117412.8253.6509773657484516411@ietfa.amsl.com> In-Reply-To: <154808117412.8253.6509773657484516411@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] TR: I-D Action: draft-ietf-dots-multihoming-01.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 14:34:43 -0000 Hi all,=20 This version integrates comments received from both Christian (cced) and We= i.=20 Cheers, Med > -----Message d'origine----- > De=A0: Dots [mailto:dots-bounces@ietf.org] De la part de internet- > drafts@ietf.org > Envoy=E9=A0: lundi 21 janvier 2019 15:33 > =C0=A0: i-d-announce@ietf.org > Cc=A0: dots@ietf.org > Objet=A0: [Dots] I-D Action: draft-ietf-dots-multihoming-01.txt >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the IET= F. >=20 > Title : Multi-homing Deployment Considerations for > Distributed-Denial-of-Service Open Threat Signaling (DOTS) > Authors : Mohamed Boucadair > Tirumaleswar Reddy > Filename : draft-ietf-dots-multihoming-01.txt > Pages : 14 > Date : 2019-01-21 >=20 > Abstract: > This document discusses multi-homing considerations for Distributed- > Denial-of-Service Open Threat Signaling (DOTS). The goal is to > provide some guidance for DOTS clients/gateways when multihomed. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-multihoming/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-multihoming-01 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-multihoming-01 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dots-multihoming-01 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Mon Jan 21 06:58:32 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F3D5130DC4 for ; Mon, 21 Jan 2019 06:58:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.854 X-Spam-Level: X-Spam-Status: No, score=-8.854 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qPbRRUyRCzVG for ; Mon, 21 Jan 2019 06:58:28 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFC0E12DDA3 for ; Mon, 21 Jan 2019 06:58:27 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1548082686; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=f uU/9IenTSl8tJvUegj36LZJdD1G1zVfrR7/d3wPVA w=; b=Z4bAHIi/Cix+NBHsjYNDuZw9ZfRuUfBGuBhu8uqWaV1f pnELCqMMwrOOntsVGNResvBxoA9KylqmrZ1pni2nDbotMVdKOk x1gtI66MTemU27oE2EGSbHRQeMNm2KXpuS7SkrRnqW8Nygxt1J jM/r9p/VC0G5B6HGo1+IfICJno8= Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 6499_0062_7d4f4100_0050_4ec0_83cd_09eeca79e015; Mon, 21 Jan 2019 07:58:06 -0700 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 07:57:59 -0700 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 21 Jan 2019 07:57:55 -0700 Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Mon, 21 Jan 2019 07:57:55 -0700 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (10.44.176.241) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Jan 2019 07:57:54 -0700 Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2677.namprd16.prod.outlook.com (20.177.226.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.31; Mon, 21 Jan 2019 14:57:52 +0000 Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.031; Mon, 21 Jan 2019 14:57:52 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "dots@ietf.org" CC: JACQUENET Christian TGI/OLN Thread-Topic: [Dots] TR: I-D Action: draft-ietf-dots-multihoming-01.txt Thread-Index: AQHUsZaLn53buHOcyUWO2pfjwVjUMaW5z/cA Date: Mon, 21 Jan 2019 14:57:52 +0000 Message-ID: References: <154808117412.8253.6509773657484516411@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR16MB2677; 6:sRoTaqtkr0exwpHuv2DabuiiUQInjX2kvZ7nc1h4r6N9U+ft+PYgZ1xpyA34bGXARteJu6yHERbxWImyfGjXS+433NdXfGJ4R0mtzvxlfxHUtBSUiPlHNnIOboLXLjDCowShbbxcwFZG5hMsqTg8PRexXfys0nM37Ev10TSgjLb2SI35RkTTQnWC07ZC8NnEkzUxS71vc3Ls7/aefTCjoKQ3FIXYmFsh85uYKq3zDcHhFKoQ1PnfSuQoWGlG8ef7mXswM4x/X0eSoh9LHHp+SlsPqr65KpdvqzeKWsJvXUWxwsxzZCsimKNwM12Qgm2RlwqkfkDMi7SMksbx1qhqLXqmpHGuWHBMGOd4/ioLd48lohZSeg+rIqeyVwR7eQjicSyiGNoakLffzxjm0bogHUE+G+tPqhxzAjfg8GD5e3GBodM5+SJCJEIZ414OMG38WTtklFuWfUJzE9sGtpcFbg==; 5:H77aGtlVl5Txx1zX1DqbLrsg9UCxKuEMNHw+YRIyseaF4XzTEhnBdvx8oFI2PtC9cnIllTZkBj9pZUKMikWQPNKlDvzX1/pXu0xbOKwMJH5ub8rwORkKeAh+oGBrPTqwEp8aCRU8+Lz0p9VIdEmgNT4RDN2p/kPwKEKefLLrlJsbYVnxLlXPDjf9ngaokgtI58cSJKg8KIQzkUqjhHK64Q==; 7:qroUVTmY6aVDb9HWKpW8KPjdqnycwf6Cfc/JMBVw0Hm6e6RDg78yV4kf9r5qNNMC2pIVFwK1hvvc7OmuFi1XOvt4ISqo2mgEQ/zpfNuXKqPvccjdPXwyFZL5AxyKIy0lotfr8I3Ika1DbdTxudNpGg== x-ms-office365-filtering-correlation-id: 0b3ebf9a-dff6-4690-07bd-08d67fb0d195 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600109)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2677; x-ms-traffictypediagnostic: BYAPR16MB2677: x-microsoft-antispam-prvs: x-forefront-prvs: 0924C6A0D5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(396003)(346002)(366004)(136003)(39860400002)(32952001)(13464003)(53754006)(199004)(55784004)(189003)(256004)(14444005)(99286004)(486006)(11346002)(476003)(80792005)(33656002)(186003)(26005)(8936002)(7696005)(76176011)(102836004)(6506007)(229853002)(53546011)(105586002)(106356001)(74316002)(8676002)(72206003)(966005)(81166006)(81156014)(14454004)(2906002)(305945005)(7736002)(2501003)(478600001)(6246003)(110136005)(53936002)(97736004)(66574012)(6116002)(71200400001)(316002)(66066001)(25786009)(446003)(55016002)(86362001)(9686003)(6306002)(4326008)(6436002)(71190400001)(3846002)(68736007)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2677; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 50u6EAaOEU4sDeDRbIkiOEsHiv724n8z5nxuA6lo543GXFKoxZ/cfi1gqmdXX6QodhK1iWVdOqUXkftym0OCGPvLEo6/iii/DTWprR9W2FgUS82FpLEHxPlQTC9dOYwCADvOp79AaOQnaCYePRTb3pbm/bNRVbFyG3Xhrf9NxRX6qa/Y1IwWmmuh09idPiEnfe4BKgdyhU7s4MtLrefRXbOftoHN8GuVsykBVW93ouYNRmeVqgWnibxttGwSIIlROqg447fxuoVDd4f2KkxJOwAkqgtrJCrpLNLoXAb0mwPpXlmEvFvE+9IwrnbIZYOFouuec0jT0KHSvNkygAaf8Sg1YC3xACXRTWB0sI8rVLlB1XvgKpJOngz7wO7vmFBsAlHOOcCihGIXuVRiOMnT1k2tVBQVpmj3GGGZzw8A1mQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 0b3ebf9a-dff6-4690-07bd-08d67fb0d195 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2019 14:57:52.5669 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2677 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0 X-NAI-Spam-Version: 2.3.0.9418 : core <6465> : inlines <6998> : streams <1810733> : uri <2783391> Archived-At: Subject: Re: [Dots] TR: I-D Action: draft-ietf-dots-multihoming-01.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 14:58:31 -0000 Q29tbWVudHMgYW5kIE5pdHM6DQoNCjEpIEZvciBleGFtcGxlLCBhIG1pdGlnYXRpb24gcmVxdWVz dCB0byBwcm90ZWN0IHRhcmdldCByZXNvdXJjZXMgYm91bmQNCiAgIHRvIGEgUEEgSVAgYWRkcmVz cy9wcmVmaXggY2Fubm90IGJlIHNhdGlzZmllZCBieSBhIHByb3Zpc2lvbmluZw0KICAgZG9tYWlu IGFub3RoZXIgZG9tYWluIHRoYW4gdGhlIG9uZSB0aGF0IG93bnMgdGhvc2UgYWRkcmVzc2VzLw0K ICAgcHJlZml4ZXMuIA0KDQpOaXQ+IFRoZSBhYm92ZSBsaW5lIGxvb2tzIGluY29ycmVjdC4NCg0K MikNCk9MRDoNCkREb1MgT3BlbiBUaHJlYXQgU2lnbmFsaW5nIChET1RTKSBbSS1ELmlldGYtZG90 cy1hcmNoaXRlY3R1cmVdYXJjaGl0ZWN0dXJlDQpORVc6DQpPTEQ6DQpERG9TIE9wZW4gVGhyZWF0 IFNpZ25hbGluZyAoRE9UUykgYXJjaGl0ZWN0dXJlIFtJLUQuaWV0Zi1kb3RzLWFyY2hpdGVjdHVy ZV0NCg0KMykgSW4gU2VjdGlvbiA1LjIsIEhvdyB3aWxsIHRoZSBET1RTIGdhdGV3YXkgYWdncmVn YXRlIHRoZSByZXNwb25zZXMgZnJvbSBtdWx0aXBsZSBET1RTIHNlcnZlcnMuDQpGb3IgZXhhbXBs ZSBjb25zaWRlciB0aGUgZm9sbG93aW5nIHNjZW5hcmlvcyANCmEpIE9uZSBvZiB0aGUgRE9UUyBz ZXJ2ZXIgcmVqZWN0cyB0aGUgcmVxdWVzdCBhbmQgdGhlIG90aGVyIERPVFMgc2VydmVyIGFjY2Vw dHMgdGhlIHJlcXVlc3QuIA0KYilUaGUgRE9UUyBzZXJ2ZXJzIHJlc3BvbmQgd2l0aCBkaWZmZXJl bnQgbWl0aWdhdGlvbiBzdGF0dXMuDQoNCkNoZWVycywNCi1UaXJ1DQoNCj4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogRG90cyA8ZG90cy1ib3VuY2VzQGlldGYub3JnPiBPbiBC ZWhhbGYgT2YNCj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiBTZW50OiBNb25kYXks IEphbnVhcnkgMjEsIDIwMTkgODowNSBQTQ0KPiBUbzogZG90c0BpZXRmLm9yZw0KPiBDYzogSkFD UVVFTkVUIENocmlzdGlhbiBUR0kvT0xOIDxjaHJpc3RpYW4uamFjcXVlbmV0QG9yYW5nZS5jb20+ DQo+IFN1YmplY3Q6IFtEb3RzXSBUUjogSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1kb3RzLW11bHRp aG9taW5nLTAxLnR4dA0KPiANCj4gDQo+IA0KPiBIaSBhbGwsDQo+IA0KPiBUaGlzIHZlcnNpb24g aW50ZWdyYXRlcyBjb21tZW50cyByZWNlaXZlZCBmcm9tIGJvdGggQ2hyaXN0aWFuIChjY2VkKSBh bmQgV2VpLg0KPiANCj4gQ2hlZXJzLA0KPiBNZWQNCj4gDQo+ID4gLS0tLS1NZXNzYWdlIGQnb3Jp Z2luZS0tLS0tDQo+ID4gRGXCoDogRG90cyBbbWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9yZ10g RGUgbGEgcGFydCBkZSBpbnRlcm5ldC0NCj4gPiBkcmFmdHNAaWV0Zi5vcmcgRW52b3nDqcKgOiBs dW5kaSAyMSBqYW52aWVyIDIwMTkgMTU6MzMgw4DCoDoNCj4gPiBpLWQtYW5ub3VuY2VAaWV0Zi5v cmcgQ2PCoDogZG90c0BpZXRmLm9yZyBPYmpldMKgOiBbRG90c10gSS1EIEFjdGlvbjoNCj4gPiBk cmFmdC1pZXRmLWRvdHMtbXVsdGlob21pbmctMDEudHh0DQo+ID4NCj4gPg0KPiA+IEEgTmV3IElu dGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0 cw0KPiA+IGRpcmVjdG9yaWVzLg0KPiA+IFRoaXMgZHJhZnQgaXMgYSB3b3JrIGl0ZW0gb2YgdGhl IEREb1MgT3BlbiBUaHJlYXQgU2lnbmFsaW5nIFdHIG9mIHRoZSBJRVRGLg0KPiA+DQo+ID4gICAg ICAgICBUaXRsZSAgICAgICAgICAgOiBNdWx0aS1ob21pbmcgRGVwbG95bWVudCBDb25zaWRlcmF0 aW9ucyBmb3INCj4gPiBEaXN0cmlidXRlZC1EZW5pYWwtb2YtU2VydmljZSBPcGVuIFRocmVhdCBT aWduYWxpbmcgKERPVFMpDQo+ID4gICAgICAgICBBdXRob3JzICAgICAgICAgOiBNb2hhbWVkIEJv dWNhZGFpcg0KPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgVGlydW1hbGVzd2FyIFJlZGR5 DQo+ID4gCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtZG90cy1tdWx0aWhvbWluZy0wMS50 eHQNCj4gPiAJUGFnZXMgICAgICAgICAgIDogMTQNCj4gPiAJRGF0ZSAgICAgICAgICAgIDogMjAx OS0wMS0yMQ0KPiA+DQo+ID4gQWJzdHJhY3Q6DQo+ID4gICAgVGhpcyBkb2N1bWVudCBkaXNjdXNz ZXMgbXVsdGktaG9taW5nIGNvbnNpZGVyYXRpb25zIGZvciBEaXN0cmlidXRlZC0NCj4gPiAgICBE ZW5pYWwtb2YtU2VydmljZSBPcGVuIFRocmVhdCBTaWduYWxpbmcgKERPVFMpLiAgVGhlIGdvYWwg aXMgdG8NCj4gPiAgICBwcm92aWRlIHNvbWUgZ3VpZGFuY2UgZm9yIERPVFMgY2xpZW50cy9nYXRl d2F5cyB3aGVuIG11bHRpaG9tZWQuDQo+ID4NCj4gPg0KPiA+IFRoZSBJRVRGIGRhdGF0cmFja2Vy IHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KPiA+IGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtZG90cy1tdWx0aWhvbWluZy8NCj4gPg0KPiA+IFRoZXJl IGFyZSBhbHNvIGh0bWxpemVkIHZlcnNpb25zIGF2YWlsYWJsZSBhdDoNCj4gPiBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1kb3RzLW11bHRpaG9taW5nLTAxDQo+ID4gaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLWRvdHMtbXVsdGlo b21pbmctMDENCj4gPg0KPiA+IEEgZGlmZiBmcm9tIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGlzIGF2 YWlsYWJsZSBhdDoNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQt aWV0Zi1kb3RzLW11bHRpaG9taW5nLTAxDQo+ID4NCj4gPg0KPiA+IFBsZWFzZSBub3RlIHRoYXQg aXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mDQo+ID4gc3Vi bWlzc2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxl IGF0IHRvb2xzLmlldGYub3JnLg0KPiA+DQo+ID4gSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2 YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0KPiA+IGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRl cm5ldC1kcmFmdHMvDQo+ID4NCj4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiA+IERvdHMgbWFpbGluZyBsaXN0DQo+ID4gRG90c0BpZXRmLm9yZw0K PiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZG90cw0KPiANCj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gRG90cyBtYWls aW5nIGxpc3QNCj4gRG90c0BpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2RvdHMNCg== From nobody Mon Jan 21 07:07:10 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74D2A130FA5; Mon, 21 Jan 2019 07:07:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ucEJqQSPnn-0; Mon, 21 Jan 2019 07:07:06 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on070a.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe46::70a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FA4B130F5B; Mon, 21 Jan 2019 07:07:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ptwcM7XJic6G2ddSeKqnkUw05na0nJknIJ5WPz6CNCY=; b=KM0NiAQyKUxG6VYWEpN/iUoBgxe73npFYN+YYBr7tG6MlbSjHfUcOaZqsaEUEDVQQTVOUAb81FXPxcM4Auf5bc3LwBz0akV1Hqh+PnnhvIxCXTvYLWuuZSQAhyMdZmV7Rrcp0WTVPqed30Y+Y4hhO704IiKmDjtMPQmnW/Hpl4Q= Received: from BN6PR0101CA0034.prod.exchangelabs.com (2603:10b6:405:2a::47) by BN6PR01MB3201.prod.exchangelabs.com (2603:10b6:404:d6::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26; Mon, 21 Jan 2019 15:07:04 +0000 Received: from CO1NAM03FT022.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e48::206) by BN6PR0101CA0034.outlook.office365.com (2603:10b6:405:2a::47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26 via Frontend Transport; Mon, 21 Jan 2019 15:07:04 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by CO1NAM03FT022.mail.protection.outlook.com (10.152.80.182) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1558.11 via Frontend Transport; Mon, 21 Jan 2019 15:07:01 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0LF6vJQ009704 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 21 Jan 2019 10:06:59 -0500 Date: Mon, 21 Jan 2019 09:06:57 -0600 From: Benjamin Kaduk To: "Konda, Tirumaleswar Reddy" CC: "mohamed.boucadair@orange.com" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190121150657.GC81907@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(376002)(346002)(136003)(39860400002)(396003)(2980300002)(189003)(55784004)(13464003)(199004)(6916009)(786003)(36906005)(53546011)(316002)(26005)(88552002)(336012)(54906003)(53416004)(4326008)(106002)(186003)(6246003)(75432002)(106466001)(23756003)(7696005)(426003)(956004)(11346002)(50466002)(126002)(476003)(47776003)(33656002)(2870700001)(2906002)(446003)(486006)(76176011)(356004)(104016004)(8936002)(478600001)(26826003)(93886005)(55016002)(229853002)(58126008)(246002)(305945005)(1076003)(8676002)(86362001)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR01MB3201; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; CO1NAM03FT022; 1:72sV65qTLZL9JvwbrLa1nLYB3erod+/ItiEPHF94uvNH4xV21HqnjjiQpAafkQ33zx4ajIsG4ZFkQFJ7zEg2t2eSzsW5hNV9PGdayT+HlSP6t4Qp5B6J566f/aGUOFyPgDx2zJtfpELUsFXEmJzehQ== X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 5845a1bf-0105-4b54-9c7b-08d67fb219cc X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:BN6PR01MB3201; X-Microsoft-Exchange-Diagnostics: 1; BN6PR01MB3201; 3:StfMAsYJZyUhPJ+bJXG1qXNQ75Nsd+1L+7wNwOH/ckQY8PSTNrnfkVwHfHB+iiOz9V1NQQO2ASTc9jC909/FOmvjVpNckQcbPwuEu3flxIsVe1fTjdZUpZu+i92RFQHH3mRzCRX81zj2G/dBM1JG1Sf3FW1nl3lglsGQgD9mj8AsghPEM3rWviC3ZJjhfbtZVzLmx33IRiAQkVp9coZ39zEHZsM4wHI+Y1CNAWGAMCZ9IMyP0aSHNzuQEw9/v1XG64P4Xz6G89XfkgTsJ8ZwaNCqVz8W7rGcX+doxQvd3V/zHKS4wkvspiObYv2XkGSWAAb5KQFJvehSHx1PzqyjkfPn84ynbcEZOAtgv8IbPM/r/xUMtmSoH+W1kswJa5Ht; 25:7ITHl+BfaDANhRJc8QpkO/NkW1lkIxcz4J4NFb8WoA1JSLC0ulUaUQriaoMVd4b4ooljoPflkalhl5vKJKsAytUY1qPWPL7yV11JVbCscnFOA+YWq74Hbl96ZWWUBnz34ow4nK/w2MWMUwM+oyXLkCwUB0Hte6qSCgvoaGZF7NVVEPtZJO+fQ9Y5A6cZhxq9kAl8YsRBorW61YtuLYb0/FCUQKgHWIUYOgyZSXzUd6dUmDuzPFfIcBr7JcflD06GErw6wqpDnh2JrtNOGblepUsPjXyg0p+W4jRX7/S/QRn92T2yOU8j7PIngQ6+ITV38bLkeRNbad3ZrIFfUj7+yQ== X-MS-TrafficTypeDiagnostic: BN6PR01MB3201: X-Microsoft-Exchange-Diagnostics: 1; BN6PR01MB3201; 31:nNtFKu52RgU5r/29F1Jn0o5ScGFkc1tB7pnCxi3nzHiojzmlUrGxfRvRoc3GfLgS1LZGMzhVG9JACHfNr57F/d3+EhJeImsPhpG9q1rcT3IzsMkseQED5xIoYUoadpE9RH36Iagtsj2vnteRr22JnXc4e7ru2KGNtdwIBaf1GERhNLoOlZbxoUfvk1OTrcfAGWUPo0boV2aBgzlOtyqxQ0TkzhRzVsHhPzMsVkZkMRw=; 20:IyMtfP1b7+OPRIeXMW9/yKbHOi7rNTtowAmMa4xgsSKzMFlGgcDNfonS0v5HGQZsi3T+l8YK4yF+4cq22uQmN6ukLXMuzda7dA/ebxS2QyzhWvA6/mIbXdbVvWVV0ccmCK/Ppi90/xvw6MHo9zX4+SaFUegrHOeTQOAnwlVeByq2JGiI+yCpu7o//cAHlrwJrixt8wzvG9G5c5GTi7O9X/s+rQuIHnXeU+8GjEcHE95/QgMPMr+0d+liBLIukpxbWNhD+I4yKzVv8GZc/oI5YcUpjMo8Jvnqpjk4Dq8c9CJ7gBNbWgfmTfUJsaVpuk+PkCJve6ZLbUfyi3Sh3W6Ite5F9ApiC9iqgcKDixtm+7qLEccr0FFOvp32lgyQSqWDse0/8aghLbODceAK2s8uUV3Eg4RTrCWPUBK7ewWyo0+52ZmJ6MjAqRKaVOIKZqHBYxeqefYigbEi0tAJxq1p951GOYS1y5gXUntFqrxxiO4kd6EcwoJWnmYvmEVtiCS0PqzxL56ifHotrZ4LpheiNXY/HCVFIs2D70tUyfFi8Q/3ycXi8xRelMUgHrBygiqKchbwXQzq4cUqPnzjGL9a6M+3i3PaTICNIlk5Htv30dE= X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; BN6PR01MB3201; 4:RRm+DgVhnO1wfih3HE0P1Z3/rv8m4ac9ExwyvDacdnUEPL4+xxVe3IouABQnOERZflgp9f9oXaFWEN/NIIzL+evZFcoKWrbzATfCkscoygYBgGEUNfZxKgo78USSgHOZiNryZuVkdfYLdkLzvR+3JS+wRmjyVxHlu+RttdTVzXMYD0nyQnnSR+YiIr3sIOzHBmm5BTxRnJrD9IpqrvRy0/zDlufcBI1kDlPXX//6BIEHYDWGnZ+jOnUXz5i3lLdHnfDSrHjtGq6E624MVMeisHn5xVQfpWmwNB3i8v8e8Jk= X-Forefront-PRVS: 0924C6A0D5 X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; BN6PR01MB3201; 23:lT9eXBn8h6cQ/1lQ3AZbz5WVGz5zIvX4uEIz4iy?= =?iso-8859-1?Q?wIgyj8gy/4YkkLMgkMGbpx3kVTZgoGyb/BteQd6y03ULxzWnRrUjNEVwSc?= =?iso-8859-1?Q?5EH3Fo2neaIM0SAyOjDq8jcmILEybFvjkbRomSvIQ3K8RH6BVJK8t/CM/t?= =?iso-8859-1?Q?NsaVPqCcHvihobmb4HykSE57y1K8v08yt46/ju87Bof+swGu9KaHcyaD81?= =?iso-8859-1?Q?z60N8KfN/UygkBwPBREbFC5613v+8Il9patigcT9oDK6fcyY17rY9CDzsc?= =?iso-8859-1?Q?8Kob1bu9KhDQtcBkYfqFtQU2YsE9tm6F2l3UsBQJgFtX8OG8FmH/33Hqa2?= =?iso-8859-1?Q?5gAoKVGmocYliRfMr1ik8TmyP/AkIlTiyDXpjEf8biA0rgIlPqWN8WCREd?= =?iso-8859-1?Q?hOl9JsQBZ8gi1vRXNTkpx8W4WhM3K5LtLw7JEIciQanUCtitccVhjXi/sl?= =?iso-8859-1?Q?ok62n27i2tjqoEtUlFE8z1sN3LGKZjEIs9NDTKk/qn5hUGRFOjlCPYXNzj?= =?iso-8859-1?Q?Sd7Aaw71wqANhtCFmIrflLf9WetncuyeDmMSoPbBkTKS7ljgDryWgUurBk?= =?iso-8859-1?Q?qC5fk1Wi7A7GkQf0MRzX0IZ0uEFjCNOzO3tILIT7YJhejunMMs1ri3k6VH?= =?iso-8859-1?Q?TFPL/k+XTbu6kTXHz1B98LxEFCt9k+KT6yKAkMBxqX2IrGZrvyXC4OVWLu?= =?iso-8859-1?Q?KLFH3znAuW29FDWF46bGhZah0hH5ou+kh0geH/vPQVaX81mbDnD9R6FdZX?= =?iso-8859-1?Q?24HhbeJuBzvpHyCFRZOMq7s0I3g7TQPQR29yq/JuDl/FSEpJ+UE/oDTe4d?= =?iso-8859-1?Q?AnauSiUKZIwh69cO7ybSf+FGStjhzX0NQdy3F39OWyAxHDeQNFZBRmW5c7?= =?iso-8859-1?Q?FefRuwfDMordeTrN0Z0+FlGMmPKFqSOU4kHxNnOiaQy1/01fwoMO1mWWAg?= =?iso-8859-1?Q?RdYb8erKSSFX+fBlkHo8/Ichj4azgsA/Wh8BbsNJxwrpitwNMRhEBBFZYB?= =?iso-8859-1?Q?g02awuI6bznt0GTlqrGd8pXYCF8OWBOGQHLQUZ2b0oGaYh5Ab8vu9p9Vbp?= =?iso-8859-1?Q?1TIW8pJvSI6Bq2H0WHMuvMXARyUXej/bFU5EunInYucZ7F1fIkM1AL3bKm?= =?iso-8859-1?Q?WVD2YHmQAegHUf2Xr7J4d/QlK8iui3RpcSB/QvHdKFdll0o1ixLOkMN1hk?= =?iso-8859-1?Q?ldlK3YErSGyed32bKn4Wf8HQwCDOP6va+vGh3XyqxPw99bjwfE6y4Z995v?= =?iso-8859-1?Q?fX9A79ZPPP9m+SABQBAIeuHtcDhcObqGN7EcfxQ=3D=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: LnSZcVw5E7biw/mrM0Gusk7OAAPZmRzrP4BQ/mLeUV/9R+0NUIfLaw9m7MwI55/TSOVlaCFctBa5elIKdsOOvn6rbBHgJU/PYmmdBA9ULrR+F2V33PBDhSvYakjwSd46yq9U9Uhl+RBiwzI+9xCA4kuc3k8GSL3mAU10od8iovramzBIGdLM2TmqCeK/PasF0MydqYGbPH1bDp6pSGhPAreN6mvosn7Yexfyj63MZUbrhasIyWZdWYDowFrtq6ue6ZdaWuwp/b3sEi3bQ0rznxAXUKln0QWKlZtGAQUVHpsxTUDM7Yeqx5aF1jiB+xxuA8QsdkMNXwm2BweqxcWw7JCV2X/k8Y1ayizGtjKvhR2QnK55W/FPPO6rP1TAhVU6oakD2w+mrGUGscWZwapf+LBThhJKp/moW9X9GUUtPwM= X-Microsoft-Exchange-Diagnostics: 1; BN6PR01MB3201; 6:rdrXttjT6tKDFsuJx5tu3C6kktmF5FVC1q8FegZSC+nTFV4btiL6iYC78af/I5Swkyld4j8wI40UP9eedmIx1tF5EvaX5CUS23tdHVh92bmNAauRZOpPA1LZLEl4jUmdGiZU5ehC1nrWd9ATJMHLiBAxFQt1+eISIPZNhu/ZH8/NwjFQrDtZ4uz8cWji473Qlz6VkqQQ1WQvR7s2XzBvQ7X5gUse0vVIvpSReNzy7dsJrPnV06n6hZr9tNJ6wXIYEX7gAs0pSMLul0p+9KfD71MqIA0tvV/fsM6lkotV6vnrQSaWULPO+s0yTi1w/uuHuvPjXn8bacpaCXYSQnhTBOYh21xRCMMLqV3mNLBEPL/LgNNG0XzmoaB/ukPHLCx2qmaNqCxYxBo+7J/ascucmckraLwJcwSFKIBPXSjjdkh8dlcWeTc0ePdSFIaRBZBftRw5/uLSlgCR9gqQVTFflQ==; 5:s1O+opjkdDL0iWvNNo7rD/p5kGmR2gulgdkKZEs+bc7s7DpDw8pA33Ivd1gQbZPYOkxHTtEIxfGWt9Q0VQCzZ899X0ehjl6hyWSmF54bI1BGfEPXGBs4Bv6Odh777lZrjwj9tBKmAlj/+6pAJc6ERmnkbf14iF1Jah2c18tZXk+qT8Yb4wQeXI4y7qSOVrFK/43uBgtzjYFnOiQi7DqPrw==; 7:BpYPbHKYJF0NvgUsHzksCKk11Ke4MkcprikIcrYcrOfcf4pazhq0HpCgiStg8yuHqxsMUp2+kN8KzxkwvWWVm8Clst8rYsYV/Lsqto3TXGQB2+MhxNtZMiHZof7OTzyc+CQYYM9ykXGzwlVvTZJ5SA== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2019 15:07:01.5437 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5845a1bf-0105-4b54-9c7b-08d67fb219cc X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR01MB3201 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 15:07:09 -0000 On Mon, Jan 21, 2019 at 09:13:10AM +0000, Konda, Tirumaleswar Reddy wrote: > > -----Original Message----- > > From: mohamed.boucadair@orange.com > > Sent: Monday, January 21, 2019 1:01 PM > > To: Konda, Tirumaleswar Reddy ; > > Benjamin Kaduk > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > Subject: RE: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) > > > > > > > > Hi Ben, all, > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : Konda, Tirumaleswar Reddy > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > Envoyé : samedi 19 janvier 2019 07:32 > > > À : Benjamin Kaduk; BOUCADAIR Mohamed TGI/OLN Cc : > > > draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org Objet : RE: > > > [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) > > > > > > Hi Ben, > > > > > > Please see inline > > > > > > > -----Original Message----- > > > > From: Dots On Behalf Of Benjamin Kaduk > > > > Sent: Saturday, January 19, 2019 2:33 AM > > > > To: mohamed.boucadair@orange.com > > > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 > > > > (5th > > > Part) > > > > > > > > > > - I just noticed while reviewing the diff that we also need to say a > > > > little more about (D)TLS 1.3 0-RTT data (more below) > > > > - It looks like we lost the guidance to the Experts and text about the > > > > review mailing list from the IANA Considerations, during the reshuffling > > > > around having IANA manage more things > > > > > > > > [Med] That was on purpose. We would like to rely on RFC8126 rules for > > deigned expert reviews. > > In addition to RFC8126 to defend against replay attacks, we can add the following additional rules: > > The DOTS signal channel messages sent as early data by the DOTS client > are idempotent requests. Further, CoAP (as discussed in Section 4.4 of RFC7252) is capable of performing message deduplication > to handle replay of CoAP requests. RFC 8126 is "guidelines for writing an IANA considerations section", a separate topic from TLS 1.3 O-RTT anti-replay. I'll try to take a closer look at what the CoAP deduplication provides. However, I'll note that mere idempotence is not always sufficient to alleviate replay concerns for 0-RTT data, as we must also consider the possibilities of reordering with other messages and other side effects. For example, the GET we use to establish a subscription to server status messages -- the subscription is a side effect not related directly to the GET exchange. In any case, even if we do conclude that we are sufficiently protected, we still need an explicit statement like "due to the protections afforded by CoAP deduplication and RFC 8446 anti-replay mechanisms, all DOTS signal channel messages are safe to transmit in TLS 1.3 0-RTT data". -Ben From nobody Mon Jan 21 07:10:41 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59A3A13112A; Mon, 21 Jan 2019 07:10:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kkcaTwgPa4XL; Mon, 21 Jan 2019 07:10:32 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-eopbgr790098.outbound.protection.outlook.com [40.107.79.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB436131145; Mon, 21 Jan 2019 07:10:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wCLsTfnjYTmuNfm0QwZsi/LX25X0a+QHuVG7/omyU3w=; b=ebzT8YlFJ7GwPKQzocdKeexWNiqGouAggeBFFSkzBkVRS+wDx+8c9YY8q1FRm6ltBKOsQUKfHm4oZZTzpp0LLF0dP0QBjRHuYFDSJbhzmKRAdJnRriJ29Bl5vdRfjQHoJsaFo/juDAfjGhwq+Var29/e+w/QskMgtj7RqPwjGfU= Received: from MWHPR01CA0029.prod.exchangelabs.com (2603:10b6:300:101::15) by DM6PR01MB4987.prod.exchangelabs.com (2603:10b6:5:59::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.31; Mon, 21 Jan 2019 15:10:30 +0000 Received: from DM3NAM03FT051.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::203) by MWHPR01CA0029.outlook.office365.com (2603:10b6:300:101::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26 via Frontend Transport; Mon, 21 Jan 2019 15:10:29 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT051.mail.protection.outlook.com (10.152.83.56) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1558.11 via Frontend Transport; Mon, 21 Jan 2019 15:10:29 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0LFAPAX010482 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 21 Jan 2019 10:10:27 -0500 Date: Mon, 21 Jan 2019 09:10:25 -0600 From: Benjamin Kaduk To: CC: "Konda, Tirumaleswar Reddy" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190121151025.GD81907@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(396003)(136003)(376002)(39860400002)(346002)(2980300002)(13464003)(53754006)(55784004)(189003)(199004)(50466002)(446003)(11346002)(2351001)(486006)(126002)(23756003)(53416004)(956004)(336012)(7696005)(33656002)(47776003)(106466001)(6916009)(476003)(26005)(186003)(426003)(76176011)(53546011)(75432002)(356004)(8936002)(316002)(786003)(36906005)(106002)(58126008)(54906003)(104016004)(2906002)(55016002)(229853002)(88552002)(305945005)(14444005)(5024004)(6246003)(478600001)(6306002)(966005)(26826003)(1076003)(86362001)(246002)(8676002)(4326008)(2870700001)(93886005)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR01MB4987; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-Microsoft-Exchange-Diagnostics: 1; DM3NAM03FT051; 1:yFJn8TlMotWpnxoTOCV4AMrns4Q8cAPrqJdbQJA4CKu2wP1DYJZQZ2rWq3ZitLOOUBjoPiDd2rQ/6J/XxjecWrELJf6wfKFC6X50k+iVAeumKshIxgoNi1FW7uI4nuRrrIpyKj+DW4rLEhoqTCO2BQ== X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 09d7e623-4990-472c-bc07-08d67fb294c5 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:DM6PR01MB4987; X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4987; 3:nmcSJAKAGnvBLV4OBDu/tjDXi9m46CtkGARJSJcwaPorwOHU+uM3Z8o8m736e4CA4cTOtzX6ObRsx6BASf+bENBUAXu3OPwJOt+h2AE5dQDAFCou0Q6VWC7eSRd2JA/XZJ9T5SGtFCCJLxL/7fhwjRE5r8xqkltuI/B8ltlBdJSojeB2msBJ0xXlMBn+gLMGWoLVi1MoOkaiBT+KWzdOintqoiAbn4P6iiR848469xReD1z0Umkh1cZ3JB1b9DnPf6V8swRxkGDhHNj/ZCUCIVIuC7Tg1Xf2Y50pYhPdAufqFVMtWsOg1UnphDy3J7XgCIJv7A622KLyeKVzvHZHdSwFrAHd7YtCdbx/RS+zMwDxh4k9g7aACVyJvBsuFlzE; 25:QKYujfBwOEl3eRs719EEWBs8MAbnBTYZPn6QHfjxfXDAhSDSt7mSkflOV8PaKlEv+H2OTZhe0NGIOMXF+nsKtkdH1dRuzb5ZlV1dW7Yl6c1AcTT8/PEtW04vJEyCZjE0LfpVD60fsneSG0Xe6lEr7pjATvXlz/CFy7HRBAKs6DDq/sLxgMUirD6FdDkv6NhQMw42yHXSyFePXKYhIDznVKmPyNTwEvPRhGHExOBFbEjBvV4vkOTR45sYr/63CX7AO1Aoa9F94P45/M/gogq0rm+biA3W2kvSLe5OAmGrzXLyT6VJ+78pwjrvlIlYoMhJPJI5dz8lw454iMj68IXGHg== X-MS-TrafficTypeDiagnostic: DM6PR01MB4987: X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4987; 31:cdC+eAryA60K7Z71LugFFeWrLgQ8VV8hP8Tv28wzyS8dikc3Md+5GjwUkFUFthNRZ+BNBn8JLT4ycgrr9kdk7PYlGy2N91Qhdz0A01GKvEPC3t5wRC+tWuMaT046IBq/jxqZLl+GD7Y2itUsVNHhaz8Z6z0VNo3IJu+E3DPMcdI1ieBd4+EH/mZ0qVv/rBA86vz30oEzTWtdXBE3u0AyYoGGJrA9Nniba3b7gMWd2CQ=; 20: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 X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4987; 4:sLN+9uc8CKBvoM+OoWwsxiiqckbuuqyhEc5tTxgR3fOGToJEV9q12JmSNxHccxVyxC6E6lpWOIyVxNWfSpiEs2PwrPEPsxmu5uzTIkzLbMGbPabKD1plJpLf6TGdbHrxvi17kUm1o4zuZgySWSkqYjoCo8Lxw/prZ8byYQaOjCv/uqV1nncWCS66SJLvQddWvqsB4mZ8lHwxdN6HiFUxPu52yA+WL7ZC8zLb56uRBw2Acj7A5MQsLl05epHr9CfE+nwSimG1R+QziEWJT5eHKVjbac0jO3TXpAuzbuAk5Pw= X-Forefront-PRVS: 0924C6A0D5 X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; DM6PR01MB4987; 23:N+47CzpKCh963JTVQcu1+i13chvhGpUpUukTzus?= =?iso-8859-1?Q?SFLyaNa2XuVK5Y7sjeYNc7bNp+ntcAMFjNyGdV84do8VziNR0YN3mOiKrd?= =?iso-8859-1?Q?pEg3SwEF4TizQdi/pd/hoWNT1EbNagzuuISZob0p2KbR/BZpwV8ciLFlMX?= =?iso-8859-1?Q?IquEQGz/hZI+cJmteSM7RWxgEKUO/c6uZg4luwzkHezJldDYAsLzy/Ym0K?= =?iso-8859-1?Q?4RW5jJz+N3zsGH/VZKye+AWKrh3/j52TLNFAZaRs3xFSroTpy6xd2x38RC?= =?iso-8859-1?Q?cb4JNxpJqxsPY5WR79zZyaTP2Ix4PPa8fhe4XbM6WPmIHTRIx+Sco/bcx9?= =?iso-8859-1?Q?mTSUa3W7AVchiIXvm5DVQCUav7grS8Ymz6wDkH1TxFdBRaktfaZsVZkdmf?= =?iso-8859-1?Q?767w6wIbHq1H7WDnZtHDJfY6NDyd1Zb5JBXcKPvqNn/InX30SuWrw9ZAQ6?= =?iso-8859-1?Q?Q4t4cT6+rUj6/UsUq+iBQ0HmUoYqeM5izByh7JeuxwuOjzeB10R0NNUozu?= =?iso-8859-1?Q?Q3Qlb1+uZC8UoeQBOsOqALGiXtdfjOKavG0wgv5k3dcxhPk6AqLcdGOT0+?= =?iso-8859-1?Q?E6J4wLFRC0NXGseFr+OPfgDuaCpTP0NDrRSYR3sKCl5vbuYCVkpKeOGeiB?= =?iso-8859-1?Q?rQk6FlrEIND3wUWbR6L/9UHy//+Dzo0NTvi5TYYq5wqcGsg7aWafxzdoYN?= =?iso-8859-1?Q?U4d1l/4+6P/r8UHlZbiXi/TxkPX7szWBspDgubf8PhVG+3PJWu7TBuaOCG?= =?iso-8859-1?Q?ndJXV0UcVpT21Wjxuy1+qGsSDS1I9rZk6IRNLNJI/st/GJcENky81fsDBb?= =?iso-8859-1?Q?HGi+7QPwlmZZ88AVLmnmScqqmFnjOD56R0mYKalPxzseOAsIztd5WrjWO/?= =?iso-8859-1?Q?Ni8a3JuJJLUkDRbRgMXGi/CY2wVR9sltpg9omQDlo8d0gyf96UsO/OoO8j?= =?iso-8859-1?Q?jpBxYGlW1IVDOr/Ommm46KOCf7JFL9JZ/8ZQMwQT11wH1j4fRMloaSZK2R?= =?iso-8859-1?Q?0tVZlG87+zorvKbbBeW+KpA5Fdm7P4ooaFfxdWvSWG3UwyBxGPF2Cn3u6N?= =?iso-8859-1?Q?Sw0XNTGh9/vSUu47/aDYcYYQCl6RLwVRYPGWjUHNHn8rCWW/youtpUChoY?= =?iso-8859-1?Q?v+acFgA5NUKbGDaz+1XYQt3D2BAwenR/Lb3aeqoEa/oCMbduUNkaZVMHug?= =?iso-8859-1?Q?lvmV6WoWrFnAFwEskReqY08f+g68jIUSyYBlshDwBnatXp3z3/dQCFThYo?= =?iso-8859-1?Q?ly41FKvlQdc4T5PX4CQKVkulni4vx60u7awUHmjRhmbWjxpc07zoK0okYA?= =?iso-8859-1?Q?U9oE/B6+4nIBHSlxWQL1VKzCPTNARBfkbrO5OHWn5CaGJJlmzTx1pd/KDD?= =?iso-8859-1?Q?sUzO/zjQkfgWt2Xam9AAbpbG4g4qp?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: P619lqweSWGpJtVccD9L2F01ZBjNgRZvMXEMWwkn5nEKx/T8yVa416XOTt6E1vn5CfdZg6D6/gWGcOT+T2VTuXXTqaWaFidR8G1rVhckKv8nKZeUhaBP0hQz0mD8cqZZyJYC9NWF3sshZFefRikaJ5vahisjA2O2XXSxNFutzXErCdJoyW60OFjYAwkbopAPJRGh92gcA9yCtO0+0vudqVRSJ69+AYncEVYKfkzXTISfuo/EyT6x90Xs9xAOIIyNdl0E9HLGDPRKK6a5Of9YGjIXqDjvW//+Pas6JI8Xjd8+wPAujaEnG0RYJDhrvxWL8/O1IwHKLvtf+MMj7m1hYzwGBrvEJh73RSDzjQHI1V8fnCMAnBUcazXTXc9I4CcfxMPV+If/hQYQJcDaFj6X1IwRjI89Nx4S4VGTo2mO/Ew= X-Microsoft-Exchange-Diagnostics: 1; DM6PR01MB4987; 6:ESw3brRl4hptE/5PXPon0UgmDrYWOu4EkQAggXT3RCD7/btpsIPTynJF5tFzHjP/2AEX+UwOlyB1K42iwkWYVog8XOAz0Z0mm39zV+262stK5wpghyQBFy30/Qzxnp3o7Q0O/FUwPJEU9nVbusmsHWnX692u0LN9ASnXzM9Hsv/peMgi9GItzOkF78lX04N01Id7kgyGkViMbbIM8wQikNs/d9fPMTkTHfWYjlr4sS8EUHzHU0zL4HrRe0j6RJLTJYy6ftQj1KORVKZNTrUqNXn9Sfhsb6044yTAYC03/raQk60ebmw8fljIRdbVxE8jzg9pjh0ugRS2A+ggj0A6IQrSEhZ96YOo6v1zsWy1sc8mwo0aTd66e2OMbc6Z7EHYEGslten02Fwfbz+9GgN12o4Z+s2Rj8OXRE6W2twVaPn0DmUOz1TIgjNVPKlZSkKHf0eW3ki1PonruXL5Cz/JCw==; 5:L9pIZtGMJMzmas5jGl9t6ILq/RKn/rMYXZSy9nXf78V2r5cHZvh0gmghtIX+K3qmvQoezxF0UuLG+CGHb6odQwkO4bemvhy4QYmKHaWwjYDNzv2I1/0ZkWhK0GlIL4I2cmutcldRq5V4JL0Jb3ON1rfATz1WyRIYJ9H63I2Wv3+PVWZ2a+0ggdto9d/dKKl/eZ7QEK5YaR1okjY1xuXKgQ==; 7:QiXvMZEDP2k5mbd1JT8X40YIl63NFQhBoqNdVNRRoJZAFFLm6lbz/UQDx6v8PO6fLLetVZD8de0Zfo2PNCNmIhj+nWiiE/MwjA5hs/WqDFZH7iN2jCBoe7GPZ8QDPyoWJmMlec6yjlWUlkktyaaxsw== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2019 15:10:29.2803 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 09d7e623-4990-472c-bc07-08d67fb294c5 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB4987 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 15:10:39 -0000 On Mon, Jan 21, 2019 at 07:31:28AM +0000, mohamed.boucadair@orange.com wrote: > Hi Ben, all, > > Please see inline. > > Cheers, > Med > > > -----Message d'origine----- > > De : Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.com] > > Envoyé : samedi 19 janvier 2019 07:32 > > À : Benjamin Kaduk; BOUCADAIR Mohamed TGI/OLN > > Cc : draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > Objet : RE: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) > > > > Hi Ben, > > > > Please see inline > > > > > -----Original Message----- > > > From: Dots On Behalf Of Benjamin Kaduk > > > Sent: Saturday, January 19, 2019 2:33 AM > > > To: mohamed.boucadair@orange.com > > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th > > Part) > > > > > > This email originated from outside of the organization. Do not click links > > or > > > open attachments unless you recognize the sender and know the content is > > safe. > > > > > > Hi all, > > > > > > Thanks for all the edits and the published -27. > > > Assuming I'm actually caught up on all the review/response threads, I think > > > we're pretty close to being able to go to IETF LC -- here's what I see as > > still left: > > > > > > - We need to settle the risk of needing normative downrefs called out for > > > the last call > > [Med] I updated the text to: > * cite 7618/7624 as normative (+ indicate that a similar mechanism to false start may also be defined for DTLS). > * tweak the TFO text to maintain it as informative. Sounds good. > > > - I just noticed while reviewing the diff that we also need to say a > > > little more about (D)TLS 1.3 0-RTT data (more below) > > > - It looks like we lost the guidance to the Experts and text about the > > > review mailing list from the IANA Considerations, during the reshuffling > > > around having IANA manage more things > > > > > [Med] That was on purpose. We would like to rely on RFC8126 rules for deigned expert reviews. I'm not sure I understand this -- 8126 explicitly says that documents should provide guidance to the designated expert on what to look for and what is grounds for rejecting a request. > > > Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that "Application > > > protocols MUST NOT use 0-RTT data without a profile that defines its use. > > > That profile needs to identify which messages or interactions are safe to > > use > > > with 0-RTT and how to handle the situation when the server rejects 0-RTT > > and > > > falls back to 1-RTT." So we either need to say which client requests are > > 0-RTT > > > safe (and why) or defer that profile to another document. draft-ietf- > > dnsop- > > > session-signal is perhaps an example of a document that specifies which > > > messages are/aren't allowed in early data. > > > (draft-ietf-acme-acme is another, but an uninteresting one, since they make > > > every request include a single-use nonce, and all messages are 0-RTT safe.) > > > Our use of increasing 'mid' values may help here, in terms of allowing > > DELETEs > > > to be safe, but I'd have to think a little more to be sure that requesting > > > mitigation would be safe. (On first glance the session-managemnet bits > > would > > > not be safe, but I may be missing something.) > > > > The draft only uses idempotent requests (GET, PUT and DELETE), and CoAP is > > capable of detecting message duplication (see > > https://tools.ietf.org/html/rfc7252#section-4.5) for both confirmable and > > non-confirmable messages. > > [1] An attacker replaying DELETE will not have any adverse impact, 2.02 > > (Deleted) Response Code is returned even if the mitigation request does not > > exist. > > [2] The techniques discussed in Section 8 of RFC8446 should suffice to handle > > anti-replay (e.g. an attacker replaying a 0-RTT data carrying an old > > mitigation request replaced by a new mitigation scope). > > > > [Med] FWIW, we do already have this text in the draft: > > Section 8 of [RFC8446] discusses some mechanisms to implement to > limit the impact of replay attacks on 0-RTT data. If the DOTS > server accepts 0-RTT, it MUST implement one of these mechanisms. > A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest. (As I noted in my reply to Tiru, we need a more explicit statement.) -Ben From nobody Mon Jan 21 07:37:47 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B11ED13102B; Mon, 21 Jan 2019 07:37:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MWF6anlXNA-N; Mon, 21 Jan 2019 07:37:42 -0800 (PST) Received: from orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1369E130FB7; Mon, 21 Jan 2019 07:37:42 -0800 (PST) Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 43jwfX2yDNz10Gf; Mon, 21 Jan 2019 16:37:40 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.75]) by opfednr07.francetelecom.fr (ESMTP service) with ESMTP id 43jwfX26XWzFpWY; Mon, 21 Jan 2019 16:37:40 +0100 (CET) Received: from OPEXCAUBMA1.corporate.adroot.infra.ftgroup (10.114.13.20) by OPEXCLILMA4.corporate.adroot.infra.ftgroup (10.114.31.75) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 21 Jan 2019 16:37:39 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBMA1.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Mon, 21 Jan 2019 16:37:39 +0100 From: To: Benjamin Kaduk CC: "Konda, Tirumaleswar Reddy" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AQHUsZt4PKNh8nB0FE21aChOYaqmfaW51EyA Date: Mon, 21 Jan 2019 15:37:38 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0B0DB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190121151025.GD81907@kduck.mit.edu> In-Reply-To: <20190121151025.GD81907@kduck.mit.edu> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 15:37:45 -0000 Re-, Please see inline.=20 Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: lundi 21 janvier 2019 16:10 > =C0=A0: BOUCADAIR Mohamed TGI/OLN > Cc=A0: Konda, Tirumaleswar Reddy; draft-ietf-dots-signal-channel@ietf.org= ; > dots@ietf.org > Objet=A0: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th = Part) >=20 > On Mon, Jan 21, 2019 at 07:31:28AM +0000, mohamed.boucadair@orange.com wr= ote: > > Hi Ben, all, > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Konda, Tirumaleswar Reddy > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > Envoy=E9=A0: samedi 19 janvier 2019 07:32 > > > =C0=A0: Benjamin Kaduk; BOUCADAIR Mohamed TGI/OLN > > > Cc=A0: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > Objet=A0: RE: [Dots] AD review of draft-ietf-dots-signal-channel-25 (= 5th > Part) > > > > > > Hi Ben, > > > > > > Please see inline > > > > > > > -----Original Message----- > > > > From: Dots On Behalf Of Benjamin Kaduk > > > > Sent: Saturday, January 19, 2019 2:33 AM > > > > To: mohamed.boucadair@orange.com > > > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 = (5th > > > Part) > > > > > > > > This email originated from outside of the organization. Do not clic= k > links > > > or > > > > open attachments unless you recognize the sender and know the conte= nt > is > > > safe. > > > > > > > > Hi all, > > > > > > > > Thanks for all the edits and the published -27. > > > > Assuming I'm actually caught up on all the review/response threads,= I > think > > > > we're pretty close to being able to go to IETF LC -- here's what I = see > as > > > still left: > > > > > > > > - We need to settle the risk of needing normative downrefs called o= ut > for > > > > the last call > > > > [Med] I updated the text to: > > * cite 7618/7624 as normative (+ indicate that a similar mechanism to f= alse > start may also be defined for DTLS). > > * tweak the TFO text to maintain it as informative. >=20 > Sounds good. >=20 > > > > - I just noticed while reviewing the diff that we also need to say = a > > > > little more about (D)TLS 1.3 0-RTT data (more below) > > > > - It looks like we lost the guidance to the Experts and text about = the > > > > review mailing list from the IANA Considerations, during the > reshuffling > > > > around having IANA manage more things > > > > > > > > [Med] That was on purpose. We would like to rely on RFC8126 rules for > deigned expert reviews. >=20 > I'm not sure I understand this -- 8126 explicitly says that documents > should provide guidance to the designated expert on what to look for and > what is grounds for rejecting a request. >=20 [Med] What I meant is that the text we used to have in -25 is generic, and = IMHO does not bring new guidelines to what is discussed in Section 5 of 812= 6.=20 > > > > Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that "Applicati= on > > > > protocols MUST NOT use 0-RTT data without a profile that defines it= s > use. > > > > That profile needs to identify which messages or interactions are s= afe > to > > > use > > > > with 0-RTT and how to handle the situation when the server rejects = 0- > RTT > > > and > > > > falls back to 1-RTT." So we either need to say which client reques= ts > are > > > 0-RTT > > > > safe (and why) or defer that profile to another document. draft-ie= tf- > > > dnsop- > > > > session-signal is perhaps an example of a document that specifies w= hich > > > > messages are/aren't allowed in early data. > > > > (draft-ietf-acme-acme is another, but an uninteresting one, since t= hey > make > > > > every request include a single-use nonce, and all messages are 0-RT= T > safe.) > > > > Our use of increasing 'mid' values may help here, in terms of allow= ing > > > DELETEs > > > > to be safe, but I'd have to think a little more to be sure that > requesting > > > > mitigation would be safe. (On first glance the session-managemnet = bits > > > would > > > > not be safe, but I may be missing something.) > > > > > > The draft only uses idempotent requests (GET, PUT and DELETE), and Co= AP > is > > > capable of detecting message duplication (see > > > https://tools.ietf.org/html/rfc7252#section-4.5) for both confirmable= and > > > non-confirmable messages. > > > [1] An attacker replaying DELETE will not have any adverse impact, 2= .02 > > > (Deleted) Response Code is returned even if the mitigation request do= es > not > > > exist. > > > [2] The techniques discussed in Section 8 of RFC8446 should suffice t= o > handle > > > anti-replay (e.g. an attacker replaying a 0-RTT data carrying an old > > > mitigation request replaced by a new mitigation scope). > > > > > > > [Med] FWIW, we do already have this text in the draft: > > > > Section 8 of [RFC8446] discusses some mechanisms to implement to > > limit the impact of replay attacks on 0-RTT data. If the DOTS > > server accepts 0-RTT, it MUST implement one of these mechanisms. > > A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest= . >=20 > (As I noted in my reply to Tiru, we need a more explicit statement.) >=20 [Med] OK. If the assessment is confirmed, we can update the text as follows= : =20 Section 8 of [RFC8446] discusses some mechanisms to implement to limit the impact of replay attacks on 0-RTT data. If the DOTS server accepts 0-RTT, it MUST implement one of these mechanisms. A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest. The DOTS signal channel messages sent as early data by the DOTS client are idempotent requests. Owing to the protections afforded by CoAP deduplication (Section 4.5 of [RFC7252]) and RFC 8446 anti-replay mechanisms, all DOTS signal channel messages are safe to transmit in TLS 1.3 0-RTT data. > -Ben From nobody Mon Jan 21 10:10:47 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31E63127B4C; Mon, 21 Jan 2019 10:10:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wUNQNXjig35o; Mon, 21 Jan 2019 10:10:40 -0800 (PST) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-eopbgr810130.outbound.protection.outlook.com [40.107.81.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46E52126C7E; Mon, 21 Jan 2019 10:10:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Zyf4i8aKf0ddjtpoqZ+Ll90nqKpzFX7nWB4WsQseJ1A=; b=MccwpquXNiApdtRCkQUoGY2mgTr2CZhxR/Anw5UZjY6fUgMcPc+inlC8RmAs5V1DY1xDtRr+lH+Al/I/lF4leLB9uxVYg7Nh4UiYsdNE6o2T5YTMmHNwsKPpuRThFV8dk834J0OJwUuSpAYi8y6h/zZaILmHgkwALbMhKjZml04= Received: from CY4PR01CA0022.prod.exchangelabs.com (2603:10b6:903:1f::32) by BYAPR01MB3749.prod.exchangelabs.com (2603:10b6:a02:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.29; Mon, 21 Jan 2019 18:10:38 +0000 Received: from CO1NAM03FT048.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e48::200) by CY4PR01CA0022.outlook.office365.com (2603:10b6:903:1f::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.26 via Frontend Transport; Mon, 21 Jan 2019 18:10:38 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by CO1NAM03FT048.mail.protection.outlook.com (10.152.81.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1558.11 via Frontend Transport; Mon, 21 Jan 2019 18:10:37 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x0LIAXLK024420 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 21 Jan 2019 13:10:35 -0500 Date: Mon, 21 Jan 2019 12:10:33 -0600 From: Benjamin Kaduk To: CC: "Konda, Tirumaleswar Reddy" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Message-ID: <20190121181033.GG81907@kduck.mit.edu> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190121151025.GD81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0B0DB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0B0DB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(346002)(136003)(39860400002)(396003)(376002)(2980300002)(53754006)(13464003)(199004)(189003)(55784004)(6246003)(58126008)(106002)(33656002)(426003)(2906002)(4326008)(5024004)(14444005)(50466002)(966005)(6306002)(2870700001)(93886005)(88552002)(36906005)(54906003)(478600001)(26826003)(336012)(23756003)(305945005)(246002)(8936002)(8676002)(786003)(316002)(476003)(956004)(126002)(47776003)(55016002)(446003)(104016004)(6916009)(75432002)(486006)(76176011)(86362001)(11346002)(356004)(53546011)(2351001)(1076003)(229853002)(186003)(26005)(53416004)(7696005)(106466001)(18370500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR01MB3749; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; A:1; MX:1; X-Microsoft-Exchange-Diagnostics: 1; CO1NAM03FT048; 1:lyD985JrKIwr6IOsbfcfg9yVyewcwn+n2As7hY840wzIQa8SAmUkiBM4kG5LYFHO9lKoKPCm2LTWzXIw8ioWuhNzP1BG0P8QiOSP9UXkBN8qouZHTA5jn0DF/dsAVGGQOT9IjhaZ+a7JBz50nx2DsYv+g4dtUfBy0cGK2/oXo2I= X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 096ce62e-564b-44bd-4ef8-08d67fcbbef3 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(4608076)(4709027)(2017052603328)(7153060); SRVR:BYAPR01MB3749; X-Microsoft-Exchange-Diagnostics: 1; BYAPR01MB3749; 3:OKmFsuhl28ng6RKEZi5aM7gAcr21olEE99IJWeTGrnlsXeYDR6jQmV4l2w/IcuXLn6StczpApsm5CTJ3L2HOp7+Tp91bLDVX3mpO/2u+PHtly8dpo6/25Co+cuzU2Bq+SNGyaxg/gmqHcyk8LbWpKBKlr7vBj+jisCGxE91Gvr8+1d+lHGCWfanpQukdrjJF83EwdiDjCHo8zyl0Q0cVgxkSjXBeXjVoPAiQv15zUWwAZWVjm3sJPRYZNtrkwws1x72j2N1KJsxb32a/6nJv8W13iVa8dgSSmEhtM826+pe/z7zqq5La4G5m+1uUwcuQAYTnayiW1hZfGDCGEW3E6cF4IVGb7myOTUUr1bpU51leHpThFGpVRgVJ7dZAAKMg; 25:A9kJnfKmKC/y6kUhneNg6Gdsrhn6Qq4JeHkA6GwcpF583lQT0gwLn6f4VAqzoAh5fQ1BK7hB6LfFspWfWMeMm/y7wId4rNUKgLJDAsRq6tN1Wte3+Qfcdnj9pbOW+xzFNB9jBW1N+3ek2FELdK0TCUpNvu2CA4YISZqMrd4jhu9lycRJlEmu7jn0EgcL5/nv1wlun/DqoYm0SFg5bz49bQGUAtwsN4QSAeINfiMqw8Z8CV1cvYdtlQqdPrP2DAwOTtUbdmx4stdZcECLXnTWug7T/Joec+qRvKU8emJKubKaJ/qd/3dFVYagpt6R+g83uI1QwdMacUH5jeX3z0QvfA== X-MS-TrafficTypeDiagnostic: BYAPR01MB3749: X-Microsoft-Exchange-Diagnostics: 1; BYAPR01MB3749; 31:sMnFYfPtUXyuPyxPoMbzSs3aqsbPz1bEPuquNjAhXkZvIVLDRv+N5ycZPub7yaLunw6Lw9aw51WyvpjWTAkse1KXwSQJ8qtDcp6Nq89YRYr7GoprW3eGJdjOS+0Dyae+z+eAkSPZCTOH4Y1CNUK4Go18o8DgsMLr53WuOaRfeKNU8RtKtJpp5rl6r+QeUIctbob239wMhJpGvA79FLnivVRi/cFfnI64qYoOJd4oe2Q=; 20:kPnxb3YrfuqjpSmVJc7HX/dgk2tIDb/wZi9lKygMCcZHhBhIkuuXOq/elwTe88TmtVll6xT3M5lkHqKZVyi1rq45IqHciKUrJxwc1WiuTWSQ0puH4K5bRHE/vr/TAz3o9MW0Hi55rN4sZE15XIYbS0/KPVV3nAJgiH8Q+52DxBp2aeg4cdTwAvrfgRoaqLAQONS6DFd87DGJqBseIsX6h9JRdzSgdIfBz2rTsDtHJO8NACj5IVV5h6YqUa04tWF6/1JglxUmS6xEL/3N86uiX5k40XPkrtn7AUxPGIQOqYUE/v2wg1BxBe2dyHAG+0wZZaai+8iUB6ncOQVCo5YVOFeOZKkNYFupTPWVPmqE8cvhLTmcjEpLSlsERVvuv5nkgkkhsGabKI1Qcm6wDf8bwbkv9TiaCGEBhXv0/ACnUZsoyLIGTWpzJ8iww8EKVgkLjDdeN3qv1QEIbOAuiECzqxwrTN4ihCpdl6T9o+yzVJ6M7hynfzrB8C/OQKRVG/ch02hhlv/DUOnqdCxOg3EqFtkdoFACTycRrSzz406RI/EOwxb3cV/fA4fECdRnqLC208sf1d9KelmV2sybishf0Zc/dFQyLNyJjBsnh7PEGTs= X-Microsoft-Antispam-PRVS: X-Microsoft-Exchange-Diagnostics: 1; BYAPR01MB3749; 4:d0uyZiOPmZY3DAAn/Q+MRk/YHRGDLWqs6YFUz63px4oKLj/QpY7G7CgnlgMj3l1V2ZjaVNOozkbvJP/jZPY9eGNoqOJS6DPRjOqMqk5at5jkwuECEXcfzpldX7XYeKRtXLtdfivmT3GTdIR31bWbHF9MeIrXCjAvooWqY5HUGOXQ8nzQIPfow/er/ITsQcO9obMynGoMcAESsdJ0j+ZGRbJqgdj0uRUtWQwLqKrbkYWZYUc4xZBT1uQC7rJr2PJ/MhQcwln3OdG9X73xeAnv0gZ5KLA7VCVEXkJ6SjY1V6wGNShgI1QOhITbYSkfZULe X-Forefront-PRVS: 0924C6A0D5 X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1; BYAPR01MB3749; 23:GImMwkMEeRc5O0FGXCl/vCO95gPOZ3UyC1GVzHM?= =?iso-8859-1?Q?+uzDtOrtIK7p1NO7cDikuqlwetB+OB12cmQWGQz7NGuW2cAa+3Daai0CWM?= =?iso-8859-1?Q?Z5omhjAMgKdKLyYghHNQ8uncLT9jVpY+MrBveBr3IubFimfNILsaUX3PG5?= =?iso-8859-1?Q?tvxWTrAiqVAU4pSpmeshmRwNMbSfTuc2lBf3Vv8JYkIQpQi5CumU96VLgX?= =?iso-8859-1?Q?zuRXCIHLlbhRcFpfo43LUJ/xKZR9j1/cihYEx28J4cLeypCQiq9PsCkJN3?= =?iso-8859-1?Q?ZNWpF9mMp7/CnS+hTaUCBLN6NBq+dQSQwzDmGkWfuNLuIXfbTx72nc9GiA?= =?iso-8859-1?Q?AOQAgGt3qNBhH3uHcfEPVuL0spanSANr3PJHErd5OscYUgUOyI6F7FvXKg?= =?iso-8859-1?Q?lWn+rZ7pcJFTyDfI57j6tRmmP/qmOaIxrJnrTMbmk73+XYa+gabQSvE+Ut?= =?iso-8859-1?Q?SWrEopN8Bj4AljkNMVkQMfozLmdPnt0aU3S3T8MOE1Mue7ND3f9Qc8ETWw?= =?iso-8859-1?Q?oRVU6zo46EFosoLh/4vx2cKkLfY9VdMOs06CvDlhjzohc1WX+8dKCbI+QN?= =?iso-8859-1?Q?83Vxd0NqfojzUS0j1jrSHXA+0fyB+86yAU2HcpC0uDrKhr3MhXoqZ70hWs?= =?iso-8859-1?Q?TsVbSw611mozlZ58FREAIdwGVTu1WhuvOMmfMazxOdClrUrVOYLKgaQCZQ?= =?iso-8859-1?Q?vlJuYyzFKvgX9wHUobXpwNavedUyv3ESmfsHzB752fe1J7RKrkw7uugA0B?= =?iso-8859-1?Q?5sG09f4aJ4xIRfAPL9l1hkq3GiKBPHiIztyuvHCoe+IqSo3LHlyoGyA9H5?= =?iso-8859-1?Q?JjI7YEMfSuuF7QD152nUVFw14lZNOdruVAgkhAiCQuzJu9/ei8Z4pkKjXs?= =?iso-8859-1?Q?hnHhj7QlVgqQ1ZDZg6AOmG+Vlv4GzvgURQriJic1UtiUi80gSAYhgG0Fxw?= =?iso-8859-1?Q?VpOb6c2js2hI6Mh229OjYPCxpgawxTgjMoWBInrveEerQUIlz87JuAP3pq?= =?iso-8859-1?Q?gpXxcmJ2F8GyZVNGFNwv8DsR3zoUXQkaX3QI2GXcwQGbQY3PUBJ6PdJTfU?= =?iso-8859-1?Q?/0YfN1yw6wCooRTJVt7U7MNRiL/G70hTUMeMJcMtZtnu4UtMq/2D0wXDPj?= =?iso-8859-1?Q?UU1pZHMTGylrB2Dhc6nSaRVc1L7xijyUZpQQoC/gQKFOdy8pom+QVNylwk?= =?iso-8859-1?Q?l+oF2hbbCE6QlXvuRj8wpBuPk4TiA+tFVUjBE6mVC1hQkqvpXIX6AUFioN?= =?iso-8859-1?Q?5wTTkWON9GP17gPuDN4AzUXbDpVOdAbGVZ8XSEu4RxUR3/Hw3DrYQQq0oH?= =?iso-8859-1?Q?fIEkLRibqogdSaTtTsn31No08b44/XdT0t6usueb6fIzKiiDiAaDxmbsbt?= =?iso-8859-1?Q?KOpXCFL6FgecbCrZVHb0C9JhbzYJL?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: T4MAPOonXW4bnba1z7ndUXXJw9u1ro9mgeyKhAU8JEWSjWw0aQQzSy6b7tUq/Y5KYfC7il3QDvDgumXsRpeyuO9M4fD2zDl6XQDkQ8b5Y+GX56NGDfddzFbjkKAwstq0fG4a41Wv8MBEgP8pNLoRJys8DQI6/Mb62IY9YDwZ3eRW1zNNsC7i+uR0tYUWb6pz2et2arDY73FrpllJV0Q3F6VvamJ+R45O93ekvpnfXMCdD3iJTbLlkc7ISETss49VkDdR/5t7U2YPWI6TiYki4Pm1l3s/UatTukl20hFrlciMLHhdFMn9Hff5agxCcY5rCh4mgCOcPyIPMLVLhxN62BkB+TJ5qyS8IHCLHC9TA8YDtr045Tqa2YS46pcukdF5kNSodOxvIzPwV97zur7nQapKAmHEtl7fJyiCo4gr2+s= X-Microsoft-Exchange-Diagnostics: 1; BYAPR01MB3749; 6:i4o4ZMYuWCqWJYg7rQq7yWqbX+G+J/BWeDrwWpVRnQwoV+zYKD+idr2fWiUeQCyAm1m7/cH9dZgXuN+H7nnFxU89LLG0KPp+3HinYnewYKwmm58YvrgGXPW892oTRlh7GRumPMF7Swaqh1ZQPIt5IyVeWgV5P6GfvIrunM0JwI0djvAp5u2Mzj+uNfvS2YRpJHVW1Cz91keHrV0yM9gb8PoDJymBl70/Ipe/n3KsVVn8iiJgmZf5SQyC4ToUkDOg2k27gQZVUN5kfQUQpdXH7/ph3twzcjOqt8dVvO8iBk9xHVpwhbDvBXMSWyi+17WajNHj8smCJg4Y9s7VC98ct8RHluqmhKrOOtwEMozunLbxXDwMmB5xPrztghUY8cd1S0eSSKvOuAlMuipTcCJtB2KT8Eq2LWum4GGj7kFMrJvIce9nmZxlQz872TkvyzH65pBWVm69fBp+VHYksgYzQg==; 5:nklA8davCZO1kadp0hJkCe+SD5EJw4tXh4PFOTXZmSlguFxE43Eb0m2UXEzBzcZkGy98gWWxjjTwpGWBuHcz9GtbArV1wltlDlgaAQJ2qVxtoyxVdWNh/S48q+IkvMNgHgDic1pLgbj8IUtuhAVt6RZwINarsczfK7QSrSYZrlAbBr1AwrneZqOJYLpH9xJxcDFbHre/4ccbxbQAfn5cpw==; 7:cQ4aZTAAjttztnM7fOZVI4TxKHqfw6hBLcqm5rhYqb/xY65tg5UJWONeRi24ZB4oyDDoJjwKNEi1aaoytuMbCNjPZPcUmvqqcLEDqGKQH1GzV6IW5SoFYhI2b81xorZfiyXGvuuMP0wQy+sfAREceQ== SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2019 18:10:37.4146 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 096ce62e-564b-44bd-4ef8-08d67fcbbef3 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR01MB3749 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 18:10:43 -0000 On Mon, Jan 21, 2019 at 03:37:38PM +0000, mohamed.boucadair@orange.com wrote: > Re-, > > Please see inline. > > Cheers, > Med > > > -----Message d'origine----- > > De : Benjamin Kaduk [mailto:kaduk@mit.edu] > > Envoyé : lundi 21 janvier 2019 16:10 > > À : BOUCADAIR Mohamed TGI/OLN > > Cc : Konda, Tirumaleswar Reddy; draft-ietf-dots-signal-channel@ietf.org; > > dots@ietf.org > > Objet : Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) > > > > On Mon, Jan 21, 2019 at 07:31:28AM +0000, mohamed.boucadair@orange.com wrote: > > > Hi Ben, all, > > > > > > Please see inline. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De : Konda, Tirumaleswar Reddy > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > Envoyé : samedi 19 janvier 2019 07:32 > > > > À : Benjamin Kaduk; BOUCADAIR Mohamed TGI/OLN > > > > Cc : draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > Objet : RE: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th > > Part) > > > > > > > > Hi Ben, > > > > > > > > Please see inline > > > > > > > > > -----Original Message----- > > > > > From: Dots On Behalf Of Benjamin Kaduk > > > > > Sent: Saturday, January 19, 2019 2:33 AM > > > > > To: mohamed.boucadair@orange.com > > > > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th > > > > Part) > > > > > > > > > > This email originated from outside of the organization. Do not click > > links > > > > or > > > > > open attachments unless you recognize the sender and know the content > > is > > > > safe. > > > > > > > > > > Hi all, > > > > > > > > > > Thanks for all the edits and the published -27. > > > > > Assuming I'm actually caught up on all the review/response threads, I > > think > > > > > we're pretty close to being able to go to IETF LC -- here's what I see > > as > > > > still left: > > > > > > > > > > - We need to settle the risk of needing normative downrefs called out > > for > > > > > the last call > > > > > > [Med] I updated the text to: > > > * cite 7618/7624 as normative (+ indicate that a similar mechanism to false > > start may also be defined for DTLS). > > > * tweak the TFO text to maintain it as informative. > > > > Sounds good. > > > > > > > - I just noticed while reviewing the diff that we also need to say a > > > > > little more about (D)TLS 1.3 0-RTT data (more below) > > > > > - It looks like we lost the guidance to the Experts and text about the > > > > > review mailing list from the IANA Considerations, during the > > reshuffling > > > > > around having IANA manage more things > > > > > > > > > > > [Med] That was on purpose. We would like to rely on RFC8126 rules for > > deigned expert reviews. > > > > I'm not sure I understand this -- 8126 explicitly says that documents > > should provide guidance to the designated expert on what to look for and > > what is grounds for rejecting a request. > > > > [Med] What I meant is that the text we used to have in -25 is generic, and IMHO does not bring new guidelines to what is discussed in Section 5 of 8126. I think there can still be value in repeating the "general applicability, clarity of description, etc. language. (But it would be even better to come up with some guidance that is tightly tailored to DOTS, if we can.) And the text about the mailing list and how to format registration requests is definitely not covered in 8126! > > > > > Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that "Application > > > > > protocols MUST NOT use 0-RTT data without a profile that defines its > > use. > > > > > That profile needs to identify which messages or interactions are safe > > to > > > > use > > > > > with 0-RTT and how to handle the situation when the server rejects 0- > > RTT > > > > and > > > > > falls back to 1-RTT." So we either need to say which client requests > > are > > > > 0-RTT > > > > > safe (and why) or defer that profile to another document. draft-ietf- > > > > dnsop- > > > > > session-signal is perhaps an example of a document that specifies which > > > > > messages are/aren't allowed in early data. > > > > > (draft-ietf-acme-acme is another, but an uninteresting one, since they > > make > > > > > every request include a single-use nonce, and all messages are 0-RTT > > safe.) > > > > > Our use of increasing 'mid' values may help here, in terms of allowing > > > > DELETEs > > > > > to be safe, but I'd have to think a little more to be sure that > > requesting > > > > > mitigation would be safe. (On first glance the session-managemnet bits > > > > would > > > > > not be safe, but I may be missing something.) > > > > > > > > The draft only uses idempotent requests (GET, PUT and DELETE), and CoAP > > is > > > > capable of detecting message duplication (see > > > > https://tools.ietf.org/html/rfc7252#section-4.5) for both confirmable and > > > > non-confirmable messages. > > > > [1] An attacker replaying DELETE will not have any adverse impact, 2.02 > > > > (Deleted) Response Code is returned even if the mitigation request does > > not > > > > exist. > > > > [2] The techniques discussed in Section 8 of RFC8446 should suffice to > > handle > > > > anti-replay (e.g. an attacker replaying a 0-RTT data carrying an old > > > > mitigation request replaced by a new mitigation scope). > > > > > > > > > > [Med] FWIW, we do already have this text in the draft: > > > > > > Section 8 of [RFC8446] discusses some mechanisms to implement to > > > limit the impact of replay attacks on 0-RTT data. If the DOTS > > > server accepts 0-RTT, it MUST implement one of these mechanisms. > > > A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest. > > > > (As I noted in my reply to Tiru, we need a more explicit statement.) > > > > [Med] OK. If the assessment is confirmed, we can update the text as follows: > > Section 8 of [RFC8446] discusses some mechanisms to implement to > limit the impact of replay attacks on 0-RTT data. If the DOTS > server accepts 0-RTT, it MUST implement one of these mechanisms. > A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest. > The DOTS signal channel messages sent as early data by the DOTS > client are idempotent requests. Owing to the protections afforded > by CoAP deduplication (Section 4.5 of [RFC7252]) and RFC 8446 > anti-replay mechanisms, all DOTS signal channel messages are safe > to transmit in TLS 1.3 0-RTT data. That text would meet the "application profile" requirements. Hopefully it's a true statement so we can actually use it :) -Ben From nobody Mon Jan 21 23:15:45 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD97B130DE9; Mon, 21 Jan 2019 23:15:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UFi-gnTtpRG4; Mon, 21 Jan 2019 23:15:41 -0800 (PST) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4765612D4F2; Mon, 21 Jan 2019 23:15:41 -0800 (PST) Received: from opfednr03.francetelecom.fr (unknown [xx.xx.xx.67]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 43kKSq3Zk7zywM; Tue, 22 Jan 2019 08:15:39 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.33]) by opfednr03.francetelecom.fr (ESMTP service) with ESMTP id 43kKSq2KsGzDq7J; Tue, 22 Jan 2019 08:15:39 +0100 (CET) Received: from OPEXCAUBM6C.corporate.adroot.infra.ftgroup (10.114.13.35) by OPEXCLILM42.corporate.adroot.infra.ftgroup (10.114.31.33) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 22 Jan 2019 08:15:38 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM6C.corporate.adroot.infra.ftgroup ([fe80::f58e:8e9d:ae18:b9e3%21]) with mapi id 14.03.0415.000; Tue, 22 Jan 2019 08:15:38 +0100 From: To: Benjamin Kaduk CC: "Konda, Tirumaleswar Reddy" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AQHUsbSfqlO5vmTWCU+CwUtqisCqc6W61cdQ Date: Tue, 22 Jan 2019 07:15:37 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0B698@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190121151025.GD81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0B0DB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190121181033.GG81907@kduck.mit.edu> In-Reply-To: <20190121181033.GG81907@kduck.mit.edu> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2019 07:15:44 -0000 Hi Ben,=20 Please see inline. Cheers, Med > -----Message d'origine----- > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > Envoy=E9=A0: lundi 21 janvier 2019 19:11 > =C0=A0: BOUCADAIR Mohamed TGI/OLN > Cc=A0: Konda, Tirumaleswar Reddy; draft-ietf-dots-signal-channel@ietf.org= ; > dots@ietf.org > Objet=A0: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th = Part) >=20 > On Mon, Jan 21, 2019 at 03:37:38PM +0000, mohamed.boucadair@orange.com wr= ote: > > Re-, > > > > Please see inline. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > > > Envoy=E9=A0: lundi 21 janvier 2019 16:10 > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN > > > Cc=A0: Konda, Tirumaleswar Reddy; draft-ietf-dots-signal-channel@ietf= .org; > > > dots@ietf.org > > > Objet=A0: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (= 5th > Part) > > > > > > On Mon, Jan 21, 2019 at 07:31:28AM +0000, mohamed.boucadair@orange.co= m > wrote: > > > > Hi Ben, all, > > > > > > > > Please see inline. > > > > > > > > Cheers, > > > > Med > > > > > > > > > -----Message d'origine----- > > > > > De=A0: Konda, Tirumaleswar Reddy > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > > Envoy=E9=A0: samedi 19 janvier 2019 07:32 > > > > > =C0=A0: Benjamin Kaduk; BOUCADAIR Mohamed TGI/OLN > > > > > Cc=A0: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > > Objet=A0: RE: [Dots] AD review of draft-ietf-dots-signal-channel-= 25 > (5th > > > Part) > > > > > > > > > > Hi Ben, > > > > > > > > > > Please see inline > > > > > > > > > > > -----Original Message----- > > > > > > From: Dots On Behalf Of Benjamin Kaduk > > > > > > Sent: Saturday, January 19, 2019 2:33 AM > > > > > > To: mohamed.boucadair@orange.com > > > > > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel= -25 > (5th > > > > > Part) > > > > > > > > > > > > This email originated from outside of the organization. Do not > click > > > links > > > > > or > > > > > > open attachments unless you recognize the sender and know the > content > > > is > > > > > safe. > > > > > > > > > > > > Hi all, > > > > > > > > > > > > Thanks for all the edits and the published -27. > > > > > > Assuming I'm actually caught up on all the review/response thre= ads, > I > > > think > > > > > > we're pretty close to being able to go to IETF LC -- here's wha= t I > see > > > as > > > > > still left: > > > > > > > > > > > > - We need to settle the risk of needing normative downrefs call= ed > out > > > for > > > > > > the last call > > > > > > > > [Med] I updated the text to: > > > > * cite 7618/7624 as normative (+ indicate that a similar mechanism = to > false > > > start may also be defined for DTLS). > > > > * tweak the TFO text to maintain it as informative. > > > > > > Sounds good. > > > > > > > > > - I just noticed while reviewing the diff that we also need to = say > a > > > > > > little more about (D)TLS 1.3 0-RTT data (more below) > > > > > > - It looks like we lost the guidance to the Experts and text ab= out > the > > > > > > review mailing list from the IANA Considerations, during the > > > reshuffling > > > > > > around having IANA manage more things > > > > > > > > > > > > > > [Med] That was on purpose. We would like to rely on RFC8126 rules f= or > > > deigned expert reviews. > > > > > > I'm not sure I understand this -- 8126 explicitly says that documents > > > should provide guidance to the designated expert on what to look for = and > > > what is grounds for rejecting a request. > > > > > > > [Med] What I meant is that the text we used to have in -25 is generic, = and > IMHO does not bring new guidelines to what is discussed in Section 5 of 8= 126. >=20 > I think there can still be value in repeating the "general applicability, > clarity of description, etc. language. (But it would be even better to > come up with some guidance that is tightly tailored to DOTS, if we can.) [Med] I tried, actually. It is indeed when I rechecked 8126 that I found th= at text is generic. Seeking for expert reviews will be done via IANA, which= is familiar with the process of soliciting experts.=20 Moreover, I found a bug in the text because it does not apply to the range = requiring IETF review, but only to a the comprehensive-optional range.=20 > And the text about the mailing list and how to format registration reques= ts > is definitely not covered in 8126! [Med] that mailing list is likely to include the designed experts. This is = why I thought it is simple to let IANA decide how to reach out designed exp= ert(s) once assigned.=20 Anyway, I can reinsert the text if you still think it brings value.=20 >=20 > > > > > > Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that > "Application > > > > > > protocols MUST NOT use 0-RTT data without a profile that define= s > its > > > use. > > > > > > That profile needs to identify which messages or interactions a= re > safe > > > to > > > > > use > > > > > > with 0-RTT and how to handle the situation when the server reje= cts > 0- > > > RTT > > > > > and > > > > > > falls back to 1-RTT." So we either need to say which client > requests > > > are > > > > > 0-RTT > > > > > > safe (and why) or defer that profile to another document. draf= t- > ietf- > > > > > dnsop- > > > > > > session-signal is perhaps an example of a document that specifi= es > which > > > > > > messages are/aren't allowed in early data. > > > > > > (draft-ietf-acme-acme is another, but an uninteresting one, sin= ce > they > > > make > > > > > > every request include a single-use nonce, and all messages are = 0- > RTT > > > safe.) > > > > > > Our use of increasing 'mid' values may help here, in terms of > allowing > > > > > DELETEs > > > > > > to be safe, but I'd have to think a little more to be sure that > > > requesting > > > > > > mitigation would be safe. (On first glance the session-managem= net > bits > > > > > would > > > > > > not be safe, but I may be missing something.) > > > > > > > > > > The draft only uses idempotent requests (GET, PUT and DELETE), an= d > CoAP > > > is > > > > > capable of detecting message duplication (see > > > > > https://tools.ietf.org/html/rfc7252#section-4.5) for both confirm= able > and > > > > > non-confirmable messages. > > > > > [1] An attacker replaying DELETE will not have any adverse impac= t, > 2.02 > > > > > (Deleted) Response Code is returned even if the mitigation reques= t > does > > > not > > > > > exist. > > > > > [2] The techniques discussed in Section 8 of RFC8446 should suffi= ce > to > > > handle > > > > > anti-replay (e.g. an attacker replaying a 0-RTT data carrying an = old > > > > > mitigation request replaced by a new mitigation scope). > > > > > > > > > > > > > [Med] FWIW, we do already have this text in the draft: > > > > > > > > Section 8 of [RFC8446] discusses some mechanisms to implement= to > > > > limit the impact of replay attacks on 0-RTT data. If the DOT= S > > > > server accepts 0-RTT, it MUST implement one of these mechanis= ms. > > > > A DOTS server can reject 0-RTT by sending a TLS > HelloRetryRequest. > > > > > > (As I noted in my reply to Tiru, we need a more explicit statement.) > > > > > > > [Med] OK. If the assessment is confirmed, we can update the text as > follows: > > > > Section 8 of [RFC8446] discusses some mechanisms to implement to > > limit the impact of replay attacks on 0-RTT data. If the DOTS > > server accepts 0-RTT, it MUST implement one of these mechanisms. > > A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest= . > > The DOTS signal channel messages sent as early data by the DOTS > > client are idempotent requests. Owing to the protections afforde= d > > by CoAP deduplication (Section 4.5 of [RFC7252]) and RFC 8446 > > anti-replay mechanisms, all DOTS signal channel messages are safe > > to transmit in TLS 1.3 0-RTT data. >=20 > That text would meet the "application profile" requirements. Hopefully > it's a true statement so we can actually use it :) >=20 [Med] That is at least the authors' conclusion :)=20 We will wait for your ACK before implementing changes and posting the updat= ed version of the draft.=20 From nobody Tue Jan 22 02:08:32 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DECEF130EB5; Tue, 22 Jan 2019 02:08:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.853 X-Spam-Level: X-Spam-Status: No, score=-8.853 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BafZ3IJ2kDrC; Tue, 22 Jan 2019 02:08:23 -0800 (PST) Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6464C130EC1; Tue, 22 Jan 2019 02:08:23 -0800 (PST) X-NAI-Header: Modified by McAfee Email Gateway (5500) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1548151674; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-office365-filtering-correlation-id:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=2ePlTwcx4Av/FlLsW9S4iZ9CGbTmMWFc8WS5eL hTi0s=; b=rDHszj0NXKTjOjyAMLRCof9GygSfjXAceKgcdKN8 0PqpJqSW4VYw2q/fKcaDtaANnqcAo+lIePwDtDd8XdlpxbjP5h aCyJZ97bnjNTprWd/T92IZymYrWqMvAG5X8PwQPp1qKDYFb9k8 76TA/MYZTZQkQJonFRq4zG+G2BAyM4s= Received: from DNVEXAPP1N04.corpzone.internalzone.com (unknown [10.44.48.88]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 1db5_cef4_9158fdd1_e6a9_479f_bba4_b5548f6a13ce; Tue, 22 Jan 2019 03:07:53 -0700 Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 22 Jan 2019 03:08:02 -0700 Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Tue, 22 Jan 2019 03:08:02 -0700 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 22 Jan 2019 03:08:01 -0700 Received: from DM6PR16MB2794.namprd16.prod.outlook.com (20.178.225.219) by DM6PR16MB2972.namprd16.prod.outlook.com (20.178.228.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.29; Tue, 22 Jan 2019 10:08:00 +0000 Received: from DM6PR16MB2794.namprd16.prod.outlook.com ([fe80::a967:9158:a03b:e263]) by DM6PR16MB2794.namprd16.prod.outlook.com ([fe80::a967:9158:a03b:e263%3]) with mapi id 15.20.1537.031; Tue, 22 Jan 2019 10:08:00 +0000 From: "Konda, Tirumaleswar Reddy" To: "mohamed.boucadair@orange.com" , "Benjamin Kaduk" CC: "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) Thread-Index: AdSuMPs4z5rRJt5UT++zbKjLtGqWuABQDVAAAAzXK9AAbbFEAAAQB1WAAADzVgAABVcvgAAbawuAAAUyqpA= Date: Tue, 22 Jan 2019 10:08:00 +0000 Message-ID: References: <787AE7BB302AE849A7480A190F8B93302EA08D24@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190118210258.GO81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0ABE9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190121151025.GD81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0B0DB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <20190121181033.GG81907@kduck.mit.edu> <787AE7BB302AE849A7480A190F8B93302EA0B698@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0B698@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.1.100.18 dlp-reaction: no-action authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com; x-originating-ip: [103.245.47.20] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM6PR16MB2972; 6:kY8z/AQBu2z7ktQxh/mSuhqlUhyytI5pLkT/Zxc8zD6C0V8rVMSKel44G+Ym+tv/a0ChlLTGPU7TMR9CVayhQx8jNl0bNw8t+1AvYZzEUjdokjmmHm6xkzzgtM9e/9dyBo6ClRyJWr1b/mv2ftXXTsalAtRdXk3bC6d3WrRcOei7KmRwBLNxqPTyqupT5wAJeWaDGNDcgZx0mL0SIJVN1oL2VM/qTgLj7AJNS9fVQAqLNz95PsdVRrg6M9A0ukkTkv067rNQ82LOYGacSUrz1i/i1rrpfUtcdU0u/V0ppUIZ1AtpAZvRJVD0l+BpENBuGmXubXUpzp64HLzqfoi63tqwA6MVyeN+pUS6Bh4XLZxz3isFpuV3vz7sZBpechwdlonk5pG5mo3bJfw+Dxm2obxEpFqnlzeQMlAMNqrgVVQ6Nav7wsLBdvjZOEGehmN6c7ZfpMmJcURvD6LZbRjudA==; 5:NxRUFc+0W3Ce5u4zGiOPs15hh2qRniejt+TR9ehyW/KvJ61re0ZdkT24Qpr26XsksYrlG1YaW4GUa9CSNOfK8LUNPGfYef9EnoPtyMHJfG4pPrRDXJB4SMk5yS1bvvpv1QjPNSIgkm0ISNQLivXYHCQV4WptbEL6M8ZYl1WhgMEd077b9iC4B1AadeDlfPHC1c3D/aorXTMu38PshYDIPg==; 7:zh216zMIPeGu56izYMVC+MPfFyrV+aci9dkV9z898oroUBdH8Q0LhFEYtmCNJOCsws69bUQYYRftsGi2Dz/PZJSzNYMzbi+5gEhsk20jhO0Mty7z1CX0WTdjbXnFB9E7EBvjA+0rkCTqbqXqcBSisQ== x-ms-office365-filtering-correlation-id: b3691925-7ee0-4248-8e00-08d680517dad x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:DM6PR16MB2972; x-ms-traffictypediagnostic: DM6PR16MB2972: x-microsoft-antispam-prvs: x-forefront-prvs: 0925081676 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39850400004)(396003)(376002)(346002)(136003)(13464003)(189003)(199004)(55784004)(53754006)(52314003)(32952001)(86362001)(14454004)(6306002)(30864003)(53936002)(9686003)(6116002)(3846002)(476003)(25786009)(53546011)(7736002)(26005)(72206003)(6506007)(966005)(186003)(74316002)(7696005)(71190400001)(76176011)(2501003)(2171002)(4326008)(256004)(14444005)(71200400001)(5024004)(2906002)(105586002)(229853002)(33656002)(106356001)(97736004)(486006)(93886005)(305945005)(8936002)(11346002)(478600001)(80792005)(6246003)(99286004)(102836004)(8676002)(55016002)(6436002)(68736007)(446003)(316002)(66066001)(81156014)(81166006)(54906003)(110136005)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR16MB2972; H:DM6PR16MB2794.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: NH32POhzwtm4TrvAXN+SSaYIb7Qf3eFz0hFYaxagSmG2g9VW/l5qaPQzEpZomS7hwu47DzemaeaGnAoRoMYD8C9s3ip/yA46s1FHOvzT6ylF0IygATO5hLhZg4JwRI/fhuKXR/xrT8HaOHlWWx0HeyBT8I/FWAYz37T+EGoBDA2OAR6Nm9KqBUNqKv31nvV7T4AjqGMCg7bWWv/0WtohqmK3/kalCgfwBQopNEcego7tSt+Qkuc0x29gdZKeLtpbnzZwt0GuIFUPj+jTJxxHhi/CdRtbwEzDlh293TEr9lAr/MTiArdM9H1+SFQCjBggn3hJ9EIPdNYjMVs3Uc5v1iigYkbZoeL8j30zjChkY5cHlUn6UsFMmdZG+zyjkSmH72Mq/dOxVf9TAtHmOo1S0x6mMF2mGd4TQOEKb2NvTSI= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: b3691925-7ee0-4248-8e00-08d680517dad X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jan 2019 10:08:00.7485 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR16MB2972 X-OriginatorOrg: mcafee.com X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 15 X-NAI-Spam-Score: 0.1 X-NAI-Spam-Version: 2.3.0.9418 : core <6465> : inlines <6998> : streams <1810809> : uri <2783790> Archived-At: Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2019 10:08:28 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBtb2hhbWVkLmJvdWNhZGFpckBv cmFuZ2UuY29tIDxtb2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPg0KPiBTZW50OiBUdWVzZGF5 LCBKYW51YXJ5IDIyLCAyMDE5IDEyOjQ2IFBNDQo+IFRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtA bWl0LmVkdT4NCj4gQ2M6IEtvbmRhLCBUaXJ1bWFsZXN3YXIgUmVkZHkgPFRpcnVtYWxlc3dhclJl ZGR5X0tvbmRhQE1jQWZlZS5jb20+Ow0KPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5uZWxA aWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcNCj4gU3ViamVjdDogUkU6IFtEb3RzXSBBRCByZXZpZXcg b2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg1dGggUGFydCkNCj4gDQo+IFRo aXMgZW1haWwgb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8g bm90IGNsaWNrIGxpbmtzIG9yDQo+IG9wZW4gYXR0YWNobWVudHMgdW5sZXNzIHlvdSByZWNvZ25p emUgdGhlIHNlbmRlciBhbmQga25vdyB0aGUgY29udGVudCBpcyBzYWZlLg0KPiANCj4gSGkgQmVu LA0KPiANCj4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+IA0KPiBDaGVlcnMsDQo+IE1lZA0KPiANCj4g PiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gPiBEZcKgOiBCZW5qYW1pbiBLYWR1ayBb bWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbHVuZGkgMjEgamFudmllcg0KPiA+IDIw MTkgMTk6MTEgw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgVEdJL09MTiBDY8KgOiBLb25kYSwgVGly dW1hbGVzd2FyDQo+ID4gUmVkZHk7IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBpZXRm Lm9yZzsNCj4gPiBkb3RzQGlldGYub3JnDQo+ID4gT2JqZXTCoDogUmU6IFtEb3RzXSBBRCByZXZp ZXcgb2YgZHJhZnQtaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsLTI1ICg1dGgNCj4gPiBQYXJ0KQ0K PiA+DQo+ID4gT24gTW9uLCBKYW4gMjEsIDIwMTkgYXQgMDM6Mzc6MzhQTSArMDAwMCwNCj4gbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSB3cm90ZToNCj4gPiA+IFJlLSwNCj4gPiA+DQo+ID4g PiBQbGVhc2Ugc2VlIGlubGluZS4NCj4gPiA+DQo+ID4gPiBDaGVlcnMsDQo+ID4gPiBNZWQNCj4g PiA+DQo+ID4gPiA+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gPiBEZcKgOiBC ZW5qYW1pbiBLYWR1ayBbbWFpbHRvOmthZHVrQG1pdC5lZHVdIEVudm95w6nCoDogbHVuZGkgMjEN Cj4gPiA+ID4gamFudmllciAyMDE5IDE2OjEwIMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9P TE4gQ2PCoDogS29uZGEsDQo+ID4gPiA+IFRpcnVtYWxlc3dhciBSZWRkeTsgZHJhZnQtaWV0Zi1k b3RzLXNpZ25hbC1jaGFubmVsQGlldGYub3JnOw0KPiA+ID4gPiBkb3RzQGlldGYub3JnDQo+ID4g PiA+IE9iamV0wqA6IFJlOiBbRG90c10gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWdu YWwtY2hhbm5lbC0yNQ0KPiA+ID4gPiAoNXRoDQo+ID4gUGFydCkNCj4gPiA+ID4NCj4gPiA+ID4g T24gTW9uLCBKYW4gMjEsIDIwMTkgYXQgMDc6MzE6MjhBTSArMDAwMCwNCj4gPiA+ID4gbW9oYW1l ZC5ib3VjYWRhaXJAb3JhbmdlLmNvbQ0KPiA+IHdyb3RlOg0KPiA+ID4gPiA+IEhpIEJlbiwgYWxs LA0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4gPiA+ID4NCj4g PiA+ID4gPiBDaGVlcnMsDQo+ID4gPiA+ID4gTWVkDQo+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IC0t LS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiA+ID4gPiA+ID4gRGXCoDogS29uZGEsIFRpcnVt YWxlc3dhciBSZWRkeQ0KPiA+ID4gPiBbbWFpbHRvOlRpcnVtYWxlc3dhclJlZGR5X0tvbmRhQE1j QWZlZS5jb21dDQo+ID4gPiA+ID4gPiBFbnZvecOpwqA6IHNhbWVkaSAxOSBqYW52aWVyIDIwMTkg MDc6MzIgw4DCoDogQmVuamFtaW4gS2FkdWs7DQo+ID4gPiA+ID4gPiBCT1VDQURBSVIgTW9oYW1l ZCBUR0kvT0xOIENjwqA6DQo+ID4gPiA+ID4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWxAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmcgT2JqZXTCoDoNCj4gPiA+ID4gPiA+IFJFOiBbRG90 c10gQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbC0yNQ0KPiA+ICg1 dGgNCj4gPiA+ID4gUGFydCkNCj4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiBIaSBCZW4sDQo+ID4g PiA+ID4gPg0KPiA+ID4gPiA+ID4gUGxlYXNlIHNlZSBpbmxpbmUNCj4gPiA+ID4gPiA+DQo+ID4g PiA+ID4gPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4gPiA+ID4gPiA+IEZyb206 IERvdHMgPGRvdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEJlbmphbWluDQo+ID4g PiA+ID4gPiA+IEthZHVrDQo+ID4gPiA+ID4gPiA+IFNlbnQ6IFNhdHVyZGF5LCBKYW51YXJ5IDE5 LCAyMDE5IDI6MzMgQU0NCj4gPiA+ID4gPiA+ID4gVG86IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb20NCj4gPiA+ID4gPiA+ID4gQ2M6IGRyYWZ0LWlldGYtZG90cy1zaWduYWwtY2hhbm5lbEBp ZXRmLm9yZzsgZG90c0BpZXRmLm9yZw0KPiA+ID4gPiA+ID4gPiBTdWJqZWN0OiBSZTogW0RvdHNd IEFEIHJldmlldyBvZg0KPiA+ID4gPiA+ID4gPiBkcmFmdC1pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWwtMjUNCj4gPiAoNXRoDQo+ID4gPiA+ID4gPiBQYXJ0KQ0KPiA+ID4gPiA+ID4gPg0KPiA+ID4g PiA+ID4gPiBUaGlzIGVtYWlsIG9yaWdpbmF0ZWQgZnJvbSBvdXRzaWRlIG9mIHRoZSBvcmdhbml6 YXRpb24uIERvDQo+ID4gPiA+ID4gPiA+IG5vdA0KPiA+IGNsaWNrDQo+ID4gPiA+IGxpbmtzDQo+ ID4gPiA+ID4gPiBvcg0KPiA+ID4gPiA+ID4gPiBvcGVuIGF0dGFjaG1lbnRzIHVubGVzcyB5b3Ug cmVjb2duaXplIHRoZSBzZW5kZXIgYW5kIGtub3cNCj4gPiA+ID4gPiA+ID4gdGhlDQo+ID4gY29u dGVudA0KPiA+ID4gPiBpcw0KPiA+ID4gPiA+ID4gc2FmZS4NCj4gPiA+ID4gPiA+ID4NCj4gPiA+ ID4gPiA+ID4gSGkgYWxsLA0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+ID4gPiBUaGFua3MgZm9y IGFsbCB0aGUgZWRpdHMgYW5kIHRoZSBwdWJsaXNoZWQgLTI3Lg0KPiA+ID4gPiA+ID4gPiBBc3N1 bWluZyBJJ20gYWN0dWFsbHkgY2F1Z2h0IHVwIG9uIGFsbCB0aGUgcmV2aWV3L3Jlc3BvbnNlDQo+ ID4gPiA+ID4gPiA+IHRocmVhZHMsDQo+ID4gSQ0KPiA+ID4gPiB0aGluaw0KPiA+ID4gPiA+ID4g PiB3ZSdyZSBwcmV0dHkgY2xvc2UgdG8gYmVpbmcgYWJsZSB0byBnbyB0byBJRVRGIExDIC0tIGhl cmUncw0KPiA+ID4gPiA+ID4gPiB3aGF0IEkNCj4gPiBzZWUNCj4gPiA+ID4gYXMNCj4gPiA+ID4g PiA+IHN0aWxsIGxlZnQ6DQo+ID4gPiA+ID4gPiA+DQo+ID4gPiA+ID4gPiA+IC0gV2UgbmVlZCB0 byBzZXR0bGUgdGhlIHJpc2sgb2YgbmVlZGluZyBub3JtYXRpdmUgZG93bnJlZnMNCj4gPiA+ID4g PiA+ID4gY2FsbGVkDQo+ID4gb3V0DQo+ID4gPiA+IGZvcg0KPiA+ID4gPiA+ID4gPiAgIHRoZSBs YXN0IGNhbGwNCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRdIEkgdXBkYXRlZCB0aGUgdGV4dCB0 bzoNCj4gPiA+ID4gPiAqIGNpdGUgNzYxOC83NjI0IGFzIG5vcm1hdGl2ZSAoKyBpbmRpY2F0ZSB0 aGF0IGEgc2ltaWxhcg0KPiA+ID4gPiA+IG1lY2hhbmlzbSB0bw0KPiA+IGZhbHNlDQo+ID4gPiA+ IHN0YXJ0IG1heSBhbHNvIGJlIGRlZmluZWQgZm9yIERUTFMpLg0KPiA+ID4gPiA+ICogdHdlYWsg dGhlIFRGTyB0ZXh0IHRvIG1haW50YWluIGl0IGFzIGluZm9ybWF0aXZlLg0KPiA+ID4gPg0KPiA+ ID4gPiBTb3VuZHMgZ29vZC4NCj4gPiA+ID4NCj4gPiA+ID4gPiA+ID4gLSBJIGp1c3Qgbm90aWNl ZCB3aGlsZSByZXZpZXdpbmcgdGhlIGRpZmYgdGhhdCB3ZSBhbHNvIG5lZWQNCj4gPiA+ID4gPiA+ ID4gdG8gc2F5DQo+ID4gYQ0KPiA+ID4gPiA+ID4gPiAgIGxpdHRsZSBtb3JlIGFib3V0IChEKVRM UyAxLjMgMC1SVFQgZGF0YSAobW9yZSBiZWxvdykNCj4gPiA+ID4gPiA+ID4gLSBJdCBsb29rcyBs aWtlIHdlIGxvc3QgdGhlIGd1aWRhbmNlIHRvIHRoZSBFeHBlcnRzIGFuZCB0ZXh0DQo+ID4gPiA+ ID4gPiA+IGFib3V0DQo+ID4gdGhlDQo+ID4gPiA+ID4gPiA+ICAgcmV2aWV3IG1haWxpbmcgbGlz dCBmcm9tIHRoZSBJQU5BIENvbnNpZGVyYXRpb25zLCBkdXJpbmcNCj4gPiA+ID4gPiA+ID4gdGhl DQo+ID4gPiA+IHJlc2h1ZmZsaW5nDQo+ID4gPiA+ID4gPiA+ICAgYXJvdW5kIGhhdmluZyBJQU5B IG1hbmFnZSBtb3JlIHRoaW5ncw0KPiA+ID4gPiA+ID4gPg0KPiA+ID4gPiA+DQo+ID4gPiA+ID4g W01lZF0gVGhhdCB3YXMgb24gcHVycG9zZS4gV2Ugd291bGQgbGlrZSB0byByZWx5IG9uIFJGQzgx MjYNCj4gPiA+ID4gPiBydWxlcyBmb3INCj4gPiA+ID4gZGVpZ25lZCBleHBlcnQgcmV2aWV3cy4N Cj4gPiA+ID4NCj4gPiA+ID4gSSdtIG5vdCBzdXJlIEkgdW5kZXJzdGFuZCB0aGlzIC0tIDgxMjYg ZXhwbGljaXRseSBzYXlzIHRoYXQNCj4gPiA+ID4gZG9jdW1lbnRzIHNob3VsZCBwcm92aWRlIGd1 aWRhbmNlIHRvIHRoZSBkZXNpZ25hdGVkIGV4cGVydCBvbiB3aGF0DQo+ID4gPiA+IHRvIGxvb2sg Zm9yIGFuZCB3aGF0IGlzIGdyb3VuZHMgZm9yIHJlamVjdGluZyBhIHJlcXVlc3QuDQo+ID4gPiA+ DQo+ID4gPg0KPiA+ID4gW01lZF0gV2hhdCBJIG1lYW50IGlzIHRoYXQgdGhlIHRleHQgd2UgdXNl ZCB0byBoYXZlIGluIC0yNSBpcw0KPiA+ID4gZ2VuZXJpYywgYW5kDQo+ID4gSU1ITyBkb2VzIG5v dCBicmluZyBuZXcgZ3VpZGVsaW5lcyB0byB3aGF0IGlzIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDUg b2YgODEyNi4NCj4gPg0KPiA+IEkgdGhpbmsgdGhlcmUgY2FuIHN0aWxsIGJlIHZhbHVlIGluIHJl cGVhdGluZyB0aGUgImdlbmVyYWwNCj4gPiBhcHBsaWNhYmlsaXR5LCBjbGFyaXR5IG9mIGRlc2Ny aXB0aW9uLCBldGMuIGxhbmd1YWdlLiAgKEJ1dCBpdCB3b3VsZA0KPiA+IGJlIGV2ZW4gYmV0dGVy IHRvIGNvbWUgdXAgd2l0aCBzb21lIGd1aWRhbmNlIHRoYXQgaXMgdGlnaHRseSB0YWlsb3JlZA0K PiA+IHRvIERPVFMsIGlmIHdlIGNhbi4pDQo+IA0KPiBbTWVkXSBJIHRyaWVkLCBhY3R1YWxseS4g SXQgaXMgaW5kZWVkIHdoZW4gSSByZWNoZWNrZWQgODEyNiB0aGF0IEkgZm91bmQgdGhhdCB0ZXh0 DQo+IGlzIGdlbmVyaWMuIFNlZWtpbmcgZm9yIGV4cGVydCByZXZpZXdzIHdpbGwgYmUgZG9uZSB2 aWEgSUFOQSwgd2hpY2ggaXMgZmFtaWxpYXINCj4gd2l0aCB0aGUgcHJvY2VzcyBvZiBzb2xpY2l0 aW5nIGV4cGVydHMuDQo+IA0KPiBNb3Jlb3ZlciwgSSBmb3VuZCBhIGJ1ZyBpbiB0aGUgdGV4dCBi ZWNhdXNlIGl0IGRvZXMgbm90IGFwcGx5IHRvIHRoZSByYW5nZQ0KPiByZXF1aXJpbmcgSUVURiBy ZXZpZXcsIGJ1dCBvbmx5IHRvIGEgdGhlIGNvbXByZWhlbnNpdmUtb3B0aW9uYWwgcmFuZ2UuDQo+ IA0KPiA+IEFuZCB0aGUgdGV4dCBhYm91dCB0aGUgbWFpbGluZyBsaXN0IGFuZCBob3cgdG8gZm9y bWF0IHJlZ2lzdHJhdGlvbg0KPiA+IHJlcXVlc3RzIGlzIGRlZmluaXRlbHkgbm90IGNvdmVyZWQg aW4gODEyNiENCj4gDQo+IFtNZWRdIHRoYXQgbWFpbGluZyBsaXN0IGlzIGxpa2VseSB0byBpbmNs dWRlIHRoZSBkZXNpZ25lZCBleHBlcnRzLiBUaGlzIGlzIHdoeSBJDQo+IHRob3VnaHQgaXQgaXMg c2ltcGxlIHRvIGxldCBJQU5BIGRlY2lkZSBob3cgdG8gcmVhY2ggb3V0IGRlc2lnbmVkIGV4cGVy dChzKSBvbmNlDQo+IGFzc2lnbmVkLg0KPiANCj4gQW55d2F5LCBJIGNhbiByZWluc2VydCB0aGUg dGV4dCBpZiB5b3Ugc3RpbGwgdGhpbmsgaXQgYnJpbmdzIHZhbHVlLg0KPiANCj4gPg0KPiA+ID4g PiA+ID4gPiBSZWdhcmRpbmcgdGhlIChEKVRMUyAxLjMgMC1SVFQgZGF0YSwgUkZDIDg0NDYgbm90 ZXMgdGhhdA0KPiA+ICJBcHBsaWNhdGlvbg0KPiA+ID4gPiA+ID4gPiBwcm90b2NvbHMgTVVTVCBO T1QgdXNlIDAtUlRUIGRhdGEgd2l0aG91dCBhIHByb2ZpbGUgdGhhdA0KPiA+ID4gPiA+ID4gPiBk ZWZpbmVzDQo+ID4gaXRzDQo+ID4gPiA+IHVzZS4NCj4gPiA+ID4gPiA+ID4gVGhhdCBwcm9maWxl IG5lZWRzIHRvIGlkZW50aWZ5IHdoaWNoIG1lc3NhZ2VzIG9yDQo+ID4gPiA+ID4gPiA+IGludGVy YWN0aW9ucyBhcmUNCj4gPiBzYWZlDQo+ID4gPiA+IHRvDQo+ID4gPiA+ID4gPiB1c2UNCj4gPiA+ ID4gPiA+ID4gd2l0aCAwLVJUVCBhbmQgaG93IHRvIGhhbmRsZSB0aGUgc2l0dWF0aW9uIHdoZW4g dGhlIHNlcnZlcg0KPiA+ID4gPiA+ID4gPiByZWplY3RzDQo+ID4gMC0NCj4gPiA+ID4gUlRUDQo+ ID4gPiA+ID4gPiBhbmQNCj4gPiA+ID4gPiA+ID4gZmFsbHMgYmFjayB0byAxLVJUVC4iICBTbyB3 ZSBlaXRoZXIgbmVlZCB0byBzYXkgd2hpY2ggY2xpZW50DQo+ID4gcmVxdWVzdHMNCj4gPiA+ID4g YXJlDQo+ID4gPiA+ID4gPiAwLVJUVA0KPiA+ID4gPiA+ID4gPiBzYWZlIChhbmQgd2h5KSBvciBk ZWZlciB0aGF0IHByb2ZpbGUgdG8gYW5vdGhlciBkb2N1bWVudC4NCj4gPiA+ID4gPiA+ID4gZHJh ZnQtDQo+ID4gaWV0Zi0NCj4gPiA+ID4gPiA+IGRuc29wLQ0KPiA+ID4gPiA+ID4gPiBzZXNzaW9u LXNpZ25hbCBpcyBwZXJoYXBzIGFuIGV4YW1wbGUgb2YgYSBkb2N1bWVudCB0aGF0DQo+ID4gPiA+ ID4gPiA+IHNwZWNpZmllcw0KPiA+IHdoaWNoDQo+ID4gPiA+ID4gPiA+IG1lc3NhZ2VzIGFyZS9h cmVuJ3QgYWxsb3dlZCBpbiBlYXJseSBkYXRhLg0KPiA+ID4gPiA+ID4gPiAoZHJhZnQtaWV0Zi1h Y21lLWFjbWUgaXMgYW5vdGhlciwgYnV0IGFuIHVuaW50ZXJlc3Rpbmcgb25lLA0KPiA+ID4gPiA+ ID4gPiBzaW5jZQ0KPiA+IHRoZXkNCj4gPiA+ID4gbWFrZQ0KPiA+ID4gPiA+ID4gPiBldmVyeSBy ZXF1ZXN0IGluY2x1ZGUgYSBzaW5nbGUtdXNlIG5vbmNlLCBhbmQgYWxsIG1lc3NhZ2VzDQo+ID4g PiA+ID4gPiA+IGFyZSAwLQ0KPiA+IFJUVA0KPiA+ID4gPiBzYWZlLikNCj4gPiA+ID4gPiA+ID4g T3VyIHVzZSBvZiBpbmNyZWFzaW5nICdtaWQnIHZhbHVlcyBtYXkgaGVscCBoZXJlLCBpbiB0ZXJt cw0KPiA+ID4gPiA+ID4gPiBvZg0KPiA+IGFsbG93aW5nDQo+ID4gPiA+ID4gPiBERUxFVEVzDQo+ ID4gPiA+ID4gPiA+IHRvIGJlIHNhZmUsIGJ1dCBJJ2QgaGF2ZSB0byB0aGluayBhIGxpdHRsZSBt b3JlIHRvIGJlIHN1cmUNCj4gPiA+ID4gPiA+ID4gdGhhdA0KPiA+ID4gPiByZXF1ZXN0aW5nDQo+ ID4gPiA+ID4gPiA+IG1pdGlnYXRpb24gd291bGQgYmUgc2FmZS4gIChPbiBmaXJzdCBnbGFuY2Ug dGhlDQo+ID4gPiA+ID4gPiA+IHNlc3Npb24tbWFuYWdlbW5ldA0KPiA+IGJpdHMNCj4gPiA+ID4g PiA+IHdvdWxkDQo+ID4gPiA+ID4gPiA+IG5vdCBiZSBzYWZlLCBidXQgSSBtYXkgYmUgbWlzc2lu ZyBzb21ldGhpbmcuKQ0KPiA+ID4gPiA+ID4NCj4gPiA+ID4gPiA+IFRoZSBkcmFmdCBvbmx5IHVz ZXMgaWRlbXBvdGVudCByZXF1ZXN0cyAoR0VULCBQVVQgYW5kIERFTEVURSksDQo+ID4gPiA+ID4g PiBhbmQNCj4gPiBDb0FQDQo+ID4gPiA+IGlzDQo+ID4gPiA+ID4gPiBjYXBhYmxlIG9mIGRldGVj dGluZyBtZXNzYWdlIGR1cGxpY2F0aW9uIChzZWUNCj4gPiA+ID4gPiA+IGh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9yZmM3MjUyI3NlY3Rpb24tNC41KSBmb3IgYm90aA0KPiA+ID4gPiA+ID4g Y29uZmlybWFibGUNCj4gPiBhbmQNCj4gPiA+ID4gPiA+IG5vbi1jb25maXJtYWJsZSBtZXNzYWdl cy4NCj4gPiA+ID4gPiA+ICBbMV0gQW4gYXR0YWNrZXIgcmVwbGF5aW5nIERFTEVURSB3aWxsIG5v dCBoYXZlIGFueSBhZHZlcnNlDQo+ID4gPiA+ID4gPiBpbXBhY3QsDQo+ID4gMi4wMg0KPiA+ID4g PiA+ID4gKERlbGV0ZWQpIFJlc3BvbnNlIENvZGUgaXMgcmV0dXJuZWQgZXZlbiBpZiB0aGUgbWl0 aWdhdGlvbg0KPiA+ID4gPiA+ID4gcmVxdWVzdA0KPiA+IGRvZXMNCj4gPiA+ID4gbm90DQo+ID4g PiA+ID4gPiBleGlzdC4NCj4gPiA+ID4gPiA+IFsyXSBUaGUgdGVjaG5pcXVlcyBkaXNjdXNzZWQg aW4gU2VjdGlvbiA4IG9mIFJGQzg0NDYgc2hvdWxkDQo+ID4gPiA+ID4gPiBzdWZmaWNlDQo+ID4g dG8NCj4gPiA+ID4gaGFuZGxlDQo+ID4gPiA+ID4gPiBhbnRpLXJlcGxheSAoZS5nLiBhbiBhdHRh Y2tlciByZXBsYXlpbmcgYSAwLVJUVCBkYXRhIGNhcnJ5aW5nDQo+ID4gPiA+ID4gPiBhbiBvbGQg bWl0aWdhdGlvbiByZXF1ZXN0IHJlcGxhY2VkIGJ5IGEgbmV3IG1pdGlnYXRpb24gc2NvcGUpLg0K PiA+ID4gPiA+ID4NCj4gPiA+ID4gPg0KPiA+ID4gPiA+IFtNZWRdIEZXSVcsIHdlIGRvIGFscmVh ZHkgaGF2ZSB0aGlzIHRleHQgaW4gdGhlIGRyYWZ0Og0KPiA+ID4gPiA+DQo+ID4gPiA+ID4gICAg ICAgU2VjdGlvbiA4IG9mIFtSRkM4NDQ2XSBkaXNjdXNzZXMgc29tZSBtZWNoYW5pc21zIHRvIGlt cGxlbWVudCB0bw0KPiA+ID4gPiA+ICAgICAgIGxpbWl0IHRoZSBpbXBhY3Qgb2YgcmVwbGF5IGF0 dGFja3Mgb24gMC1SVFQgZGF0YS4gIElmIHRoZSBET1RTDQo+ID4gPiA+ID4gICAgICAgc2VydmVy IGFjY2VwdHMgMC1SVFQsIGl0IE1VU1QgaW1wbGVtZW50IG9uZSBvZiB0aGVzZSBtZWNoYW5pc21z Lg0KPiA+ID4gPiA+ICAgICAgIEEgRE9UUyBzZXJ2ZXIgY2FuIHJlamVjdCAwLVJUVCBieSBzZW5k aW5nIGEgVExTDQo+ID4gSGVsbG9SZXRyeVJlcXVlc3QuDQo+ID4gPiA+DQo+ID4gPiA+IChBcyBJ IG5vdGVkIGluIG15IHJlcGx5IHRvIFRpcnUsIHdlIG5lZWQgYSBtb3JlIGV4cGxpY2l0DQo+ID4g PiA+IHN0YXRlbWVudC4pDQo+ID4gPiA+DQo+ID4gPg0KPiA+ID4gW01lZF0gT0suIElmIHRoZSBh c3Nlc3NtZW50IGlzIGNvbmZpcm1lZCwgd2UgY2FuIHVwZGF0ZSB0aGUgdGV4dCBhcw0KPiA+IGZv bGxvd3M6DQo+ID4gPg0KPiA+ID4gICAgICAgU2VjdGlvbiA4IG9mIFtSRkM4NDQ2XSBkaXNjdXNz ZXMgc29tZSBtZWNoYW5pc21zIHRvIGltcGxlbWVudCB0bw0KPiA+ID4gICAgICAgbGltaXQgdGhl IGltcGFjdCBvZiByZXBsYXkgYXR0YWNrcyBvbiAwLVJUVCBkYXRhLiAgSWYgdGhlIERPVFMNCj4g PiA+ICAgICAgIHNlcnZlciBhY2NlcHRzIDAtUlRULCBpdCBNVVNUIGltcGxlbWVudCBvbmUgb2Yg dGhlc2UgbWVjaGFuaXNtcy4NCj4gPiA+ICAgICAgIEEgRE9UUyBzZXJ2ZXIgY2FuIHJlamVjdCAw LVJUVCBieSBzZW5kaW5nIGEgVExTIEhlbGxvUmV0cnlSZXF1ZXN0Lg0KPiA+ID4gICAgICAgVGhl IERPVFMgc2lnbmFsIGNoYW5uZWwgbWVzc2FnZXMgc2VudCBhcyBlYXJseSBkYXRhIGJ5IHRoZSBE T1RTDQo+ID4gPiAgICAgICBjbGllbnQgYXJlIGlkZW1wb3RlbnQgcmVxdWVzdHMuICBPd2luZyB0 byB0aGUgcHJvdGVjdGlvbnMgYWZmb3JkZWQNCj4gPiA+ICAgICAgIGJ5IENvQVAgZGVkdXBsaWNh dGlvbiAoU2VjdGlvbiA0LjUgb2YgW1JGQzcyNTJdKSBhbmQgUkZDIDg0NDYNCj4gPiA+ICAgICAg IGFudGktcmVwbGF5IG1lY2hhbmlzbXMsIGFsbCBET1RTIHNpZ25hbCBjaGFubmVsIG1lc3NhZ2Vz IGFyZSBzYWZlDQo+ID4gPiAgICAgICB0byB0cmFuc21pdCBpbiBUTFMgMS4zIDAtUlRUIGRhdGEu DQo+ID4NCj4gPiBUaGF0IHRleHQgd291bGQgbWVldCB0aGUgImFwcGxpY2F0aW9uIHByb2ZpbGUi IHJlcXVpcmVtZW50cy4NCj4gPiBIb3BlZnVsbHkgaXQncyBhIHRydWUgc3RhdGVtZW50IHNvIHdl IGNhbiBhY3R1YWxseSB1c2UgaXQgOikNCj4gPg0KPiANCj4gW01lZF0gVGhhdCBpcyBhdCBsZWFz dCB0aGUgYXV0aG9ycycgY29uY2x1c2lvbiA6KSBXZSB3aWxsIHdhaXQgZm9yIHlvdXIgQUNLDQo+ IGJlZm9yZSBpbXBsZW1lbnRpbmcgY2hhbmdlcyBhbmQgcG9zdGluZyB0aGUgdXBkYXRlZCB2ZXJz aW9uIG9mIHRoZSBkcmFmdC4NCg0KV2UgY2FuIGFkZCB0aGUgZm9sbG93aW5nIGxpbmVzIHRvIHN0 cmVuZ3RoZW4gb3VyIHN0YXRlbWVudHM6DQoNCk1lc3NhZ2UgSUQgKFNlY3Rpb24gMyBvZiBSRkM3 MjUyKSBpcyBjaGFuZ2VkIGVhY2ggdGltZSBhIG5ldyBDb0FQIHJlcXVlc3QgaXMgc2VudCwgYW5k IHRoZSB0b2tlbiAoU2VjdGlvbiA1LjMuMSBvZiBSRkM3MjUyKSBpbiBlYWNoDQpDb0FQIHJlcXVl c3QgaXMgcmFuZG9taXplZC4gRE9UUyBzZXJ2ZXIgc3lzdGVtIGNhbiB1c2UgTWVzc2FnZSBJRCBh bmQgdG9rZW4gaW4gdGhlIERPVFMgc2lnbmFsIG1lc3NhZ2UgdG8gZGV0ZWN0IHJlcGxheSBvZiBl YXJseSBkYXRhLCANCmFuZCBhY2NlcHQgMC1SVFQgZGF0YSBhdCBtb3N0IG9uY2UuDQpGdXJ0aGVy LCAnbWlkJyB2YWx1ZSBpcyBtb25vdG9uaWNhbGx5IGluY3JlYXNlZCBieSB0aGUgRE9UUyBjbGll bnQgZm9yIGVhY2ggbWl0aWdhdGlvbiByZXF1ZXN0LCBhdHRhY2tlcnMgcmVwbGF5aW5nIG1pdGln YXRpb24gcmVxdWVzdCANCndpdGggbG93ZXIgbnVtZXJpYyAnbWlkJyB2YWx1ZSBhbmQgb3Zlci1s YXBwaW5nIHNjb3BlIHdpdGggbWl0aWdhdGlvbiByZXF1ZXN0cyB3aXRoIGhpZ2hlciBudW1lcmlj ICdtaWQnIHZhbHVlcw0Kd2lsbCBiZSByZWplY3RlZCBieSB0aGUgRE9UUyBzZXJ2ZXIuDQoNCkNo ZWVycw0KLVRpcnUNCg== From nobody Tue Jan 22 14:30:57 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BBAF7131165; Tue, 22 Jan 2019 14:30:55 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: rdd@cert.org, dots-chairs@ietf.org, dots@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.90.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154819625569.13299.3414165739364179164.idtracker@ietfa.amsl.com> Date: Tue, 22 Jan 2019 14:30:55 -0800 Archived-At: Subject: [Dots] dots - New Meeting Session Request for IETF 104 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2019 22:30:56 -0000 A new meeting session request has just been submitted by Roman Danyliw, a Chair of the dots working group. --------------------------------------------------------- Working Group Name: DDoS Open Threat Signaling Area Name: Security Area Session Requester: Roman Danyliw Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: mile i2nsf sacm saag secdispatch ace Second Priority: opsawg People who must be present: Roman Danyliw Liang Xia Benjamin Kaduk Resources Requested: Special Requests: --------------------------------------------------------- From nobody Wed Jan 23 04:15:35 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B858812D84C; Wed, 23 Jan 2019 04:15:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c3QTU8q5rikS; Wed, 23 Jan 2019 04:15:30 -0800 (PST) Received: from orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E12F9128CE4; Wed, 23 Jan 2019 04:15:29 -0800 (PST) Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 43l44J30F6z5w38; Wed, 23 Jan 2019 13:15:28 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.34]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id 43l44H6YFDz3wb4; Wed, 23 Jan 2019 13:15:27 +0100 (CET) Received: from OPEXCAUBM7F.corporate.adroot.infra.ftgroup (10.114.13.98) by OPEXCLILM6F.corporate.adroot.infra.ftgroup (10.114.31.34) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 23 Jan 2019 13:15:27 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM7F.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Wed, 23 Jan 2019 13:15:27 +0100 From: To: Benjamin Kaduk CC: "Konda, Tirumaleswar Reddy" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: Designed Expert Guidelines (RE: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th Part)) Thread-Index: AdSzFVHZ9tBnTXEATjyj4irax2K1Qw== Date: Wed, 23 Jan 2019 12:15:27 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0C5BC@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Designed Expert Guidelines (RE: AD review of draft-ietf-dots-signal-channel-25 (5th Part)) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2019 12:15:33 -0000 Hi Ben,=20 I implemented this change in my local copy:=20 OLD:=20 CBOR Key Value: Key value for the parameter. The key value MUST be an integer in the 1-65535 range. The key values of the comprehension-required range (0x0001 - 0x3FFF) and of the comprehension-optional range (0x8000 - 0xBFFF) are assigned by IETF Review [RFC8126]. The key values of the comprehension-optional range (0x4000 - 0x7FFF) are assigned by Designated Expert [RFC8126] and of the comprehension- optional range (0xC000 - 0xFFFF) are reserved for Private Use [RFC8126]. NEW: CBOR Key Value: Key value for the parameter. The key value MUST be an integer in the 1-65535 range. The key values of the comprehension-required range (0x0001 - 0x3FFF) and of the comprehension-optional range (0x8000 - 0xBFFF) are assigned by IETF Review (Section 4.8 of [RFC8126]). The key values of the comprehension-optional range (0x4000 - 0x7FFF) are assigned by Specification Required (Section 4.6 of [RFC8126]) and of the comprehension-optional range (0xC000 - 0xFFFF) are reserved for Private Use (Section 4.1 of [RFC8126]). Registration requests for the 0x4000 - 0x7FFF range are evaluated after a three-week review period on the dots-signal-reg- review@ietf.org mailing list, on the advice of one or more Designated Experts. However, to allow for the allocation of values prior to publication, the Designated Experts may approve registration once they are satisfied that such a specification will be published. Registration requests sent to the mailing list for review should use an appropriate subject (e.g., "Request to register CBOR Key Value: example"). Within the review period, the Designated Experts will either approve or deny the registration request, communicating this decision to the review list and IANA. Denials should include an explanation and, if applicable, suggestions as to how to make the request successful. Registration requests that are undetermined for a period longer than 21 days can be brought to the IESG's attention (using the iesg@ietf.org mailing list) for resolution. Criteria that should be applied by the Designated Experts includes determining whether the proposed registration duplicates existing functionality, whether it is likely to be of general applicability or whether it is useful only for a single use case, and whether the registration description is clear. IANA must only accept registry updates to the 0x4000 - 0x7FFF range from the Designated Experts and should direct all requests for registration to the review mailing list. It is suggested that multiple Designated Experts be appointed. In cases where a registration decision could be perceived as creating a conflict of interest for a particular Expert, that Expert should defer to the judgment of the other Experts. Cheers, Med > -----Message d'origine----- > De=A0: mohamed.boucadair@orange.com [mailto:mohamed.boucadair@orange.com] > Envoy=E9=A0: mardi 22 janvier 2019 08:16 > =C0=A0: Benjamin Kaduk > Cc=A0: Konda, Tirumaleswar Reddy; draft-ietf-dots-signal-channel@ietf.org= ; > dots@ietf.org > Objet=A0: RE: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5th = Part) >=20 > Hi Ben, >=20 > Please see inline. >=20 > Cheers, > Med >=20 > > -----Message d'origine----- > > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > > Envoy=E9=A0: lundi 21 janvier 2019 19:11 > > =C0=A0: BOUCADAIR Mohamed TGI/OLN > > Cc=A0: Konda, Tirumaleswar Reddy; draft-ietf-dots-signal-channel@ietf.o= rg; > > dots@ietf.org > > Objet=A0: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (5t= h > Part) > > > > On Mon, Jan 21, 2019 at 03:37:38PM +0000, mohamed.boucadair@orange.com > wrote: > > > Re-, > > > > > > Please see inline. > > > > > > Cheers, > > > Med > > > > > > > -----Message d'origine----- > > > > De=A0: Benjamin Kaduk [mailto:kaduk@mit.edu] > > > > Envoy=E9=A0: lundi 21 janvier 2019 16:10 > > > > =C0=A0: BOUCADAIR Mohamed TGI/OLN > > > > Cc=A0: Konda, Tirumaleswar Reddy; draft-ietf-dots-signal- > channel@ietf.org; > > > > dots@ietf.org > > > > Objet=A0: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25= (5th > > Part) > > > > > > > > On Mon, Jan 21, 2019 at 07:31:28AM +0000, mohamed.boucadair@orange.= com > > wrote: > > > > > Hi Ben, all, > > > > > > > > > > Please see inline. > > > > > > > > > > Cheers, > > > > > Med > > > > > > > > > > > -----Message d'origine----- > > > > > > De=A0: Konda, Tirumaleswar Reddy > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com] > > > > > > Envoy=E9=A0: samedi 19 janvier 2019 07:32 > > > > > > =C0=A0: Benjamin Kaduk; BOUCADAIR Mohamed TGI/OLN > > > > > > Cc=A0: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > > > Objet=A0: RE: [Dots] AD review of draft-ietf-dots-signal-channe= l-25 > > (5th > > > > Part) > > > > > > > > > > > > Hi Ben, > > > > > > > > > > > > Please see inline > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dots On Behalf Of Benjamin Kadu= k > > > > > > > Sent: Saturday, January 19, 2019 2:33 AM > > > > > > > To: mohamed.boucadair@orange.com > > > > > > > Cc: draft-ietf-dots-signal-channel@ietf.org; dots@ietf.org > > > > > > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-chann= el- > 25 > > (5th > > > > > > Part) > > > > > > > > > > > > > > This email originated from outside of the organization. Do no= t > > click > > > > links > > > > > > or > > > > > > > open attachments unless you recognize the sender and know the > > content > > > > is > > > > > > safe. > > > > > > > > > > > > > > Hi all, > > > > > > > > > > > > > > Thanks for all the edits and the published -27. > > > > > > > Assuming I'm actually caught up on all the review/response > threads, > > I > > > > think > > > > > > > we're pretty close to being able to go to IETF LC -- here's w= hat > I > > see > > > > as > > > > > > still left: > > > > > > > > > > > > > > - We need to settle the risk of needing normative downrefs ca= lled > > out > > > > for > > > > > > > the last call > > > > > > > > > > [Med] I updated the text to: > > > > > * cite 7618/7624 as normative (+ indicate that a similar mechanis= m to > > false > > > > start may also be defined for DTLS). > > > > > * tweak the TFO text to maintain it as informative. > > > > > > > > Sounds good. > > > > > > > > > > > - I just noticed while reviewing the diff that we also need t= o > say > > a > > > > > > > little more about (D)TLS 1.3 0-RTT data (more below) > > > > > > > - It looks like we lost the guidance to the Experts and text > about > > the > > > > > > > review mailing list from the IANA Considerations, during th= e > > > > reshuffling > > > > > > > around having IANA manage more things > > > > > > > > > > > > > > > > > [Med] That was on purpose. We would like to rely on RFC8126 rules= for > > > > deigned expert reviews. > > > > > > > > I'm not sure I understand this -- 8126 explicitly says that documen= ts > > > > should provide guidance to the designated expert on what to look fo= r > and > > > > what is grounds for rejecting a request. > > > > > > > > > > [Med] What I meant is that the text we used to have in -25 is generic= , > and > > IMHO does not bring new guidelines to what is discussed in Section 5 of > 8126. > > > > I think there can still be value in repeating the "general applicabilit= y, > > clarity of description, etc. language. (But it would be even better to > > come up with some guidance that is tightly tailored to DOTS, if we can.= ) >=20 > [Med] I tried, actually. It is indeed when I rechecked 8126 that I found = that > text is generic. Seeking for expert reviews will be done via IANA, which = is > familiar with the process of soliciting experts. >=20 > Moreover, I found a bug in the text because it does not apply to the rang= e > requiring IETF review, but only to a the comprehensive-optional range. >=20 > > And the text about the mailing list and how to format registration requ= ests > > is definitely not covered in 8126! >=20 > [Med] that mailing list is likely to include the designed experts. This i= s > why I thought it is simple to let IANA decide how to reach out designed > expert(s) once assigned. >=20 > Anyway, I can reinsert the text if you still think it brings value. >=20 > > > > > > > > > Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that > > "Application > > > > > > > protocols MUST NOT use 0-RTT data without a profile that defi= nes > > its > > > > use. > > > > > > > That profile needs to identify which messages or interactions= are > > safe > > > > to > > > > > > use > > > > > > > with 0-RTT and how to handle the situation when the server > rejects > > 0- > > > > RTT > > > > > > and > > > > > > > falls back to 1-RTT." So we either need to say which client > > requests > > > > are > > > > > > 0-RTT > > > > > > > safe (and why) or defer that profile to another document. dr= aft- > > ietf- > > > > > > dnsop- > > > > > > > session-signal is perhaps an example of a document that speci= fies > > which > > > > > > > messages are/aren't allowed in early data. > > > > > > > (draft-ietf-acme-acme is another, but an uninteresting one, s= ince > > they > > > > make > > > > > > > every request include a single-use nonce, and all messages ar= e 0- > > RTT > > > > safe.) > > > > > > > Our use of increasing 'mid' values may help here, in terms of > > allowing > > > > > > DELETEs > > > > > > > to be safe, but I'd have to think a little more to be sure th= at > > > > requesting > > > > > > > mitigation would be safe. (On first glance the session- > managemnet > > bits > > > > > > would > > > > > > > not be safe, but I may be missing something.) > > > > > > > > > > > > The draft only uses idempotent requests (GET, PUT and DELETE), = and > > CoAP > > > > is > > > > > > capable of detecting message duplication (see > > > > > > https://tools.ietf.org/html/rfc7252#section-4.5) for both > confirmable > > and > > > > > > non-confirmable messages. > > > > > > [1] An attacker replaying DELETE will not have any adverse imp= act, > > 2.02 > > > > > > (Deleted) Response Code is returned even if the mitigation requ= est > > does > > > > not > > > > > > exist. > > > > > > [2] The techniques discussed in Section 8 of RFC8446 should suf= fice > > to > > > > handle > > > > > > anti-replay (e.g. an attacker replaying a 0-RTT data carrying a= n > old > > > > > > mitigation request replaced by a new mitigation scope). > > > > > > > > > > > > > > > > [Med] FWIW, we do already have this text in the draft: > > > > > > > > > > Section 8 of [RFC8446] discusses some mechanisms to impleme= nt > to > > > > > limit the impact of replay attacks on 0-RTT data. If the D= OTS > > > > > server accepts 0-RTT, it MUST implement one of these > mechanisms. > > > > > A DOTS server can reject 0-RTT by sending a TLS > > HelloRetryRequest. > > > > > > > > (As I noted in my reply to Tiru, we need a more explicit statement.= ) > > > > > > > > > > [Med] OK. If the assessment is confirmed, we can update the text as > > follows: > > > > > > Section 8 of [RFC8446] discusses some mechanisms to implement t= o > > > limit the impact of replay attacks on 0-RTT data. If the DOTS > > > server accepts 0-RTT, it MUST implement one of these mechanisms= . > > > A DOTS server can reject 0-RTT by sending a TLS HelloRetryReque= st From nobody Thu Jan 24 23:58:17 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB02712D4E8 for ; Thu, 24 Jan 2019 23:58:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QgSqhCT7ZDok for ; Thu, 24 Jan 2019 23:58:12 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A81CE1277D2 for ; Thu, 24 Jan 2019 23:58:11 -0800 (PST) Received: from lhreml705-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 8569FCB5CF22ABD9FB12 for ; Fri, 25 Jan 2019 07:58:09 +0000 (GMT) Received: from NKGEML412-HUB.china.huawei.com (10.98.56.73) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 25 Jan 2019 07:58:09 +0000 Received: from NKGEML513-MBX.china.huawei.com ([169.254.1.167]) by nkgeml412-hub.china.huawei.com ([10.98.56.73]) with mapi id 14.03.0415.000; Fri, 25 Jan 2019 15:58:00 +0800 From: "Panwei (William)" To: "mohamed.boucadair@orange.com" CC: "dots@ietf.org" Thread-Topic: Comments on draft-nishizuka-dots-signal-control-filtering-02 Thread-Index: AdS0grzeCrAKNsORT9O+dXHIsB7wow== Date: Fri, 25 Jan 2019 07:57:59 +0000 Message-ID: <30E95A901DB42F44BA42D69DB20DFA6A6093C342@nkgeml513-mbx.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.37.117] Content-Type: multipart/alternative; boundary="_000_30E95A901DB42F44BA42D69DB20DFA6A6093C342nkgeml513mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Dots] Comments on draft-nishizuka-dots-signal-control-filtering-02 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 07:58:15 -0000 --_000_30E95A901DB42F44BA42D69DB20DFA6A6093C342nkgeml513mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWVkLA0KDQoNCg0KSSBoYXZlIHJlYWQgdGhlIGxhdGVzdCB2ZXJzaW9uIGFuZCBJIGhhdmUg MiBjb21tZW50cyBvbiBpdC4NCg0KDQpJdCBpcyBSRUNPTU1FTkRFRCBmb3IgYSBET1RTIGNsaWVu dCB0byBzdWJzY3JpYmUgdG8gYXN5bmNocm9ub3VzDQpub3RpZmljYXRpb25zIG9mIHRoZSBhdHRh Y2sgbWl0aWdhdGlvbiwgYXMgZGV0YWlsZWQgaW4NClNlY3Rpb24gNC40LjIuMSBvZiBbSS1ELmll dGYtZG90cy1zaWduYWwtY2hhbm5lbF0uIElmIG5vdCwgdGhlDQpwb2xsaW5nIG1lY2hhbmlzbSBp biBTZWN0aW9uIDQuNC4yLjIgb2YNCltJLUQuaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsXSBoYXMg dG8gYmUgZm9sbG93ZWQgYnkgdGhlIERPVFMgY2xpZW50Lg0KDQoNCg0KSGVyZSB5b3UgaGF2ZSBs aXN0ZWQgdHdvIHdheXMgZm9yIGEgRE9UUyBjbGllbnQgdG8gZm9sbG93LiBTaW5jZSB5b3UgdXNl ZCDigJxoYXMgdG/igJ0gdG8gaW5kaWNhdGUgdGhhdCBET1RTIGNsaWVudCBtdXN0IGZvbGxvdyB0 aGUgcG9sbGluZyBtZWNoYW5pc20gd2hlbiBpdCBkb2VzbuKAmXQgZm9sbG93IHRoZSBSRUNPTU1F TkRFRCB3YXksIHdvdWxkIGl0IGJlIGJldHRlciBmb3IgY2hhbmdpbmcg4oCcaGFzIHRv4oCdIHRv IOKAnE1VU1TigJ0/DQoNCg0KDQoNCkEgRE9UUyBjbGllbnQgTVVTVCBOT1QgdXNlIHRoZSBmaWx0 ZXJpbmcgY29udHJvbCBvdmVyIERPVFMgc2lnbmFsDQpjaGFubmVsIGlmIG5vIGF0dGFjayAobWl0 aWdhdGlvbikgaXMgYWN0aXZlLiBCeSBkZWZhdWx0LCBBQ0wtcmVsYXRlZA0Kb3BlcmF0aW9ucyBh cmUgYWNoaWV2ZWQgdXNpbmcgdGhlIERPVFMgZGF0YSBjaGFubmVsDQpbSS1ELmlldGYtZG90cy1k YXRhLWNoYW5uZWxdIHdoZW4gbm8gYXR0YWNrIGlzIG9uZ29pbmcuDQoNCg0KDQpUaG91Z2ggd2Ug aGF2ZSBnaXZlbiB0aGUgcHJpbmNpcGxlIGZvciB0aGUgRE9UUyBjbGllbnQgdG8gZm9sbG93LCBi dXQgd2UgZG9u4oCZdCBnaXZlIGEgY29ycmVzcG9uZGluZyBwcmluY2lwbGUgZm9yIHRoZSBET1RT IHNlcnZlciB0byBjaGVjay4gSWYgdGhlIERPVFMgY2xpZW50IGlzIG1pc2JlaGF2ZWQgYW5kIHRo ZSBET1RTIHNlcnZlciBkb2VzbuKAmXQgY2hlY2ssIHRoZW4gbmV3IHNlY3VyaXR5IGlzc3VlcyBt YXkgYXJpc2UuDQoNCkRvIHdlIHdhbnQgdG8gYWRkIHNvbWUgcnVsZXMgYW5kIG1ldGhvZHMgZm9y IHRoZSBET1RTIHNlcnZlciB0byBjaGVjaywgb3IgZGVzY3JpYmUgdGhpcyBwb3RlbnRpYWwgdGhy ZWF0IGluIHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBDaGFwdGVyPw0KDQoNCg0KDQoNCkJl c3QgUmVnYXJkcw0KDQpXZWkgUGFuDQoNCg0K --_000_30E95A901DB42F44BA42D69DB20DFA6A6093C342nkgeml513mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk65a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZv bnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAz IDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA5a6L5L2TIjsNCglw YW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 R2FkdWdpOw0KCXBhbm9zZS0xOjIgMTEgNSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmlu aXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21h cmdpbi10b3A6MS41cHQ7DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltYXJnaW4tYm90dG9tOjEuNXB0 Ow0KCW1hcmdpbi1sZWZ0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJbXNvLXBh cmEtbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7DQoJbXNv LXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFpblRleHQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiLnuq/mlofmnKwgQ2hh ciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFy Z2luLXRvcDouM2dkOw0KCW1zby1wYXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFy Z2luLWJvdHRvbTowY207DQoJbXNvLXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCW1zby1wYXJhLW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJH YWR1Z2kiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5DaGFyDQoJe21zby1zdHlsZS1uYW1lOiLnuq/mlofm nKwgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOue6r+aW h+acrDsNCglmb250LWZhbWlseToiR2FkdWdpIixzYW5zLXNlcmlmO30NCi5Nc29DaHBEZWZhdWx0 DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCi5Nc29QYXBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5 Ow0KCW1hcmdpbi10b3A6MS41cHQ7DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltYXJnaW4tYm90dG9t OjEuNXB0Ow0KCW1hcmdpbi1sZWZ0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJ bXNvLXBhcmEtbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7 DQoJbXNvLXBhcmEtbWFyZ2luLWxlZnQ6MGNtO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXpl OjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDExOS4ycHQgNzIuMHB0IDExOS4xNXB0 O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYg Y2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFy Z2luLXRvcDozLjZwdCI+SGkgTWVkLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPkkgaGF2ZSByZWFk IHRoZSBsYXRlc3QgdmVyc2lvbiBhbmQgSSBoYXZlIDIgY29tbWVudHMgb24gaXQuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdp bi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9y OmJsYWNrIj5JdCBpcyBSRUNPTU1FTkRFRCBmb3IgYSBET1RTIGNsaWVudCB0byBzdWJzY3JpYmUg dG8gYXN5bmNocm9ub3VzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4t Ym90dG9tOjBjbTttYXJnaW4tbGVmdDoxNC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQt YXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6Q291cmllcjtjb2xvcjpibGFjayI+bm90aWZpY2F0aW9ucyBvZiB0aGUgYXR0YWNrIG1pdGln YXRpb24sIGFzIGRldGFpbGVkIGluPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTtt YXJnaW4tYm90dG9tOjBjbTttYXJnaW4tbGVmdDoxNC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0 O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+U2VjdGlvbiA0LjQuMi4xIG9mIFtJLUQuaWV0 Zi1kb3RzLXNpZ25hbC1jaGFubmVsXS4gSWYgbm90LCB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBjbTttYXJn aW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4t Ym90dG9tOi4wMDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5wb2xsaW5nIG1lY2hh bmlzbSBpbiBTZWN0aW9uIDQuNC4yLjIgb2Y8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6 MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9tOi4w MDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5bSS1ELmlldGYtZG90cy1zaWduYWwt Y2hhbm5lbF0gaGFzIHRvIGJlIGZvbGxvd2VkIGJ5IHRoZSBET1RTIGNsaWVudC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDoz LjZwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHls ZT0ibWFyZ2luLXRvcDozLjZwdCI+SGVyZSB5b3UgaGF2ZSBsaXN0ZWQgdHdvIHdheXMgZm9yIGEg RE9UUyBjbGllbnQgdG8gZm9sbG93LiBTaW5jZSB5b3UgdXNlZCDigJxoYXMgdG/igJ0gdG8gaW5k aWNhdGUgdGhhdCBET1RTIGNsaWVudCBtdXN0IGZvbGxvdyB0aGUgcG9sbGluZyBtZWNoYW5pc20g d2hlbiBpdCBkb2VzbuKAmXQgZm9sbG93IHRoZSBSRUNPTU1FTkRFRCB3YXksIHdvdWxkIGl0IGJl IGJldHRlcg0KIGZvciBjaGFuZ2luZyDigJxoYXMgdG/igJ0gdG8g4oCcTVVTVOKAnT8gPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0i bWFyZ2luLXRvcDozLjZwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6MGNtO21hcmdp bi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4 dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5BIERPVFMgY2xpZW50IE1VU1QgTk9UIHVzZSB0aGUg ZmlsdGVyaW5nIGNvbnRyb2wgb3ZlciBET1RTIHNpZ25hbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdp bi1yaWdodDowY207bWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1i b3R0b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFjZTpub25lIj4NCjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPmNoYW5uZWwgaWYgbm8g YXR0YWNrIChtaXRpZ2F0aW9uKSBpcyBhY3RpdmUuIEJ5IGRlZmF1bHQsIEFDTC1yZWxhdGVkPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4t bGVmdDoxNC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpi bGFjayI+b3BlcmF0aW9ucyBhcmUgYWNoaWV2ZWQgdXNpbmcgdGhlIERPVFMgZGF0YSBjaGFubmVs PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJn aW4tbGVmdDoxNC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtYXV0b3NwYWNlOm5vbmUi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xv cjpibGFjayI+W0ktRC5pZXRmLWRvdHMtZGF0YS1jaGFubmVsXSB3aGVuIG5vIGF0dGFjayBpcyBv bmdvaW5nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0 eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij5UaG91Z2ggd2UgaGF2ZSBnaXZl biB0aGUgcHJpbmNpcGxlIGZvciB0aGUgRE9UUyBjbGllbnQgdG8gZm9sbG93LCBidXQgd2UgZG9u 4oCZdCBnaXZlIGEgY29ycmVzcG9uZGluZyBwcmluY2lwbGUgZm9yIHRoZSBET1RTIHNlcnZlciB0 byBjaGVjay4gSWYgdGhlIERPVFMgY2xpZW50IGlzIG1pc2JlaGF2ZWQgYW5kIHRoZSBET1RTIHNl cnZlciBkb2VzbuKAmXQgY2hlY2ssDQogdGhlbiBuZXcgc2VjdXJpdHkgaXNzdWVzIG1heSBhcmlz ZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4t dG9wOjMuNnB0Ij5EbyB3ZSB3YW50IHRvIGFkZCBzb21lIHJ1bGVzIGFuZCBtZXRob2RzIGZvciB0 aGUgRE9UUyBzZXJ2ZXIgdG8gY2hlY2ssIG9yIGRlc2NyaWJlIHRoaXMgcG90ZW50aWFsIHRocmVh dCBpbiB0aGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgQ2hhcHRlcj88bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9w OjMuNnB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0 eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij5CZXN0IFJlZ2FyZHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij5XZWkgUGFuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_30E95A901DB42F44BA42D69DB20DFA6A6093C342nkgeml513mbxchi_-- From nobody Fri Jan 25 01:08:41 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9E7C12D4EF for ; Fri, 25 Jan 2019 01:08:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Kx69ejgLSkA for ; Fri, 25 Jan 2019 01:08:38 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0743E127133 for ; Fri, 25 Jan 2019 01:08:38 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id 43mCqm28bgz8tVB; Fri, 25 Jan 2019 10:08:36 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.34]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 43mCqm15pYz1xp8; Fri, 25 Jan 2019 10:08:36 +0100 (CET) Received: from OPEXCAUBM33.corporate.adroot.infra.ftgroup (10.114.13.70) by OPEXCLILM6F.corporate.adroot.infra.ftgroup (10.114.31.34) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 25 Jan 2019 10:08:35 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM33.corporate.adroot.infra.ftgroup ([fe80::c911:d24e:cc19:afa7%21]) with mapi id 14.03.0415.000; Fri, 25 Jan 2019 10:08:35 +0100 From: To: "Panwei (William)" CC: "dots@ietf.org" Thread-Topic: Comments on draft-nishizuka-dots-signal-control-filtering-02 Thread-Index: AdS0grzeCrAKNsORT9O+dXHIsB7wowAByw2A Date: Fri, 25 Jan 2019 09:08:35 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0D99E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <30E95A901DB42F44BA42D69DB20DFA6A6093C342@nkgeml513-mbx.china.huawei.com> In-Reply-To: <30E95A901DB42F44BA42D69DB20DFA6A6093C342@nkgeml513-mbx.china.huawei.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302EA0D99EOPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Comments on draft-nishizuka-dots-signal-control-filtering-02 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 09:08:40 -0000 --_000_787AE7BB302AE849A7480A190F8B93302EA0D99EOPEXCAUBMA2corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUGFuLA0KDQoNCigxKSBXaGF0IGlzIHJlY29tbWVuZGVkIGlzIHRvIGVuYWJsZSBhc3luY2hy b25vdXMgbm90aWYgKGhlbmNlIHRoZSB1c2Ugb2YgdGhlIG5vcm1hdGl2ZSBsYW5ndWFnZSkuIEni gJltIGhlc2l0YXRpbmcgdG8gdXNlIHRoZSBub3JtYXRpdmUgbGFuZ3VhZ2UgZm9yIHRoZSBzZWNv bmQgc2VudGVuY2UuDQoNCigyKSBObyB0ZXh0IHdhcyBpbmNsdWRlZCBhYm91dCB0aGUgRE9UUyBz ZXJ2ZXIgYmVjYXVzZSB3ZSBkbyBhbHJlYWR5IGhhdmUgdGhlIGZvbGxvd2luZyBpbiB0aGUgc2ln bmFsIGNoYW5uZWw6DQoNCiAgIElmIHRoZSByZXF1ZXN0IGlzIG1pc3NpbmcgYSBtYW5kYXRvcnkg YXR0cmlidXRlLCBkb2VzIG5vdCBpbmNsdWRlDQogICAnY3VpZCcgb3IgJ21pZCcgVXJpLVBhdGgg b3B0aW9ucywgaW5jbHVkZXMgbXVsdGlwbGUgJ3Njb3BlJw0KICAgcGFyYW1ldGVycywgb3IgY29u dGFpbnMgaW52YWxpZCBvciB1bmtub3duIHBhcmFtZXRlcnMsIHRoZSBET1RTDQogICAgICAgICAg ICAgICAgICAgICAgICAgICBeXl5eXl5eDQogICBzZXJ2ZXIgTVVTVCByZXBseSB3aXRoIDQuMDAg KEJhZCBSZXF1ZXN0KS4NCg0KQ2FuIHlvdSBwbGVhc2UgZWxhYm9yYXRlIG9uIHRoZSBzZWN1cml0 eSBpc3N1ZXMgeW91IGhhdmUgaW4gbWluZD8gVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpNZWQNCg0K RGUgOiBQYW53ZWkgKFdpbGxpYW0pIFttYWlsdG86d2lsbGlhbS5wYW53ZWlAaHVhd2VpLmNvbV0N CkVudm95w6kgOiB2ZW5kcmVkaSAyNSBqYW52aWVyIDIwMTkgMDg6NTgNCsOAIDogQk9VQ0FEQUlS IE1vaGFtZWQgVEdJL09MTg0KQ2MgOiBkb3RzQGlldGYub3JnDQpPYmpldCA6IENvbW1lbnRzIG9u IGRyYWZ0LW5pc2hpenVrYS1kb3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMg0KDQoNCkhp IE1lZCwNCg0KDQoNCkkgaGF2ZSByZWFkIHRoZSBsYXRlc3QgdmVyc2lvbiBhbmQgSSBoYXZlIDIg Y29tbWVudHMgb24gaXQuDQoNCg0KSXQgaXMgUkVDT01NRU5ERUQgZm9yIGEgRE9UUyBjbGllbnQg dG8gc3Vic2NyaWJlIHRvIGFzeW5jaHJvbm91cw0Kbm90aWZpY2F0aW9ucyBvZiB0aGUgYXR0YWNr IG1pdGlnYXRpb24sIGFzIGRldGFpbGVkIGluDQpTZWN0aW9uIDQuNC4yLjEgb2YgW0ktRC5pZXRm LWRvdHMtc2lnbmFsLWNoYW5uZWxdLiBJZiBub3QsIHRoZQ0KcG9sbGluZyBtZWNoYW5pc20gaW4g U2VjdGlvbiA0LjQuMi4yIG9mDQpbSS1ELmlldGYtZG90cy1zaWduYWwtY2hhbm5lbF0gaGFzIHRv IGJlIGZvbGxvd2VkIGJ5IHRoZSBET1RTIGNsaWVudC4NCg0KDQoNCkhlcmUgeW91IGhhdmUgbGlz dGVkIHR3byB3YXlzIGZvciBhIERPVFMgY2xpZW50IHRvIGZvbGxvdy4gU2luY2UgeW91IHVzZWQg 4oCcaGFzIHRv4oCdIHRvIGluZGljYXRlIHRoYXQgRE9UUyBjbGllbnQgbXVzdCBmb2xsb3cgdGhl IHBvbGxpbmcgbWVjaGFuaXNtIHdoZW4gaXQgZG9lc27igJl0IGZvbGxvdyB0aGUgUkVDT01NRU5E RUQgd2F5LCB3b3VsZCBpdCBiZSBiZXR0ZXIgZm9yIGNoYW5naW5nIOKAnGhhcyB0b+KAnSB0byDi gJxNVVNU4oCdPw0KDQoNCg0KDQpBIERPVFMgY2xpZW50IE1VU1QgTk9UIHVzZSB0aGUgZmlsdGVy aW5nIGNvbnRyb2wgb3ZlciBET1RTIHNpZ25hbA0KY2hhbm5lbCBpZiBubyBhdHRhY2sgKG1pdGln YXRpb24pIGlzIGFjdGl2ZS4gQnkgZGVmYXVsdCwgQUNMLXJlbGF0ZWQNCm9wZXJhdGlvbnMgYXJl IGFjaGlldmVkIHVzaW5nIHRoZSBET1RTIGRhdGEgY2hhbm5lbA0KW0ktRC5pZXRmLWRvdHMtZGF0 YS1jaGFubmVsXSB3aGVuIG5vIGF0dGFjayBpcyBvbmdvaW5nLg0KDQoNCg0KVGhvdWdoIHdlIGhh dmUgZ2l2ZW4gdGhlIHByaW5jaXBsZSBmb3IgdGhlIERPVFMgY2xpZW50IHRvIGZvbGxvdywgYnV0 IHdlIGRvbuKAmXQgZ2l2ZSBhIGNvcnJlc3BvbmRpbmcgcHJpbmNpcGxlIGZvciB0aGUgRE9UUyBz ZXJ2ZXIgdG8gY2hlY2suIElmIHRoZSBET1RTIGNsaWVudCBpcyBtaXNiZWhhdmVkIGFuZCB0aGUg RE9UUyBzZXJ2ZXIgZG9lc27igJl0IGNoZWNrLCB0aGVuIG5ldyBzZWN1cml0eSBpc3N1ZXMgbWF5 IGFyaXNlLg0KDQpEbyB3ZSB3YW50IHRvIGFkZCBzb21lIHJ1bGVzIGFuZCBtZXRob2RzIGZvciB0 aGUgRE9UUyBzZXJ2ZXIgdG8gY2hlY2ssIG9yIGRlc2NyaWJlIHRoaXMgcG90ZW50aWFsIHRocmVh dCBpbiB0aGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgQ2hhcHRlcj8NCg0KDQoNCg0KDQpCZXN0 IFJlZ2FyZHMNCg0KV2VpIFBhbg0KDQoNCg== --_000_787AE7BB302AE849A7480A190F8B93302EA0D99EOPEXCAUBMA2corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOnA9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206 b2ZmaWNlOnBvd2VycG9pbnQiIHhtbG5zOmE9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOmFjY2VzcyIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVCMy0xMWQxLUEyOUYtMDBBQTAw QzE0ODgyIiB4bWxuczpzPSJ1dWlkOkJEQzZFM0YwLTZEQTMtMTFkMS1BMkEzLTAwQUEwMEMxNDg4 MiIgeG1sbnM6cnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206cm93c2V0IiB4bWxuczp6PSIj Um93c2V0U2NoZW1hIiB4bWxuczpiPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpw dWJsaXNoZXIiIHhtbG5zOnNzPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzcHJl YWRzaGVldCIgeG1sbnM6Yz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6Y29tcG9u ZW50OnNwcmVhZHNoZWV0IiB4bWxuczpvZGM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOm9kYyIgeG1sbnM6b2E9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOmFjdGl2 YXRpb24iIHhtbG5zOmh0bWw9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIHhtbG5z OnE9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3NvYXAvZW52ZWxvcGUvIiB4bWxuczpydGM9 Imh0dHA6Ly9taWNyb3NvZnQuY29tL29mZmljZW5ldC9jb25mZXJlbmNpbmciIHhtbG5zOkQ9IkRB VjoiIHhtbG5zOlJlcGw9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vcmVwbC8iIHhtbG5z Om10PSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC9tZWV0aW5n cy8iIHhtbG5zOngyPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS9leGNlbC8y MDAzL3htbCIgeG1sbnM6cHBkYT0iaHR0cDovL3d3dy5wYXNzcG9ydC5jb20vTmFtZVNwYWNlLnhz ZCIgeG1sbnM6b2lzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29h cC9vaXMvIiB4bWxuczpkaXI9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9zb2FwL2RpcmVjdG9yeS8iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjIiB4bWxuczpkc3A9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9kc3AiIHhtbG5zOnVkYz0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYyIg eG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6c3ViPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC8yMDAyLzEvYWxlcnRz LyIgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgeG1sbnM6c3A9 Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC8iIHhtbG5zOnNwcz0iaHR0 cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvIiB4bWxuczp4c2k9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp1ZGNzPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3NvYXAiIHhtbG5zOnVkY3hmPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3htbGZpbGUiIHhtbG5zOnVkY3AycD0i aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYy9wYXJ0dG9wYXJ0IiB4bWxuczp3 Zj0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvd29ya2Zsb3cv IiB4bWxuczpkc3NzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA2L2Rp Z3NpZy1zZXR1cCIgeG1sbnM6ZHNzaT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZp Y2UvMjAwNi9kaWdzaWciIHhtbG5zOm1kc3NpPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0 cy5vcmcvcGFja2FnZS8yMDA2L2RpZ2l0YWwtc2lnbmF0dXJlIiB4bWxuczptdmVyPSJodHRwOi8v c2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcvbWFya3VwLWNvbXBhdGliaWxpdHkvMjAwNiIgeG1s bnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4 bWxuczptcmVscz0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3JnL3BhY2thZ2UvMjAw Ni9yZWxhdGlvbnNoaXBzIiB4bWxuczpzcHdwPSJodHRwOi8vbWljcm9zb2Z0LmNvbS9zaGFyZXBv aW50L3dlYnBhcnRwYWdlcyIgeG1sbnM6ZXgxMnQ9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi90eXBlcyIgeG1sbnM6ZXgxMm09Imh0dHA6Ly9zY2hl bWFzLm1pY3Jvc29mdC5jb20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi9tZXNzYWdlcyIgeG1sbnM6 cHB0c2w9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC9zb2FwL1NsaWRl TGlicmFyeS8iIHhtbG5zOnNwc2w9Imh0dHA6Ly9taWNyb3NvZnQuY29tL3dlYnNlcnZpY2VzL1No YXJlUG9pbnRQb3J0YWxTZXJ2ZXIvUHVibGlzaGVkTGlua3NTZXJ2aWNlIiB4bWxuczpaPSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOiIgeG1sbnM6dGF4PSJodHRwOi8vc2NoZW1hcy5taWNyb3Nv ZnQuY29tL3NoYXJlcG9pbnQvdGF4b25vbXkvc29hcC8iIHhtbG5zOnRucz0iaHR0cDovL3NjaGVt YXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvcmVjb3Jkc3JlcG9zaXRvcnkvIiB4bWxu czpzcHN1cD0iaHR0cDovL21pY3Jvc29mdC5jb20vd2Vic2VydmljZXMvU2hhcmVQb2ludFBvcnRh bFNlcnZlci9Vc2VyUHJvZmlsZVNlcnZpY2UiIHhtbG5zOm1tbD0iaHR0cDovL3d3dy53My5vcmcv MTk5OC9NYXRoL01hdGhNTCIgeG1sbnM6c3Q9IiYjMTsiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9y Zy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBl IiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT0iR2VuZXJh dG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5 bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgNyA0IDkgMiAyIDUgMiA0IDQ7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgNyA0IDkgMiAyIDUgMiA0IDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29s YXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseTpHYWR1Z2k7DQoJcGFub3NlLTE6MiAxMSA1IDIgNCAyIDQgMiAyIDM7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFy Z2luLXRvcDouM2dkOw0KCW1zby1wYXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFy Z2luLWJvdHRvbTouM2dkOw0KCW1zby1wYXJhLW1hcmdpbi1sZWZ0OjBjbTsNCgltc28tcGFyYS1t YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0 eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLk1zb1BsYWluVGV4dCwgbGkuTXNvUGxhaW5UZXh0LCBkaXYuTXNvUGxhaW5UZXh0 DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiVGV4dGUgYnJ1dCBD YXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCW1zby1wYXJhLW1h cmdpbi10b3A6LjNnZDsNCgltc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1wYXJhLW1h cmdpbi1ib3R0b206MGNtOw0KCW1zby1wYXJhLW1hcmdpbi1sZWZ0OjBjbTsNCgltc28tcGFyYS1t YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi R2FkdWdpIiwic2Fucy1zZXJpZiI7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBk aXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRv cDowY207DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltYXJnaW4tYm90dG9tOjBjbTsNCgltYXJnaW4t bGVmdDozNi4wcHQ7DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCW1zby1wYXJhLW1hcmdpbi10 b3A6LjNnZDsNCgltc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1wYXJhLW1hcmdpbi1i b3R0b206LjNnZDsNCgltc28tcGFyYS1tYXJnaW4tbGVmdDozNi4wcHQ7DQoJbXNvLXBhcmEtbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLlRleHRlYnJ1dENhcg0KCXttc28tc3R5bGUtbmFt ZToiVGV4dGUgYnJ1dCBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUt bGluazoiVGV4dGUgYnJ1dCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0KcC5hLCBsaS5hLCBk aXYuYQ0KCXttc28tc3R5bGUtbmFtZTrnuq/mlofmnKw7DQoJbXNvLXN0eWxlLWxpbms6Iue6r+aW h+acrCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCgltc28t cGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJbXNvLXBhcmEtbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28t cGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7DQoJbXNvLXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCW1z by1wYXJhLW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5DaGFyDQoJe21zby1zdHlsZS1u YW1lOiLnuq/mlofmnKwgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHls ZS1saW5rOue6r+aWh+acrDsNCglmb250LWZhbWlseToiR2FkdWdpIiwic2Fucy1zZXJpZiI7fQ0K c3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3Jt YWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5QcmZvcm1hdEhUTUxDYXINCgl7bXNvLXN0 eWxlLW5hbWU6IlByw6lmb3JtYXTDqSBIVE1MIENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCW1zby1zdHlsZS1saW5rOiJQcsOpZm9ybWF0w6kgSFRNTCI7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4w cHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDExOS4ycHQgNzIuMHB0IDExOS4xNXB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9u cyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTg0NTMxODQ5MTsNCgltc28tbGlzdC10eXBl Omh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTgwNjMwOTg1NCAtNDI3MTA2OTQwIDY3 ODk1MzIxIDY3ODk1MzIzIDY3ODk1MzExIDY3ODk1MzIxIDY3ODk1MzIzIDY3ODk1MzExIDY3ODk1 MzIxIDY3ODk1MzIzO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtdGV4dDoiXCglMVwp IjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTguMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxp c3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN CgltYXJnaW4tbGVmdDo1NC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDps ZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgltYXJn aW4tbGVmdDo5MC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwwOmxldmVsNA0K CXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJbWFyZ2luLWxlZnQ6MTI2LjBwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0 IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ bWFyZ2luLWxlZnQ6MTYyLjBwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0IGwwOmxl dmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCW1hcmdp bi1sZWZ0OjE5OC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwwOmxldmVsNw0K CXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJbWFyZ2luLWxlZnQ6MjM0LjBwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0 IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ bWFyZ2luLWxlZnQ6MjcwLjBwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0IGwwOmxl dmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCW1hcmdp bi1sZWZ0OjMwNi4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0 b206MGNtO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGNtO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIx MDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxh bmc9IkZSIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6 MGNtIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5IaSBQYW4sPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDtt YXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJn aW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MTguMHB0O3RleHQt aW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRM aXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNv LWxpc3Q6SWdub3JlIj4oMSk8L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+V2hhdCBpcyByZWNvbW1lbmRlZCBpcyB0byBlbmFi bGUgYXN5bmNocm9ub3VzIG5vdGlmIChoZW5jZSB0aGUgdXNlIG9mIHRoZSBub3JtYXRpdmUgbGFu Z3VhZ2UpLiBJ4oCZbSBoZXNpdGF0aW5nIHRvIHVzZSB0aGUgbm9ybWF0aXZlIGxhbmd1YWdlIGZv ciB0aGUgc2Vjb25kIHNlbnRlbmNlLg0KPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0 O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDoxOC4wcHQ7 dGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAhc3Vw cG9ydExpc3RzXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxl PSJtc28tbGlzdDpJZ25vcmUiPigyKTwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjpibGFjayI+IE5vIHRleHQgd2FzIGluY2x1ZGVkDQogYWJvdXQgdGhl IERPVFMgc2VydmVyIGJlY2F1c2Ugd2UgZG8gYWxyZWFkeSBoYXZlIHRoZSBmb2xsb3dpbmcgaW4g dGhlIHNpZ25hbCBjaGFubmVsOg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNt O21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42 cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7SWYgdGhlIHJlcXVlc3QgaXMgbWlzc2luZyBhIG1hbmRhdG9yeSBhdHRyaWJ1dGUsIGRv ZXMgbm90IGluY2x1ZGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyAnY3VpZCcgb3IgJ21pZCcgVXJp LVBhdGggb3B0aW9ucywgaW5jbHVkZXMgbXVsdGlwbGUgJ3Njb3BlJzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7IHBhcmFtZXRlcnMsIG9yIGNvbnRhaW5zIGludmFsaWQgb3IgdW5rbm93biBwYXJhbWV0 ZXJzLCB0aGUgRE9UUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IF5eXl5eXl48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFy Z2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDowY20iPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsmbmJzcDsgc2VydmVyIE1VU1QgcmVwbHkgd2l0aCA0LjAwIChCYWQgUmVxdWVzdCku PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42cHQ7 bWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42 cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ Q2FuIHlvdSBwbGVhc2UgZWxhYm9yYXRlIG9uIHRoZSBzZWN1cml0eSBpc3N1ZXMgeW91IGhhdmUg aW4gbWluZD8gVGhhbmsgeW91Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNt O21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6 MGNtO21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+Q2hlZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJp Z2h0OjBjbTttYXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjBjbSI+DQo8c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJp Z2h0OjBjbTttYXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjBjbSI+DQo8c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGlu ZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+IFBhbndlaSAoV2lsbGlhbSkgW21haWx0bzp3aWxsaWFtLnBhbndlaUBodWF3 ZWkuY29tXQ0KPGJyPg0KPGI+RW52b3nDqSZuYnNwOzo8L2I+IHZlbmRyZWRpIDI1IGphbnZpZXIg MjAxOSAwODo1ODxicj4NCjxiPsOAJm5ic3A7OjwvYj4gQk9VQ0FEQUlSIE1vaGFtZWQgVEdJL09M PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rh aG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5OPGJyPg0KPGI+Q2MmbmJzcDs6PC9i PiBkb3RzQGlldGYub3JnPGJyPg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBDb21tZW50cyBvbiBkcmFm dC1uaXNoaXp1a2EtZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDI8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42 cHQ7bWFyZ2luLWxlZnQ6MGNtIj4NCjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5I aSBNZWQsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5 bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDoz LjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPkkgaGF2ZSByZWFkIHRoZSBsYXRlc3QgdmVyc2lvbiBh bmQgSSBoYXZlIDIgY29tbWVudHMgb24gaXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJv dHRvbTozLjZwdDttYXJnaW4tbGVmdDoxNC4ycHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmll cjtjb2xvcjpibGFjayI+SXQgaXMgUkVDT01NRU5ERUQgZm9yIGEgRE9UUyBjbGllbnQgdG8gc3Vi c2NyaWJlIHRvIGFzeW5jaHJvbm91czxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBj bTttYXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjE0LjJwdDt0ZXh0LWF1dG9zcGFjZTpu b25lIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5ub3RpZmljYXRpb25zIG9mIHRoZSBhdHRhY2sgbWl0 aWdhdGlvbiwgYXMgZGV0YWlsZWQgaW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDow Y207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDoxNC4ycHQ7dGV4dC1hdXRvc3BhY2U6 bm9uZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+U2VjdGlvbiA0LjQuMi4xIG9mIFtJLUQuaWV0Zi1k b3RzLXNpZ25hbC1jaGFubmVsXS4gSWYgbm90LCB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdp bi1yaWdodDowY207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDoxNC4ycHQ7dGV4dC1h dXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+cG9sbGluZyBtZWNoYW5pc20gaW4g U2VjdGlvbiA0LjQuMi4yIG9mPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21h cmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MTQuMnB0O3RleHQtYXV0b3NwYWNlOm5vbmUi Pg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OkNvdXJpZXI7Y29sb3I6YmxhY2siPltJLUQuaWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsXSBoYXMg dG8gYmUgZm9sbG93ZWQgYnkgdGhlIERPVFMgY2xpZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBs YW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5IZXJl IHlvdSBoYXZlIGxpc3RlZCB0d28gd2F5cyBmb3IgYSBET1RTIGNsaWVudCB0byBmb2xsb3cuIFNp bmNlIHlvdSB1c2VkIOKAnGhhcyB0b+KAnSB0byBpbmRpY2F0ZSB0aGF0IERPVFMgY2xpZW50IG11 c3QgZm9sbG93IHRoZSBwb2xsaW5nIG1lY2hhbmlzbSB3aGVuIGl0IGRvZXNu4oCZdCBmb2xsb3cg dGhlIFJFQ09NTUVOREVEIHdheSwNCiB3b3VsZCBpdCBiZSBiZXR0ZXIgZm9yIGNoYW5naW5nIOKA nGhhcyB0b+KAnSB0byDigJxNVVNU4oCdPyA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi IHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2lu LWxlZnQ6MTQuMnB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPkEg RE9UUyBjbGllbnQgTVVTVCBOT1QgdXNlIHRoZSBmaWx0ZXJpbmcgY29udHJvbCBvdmVyIERPVFMg c2lnbmFsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206 My42cHQ7bWFyZ2luLWxlZnQ6MTQuMnB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29s b3I6YmxhY2siPmNoYW5uZWwgaWYgbm8gYXR0YWNrIChtaXRpZ2F0aW9uKSBpcyBhY3RpdmUuIEJ5 IGRlZmF1bHQsIEFDTC1yZWxhdGVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNt O21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MTQuMnB0O3RleHQtYXV0b3NwYWNlOm5v bmUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPm9wZXJhdGlvbnMgYXJlIGFjaGlldmVkIHVzaW5nIHRo ZSBET1RTIGRhdGEgY2hhbm5lbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBjbTtt YXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjE0LjJwdDt0ZXh0LWF1dG9zcGFjZTpub25l Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5bSS1ELmlldGYtZG90cy1kYXRhLWNoYW5uZWxdIHdoZW4g bm8gYXR0YWNrIGlzIG9uZ29pbmcuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHls ZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRob3VnaCB3ZSBoYXZlIGdp dmVuIHRoZSBwcmluY2lwbGUgZm9yIHRoZSBET1RTIGNsaWVudCB0byBmb2xsb3csIGJ1dCB3ZSBk b27igJl0IGdpdmUgYSBjb3JyZXNwb25kaW5nIHByaW5jaXBsZSBmb3IgdGhlIERPVFMgc2VydmVy IHRvIGNoZWNrLiBJZiB0aGUgRE9UUyBjbGllbnQgaXMgbWlzYmVoYXZlZCBhbmQgdGhlIERPVFMg c2VydmVyDQogZG9lc27igJl0IGNoZWNrLCB0aGVuIG5ldyBzZWN1cml0eSBpc3N1ZXMgbWF5IGFy aXNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxl PSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+RG8gd2Ugd2FudCB0byBhZGQg c29tZSBydWxlcyBhbmQgbWV0aG9kcyBmb3IgdGhlIERPVFMgc2VydmVyIHRvIGNoZWNrLCBvciBk ZXNjcmliZSB0aGlzIHBvdGVudGlhbCB0aHJlYXQgaW4gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRp b25zIENoYXB0ZXI/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2lu LXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3Bh biBsYW5nPSJFTi1VUyI+QmVzdCBSZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVO LVVTIj5XZWkgUGFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_787AE7BB302AE849A7480A190F8B93302EA0D99EOPEXCAUBMA2corp_-- From nobody Fri Jan 25 02:19:50 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD53A12D4EF for ; Fri, 25 Jan 2019 02:19:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TDcqDVl5z1vY for ; Fri, 25 Jan 2019 02:19:45 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F7551294D0 for ; Fri, 25 Jan 2019 02:19:45 -0800 (PST) Received: from lhreml705-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id A3FE9913337BD6CE6A87 for ; Fri, 25 Jan 2019 10:19:43 +0000 (GMT) Received: from NKGEML414-HUB.china.huawei.com (10.98.56.75) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 25 Jan 2019 10:19:42 +0000 Received: from NKGEML513-MBX.china.huawei.com ([169.254.1.167]) by nkgeml414-hub.china.huawei.com ([10.98.56.75]) with mapi id 14.03.0415.000; Fri, 25 Jan 2019 18:19:39 +0800 From: "Panwei (William)" To: "mohamed.boucadair@orange.com" CC: "dots@ietf.org" Thread-Topic: Comments on draft-nishizuka-dots-signal-control-filtering-02 Thread-Index: AdS0grzeCrAKNsORT9O+dXHIsB7wowAByw2AAAGTcGA= Date: Fri, 25 Jan 2019 10:19:38 +0000 Message-ID: <30E95A901DB42F44BA42D69DB20DFA6A6093C37F@nkgeml513-mbx.china.huawei.com> References: <30E95A901DB42F44BA42D69DB20DFA6A6093C342@nkgeml513-mbx.china.huawei.com> <787AE7BB302AE849A7480A190F8B93302EA0D99E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA0D99E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.37.117] Content-Type: multipart/alternative; boundary="_000_30E95A901DB42F44BA42D69DB20DFA6A6093C37Fnkgeml513mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Dots] Comments on draft-nishizuka-dots-signal-control-filtering-02 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 10:19:49 -0000 --_000_30E95A901DB42F44BA42D69DB20DFA6A6093C37Fnkgeml513mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWVkLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQmVzdCBSZWdhcmRzDQpXZWkgUGFuDQoN CkZyb206IG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gW21haWx0bzptb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tXQ0KU2VudDogRnJpZGF5LCBKYW51YXJ5IDI1LCAyMDE5IDU6MDkgUE0N ClRvOiBQYW53ZWkgKFdpbGxpYW0pIDx3aWxsaWFtLnBhbndlaUBodWF3ZWkuY29tPg0KQ2M6IGRv dHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBDb21tZW50cyBvbiBkcmFmdC1uaXNoaXp1a2EtZG90 cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDINCg0KSGkgUGFuLA0KDQoNCigxKVdoYXQgaXMg cmVjb21tZW5kZWQgaXMgdG8gZW5hYmxlIGFzeW5jaHJvbm91cyBub3RpZiAoaGVuY2UgdGhlIHVz ZSBvZiB0aGUgbm9ybWF0aXZlIGxhbmd1YWdlKS4gSeKAmW0gaGVzaXRhdGluZyB0byB1c2UgdGhl IG5vcm1hdGl2ZSBsYW5ndWFnZSBmb3IgdGhlIHNlY29uZCBzZW50ZW5jZS4NCg0KW1dlaV0gQmVj YXVzZSB0aGVyZSBhcmUgb25seSB0d28gd2F5cyB0aGF0IHlvdSBoYXZlIGxpc3RlZCBmb3IgdGhl IERPVFMgY2xpZW50IHRvIGNob29zZSwgaWYgdGhlIERPVFMgY2xpZW50IGRvZXNu4oCZdCBjaG9v c2UgdGhlIHJlY29tbWVuZGVkIHdheSwgdGhlbiBpdCBtdXN0IGNob29zZSB0aGUgb3RoZXIgd2F5 Lg0KVW5sZXNzIHRoZXJlIGlzIGEgdGhpcmQgd2F5LCBvdGhlcndpc2UgdGhlIG1lYW5pbmcgaGVy ZSBpcyBub3JtYXRpdmUgZXZlbiB0aG91Z2ggeW91IGRvbuKAmXQgdXNlIGEgbm9ybWF0aXZlIGxh bmd1YWdlLg0KSXMgdGhlcmUgYSB0aGlyZCB3YXk/IElmIG5vdCwgdGhlIG5vcm1hdGl2ZSBsYW5n dWFnZSBpcyBhcHByb3ByaWF0ZSwgSU1PLg0KDQoNCigyKU5vIHRleHQgd2FzIGluY2x1ZGVkIGFi b3V0IHRoZSBET1RTIHNlcnZlciBiZWNhdXNlIHdlIGRvIGFscmVhZHkgaGF2ZSB0aGUgZm9sbG93 aW5nIGluIHRoZSBzaWduYWwgY2hhbm5lbDoNCg0KICAgSWYgdGhlIHJlcXVlc3QgaXMgbWlzc2lu ZyBhIG1hbmRhdG9yeSBhdHRyaWJ1dGUsIGRvZXMgbm90IGluY2x1ZGUNCiAgICdjdWlkJyBvciAn bWlkJyBVcmktUGF0aCBvcHRpb25zLCBpbmNsdWRlcyBtdWx0aXBsZSAnc2NvcGUnDQogICBwYXJh bWV0ZXJzLCBvciBjb250YWlucyBpbnZhbGlkIG9yIHVua25vd24gcGFyYW1ldGVycywgdGhlIERP VFMNCiAgICAgICAgICAgICAgICAgICAgICAgICAgIF5eXl5eXl4NCiAgIHNlcnZlciBNVVNUIHJl cGx5IHdpdGggNC4wMCAoQmFkIFJlcXVlc3QpLg0KDQpbV2VpXSBJIHRoaW5rIGFkZGluZyBhIHJl ZmVyZW5jZSB0byB0aGlzIGNhbiBtYWtlIHRoZSBjb250cm9sLWZpbHRlcmluZyBkcmFmdCBtb3Jl IHJlYWRhYmxlLg0KDQpDYW4geW91IHBsZWFzZSBlbGFib3JhdGUgb24gdGhlIHNlY3VyaXR5IGlz c3VlcyB5b3UgaGF2ZSBpbiBtaW5kPyBUaGFuayB5b3UuDQoNCltXZWldIFBsZWFzZSBmb3JnZXQg dGhpcywgSSBkaWRu4oCZdCB0aGluayBjbGVhcmx5IGF0IHRoZSBiZWdpbm5pbmcuDQpBdCBmaXJz dCwgSSB0aG91Z2h0IHRoZSBtaXNiZWhhdmVkIERPVFMgY2xpZW50IG1pZ2h0IGFidXNlIHRoZSBz aWduYWwgY2hhbm5lbCB0byBzZW5kIGFjbC1saXN0IGNvbnRpbnVvdXNseSwgYW5kIHRoaXMgbWln aHQgY2F1c2UgdGhlIHNpZ25hbCBjaGFubmVsIGphbW1lZC4gT3IgdGhlIGNsaWVudCBtaWdodCBl bmFibGUgYW5kIGRpc2FibGUgdGhlIGFjbC1saXN0IGFsdGVybmF0ZWx5IGFuZCBjb250aW51b3Vz bHksIGFuZCB0aGlzIG1pZ2h0IGNhdXNlIHRoZSBzZXJ2ZXIgYnVzeS4NCkJ1dCB0aGVzZSBhcmUg YWxsIG5vdCBuZXcgaXNzdWVzLCB0aGVzZSBpc3N1ZXMgYWxzbyBleGlzdCBiZWZvcmUsIG9ubHkg dGhlcmUgaXMgbm8gYWNsLWxpc3QgaW5jbHVkZWQgaW4gdGhlIHJlcXVlc3QgbWVzc2FnZXMuDQoN CkNoZWVycywNCk1lZA0KDQpEZSA6IFBhbndlaSAoV2lsbGlhbSkgW21haWx0bzp3aWxsaWFtLnBh bndlaUBodWF3ZWkuY29tXQ0KRW52b3nDqSA6IHZlbmRyZWRpIDI1IGphbnZpZXIgMjAxOSAwODo1 OA0Kw4AgOiBCT1VDQURBSVIgTW9oYW1lZCBUR0kvT0xODQpDYyA6IGRvdHNAaWV0Zi5vcmc8bWFp bHRvOmRvdHNAaWV0Zi5vcmc+DQpPYmpldCA6IENvbW1lbnRzIG9uIGRyYWZ0LW5pc2hpenVrYS1k b3RzLXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMg0KDQoNCkhpIE1lZCwNCg0KDQoNCkkgaGF2 ZSByZWFkIHRoZSBsYXRlc3QgdmVyc2lvbiBhbmQgSSBoYXZlIDIgY29tbWVudHMgb24gaXQuDQoN Cg0KSXQgaXMgUkVDT01NRU5ERUQgZm9yIGEgRE9UUyBjbGllbnQgdG8gc3Vic2NyaWJlIHRvIGFz eW5jaHJvbm91cw0Kbm90aWZpY2F0aW9ucyBvZiB0aGUgYXR0YWNrIG1pdGlnYXRpb24sIGFzIGRl dGFpbGVkIGluDQpTZWN0aW9uIDQuNC4yLjEgb2YgW0ktRC5pZXRmLWRvdHMtc2lnbmFsLWNoYW5u ZWxdLiBJZiBub3QsIHRoZQ0KcG9sbGluZyBtZWNoYW5pc20gaW4gU2VjdGlvbiA0LjQuMi4yIG9m DQpbSS1ELmlldGYtZG90cy1zaWduYWwtY2hhbm5lbF0gaGFzIHRvIGJlIGZvbGxvd2VkIGJ5IHRo ZSBET1RTIGNsaWVudC4NCg0KDQoNCkhlcmUgeW91IGhhdmUgbGlzdGVkIHR3byB3YXlzIGZvciBh IERPVFMgY2xpZW50IHRvIGZvbGxvdy4gU2luY2UgeW91IHVzZWQg4oCcaGFzIHRv4oCdIHRvIGlu ZGljYXRlIHRoYXQgRE9UUyBjbGllbnQgbXVzdCBmb2xsb3cgdGhlIHBvbGxpbmcgbWVjaGFuaXNt IHdoZW4gaXQgZG9lc27igJl0IGZvbGxvdyB0aGUgUkVDT01NRU5ERUQgd2F5LCB3b3VsZCBpdCBi ZSBiZXR0ZXIgZm9yIGNoYW5naW5nIOKAnGhhcyB0b+KAnSB0byDigJxNVVNU4oCdPw0KDQoNCg0K DQpBIERPVFMgY2xpZW50IE1VU1QgTk9UIHVzZSB0aGUgZmlsdGVyaW5nIGNvbnRyb2wgb3ZlciBE T1RTIHNpZ25hbA0KY2hhbm5lbCBpZiBubyBhdHRhY2sgKG1pdGlnYXRpb24pIGlzIGFjdGl2ZS4g QnkgZGVmYXVsdCwgQUNMLXJlbGF0ZWQNCm9wZXJhdGlvbnMgYXJlIGFjaGlldmVkIHVzaW5nIHRo ZSBET1RTIGRhdGEgY2hhbm5lbA0KW0ktRC5pZXRmLWRvdHMtZGF0YS1jaGFubmVsXSB3aGVuIG5v IGF0dGFjayBpcyBvbmdvaW5nLg0KDQoNCg0KVGhvdWdoIHdlIGhhdmUgZ2l2ZW4gdGhlIHByaW5j aXBsZSBmb3IgdGhlIERPVFMgY2xpZW50IHRvIGZvbGxvdywgYnV0IHdlIGRvbuKAmXQgZ2l2ZSBh IGNvcnJlc3BvbmRpbmcgcHJpbmNpcGxlIGZvciB0aGUgRE9UUyBzZXJ2ZXIgdG8gY2hlY2suIElm IHRoZSBET1RTIGNsaWVudCBpcyBtaXNiZWhhdmVkIGFuZCB0aGUgRE9UUyBzZXJ2ZXIgZG9lc27i gJl0IGNoZWNrLCB0aGVuIG5ldyBzZWN1cml0eSBpc3N1ZXMgbWF5IGFyaXNlLg0KDQpEbyB3ZSB3 YW50IHRvIGFkZCBzb21lIHJ1bGVzIGFuZCBtZXRob2RzIGZvciB0aGUgRE9UUyBzZXJ2ZXIgdG8g Y2hlY2ssIG9yIGRlc2NyaWJlIHRoaXMgcG90ZW50aWFsIHRocmVhdCBpbiB0aGUgU2VjdXJpdHkg Q29uc2lkZXJhdGlvbnMgQ2hhcHRlcj8NCg0KDQoNCg0KDQpCZXN0IFJlZ2FyZHMNCg0KV2VpIFBh bg0KDQoNCg== --_000_30E95A901DB42F44BA42D69DB20DFA6A6093C37Fnkgeml513mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk65a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZv bnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAz IDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5v c2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QOWui+S9kyI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkdhZHVnaTsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05v cm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCW1zby1wYXJhLW1hcmdpbi10b3A6LjNnZDsNCgltc28tcGFyYS1t YXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1wYXJhLW1hcmdpbi1ib3R0b206MGNtOw0KCW1zby1wYXJh LW1hcmdpbi1sZWZ0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxp bmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj MDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0 RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1z b1BsYWluVGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ bXNvLXN0eWxlLWxpbms6Iue6r+aWh+acrCBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCgltc28tcGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJbXNvLXBhcmEtbWFy Z2luLXJpZ2h0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOjBjbTsNCgltc28tcGFyYS1t YXJnaW4tbGVmdDowY207DQoJbXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcHJlDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzl vI8gQ2hhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnAuTXNvTGlzdFBhcmFn cmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0 eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1hcmdpbi1yaWdodDowY207DQoJ bWFyZ2luLWJvdHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0Ow0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCgltc28tcGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJbXNvLXBhcmEtbWFyZ2luLXJp Z2h0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOjBjbTsNCgltc28tcGFyYS1tYXJnaW4t bGVmdDozNi4wcHQ7DQoJbXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5IVE1M Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCDpooTorr7moLzlvI8gQ2hhciI7DQoJbXNvLXN0 eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIOmihOiuvuagvOW8jyI7DQoJ Zm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5DaGFyDQoJe21zby1zdHlsZS1uYW1lOiLnuq/m lofmnKwgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOue6 r+aWh+acrDsNCglmb250LWZhbWlseToiR2FkdWdpIixzYW5zLXNlcmlmO30NCnAuVGV4dGVicnV0 LCBsaS5UZXh0ZWJydXQsIGRpdi5UZXh0ZWJydXQNCgl7bXNvLXN0eWxlLW5hbWU6IlRleHRlIGJy dXQiOw0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBicnV0IENhciI7DQoJbWFyZ2luOjBjbTsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFyZ2luLXRvcDouM2dkOw0KCW1zby1w YXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFyZ2luLWJvdHRvbTowY207DQoJbXNv LXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCW1zby1wYXJhLW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30N CnNwYW4uVGV4dGVicnV0Q2FyDQoJe21zby1zdHlsZS1uYW1lOiJUZXh0ZSBicnV0IENhciI7DQoJ bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBicnV0IjsNCglm b250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkVtYWlsU3R5bGUyNA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0K CWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpwLlByZm9ybWF0SFRN TCwgbGkuUHJmb3JtYXRIVE1MLCBkaXYuUHJmb3JtYXRIVE1MDQoJe21zby1zdHlsZS1uYW1lOiJQ csOpZm9ybWF0w6kgSFRNTCI7DQoJbXNvLXN0eWxlLWxpbms6IlByw6lmb3JtYXTDqSBIVE1MIENh ciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFy Z2luLXRvcDouM2dkOw0KCW1zby1wYXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFy Z2luLWJvdHRvbTowY207DQoJbXNvLXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCW1zby1wYXJhLW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uUHJmb3JtYXRIVE1MQ2FyDQoJe21zby1zdHlsZS1u YW1lOiJQcsOpZm9ybWF0w6kgSFRNTCBDYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVw bHk7DQoJZm9udC1mYW1pbHk6IkdhZHVnaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30N Ci5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6 ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0K CW1hcmdpbjo3Mi4wcHQgMTE5LjJwdCA3Mi4wcHQgMTE5LjE1cHQ7fQ0KZGl2LldvcmRTZWN0aW9u MQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBs MA0KCXttc28tbGlzdC1pZDoxODQ1MzE4NDkxOw0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1z by1saXN0LXRlbXBsYXRlLWlkczotODA2MzA5ODU0IC00MjcxMDY5NDAgNjc4OTUzMjEgNjc4OTUz MjMgNjc4OTUzMTEgNjc4OTUzMjEgNjc4OTUzMjMgNjc4OTUzMTEgNjc4OTUzMjEgNjc4OTUzMjM7 fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC10ZXh0OiJcKCUxXCkiOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJn aW4tbGVmdDoxOC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDIN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0 OjU0LjBwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCW1hcmdpbi1sZWZ0OjkwLjBw dDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4t bGVmdDoxMjYuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDox NjIuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6MTk4LjBw dDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4t bGVmdDoyMzQuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoy NzAuMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6MzA2LjBw dDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwN Cgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxp bms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5IaSBNZWQsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10 b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fu cy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZiI+UGxlYXNlIHNlZSBpbmxpbmUuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4t Ym90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjBjbTttc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bXNv LXBhcmEtbWFyZ2luLXJpZ2h0OjBjbTttc28tcGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7bXNvLXBh cmEtbWFyZ2luLWxlZnQ6MGNtIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5CZXN0IFJlZ2FyZHM8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJnaW4t bGVmdDowY207bXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21zby1wYXJhLW1hcmdpbi1yaWdodDow Y207bXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouM2dkO21zby1wYXJhLW1hcmdpbi1sZWZ0OjBjbSI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtHYWR1Z2km cXVvdDssc2Fucy1zZXJpZiI+V2VpIFBhbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29s aWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzoz LjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gbW9o YW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSBbbWFpbHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5n ZS5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBKYW51YXJ5IDI1LCAyMDE5IDU6MDkg UE08YnI+DQo8Yj5Ubzo8L2I+IFBhbndlaSAoV2lsbGlhbSkgJmx0O3dpbGxpYW0ucGFud2VpQGh1 YXdlaS5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBkb3RzQGlldGYub3JnPGJyPg0KPGI+U3ViamVj dDo8L2I+IFJFOiBDb21tZW50cyBvbiBkcmFmdC1uaXNoaXp1a2EtZG90cy1zaWduYWwtY29udHJv bC1maWx0ZXJpbmctMDI8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFu Zz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5IaSBQYW4sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkZS IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2lu LXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tbGVmdDo1NC4wcHQ7bWFyZ2luLWJv dHRvbTouMDAwMXB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIi Pg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxl PSJtc28tbGlzdDpJZ25vcmUiPigxKTwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj5XaGF0IGlzIHJlY29tbWVuZGVkIGlzIHRvIGVuYWJsZSBhc3luY2hyb25vdXMN CiBub3RpZiAoaGVuY2UgdGhlIHVzZSBvZiB0aGUgbm9ybWF0aXZlIGxhbmd1YWdlKS4gSeKAmW0g aGVzaXRhdGluZyB0byB1c2UgdGhlIG5vcm1hdGl2ZSBsYW5ndWFnZSBmb3IgdGhlIHNlY29uZCBz ZW50ZW5jZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2Fk dWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj5bV2VpXSBCZWNhdXNlIHRoZXJlIGFyZSBvbmx5IHR3byB3YXlzIHRoYXQgeW91 IGhhdmUgbGlzdGVkIGZvciB0aGUgRE9UUyBjbGllbnQgdG8gY2hvb3NlLCBpZiB0aGUgRE9UUyBj bGllbnQgZG9lc27igJl0IGNob29zZSB0aGUgcmVjb21tZW5kZWQgd2F5LCB0aGVuIGl0DQogbXVz dCBjaG9vc2UgdGhlIG90aGVyIHdheS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlVubGVzcyB0 aGVyZSBpcyBhIHRoaXJkIHdheSwgb3RoZXJ3aXNlIHRoZSBtZWFuaW5nIGhlcmUgaXMgbm9ybWF0 aXZlIGV2ZW4gdGhvdWdoIHlvdSBkb27igJl0IHVzZSBhIG5vcm1hdGl2ZSBsYW5ndWFnZS4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t dG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SXMgdGhlcmUgYSB0aGlyZCB3YXk/IElmIG5vdCwgdGhl IG5vcm1hdGl2ZSBsYW5ndWFnZSBpcyBhcHByb3ByaWF0ZSwgSU1PLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQ YXJhZ3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBj bTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tbGVmdDo1NC4wcHQ7bWFyZ2luLWJvdHRvbTouMDAw MXB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPg0KPCFbaWYg IXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxlPSJtc28tbGlz dDpJZ25vcmUiPigyKTwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij5ObyB0ZXh0IHdhcyBpbmNsdWRlZCBhYm91dCB0aGUgRE9UUyBzZXJ2ZXINCiBiZWNhdXNlIHdl IGRvIGFscmVhZHkgaGF2ZSB0aGUgZm9sbG93aW5nIGluIHRoZSBzaWduYWwgY2hhbm5lbDogPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10 b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNw O0lmIHRoZSByZXF1ZXN0IGlzIG1pc3NpbmcgYSBtYW5kYXRvcnkgYXR0cmlidXRlLCBkb2VzIG5v dCBpbmNsdWRlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgJ2N1aWQnIG9yICdt aWQnIFVyaS1QYXRoIG9wdGlvbnMsIGluY2x1ZGVzIG11bHRpcGxlICdzY29wZSc8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBwYXJhbWV0ZXJzLCBvciBjb250YWlucyBpbnZhbGlk IG9yIHVua25vd24gcGFyYW1ldGVycywgdGhlIERPVFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBeXl5eXl5ePG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42 cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgc2VydmVyIE1VU1QgcmVwbHkgd2l0aCA0LjAwIChC YWQgUmVxdWVzdCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtH YWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPltXZWldIEkgdGhpbmsgYWRkaW5nIGEgcmVmZXJlbmNlIHRvIHRoaXMgY2Fu IG1ha2UgdGhlIGNvbnRyb2wtZmlsdGVyaW5nIGRyYWZ0IG1vcmUgcmVhZGFibGUuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42 cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PkNhbiB5b3UgcGxlYXNlIGVsYWJvcmF0ZSBvbiB0aGUgc2VjdXJpdHkgaXNzdWVzIHlvdSBoYXZl IGluIG1pbmQ/IFRoYW5rIHlvdS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10 b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bV2VpXSBQbGVhc2UgZm9yZ2V0IHRoaXMsIEkgZGlkbuKA mXQgdGhpbmsgY2xlYXJseSBhdCB0aGUgYmVnaW5uaW5nLg0KPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5BdCBmaXJzdCwgSSB0aG91Z2h0IHRoZSBtaXNiZWhhdmVkIERPVFMgY2xpZW50IG1pZ2h0 IGFidXNlIHRoZSBzaWduYWwgY2hhbm5lbCB0byBzZW5kIGFjbC1saXN0IGNvbnRpbnVvdXNseSwg YW5kIHRoaXMgbWlnaHQgY2F1c2UgdGhlIHNpZ25hbCBjaGFubmVsIGphbW1lZC4NCiBPciB0aGUg Y2xpZW50IG1pZ2h0IGVuYWJsZSBhbmQgZGlzYWJsZSB0aGUgYWNsLWxpc3QgYWx0ZXJuYXRlbHkg YW5kIGNvbnRpbnVvdXNseSwgYW5kIHRoaXMgbWlnaHQgY2F1c2UgdGhlIHNlcnZlciBidXN5Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t dG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+QnV0IHRoZXNlIGFyZSBhbGwgbm90IG5ldyBpc3N1ZXMs IHRoZXNlIGlzc3VlcyBhbHNvIGV4aXN0IGJlZm9yZSwgb25seSB0aGVyZSBpcyBubyBhY2wtbGlz dCBpbmNsdWRlZCBpbiB0aGUgcmVxdWVzdCBtZXNzYWdlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Q2hlZXJzLDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9w OjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+TWVkPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20g NC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+RGUmbmJz cDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+IFBhbndlaSAoV2lsbGlhbSkgWzxhIGhyZWY9 Im1haWx0bzp3aWxsaWFtLnBhbndlaUBodWF3ZWkuY29tIj5tYWlsdG86d2lsbGlhbS5wYW53ZWlA aHVhd2VpLmNvbTwvYT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gdmVuZHJlZGkgMjUg amFudmllciAyMDE5IDA4OjU4PGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBCT1VDQURBSVIgTW9oYW1l ZCBUR0kvT0w8L3NwYW4+PHNwYW4gbGFuZz0iRlIiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmIj5OPGJyPg0KPGI+Q2MmbmJz cDs6PC9iPiA8YSBocmVmPSJtYWlsdG86ZG90c0BpZXRmLm9yZyI+ZG90c0BpZXRmLm9yZzwvYT48 YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+IENvbW1lbnRzIG9uIGRyYWZ0LW5pc2hpenVrYS1kb3Rz LXNpZ25hbC1jb250cm9sLWZpbHRlcmluZy0wMjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+ PHNwYW4gbGFuZz0iRlIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWYiPkhpIE1lZCw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZw dCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlm Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBz dHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dh ZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5JIGhhdmUgcmVhZCB0aGUgbGF0ZXN0IHZlcnNpb24gYW5k IEkgaGF2ZSAyIGNvbW1lbnRzIG9uIGl0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tbGVmdDox NC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+ SXQgaXMgUkVDT01NRU5ERUQgZm9yIGEgRE9UUyBjbGllbnQgdG8gc3Vic2NyaWJlIHRvIGFzeW5j aHJvbm91czxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9t OjBjbTttYXJnaW4tbGVmdDoxNC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtYXV0b3Nw YWNlOm5vbmUiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291 cmllcjtjb2xvcjpibGFjayI+bm90aWZpY2F0aW9ucyBvZiB0aGUgYXR0YWNrIG1pdGlnYXRpb24s IGFzIGRldGFpbGVkIGluPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdp bi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4 dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5TZWN0aW9uIDQuNC4yLjEgb2YgW0ktRC5pZXRmLWRv dHMtc2lnbmFsLWNoYW5uZWxdLiBJZiBub3QsIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My42cHQ7bWFyZ2lu LXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tbGVmdDoxNC4ycHQ7bWFyZ2luLWJv dHRvbTouMDAwMXB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+cG9sbGluZyBtZWNoYW5p c20gaW4gU2VjdGlvbiA0LjQuMi4yIG9mPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6 MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9tOi4w MDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5bSS1ELmlldGYtZG90cy1zaWduYWwt Y2hhbm5lbF0gaGFzIHRvIGJlIGZvbGxvd2VkIGJ5IHRoZSBET1RTIGNsaWVudC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDoz LjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNl cmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5IZXJlIHlvdSBoYXZlIGxpc3RlZCB0d28gd2F5cyBm b3IgYSBET1RTIGNsaWVudCB0byBmb2xsb3cuIFNpbmNlIHlvdSB1c2VkIOKAnGhhcyB0b+KAnSB0 byBpbmRpY2F0ZSB0aGF0IERPVFMgY2xpZW50IG11c3QgZm9sbG93IHRoZSBwb2xsaW5nIG1lY2hh bmlzbSB3aGVuIGl0IGRvZXNu4oCZdA0KIGZvbGxvdyB0aGUgUkVDT01NRU5ERUQgd2F5LCB3b3Vs ZCBpdCBiZSBiZXR0ZXIgZm9yIGNoYW5naW5nIOKAnGhhcyB0b+KAnSB0byDigJxNVVNU4oCdPyA8 bzpwPg0KPC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJt YXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 My42cHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tbGVmdDoxNC4y cHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+QSBE T1RTIGNsaWVudCBNVVNUIE5PVCB1c2UgdGhlIGZpbHRlcmluZyBjb250cm9sIG92ZXIgRE9UUyBz aWduYWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTow Y207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1ib3R0b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFj ZTpub25lIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvdXJp ZXI7Y29sb3I6YmxhY2siPmNoYW5uZWwgaWYgbm8gYXR0YWNrIChtaXRpZ2F0aW9uKSBpcyBhY3Rp dmUuIEJ5IGRlZmF1bHQsIEFDTC1yZWxhdGVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmln aHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9t Oi4wMDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5vcGVyYXRpb25zIGFyZSBhY2hp ZXZlZCB1c2luZyB0aGUgRE9UUyBkYXRhIGNoYW5uZWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdp bi1yaWdodDowY207bWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1i b3R0b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFjZTpub25lIj4NCjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPltJLUQuaWV0Zi1kb3Rz LWRhdGEtY2hhbm5lbF0gd2hlbiBubyBhdHRhY2sgaXMgb25nb2luZy48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHls ZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVn aSZxdW90OyxzYW5zLXNlcmlmIj5UaG91Z2ggd2UgaGF2ZSBnaXZlbiB0aGUgcHJpbmNpcGxlIGZv ciB0aGUgRE9UUyBjbGllbnQgdG8gZm9sbG93LCBidXQgd2UgZG9u4oCZdCBnaXZlIGEgY29ycmVz cG9uZGluZyBwcmluY2lwbGUgZm9yIHRoZSBET1RTIHNlcnZlciB0byBjaGVjay4gSWYgdGhlIERP VFMgY2xpZW50IGlzDQogbWlzYmVoYXZlZCBhbmQgdGhlIERPVFMgc2VydmVyIGRvZXNu4oCZdCBj aGVjaywgdGhlbiBuZXcgc2VjdXJpdHkgaXNzdWVzIG1heSBhcmlzZS48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5E byB3ZSB3YW50IHRvIGFkZCBzb21lIHJ1bGVzIGFuZCBtZXRob2RzIGZvciB0aGUgRE9UUyBzZXJ2 ZXIgdG8gY2hlY2ssIG9yIGRlc2NyaWJlIHRoaXMgcG90ZW50aWFsIHRocmVhdCBpbiB0aGUgU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMgQ2hhcHRlcj88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRv cDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5z LXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5CZXN0IFJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmIj5X ZWkgUGFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5 bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1 Z2kmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_30E95A901DB42F44BA42D69DB20DFA6A6093C37Fnkgeml513mbxchi_-- From nobody Fri Jan 25 04:33:48 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1742C12F295 for ; Fri, 25 Jan 2019 04:33:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AbiLI2KB5ZcO for ; Fri, 25 Jan 2019 04:33:41 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5D3D130DE7 for ; Fri, 25 Jan 2019 04:33:40 -0800 (PST) Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 43mJNL3wYRz2xwr; Fri, 25 Jan 2019 13:33:38 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.66]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 43mJNL30ZQz1xpN; Fri, 25 Jan 2019 13:33:38 +0100 (CET) Received: from OPEXCAUBMA4.corporate.adroot.infra.ftgroup (10.114.13.86) by OPEXCLILMA1.corporate.adroot.infra.ftgroup (10.114.31.66) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 25 Jan 2019 13:33:38 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBMA4.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0415.000; Fri, 25 Jan 2019 13:33:37 +0100 From: To: "Panwei (William)" CC: "dots@ietf.org" Thread-Topic: Comments on draft-nishizuka-dots-signal-control-filtering-02 Thread-Index: AdS0grzeCrAKNsORT9O+dXHIsB7wowAByw2AAAGTcGAABkloUA== Date: Fri, 25 Jan 2019 12:33:36 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0DA94@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <30E95A901DB42F44BA42D69DB20DFA6A6093C342@nkgeml513-mbx.china.huawei.com> <787AE7BB302AE849A7480A190F8B93302EA0D99E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <30E95A901DB42F44BA42D69DB20DFA6A6093C37F@nkgeml513-mbx.china.huawei.com> In-Reply-To: <30E95A901DB42F44BA42D69DB20DFA6A6093C37F@nkgeml513-mbx.china.huawei.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.247] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93302EA0DA94OPEXCAUBMA2corp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Comments on draft-nishizuka-dots-signal-control-filtering-02 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2019 12:33:47 -0000 --_000_787AE7BB302AE849A7480A190F8B93302EA0DA94OPEXCAUBMA2corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmUtLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogUGFud2Vp IChXaWxsaWFtKSBbbWFpbHRvOndpbGxpYW0ucGFud2VpQGh1YXdlaS5jb21dDQpFbnZvecOpIDog dmVuZHJlZGkgMjUgamFudmllciAyMDE5IDExOjIwDQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIFRH SS9PTE4NCkNjIDogZG90c0BpZXRmLm9yZw0KT2JqZXQgOiBSRTogQ29tbWVudHMgb24gZHJhZnQt bmlzaGl6dWthLWRvdHMtc2lnbmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAyDQoNCkhpIE1lZCwNCg0K UGxlYXNlIHNlZSBpbmxpbmUuDQoNCkJlc3QgUmVnYXJkcw0KV2VpIFBhbg0KDQpGcm9tOiBtb2hh bWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tIFttYWlsdG86bW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbV0NClNlbnQ6IEZyaWRheSwgSmFudWFyeSAyNSwgMjAxOSA1OjA5IFBNDQpUbzogUGFud2Vp IChXaWxsaWFtKSA8d2lsbGlhbS5wYW53ZWlAaHVhd2VpLmNvbT4NCkNjOiBkb3RzQGlldGYub3Jn DQpTdWJqZWN0OiBSRTogQ29tbWVudHMgb24gZHJhZnQtbmlzaGl6dWthLWRvdHMtc2lnbmFsLWNv bnRyb2wtZmlsdGVyaW5nLTAyDQoNCkhpIFBhbiwNCg0KDQooMSlXaGF0IGlzIHJlY29tbWVuZGVk IGlzIHRvIGVuYWJsZSBhc3luY2hyb25vdXMgbm90aWYgKGhlbmNlIHRoZSB1c2Ugb2YgdGhlIG5v cm1hdGl2ZSBsYW5ndWFnZSkuIEnigJltIGhlc2l0YXRpbmcgdG8gdXNlIHRoZSBub3JtYXRpdmUg bGFuZ3VhZ2UgZm9yIHRoZSBzZWNvbmQgc2VudGVuY2UuDQoNCltXZWldIEJlY2F1c2UgdGhlcmUg YXJlIG9ubHkgdHdvIHdheXMgdGhhdCB5b3UgaGF2ZSBsaXN0ZWQgZm9yIHRoZSBET1RTIGNsaWVu dCB0byBjaG9vc2UsIGlmIHRoZSBET1RTIGNsaWVudCBkb2VzbuKAmXQgY2hvb3NlIHRoZSByZWNv bW1lbmRlZCB3YXksIHRoZW4gaXQgbXVzdCBjaG9vc2UgdGhlIG90aGVyIHdheS4NClVubGVzcyB0 aGVyZSBpcyBhIHRoaXJkIHdheSwgb3RoZXJ3aXNlIHRoZSBtZWFuaW5nIGhlcmUgaXMgbm9ybWF0 aXZlIGV2ZW4gdGhvdWdoIHlvdSBkb27igJl0IHVzZSBhIG5vcm1hdGl2ZSBsYW5ndWFnZS4NCklz IHRoZXJlIGEgdGhpcmQgd2F5PyBJZiBub3QsIHRoZSBub3JtYXRpdmUgbGFuZ3VhZ2UgaXMgYXBw cm9wcmlhdGUsIElNTy4NCltNZWRdIEkgZG9u4oCZdCBrbm93IGlmIHRoZXJlIHdpbGwgYmUgYW55 IGVxdWl2YWxlbnQgbWVjaGFuaXNtIGluIHRoZSBmdXR1cmUsIGJ1dCBpZiB0aGF0IGFsdGVybmF0 ZSBtZWNoYW5pc20gZXhpc3QsIGl0IGlzIGNvbXBsZXRlbHkgZmluZSBmb3IgdGhlIGNsaWVudCB0 byB1c2UgaXQgYXMgYSBiYWNrdXAuDQoNCg0KKDIpTm8gdGV4dCB3YXMgaW5jbHVkZWQgYWJvdXQg dGhlIERPVFMgc2VydmVyIGJlY2F1c2Ugd2UgZG8gYWxyZWFkeSBoYXZlIHRoZSBmb2xsb3dpbmcg aW4gdGhlIHNpZ25hbCBjaGFubmVsOg0KDQogICBJZiB0aGUgcmVxdWVzdCBpcyBtaXNzaW5nIGEg bWFuZGF0b3J5IGF0dHJpYnV0ZSwgZG9lcyBub3QgaW5jbHVkZQ0KICAgJ2N1aWQnIG9yICdtaWQn IFVyaS1QYXRoIG9wdGlvbnMsIGluY2x1ZGVzIG11bHRpcGxlICdzY29wZScNCiAgIHBhcmFtZXRl cnMsIG9yIGNvbnRhaW5zIGludmFsaWQgb3IgdW5rbm93biBwYXJhbWV0ZXJzLCB0aGUgRE9UUw0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgXl5eXl5eXg0KICAgc2VydmVyIE1VU1QgcmVwbHkg d2l0aCA0LjAwIChCYWQgUmVxdWVzdCkuDQoNCltXZWldIEkgdGhpbmsgYWRkaW5nIGEgcmVmZXJl bmNlIHRvIHRoaXMgY2FuIG1ha2UgdGhlIGNvbnRyb2wtZmlsdGVyaW5nIGRyYWZ0IG1vcmUgcmVh ZGFibGUuDQpbTWVkXSBPSy4NCg0KQ2FuIHlvdSBwbGVhc2UgZWxhYm9yYXRlIG9uIHRoZSBzZWN1 cml0eSBpc3N1ZXMgeW91IGhhdmUgaW4gbWluZD8gVGhhbmsgeW91Lg0KDQpbV2VpXSBQbGVhc2Ug Zm9yZ2V0IHRoaXMsIEkgZGlkbuKAmXQgdGhpbmsgY2xlYXJseSBhdCB0aGUgYmVnaW5uaW5nLg0K QXQgZmlyc3QsIEkgdGhvdWdodCB0aGUgbWlzYmVoYXZlZCBET1RTIGNsaWVudCBtaWdodCBhYnVz ZSB0aGUgc2lnbmFsIGNoYW5uZWwgdG8gc2VuZCBhY2wtbGlzdCBjb250aW51b3VzbHksIGFuZCB0 aGlzIG1pZ2h0IGNhdXNlIHRoZSBzaWduYWwgY2hhbm5lbCBqYW1tZWQuIE9yIHRoZSBjbGllbnQg bWlnaHQgZW5hYmxlIGFuZCBkaXNhYmxlIHRoZSBhY2wtbGlzdCBhbHRlcm5hdGVseSBhbmQgY29u dGludW91c2x5LCBhbmQgdGhpcyBtaWdodCBjYXVzZSB0aGUgc2VydmVyIGJ1c3kuDQpCdXQgdGhl c2UgYXJlIGFsbCBub3QgbmV3IGlzc3VlcywgdGhlc2UgaXNzdWVzIGFsc28gZXhpc3QgYmVmb3Jl LCBvbmx5IHRoZXJlIGlzIG5vIGFjbC1saXN0IGluY2x1ZGVkIGluIHRoZSByZXF1ZXN0IG1lc3Nh Z2VzLg0KDQpbTWVkXSBJbmRlZWQuIEZ1cnRoZXJtb3JlLCBhIHZhbGlkIHJlcXVlc3QgaGFzIHRv IGluY2x1ZGUgYSBtaWQgd2hpY2ggaXMgbWFpbnRhaW5lZCBieSB0aGUgc2VydmVyLiBPdGhlcndp c2UsIHRoZSByZXF1ZXN0IHdpbGwgYmUgcmVqZWN0ZWQgYnkgdGhlIHNlcnZlci4NCg0KQ2hlZXJz LA0KTWVkDQoNCkRlIDogUGFud2VpIChXaWxsaWFtKSBbbWFpbHRvOndpbGxpYW0ucGFud2VpQGh1 YXdlaS5jb21dDQpFbnZvecOpIDogdmVuZHJlZGkgMjUgamFudmllciAyMDE5IDA4OjU4DQrDgCA6 IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE4NCkNjIDogZG90c0BpZXRmLm9yZzxtYWlsdG86ZG90 c0BpZXRmLm9yZz4NCk9iamV0IDogQ29tbWVudHMgb24gZHJhZnQtbmlzaGl6dWthLWRvdHMtc2ln bmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAyDQoNCg0KSGkgTWVkLA0KDQoNCg0KSSBoYXZlIHJlYWQg dGhlIGxhdGVzdCB2ZXJzaW9uIGFuZCBJIGhhdmUgMiBjb21tZW50cyBvbiBpdC4NCg0KDQpJdCBp cyBSRUNPTU1FTkRFRCBmb3IgYSBET1RTIGNsaWVudCB0byBzdWJzY3JpYmUgdG8gYXN5bmNocm9u b3VzDQpub3RpZmljYXRpb25zIG9mIHRoZSBhdHRhY2sgbWl0aWdhdGlvbiwgYXMgZGV0YWlsZWQg aW4NClNlY3Rpb24gNC40LjIuMSBvZiBbSS1ELmlldGYtZG90cy1zaWduYWwtY2hhbm5lbF0uIElm IG5vdCwgdGhlDQpwb2xsaW5nIG1lY2hhbmlzbSBpbiBTZWN0aW9uIDQuNC4yLjIgb2YNCltJLUQu aWV0Zi1kb3RzLXNpZ25hbC1jaGFubmVsXSBoYXMgdG8gYmUgZm9sbG93ZWQgYnkgdGhlIERPVFMg Y2xpZW50Lg0KDQoNCg0KSGVyZSB5b3UgaGF2ZSBsaXN0ZWQgdHdvIHdheXMgZm9yIGEgRE9UUyBj bGllbnQgdG8gZm9sbG93LiBTaW5jZSB5b3UgdXNlZCDigJxoYXMgdG/igJ0gdG8gaW5kaWNhdGUg dGhhdCBET1RTIGNsaWVudCBtdXN0IGZvbGxvdyB0aGUgcG9sbGluZyBtZWNoYW5pc20gd2hlbiBp dCBkb2VzbuKAmXQgZm9sbG93IHRoZSBSRUNPTU1FTkRFRCB3YXksIHdvdWxkIGl0IGJlIGJldHRl ciBmb3IgY2hhbmdpbmcg4oCcaGFzIHRv4oCdIHRvIOKAnE1VU1TigJ0/DQoNCg0KDQoNCkEgRE9U UyBjbGllbnQgTVVTVCBOT1QgdXNlIHRoZSBmaWx0ZXJpbmcgY29udHJvbCBvdmVyIERPVFMgc2ln bmFsDQpjaGFubmVsIGlmIG5vIGF0dGFjayAobWl0aWdhdGlvbikgaXMgYWN0aXZlLiBCeSBkZWZh dWx0LCBBQ0wtcmVsYXRlZA0Kb3BlcmF0aW9ucyBhcmUgYWNoaWV2ZWQgdXNpbmcgdGhlIERPVFMg ZGF0YSBjaGFubmVsDQpbSS1ELmlldGYtZG90cy1kYXRhLWNoYW5uZWxdIHdoZW4gbm8gYXR0YWNr IGlzIG9uZ29pbmcuDQoNCg0KDQpUaG91Z2ggd2UgaGF2ZSBnaXZlbiB0aGUgcHJpbmNpcGxlIGZv ciB0aGUgRE9UUyBjbGllbnQgdG8gZm9sbG93LCBidXQgd2UgZG9u4oCZdCBnaXZlIGEgY29ycmVz cG9uZGluZyBwcmluY2lwbGUgZm9yIHRoZSBET1RTIHNlcnZlciB0byBjaGVjay4gSWYgdGhlIERP VFMgY2xpZW50IGlzIG1pc2JlaGF2ZWQgYW5kIHRoZSBET1RTIHNlcnZlciBkb2VzbuKAmXQgY2hl Y2ssIHRoZW4gbmV3IHNlY3VyaXR5IGlzc3VlcyBtYXkgYXJpc2UuDQoNCkRvIHdlIHdhbnQgdG8g YWRkIHNvbWUgcnVsZXMgYW5kIG1ldGhvZHMgZm9yIHRoZSBET1RTIHNlcnZlciB0byBjaGVjaywg b3IgZGVzY3JpYmUgdGhpcyBwb3RlbnRpYWwgdGhyZWF0IGluIHRoZSBTZWN1cml0eSBDb25zaWRl cmF0aW9ucyBDaGFwdGVyPw0KDQoNCg0KDQoNCkJlc3QgUmVnYXJkcw0KDQpXZWkgUGFuDQoNCg0K --_000_787AE7BB302AE849A7480A190F8B93302EA0DA94OPEXCAUBMA2corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOnA9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206 b2ZmaWNlOnBvd2VycG9pbnQiIHhtbG5zOmE9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOmFjY2VzcyIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVCMy0xMWQxLUEyOUYtMDBBQTAw QzE0ODgyIiB4bWxuczpzPSJ1dWlkOkJEQzZFM0YwLTZEQTMtMTFkMS1BMkEzLTAwQUEwMEMxNDg4 MiIgeG1sbnM6cnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206cm93c2V0IiB4bWxuczp6PSIj Um93c2V0U2NoZW1hIiB4bWxuczpiPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpw dWJsaXNoZXIiIHhtbG5zOnNzPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzcHJl YWRzaGVldCIgeG1sbnM6Yz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6Y29tcG9u ZW50OnNwcmVhZHNoZWV0IiB4bWxuczpvZGM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOm9kYyIgeG1sbnM6b2E9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOmFjdGl2 YXRpb24iIHhtbG5zOmh0bWw9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIHhtbG5z OnE9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3NvYXAvZW52ZWxvcGUvIiB4bWxuczpydGM9 Imh0dHA6Ly9taWNyb3NvZnQuY29tL29mZmljZW5ldC9jb25mZXJlbmNpbmciIHhtbG5zOkQ9IkRB VjoiIHhtbG5zOlJlcGw9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vcmVwbC8iIHhtbG5z Om10PSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC9tZWV0aW5n cy8iIHhtbG5zOngyPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS9leGNlbC8y MDAzL3htbCIgeG1sbnM6cHBkYT0iaHR0cDovL3d3dy5wYXNzcG9ydC5jb20vTmFtZVNwYWNlLnhz ZCIgeG1sbnM6b2lzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29h cC9vaXMvIiB4bWxuczpkaXI9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9zb2FwL2RpcmVjdG9yeS8iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjIiB4bWxuczpkc3A9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9kc3AiIHhtbG5zOnVkYz0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYyIg eG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6c3ViPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC8yMDAyLzEvYWxlcnRz LyIgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgeG1sbnM6c3A9 Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC8iIHhtbG5zOnNwcz0iaHR0 cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvIiB4bWxuczp4c2k9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp1ZGNzPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3NvYXAiIHhtbG5zOnVkY3hmPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3htbGZpbGUiIHhtbG5zOnVkY3AycD0i aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYy9wYXJ0dG9wYXJ0IiB4bWxuczp3 Zj0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvd29ya2Zsb3cv IiB4bWxuczpkc3NzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA2L2Rp Z3NpZy1zZXR1cCIgeG1sbnM6ZHNzaT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZp Y2UvMjAwNi9kaWdzaWciIHhtbG5zOm1kc3NpPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0 cy5vcmcvcGFja2FnZS8yMDA2L2RpZ2l0YWwtc2lnbmF0dXJlIiB4bWxuczptdmVyPSJodHRwOi8v c2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcvbWFya3VwLWNvbXBhdGliaWxpdHkvMjAwNiIgeG1s bnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4 bWxuczptcmVscz0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3JnL3BhY2thZ2UvMjAw Ni9yZWxhdGlvbnNoaXBzIiB4bWxuczpzcHdwPSJodHRwOi8vbWljcm9zb2Z0LmNvbS9zaGFyZXBv aW50L3dlYnBhcnRwYWdlcyIgeG1sbnM6ZXgxMnQ9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi90eXBlcyIgeG1sbnM6ZXgxMm09Imh0dHA6Ly9zY2hl bWFzLm1pY3Jvc29mdC5jb20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi9tZXNzYWdlcyIgeG1sbnM6 cHB0c2w9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC9zb2FwL1NsaWRl TGlicmFyeS8iIHhtbG5zOnNwc2w9Imh0dHA6Ly9taWNyb3NvZnQuY29tL3dlYnNlcnZpY2VzL1No YXJlUG9pbnRQb3J0YWxTZXJ2ZXIvUHVibGlzaGVkTGlua3NTZXJ2aWNlIiB4bWxuczpaPSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOiIgeG1sbnM6dGF4PSJodHRwOi8vc2NoZW1hcy5taWNyb3Nv ZnQuY29tL3NoYXJlcG9pbnQvdGF4b25vbXkvc29hcC8iIHhtbG5zOnRucz0iaHR0cDovL3NjaGVt YXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvcmVjb3Jkc3JlcG9zaXRvcnkvIiB4bWxu czpzcHN1cD0iaHR0cDovL21pY3Jvc29mdC5jb20vd2Vic2VydmljZXMvU2hhcmVQb2ludFBvcnRh bFNlcnZlci9Vc2VyUHJvZmlsZVNlcnZpY2UiIHhtbG5zOm1tbD0iaHR0cDovL3d3dy53My5vcmcv MTk5OC9NYXRoL01hdGhNTCIgeG1sbnM6c3Q9IiYjMTsiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9y Zy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBl IiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT0iR2VuZXJh dG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5 bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgNyA0IDkgMiAyIDUgMiA0IDQ7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgNyA0IDkgMiAyIDUgMiA0IDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0x OjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29s YXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseTpHYWR1Z2k7DQoJcGFub3NlLTE6MiAxMSA1IDIgNCAyIDQgMiAyIDM7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFy Z2luLXRvcDouM2dkOw0KCW1zby1wYXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFy Z2luLWJvdHRvbTowY207DQoJbXNvLXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCW1zby1wYXJhLW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFpblRleHQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJUZXh0ZSBicnV0IENh ciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFy Z2luLXRvcDouM2dkOw0KCW1zby1wYXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFy Z2luLWJvdHRvbTowY207DQoJbXNvLXBhcmEtbWFyZ2luLWxlZnQ6MGNtOw0KCW1zby1wYXJhLW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46MGNtOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCgltc28tcGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJbXNvLXBh cmEtbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOjBjbTsNCgltc28t cGFyYS1tYXJnaW4tbGVmdDowY207DQoJbXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjt9 DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFy YWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJn aW4tcmlnaHQ6MGNtOw0KCW1hcmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJbXNvLXBhcmEtbWFyZ2luLXRvcDouM2dkOw0KCW1z by1wYXJhLW1hcmdpbi1yaWdodDowY207DQoJbXNvLXBhcmEtbWFyZ2luLWJvdHRvbTowY207DQoJ bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MzYuMHB0Ow0KCW1zby1wYXJhLW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7fQ0Kc3Bhbi5QcmZvcm1hdEhUTUxDYXINCgl7bXNvLXN0eWxlLW5hbWU6IlByw6lmb3Jt YXTDqSBIVE1MIENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OiJQcsOpZm9ybWF0w6kgSFRNTCI7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFu LlRleHRlYnJ1dENhcg0KCXttc28tc3R5bGUtbmFtZToiVGV4dGUgYnJ1dCBDYXIiOw0KCW1zby1z dHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiVGV4dGUgYnJ1dCI7DQoJZm9udC1m YW1pbHk6Q29uc29sYXM7fQ0KcC5IVE1MLCBsaS5IVE1MLCBkaXYuSFRNTA0KCXttc28tc3R5bGUt bmFtZToiSFRNTCDpooTorr7moLzlvI8iOw0KCW1zby1zdHlsZS1saW5rOiJIVE1MIOmihOiuvuag vOW8jyBDaGFyIjsNCgltYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCgltc28t cGFyYS1tYXJnaW4tdG9wOi4zZ2Q7DQoJbXNvLXBhcmEtbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28t cGFyYS1tYXJnaW4tYm90dG9tOjBjbTsNCgltc28tcGFyYS1tYXJnaW4tbGVmdDowY207DQoJbXNv LXBhcmEtbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLkhUTUxDaGFyDQoJe21zby1zdHls ZS1uYW1lOiJIVE1MIOmihOiuvuagvOW8jyBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwg6aKE6K6+5qC85byPIjsNCglmb250LWZhbWlseTpDb25z b2xhczt9DQpwLmEsIGxpLmEsIGRpdi5hDQoJe21zby1zdHlsZS1uYW1lOue6r+aWh+acrDsNCglt c28tc3R5bGUtbGluazoi57qv5paH5pysIENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCW1zby1wYXJhLW1hcmdpbi10b3A6LjNnZDsNCgltc28tcGFyYS1tYXJn aW4tcmlnaHQ6MGNtOw0KCW1zby1wYXJhLW1hcmdpbi1ib3R0b206MGNtOw0KCW1zby1wYXJhLW1h cmdpbi1sZWZ0OjBjbTsNCgltc28tcGFyYS1tYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO30NCnNwYW4u Q2hhcg0KCXttc28tc3R5bGUtbmFtZToi57qv5paH5pysIENoYXIiOw0KCW1zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tc3R5bGUtbGluazrnuq/mlofmnKw7DQoJZm9udC1mYW1pbHk6IkdhZHVn aSIsInNhbnMtc2VyaWYiO30NCnNwYW4uRW1haWxTdHlsZTI2DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6YmxhY2s7DQoJZm9u dC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1haWxTdHlsZTI3 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJHYWR1Z2kiLCJzYW5z LXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTI4DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJY29s b3I6YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCi5N c29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1h cmdpbjo3Mi4wcHQgMTE5LjJwdCA3Mi4wcHQgMTE5LjE1cHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0K CXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1s PjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpl eHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVs YXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJGUiIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjpibGFjayI+UmUtLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10 b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5QbGVhc2Ugc2VlIGlubGluZS4NCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9w OjMuNnB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5N ZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUg MS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNt IDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPkRlJm5ic3A7Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBQ YW53ZWkgKFdpbGxpYW0pIFttYWlsdG86d2lsbGlhbS5wYW53ZWlAaHVhd2VpLmNvbV0NCjxicj4N CjxiPkVudm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSAyNSBqYW52aWVyIDIwMTkgMTE6MjA8YnI+ DQo8Yj7DgCZuYnNwOzo8L2I+IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE48YnI+DQo8Yj5DYyZu YnNwOzo8L2I+IGRvdHNAaWV0Zi5vcmc8YnI+DQo8Yj5PYmpldCZuYnNwOzo8L2I+IFJFOiBDb21t ZW50cyBvbiBkcmFmdC1uaXNoaXp1a2EtZG90cy1zaWduYWwtY29udHJvbC1maWx0ZXJpbmctMDI8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPkhpIE1lZCw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPlBsZWFzZSBzZWUgaW5saW5lLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t dG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dh ZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206My42cHQ7bWFyZ2luLWxl ZnQ6MGNtO21zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNt O21zby1wYXJhLW1hcmdpbi1ib3R0b206LjNnZDttc28tcGFyYS1tYXJnaW4tbGVmdDowY20iPg0K PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5CZXN0IFJlZ2FyZHM8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJn aW4tbGVmdDowY207bXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21zby1wYXJhLW1hcmdpbi1yaWdo dDowY207bXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouM2dkO21zby1wYXJhLW1hcmdpbi1sZWZ0OjBj bSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPldlaSBQYW48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBi bHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMu NnB0Ij48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVO LVVTIj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbSBbbWFpbHRvOm1vaGFtZWQuYm91Y2Fk YWlyQG9yYW5nZS5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBKYW51YXJ5IDI1LCAy MDE5IDU6MDkgUE08YnI+DQo8Yj5Ubzo8L2I+IFBhbndlaSAoV2lsbGlhbSkgJmx0O3dpbGxpYW0u cGFud2VpQGh1YXdlaS5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBkb3RzQGlldGYub3JnPGJyPg0K PGI+U3ViamVjdDo8L2I+IFJFOiBDb21tZW50cyBvbiBkcmFmdC1uaXNoaXp1a2EtZG90cy1zaWdu YWwtY29udHJvbC1maWx0ZXJpbmctMDI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkhp IFBhbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTowY207bWFyZ2lu LWxlZnQ6OTAuMHB0O21hcmdpbi1ib3R0b206LjAwMDFwdDt0ZXh0LWluZGVudDotMTguMHB0Ij4N CjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+KDEpV2hhdCBpcyByZWNvbW1lbmRl ZCBpcyB0byBlbmFibGUgYXN5bmNocm9ub3VzIG5vdGlmIChoZW5jZSB0aGUgdXNlIG9mIHRoZSBu b3JtYXRpdmUgbGFuZ3VhZ2UpLiBJ4oCZbSBoZXNpdGF0aW5nIHRvIHVzZSB0aGUgbm9ybWF0aXZl IGxhbmd1YWdlIGZvciB0aGUgc2Vjb25kIHNlbnRlbmNlLg0KPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W1dlaV0gQmVjYXVzZSB0aGVyZSBhcmUgb25s eSB0d28gd2F5cyB0aGF0IHlvdSBoYXZlIGxpc3RlZCBmb3IgdGhlIERPVFMgY2xpZW50IHRvIGNo b29zZSwgaWYgdGhlIERPVFMgY2xpZW50IGRvZXNu4oCZdCBjaG9vc2UgdGhlIHJlY29tbWVuZGVk DQogd2F5LCB0aGVuIGl0IG11c3QgY2hvb3NlIHRoZSBvdGhlciB3YXkuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VW5sZXNzIHRoZXJlIGlzIGEgdGhp cmQgd2F5LCBvdGhlcndpc2UgdGhlIG1lYW5pbmcgaGVyZSBpcyBub3JtYXRpdmUgZXZlbiB0aG91 Z2ggeW91IGRvbuKAmXQgdXNlIGEgbm9ybWF0aXZlIGxhbmd1YWdlLg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SXMgdGhlcmUgYSB0aGlyZCB3YXk/ IElmIG5vdCwgdGhlIG5vcm1hdGl2ZSBsYW5ndWFnZSBpcyBhcHByb3ByaWF0ZSwgSU1PLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9w OjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIEkgZG9u4oCZ dCBrbm93IGlmIHRoZXJlIHdpbGwgYmUgYW55IGVxdWl2YWxlbnQgbWVjaGFuaXNtIGluIHRoZSBm dXR1cmUsIGJ1dCBpZiB0aGF0IGFsdGVybmF0ZSBtZWNoYW5pc20gZXhpc3QsIGl0IGlzIGNvbXBs ZXRlbHkNCiBmaW5lIGZvciB0aGUgY2xpZW50IHRvIHVzZSBpdCBhcyBhIGJhY2t1cC48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDoz LjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2km cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21h cmdpbi1sZWZ0OjkwLjBwdDttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4dC1pbmRlbnQ6LTE4LjBw dCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPigyKU5vIHRleHQgd2FzIGlu Y2x1ZGVkIGFib3V0IHRoZSBET1RTIHNlcnZlciBiZWNhdXNlIHdlIGRvIGFscmVhZHkgaGF2ZSB0 aGUgZm9sbG93aW5nIGluIHRoZSBzaWduYWwgY2hhbm5lbDoNCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwO0lmIHRoZSByZXF1ZXN0IGlzIG1pc3NpbmcgYSBtYW5kYXRvcnkgYXR0cmlidXRl LCBkb2VzIG5vdCBpbmNsdWRlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7ICdjdWlkJyBvciAnbWlkJyBVcmktUGF0aCBvcHRpb25zLCBpbmNsdWRlcyBtdWx0 aXBsZSAnc2NvcGUnPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5i c3A7IHBhcmFtZXRlcnMsIG9yIGNvbnRhaW5zIGludmFsaWQgb3IgdW5rbm93biBwYXJhbWV0ZXJz LCB0aGUgRE9UUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBeXl5eXl5ePG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHNlcnZlciBNVVNUIHJlcGx5IHdpdGggNC4w MCAoQmFkIFJlcXVlc3QpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPltXZWldIEkgdGhpbmsgYWRkaW5nIGEgcmVmZXJlbmNlIHRvIHRoaXMgY2FuIG1h a2UgdGhlIGNvbnRyb2wtZmlsdGVyaW5nIGRyYWZ0IG1vcmUgcmVhZGFibGUuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gT0suPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Q2FuIHlvdSBwbGVhc2UgZWxhYm9y YXRlIG9uIHRoZSBzZWN1cml0eSBpc3N1ZXMgeW91IGhhdmUgaW4gbWluZD8gVGhhbmsgeW91Lg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W1dlaV0g UGxlYXNlIGZvcmdldCB0aGlzLCBJIGRpZG7igJl0IHRoaW5rIGNsZWFybHkgYXQgdGhlIGJlZ2lu bmluZy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PkF0IGZpcnN0LCBJIHRob3VnaHQgdGhlIG1pc2JlaGF2ZWQgRE9UUyBjbGllbnQgbWlnaHQgYWJ1 c2UgdGhlIHNpZ25hbCBjaGFubmVsIHRvIHNlbmQgYWNsLWxpc3QgY29udGludW91c2x5LCBhbmQg dGhpcyBtaWdodCBjYXVzZSB0aGUgc2lnbmFsDQogY2hhbm5lbCBqYW1tZWQuIE9yIHRoZSBjbGll bnQgbWlnaHQgZW5hYmxlIGFuZCBkaXNhYmxlIHRoZSBhY2wtbGlzdCBhbHRlcm5hdGVseSBhbmQg Y29udGludW91c2x5LCBhbmQgdGhpcyBtaWdodCBjYXVzZSB0aGUgc2VydmVyIGJ1c3kuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6 My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QnV0IHRoZXNlIGFy ZSBhbGwgbm90IG5ldyBpc3N1ZXMsIHRoZXNlIGlzc3VlcyBhbHNvIGV4aXN0IGJlZm9yZSwgb25s eSB0aGVyZSBpcyBubyBhY2wtbGlzdCBpbmNsdWRlZCBpbiB0aGUgcmVxdWVzdCBtZXNzYWdlcy48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRv cDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBJbmRlZWQu IEZ1cnRoZXJtb3JlLCBhIHZhbGlkIHJlcXVlc3QgaGFzIHRvIGluY2x1ZGUgYSBtaWQgd2hpY2gg aXMgbWFpbnRhaW5lZCBieSB0aGUgc2VydmVyLiBPdGhlcndpc2UsIHRoZSByZXF1ZXN0IHdpbGwg YmUNCiByZWplY3RlZCBieSB0aGUgc2VydmVyLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5DaGVlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+TWVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNt IDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlk ICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IFBhbndlaSAoV2lsbGlhbSkgWzxhIGhyZWY9Im1haWx0 bzp3aWxsaWFtLnBhbndlaUBodWF3ZWkuY29tIj5tYWlsdG86d2lsbGlhbS5wYW53ZWlAaHVhd2Vp LmNvbTwvYT5dDQo8YnI+DQo8Yj5FbnZvecOpJm5ic3A7OjwvYj4gdmVuZHJlZGkgMjUgamFudmll ciAyMDE5IDA4OjU4PGJyPg0KPGI+w4AmbmJzcDs6PC9iPiBCT1VDQURBSVIgTW9oYW1lZCBUR0kv T0w8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPk48YnI+DQo8Yj5DYyZuYnNwOzo8 L2I+IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj5kb3RzQGlldGYub3JnPC9hPjxicj4N CjxiPk9iamV0Jm5ic3A7OjwvYj4gQ29tbWVudHMgb24gZHJhZnQtbmlzaGl6dWthLWRvdHMtc2ln bmFsLWNvbnRyb2wtZmlsdGVyaW5nLTAyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4t dG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dh ZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5IaSBNZWQsPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7Ij5JIGhhdmUgcmVhZCB0aGUgbGF0ZXN0IHZlcnNpb24gYW5kIEkgaGF2ZSAy IGNvbW1lbnRzIG9uIGl0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTow Y207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1ib3R0b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFj ZTpub25lIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5JdCBpcyBSRUNPTU1FTkRFRCBmb3IgYSBET1RT IGNsaWVudCB0byBzdWJzY3JpYmUgdG8gYXN5bmNocm9ub3VzPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDtt YXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJn aW4tYm90dG9tOi4wMDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFj ayI+bm90aWZpY2F0aW9ucyBvZiB0aGUgYXR0YWNrIG1pdGlnYXRpb24sIGFzIGRldGFpbGVkIGlu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21h cmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9u ZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6Q291cmllcjtjb2xvcjpibGFjayI+U2VjdGlvbiA0LjQuMi4xIG9mIFtJLUQuaWV0Zi1kb3Rz LXNpZ25hbC1jaGFubmVsXS4gSWYgbm90LCB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1y aWdodDowY207bWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1ib3R0 b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFjZTpub25lIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5wb2xs aW5nIG1lY2hhbmlzbSBpbiBTZWN0aW9uIDQuNC4yLjIgb2Y8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21h cmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdp bi1ib3R0b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFjZTpub25lIj4NCjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNr Ij5bSS1ELmlldGYtZG90cy1zaWduYWwtY2hhbm5lbF0gaGFzIHRvIGJlIGZvbGxvd2VkIGJ5IHRo ZSBET1RTIGNsaWVudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9 Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkhlcmUgeW91IGhhdmUg bGlzdGVkIHR3byB3YXlzIGZvciBhIERPVFMgY2xpZW50IHRvIGZvbGxvdy4gU2luY2UgeW91IHVz ZWQg4oCcaGFzIHRv4oCdIHRvIGluZGljYXRlIHRoYXQgRE9UUyBjbGllbnQgbXVzdCBmb2xsb3cg dGhlIHBvbGxpbmcgbWVjaGFuaXNtIHdoZW4NCiBpdCBkb2VzbuKAmXQgZm9sbG93IHRoZSBSRUNP TU1FTkRFRCB3YXksIHdvdWxkIGl0IGJlIGJldHRlciBmb3IgY2hhbmdpbmcg4oCcaGFzIHRv4oCd IHRvIOKAnE1VU1TigJ0/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5 bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6My42cHQ7bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjBjbTttYXJnaW4t bGVmdDoxNC4ycHQ7bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtYXV0b3NwYWNlOm5vbmUiPg0K PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNv dXJpZXI7Y29sb3I6YmxhY2siPkEgRE9UUyBjbGllbnQgTVVTVCBOT1QgdXNlIHRoZSBmaWx0ZXJp bmcgY29udHJvbCBvdmVyIERPVFMgc2lnbmFsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDozLjZwdDttYXJnaW4tcmln aHQ6MGNtO21hcmdpbi1ib3R0b206MGNtO21hcmdpbi1sZWZ0OjE0LjJwdDttYXJnaW4tYm90dG9t Oi4wMDAxcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+Y2hhbm5l bCBpZiBubyBhdHRhY2sgKG1pdGlnYXRpb24pIGlzIGFjdGl2ZS4gQnkgZGVmYXVsdCwgQUNMLXJl bGF0ZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbTow Y207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1ib3R0b206LjAwMDFwdDt0ZXh0LWF1dG9zcGFj ZTpub25lIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5vcGVyYXRpb25zIGFyZSBhY2hpZXZlZCB1c2lu ZyB0aGUgRE9UUyBkYXRhIGNoYW5uZWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjMuNnB0O21hcmdpbi1yaWdodDow Y207bWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWxlZnQ6MTQuMnB0O21hcmdpbi1ib3R0b206LjAw MDFwdDt0ZXh0LWF1dG9zcGFjZTpub25lIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5bSS1ELmlldGYt ZG90cy1kYXRhLWNoYW5uZWxdIHdoZW4gbm8gYXR0YWNrIGlzIG9uZ29pbmcuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42 cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij5UaG91Z2ggd2UgaGF2ZSBnaXZlbiB0aGUgcHJpbmNpcGxlIGZvciB0 aGUgRE9UUyBjbGllbnQgdG8gZm9sbG93LCBidXQgd2UgZG9u4oCZdCBnaXZlIGEgY29ycmVzcG9u ZGluZyBwcmluY2lwbGUgZm9yIHRoZSBET1RTIHNlcnZlciB0byBjaGVjay4gSWYgdGhlDQogRE9U UyBjbGllbnQgaXMgbWlzYmVoYXZlZCBhbmQgdGhlIERPVFMgc2VydmVyIGRvZXNu4oCZdCBjaGVj aywgdGhlbiBuZXcgc2VjdXJpdHkgaXNzdWVzIG1heSBhcmlzZS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+RG8gd2Ugd2FudCB0byBhZGQgc29tZSBydWxlcyBhbmQgbWV0 aG9kcyBmb3IgdGhlIERPVFMgc2VydmVyIHRvIGNoZWNrLCBvciBkZXNjcmliZSB0aGlzIHBvdGVu dGlhbCB0aHJlYXQgaW4gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIENoYXB0ZXI/PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10 b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2Fk dWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tdG9wOjMuNnB0Ij48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+QmVzdCBSZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi10b3A6My42cHQiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPldlaSBQYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibWFyZ2luLXRvcDozLjZwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_787AE7BB302AE849A7480A190F8B93302EA0DA94OPEXCAUBMA2corp_-- From nobody Sat Jan 26 01:38:15 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E01A912D4ED for ; Sat, 26 Jan 2019 01:38:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.189 X-Spam-Level: X-Spam-Status: No, score=-4.189 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 93KxB_th3RcE for ; Sat, 26 Jan 2019 01:38:11 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90E4A127133 for ; Sat, 26 Jan 2019 01:38:11 -0800 (PST) Received: from lhreml702-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 587DC90050468E39D656 for ; Sat, 26 Jan 2019 09:38:09 +0000 (GMT) Received: from NKGEML412-HUB.china.huawei.com (10.98.56.73) by lhreml702-cah.china.huawei.com (10.201.108.43) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 26 Jan 2019 09:38:08 +0000 Received: from NKGEML513-MBX.china.huawei.com ([169.254.1.167]) by nkgeml412-hub.china.huawei.com ([10.98.56.73]) with mapi id 14.03.0415.000; Sat, 26 Jan 2019 17:38:00 +0800 From: "Panwei (William)" To: "dots@ietf.org" Thread-Topic: Call for adoption on draft-boucadair-dots-server-discovery Thread-Index: AdSI+mzom/yrMKu/SJm1ohZrl+sYtAsQHQGA Date: Sat, 26 Jan 2019 09:38:00 +0000 Message-ID: <30E95A901DB42F44BA42D69DB20DFA6A6093D744@nkgeml513-mbx.china.huawei.com> References: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C52F1B@marathon> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.134.37.117] Content-Type: multipart/alternative; boundary="_000_30E95A901DB42F44BA42D69DB20DFA6A6093D744nkgeml513mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Dots] Call for adoption on draft-boucadair-dots-server-discovery X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Jan 2019 09:38:14 -0000 --_000_30E95A901DB42F44BA42D69DB20DFA6A6093D744nkgeml513mbxchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, I support adoption of this draft. Two typos: 1. Section 5 When only DOTS server' IP ^^^^^^^ addresses are configured, a reference identifier must also be configured for authentication purposes. "server'" should be "server's". 2. Section 9.1.2 and 9.2.2 9.1.2. Format Format of DOTS Address Option ^^^^^^^^^^^^^ 9.2.2. Format Format of DOTS Address Option ^^^^^^^^^^^^^ Duplicate "Format". Two comments: 1. Section 9.1.1 and 9.2.1 describe the DOTS Reference Identifier Option, b= ut the content of these Option is DOTS server name. I'm not quite familiar = with this, so I just raise this and want to make sure if the content is rig= ht. 2. In section 9.1.2, the "List of DOTS IPv4 Addresses" contains one or more= IPv4 addresses of a DOTS server, and the "OPTION_V4_DOTS" can include mult= iple lists. When the "OPTION_V4_DOTS" includes multiple lists, do these lis= ts belong to one DOTS server or multiple DOTS servers? My understanding is = that multiple lists belong to multiple DOTS servers and one DOTS server onl= y has one list. I'm not quite sure, maybe an example can be added in the dr= aft. Best Regards Wei Pan > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman Danyliw > Sent: Saturday, December 01, 2018 6:22 AM > To: dots@ietf.org > Subject: [Dots] Call for adoption on draft-boucadair-dots-server-discover= y > > Hello! > > This is the start of a two week call for input on the WG adoption of the > document: > > draft-boucadair-dots-server-discovery > https://tools.ietf.org/html/draft-boucadair-dots-server-discovery-05 > > The document has been presented and discussed at IETF 103, IETF 100 > and IETF 99; and revisions have been made based on WG feedback. > Discussion of adoption of this draft was previously deferred pending > submission of the signal draft for publication (which occurred in > September 2018). > > At the IETF 103 meeting, there were not many participants who had read > the draft. > > Please provide feedback to the list/chairs if you believe that this > document should be adopted as a WG document. The adoption call will > end on December 14 2018. > > Regards, > Roman and Frank > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots --_000_30E95A901DB42F44BA42D69DB20DFA6A6093D744nkgeml513mbxchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

I support adoption of = this draft.  

 

Two typos:<= /p>

1. Section 5

When only DOTS server&= #8217; IP

   &nbs= p;           ^^^^^^^=

addresses are configur= ed, a reference identifier must also be

configured for authent= ication purposes.

“server’&#= 8221; should be “server’s”.

 

2. Section 9.1.2 and 9= .2.2

9.1.2. Format Format o= f DOTS Address Option

   &nbs= p;   ^^^^^^^^^^^^^

9.2.2. Format Format o= f DOTS Address Option

   &nbs= p;   ^^^^^^^^^^^^^

Duplicate “Forma= t”.

 

Two comments:

1. Section 9.1.1 and 9= .2.1 describe the DOTS Reference Identifier Option, but the content of thes= e Option is DOTS server name. I’m not quite familiar with this, so I = just raise this and want to make sure if the content is right.

2. In section 9.1.2, t= he “List of DOTS IPv4 Addresses” contains one or more IPv4 addr= esses of a DOTS server, and the “OPTION_V4_DOTS” can include mu= ltiple lists. When the “OPTION_V4_DOTS” includes multiple lists= , do these lists belong to one DOTS server or multiple DOTS servers? My unde= rstanding is that multiple lists belong to multiple DOTS servers and one DO= TS server only has one list. I’m not quite sure, maybe an example can= be added in the draft.

 

 

Best Regards

Wei Pan

 

 

> -----Original Mes= sage-----

> From: Dots [mailt= o:dots-bounces@ietf.org] On Behalf Of Roman Danyliw

> Sent: Saturday, D= ecember 01, 2018 6:22 AM

> To: dots@ietf.org=

> Subject: [Dots] C= all for adoption on draft-boucadair-dots-server-discovery

>

> Hello!

>

> This is the start= of a two week call for input on the WG adoption of the

> document:

>

> draft-boucadair-d= ots-server-discovery

> https://tools.ietf.or= g/html/draft-boucadair-dots-server-discovery-05

>

> The document has = been presented and discussed at IETF 103, IETF 100

> and IETF 99; = ; and revisions have been made based on WG feedback.

> Discussion of ado= ption of this draft was previously deferred pending

> submission of the= signal draft for publication (which occurred in

> September 2018).<= /p>

>

> At the IETF 103 m= eeting, there were not many participants who had read

> the draft.

>

> Please provide fe= edback to the list/chairs if you believe that this

> document should b= e adopted as a WG document.  The adoption call will

> end on December 1= 4 2018.

>

> Regards,

> Roman and Frank

>

> _________________= ______________________________

> Dots mailing list=

> Dots@ietf.org<= /a>

> https://www.ietf.org/= mailman/listinfo/dots

--_000_30E95A901DB42F44BA42D69DB20DFA6A6093D744nkgeml513mbxchi_-- From nobody Mon Jan 28 04:21:32 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46D7F130FA5 for ; Mon, 28 Jan 2019 04:21:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMnzussn1aDJ for ; Mon, 28 Jan 2019 04:21:28 -0800 (PST) Received: from orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05008130FC7 for ; Mon, 28 Jan 2019 04:21:27 -0800 (PST) Received: from opfedar00.francetelecom.fr (unknown [xx.xx.xx.11]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id 43p7yt1trZz8t58 for ; Mon, 28 Jan 2019 13:21:26 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.75]) by opfedar00.francetelecom.fr (ESMTP service) with ESMTP id 43p7yt14b8zCqk9 for ; Mon, 28 Jan 2019 13:21:26 +0100 (CET) Received: from OPEXCAUBM5E.corporate.adroot.infra.ftgroup (10.114.13.82) by OPEXCLILMA4.corporate.adroot.infra.ftgroup (10.114.31.75) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 28 Jan 2019 13:21:25 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5E.corporate.adroot.infra.ftgroup ([fe80::849f:f804:b713:d99a%21]) with mapi id 14.03.0415.000; Mon, 28 Jan 2019 13:21:25 +0100 From: To: "dots@ietf.org" Thread-Topic: I-D Action: draft-nishizuka-dots-signal-control-filtering-03.txt Thread-Index: AQHUtK7mogy2p1l52k6SVpNz+T9xcqXEnmuw Date: Mon, 28 Jan 2019 12:21:24 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0E493@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <154842161513.29025.7425932621879748798@ietfa.amsl.com> In-Reply-To: <154842161513.29025.7425932621879748798@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] TR: I-D Action: draft-nishizuka-dots-signal-control-filtering-03.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jan 2019 12:21:30 -0000 Hi all,=20 This version integrates the comments from Wei Pan.=20 Cheers, Med > -----Message d'origine----- > De=A0: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] De la part de > internet-drafts@ietf.org > Envoy=E9=A0: vendredi 25 janvier 2019 14:07 > =C0=A0: i-d-announce@ietf.org > Objet=A0: I-D Action: draft-nishizuka-dots-signal-control-filtering-03.tx= t >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. >=20 >=20 > Title : Controlling Filtering Rules Using DOTS Signal > Channel > Authors : Kaname Nishizuka > Takahiko Nagata > Tirumaleswar Reddy > Mohamed Boucadair > Filename : draft-nishizuka-dots-signal-control-filtering-03.txt > Pages : 16 > Date : 2019-01-25 >=20 > Abstract: > This document specifies an extension to the DOTS signal channel to > control the filtering rules when an attack mitigation is active. >=20 > Particularly, this extension allows a DOTS client to activate or de- > activate filtering rules during a DDoS attack. The characterization > of these filtering rules is supposed to be conveyed by a DOTS client > during peace time by means of DOTS data channel. >=20 > Editorial Note (To be removed by RFC Editor) >=20 > Please update these statements within the document with the RFC > number to be assigned to this document: >=20 > o "This version of this YANG module is part of RFC XXXX;" >=20 > o "RFC XXXX: Controlling Filtering Rules Using DOTS Signal Channel"; >=20 > o reference: RFC XXXX >=20 > o [RFCXXXX] >=20 > Please update these statements with the RFC number to be assigned to > the following documents: >=20 > o "RFC SSSS: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Signal Channel Specification" (used to be > [I-D.ietf-dots-signal-channel]) >=20 > o "RFC DDDD: Distributed Denial-of-Service Open Threat Signaling > (DOTS) Data Channel Specification" (used to be > [I-D.ietf-dots-data-channel]) >=20 > Please update the "revision" date of the YANG module. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-nishizuka-dots-signal-control- > filtering/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-nishizuka-dots-signal-control-filtering= -03 > https://datatracker.ietf.org/doc/html/draft-nishizuka-dots-signal-control= - > filtering-03 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-nishizuka-dots-signal-control- > filtering-03 >=20 >=20 > Please note that it may take a couple of minutes from the time of submiss= ion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From nobody Tue Jan 29 05:28:56 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 526AB12F295; Tue, 29 Jan 2019 05:28:48 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.90.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154876852830.7399.13185287928383159614@ietfa.amsl.com> Date: Tue, 29 Jan 2019 05:28:48 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-signal-channel-28.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jan 2019 13:28:48 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification Authors : Tirumaleswar Reddy Mohamed Boucadair Prashanth Patil Andrew Mortensen Nik Teague Filename : draft-ietf-dots-signal-channel-28.txt Pages : 99 Date : 2019-01-29 Abstract: This document specifies the DOTS signal channel, a protocol for signaling the need for protection against Distributed Denial-of- Service (DDoS) attacks to a server capable of enabling network traffic mitigation on behalf of the requesting client. A companion document defines the DOTS data channel, a separate reliable communication layer for DOTS management and configuration purposes. Editorial Note (To be removed by RFC Editor) Please update these statements within the document with the RFC number to be assigned to this document: o "This version of this YANG module is part of RFC XXXX;" o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification"; o "| [RFCXXXX] |" o reference: RFC XXXX Please update this statement with the RFC number to be assigned to the following documents: o "RFC YYYY: Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification (used to be [I-D.ietf-dots-data-channel]) Please update TBD/TBD1/TBD2 statements with the assignments made by IANA to DOTS Signal Channel Protocol. Also, please update the "revision" date of the YANG modules. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-signal-channel/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-signal-channel-28 https://datatracker.ietf.org/doc/html/draft-ietf-dots-signal-channel-28 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-signal-channel-28 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jan 29 05:31:47 2019 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4D7D124408; Tue, 29 Jan 2019 05:31:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RjLGUPw6-6kd; Tue, 29 Jan 2019 05:31:39 -0800 (PST) Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F7D3124C04; Tue, 29 Jan 2019 05:31:39 -0800 (PST) Received: from opfednr03.francetelecom.fr (unknown [xx.xx.xx.67]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id 43pnTQ0bfPz5wfD; Tue, 29 Jan 2019 14:31:38 +0100 (CET) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfednr03.francetelecom.fr (ESMTP service) with ESMTP id 43pnTP6WzJzDq7J; Tue, 29 Jan 2019 14:31:37 +0100 (CET) Received: from OPEXCAUBM5D.corporate.adroot.infra.ftgroup (10.114.13.60) by OPEXCLILMA2.corporate.adroot.infra.ftgroup (10.114.31.69) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 29 Jan 2019 14:31:37 +0100 Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5D.corporate.adroot.infra.ftgroup ([fe80::8899:bbc3:9726:cd5e%22]) with mapi id 14.03.0415.000; Tue, 29 Jan 2019 14:31:37 +0100 From: To: Benjamin Kaduk CC: "Konda, Tirumaleswar Reddy" , "draft-ietf-dots-signal-channel@ietf.org" , "dots@ietf.org" Thread-Topic: Using Early Data in DOTS (RE: [Dots] AD review of draft-ietf-dots-signal-channel) Thread-Index: AdS31vEPJD2qMb3JSyKP8BrrvaReRQ== Date: Tue, 29 Jan 2019 13:31:36 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93302EA0EC85@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Using Early Data in DOTS (RE: AD review of draft-ietf-dots-signal-channel) X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jan 2019 13:31:46 -0000 Hi Ben, all,=20 We edited a short draft (https://tools.ietf.org/html/draft-boucadair-dots-e= arlydata-00) to motivate the following text included in the signal channel = draft: Section 8 of [RFC8446] discusses some mechanisms to implement to limit the impact of replay attacks on 0-RTT data. If the DOTS server accepts 0-RTT, it MUST implement one of these mechanisms. A DOTS server can reject 0-RTT by sending a TLS HelloRetryRequest. The DOTS signal channel messages sent as early data by the DOTS client are idempotent requests. As a reminder, Message ID (Section 3 of [RFC7252]) is changed each time a new CoAP request is sent, and the Token (Section 5.3.1 of [RFC7252]) is randomized in each CoAP request. The DOTS server(s) can use Message ID and Token in the DOTS signal channel message to detect replay of early data, and accept 0-RTT data at most once. Furthermore, 'mid' value is monotonically increased by the DOTS client for each mitigation request, attackers replaying mitigation requests with lower numeric 'mid' values and overlapping scopes with mitigation requests having higher numeric 'mid' values will be rejected systematically by the DOTS server. Owing to the aforementioned protections, especially those afforded by CoAP deduplication (Section 4.5 of [RFC7252]) and RFC 8446 anti-replay mechanisms, all DOTS signal channel requests are safe to transmit in TLS 1.3 as early data. Refer to [I-D.boucadair-dots-earlydata] for more details. This text and also the Designated Expert guidelines are implemented in -28.= These are the two pending issues from your AD review.=20 Other edits were also made to record what was agreed on the list. We hope this version is now ready to move forward.=20 Cheers, Med > > > > > Regarding the (D)TLS 1.3 0-RTT data, RFC 8446 notes that "Applica= tion > > > > > protocols MUST NOT use 0-RTT data without a profile that defines = its > > use. > > > > > That profile needs to identify which messages or interactions are > safe > > to > > > > use > > > > > with 0-RTT and how to handle the situation when the server reject= s 0- > > RTT > > > > and > > > > > falls back to 1-RTT." So we either need to say which client requ= ests > > are > > > > 0-RTT > > > > > safe (and why) or defer that profile to another document. draft- > ietf- > > > > dnsop- > > > > > session-signal is perhaps an example of a document that specifies > which > > > > > messages are/aren't allowed in early data. > > > > > (draft-ietf-acme-acme is another, but an uninteresting one, since > they > > make > > > > > every request include a single-use nonce, and all messages are 0-= RTT > > safe.) > > > > > Our use of increasing 'mid' values may help here, in terms of > allowing > > > > DELETEs > > > > > to be safe, but I'd have to think a little more to be sure that > > requesting > > > > > mitigation would be safe. (On first glance the session-managemne= t > bits > > > > would > > > > > not be safe, but I may be missing something.) > > > > > > > > The draft only uses idempotent requests (GET, PUT and DELETE), and = CoAP > > is > > > > capable of detecting message duplication (see > > > > https://tools.ietf.org/html/rfc7252#section-4.5) for both confirmab= le > and > > > > non-confirmable messages. > > > > [1] An attacker replaying DELETE will not have any adverse impact, > 2.02 > > > > (Deleted) Response Code is returned even if the mitigation request = does > > not > > > > exist. > > > > [2] The techniques discussed in Section 8 of RFC8446 should suffice= to > > handle > > > > anti-replay (e.g. an attacker replaying a 0-RTT data carrying an ol= d > > > > mitigation request replaced by a new mitigation scope). > > > > > > > > > > [Med] FWIW, we do already have this text in the draft: > > > > > > Section 8 of [RFC8446] discusses some mechanisms to implement t= o > > > limit the impact of replay attacks on 0-RTT data. If the DOTS > > > server accepts 0-RTT, it MUST implement one of these mechanisms= . > > > A DOTS server can reject 0-RTT by sending a TLS HelloRetryReque= st From nobody Wed Jan 30 22:53:09 2019 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 52468129B88; Wed, 30 Jan 2019 22:53:00 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dots@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.90.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: dots@ietf.org Message-ID: <154891758028.10549.18264564519771890581@ietfa.amsl.com> Date: Wed, 30 Jan 2019 22:53:00 -0800 Archived-At: Subject: [Dots] I-D Action: draft-ietf-dots-requirements-17.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.29 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Jan 2019 06:53:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling WG of the IETF. Title : Distributed Denial of Service (DDoS) Open Threat Signaling Requirements Authors : Andrew Mortensen Robert Moskowitz Tirumaleswar Reddy Filename : draft-ietf-dots-requirements-17.txt Pages : 21 Date : 2019-01-30 Abstract: This document defines the requirements for the Distributed Denial of Service (DDoS) Open Threat Signaling (DOTS) protocols enabling coordinated response to DDoS attacks. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-requirements/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dots-requirements-17 https://datatracker.ietf.org/doc/html/draft-ietf-dots-requirements-17 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-requirements-17 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/