From nobody Wed Apr 1 15:17:33 2020 Return-Path: X-Original-To: int-dir@ietf.org Delivered-To: int-dir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5920E3A1047; Wed, 1 Apr 2020 15:17:05 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Jouni Korhonen via Datatracker To: Cc: draft-ietf-sidrops-ov-egress.all@ietf.org, last-call@ietf.org, sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.123.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158577942531.31132.14192491820838585248@ietfa.amsl.com> Reply-To: Jouni Korhonen Date: Wed, 01 Apr 2020 15:17:05 -0700 Archived-At: Subject: [Int-dir] Intdir telechat review of draft-ietf-sidrops-ov-egress-02 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2020 22:17:06 -0000 Reviewer: Jouni Korhonen Review result: Ready with Nits I found the document ready for publication with one editorial nit. The abstract doesn't mention that this document updates RFC6811, which it should. From nobody Wed Apr 1 19:25:37 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C6303A0AC0; Wed, 1 Apr 2020 19:25:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id geVSio8CxnQT; Wed, 1 Apr 2020 19:25:25 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F28FA3A0AAD; Wed, 1 Apr 2020 19:25:24 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.90_1) (envelope-from ) id 1jJpXn-0006dw-D0; Thu, 02 Apr 2020 02:25:23 +0000 Date: Wed, 01 Apr 2020 19:25:22 -0700 Message-ID: From: Randy Bush To: Jouni Korhonen via Datatracker Cc: , draft-ietf-sidrops-ov-egress.all@ietf.org, last-call@ietf.org, sidrops@ietf.org In-Reply-To: <158577942531.31132.14192491820838585248@ietfa.amsl.com> References: <158577942531.31132.14192491820838585248@ietfa.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/26.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Int-dir] Intdir telechat review of draft-ietf-sidrops-ov-egress-02 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2020 02:25:28 -0000 > The abstract doesn't mention that this document updates RFC6811, which > it should. is that the convention now, even when the masthead and the intro says it? randy From nobody Thu Apr 2 05:02:19 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 574813A10BD; Thu, 2 Apr 2020 05:01:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=LPj2u8XP; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=WyjJ9Edl Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JBHmv1p3V_5V; Thu, 2 Apr 2020 05:01:48 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98AA73A10BA; Thu, 2 Apr 2020 05:01:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1332; q=dns/txt; s=iport; t=1585828908; x=1587038508; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Hy0mpr0L/skcmPVILB2+4qbdp2BOIlIE160Y5pVw4zw=; b=LPj2u8XPZq7PbX7plnzu0l6Bsc28RHl4FMscFLchNrUUZM5VAZmfU0l8 I69sZSxJaLY+uDlzQ0nBSno34XTIItnynd+An6bQ2JzDrnIlx7njJJvsV lW/4bOqrCicnMzvugZVGbW1tj7yBYbIsfe0zSKqP6sp5i2VEnAcaCa/YN 0=; IronPort-PHdr: =?us-ascii?q?9a23=3Ai7gYsBTwdswZqC8gnqD6DZU0gtpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESXBdfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5g640NmhA4RsuMCEn1NvnvOiEkDcJJV1JN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CxAADz0oVe/4gNJK1mGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF7gVRQBWxYIAQLKoQbg0UDimyCX4ltjjGCUgN?= =?us-ascii?q?UCgEBAQwBARgLCgIEAQGERAIXgikkOBMCAwEBCwEBBQEBAQIBBQRthVYMhXA?= =?us-ascii?q?BAQEBAwEBEBERDAEBLAsBCwQCAQgRAwECAwImAgICHwYLFAEICAIEAQ0FIoM?= =?us-ascii?q?EAYJLAy4BDqQUAoE5iGJ1gTKCfwEBBYUyDQuCDAMGgQ4qjDEagUE/gTgggk0?= =?us-ascii?q?+gh5JAQGBZYMSMoIskQKfPkYKgj2SYwSENB2SPIk2jymLW5A7AgQCBAUCDgE?= =?us-ascii?q?BBYFpIoFXcBU7KgGCPlAYDY4dg3OFFIVBdIEpjh4BAQ?= X-IronPort-AV: E=Sophos;i="5.72,335,1580774400"; d="scan'208";a="457160857" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 02 Apr 2020 12:01:46 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 032C1kwH028993 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 2 Apr 2020 12:01:46 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 2 Apr 2020 07:01:46 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 2 Apr 2020 07:01:45 -0500 Received: from NAM11-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 2 Apr 2020 07:01:45 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=N55JaUZfWJxr9LYH/MBujOKjJrBYeZMNpgE9uxvWojaphtXtNtKNkkzqwljwdmAzDaq06BI3QQBliDR1rYezqe9Fsllh/PY2JvvOupf+yLPxTHeWvQ46Y2JQr51VWh/5jHdnsCGDrDe0/Zdf+4nERTbYGgyFjGbZmVdx4Eu1w/4POEtkYKE3vnPArsNvT++MZPbeeQpYwF4WYQ2C1zbNiaKR6hWlz12dNmQoisIRviBLH9V4EBn1GG8ivtZ8dicUjaaf5JCWaEFp/hCrd/J8a7rC2a4tFDpVWRDHjkVff0oPBdawfVLw9YMMAfGp5i555DTWE67PxFpN4eNeaF+h6Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Hy0mpr0L/skcmPVILB2+4qbdp2BOIlIE160Y5pVw4zw=; b=PET9XFUrVeHUTAeTfD92N5XTvCiAfjTNG1Q/gS/+hV70IT59jgla/Ztyz6G3ef79D/HMJw5pqI9rPz1I8Z65Y+ovBMyDs9zDSB4nlD8heMwxyGjnfpCHLAMAh5AmUWSEqkEqfEWvuH8G52mrhPKXbQ5RPAPc/GCd6ut/cHfod3bVAh6eb63UzVBsGDFJk8mjK53tWIgyAdFcwTaiDo0KSIuXbWUUO5AT45vm7Ld0lCi7bjM3BnOzWnWUGYwpPkoF0yxjizMS1Cos+V0cyhCHrb0mC7HooMHhx5p9RdyGG2QdDylpxXX57QOIbRWPj4zHnBIfVNNH1iKH63SwwORBFQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Hy0mpr0L/skcmPVILB2+4qbdp2BOIlIE160Y5pVw4zw=; b=WyjJ9EdlDIq90fupB1CrC3wHQSlUNV3NEwMvx9z+au8/TjECjKvZUpL1b8D8Bpl1CGkKCVN6MgoMHWnGWhCvEcJ4AkOCgMse9hGW2QXvhpN7oyHr/cnzdEKt8+H8QLIDNBdeWda8a6q5FPNX8v2iYKiiXZKQkKnFXCQeSeGfUDM= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (2603:10b6:3:10d::13) by DM5PR11MB0076.namprd11.prod.outlook.com (2603:10b6:4:6b::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2878.16; Thu, 2 Apr 2020 12:01:45 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::680d:e22e:72d5:67ca]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::680d:e22e:72d5:67ca%3]) with mapi id 15.20.2856.019; Thu, 2 Apr 2020 12:01:45 +0000 From: "Eric Vyncke (evyncke)" To: Jouni Korhonen , "int-dir@ietf.org" CC: "last-call@ietf.org" , "sidrops@ietf.org" , "draft-ietf-sidrops-ov-egress.all@ietf.org" Thread-Topic: [Int-dir] Intdir telechat review of draft-ietf-sidrops-ov-egress-02 Thread-Index: AQHWCHNPCt3H6YeVRkO26Wz411x8+ahl3ZQA Date: Thu, 2 Apr 2020 12:01:45 +0000 Message-ID: <1E8D4B13-FFCB-42CD-BC05-73060C9548BE@cisco.com> References: <158577942531.31132.14192491820838585248@ietfa.amsl.com> In-Reply-To: <158577942531.31132.14192491820838585248@ietfa.amsl.com> Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:ad33:1e6:78ba:617b] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e7ff31d4-4724-487a-503b-08d7d6fd9d7f x-ms-traffictypediagnostic: DM5PR11MB0076: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0361212EA8 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM5PR11MB1753.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(366004)(136003)(396003)(346002)(39860400002)(376002)(6486002)(110136005)(4326008)(33656002)(54906003)(5660300002)(2906002)(966005)(71200400001)(316002)(478600001)(36756003)(6506007)(6512007)(66946007)(81166006)(76116006)(186003)(53546011)(91956017)(2616005)(86362001)(66556008)(66446008)(8936002)(64756008)(8676002)(66476007)(4744005)(81156014); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: xsuqjmQRI8QETrOmJGUo2tmrD4CNymR5mFMAnoOQLy+TMVBRztZ0gRSuM1WvPFYWK/+KQcSPFa6hP26lKKpoilaQVNcCBRnAViFzjVTN+wNzlohEQmOzHcLR28IzW3R//qj+o00Tb/nFjwkayazsxkQ5XH3r1BWRgPJBvotHMF/T/+UFvZgEJOXH5vKX9Pe3Up8boIhSNUrlnGQC/fOA5g== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: e7ff31d4-4724-487a-503b-08d7d6fd9d7f X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Apr 2020 12:01:45.2231 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jB2TC9RmGLWobKm2dCdv5+mG8jpQylIQRmekiES00mrBcGV4n6szB4ux6sWSQGYWwm4p/c1OH4V7wSzGASAIxw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB0076 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [Int-dir] Intdir telechat review of draft-ietf-sidrops-ov-egress-02 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2020 12:01:51 -0000 VGhhbmsgeW91IEpvdW5pIGZvciB0aGUgcmV2aWV3DQoNCi3DqXJpYw0KDQrvu78tLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogSW50LWRpciA8aW50LWRpci1ib3VuY2VzQGlldGYub3Jn PiBvbiBiZWhhbGYgb2YgSm91bmkgS29yaG9uZW4gdmlhIERhdGF0cmFja2VyIDxub3JlcGx5QGll dGYub3JnPg0KUmVwbHktVG86IEpvdW5pIEtvcmhvbmVuIDxqb3VuaS5ub3NwYW1AZ21haWwuY29t Pg0KRGF0ZTogVGh1cnNkYXksIDIgQXByaWwgMjAyMCBhdCAwMDoxNw0KVG86ICJpbnQtZGlyQGll dGYub3JnIiA8aW50LWRpckBpZXRmLm9yZz4NCkNjOiAibGFzdC1jYWxsQGlldGYub3JnIiA8bGFz dC1jYWxsQGlldGYub3JnPiwgInNpZHJvcHNAaWV0Zi5vcmciIDxzaWRyb3BzQGlldGYub3JnPiwg ImRyYWZ0LWlldGYtc2lkcm9wcy1vdi1lZ3Jlc3MuYWxsQGlldGYub3JnIiA8ZHJhZnQtaWV0Zi1z aWRyb3BzLW92LWVncmVzcy5hbGxAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbSW50LWRpcl0gSW50ZGly IHRlbGVjaGF0IHJldmlldyBvZiBkcmFmdC1pZXRmLXNpZHJvcHMtb3YtZWdyZXNzLTAyDQoNCiAg ICBSZXZpZXdlcjogSm91bmkgS29yaG9uZW4NCiAgICBSZXZpZXcgcmVzdWx0OiBSZWFkeSB3aXRo IE5pdHMNCiAgICANCiAgICBJIGZvdW5kIHRoZSBkb2N1bWVudCByZWFkeSBmb3IgcHVibGljYXRp b24gd2l0aCBvbmUgZWRpdG9yaWFsIG5pdC4NCiAgICBUaGUgYWJzdHJhY3QgZG9lc24ndCBtZW50 aW9uIHRoYXQgdGhpcyBkb2N1bWVudCB1cGRhdGVzIFJGQzY4MTEsIHdoaWNoIGl0IHNob3VsZC4N CiAgICANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KICAgIEludC1kaXIgbWFpbGluZyBsaXN0DQogICAgSW50LWRpckBpZXRmLm9yZw0K ICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaW50LWRpcg0KICAgIA0K DQo= From nobody Thu Apr 2 10:24:37 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F5823A0AA1; Thu, 2 Apr 2020 10:24:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BBxCHSNThqJE; Thu, 2 Apr 2020 10:24:16 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8E193A0A52; Thu, 2 Apr 2020 10:24:16 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.90_1) (envelope-from ) id 1jK3Zf-0000Pa-C6; Thu, 02 Apr 2020 17:24:15 +0000 Date: Thu, 02 Apr 2020 10:24:14 -0700 Message-ID: From: Randy Bush To: Jouni Korhonen via Datatracker Cc: , draft-ietf-sidrops-ov-egress.all@ietf.org, last-call@ietf.org, sidrops@ietf.org In-Reply-To: <158577942531.31132.14192491820838585248@ietfa.amsl.com> References: <158577942531.31132.14192491820838585248@ietfa.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/26.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Int-dir] Intdir telechat review of draft-ietf-sidrops-ov-egress-02 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2020 17:24:19 -0000 warren informed me that fashions had changed, and indeed an 'updates' goes in the abstract. -03 will have Abstract A BGP speaker may perform RPKI origin validation not only on routes received from BGP neighbors and routes that are redistributed from other routing protocols, but also on routes it sends to BGP neighbors. For egress policy, it is important that the classification uses the effective origin AS of the processed route, which may specifically be altered by the commonly available knobs such as removing private ASs, confederation handling, and other modifications of the origin AS. This document updates [RFC6811]. randy From nobody Fri Apr 3 05:10:09 2020 Return-Path: X-Original-To: int-dir@ietf.org Delivered-To: int-dir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A6723A18D1; Fri, 3 Apr 2020 05:10:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Brian Haberman via Datatracker To: Cc: last-call@ietf.org, draft-ietf-taps-transport-security.all@ietf.org, taps@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.123.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158591580027.17912.14591985076306660054@ietfa.amsl.com> Reply-To: Brian Haberman Date: Fri, 03 Apr 2020 05:10:00 -0700 Archived-At: Subject: [Int-dir] Intdir telechat review of draft-ietf-taps-transport-security-11 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2020 12:10:01 -0000 Reviewer: Brian Haberman Review result: Ready with Issues This document is a survey of network security protocols and their interaction with transport and application protocols. It is clearly written and easy to read. I have a minor comment on the contents of this draft. It is not abundantly clear what the criteria was for selecting the subset of security protocols included in this draft. Some notable omissions include SSH, L2TP, and GRE. These seem like interesting omissions given their popularity in a number of deployment scenarios. Not a showstopper in my opinion, but interesting to note. From nobody Fri Apr 3 05:51:09 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DBFC3A07AD; Fri, 3 Apr 2020 05:51:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zpe5ijaG1nYy; Fri, 3 Apr 2020 05:51:04 -0700 (PDT) Received: from pegasus.erg.abdn.ac.uk (pegasus.erg.abdn.ac.uk [IPv6:2001:630:42:150::2]) by ietfa.amsl.com (Postfix) with ESMTP id 817CA3A07B1; Fri, 3 Apr 2020 05:51:03 -0700 (PDT) Received: from GF-MacBook-Pro.local (fgrpf.plus.com [212.159.18.54]) by pegasus.erg.abdn.ac.uk (Postfix) with ESMTPSA id E619E1B000AD; Fri, 3 Apr 2020 13:50:55 +0100 (BST) To: Brian Haberman , int-dir@ietf.org Cc: last-call@ietf.org, draft-ietf-taps-transport-security.all@ietf.org, taps@ietf.org References: <158591580027.17912.14591985076306660054@ietfa.amsl.com> From: Gorry Fairhurst Message-ID: <59caf50b-6602-978c-f3b4-955c42d73f79@erg.abdn.ac.uk> Date: Fri, 3 Apr 2020 13:50:55 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:68.0) Gecko/20100101 Thunderbird/68.6.0 MIME-Version: 1.0 In-Reply-To: <158591580027.17912.14591985076306660054@ietfa.amsl.com> Content-Type: multipart/alternative; boundary="------------246C35820444AD81993F8625" Content-Language: en-GB Archived-At: Subject: Re: [Int-dir] [Taps] Intdir telechat review of draft-ietf-taps-transport-security-11 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2020 12:51:06 -0000 This is a multi-part message in MIME format. --------------246C35820444AD81993F8625 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit I think GRE (the one I know more) should be mentioned as existing somehow. ... even if the WG doesn't want to add an analysis of GRE! A suggested starting text blob proposal for GRE could be: Generic Routing Encapsulation [RFC2784] specifies a protocol for encapsulation of an arbitrary protocol over another arbitrary network layer protocol. GRE tunnels do not by default provide security features. [RFC2890] describes enhancements by which two fields, Key and Sequence Number, can be optionally carried in the GRE Header to implement security functions. [RFC8086] specifies a method of encapsulating network protocol packets using GRE in UDP. GRE can be used in combination with IPsec (see RFC2890). Gorry On 03/04/2020 13:10, Brian Haberman via Datatracker wrote: > Reviewer: Brian Haberman > Review result: Ready with Issues > > This document is a survey of network security protocols and their interaction > with transport and application protocols. It is clearly written and easy to > read. I have a minor comment on the contents of this draft. > > It is not abundantly clear what the criteria was for selecting the subset of > security protocols included in this draft. Some notable omissions include SSH, > L2TP, and GRE. These seem like interesting omissions given their popularity in > a number of deployment scenarios. Not a showstopper in my opinion, but > interesting to note. > > > _______________________________________________ > Taps mailing list > Taps@ietf.org > https://www.ietf.org/mailman/listinfo/taps --------------246C35820444AD81993F8625 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit

I think GRE (the one I know more) should be mentioned as existing somehow.

... even if the WG doesn't want to add an analysis of GRE!

A suggested starting text blob proposal for GRE could be:

Generic Routing Encapsulation [RFC2784] specifies a protocol for encapsulation of an arbitrary protocol over another arbitrary network layer protocol.  GRE tunnels do not by default provide security features. [RFC2890] describes enhancements by which two fields, Key and Sequence Number, can be optionally carried in the GRE Header to implement security functions. [RFC8086] specifies a method of encapsulating network protocol
packets using GRE in UDP. GRE can be used in combination with IPsec (see RFC2890). 

Gorry
On 03/04/2020 13:10, Brian Haberman via Datatracker wrote:
Reviewer: Brian Haberman
Review result: Ready with Issues

This document is a survey of network security protocols and their interaction
with transport and application protocols. It is clearly written and easy to
read. I have a minor comment on the contents of this draft.

It is not abundantly clear what the criteria was for selecting the subset of
security protocols included in this draft. Some notable omissions include SSH,
L2TP, and GRE. These seem like interesting omissions given their popularity in
a number of deployment scenarios. Not a showstopper in my opinion, but
interesting to note.


_______________________________________________
Taps mailing list
Taps@ietf.org
https://www.ietf.org/mailman/listinfo/taps
--------------246C35820444AD81993F8625-- From nobody Wed Apr 8 02:30:04 2020 Return-Path: X-Original-To: int-dir@ietf.org Delivered-To: int-dir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 803593A0F4A; Wed, 8 Apr 2020 02:29:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?=C3=89ric_Vyncke_via_Datatracker?= To: "The IESG" Cc: draft-ietf-regext-data-escrow@ietf.org, regext-chairs@ietf.org, regext@ietf.org, James Gould , jgould@verisign.com, cjbc@it.uc3m.es, int-dir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.124.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?=C3=89ric_Vyncke?= Message-ID: <158633819848.32694.18059299837744880060@ietfa.amsl.com> Date: Wed, 08 Apr 2020 02:29:58 -0700 Archived-At: Subject: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_No_Objection_on_draft-i?= =?utf-8?q?etf-regext-data-escrow-07=3A_=28with_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2020 09:29:59 -0000 Éric Vyncke has entered the following ballot position for draft-ietf-regext-data-escrow-07: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-regext-data-escrow/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for the work put into this document. I have appreciated the examples of section 13. I am also support the "data at rest encryption" as noted by Roman's DISCUSS as by Carlos in his INTDIR review. Please address the issues found by Carlos during the INTDIR review: https://mailarchive.ietf.org/arch/msg/int-dir/8BJEPavSHK0BYTe_f1W1BFG-fwA Finally, for my own curiosity, is there a reason why using the word "watermark" rather than "timestamp" ? Regards, -éric From nobody Wed Apr 8 08:11:07 2020 Return-Path: X-Original-To: int-dir@ietf.org Delivered-To: int-dir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6037B3A0EDD; Wed, 8 Apr 2020 02:14:16 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?=C3=89ric_Vyncke_via_Datatracker?= To: "The IESG" Cc: draft-ietf-sidrops-ov-egress@ietf.org, sidrops-chairs@ietf.org, sidrops@ietf.org, sidrops-chairs@ietf.org, keyur@arrcus.com, warren@kumari.net, nathalie@ripe.net, keyur@arrcus.com, jouni.nospam@gmail.com, int-dir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.124.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?=C3=89ric_Vyncke?= Message-ID: <158633725633.18035.6154974339527769582@ietfa.amsl.com> Date: Wed, 08 Apr 2020 02:14:16 -0700 Archived-At: X-Mailman-Approved-At: Wed, 08 Apr 2020 08:11:05 -0700 Subject: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_No_Objection_on_draft-i?= =?utf-8?q?etf-sidrops-ov-egress-03=3A_=28with_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2020 09:14:17 -0000 Éric Vyncke has entered the following ballot position for draft-ietf-sidrops-ov-egress-03: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sidrops-ov-egress/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thank you for the document. Randy, thank you for the fix to the the issue found by Jouri in the INTDIR review: https://mailarchive.ietf.org/arch/msg/int-dir/bUWYKX6ey404TmpXdwfdVbWv1yM Thank you Jouri -éric From nobody Thu Apr 9 06:10:59 2020 Return-Path: X-Original-To: int-dir@ietf.org Delivered-To: int-dir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EAC843A1077; Thu, 9 Apr 2020 03:01:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?=C3=89ric_Vyncke_via_Datatracker?= To: "The IESG" Cc: draft-ietf-taps-transport-security@ietf.org, taps-chairs@ietf.org, taps@ietf.org, Philipp Tiesel , caw@heapingbits.net, philipp@tiesel.net, mohit.m.sethi@ericsson.com, brian@innovationslab.net, int-dir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.125.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: =?utf-8?q?=C3=89ric_Vyncke?= Message-ID: <158642650492.8627.16111048765603393250@ietfa.amsl.com> Date: Thu, 09 Apr 2020 03:01:44 -0700 Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 06:10:57 -0700 Subject: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 10:01:45 -0000 Éric Vyncke has entered the following ballot position for draft-ietf-taps-transport-security-11: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-taps-transport-security/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Thank you for the work put into this document. It is really easy to read. Nevertheless, I am balloting a DISCUSS (see below), I sincerely hope that I am wrongly asserting the lack of IPv6 support for CurveCP else the easy way to clear my DISCUSS would be to mention this limitation in section 3 even if the focus of this I-D is on the API. Please find below some non-blocking COMMENTs. An answer will be appreciated. I hope that this helps to improve the document, Regards, -éric == DISCUSS == I question the inclusion of CurveCP in the mix as per https://curvecp.org/addressing.html it does not seem to support IPv6. At the bare minimum, the I-D should mention this restriction in section 3. (and I hope to be corrected about CurveCP IPv6 support). ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Please respond to the IoT-directorate review by Mohit: https://mailarchive.ietf.org/arch/msg/iot-directorate/xTVOvQ7kI78sDPZQuVsTvGB2x0s Please respond to the INT-DIR review by Brian: https://mailarchive.ietf.org/arch/msg/int-dir/2IHPgukaAAMvMjO7TXvo_ujcI_I + Gorry Fairhurst's about GRE Generic comment about the intended transport: all protocols analyzed in this document are point to point (no multicast), this should probably be mentioned in the introduction. -- Section 1 -- Is there any reason why the integrity property of IPsec AH is not mentioned ? Same also applies in section 2 when "security protocol" is defined. -- Section 3 -- Use the wording of "record protocol" generically while the term "record protocol" is defined in section 2 as a blocked data transport (like in TLS). Suggest the use of "data transfer protocol" ? An important property of such protocols is to be able to traverse a NAPT box (that I hate)... I suggest to mention whether the analyzed protocols support NAT-traversal in this description section or even in the analysis parts as having a different view (application and network layers seeing possibly different IP addresses so a potential impact on the API). From nobody Thu Apr 9 06:11:03 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03A5F3A097A; Thu, 9 Apr 2020 05:15:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BueXx_1aymMj; Thu, 9 Apr 2020 05:15:51 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on0625.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0e::625]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C8E93A00D3; Thu, 9 Apr 2020 05:15:49 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Of5x4I/+ZmA8SxmA5hgkt6GYK+yO+6pAcP9vkQ1+VHWjslpxlFeRrRwJrx+2kk9zodVsf1xBjO1Dk/4TRc4JWIA8CRzNI8ZbofPgtWI06lWLmN5pP7+jHdLmvHslY55R0vO5eTFNSCX/iYO8OOLVsQ/invLUNPcmT9hlaA6lujv/DAWuXZTRCWMSGoP10Dwm+6ENitEFTrlhW06G3OAJBLz3RmGjkewRKojaRSFth2fMCeHNdDRdR6ABGuEaBW1no5VnhcAL9FXsp9pMV9Vf+431Q+ojxRUOLF4ZKzq3i2ZnMYvcnzMEov+Su45bAhKOOIP8+pTEGCeeRVOgfz0PGQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t5p/CX1hCJOXGyLryLK++eFfTkNIe7uk5a32vyowQf4=; b=HUGndvO5EDnw5mzc0JAz0L6l/w1d5OIW3BjHvekye2TcbOOCGrJxZP0kJCREhrLKMf23hsjZOczokJHVAZeRQM6Ey3sGzeMfqbrbyWWHFvbFPkvrGjVLCxlt28cymzsPNgBMF4RYSBjy7Xd/JG7tQVg4P72ZHRr0PcI4AsqBS9ANPP+cDXV5/MCN3FT8CBUyh8oFjTnaP//bF8fOdKPl7coHka2OTDJoUCb1bqLGeWJ6lu+E4JgIZW6ZJkCzJUUoo7F2yfgmLzelwiHUY93BXXR/sUUv0be8wEIn3VT2Re7c/Kol4RANN6+hzdhkFoirjIXEtx8WysxAqsjBrpV1YQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t5p/CX1hCJOXGyLryLK++eFfTkNIe7uk5a32vyowQf4=; b=qB6yiZH+pHq9z4azbEIl5FV0f8zsDgmtmNY/MbIPqlYHjzMSRxP8FLWLtbUNOFKbppBy3YQLbKOO/HFNFJ8GBkhP/0Jt+wrlVRiUJTMv/0wSz7r3wanriTzxXXeEBOEqc0qFkFu/cGBanU+rcS9cUCnk4+qopCOfqRZ5QXAlzZc= Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR0702MB3802.eurprd07.prod.outlook.com (2603:10a6:7:89::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.14; Thu, 9 Apr 2020 12:15:47 +0000 Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::ec28:2c21:6d78:917a]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::ec28:2c21:6d78:917a%2]) with mapi id 15.20.2900.012; Thu, 9 Apr 2020 12:15:47 +0000 From: Magnus Westerlund To: "iesg@ietf.org" , "evyncke@cisco.com" CC: "brian@innovationslab.net" , Mohit Sethi M , "draft-ietf-taps-transport-security@ietf.org" , "philipp@tiesel.net" , "int-dir@ietf.org" , "taps-chairs@ietf.org" , "taps@ietf.org" , "caw@heapingbits.net" Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRhcHMtdHJh?= =?utf-8?Q?nsport-security-11:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHWDlXqWLSSULahQE2VBetBTFRtmahwtISA Date: Thu, 9 Apr 2020 12:15:47 +0000 Message-ID: <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> In-Reply-To: <158642650492.8627.16111048765603393250@ietfa.amsl.com> Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-mailer: Evolution 3.28.5-0ubuntu0.18.04.1 authentication-results: spf=none (sender IP is ) smtp.mailfrom=magnus.westerlund@ericsson.com; x-originating-ip: [158.174.118.23] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f94628a3-cb23-44f3-e4aa-08d7dc7fbc4a x-ms-traffictypediagnostic: HE1PR0702MB3802:|HE1PR0702MB3802: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(136003)(376002)(39860400002)(396003)(366004)(346002)(316002)(66446008)(81156014)(66556008)(2616005)(54906003)(66616009)(186003)(110136005)(64756008)(15650500001)(66946007)(26005)(81166007)(4326008)(44832011)(6506007)(76116006)(224303003)(2906002)(966005)(99936003)(86362001)(5660300002)(36756003)(6512007)(8936002)(478600001)(71200400001)(66476007)(6486002)(99106002); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: MbmNC3b0HEd5j1a4mhYvrYA1CMo0MjFWYmkKwK9AG2OZ3eY3WIRMhdUtVM+t6+p9JkLedtaSMlm7loo5HTRhTaMbynQnjfmDtyl6lBErgnivPAxAoyiMoOBpgKnBbFk9q/Ow7H2uBWNrjCDepkRLIA== Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-YccPNQcHpprPGiDIQr5Z" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: f94628a3-cb23-44f3-e4aa-08d7dc7fbc4a X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 12:15:47.2637 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ScUdtiPf96qYI3bqvbovucm+NtwZP0YREMQptjq8DU57hIOrvC5tHLNJVx6a99ZduzSrSbyFMsKigiUgbh1CpRzPHXu/kYitWUq5bS1jEr4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3802 Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 06:10:58 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 12:15:56 -0000 --=-YccPNQcHpprPGiDIQr5Z Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Eric, Aren't you going a bit to far now with this discuss? Yes, IETF stream procotocols are expected to support IPv6. This is a non-IETF devleoped secu= rity protocol which is investigated from the perspective of its features to infl= uence considerations of required API surface for security features. All discussed= in relation to a set of aspects where the only one having to do with addressin= g is source-address valdiation and which CurveCP do not support as particular relevant.=20 I don't see how it is going to affect or impact that future work in TAPS WG= . Why do you think an aspect of a protocol that isn't discussed being relevan= t to mention?=20 If you have a good reason fine then a disclaimer could be added. But I don'= t see how it would not result in a unconnected comment on a specific protocol whi= ch has no connection to the purpose of the document. Cheers Magnus On Thu, 2020-04-09 at 03:01 -0700, =C3=89ric Vyncke via Datatracker wrote: > =C3=89ric Vyncke has entered the following ballot position for > draft-ietf-taps-transport-security-11: Discuss >=20 > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) >=20 >=20 > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. >=20 >=20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-taps-transport-security/ >=20 >=20 >=20 > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- >=20 > Thank you for the work put into this document. It is really easy to read. >=20 > Nevertheless, I am balloting a DISCUSS (see below), I sincerely hope that= I am > wrongly asserting the lack of IPv6 support for CurveCP else the easy way = to > clear my DISCUSS would be to mention this limitation in section 3 even if= the > focus of this I-D is on the API. >=20 > Please find below some non-blocking COMMENTs. An answer will be appreciat= ed. >=20 > I hope that this helps to improve the document, >=20 > Regards, >=20 > -=C3=A9ric >=20 > =3D=3D DISCUSS =3D=3D >=20 > I question the inclusion of CurveCP in the mix as per >=20 https://protect2.fireeye.com/v1/url?k=3Dc6d9b121-9a0dbd7f-c6d9f1ba-8691959e= d9b7-6efcfea6e017deb9&q=3D1&e=3Dd62bfe3e-4eac-4ef1-877e-ac1f40b4418d&u=3Dht= tps%3A%2F%2Fcurvecp.org%2Faddressing.html > it does not seem to support IPv6. At the > bare minimum, the I-D should mention this restriction in section 3. (and = I > hope > to be corrected about CurveCP IPv6 support). >=20 >=20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 > Please respond to the IoT-directorate review by Mohit: >=20 https://mailarchive.ietf.org/arch/msg/iot-directorate/xTVOvQ7kI78sDPZQuVsTv= GB2x0s > Please respond to the INT-DIR review by Brian: > https://mailarchive.ietf.org/arch/msg/int-dir/2IHPgukaAAMvMjO7TXvo_ujcI_I= + > Gorry Fairhurst's about GRE >=20 > Generic comment about the intended transport: all protocols analyzed in t= his > document are point to point (no multicast), this should probably be menti= oned > in the introduction. >=20 > -- Section 1 -- > Is there any reason why the integrity property of IPsec AH is not mention= ed ? > Same also applies in section 2 when "security protocol" is defined. >=20 > -- Section 3 -- > Use the wording of "record protocol" generically while the term "record > protocol" is defined in section 2 as a blocked data transport (like in TL= S). > Suggest the use of "data transfer protocol" ? >=20 > An important property of such protocols is to be able to traverse a NAPT = box > (that I hate)... I suggest to mention whether the analyzed protocols supp= ort > NAT-traversal in this description section or even in the analysis parts a= s > having a different view (application and network layers seeing possibly > different IP addresses so a potential impact on the API). >=20 >=20 >=20 --=20 Cheers Magnus Westerlund=20 ---------------------------------------------------------------------- Networks, Ericsson Research ---------------------------------------------------------------------- Ericsson AB | Phone +46 10 7148287 Torshamnsgatan 23 | Mobile +46 73 0949079 SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com ---------------------------------------------------------------------- --=-YccPNQcHpprPGiDIQr5Z Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEtww ggYHMIID76ADAgECAhALRm3NcHtuMGWutmt5cXntMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYT AlNFMREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBD QSB2MzAeFw0xNzEyMTUwNzIyMjNaFw0yMDEyMTUwNzIyMjJaMHAxETAPBgNVBAoMCEVyaWNzc29u MRowGAYDVQQDDBFNYWdudXMgV2VzdGVybHVuZDEtMCsGCSqGSIb3DQEJARYebWFnbnVzLndlc3Rl cmx1bmRAZXJpY3Nzb24uY29tMRAwDgYDVQQFEwdlcmFtc3dkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsKlHZvB3TsmLEDtPSiFFKAh73S2wApt+laqg5eXTqonqnzT9ykEGL2dx9mBT +2WZiIKxo4w2sisVl3EEYTqXTkctpur7cN29gLC8F3tJHGI2sUVpO9AwpVrN+UuHEVetHt7hdxW9 uYd0LJJ8TP6/wGkIfAFaZxlZUn79O2eHElfih1iVIiTZXLcEe1rBJtzhUNRHWgOm2vQlDJ4sCpig GFq5w+XSRviEQMkQZRvw1CQmb35QS/C/T36ogzIRHDuAdkoSaiUOY/S2dLp4HkwvOOg+tADpaHkr bdmdnjKGrYSnJigmxw14pJugxL/Vb2EeVcgpAfVVst7Lm4POPRI8+wIDAQABo4IBxDCCAcAwSAYD VR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC50cnVzdC50ZWxpYS5jb20vZXJpY3Nzb25ubGluZGl2 aWR1YWxjYXYzLmNybDCBggYIKwYBBQUHAQEEdjB0MCgGCCsGAQUFBzABhhxodHRwOi8vb2NzcDIu dHJ1c3QudGVsaWEuY29tMEgGCCsGAQUFBzAChjxodHRwOi8vY2EudHJ1c3QudGVsaWFzb25lcmEu Y29tL2VyaWNzc29ubmxpbmRpdmlkdWFsY2F2My5jZXIwKQYDVR0RBCIwIIEebWFnbnVzLndlc3Rl cmx1bmRAZXJpY3Nzb24uY29tMFUGA1UdIAROMEwwSgYMKwYBBAGCDwIDAQESMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vQ1BTMB0GA1UdJQQW MBQGCCsGAQUFBwMEBggrBgEFBQcDAjAdBgNVHQ4EFgQU5ivuhpU51W4UhBDBWwf8XsU837YwHwYD VR0jBBgwFoAUHHsZnpecdqwgPdjc45Fq49stplMwDgYDVR0PAQH/BAQDAgWgMA0GCSqGSIb3DQEB CwUAA4ICAQBn0FKukg00UN/c/ESpxSIaYTrsd8liHHMu5rLpOBNOacpGNBMGNgUDDt4QihhoQR3c vhYXCrAM59NTvw0HNlgqHZoEeVY7YnJJYnJXDCLUfkK5Dn28E3QrzykkF6giUOXDyF9mhWYbSAkJ yx0Yj0Xc8en3wYNyoFYEqjlKtZrdV0pcgFzEeXVLS8DWrzSy7+KfUtDOEiM6H3zO3nsq++KBmsOi SKkWn4oYERZg5KElEAHis9av+3KIaEPnOAt8QRWRpFfGZ4d89F16qFvElup5n7l864FqxnC2friD o4hLQY6ENaOaYIihXhbl2UYxAGDk89aJm/S5pYyq7wzm+KK3IcUl60rmc8SJlt6QXKw0wXEOE1Mu bauYKMsad2s8jD+rEkXp+agTRl+sezWaRxHBpxuUKDd6MhwDig3SZi1qP7D/Ds4V+JLIjjUJc25l 9tvMGC9+lqI0P+vMI3Zyrou0NNfb55uLQaq18O+7BZ8Kv7jvFdxYyUgbxQ0SPEiyhylcLHAmJeLC QaiZHmCREBkCLKSf0O4lE2TrVzdOD38wjzuQ27U3UddVCD9EQ3tF7o6EVhpxJJUlB6xe/2UWwy4Z la71dKLUhakdVrN5abzxqFWvzOAT9nBa2HzYVBtpbcu6KGh72YJ+M79fa9iIkcQCgUnw3gIAeWd/ /n4YbY2QhDCCBgcwggPvoAMCAQICEAtGbc1we24wZa62a3lxee0wDQYJKoZIhvcNAQELBQAwRzEL MAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRp dmlkdWFsIENBIHYzMB4XDTE3MTIxNTA3MjIyM1oXDTIwMTIxNTA3MjIyMlowcDERMA8GA1UECgwI RXJpY3Nzb24xGjAYBgNVBAMMEU1hZ251cyBXZXN0ZXJsdW5kMS0wKwYJKoZIhvcNAQkBFh5tYWdu dXMud2VzdGVybHVuZEBlcmljc3Nvbi5jb20xEDAOBgNVBAUTB2VyYW1zd2QwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCwqUdm8HdOyYsQO09KIUUoCHvdLbACm36VqqDl5dOqieqfNP3K QQYvZ3H2YFP7ZZmIgrGjjDayKxWXcQRhOpdORy2m6vtw3b2AsLwXe0kcYjaxRWk70DClWs35S4cR V60e3uF3Fb25h3QsknxM/r/AaQh8AVpnGVlSfv07Z4cSV+KHWJUiJNlctwR7WsEm3OFQ1EdaA6ba 9CUMniwKmKAYWrnD5dJG+IRAyRBlG/DUJCZvflBL8L9PfqiDMhEcO4B2ShJqJQ5j9LZ0ungeTC84 6D60AOloeStt2Z2eMoathKcmKCbHDXikm6DEv9VvYR5VyCkB9VWy3subg849Ejz7AgMBAAGjggHE MIIBwDBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLnRydXN0LnRlbGlhLmNvbS9lcmljc3Nv bm5saW5kaXZpZHVhbGNhdjMuY3JsMIGCBggrBgEFBQcBAQR2MHQwKAYIKwYBBQUHMAGGHGh0dHA6 Ly9vY3NwMi50cnVzdC50ZWxpYS5jb20wSAYIKwYBBQUHMAKGPGh0dHA6Ly9jYS50cnVzdC50ZWxp YXNvbmVyYS5jb20vZXJpY3Nzb25ubGluZGl2aWR1YWxjYXYzLmNlcjApBgNVHREEIjAggR5tYWdu dXMud2VzdGVybHVuZEBlcmljc3Nvbi5jb20wVQYDVR0gBE4wTDBKBgwrBgEEAYIPAgMBARIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMw HQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMCMB0GA1UdDgQWBBTmK+6GlTnVbhSEEMFbB/xe xTzftjAfBgNVHSMEGDAWgBQcexmel5x2rCA92NzjkWrj2y2mUzAOBgNVHQ8BAf8EBAMCBaAwDQYJ KoZIhvcNAQELBQADggIBAGfQUq6SDTRQ39z8RKnFIhphOux3yWIccy7msuk4E05pykY0EwY2BQMO 3hCKGGhBHdy+FhcKsAzn01O/DQc2WCodmgR5VjtickliclcMItR+QrkOfbwTdCvPKSQXqCJQ5cPI X2aFZhtICQnLHRiPRdzx6ffBg3KgVgSqOUq1mt1XSlyAXMR5dUtLwNavNLLv4p9S0M4SIzoffM7e eyr74oGaw6JIqRafihgRFmDkoSUQAeKz1q/7cohoQ+c4C3xBFZGkV8Znh3z0XXqoW8SW6nmfuXzr gWrGcLZ+uIOjiEtBjoQ1o5pgiKFeFuXZRjEAYOTz1omb9LmljKrvDOb4orchxSXrSuZzxImW3pBc rDTBcQ4TUy5tq5goyxp3azyMP6sSRen5qBNGX6x7NZpHEcGnG5QoN3oyHAOKDdJmLWo/sP8OzhX4 ksiONQlzbmX228wYL36WojQ/68wjdnKui7Q019vnm4tBqrXw77sFnwq/uO8V3FjJSBvFDRI8SLKH KVwscCYl4sJBqJkeYJEQGQIspJ/Q7iUTZOtXN04PfzCPO5DbtTdR11UIP0RDe0XujoRWGnEklSUH rF7/ZRbDLhmVrvV0otSFqR1Ws3lpvPGoVa/M4BP2cFrYfNhUG2lty7ooaHvZgn4zv19r2IiRxAKB SfDeAgB5Z3/+fhhtjZCEMIIGwjCCBKqgAwIBAgIQU7h+g+GcmSiTsJtJHOy46zANBgkqhkiG9w0B AQsFADA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBD QSB2MTAeFw0xNTEwMjcxMjE2NDZaFw0yNTEwMjcxMjE2NDZaMEcxCzAJBgNVBAYTAlNFMREwDwYD VQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOzy3wAAuFDyp7vYVLfGk/fjwao71MNGNLSzzl5D tjQtMtl2ZLPZyX6ViqzTN9JOb7uZ6KxuGSpReQvt8XOh7iIhkKH9W5hRpbjTsJmUMJd6zifhOpNK 6iSU3q44+FjsQL1lVtcguUuFG6aZN0N3GFVbgt6jRrASF8t/3wy9bHPAIfMyPybpg6Y2PH5/1Nwk TepoDSmK69LGV+lV2IK6U9OWayZXZFIFIDCoGyFlhFxAEgN+qZ2+Rqg/0TM0oCHvKO2ELSGmAdnJ kwizR42ji/Y9SYTSuG75mzSe6OfCGWM8Db/xvy/20aLEPXNu1PvOgzY63WZ6cmkWnjMlVJ90pWC2 haqDm3Yf8TRdjUvAl7Pz1bTuexwShzIGakL7MkCYrEqHMRaojI/VStloQgW76E76zQ2byw5QxrhO UbisBSKRzlTlOZQgYFFAbG6ViF8DOpJh/ygtQwuTLUM5r15G7eynQV1AMTNCWcX+HUvgArUw6RfW 9L58uA68GjktFTV8s9RlDsUqsNcLqeXaV28S2WMday0YGaq/bloS8AD7KuumUKH+Ri9IGO9mJvP0 5tvDHjKpLvv80c3WLJnJU/aznYHYEt2+jjKHOTqdGTxL/zMdpRSQFSuu+KM8NoYrkU1VJqKga+QL sgqKghMp99gu1P1e6KsqseWHdXORrMbjqkBXAgMBAAGjggG4MIIBtDCBigYIKwYBBQUHAQEEfjB8 MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC50cnVzdC50ZWxpYXNvbmVyYS5jb20wSwYIKwYBBQUH MAKGP2h0dHA6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXJv b3RjYXYxLmNlcjASBgNVHRMBAf8ECDAGAQH/AgEAMFUGA1UdIAROMEwwSgYMKwYBBAGCDwIDAQEC MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20v Q1BTMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwtMy50cnVzdC50ZWxpYXNvbmVyYS5jb20v dGVsaWFzb25lcmFyb290Y2F2MS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMA4G A1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUHHsZnpecdqwgPdjc45Fq49stplMwHwYDVR0jBBgwFoAU 8I9ZOACz9Y+algzV6/p7qhfoExIwDQYJKoZIhvcNAQELBQADggIBAFBYa/HVjDu0LqtXQ8iMp8PL Fpqchf41ksQY6R1AsoZbaBUu0NQlAQ9GzlC1pmI5s0cJnuaZI0xV6TiWS3/R2p9UgW61XD9CTIUb AL31mY3BdJf3P46gzKgQEca/DlFjq9GVmuPS4q90BLNgvgoxoHubc3C6s0OaY1sbnay5EhnvrAE4 Q511FlxmJPLnRmQGpieeXa3cPegFfY1kJDKyyFRypF1RuRLXcdMIgKEy5NX1bS3M9dQ4mgmUmVT2 d33UiKSEYQ6s/B+LFaaz4LywXSv2o3W4kbHoQs86IWst821ww0wxsCpEfClIvF7fBw2QkbG/1Pwu zAuLVStEhDzkAqOrMGctKyNEaBsyAn7Eq2eCa8QDXnkmagp9QPsNFs/oqnXj9j1cVtH9a4OPzhtg 0pd7gd0NzU/5QxibXqbYvouQgihGXHQDmaL4ruN7C4arMUqRo82YnREsKL7h3j/jtmzcMLc9Q07F 04QQd/iSR1Y5pIi6PdNBiE2/4uyAXS6KOIGZrPbNQUNrZtwiQpqQNl8AUzgegfPwrYFlFocpaF3d 1m5r+2VKKqiRQVfYPGYeZnWfkcz06JoAhc/9mjbHXSP9hvWYzeLRuoZqHGUdjOX9DIQb926OneV7 C5WMIjSY8ORkamG/HKqngmjypL3gSc6oG/E6B+1i6Ds5j0Qpj5aQMYICzTCCAskCAQEwWzBHMQsw CQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2 aWR1YWwgQ0EgdjMCEAtGbc1we24wZa62a3lxee0wDQYJYIZIAWUDBAIBBQCgggFDMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIwMDQwOTEyMTU0NVowLwYJKoZIhvcN AQkEMSIEIOwe2WrA5FvLwy48VUO1BXTKTBXk3oQgq9AVgC9yI0n1MGoGCSsGAQQBgjcQBDFdMFsw RzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJ bmRpdmlkdWFsIENBIHYzAhALRm3NcHtuMGWutmt5cXntMGwGCyqGSIb3DQEJEAILMV2gWzBHMQsw CQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2 aWR1YWwgQ0EgdjMCEAtGbc1we24wZa62a3lxee0wDQYJKoZIhvcNAQEBBQAEggEAAg3Tm2xgGaTE 48vrUkPE1YZoQBlHX1HDrgKKmD0bM7ifH0oBBtKmDUurnYF3y78jCwxv9qShenlqKdPUnMC9FVSY jBMuAJTnyuKU3QM2lSWD8y/2SjRYybr5Fy7BPG6Jttu/nW1YGOpfzme0nFZtuPHyCBmSMkK0fZ99 Lh5ciW8zruK3JgMW07kOiHfdmKFKlDx0JSR3OXN9WUGHJ3HvIxv10V0tEXMdjAt1gCcknqm2jCoW 2wzf34+WASEEbSZwOIGaUXywLRDgAUPCNAesla6Fg4Z3OzvKuUZHXnkIJZChjKgitzQN86cUyJvf XFwmIxeTtRlGQmPOCYRC5CsgaQAAAAAAAA== --=-YccPNQcHpprPGiDIQr5Z-- From nobody Thu Apr 9 06:11:07 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01BDC3A0776; Thu, 9 Apr 2020 05:32:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=cQtyeCQx; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=UERbGku6 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fa4kw6qKdT54; Thu, 9 Apr 2020 05:32:40 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50DBB3A0A1D; Thu, 9 Apr 2020 05:32:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8260; q=dns/txt; s=iport; t=1586435555; x=1587645155; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=m3rgNWPWZ5OuYess/EZ6NqxKdNpVgnghWz4sxskOeGY=; b=cQtyeCQx7wrbbqKV2/m17GpMkZX2Keutgox2+wdXqD+nwZIJSeI14luB 5v0gum2hAJpYaKjhprMqEv+0iT5SoarxIDnziehg8ZrXgv3E6kuWRjeUV ihbR08eSXSjieWOZPhhS9y/FhvdOYsgqsd6/7erLuNs+sA2WenvHiEe8+ c=; X-IPAS-Result: =?us-ascii?q?A0C/AgCMFI9e/40NJK1mGwEBAQEBAQEFAQEBEQEBAwMBA?= =?us-ascii?q?QGBe4FUJCwFbFggBAsqhByDRgOKa06BbCWBAZcfgUKBEANUCgEBAQwBAR4PA?= =?us-ascii?q?gQBAYREAheBdyQ4EwIDAQEBAwIDAQEBAQUBAQECAQUEbYVWDIVwAQEBAQMSE?= =?us-ascii?q?REMAQEwAQYBCwICAgEIEQMBAgECAiMDAgICGRcUAQUDCAIEAQkEBSKDBAGCS?= =?us-ascii?q?wMuAQ4DpRACgTmIYnWBMoJ/AQEFgTIBE0GDSRiCDgMGBYEJKosUgR8agUE/g?= =?us-ascii?q?REnDBCCGDU+gmcCAQEBARiBFAESASEXgnsygiyOEoJCO6AzCoI/h3iPRB2CU?= =?us-ascii?q?IhBhGGHSoRag2GKcAxpiSuPIINsAgQCBAUCDgEBBYFpImdYEQdwFWUBgj5QG?= =?us-ascii?q?A2RIjiDO4UUhUF0AgEKgRyOHwEB?= IronPort-PHdr: =?us-ascii?q?9a23=3AUNSsxRCMbeG6Soayray+UyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qs13kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMfkuHw?= =?us-ascii?q?QAld1QmgUhBMCfDkiuIeD7aSc5EexJVURu+DewNk0GUJ+kNUffqXCz8zMeXw?= =?us-ascii?q?7nO1opdMLyHIOaz9yt0Py/8IHSZAMOgyehZbR1L1O9qgCD/sIXmoBlbK02z1?= =?us-ascii?q?PFpXZTM+JR2StkKEmSkBD1+srVntZ7/j5Vuu49+sIISqj8c6kiBbxfFyg9cm?= =?us-ascii?q?0=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.72,362,1580774400"; d="scan'208";a="449470659" Received: from alln-core-8.cisco.com ([173.36.13.141]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 09 Apr 2020 12:32:33 +0000 Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by alln-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id 039CWX1K028838 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 9 Apr 2020 12:32:33 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 9 Apr 2020 07:32:33 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 9 Apr 2020 08:32:32 -0400 Received: from NAM10-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 9 Apr 2020 07:32:31 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CEe20GenDG4p7keWo2VKcsg/97DIALN1Gs4UqDvi/K4UGupdD5QJz0Gv5RNTZCdvcrVhn7DyClincdUrLVyA8tl5eMeuCdiS6w6RXT1XmW/yq8zlgfSLMdUGS/4IrTipht1BuxE4z18nRIvv1Kqd79mjKvZTcXN2v4NpaWHRUInwRWL/83+rS/V1Xbr0lVP1IkGrIZEDlTIj4/jI4rsVOGNrTvha65vrcW7TVYjiztRFFwjwLZ+EVBrlKJRRO4Onz1kudkgEBHqekdNYP5hOzMNv20aPxmwFKFgC6HBtODWrr8MyijRZs+TTGyz3q3s4fkVTL33GfLUxcNDjU/SqMw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=m3rgNWPWZ5OuYess/EZ6NqxKdNpVgnghWz4sxskOeGY=; b=MgGFNTTjBP8shai+ecZ567aiHGir0NJJpXXempzI3MF2m5OWDOoq4P9MUQp9kdRRbKkFFl5fkLMkDXYjTLTTtQBSXu5HaZV7eTN/Lfu4zj6DoxdurGM7ZaRqH+rNNQBaGuN2YSsCpXnmOQZ2ptDfFhjaftFgQBG4fwi5ztrSNsYB8SXhlmtCEmmfFB31qVNxFAP4XQb2AY8eSmZVIid1FN50Jqhktdsh3Vz+TcgA4eV+RjiCIUwg7p9DEIBCb54xl9ba6/pelaiCPGnYe4/0uimfpBVJE036eSvN/50BzYXSS0QvmTDNZ/ZRns+/ZlnpI540N/vW32xkWoO/B3ujkQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=m3rgNWPWZ5OuYess/EZ6NqxKdNpVgnghWz4sxskOeGY=; b=UERbGku6TpN4tQw7hMEQUMzZo3sclyajKLf8s1XPhLvg4C/cOGmNQ+C9OH6mt0Zi14a2Y9LlFyH7u6jaxxGennw4sl7PdFrjbm+tQ3XGK/y0LR9C/fjO/tEMCeKqdk0uAcGd/EZde5b+5ELjZbtpuB08zPMW5VkcNRzWR8fMf4Y= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (2603:10b6:3:10d::13) by DM5PR11MB1628.namprd11.prod.outlook.com (2603:10b6:4:c::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.17; Thu, 9 Apr 2020 12:32:30 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::680d:e22e:72d5:67ca]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::680d:e22e:72d5:67ca%3]) with mapi id 15.20.2878.018; Thu, 9 Apr 2020 12:32:30 +0000 From: "Eric Vyncke (evyncke)" To: Magnus Westerlund , "iesg@ietf.org" CC: "brian@innovationslab.net" , "taps-chairs@ietf.org" , "philipp@tiesel.net" , Mohit Sethi M , "int-dir@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "caw@heapingbits.net" , "taps@ietf.org" Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRhcHMtdHJh?= =?utf-8?Q?nsport-security-11:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHWDlXlmLl+pE4XrEKlI+/geqSkX6hwtIeAgAAmMwA= Date: Thu, 9 Apr 2020 12:32:30 +0000 Message-ID: <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> In-Reply-To: <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:4c24:3036:65e7:5e26] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 292ddfa4-e18d-4e76-042d-08d7dc821266 x-ms-traffictypediagnostic: DM5PR11MB1628: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM5PR11MB1753.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(396003)(39860400002)(376002)(346002)(136003)(366004)(966005)(316002)(2616005)(54906003)(6486002)(6512007)(186003)(110136005)(53546011)(6506007)(224303003)(15650500001)(33656002)(478600001)(8936002)(36756003)(76116006)(64756008)(66556008)(66476007)(66946007)(91956017)(2906002)(81156014)(66446008)(71200400001)(81166007)(86362001)(4326008)(5660300002)(7416002); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: KGFa9vFhLy/ywrJiOji7Oe+HNeyR46D2UaF4Kx1V9keqoNA2tcho96nxHI867Cskniw+9nHIvs3AsE4luiJRX4kwQnLuw+4PaH5za1eRSbaOeR7F+NwboxKJKQ6ag20162CP8/apZ06U/U9jg1F4i6gmEUFBUOcIYJDNPSiRLTnxmCVL0KEkKgltuSNrRp/ccLH89v0niG5JucU9Y7sWBw== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <80258F953CE1F64BB6E191DA24CFDD03@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 292ddfa4-e18d-4e76-042d-08d7dc821266 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 12:32:30.7659 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: vKLW05OgQFJPuVOi5itj5Yq8gqynRC6IDvLcN9EeCIuApYmiP97KTbbNHiZEEx3UqAsCsbDM7KQAOK2CcBg4Kg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1628 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.14, xch-rcd-004.cisco.com X-Outbound-Node: alln-core-8.cisco.com Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 06:10:58 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 12:32:42 -0000 TWFnbnVzDQoNCkEgc2ltcGxlIG1lbnRpb24gb2YgdGhlIGxhY2sgb2YgSVB2NiBpbiBzZWN0aW9u IDMgb2YgdGhlIGRlc2NyaXB0aW9uIHdvdWxkIGJlIG1vcmUgdGhhbiBlbm91Z2ggZm9yIG1lLg0K DQotw6lyaWMNCg0K77u/LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IGllc2cgPGll c2ctYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIE1hZ251cyBXZXN0ZXJsdW5kIDxtYWdu dXMud2VzdGVybHVuZD00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZz4NCkRhdGU6IFRodXJz ZGF5LCA5IEFwcmlsIDIwMjAgYXQgMTQ6MTYNClRvOiAiaWVzZ0BpZXRmLm9yZyIgPGllc2dAaWV0 Zi5vcmc+LCBFcmljIFZ5bmNrZSA8ZXZ5bmNrZUBjaXNjby5jb20+DQpDYzogImJyaWFuQGlubm92 YXRpb25zbGFiLm5ldCIgPGJyaWFuQGlubm92YXRpb25zbGFiLm5ldD4sICJ0YXBzLWNoYWlyc0Bp ZXRmLm9yZyIgPHRhcHMtY2hhaXJzQGlldGYub3JnPiwgInBoaWxpcHBAdGllc2VsLm5ldCIgPHBo aWxpcHBAdGllc2VsLm5ldD4sIE1vaGl0IFNldGhpIE0gPG1vaGl0Lm0uc2V0aGlAZXJpY3Nzb24u Y29tPiwgImludC1kaXJAaWV0Zi5vcmciIDxpbnQtZGlyQGlldGYub3JnPiwgImRyYWZ0LWlldGYt dGFwcy10cmFuc3BvcnQtc2VjdXJpdHlAaWV0Zi5vcmciIDxkcmFmdC1pZXRmLXRhcHMtdHJhbnNw b3J0LXNlY3VyaXR5QGlldGYub3JnPiwgImNhd0BoZWFwaW5nYml0cy5uZXQiIDxjYXdAaGVhcGlu Z2JpdHMubmV0PiwgInRhcHNAaWV0Zi5vcmciIDx0YXBzQGlldGYub3JnPg0KU3ViamVjdDogUmU6 IMOJcmljIFZ5bmNrZSdzIERpc2N1c3Mgb24gZHJhZnQtaWV0Zi10YXBzLXRyYW5zcG9ydC1zZWN1 cml0eS0xMTogKHdpdGggRElTQ1VTUyBhbmQgQ09NTUVOVCkNCg0KICAgIEhpIEVyaWMsDQogICAg DQogICAgQXJlbid0IHlvdSBnb2luZyBhIGJpdCB0byBmYXIgbm93IHdpdGggdGhpcyBkaXNjdXNz PyBZZXMsIElFVEYgc3RyZWFtDQogICAgcHJvY290b2NvbHMgYXJlIGV4cGVjdGVkIHRvIHN1cHBv cnQgSVB2Ni4gVGhpcyBpcyBhIG5vbi1JRVRGIGRldmxlb3BlZCBzZWN1cml0eQ0KICAgIHByb3Rv Y29sIHdoaWNoIGlzIGludmVzdGlnYXRlZCBmcm9tIHRoZSBwZXJzcGVjdGl2ZSBvZiBpdHMgZmVh dHVyZXMgdG8gaW5mbHVlbmNlDQogICAgY29uc2lkZXJhdGlvbnMgb2YgcmVxdWlyZWQgQVBJIHN1 cmZhY2UgZm9yIHNlY3VyaXR5IGZlYXR1cmVzLiBBbGwgZGlzY3Vzc2VkIGluDQogICAgcmVsYXRp b24gdG8gYSBzZXQgb2YgYXNwZWN0cyB3aGVyZSB0aGUgb25seSBvbmUgaGF2aW5nIHRvIGRvIHdp dGggYWRkcmVzc2luZyBpcw0KICAgIHNvdXJjZS1hZGRyZXNzIHZhbGRpYXRpb24gYW5kIHdoaWNo IEN1cnZlQ1AgZG8gbm90IHN1cHBvcnQgYXMgcGFydGljdWxhcg0KICAgIHJlbGV2YW50LiANCiAg ICANCiAgICBJIGRvbid0IHNlZSBob3cgaXQgaXMgZ29pbmcgdG8gYWZmZWN0IG9yIGltcGFjdCB0 aGF0IGZ1dHVyZSB3b3JrIGluIFRBUFMgV0cuLg0KICAgIA0KICAgIFdoeSBkbyB5b3UgdGhpbmsg YW4gYXNwZWN0IG9mIGEgcHJvdG9jb2wgdGhhdCBpc24ndCBkaXNjdXNzZWQgYmVpbmcgcmVsZXZh bnQgdG8NCiAgICBtZW50aW9uPyANCiAgICANCiAgICBJZiB5b3UgaGF2ZSBhIGdvb2QgcmVhc29u IGZpbmUgdGhlbiBhIGRpc2NsYWltZXIgY291bGQgYmUgYWRkZWQuIEJ1dCBJIGRvbid0IHNlZQ0K ICAgIGhvdyBpdCB3b3VsZCBub3QgcmVzdWx0IGluIGEgdW5jb25uZWN0ZWQgY29tbWVudCBvbiBh IHNwZWNpZmljIHByb3RvY29sIHdoaWNoDQogICAgaGFzIG5vIGNvbm5lY3Rpb24gdG8gdGhlIHB1 cnBvc2Ugb2YgdGhlIGRvY3VtZW50Lg0KICAgIA0KICAgIENoZWVycw0KICAgIA0KICAgIE1hZ251 cw0KICAgIA0KICAgIA0KICAgIA0KICAgIE9uIFRodSwgMjAyMC0wNC0wOSBhdCAwMzowMSAtMDcw MCwgw4lyaWMgVnluY2tlIHZpYSBEYXRhdHJhY2tlciB3cm90ZToNCiAgICA+IMOJcmljIFZ5bmNr ZSBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCiAgICA+IGRy YWZ0LWlldGYtdGFwcy10cmFuc3BvcnQtc2VjdXJpdHktMTE6IERpc2N1c3MNCiAgICA+IA0KICAg ID4gV2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBh bmQgcmVwbHkgdG8gYWxsDQogICAgPiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRv IGFuZCBDQyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcw0KICAgID4gaW50cm9kdWN0b3J5 IHBhcmFncmFwaCwgaG93ZXZlci4pDQogICAgPiANCiAgICA+IA0KICAgID4gUGxlYXNlIHJlZmVy IHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50L2Rpc2N1c3MtY3JpdGVyaWEu aHRtbA0KICAgID4gZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBD T01NRU5UIHBvc2l0aW9ucy4NCiAgICA+IA0KICAgID4gDQogICAgPiBUaGUgZG9jdW1lbnQsIGFs b25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQogICAg PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXRhcHMtdHJhbnNw b3J0LXNlY3VyaXR5Lw0KICAgID4gDQogICAgPiANCiAgICA+IA0KICAgID4gLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KICAgID4gRElTQ1VTUzoNCiAgICA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+IA0KICAgID4gVGhh bmsgeW91IGZvciB0aGUgd29yayBwdXQgaW50byB0aGlzIGRvY3VtZW50LiBJdCBpcyByZWFsbHkg ZWFzeSB0byByZWFkLg0KICAgID4gDQogICAgPiBOZXZlcnRoZWxlc3MsIEkgYW0gYmFsbG90aW5n IGEgRElTQ1VTUyAoc2VlIGJlbG93KSwgSSBzaW5jZXJlbHkgaG9wZSB0aGF0IEkgYW0NCiAgICA+ IHdyb25nbHkgYXNzZXJ0aW5nIHRoZSBsYWNrIG9mIElQdjYgc3VwcG9ydCBmb3IgQ3VydmVDUCBl bHNlIHRoZSBlYXN5IHdheSB0bw0KICAgID4gY2xlYXIgbXkgRElTQ1VTUyB3b3VsZCBiZSB0byBt ZW50aW9uIHRoaXMgbGltaXRhdGlvbiBpbiBzZWN0aW9uIDMgZXZlbiBpZiB0aGUNCiAgICA+IGZv Y3VzIG9mIHRoaXMgSS1EIGlzIG9uIHRoZSBBUEkuDQogICAgPiANCiAgICA+IFBsZWFzZSBmaW5k IGJlbG93IHNvbWUgbm9uLWJsb2NraW5nIENPTU1FTlRzLiBBbiBhbnN3ZXIgd2lsbCBiZSBhcHBy ZWNpYXRlZC4NCiAgICA+IA0KICAgID4gSSBob3BlIHRoYXQgdGhpcyBoZWxwcyB0byBpbXByb3Zl IHRoZSBkb2N1bWVudCwNCiAgICA+IA0KICAgID4gUmVnYXJkcywNCiAgICA+IA0KICAgID4gLcOp cmljDQogICAgPiANCiAgICA+ID09IERJU0NVU1MgPT0NCiAgICA+IA0KICAgID4gSSBxdWVzdGlv biB0aGUgaW5jbHVzaW9uIG9mIEN1cnZlQ1AgaW4gdGhlIG1peCBhcyBwZXINCiAgICA+IA0KICAg IGh0dHBzOi8vcHJvdGVjdDIuZmlyZWV5ZS5jb20vdjEvdXJsP2s9YzZkOWIxMjEtOWEwZGJkN2Yt YzZkOWYxYmEtODY5MTk1OWVkOWI3LTZlZmNmZWE2ZTAxN2RlYjkmcT0xJmU9ZDYyYmZlM2UtNGVh Yy00ZWYxLTg3N2UtYWMxZjQwYjQ0MThkJnU9aHR0cHMlM0ElMkYlMkZjdXJ2ZWNwLm9yZyUyRmFk ZHJlc3NpbmcuaHRtbA0KICAgID4gIGl0IGRvZXMgbm90IHNlZW0gdG8gc3VwcG9ydCBJUHY2LiBB dCB0aGUNCiAgICA+IGJhcmUgbWluaW11bSwgdGhlIEktRCBzaG91bGQgbWVudGlvbiB0aGlzIHJl c3RyaWN0aW9uIGluIHNlY3Rpb24gMy4gKGFuZCBJDQogICAgPiBob3BlDQogICAgPiB0byBiZSBj b3JyZWN0ZWQgYWJvdXQgQ3VydmVDUCBJUHY2IHN1cHBvcnQpLg0KICAgID4gDQogICAgPiANCiAg ICA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+IENPTU1FTlQ6DQogICAgPiAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQog ICAgPiANCiAgICA+IFBsZWFzZSByZXNwb25kIHRvIHRoZSBJb1QtZGlyZWN0b3JhdGUgcmV2aWV3 IGJ5IE1vaGl0Og0KICAgID4gDQogICAgaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNo L21zZy9pb3QtZGlyZWN0b3JhdGUveFRWT3ZRN2tJNzhzRFBaUXVWc1R2R0IyeDBzDQogICAgPiBQ bGVhc2UgcmVzcG9uZCB0byB0aGUgSU5ULURJUiByZXZpZXcgYnkgQnJpYW46DQogICAgPiBodHRw czovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2ludC1kaXIvMklIUGd1a2FBQU12TWpP N1RYdm9fdWpjSV9JICsNCiAgICA+IEdvcnJ5IEZhaXJodXJzdCdzIGFib3V0IEdSRQ0KICAgID4g DQogICAgPiBHZW5lcmljIGNvbW1lbnQgYWJvdXQgdGhlIGludGVuZGVkIHRyYW5zcG9ydDogYWxs IHByb3RvY29scyBhbmFseXplZCBpbiB0aGlzDQogICAgPiBkb2N1bWVudCBhcmUgcG9pbnQgdG8g cG9pbnQgKG5vIG11bHRpY2FzdCksIHRoaXMgc2hvdWxkIHByb2JhYmx5IGJlIG1lbnRpb25lZA0K ICAgID4gaW4gdGhlIGludHJvZHVjdGlvbi4NCiAgICA+IA0KICAgID4gLS0gU2VjdGlvbiAxIC0t DQogICAgPiBJcyB0aGVyZSBhbnkgcmVhc29uIHdoeSB0aGUgaW50ZWdyaXR5IHByb3BlcnR5IG9m IElQc2VjIEFIIGlzIG5vdCBtZW50aW9uZWQgPw0KICAgID4gU2FtZSBhbHNvIGFwcGxpZXMgaW4g c2VjdGlvbiAyIHdoZW4gInNlY3VyaXR5IHByb3RvY29sIiBpcyBkZWZpbmVkLg0KICAgID4gDQog ICAgPiAtLSBTZWN0aW9uIDMgLS0NCiAgICA+IFVzZSB0aGUgd29yZGluZyBvZiAicmVjb3JkIHBy b3RvY29sIiBnZW5lcmljYWxseSB3aGlsZSB0aGUgdGVybSAicmVjb3JkDQogICAgPiBwcm90b2Nv bCIgaXMgZGVmaW5lZCBpbiBzZWN0aW9uIDIgYXMgYSBibG9ja2VkIGRhdGEgdHJhbnNwb3J0IChs aWtlIGluIFRMUykuDQogICAgPiBTdWdnZXN0IHRoZSB1c2Ugb2YgImRhdGEgdHJhbnNmZXIgcHJv dG9jb2wiID8NCiAgICA+IA0KICAgID4gQW4gaW1wb3J0YW50IHByb3BlcnR5IG9mIHN1Y2ggcHJv dG9jb2xzIGlzIHRvIGJlIGFibGUgdG8gdHJhdmVyc2UgYSBOQVBUIGJveA0KICAgID4gKHRoYXQg SSBoYXRlKS4uLiBJIHN1Z2dlc3QgdG8gbWVudGlvbiB3aGV0aGVyIHRoZSBhbmFseXplZCBwcm90 b2NvbHMgc3VwcG9ydA0KICAgID4gTkFULXRyYXZlcnNhbCBpbiB0aGlzIGRlc2NyaXB0aW9uIHNl Y3Rpb24gb3IgZXZlbiBpbiB0aGUgYW5hbHlzaXMgcGFydHMgYXMNCiAgICA+IGhhdmluZyBhIGRp ZmZlcmVudCB2aWV3IChhcHBsaWNhdGlvbiBhbmQgbmV0d29yayBsYXllcnMgc2VlaW5nIHBvc3Np Ymx5DQogICAgPiBkaWZmZXJlbnQgSVAgYWRkcmVzc2VzIHNvIGEgcG90ZW50aWFsIGltcGFjdCBv biB0aGUgQVBJKS4NCiAgICA+IA0KICAgID4gDQogICAgPiANCiAgICAtLSANCiAgICBDaGVlcnMN CiAgICANCiAgICBNYWdudXMgV2VzdGVybHVuZCANCiAgICANCiAgICANCiAgICAtLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQogICAgTmV0d29ya3MsIEVyaWNzc29uIFJlc2VhcmNoDQogICAgLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0K ICAgIEVyaWNzc29uIEFCICAgICAgICAgICAgICAgICB8IFBob25lICArNDYgMTAgNzE0ODI4Nw0K ICAgIFRvcnNoYW1uc2dhdGFuIDIzICAgICAgICAgICB8IE1vYmlsZSArNDYgNzMgMDk0OTA3OQ0K ICAgIFNFLTE2NCA4MCBTdG9ja2hvbG0sIFN3ZWRlbiB8IG1haWx0bzogbWFnbnVzLndlc3Rlcmx1 bmRAZXJpY3Nzb24uY29tDQogICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgIA0KICAgIA0KDQo= From nobody Thu Apr 9 06:11:10 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 696683A07D3; Thu, 9 Apr 2020 05:41:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8cbMSaqWLeAJ; Thu, 9 Apr 2020 05:41:26 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60075.outbound.protection.outlook.com [40.107.6.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAC033A07B5; Thu, 9 Apr 2020 05:41:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HM+f2bQeSDeLpao/8x5RvzvKgSbMH9crRT1jcECo6JX6zBCS8Lo4xQD2vgnRCBzaMDODfSp3PGyQt6bDSf9owW/KG7fW9nTBhgrA6IKBceax7JPfF6K7wz4DSPW3d9AmJ62QeWNm+a4WXIfTPT0yWK4jVip7bmLG8zckhLzrEgWomVoZyjxpfnhMK2HhalnPx1qz4lSMhhZQ5IyY9sbVX4xlhKJ5DRQZ858WOOXXS72cIC5jlH+RV2lwdMvNhQ8MlX6G33yJ5zOzavizmQ1V8MN69WM5pgR4+DYFIlHRk04+4NoUJq8pCNRd0fo9kIy+hRYTaoIiqYemyKTWADsRlQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=10oVErSzbULrxyv7CEOckQfu9/wq6EkUlj98jxJwwsU=; b=Vz/cbWmZin1xWDcHDxuFNMZH8I59M+J8VwqfHte+/7PLAoiHJiFcU3B2tiEP0GyxQDmpNwx2nzcd0HK8EzifejYCPZLaQwVVD1xVJqSduCqMFT1rmlXudgYaPrkYuJinUkSarL7XaHR9GXuDGCNppnNINAp6zTi7PuoEpWumSbn0GWsMBQnuf7AS+mcbOATnFastGt+r9HMkNs1dbyB0dz8M9wzMpUiSIj+frEc2w80rlna9d/h+gHOEdu1cHK1kTdJfZgcdlS9fIXMCYMuHePB0cKDqxeyDqxNzkEAm5bVVmaXJTl7nZBVlS0l9WneOlAygYFWmfR65KPCOrgTYMQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=10oVErSzbULrxyv7CEOckQfu9/wq6EkUlj98jxJwwsU=; b=hvb49Q0yDKEOn4BoOrcY7deQFZQUy1VaeESGRa2xOUqJITviPIJic/uqbiejqsR5ea4tth+jDFqtwFeY3SfPBkIwm7e+RrN4tUGDqn5YGNPMojUKEl5EPM9nbIVwDGj9BYmv/SbuFEACVWL6wEWt9+0HP+/QoWNZqirXFbzO7aw= Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR0702MB3627.eurprd07.prod.outlook.com (2603:10a6:7:84::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.13; Thu, 9 Apr 2020 12:41:23 +0000 Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::ec28:2c21:6d78:917a]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::ec28:2c21:6d78:917a%2]) with mapi id 15.20.2900.012; Thu, 9 Apr 2020 12:41:23 +0000 From: Magnus Westerlund To: "evyncke=40cisco.com@dmarc.ietf.org" , "iesg@ietf.org" CC: "brian@innovationslab.net" , "taps-chairs@ietf.org" , "philipp@tiesel.net" , Mohit Sethi M , "int-dir@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "caw@heapingbits.net" , "taps@ietf.org" Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRhcHMtdHJh?= =?utf-8?Q?nsport-security-11:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHWDlXqWLSSULahQE2VBetBTFRtmahwtISAgAAErgCAAAIo4A== Date: Thu, 9 Apr 2020 12:41:22 +0000 Message-ID: References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> In-Reply-To: <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=magnus.westerlund@ericsson.com; x-originating-ip: [158.174.118.23] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 89c4e0e1-030f-4890-74f8-08d7dc834fa6 x-ms-traffictypediagnostic: HE1PR0702MB3627:|HE1PR0702MB3627: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5236; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(366004)(346002)(39860400002)(396003)(376002)(136003)(76116006)(66616009)(2906002)(66946007)(66556008)(66446008)(5660300002)(86362001)(44832011)(64756008)(8936002)(99936003)(66476007)(55016002)(26005)(186003)(52536014)(316002)(9686003)(33656002)(54906003)(6506007)(71200400001)(110136005)(224303003)(81166007)(81156014)(478600001)(558084003)(4326008)(7696005); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 4XPr2AD08ldOOuu6JRbJ/k4WS7s8iV9K7ow9FUN0FBwCJ2sFkoe6dORnaGAf327N6CB4nr31lWdtthiaTr4A23SOz4ELKXQWA8QgAT0bDE9agyBzbC/91GFZAlH4Zik4qsHNsxs0xXFHwyiz6R28p43OsOZ1my3UF9QJyRns3TltlbViJFfBGxedyrozXDeyrwrmkF2/PEgtv5VyYMSdacwIjTEq7opr3xjx07Uynhk/dhuDiIZoryIW5CNrojpboXej84YMyFY6jOjTQPPgyOGnTKGYNgjpv8gCIO2hbNiPsxFKe6ioLYJ68BJ+MTsqYHVVqQRkdm+ihKLpULTpaf+qDo1O2mI4vTJPg/13/pzrYjvxL11mZMd4ueloVz4cGLi1+iLkzxEMc319xK/eipv67qTQT/+0o9PQFt+d6+9PCmG6RYr6LQUtw6/ahVpN x-ms-exchange-antispam-messagedata: EfR5cbko0tpoq75fXOJKsYb+9g7gPlTpVLtRK/abvSj+o2YFxxMeU5jgh3AqYS5EVJaCcmhaj3NAG9UYVyBUS5bl+GBWfcCskzbStUIdpF3TDkfeSS7/J9J6NOUWZjmFdvABVWqsBvlP0bNOsTaavQ== Content-Type: multipart/signed; micalg=SHA1; protocol="application/x-pkcs7-signature"; boundary="----=_NextPart_000_015B_01D60E7C.EFF2F920" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 89c4e0e1-030f-4890-74f8-08d7dc834fa6 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 12:41:23.0530 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7BQGmhb3Ldfn3yNUkjEtZ1ziUwQvjYG2+zXLlEiPB6aJUmpo8tGVkLMoR2J6Eia8yvk067/oEvGgZrGW8fm9plBkCmbFOiH0HGUvWXNsixA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3627 Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 06:10:58 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 12:41:28 -0000 ------=_NextPart_000_015B_01D60E7C.EFF2F920 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit > > A simple mention of the lack of IPv6 in section 3 of the description would > be > more than enough for me. Yes, but why do you consider that relevant for this document? Cheers Magnus ------=_NextPart_000_015B_01D60E7C.EFF2F920 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVdjCCAyAw ggIIoAMCAQICAR0wDQYJKoZIhvcNAQEFBQAwOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVy YTEZMBcGA1UEAxMQU29uZXJhIENsYXNzMiBDQTAeFw0wMTA0MDYwNzI5NDBaFw0yMTA0MDYwNzI5 NDBaMDkxCzAJBgNVBAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFz czIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQF0o1ncrwDZbHRPoWN/xIvb1/ gC01O+FvqGepvwMcTYxvMkfVQWikEwTBNQyahEP8XB3/ibPoFxjNkV/7iePqv05dfBsm03V57eaE 41flrSnE9Doo56V7hDZps/1edr2jLZnTkE4jKH0YY/FUOyaddluXQrL/rvBO7N05lU6DBn/nSUDI xQGyVFpmHT38+ek8Cp6BuHDwAYvkI1R8yK74kB4AlnLUVM9hI7zq+50CldG2uXE6aQg/D7ThQseI 9T+YqKe6HOBxce9YV4FQelxrdEYOgwOYw46obvJ2Mm4ng8Jz89wY6LST6nVEawRgIHFXh53zvqCQ Iz2KJOHaIdvDAgMBAAGjMzAxMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0OBAoECEqgqliE0148MAsG A1UdDwQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAWs6H+RZyFVdLHdmb56ImMOyTZ9/WLdI0r/c4 pc6rFrmrL3w1y6zQD7RMK/yA72uMkV82dvfbsxsZ6vSyEf1hcUS/KLM6Hb+zQ+ifv9wxCHGwnY3W NEcykMZlJPegSnwEc485bxeMcrW9S8h6+HuDwyhOnAnqZz+yZwQbwxTa+OdJJJHQHWr6YTnva+ch dQYH2BK0ISBwQnGB2jyaNr6mWw1qbJofkXv5+e9Cuk5OnswMjZTc2UWcXuxCUGOu9F3EsRLcyjuo Lp0UWgV1t+zXY+K6NbYECJHo2p2c9ma1GKwKplQmNDPSG8HUfxo6jguqMm7b/E8ln9kyx5ZacKzf TDCCBX0wggRloAMCAQICEQCH7S4aKCZKxRmqOuu5DaLLMA0GCSqGSIb3DQEBCwUAMDkxCzAJBgNV BAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFzczIgQ0EwHhcNMTQx MjA1MDgxOTE1WhcNMjEwNDA1MTAyOTAwWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UE AwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMK+6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65I tqwA3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75L jo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJ jmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c 3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+J Wov3F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0h ADnJoWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTw EhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVN AgMBAAGjggGAMIIBfDBOBggrBgEFBQcBAQRCMEAwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYS50cnVz dC50ZWxpYXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY2VyMA8GA1UdEwEB/wQFMAMBAf8wGQYD VR0gBBIwEDAOBgwrBgEEAYIPAgMBAQIwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1 j5qWDNXr+nuqF+gTEjCBuQYDVR0fBIGxMIGuMG+gbaBrhmlsZGFwOi8vY3JsLTEudHJ1c3QudGVs aWFzb25lcmEuY29tL2NuPVNvbmVyYSUyMENsYXNzMiUyMENBLG89U29uZXJhLGM9Rkk/Y2VydGlm aWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwO6A5oDeGNWh0dHA6Ly9jcmwtMi50cnVzdC50ZWxp YXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY3JsMBMGA1UdIwQMMAqACEqgqliE0148MA0GCSqG SIb3DQEBCwUAA4IBAQAQ1elFTM6fGkQ/aRKdkUZicO3Cb9uzBJOpOtFctw+1El0/17lsjoVvJkZB D3KnUobnrriFdAa+7FAN55KLmZeB/3Y2bG0bB4toSyaVHjOQnQY9M0dv8U852w0Q7GwchKfebLUI bh9TMt2hI3Xc6j4knFTBUo7C1WAfO51K4bn1irmX6/Ej2VTgiOFsvOAny28W6enFSEQpSHw60VhN fSttSqTOxyrRR/7kW7Y8yb/3DZDZ/dH6ZCfx/y+BNIv2NuSd85M9HXUzplXXohti4Ql/qeaMn6by Ius6XlMWZZfkdVRvTuk2PkeC7UmAJ2+/DUWOPpawaytMXVfF4Hvxk34NMIIGBzCCA++gAwIBAgIQ C0ZtzXB7bjBlrrZreXF57TANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQGEwJTRTERMA8GA1UECgwI RXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjMwHhcNMTcxMjE1 MDcyMjIzWhcNMjAxMjE1MDcyMjIyWjBwMREwDwYDVQQKDAhFcmljc3NvbjEaMBgGA1UEAwwRTWFn bnVzIFdlc3Rlcmx1bmQxLTArBgkqhkiG9w0BCQEWHm1hZ251cy53ZXN0ZXJsdW5kQGVyaWNzc29u LmNvbTEQMA4GA1UEBRMHZXJhbXN3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCp R2bwd07JixA7T0ohRSgIe90tsAKbfpWqoOXl06qJ6p80/cpBBi9ncfZgU/tlmYiCsaOMNrIrFZdx BGE6l05HLabq+3DdvYCwvBd7SRxiNrFFaTvQMKVazflLhxFXrR7e4XcVvbmHdCySfEz+v8BpCHwB WmcZWVJ+/TtnhxJX4odYlSIk2Vy3BHtawSbc4VDUR1oDptr0JQyeLAqYoBhaucPl0kb4hEDJEGUb 8NQkJm9+UEvwv09+qIMyERw7gHZKEmolDmP0tnS6eB5MLzjoPrQA6Wh5K23ZnZ4yhq2EpyYoJscN eKSboMS/1W9hHlXIKQH1VbLey5uDzj0SPPsCAwEAAaOCAcQwggHAMEgGA1UdHwRBMD8wPaA7oDmG N2h0dHA6Ly9jcmwudHJ1c3QudGVsaWEuY29tL2VyaWNzc29ubmxpbmRpdmlkdWFsY2F2My5jcmww gYIGCCsGAQUFBwEBBHYwdDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AyLnRydXN0LnRlbGlhLmNv bTBIBggrBgEFBQcwAoY8aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS9lcmljc3Nvbm5s aW5kaXZpZHVhbGNhdjMuY2VyMCkGA1UdEQQiMCCBHm1hZ251cy53ZXN0ZXJsdW5kQGVyaWNzc29u LmNvbTBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRwczovL3Jl cG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAdBgNVHSUEFjAUBggrBgEFBQcDBAYI KwYBBQUHAwIwHQYDVR0OBBYEFOYr7oaVOdVuFIQQwVsH/F7FPN+2MB8GA1UdIwQYMBaAFBx7GZ6X nHasID3Y3OORauPbLaZTMA4GA1UdDwEB/wQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAgEAZ9BSrpIN NFDf3PxEqcUiGmE67HfJYhxzLuay6TgTTmnKRjQTBjYFAw7eEIoYaEEd3L4WFwqwDOfTU78NBzZY Kh2aBHlWO2JySWJyVwwi1H5CuQ59vBN0K88pJBeoIlDlw8hfZoVmG0gJCcsdGI9F3PHp98GDcqBW BKo5SrWa3VdKXIBcxHl1S0vA1q80su/in1LQzhIjOh98zt57KvvigZrDokipFp+KGBEWYOShJRAB 4rPWr/tyiGhD5zgLfEEVkaRXxmeHfPRdeqhbxJbqeZ+5fOuBasZwtn64g6OIS0GOhDWjmmCIoV4W 5dlGMQBg5PPWiZv0uaWMqu8M5viityHFJetK5nPEiZbekFysNMFxDhNTLm2rmCjLGndrPIw/qxJF 6fmoE0ZfrHs1mkcRwacblCg3ejIcA4oN0mYtaj+w/w7OFfiSyI41CXNuZfbbzBgvfpaiND/rzCN2 cq6LtDTX2+ebi0GqtfDvuwWfCr+47xXcWMlIG8UNEjxIsocpXCxwJiXiwkGomR5gkRAZAiykn9Du JRNk61c3Tg9/MI87kNu1N1HXVQg/REN7Re6OhFYacSSVJQesXv9lFsMuGZWu9XSi1IWpHVazeWm8 8ahVr8zgE/ZwWth82FQbaW3Luihoe9mCfjO/X2vYiJHEAoFJ8N4CAHlnf/5+GG2NkIQwggbCMIIE qqADAgECAhBTuH6D4ZyZKJOwm0kc7LjrMA0GCSqGSIb3DQEBCwUAMDcxFDASBgNVBAoMC1RlbGlh U29uZXJhMR8wHQYDVQQDDBZUZWxpYVNvbmVyYSBSb290IENBIHYxMB4XDTE1MTAyNzEyMTY0NloX DTI1MTAyNzEyMTY0NlowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQD DBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEA7PLfAAC4UPKnu9hUt8aT9+PBqjvUw0Y0tLPOXkO2NC0y2XZks9nJfpWKrNM30k5vu5no rG4ZKlF5C+3xc6HuIiGQof1bmFGluNOwmZQwl3rOJ+E6k0rqJJTerjj4WOxAvWVW1yC5S4Ubppk3 Q3cYVVuC3qNGsBIXy3/fDL1sc8Ah8zI/JumDpjY8fn/U3CRN6mgNKYrr0sZX6VXYgrpT05ZrJldk UgUgMKgbIWWEXEASA36pnb5GqD/RMzSgIe8o7YQtIaYB2cmTCLNHjaOL9j1JhNK4bvmbNJ7o58IZ YzwNv/G/L/bRosQ9c27U+86DNjrdZnpyaRaeMyVUn3SlYLaFqoObdh/xNF2NS8CXs/PVtO57HBKH MgZqQvsyQJisSocxFqiMj9VK2WhCBbvoTvrNDZvLDlDGuE5RuKwFIpHOVOU5lCBgUUBsbpWIXwM6 kmH/KC1DC5MtQzmvXkbt7KdBXUAxM0JZxf4dS+ACtTDpF9b0vny4DrwaOS0VNXyz1GUOxSqw1wup 5dpXbxLZYx1rLRgZqr9uWhLwAPsq66ZQof5GL0gY72Ym8/Tm28MeMqku+/zRzdYsmclT9rOdgdgS 3b6OMoc5Op0ZPEv/Mx2lFJAVK674ozw2hiuRTVUmoqBr5AuyCoqCEyn32C7U/V7oqyqx5Yd1c5Gs xuOqQFcCAwEAAaOCAbgwggG0MIGKBggrBgEFBQcBAQR+MHwwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnRydXN0LnRlbGlhc29uZXJhLmNvbTBLBggrBgEFBQcwAoY/aHR0cDovL3JlcG9zaXRvcnku dHJ1c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY2VyMBIGA1UdEwEB/wQI MAYBAf8CAQAwVQYDVR0gBE4wTDBKBgwrBgEEAYIPAgMBAQIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwSwYDVR0fBEQwQjBAoD6gPIY6 aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYxLmNy bDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQW BBQcexmel5x2rCA92NzjkWrj2y2mUzAfBgNVHSMEGDAWgBTwj1k4ALP1j5qWDNXr+nuqF+gTEjAN BgkqhkiG9w0BAQsFAAOCAgEAUFhr8dWMO7Quq1dDyIynw8sWmpyF/jWSxBjpHUCyhltoFS7Q1CUB D0bOULWmYjmzRwme5pkjTFXpOJZLf9Han1SBbrVcP0JMhRsAvfWZjcF0l/c/jqDMqBARxr8OUWOr 0ZWa49Lir3QEs2C+CjGge5tzcLqzQ5pjWxudrLkSGe+sAThDnXUWXGYk8udGZAamJ55drdw96AV9 jWQkMrLIVHKkXVG5Etdx0wiAoTLk1fVtLcz11DiaCZSZVPZ3fdSIpIRhDqz8H4sVprPgvLBdK/aj dbiRsehCzzohay3zbXDDTDGwKkR8KUi8Xt8HDZCRsb/U/C7MC4tVK0SEPOQCo6swZy0rI0RoGzIC fsSrZ4JrxANeeSZqCn1A+w0Wz+iqdeP2PVxW0f1rg4/OG2DSl3uB3Q3NT/lDGJtepti+i5CCKEZc dAOZoviu43sLhqsxSpGjzZidESwovuHeP+O2bNwwtz1DTsXThBB3+JJHVjmkiLo900GITb/i7IBd Loo4gZms9s1BQ2tm3CJCmpA2XwBTOB6B8/CtgWUWhyloXd3Wbmv7ZUoqqJFBV9g8Zh5mdZ+RzPTo mgCFz/2aNsddI/2G9ZjN4tG6hmocZR2M5f0MhBv3bo6d5XsLlYwiNJjw5GRqYb8cqqeCaPKkveBJ zqgb8ToH7WLoOzmPRCmPlpAxggMCMIIC/gIBATBbMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhF cmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIQC0ZtzXB7bjBl rrZreXF57TAJBgUrDgMCGgUAoIIBfDAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3 DQEJBTEPFw0yMDA0MDkxMjQxMjFaMCMGCSqGSIb3DQEJBDEWBBRydKePkQ1Cw20iPu3vnCsziEnC FzBDBgkqhkiG9w0BCQ8xNjA0MAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0D AgIBQDAHBgUrDgMCGjBqBgkrBgEEAYI3EAQxXTBbMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhF cmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIQC0ZtzXB7bjBl rrZreXF57TBsBgsqhkiG9w0BCRACCzFdoFswRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNz c29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAhALRm3NcHtuMGWutmt5 cXntMA0GCSqGSIb3DQEBAQUABIIBACMreK03UNSGOun1vt1+88bV0dFdp1Wn5RZyGOeqNyaSHTMV h5vum39/9QAtf+/zXnaYIw37yGAN6cvDrqWw9D9wiEMSKlsnBa1QbgKcmp21g5UhEFFwqAGFxpOX TYMcl/xDDCfj0vPleqdGKUwOy58Pu+iUCGMDf5eLyDyqEY7BIgJsLTZbPr4jieBI8LyyIpB6N3Hw HRtVSxQ+W99XAgXiPk07F4tpal8pmu+UZF/XHu1P/NlXkaY/gu4dFYEBcyomSphWJ/nbPjfCoaKs pzwzL4ZGWSivFUfPyLROWZhBBwNlCDH5fpC7kNNq/EnhM8lDdZzgpW+IsYlfXNd/110AAAAAAAA= ------=_NextPart_000_015B_01D60E7C.EFF2F920-- From nobody Thu Apr 9 06:54:51 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5892E3A0B55; Thu, 9 Apr 2020 06:40:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.599 X-Spam-Level: X-Spam-Status: No, score=-9.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Ee++nTQY; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=jhYfYJ2m Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k_Nina1uH-lV; Thu, 9 Apr 2020 06:40:17 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDC1B3A0B34; Thu, 9 Apr 2020 06:40:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1988; q=dns/txt; s=iport; t=1586439617; x=1587649217; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=NaJFfsGtbtTRnfbY8JJo0NLwlAQTG3//d25P+2ruSDQ=; b=Ee++nTQYyB3aKFgGTQeO8UjSYHFVmXfQCtLREOKLmKWiPaD2tx3iv2sf W2TGOQwYIc7WQHJuGIEh3gUMWkHwX2RZd+4KtaiW0jUs2AwnGixUbjFgv uHDeptbrWPj2u8lnrjXFjVvoupb4vvFmClXF2mKmayx6/SpEsP5vOjW3L 4=; IronPort-PHdr: =?us-ascii?q?9a23=3AdSsh5xfpvTLOuze5K0Y+7BK4lGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwGRD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?= =?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/YjIrGs9BWXdu/mqwNg5eH8OtL1A=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D0AABmJI9e/5JdJa1mHAEBAQEBBwE?= =?us-ascii?q?BEQEEBAEBgWkFAQELAYFTUAWBRCAECyqEHINGA4prToIRmCCBLoEkA1QKAQE?= =?us-ascii?q?BDAEBLQIEAQGERAIXgXgkNgcOAgMBAQsBAQUBAQECAQUEbYVWDIVwAQEBAQI?= =?us-ascii?q?BEhERDAEBNwELBAIBCBEDAQIDAiYCAgIwFQUDCAIEAQ0FIoMEgkwDDiABpTU?= =?us-ascii?q?CgTmIYnWBMoJ/AQEFhTkYgg4JgQ4qAYwyGoFBP4E4HIJNPoJnBIFjgxIygiy?= =?us-ascii?q?Nb4JlO6AzCoI/jViJZBYHnBaDYYtlnDcCBAIEBQIOAQEFgVkKKIFXcBVlAYI?= =?us-ascii?q?+UBgNkSI4gzuKVXQCAQqBHI4fAQE?= X-IronPort-AV: E=Sophos;i="5.72,362,1580774400"; d="scan'208";a="744109488" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 09 Apr 2020 13:40:16 +0000 Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 039DeFAQ029761 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 9 Apr 2020 13:40:15 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 9 Apr 2020 08:40:15 -0500 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 9 Apr 2020 08:40:15 -0500 Received: from NAM12-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 9 Apr 2020 08:40:15 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PYot+bPYY0EljuLeadUVsFnYxbwzT4GhDfK8iWjtkf6PT6aNXbEnVeUt6NnQa4BOyRIw6hFemSbpgywOkU/+9F0Mxlf7/CM3l062PO3Cl9TUYotrMaHRNBCQ+GgKpW4RS8jvxfUvHiv63dRnyC/h0SjoziX4ifhMUzRHSXSgd5NjCIvRnpvpLtJ0LZzNwWE+dnGhF1vnGW0iFHqmmrXnfu5f30OaWeT7GPecxZ2RlFdJF8JP234ZLlhppA6ohYJqC7z62b6EdoAXV9Vpg7sVMkIrXR9hN25scJS8RfckEU2xca5YtTIkGFu8cOSKTSoRzFx0UCiYUp04hVehwjTilQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NaJFfsGtbtTRnfbY8JJo0NLwlAQTG3//d25P+2ruSDQ=; b=iNNkH1AiB+bAGVBze8h3/tByl6PSFEjEpDHSy/EOWkNLLoyf1bnHpy6dTzIoU//HJCLs2N4f3rlmAzAhxpij4lwQrcUGIUVCZo4wGSVd6CaiPnVvQqmvH8SjkIIeJ7ZWK63sImaI5G9du3n7A2gxFtc8ipn3yiHV6cqd9BNsX5D0qfp5uRAGz5/RFZPTHEu/LYY6x1DvHA1oAiTHm42nlrwWtyHdJ4fEULp4gPHbr6Oux5RSkz0lTgOH/A41vNE+fZNUDLvgsOCnajJBdmLIgxNFCOXfcafuTOnQNi33E3QKAAnkG1xlQrLStt2eL+pLC0CoFIKYSe+G3HcgmxGS5w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NaJFfsGtbtTRnfbY8JJo0NLwlAQTG3//d25P+2ruSDQ=; b=jhYfYJ2mWzZMLTOR2bryZYX2ZMwF9/osvtaWn7tEHVZEn4GkdyfrllsZ1SKpFcNYVAECGUHQ5ZCtWa7TtwfIZgSi6D6/B/FJkaKxMbGWgiJT+Tk7ooWhQtEKdMbkGTzSP2KhBggIu7EO9N7vyc1fVYrRKwKMtPuSDr0tdOGzXxk= Received: from DM5PR11MB1753.namprd11.prod.outlook.com (2603:10b6:3:10d::13) by DM5PR11MB1258.namprd11.prod.outlook.com (2603:10b6:3:14::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2878.16; Thu, 9 Apr 2020 13:40:14 +0000 Received: from DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::680d:e22e:72d5:67ca]) by DM5PR11MB1753.namprd11.prod.outlook.com ([fe80::680d:e22e:72d5:67ca%3]) with mapi id 15.20.2878.018; Thu, 9 Apr 2020 13:40:14 +0000 From: "Eric Vyncke (evyncke)" To: Magnus Westerlund , "evyncke=40cisco.com@dmarc.ietf.org" , "iesg@ietf.org" CC: "brian@innovationslab.net" , "int-dir@ietf.org" , Mohit Sethi M , "taps-chairs@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "philipp@tiesel.net" , "caw@heapingbits.net" , "taps@ietf.org" Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRhcHMtdHJh?= =?utf-8?Q?nsport-security-11:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHWDlXlmLl+pE4XrEKlI+/geqSkX6hwtIeAgAAmMwD//+DzAIAAMfkA Date: Thu, 9 Apr 2020 13:40:14 +0000 Message-ID: References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> In-Reply-To: Accept-Language: fr-BE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com; x-originating-ip: [2001:420:c0c1:36:4c24:3036:65e7:5e26] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 50ab777a-7de2-41b1-abb7-08d7dc8b88b8 x-ms-traffictypediagnostic: DM5PR11MB1258: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM5PR11MB1753.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(396003)(366004)(136003)(39860400002)(376002)(346002)(54906003)(76116006)(66476007)(71200400001)(15650500001)(66946007)(478600001)(6486002)(7416002)(36756003)(6512007)(66446008)(5660300002)(66556008)(86362001)(53546011)(91956017)(81166007)(224303003)(81156014)(8936002)(316002)(186003)(2616005)(110136005)(33656002)(2906002)(6506007)(64756008)(4326008); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: wFhuKryn6bNIxVLyMV3GDW2aIjQ9azR/s5ENwe7ir/5+OtBMbyAtXvbmbUwkut9Wtk6/4hPdT9PL7f3ONtmTBuv00r3Yj+Qdl1F8vdqGv8Ii3/YG/GuG8FtXSQ3qDYZw4MDeAFA1FmMwfhPjr5+A/AbvXU5k/lO9okzFczi+kuGBW82f3j3lMWZMT9oRYaNGwk45USfQP9ihvBLjIsMbY546TSP+a9P6Xu3ETQx88rUGTY96BaADbG+ZSgk47ZpRVNEfSmnV8B6rGHDNz9grpg0i6kBnsybZaKnbGUF5+SbYMk7l/WNeH8G9D7OI0Jg1LC7VEPQNPJzbi8wV5bOntw280nu+ZSrMalU/rzeel6tFOYAUFdrY1/mewAMlghO15q10eqj5Exm3LgnspsR3Xsn4ZnqBb8HPrAqBlyoXR9vgwbGcjlx6iMkvm9v8YZ4E x-ms-exchange-antispam-messagedata: qeeL0Vu65kvcuu0DZLEv2lOiApgQGWyC627yKTTcCP8ldRvzMt9o5yRF/RRrO2s5a+IBlGiYjAEVa1gUg0hF8F27kwVwjoyiKc5gmCeraFjy7G2Iq3KltkCPcx85zibBqNrNBbpCFL130wy/0Lu3OdbxvXUkKD2pcDEUtlHOSgVuY9yB7UE7GBJUccpfGjvKHsJ1p5A7J4nVkaYAf+tcxQ== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <68E56AB3B981364C92057CF6F2D88476@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 50ab777a-7de2-41b1-abb7-08d7dc8b88b8 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 13:40:14.7713 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fD0XLNy49ELJM6TwyGgBBrJpw3cHcGiJD5/FfS8GB/v1AqvJ3vTMPN3RFt9obJDv8ojGwkCuo+yC46bs10d5gg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1258 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com X-Outbound-Node: rcdn-core-10.cisco.com Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 06:54:46 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 13:40:21 -0000 TWFnbnVzLA0KDQpXaGlsZSBteSBjb21tZW50IGlzIG5vdCBkaXJlY3RlZCB0byB0aGUgY29yZSBv ZiB0aGUgZG9jdW1lbnQsIEkgYmVsaWV2ZSB0aGF0IHdoZW4gb25lIElFVEYgZG9jdW1lbnQgcmVm ZXJzIGluIHRoZSBzZWN0aW9uIDMsICcgVHJhbnNwb3J0IFNlY3VyaXR5IFByb3RvY29sIERlc2Ny aXB0aW9ucycsIHRvIG5vbi1JRVRGIHByb3RvY29scywgdGhlbiBpbiBvcmRlciB0byBhdm9pZCBh bnkgJ0lFVEYgYmxlc3NpbmcnIG9mIHRoaXMgcHJvdG9jb2wsIGl0IHNob3VsZCBjbGVhcmx5IHN0 YXRlIHRoZSBpbXBvcnRhbnQgcHJvdG9jb2wgbGltaXRhdGlvbnMgd2hlbiBkZXNjcmliaW5nIHRo aXMgcHJvdG9jb2wuDQoNClJlZ2FyZHMNCg0KLcOpcmljDQoNCu+7vy0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQpGcm9tOiBpZXNnIDxpZXNnLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBv ZiBNYWdudXMgV2VzdGVybHVuZCA8bWFnbnVzLndlc3Rlcmx1bmQ9NDBlcmljc3Nvbi5jb21AZG1h cmMuaWV0Zi5vcmc+DQpEYXRlOiBUaHVyc2RheSwgOSBBcHJpbCAyMDIwIGF0IDE0OjQxDQpUbzog ImV2eW5ja2U9NDBjaXNjby5jb21AZG1hcmMuaWV0Zi5vcmciIDxldnluY2tlPTQwY2lzY28uY29t QGRtYXJjLmlldGYub3JnPiwgImllc2dAaWV0Zi5vcmciIDxpZXNnQGlldGYub3JnPg0KQ2M6ICJi cmlhbkBpbm5vdmF0aW9uc2xhYi5uZXQiIDxicmlhbkBpbm5vdmF0aW9uc2xhYi5uZXQ+LCAiaW50 LWRpckBpZXRmLm9yZyIgPGludC1kaXJAaWV0Zi5vcmc+LCBNb2hpdCBTZXRoaSBNIDxtb2hpdC5t LnNldGhpQGVyaWNzc29uLmNvbT4sICJ0YXBzLWNoYWlyc0BpZXRmLm9yZyIgPHRhcHMtY2hhaXJz QGlldGYub3JnPiwgImRyYWZ0LWlldGYtdGFwcy10cmFuc3BvcnQtc2VjdXJpdHlAaWV0Zi5vcmci IDxkcmFmdC1pZXRmLXRhcHMtdHJhbnNwb3J0LXNlY3VyaXR5QGlldGYub3JnPiwgInBoaWxpcHBA dGllc2VsLm5ldCIgPHBoaWxpcHBAdGllc2VsLm5ldD4sICJjYXdAaGVhcGluZ2JpdHMubmV0IiA8 Y2F3QGhlYXBpbmdiaXRzLm5ldD4sICJ0YXBzQGlldGYub3JnIiA8dGFwc0BpZXRmLm9yZz4NClN1 YmplY3Q6IFJFOiDDiXJpYyBWeW5ja2UncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtdGFwcy10cmFu c3BvcnQtc2VjdXJpdHktMTE6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1FTlQpDQoNCiAgICA+DQog ICAgPiBBIHNpbXBsZSBtZW50aW9uIG9mIHRoZSBsYWNrIG9mIElQdjYgaW4gc2VjdGlvbiAzIG9m IHRoZSBkZXNjcmlwdGlvbiB3b3VsZCANCiAgICA+IGJlDQogICAgPiBtb3JlIHRoYW4gZW5vdWdo IGZvciBtZS4NCiAgICANCiAgICBZZXMsIGJ1dCB3aHkgZG8geW91IGNvbnNpZGVyIHRoYXQgcmVs ZXZhbnQgZm9yIHRoaXMgZG9jdW1lbnQ/DQogICAgDQogICAgQ2hlZXJzDQogICAgDQogICAgTWFn bnVzDQogICAgDQogICAgDQogICAgDQoNCg== From nobody Thu Apr 9 06:54:55 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C596E3A0B6E; Thu, 9 Apr 2020 06:46:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.403 X-Spam-Level: X-Spam-Status: No, score=-1.403 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.248, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2p3ddsKppyaN; Thu, 9 Apr 2020 06:46:49 -0700 (PDT) Received: from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24F173A0B69; Thu, 9 Apr 2020 06:46:49 -0700 (PDT) Received: by mail-io1-f68.google.com with SMTP id n20so3878484ioa.4; Thu, 09 Apr 2020 06:46:49 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=WP/jp5ntvlQpXpvvpWoEfTreXLa70RTn+RHrYXRmU2c=; b=Hs/R0CqjjI+oTgCW66n7UytfnfV4FcfdpZIukRyedOSTSkiVEdnwbDF8JcsifeW6R3 ryrlyHGKLRAR+H4KY0SW2dul19g/7n3L+rVO7TsSxeVMJ3x2+rUbqrx9Pk8r//yTcY2v WgeLGLGtzz9y0DfnNDnUGqPPTeSKbKAndpZW2obBjanNWIudrapchHEqIFQPkdO4keu3 eLyXeZCGI7Mgg/MSIYvvWbYNaDLgY06+GyuSrRi0WOhtPixVHV4nT1lDEGGz7eZhfsbo cc4f4i29YelzZMOxes72gC/5vgwy42p5Q+6gqeFM1I+tYWLaY1iQRBKeX989Zj8Qo3St YWcA== X-Gm-Message-State: AGi0PuYzKSkBV7SW7F59yUPg9hzjT4wyFuqthqXCV9t1UwLRahAYRSZK BG0ATKrdFxpUWpBkpfYpF8By7tvkfX/SD+5u+GrvkT8s X-Google-Smtp-Source: APiQypLWMSg1I7qde02z7091BZfPpOClRNe9tTtdr/d1Ry7NMB2LuJON7XiK9pwDJpsJ/qH4nc7e1cGKltDR82zGma0= X-Received: by 2002:a5e:df4b:: with SMTP id g11mr7234465ioq.84.1586440008253; Thu, 09 Apr 2020 06:46:48 -0700 (PDT) MIME-Version: 1.0 References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> In-Reply-To: From: Barry Leiba Date: Thu, 9 Apr 2020 09:46:37 -0400 Message-ID: To: "Eric Vyncke (evyncke)" Cc: Magnus Westerlund , "iesg@ietf.org" , "brian@innovationslab.net" , "philipp@tiesel.net" , Mohit Sethi M , "taps-chairs@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "int-dir@ietf.org" , "caw@heapingbits.net" , "taps@ietf.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 06:54:47 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 13:46:54 -0000 I have to agree with Magnus here: I think this is really a stretch. Barry On Thu, Apr 9, 2020 at 9:40 AM Eric Vyncke (evyncke) wrote: > > Magnus, > > While my comment is not directed to the core of the document, I believe t= hat when one IETF document refers in the section 3, ' Transport Security Pr= otocol Descriptions', to non-IETF protocols, then in order to avoid any 'IE= TF blessing' of this protocol, it should clearly state the important protoc= ol limitations when describing this protocol. > > Regards > > -=C3=A9ric > > =EF=BB=BF-----Original Message----- > From: iesg on behalf of Magnus Westerlund > Date: Thursday, 9 April 2020 at 14:41 > To: "evyncke=3D40cisco.com@dmarc.ietf.org" , "iesg@ietf.org" > Cc: "brian@innovationslab.net" , "int-dir@ietf.= org" , Mohit Sethi M , "taps-= chairs@ietf.org" , "draft-ietf-taps-transport-securit= y@ietf.org" , "philipp@tiesel.= net" , "caw@heapingbits.net" , "ta= ps@ietf.org" > Subject: RE: =C3=89ric Vyncke's Discuss on draft-ietf-taps-transport-secu= rity-11: (with DISCUSS and COMMENT) > > > > > A simple mention of the lack of IPv6 in section 3 of the descriptio= n would > > be > > more than enough for me. > > Yes, but why do you consider that relevant for this document? > > Cheers > > Magnus > > > > From nobody Thu Apr 9 07:04:21 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 228063A0B11 for ; Thu, 9 Apr 2020 07:01:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=krose.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WdmlU3X3c4Yg for ; Thu, 9 Apr 2020 07:01:06 -0700 (PDT) Received: from mail-yb1-xb32.google.com (mail-yb1-xb32.google.com [IPv6:2607:f8b0:4864:20::b32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E12CA3A0BBC for ; Thu, 9 Apr 2020 07:01:05 -0700 (PDT) Received: by mail-yb1-xb32.google.com with SMTP id n2so5769108ybg.4 for ; Thu, 09 Apr 2020 07:01:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=krose.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=zOVghcbg02tswPxPappPWcfQOHWa5zVejgzsFGbeXmE=; b=C7xU3AIvRzgkRgcM3KGFAqreo4hmtizUnjVCg0W/wl/4Zjpjs0eDnnSm4fRy/E8UHQ 2bgHANWY+bzP0eC3KJpwm2sNlhEE5h2oYVJD9wwK/kzJj57HhV2khfzFZBTESUtaBvaG gDcJO6fRqjSm8b53y6ctLLddTvf+PPzSOj1mU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=zOVghcbg02tswPxPappPWcfQOHWa5zVejgzsFGbeXmE=; b=Y6TC0ppGTWp2BiIpSV871Iw7VTTuwZL99/kp7GlQtIGeXQWC7xnF1fFORtM4ZYiWwc Qwiv+75xBE8Cxolt9AGUgzOMjrWl0/QMCRkC4rdiFiHb+LQU4SbIBxdDWlIpTmF0onrR Jdun3jGgjhPp1dmzG6w1QPbkjv9yH59CiG35LlToha05pNs2axCjej5rk5maeEgNkj4K w7aLE4XnOvOLuVrt33EeKjMaBLpeHmGjhZdqyldQndEeTUJAGvGbPTS8C9pHotGltwtF 54rZzUIxEvQ/VPUMroJJalaXlanFgvAR4pAhvanPrQsUk6lQDrRl1TSMpREIodEf36oR Wy8A== X-Gm-Message-State: AGi0PubyP1DH31YgKjbXhHjgi8FeASlus1PTRntdQj59xhLesPNEA4yu u04GdMCkJ2PlH2NOimcuk4ynVS9NFtjhM0iMU4tg4A== X-Google-Smtp-Source: APiQypKy/W4KMO7agURkxwJ4n0puY4EbSMj8dypOf/IeVuXji3gYwT4bCY121QrYqMkkjJooRMcuDHahEgYBYTaRz3A= X-Received: by 2002:a25:6757:: with SMTP id b84mr21466245ybc.396.1586440864304; Thu, 09 Apr 2020 07:01:04 -0700 (PDT) MIME-Version: 1.0 References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> In-Reply-To: From: Kyle Rose Date: Thu, 9 Apr 2020 10:00:52 -0400 Message-ID: To: Barry Leiba Cc: "Eric Vyncke (evyncke)" , Magnus Westerlund , "iesg@ietf.org" , "brian@innovationslab.net" , "philipp@tiesel.net" , Mohit Sethi M , "taps-chairs@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "int-dir@ietf.org" , "caw@heapingbits.net" , "taps@ietf.org" Content-Type: multipart/alternative; boundary="0000000000002ca4c405a2dc0c19" Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 07:04:20 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 14:01:11 -0000 --0000000000002ca4c405a2dc0c19 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Agreed. This document is not an endorsement of any of the protocols mentioned, merely an analysis from a security perspective. Mentioning IPv6 here would be a non-sequitur. On Thu, Apr 9, 2020 at 9:46 AM Barry Leiba wrote: > I have to agree with Magnus here: I think this is really a stretch. > > Barry > > On Thu, Apr 9, 2020 at 9:40 AM Eric Vyncke (evyncke) > wrote: > > > > Magnus, > > > > While my comment is not directed to the core of the document, I believe > that when one IETF document refers in the section 3, ' Transport Security > Protocol Descriptions', to non-IETF protocols, then in order to avoid any > 'IETF blessing' of this protocol, it should clearly state the important > protocol limitations when describing this protocol. > > > > Regards > > > > -=C3=A9ric > > > > =EF=BB=BF-----Original Message----- > > From: iesg on behalf of Magnus Westerlund > > > Date: Thursday, 9 April 2020 at 14:41 > > To: "evyncke=3D40cisco.com@dmarc.ietf.org" 40cisco.com@dmarc.ietf.org>, "iesg@ietf.org" > > Cc: "brian@innovationslab.net" , " > int-dir@ietf.org" , Mohit Sethi M < > mohit.m.sethi@ericsson.com>, "taps-chairs@ietf.org" , > "draft-ietf-taps-transport-security@ietf.org" < > draft-ietf-taps-transport-security@ietf.org>, "philipp@tiesel.net" < > philipp@tiesel.net>, "caw@heapingbits.net" , " > taps@ietf.org" > > Subject: RE: =C3=89ric Vyncke's Discuss on > draft-ietf-taps-transport-security-11: (with DISCUSS and COMMENT) > > > > > > > > A simple mention of the lack of IPv6 in section 3 of the > description would > > > be > > > more than enough for me. > > > > Yes, but why do you consider that relevant for this document? > > > > Cheers > > > > Magnus > > > > > > > > > --0000000000002ca4c405a2dc0c19 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Agr= eed. This document is not an endorsement of any of the protocols mentioned,= merely an analysis from a security perspective. Mentioning IPv6 here would= be a non-sequitur.


On Thu, Apr 9, 2020 at 9:46 AM Barry Leiba <barryleiba@computer.org> wrote:
I have to agree with = Magnus here: I think this is really a stretch.

Barry

On Thu, Apr 9, 2020 at 9:40 AM Eric Vyncke (evyncke)
<evyncke=3D40cisco.com@dmarc.ietf.org> wrote:
>
> Magnus,
>
> While my comment is not directed to the core of the document, I believ= e that when one IETF document refers in the section 3, ' Transport Secu= rity Protocol Descriptions', to non-IETF protocols, then in order to av= oid any 'IETF blessing' of this protocol, it should clearly state t= he important protocol limitations when describing this protocol.
>
> Regards
>
> -=C3=A9ric
>
> =EF=BB=BF-----Original Message-----
> From: iesg <iesg-bounces@ietf.org> on behalf of Magnus Westerlund <magnus= .westerlund=3D40ericsson.com@dmarc.ietf.org>
> Date: Thursday, 9 April 2020 at 14:41
> To: "evyncke=3D40cisco.com@dmarc.ietf.org" <evyncke=3D40cisco.com@dmarc.iet= f.org>, "ies= g@ietf.org" <iesg@ietf.org>
> Cc: "brian@innovationslab.net" <brian@innovationslab.net>, "int-dir@ietf.org" &= lt;int-dir@ietf.org>, Mohit Sethi M <mohit.m.sethi@ericsson.com>, "taps-chairs@ietf.org" <= taps-chairs@ietf.= org>, "draft-ietf-taps-transport-security@ietf.org&qu= ot; <draft-ietf-taps-transport-security@ietf.org>, "philipp@tiesel.net" <philipp= @tiesel.net>, "caw@heapingbits.net" <caw@heapingbits.net>, "taps@ietf.org" <taps@ietf.org>
> Subject: RE: =C3=89ric Vyncke's Discuss on draft-ietf-taps-transpo= rt-security-11: (with DISCUSS and COMMENT)
>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> A simple mention of the lack of IPv6 in sectio= n 3 of the description would
>=C2=A0 =C2=A0 =C2=A0> be
>=C2=A0 =C2=A0 =C2=A0> more than enough for me.
>
>=C2=A0 =C2=A0 =C2=A0Yes, but why do you consider that relevant for this= document?
>
>=C2=A0 =C2=A0 =C2=A0Cheers
>
>=C2=A0 =C2=A0 =C2=A0Magnus
>
>
>
>
--0000000000002ca4c405a2dc0c19-- From nobody Thu Apr 9 08:42:57 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCDC73A0921; Thu, 9 Apr 2020 07:58:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.267 X-Spam-Level: X-Spam-Status: No, score=-2.267 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bzSqQOU8SN-e; Thu, 9 Apr 2020 07:58:47 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20053.outbound.protection.outlook.com [40.107.2.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23C333A091B; Thu, 9 Apr 2020 07:58:34 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VwRCiQ7i8dqvXA5j+SauskouDI15JAuWIrC9pg1Lg5MTNADGDGgIGCigwbOo6TkRcnc68aD07+1/qUXpa7L2RxTEeAD4gGfMLFzDDVGn91i5azm6MRJTqeJlNJo+zNOQZ6nwDNlI7xKi8htcpnrhucHcnZJuTj8rROinyLb4ehyXYHHUah0dm3XmVY/QRQcnTClbW284dfSLGwketGldQhFSa3HY9Ymmse+ONEMgW1m9GOA5/B+UnYfndWTcdsXHXLJIN14A+5jrIx74ZxuUgKkmT16iWwCjoCqQKokJ8tZoEp+xajBlsdM9yO96mU4JaC9sQBSzDg7efkivAe+vEA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LSYAYNhI6xhP2PC0iREkxw5rn0RE3CAyhCo7Nll7LFM=; b=l4B3NvU0KlXxIL8yevUlJzZIIDsdnCZpkIHWIsna0I6JipWJHvajnuy1YikXqI4i60NqIS/prjslcEcgzPAupe3UB3z8bGDMyAtfzp/JYfJ6ZxPX2E9IAGgi968yderEbw+Jc/rLpgw2kNDsponphTpgpZvMFRww/WWDloAZsxe9VvsBoUJKO7358+se44HDRFtLctTb10uxr6JtQUOBvbKbbnVyk1Gmx/TzeCyVGB1fFei3YAcJY0+U/Q9iJkhXDbBRvrBdG7rxoeyKIQ7qWKHW4MCVgP53hBDYqyHTosY1j87sHEVBo6USHXYz4KyiyQwBnD0ufMrJP/o14vkvpg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LSYAYNhI6xhP2PC0iREkxw5rn0RE3CAyhCo7Nll7LFM=; b=f8Ijh5HRPV6cW6nYpdY82txiu68iJ44TXq6WJ5BeKLJJCh/pr6okfRnn5OgAzluhQ5QzfrXqoSI7vD6TmIzaOydM8oHN+5T3bNaAeK2uYRS+KC+p8G2Vu5Cqi/O8SFLuYsVJ7jTkXYuI9eFqGRgNYrkTUohVuAzoHM7sKWUhniA= Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR0702MB3595.eurprd07.prod.outlook.com (2603:10a6:7:87::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.13; Thu, 9 Apr 2020 14:58:32 +0000 Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::ec28:2c21:6d78:917a]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::ec28:2c21:6d78:917a%2]) with mapi id 15.20.2900.012; Thu, 9 Apr 2020 14:58:32 +0000 From: Magnus Westerlund To: "krose@krose.org" , "barryleiba@computer.org" CC: "evyncke=40cisco.com@dmarc.ietf.org" , "brian@innovationslab.net" , "philipp@tiesel.net" , Mohit Sethi M , "taps-chairs@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "int-dir@ietf.org" , "iesg@ietf.org" , "taps@ietf.org" , "magnus.westerlund=40ericsson.com@dmarc.ietf.org" , "caw@heapingbits.net" Thread-Topic: =?utf-8?B?w4lyaWMgVnluY2tlJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXRhcHMtdHJh?= =?utf-8?Q?nsport-security-11:_(with_DISCUSS_and_COMMENT)?= Thread-Index: AQHWDlXqWLSSULahQE2VBetBTFRtmahwtISAgAAErgCAAAIo4IAAEMUAgAAByYCAAAP7AIAADO4w Date: Thu, 9 Apr 2020 14:58:32 +0000 Message-ID: References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> In-Reply-To: Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=magnus.westerlund@ericsson.com; x-originating-ip: [158.174.118.23] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 608c5a76-6dfb-4739-22df-08d7dc967896 x-ms-traffictypediagnostic: HE1PR0702MB3595:|HE1PR0702MB3595: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(39860400002)(366004)(136003)(346002)(376002)(396003)(86362001)(55016002)(478600001)(52536014)(66446008)(66616009)(316002)(110136005)(9686003)(76116006)(66946007)(54906003)(81166007)(66556008)(71200400001)(64756008)(6506007)(66476007)(53546011)(224303003)(99936003)(44832011)(33656002)(186003)(26005)(2906002)(5660300002)(7696005)(15650500001)(4326008)(8936002)(7416002)(81156014); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 3edgvhCSNi8haeQTZgRmGXx55sfMK6L9/cuwkmJRA+euETAEa54cgToWyWxaeHhtLyJoEXpAksCw6SB4gxqn+01E9W/mpceb810qJ3NjNUu23KAODEt0s+HcrGcQ3WA7kxuxOXP236pjwOCyt8h5nrta/GWjSSMjip4Tt0SuSs9TwtItVAUHrIDZAohQl2v+KRwL/tOQb2wb5/ttzkOAV1EJYMIPnj6BAfs8Pw5AoxyR9ZITfCO71JxSzJuIWzAHGrI51omAO5V208YJ3p158BW4y1Taey0S9itzqk1Z51NIZJ5oreB9R4XaVIKkzB86kEwZTzvU71FbTqulpy1ZK8qd7CEiPLBfAqdK84gi123gkUzjyj5W6ja6L/KaweyF0WJN0sHQIRsLbFvyHqKSSQGb1sYuU8cuNt+nqJjK1HwuyHq1l5FcKt4E4/5aAR9u x-ms-exchange-antispam-messagedata: V4GDKD3fjwG8NVStOnsOKvDaQRmvY0gB74CMqHIOQCIQYMTKTfvX2mRmKaw8eLvXr02paA0kUjZE7NpyjF6EByH2WwxCUtdXdaYhRiaUIrFvGjw7MnW2U4Eubu0PYJZ+Kw5R5UQfHrKCIfZtqJLNnQ== Content-Type: multipart/signed; micalg=SHA1; protocol="application/x-pkcs7-signature"; boundary="----=_NextPart_000_015F_01D60E90.18B7DA70" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 608c5a76-6dfb-4739-22df-08d7dc967896 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 14:58:32.1385 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8Mou1VuJzgrUt+64Gj1L2XspyGq9aQ//3Np3KE9IF/D5Qvf11y2aNDeyDSkkE3MVTuUZCKLLPSxI2X48LgNmSBT3NTiLjEZtlLmEK7yomWI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3595 Archived-At: X-Mailman-Approved-At: Thu, 09 Apr 2020 08:42:55 -0700 Subject: Re: [Int-dir] =?utf-8?q?=C3=89ric_Vyncke=27s_Discuss_on_draft-ietf-t?= =?utf-8?q?aps-transport-security-11=3A_=28with_DISCUSS_and_COMMENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 14:58:50 -0000 ------=_NextPart_000_015F_01D60E90.18B7DA70 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0160_01D60E90.18B7DA70" ------=_NextPart_001_0160_01D60E90.18B7DA70 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi, =20 Eric and I have discussed this and the proposal is a clarifying change = to the initial statement in Section 3: =20 OLD: =20 This section contains brief descriptions of the various security protocols currently used to protect data being sent over a network. =20 NEW:=20 =20 This section contains brief transport and security descriptions of = the various security protocols currently used to protect data being sent over a network. =20 The purpose of this change to clarify that these descriptions are only = concerning relevant aspects of transport and security.=20 =20 Are the WG and authors ok with the above change?=20 =20 Cheers =20 Magnus =20 =20 From: iesg On Behalf Of Kyle Rose Sent: den 9 april 2020 16:01 To: Barry Leiba Cc: Eric Vyncke (evyncke) ; = brian@innovationslab.net; philipp@tiesel.net; Mohit Sethi M = ; taps-chairs@ietf.org; = draft-ietf-taps-transport-security@ietf.org; int-dir@ietf.org; = iesg@ietf.org; taps@ietf.org; Magnus Westerlund = ; caw@heapingbits.net Subject: Re: =C3=89ric Vyncke's Discuss on = draft-ietf-taps-transport-security-11: (with DISCUSS and COMMENT) =20 Agreed. This document is not an endorsement of any of the protocols = mentioned, merely an analysis from a security perspective. Mentioning = IPv6 here would be a non-sequitur. =20 =20 On Thu, Apr 9, 2020 at 9:46 AM Barry Leiba > wrote: I have to agree with Magnus here: I think this is really a stretch. Barry On Thu, Apr 9, 2020 at 9:40 AM Eric Vyncke (evyncke) > wrote: > > Magnus, > > While my comment is not directed to the core of the document, I = believe that when one IETF document refers in the section 3, ' Transport = Security Protocol Descriptions', to non-IETF protocols, then in order to = avoid any 'IETF blessing' of this protocol, it should clearly state the = important protocol limitations when describing this protocol. > > Regards > > -=C3=A9ric > > =EF=BB=BF-----Original Message----- > From: iesg > on = behalf of Magnus Westerlund = > > Date: Thursday, 9 April 2020 at 14:41 > To: "evyncke=3D40cisco.com@dmarc.ietf.org = " = >, "iesg@ietf.org = " > > Cc: "brian@innovationslab.net " = >, = "int-dir@ietf.org " >, Mohit Sethi M >, "taps-chairs@ietf.org = " >, = "draft-ietf-taps-transport-security@ietf.org = " = >, = "philipp@tiesel.net " >, "caw@heapingbits.net = " >, "taps@ietf.org " = > > Subject: RE: =C3=89ric Vyncke's Discuss on = draft-ietf-taps-transport-security-11: (with DISCUSS and COMMENT) > > > > > A simple mention of the lack of IPv6 in section 3 of the = description would > > be > > more than enough for me. > > Yes, but why do you consider that relevant for this document? > > Cheers > > Magnus > > > > ------=_NextPart_001_0160_01D60E90.18B7DA70 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi,

 

Eric and I have discussed this and = the proposal is a clarifying change to the initial statement in Section = 3:

 

OLD:

 

=C2=A0=C2=A0 This = section contains brief descriptions of the various = security

=C2=A0=C2=A0 = protocols currently used to protect data being sent over a = network.

 

NEW:

 

=C2=A0=C2=A0 This section contains brief transport and =
security descriptions of the various =
security
=C2=A0=C2=A0 =
protocols currently used to protect data being sent over a =
network.

 

The purpose of this change to = clarify that these descriptions are only concerning relevant aspects of = transport and security.

 

Are the WG and authors ok with the = above change?

 

Cheers

 

Magnus

 

 

From: iesg = <iesg-bounces@ietf.org> On Behalf Of Kyle = Rose
Sent: den 9 april 2020 16:01
To: Barry Leiba = <barryleiba@computer.org>
Cc: Eric Vyncke (evyncke) = <evyncke=3D40cisco.com@dmarc.ietf.org>; brian@innovationslab.net; = philipp@tiesel.net; Mohit Sethi M <mohit.m.sethi@ericsson.com>; = taps-chairs@ietf.org; draft-ietf-taps-transport-security@ietf.org; = int-dir@ietf.org; iesg@ietf.org; taps@ietf.org; Magnus Westerlund = <magnus.westerlund=3D40ericsson.com@dmarc.ietf.org>; = caw@heapingbits.net
Subject: Re: =C3=89ric Vyncke's Discuss on = draft-ietf-taps-transport-security-11: (with DISCUSS and = COMMENT)

 

Agreed. This document = is not an endorsement of any of the protocols mentioned, merely an = analysis from a security perspective. Mentioning IPv6 here would be a = non-sequitur.

 

 

On = Thu, Apr 9, 2020 at 9:46 AM Barry Leiba <barryleiba@computer.org> = wrote:

I have to = agree with Magnus here: I think this is really a = stretch.

Barry

On Thu, Apr 9, 2020 at 9:40 AM Eric Vyncke = (evyncke)
<evyncke=3D40cisco.com@dmarc.ietf.org> = wrote:
>
> Magnus,
>
> While my comment is not = directed to the core of the document, I believe that when one IETF = document refers in the section 3, ' Transport Security Protocol = Descriptions', to non-IETF protocols, then in order to avoid any 'IETF = blessing' of this protocol, it should clearly state the important = protocol limitations when describing this protocol.
>
> = Regards
>
> -=C3=A9ric
>
> = =EF=BB=BF-----Original Message-----
> From: iesg <iesg-bounces@ietf.org> on behalf of Magnus = Westerlund <magnus..westerlund=3D40ericsson.com@dmarc.ietf.org>
> Date: = Thursday, 9 April 2020 at 14:41
> To: "evyncke=3D40cisco.com@dmarc.ietf.org" <evyncke=3D40cisco.com@dmarc.ietf.org>, "iesg@ietf.org" = <iesg@ietf.org>
> Cc: "brian@innovationslab.net" <brian@innovationslab.net>, "int-dir@ietf.org" <int-dir@ietf.org>, Mohit Sethi M <mohit.m.sethi@ericsson.com>, "taps-chairs@ietf.org" <taps-chairs@ietf.org>, "draft-ietf-taps-transport-security@ietf.org" = <draft-ietf-taps-transport-security@ietf.org>, = "philipp@tiesel.net" <philipp@tiesel.net>, "caw@heapingbits.net" <caw@heapingbits.net>, "taps@ietf.org" = <taps@ietf.org>
> Subject: RE: =C3=89ric = Vyncke's Discuss on draft-ietf-taps-transport-security-11: (with DISCUSS = and COMMENT)
>
>     >
>  =    > A simple mention of the lack of IPv6 in section 3 of = the description would
>     > be
>  =    > more than enough for me.
>
>    =  Yes, but why do you consider that relevant for this = document?
>
>    =  Cheers
>
>    =  Magnus
>
>
>
>

<= /div>
------=_NextPart_001_0160_01D60E90.18B7DA70-- ------=_NextPart_000_015F_01D60E90.18B7DA70 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVdjCCAyAw ggIIoAMCAQICAR0wDQYJKoZIhvcNAQEFBQAwOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVy YTEZMBcGA1UEAxMQU29uZXJhIENsYXNzMiBDQTAeFw0wMTA0MDYwNzI5NDBaFw0yMTA0MDYwNzI5 NDBaMDkxCzAJBgNVBAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFz czIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQF0o1ncrwDZbHRPoWN/xIvb1/ gC01O+FvqGepvwMcTYxvMkfVQWikEwTBNQyahEP8XB3/ibPoFxjNkV/7iePqv05dfBsm03V57eaE 41flrSnE9Doo56V7hDZps/1edr2jLZnTkE4jKH0YY/FUOyaddluXQrL/rvBO7N05lU6DBn/nSUDI xQGyVFpmHT38+ek8Cp6BuHDwAYvkI1R8yK74kB4AlnLUVM9hI7zq+50CldG2uXE6aQg/D7ThQseI 9T+YqKe6HOBxce9YV4FQelxrdEYOgwOYw46obvJ2Mm4ng8Jz89wY6LST6nVEawRgIHFXh53zvqCQ Iz2KJOHaIdvDAgMBAAGjMzAxMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0OBAoECEqgqliE0148MAsG A1UdDwQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAWs6H+RZyFVdLHdmb56ImMOyTZ9/WLdI0r/c4 pc6rFrmrL3w1y6zQD7RMK/yA72uMkV82dvfbsxsZ6vSyEf1hcUS/KLM6Hb+zQ+ifv9wxCHGwnY3W NEcykMZlJPegSnwEc485bxeMcrW9S8h6+HuDwyhOnAnqZz+yZwQbwxTa+OdJJJHQHWr6YTnva+ch dQYH2BK0ISBwQnGB2jyaNr6mWw1qbJofkXv5+e9Cuk5OnswMjZTc2UWcXuxCUGOu9F3EsRLcyjuo Lp0UWgV1t+zXY+K6NbYECJHo2p2c9ma1GKwKplQmNDPSG8HUfxo6jguqMm7b/E8ln9kyx5ZacKzf TDCCBX0wggRloAMCAQICEQCH7S4aKCZKxRmqOuu5DaLLMA0GCSqGSIb3DQEBCwUAMDkxCzAJBgNV BAYTAkZJMQ8wDQYDVQQKEwZTb25lcmExGTAXBgNVBAMTEFNvbmVyYSBDbGFzczIgQ0EwHhcNMTQx MjA1MDgxOTE1WhcNMjEwNDA1MTAyOTAwWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UE AwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMK+6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65I tqwA3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75L jo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJ jmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c 3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+J Wov3F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0h ADnJoWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTw EhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVN AgMBAAGjggGAMIIBfDBOBggrBgEFBQcBAQRCMEAwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYS50cnVz dC50ZWxpYXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY2VyMA8GA1UdEwEB/wQFMAMBAf8wGQYD VR0gBBIwEDAOBgwrBgEEAYIPAgMBAQIwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1 j5qWDNXr+nuqF+gTEjCBuQYDVR0fBIGxMIGuMG+gbaBrhmlsZGFwOi8vY3JsLTEudHJ1c3QudGVs aWFzb25lcmEuY29tL2NuPVNvbmVyYSUyMENsYXNzMiUyMENBLG89U29uZXJhLGM9Rkk/Y2VydGlm aWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwO6A5oDeGNWh0dHA6Ly9jcmwtMi50cnVzdC50ZWxp YXNvbmVyYS5jb20vc29uZXJhY2xhc3MyY2EuY3JsMBMGA1UdIwQMMAqACEqgqliE0148MA0GCSqG SIb3DQEBCwUAA4IBAQAQ1elFTM6fGkQ/aRKdkUZicO3Cb9uzBJOpOtFctw+1El0/17lsjoVvJkZB D3KnUobnrriFdAa+7FAN55KLmZeB/3Y2bG0bB4toSyaVHjOQnQY9M0dv8U852w0Q7GwchKfebLUI bh9TMt2hI3Xc6j4knFTBUo7C1WAfO51K4bn1irmX6/Ej2VTgiOFsvOAny28W6enFSEQpSHw60VhN fSttSqTOxyrRR/7kW7Y8yb/3DZDZ/dH6ZCfx/y+BNIv2NuSd85M9HXUzplXXohti4Ql/qeaMn6by Ius6XlMWZZfkdVRvTuk2PkeC7UmAJ2+/DUWOPpawaytMXVfF4Hvxk34NMIIGBzCCA++gAwIBAgIQ C0ZtzXB7bjBlrrZreXF57TANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQGEwJTRTERMA8GA1UECgwI RXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjMwHhcNMTcxMjE1 MDcyMjIzWhcNMjAxMjE1MDcyMjIyWjBwMREwDwYDVQQKDAhFcmljc3NvbjEaMBgGA1UEAwwRTWFn bnVzIFdlc3Rlcmx1bmQxLTArBgkqhkiG9w0BCQEWHm1hZ251cy53ZXN0ZXJsdW5kQGVyaWNzc29u LmNvbTEQMA4GA1UEBRMHZXJhbXN3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCp R2bwd07JixA7T0ohRSgIe90tsAKbfpWqoOXl06qJ6p80/cpBBi9ncfZgU/tlmYiCsaOMNrIrFZdx BGE6l05HLabq+3DdvYCwvBd7SRxiNrFFaTvQMKVazflLhxFXrR7e4XcVvbmHdCySfEz+v8BpCHwB WmcZWVJ+/TtnhxJX4odYlSIk2Vy3BHtawSbc4VDUR1oDptr0JQyeLAqYoBhaucPl0kb4hEDJEGUb 8NQkJm9+UEvwv09+qIMyERw7gHZKEmolDmP0tnS6eB5MLzjoPrQA6Wh5K23ZnZ4yhq2EpyYoJscN eKSboMS/1W9hHlXIKQH1VbLey5uDzj0SPPsCAwEAAaOCAcQwggHAMEgGA1UdHwRBMD8wPaA7oDmG N2h0dHA6Ly9jcmwudHJ1c3QudGVsaWEuY29tL2VyaWNzc29ubmxpbmRpdmlkdWFsY2F2My5jcmww gYIGCCsGAQUFBwEBBHYwdDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AyLnRydXN0LnRlbGlhLmNv bTBIBggrBgEFBQcwAoY8aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS9lcmljc3Nvbm5s aW5kaXZpZHVhbGNhdjMuY2VyMCkGA1UdEQQiMCCBHm1hZ251cy53ZXN0ZXJsdW5kQGVyaWNzc29u LmNvbTBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRwczovL3Jl cG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAdBgNVHSUEFjAUBggrBgEFBQcDBAYI KwYBBQUHAwIwHQYDVR0OBBYEFOYr7oaVOdVuFIQQwVsH/F7FPN+2MB8GA1UdIwQYMBaAFBx7GZ6X nHasID3Y3OORauPbLaZTMA4GA1UdDwEB/wQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAgEAZ9BSrpIN NFDf3PxEqcUiGmE67HfJYhxzLuay6TgTTmnKRjQTBjYFAw7eEIoYaEEd3L4WFwqwDOfTU78NBzZY Kh2aBHlWO2JySWJyVwwi1H5CuQ59vBN0K88pJBeoIlDlw8hfZoVmG0gJCcsdGI9F3PHp98GDcqBW BKo5SrWa3VdKXIBcxHl1S0vA1q80su/in1LQzhIjOh98zt57KvvigZrDokipFp+KGBEWYOShJRAB 4rPWr/tyiGhD5zgLfEEVkaRXxmeHfPRdeqhbxJbqeZ+5fOuBasZwtn64g6OIS0GOhDWjmmCIoV4W 5dlGMQBg5PPWiZv0uaWMqu8M5viityHFJetK5nPEiZbekFysNMFxDhNTLm2rmCjLGndrPIw/qxJF 6fmoE0ZfrHs1mkcRwacblCg3ejIcA4oN0mYtaj+w/w7OFfiSyI41CXNuZfbbzBgvfpaiND/rzCN2 cq6LtDTX2+ebi0GqtfDvuwWfCr+47xXcWMlIG8UNEjxIsocpXCxwJiXiwkGomR5gkRAZAiykn9Du JRNk61c3Tg9/MI87kNu1N1HXVQg/REN7Re6OhFYacSSVJQesXv9lFsMuGZWu9XSi1IWpHVazeWm8 8ahVr8zgE/ZwWth82FQbaW3Luihoe9mCfjO/X2vYiJHEAoFJ8N4CAHlnf/5+GG2NkIQwggbCMIIE qqADAgECAhBTuH6D4ZyZKJOwm0kc7LjrMA0GCSqGSIb3DQEBCwUAMDcxFDASBgNVBAoMC1RlbGlh U29uZXJhMR8wHQYDVQQDDBZUZWxpYVNvbmVyYSBSb290IENBIHYxMB4XDTE1MTAyNzEyMTY0NloX DTI1MTAyNzEyMTY0NlowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQD DBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEA7PLfAAC4UPKnu9hUt8aT9+PBqjvUw0Y0tLPOXkO2NC0y2XZks9nJfpWKrNM30k5vu5no rG4ZKlF5C+3xc6HuIiGQof1bmFGluNOwmZQwl3rOJ+E6k0rqJJTerjj4WOxAvWVW1yC5S4Ubppk3 Q3cYVVuC3qNGsBIXy3/fDL1sc8Ah8zI/JumDpjY8fn/U3CRN6mgNKYrr0sZX6VXYgrpT05ZrJldk UgUgMKgbIWWEXEASA36pnb5GqD/RMzSgIe8o7YQtIaYB2cmTCLNHjaOL9j1JhNK4bvmbNJ7o58IZ YzwNv/G/L/bRosQ9c27U+86DNjrdZnpyaRaeMyVUn3SlYLaFqoObdh/xNF2NS8CXs/PVtO57HBKH MgZqQvsyQJisSocxFqiMj9VK2WhCBbvoTvrNDZvLDlDGuE5RuKwFIpHOVOU5lCBgUUBsbpWIXwM6 kmH/KC1DC5MtQzmvXkbt7KdBXUAxM0JZxf4dS+ACtTDpF9b0vny4DrwaOS0VNXyz1GUOxSqw1wup 5dpXbxLZYx1rLRgZqr9uWhLwAPsq66ZQof5GL0gY72Ym8/Tm28MeMqku+/zRzdYsmclT9rOdgdgS 3b6OMoc5Op0ZPEv/Mx2lFJAVK674ozw2hiuRTVUmoqBr5AuyCoqCEyn32C7U/V7oqyqx5Yd1c5Gs xuOqQFcCAwEAAaOCAbgwggG0MIGKBggrBgEFBQcBAQR+MHwwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnRydXN0LnRlbGlhc29uZXJhLmNvbTBLBggrBgEFBQcwAoY/aHR0cDovL3JlcG9zaXRvcnku dHJ1c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY2VyMBIGA1UdEwEB/wQI MAYBAf8CAQAwVQYDVR0gBE4wTDBKBgwrBgEEAYIPAgMBAQIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwSwYDVR0fBEQwQjBAoD6gPIY6 aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYxLmNy bDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQW BBQcexmel5x2rCA92NzjkWrj2y2mUzAfBgNVHSMEGDAWgBTwj1k4ALP1j5qWDNXr+nuqF+gTEjAN BgkqhkiG9w0BAQsFAAOCAgEAUFhr8dWMO7Quq1dDyIynw8sWmpyF/jWSxBjpHUCyhltoFS7Q1CUB D0bOULWmYjmzRwme5pkjTFXpOJZLf9Han1SBbrVcP0JMhRsAvfWZjcF0l/c/jqDMqBARxr8OUWOr 0ZWa49Lir3QEs2C+CjGge5tzcLqzQ5pjWxudrLkSGe+sAThDnXUWXGYk8udGZAamJ55drdw96AV9 jWQkMrLIVHKkXVG5Etdx0wiAoTLk1fVtLcz11DiaCZSZVPZ3fdSIpIRhDqz8H4sVprPgvLBdK/aj dbiRsehCzzohay3zbXDDTDGwKkR8KUi8Xt8HDZCRsb/U/C7MC4tVK0SEPOQCo6swZy0rI0RoGzIC fsSrZ4JrxANeeSZqCn1A+w0Wz+iqdeP2PVxW0f1rg4/OG2DSl3uB3Q3NT/lDGJtepti+i5CCKEZc dAOZoviu43sLhqsxSpGjzZidESwovuHeP+O2bNwwtz1DTsXThBB3+JJHVjmkiLo900GITb/i7IBd Loo4gZms9s1BQ2tm3CJCmpA2XwBTOB6B8/CtgWUWhyloXd3Wbmv7ZUoqqJFBV9g8Zh5mdZ+RzPTo mgCFz/2aNsddI/2G9ZjN4tG6hmocZR2M5f0MhBv3bo6d5XsLlYwiNJjw5GRqYb8cqqeCaPKkveBJ zqgb8ToH7WLoOzmPRCmPlpAxggMCMIIC/gIBATBbMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhF cmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIQC0ZtzXB7bjBl rrZreXF57TAJBgUrDgMCGgUAoIIBfDAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3 DQEJBTEPFw0yMDA0MDkxNDU4MzBaMCMGCSqGSIb3DQEJBDEWBBRj2mfA09wtdVnQPrrZIk1FHncB xjBDBgkqhkiG9w0BCQ8xNjA0MAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0D AgIBQDAHBgUrDgMCGjBqBgkrBgEEAYI3EAQxXTBbMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhF cmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIQC0ZtzXB7bjBl rrZreXF57TBsBgsqhkiG9w0BCRACCzFdoFswRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNz c29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAhALRm3NcHtuMGWutmt5 cXntMA0GCSqGSIb3DQEBAQUABIIBAAzt2dXFPP5UkRd6us8728N7yBzRLJcVcjCBduugkKDqfLMl bJO6+GT4Ryqhs0xPN1/UGE4e655Z9JBTCn6A+CwUWG7YgsaliGxVq+TUwFSoiedI6yjezebZfx8t SaorTnxG+AAA9VAbUqBE6+mxQ1V6mnzG4Xz9xWDO3PTOQJpXOXIXrmQJfXfc8xQcUZU0C8NBocG4 26Iy1h5Yjj+qPbhswgE16k5bdEnrMkyKbGCmIB04LUJkJm0aCvgI11SpBh1y+KTW/C/F8QCqExaY 6Sl2E3QsoDi1N76Kp55I1lIYmQFA5We5jujgxRA0YalUe8/YnZEBwA2uDxosTjs0sZgAAAAAAAA= ------=_NextPart_000_015F_01D60E90.18B7DA70-- From nobody Mon Apr 13 10:29:54 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C39033A19E9; Mon, 13 Apr 2020 10:29:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.267 X-Spam-Level: X-Spam-Status: No, score=-2.267 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id flfxj9rjV29K; Mon, 13 Apr 2020 10:29:50 -0700 (PDT) Received: from nwk-aaemail-lapp03.apple.com (nwk-aaemail-lapp03.apple.com [17.151.62.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D1933A19E1; Mon, 13 Apr 2020 10:29:49 -0700 (PDT) Received: from pps.filterd (nwk-aaemail-lapp03.apple.com [127.0.0.1]) by nwk-aaemail-lapp03.apple.com (8.16.0.27/8.16.0.27) with SMTP id 03DHMEQZ050461; Mon, 13 Apr 2020 10:29:49 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=gRtVxsA2y+ZpoU6v6RANTSquFRqzwk4hgeY4012ZL34=; b=f4XxRjSmOm7M8YsDEhNwSmKcrQ2ZK0lJs/1YHzFiGfrC3eWNXLIj/ch0Xrd+cQAyxcnw 2UgsLAECXBDc3vZblRo5aTKZ4SEGt4kykgWrGLqgrzeCbW1pLDKAPeEQCW7OsksFPk+R 99lLILPxsdtTSXeQcuRmXBZYqrEZLFDjrP2E++JILov8e2tP8x9jdE1yNtw9mspX25LZ +wAwpB598mpSNP+etx2gps7Vmd7XgTqQuDiUwHAPDIicMPUJN9lf4NamGz8eWWSQW3dK aGIllk3D2Nt58A/2dLVcZdS1JnkP+KskQ1mZ5pd/KKAVmuGWOVWH5wj0u9YlEzPd5VjS Ew== Received: from rn-mailsvcp-mta-lapp01.rno.apple.com (rn-mailsvcp-mta-lapp01.rno.apple.com [10.225.203.149]) by nwk-aaemail-lapp03.apple.com with ESMTP id 30bx4h7def-8 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 13 Apr 2020 10:29:49 -0700 Received: from rn-mailsvcp-mmp-lapp04.rno.apple.com (rn-mailsvcp-mmp-lapp04.rno.apple.com [17.179.253.17]) by rn-mailsvcp-mta-lapp01.rno.apple.com (Oracle Communications Messaging Server 8.1.0.5.20200312 64bit (built Mar 12 2020)) with ESMTPS id <0Q8Q00VD1LXNWUJ0@rn-mailsvcp-mta-lapp01.rno.apple.com>; Mon, 13 Apr 2020 10:29:48 -0700 (PDT) Received: from process_milters-daemon.rn-mailsvcp-mmp-lapp04.rno.apple.com by rn-mailsvcp-mmp-lapp04.rno.apple.com (Oracle Communications Messaging Server 8.1.0.5.20200312 64bit (built Mar 12 2020)) id <0Q8Q00U00LQ6VM00@rn-mailsvcp-mmp-lapp04.rno.apple.com>; Mon, 13 Apr 2020 10:29:48 -0700 (PDT) X-Va-A: X-Va-T-CD: fa628b2f79844893b71f4d5f3cd39427 X-Va-E-CD: 32c271aac45d61a3c4d314c2715fc097 X-Va-R-CD: 2eaad1679a8d30e9d7cb8bd89a817621 X-Va-CD: 0 X-Va-ID: 9b5e5949-b9f5-4432-bf6c-2f4fdb7e5d09 X-V-A: X-V-T-CD: fa628b2f79844893b71f4d5f3cd39427 X-V-E-CD: 32c271aac45d61a3c4d314c2715fc097 X-V-R-CD: 2eaad1679a8d30e9d7cb8bd89a817621 X-V-CD: 0 X-V-ID: a6e17b6c-f50d-4ed8-9547-6ac050da9b76 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-04-13_08:2020-04-13, 2020-04-13 signatures=0 Received: from [17.234.69.124] (unknown [17.234.69.124]) by rn-mailsvcp-mmp-lapp04.rno.apple.com (Oracle Communications Messaging Server 8.1.0.5.20200312 64bit (built Mar 12 2020)) with ESMTPSA id <0Q8Q00O9SLXK1400@rn-mailsvcp-mmp-lapp04.rno.apple.com>; Mon, 13 Apr 2020 10:29:48 -0700 (PDT) Sender: tpauly@apple.com From: Tommy Pauly Message-id: <393C5C22-17B4-49EC-A71A-B8C7140F0320@apple.com> Content-type: multipart/alternative; boundary="Apple-Mail=_B0242775-78B5-46FC-805E-0253D181A132" MIME-version: 1.0 (Mac OS X Mail 13.4 \(3608.80.7.2.3\)) Date: Mon, 13 Apr 2020 10:29:44 -0700 In-reply-to: Cc: "taps-chairs@ietf.org" , "draft-ietf-taps-transport-security@ietf.org" , "int-dir@ietf.org" , "iesg@ietf.org" , "taps@ietf.org" To: Magnus Westerlund References: <158642650492.8627.16111048765603393250@ietfa.amsl.com> <33e2fe4c9f68ee3fea18ed7109f210ea9374e1d8.camel@ericsson.com> <894AC91E-8128-42F0-8E6B-1A66EF84CF43@cisco.com> X-Mailer: Apple Mail (2.3608.80.7.2.3) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-04-13_08:2020-04-13, 2020-04-13 signatures=0 Archived-At: Subject: Re: [Int-dir] =?utf-8?q?=5BTaps=5D_=C3=89ric_Vyncke=27s_Discuss_on_d?= =?utf-8?q?raft-ietf-taps-transport-security-11=3A_=28with_DISCUSS_and_COM?= =?utf-8?q?MENT=29?= X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2020 17:29:52 -0000 --Apple-Mail=_B0242775-78B5-46FC-805E-0253D181A132 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Apr 9, 2020, at 7:58 AM, Magnus Westerlund = wrote: >=20 > Hi, > =20 > Eric and I have discussed this and the proposal is a clarifying change = to the initial statement in Section 3: > =20 > OLD: > =20 > This section contains brief descriptions of the various security > protocols currently used to protect data being sent over a network. > =20 > NEW:=20 > =20 > This section contains brief transport and security descriptions of = the various security > protocols currently used to protect data being sent over a network. > =20 > The purpose of this change to clarify that these descriptions are only = concerning relevant aspects of transport and security.=20 > =20 > Are the WG and authors ok with the above change?=20 That change sounds fine to me, as an author. We=E2=80=99ll incorporate = that in our update. Best, Tommy > =20 > Cheers > =20 > Magnus > =20 > =20 > From: iesg On Behalf Of Kyle Rose > Sent: den 9 april 2020 16:01 > To: Barry Leiba > Cc: Eric Vyncke (evyncke) ; = brian@innovationslab.net; philipp@tiesel.net; Mohit Sethi M = ; taps-chairs@ietf.org; = draft-ietf-taps-transport-security@ietf.org; int-dir@ietf.org; = iesg@ietf.org; taps@ietf.org; Magnus Westerlund = ; caw@heapingbits.net > Subject: Re: =C3=89ric Vyncke's Discuss on = draft-ietf-taps-transport-security-11: (with DISCUSS and COMMENT) > =20 > Agreed. This document is not an endorsement of any of the protocols = mentioned, merely an analysis from a security perspective. Mentioning = IPv6 here would be a non-sequitur. > =20 > =20 > On Thu, Apr 9, 2020 at 9:46 AM Barry Leiba > wrote: > I have to agree with Magnus here: I think this is really a stretch. >=20 > Barry >=20 > On Thu, Apr 9, 2020 at 9:40 AM Eric Vyncke (evyncke) > > wrote: > > > > Magnus, > > > > While my comment is not directed to the core of the document, I = believe that when one IETF document refers in the section 3, ' Transport = Security Protocol Descriptions', to non-IETF protocols, then in order to = avoid any 'IETF blessing' of this protocol, it should clearly state the = important protocol limitations when describing this protocol. > > > > Regards > > > > -=C3=A9ric > > > > =EF=BB=BF-----Original Message----- > > From: iesg > on = behalf of Magnus Westerlund = > > > Date: Thursday, 9 April 2020 at 14:41 > > To: "evyncke=3D40cisco.com@dmarc.ietf.org = " >, "iesg@ietf.org = " > > > Cc: "brian@innovationslab.net " = >, = "int-dir@ietf.org " >, Mohit Sethi M >, "taps-chairs@ietf.org = " >, = "draft-ietf-taps-transport-security@ietf.org = " = >, = "philipp@tiesel.net " >, "caw@heapingbits.net = " >, "taps@ietf.org " = > > > Subject: RE: =C3=89ric Vyncke's Discuss on = draft-ietf-taps-transport-security-11: (with DISCUSS and COMMENT) > > > > > > > > A simple mention of the lack of IPv6 in section 3 of the = description would > > > be > > > more than enough for me. > > > > Yes, but why do you consider that relevant for this document? > > > > Cheers > > > > Magnus > > > > > > > > > _______________________________________________ > Taps mailing list > Taps@ietf.org > https://www.ietf.org/mailman/listinfo/taps = --Apple-Mail=_B0242775-78B5-46FC-805E-0253D181A132 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Apr 9, 2020, at 7:58 AM, Magnus Westerlund <magnus.westerlund=3D40ericsson.com@dmarc.ietf.org> = wrote:

Hi,
 
Eric = and I have discussed this and the proposal is a clarifying change to the = initial statement in Section 3:
 
OLD:
 
   = This section contains brief descriptions of the various security
   protocols currently used to protect = data being sent over a network.
 
NEW: 
 
   This section contains brief transport and =
security descriptions of the various security
   protocols currently used to =
protect data being sent over a network.
 
The = purpose of this change to clarify that these descriptions are only = concerning relevant aspects of transport and security. 
 
Are the = WG and authors ok with the above change? 

That change sounds fine to me, as an = author. We=E2=80=99ll incorporate that in our update.

Best,
Tommy
 
Cheers
 
Magnus
 
 
From: iesg = <iesg-bounces@ietf.org> On Behalf = Of Kyle Rose
Sent: den 9 april 2020 16:01
To: Barry Leiba <barryleiba@computer.org>
Cc: Eric = Vyncke (evyncke) <evyncke=3D40cisco.com@dmarc.ietf.org>; brian@innovationslab.net; philipp@tiesel.net; = Mohit Sethi M <mohit.m.sethi@ericsson.com>; taps-chairs@ietf.org; = draft-ietf-taps-transport-security@ietf.org; int-dir@ietf.org; iesg@ietf.org; taps@ietf.org; Magnus = Westerlund <magnus.westerlund=3D40ericsson.com@dmarc.ietf.org>; caw@heapingbits.net
Subject: Re: =C3=89ric Vyncke's = Discuss on draft-ietf-taps-transport-security-11: (with DISCUSS and = COMMENT)
 
Agreed. This document is not an = endorsement of any of the protocols mentioned, merely an analysis from a = security perspective. Mentioning IPv6 here would be a non-sequitur.
 
 
On Thu, Apr 9, 2020 at = 9:46 AM Barry Leiba <barryleiba@computer.org> wrote:
I have to agree with = Magnus here: I think this is really a stretch.

Barry

On Thu, Apr 9, 2020 at = 9:40 AM Eric Vyncke (evyncke)
<evyncke=3D40cisco.com@dmarc.ietf.org> wrote:
>> Magnus,
>
> While my = comment is not directed to the core of the document, I believe that when = one IETF document refers in the section 3, ' Transport Security Protocol = Descriptions', to non-IETF protocols, then in order to avoid any 'IETF = blessing' of this protocol, it should clearly state the important = protocol limitations when describing this protocol.
>
> Regards
>
> -=C3=A9ric>
> =EF=BB=BF-----Original = Message-----
> From: iesg <iesg-bounces@ietf.org> on behalf of Magnus Westerlund = <magnus..westerlund=3D40ericsson.com@dmarc.ietf.org>
> = Date: Thursday, 9 April 2020 at 14:41
> To: "evyncke=3D40cisco.com@dmarc.ietf.org" <evyncke=3D40cisco.com@dmarc.ietf.org>, "iesg@ietf.org" <iesg@ietf.org>
> Cc: "brian@innovationslab.net" <brian@innovationslab.net>, "int-dir@ietf.org" = <int-dir@ietf.org>, = Mohit Sethi M <mohit.m.sethi@ericsson.com>, "taps-chairs@ietf.org" = <taps-chairs@ietf.org>, "draft-ietf-taps-transport-security@ietf.org" <draft-ietf-taps-transport-security@ietf.org>, "philipp@tiesel.net" = <philipp@tiesel.net>, "caw@heapingbits.net" = <caw@heapingbits.net>, "taps@ietf.org" <taps@ietf.org>
> Subject: RE: =C3=89ric= Vyncke's Discuss on draft-ietf-taps-transport-security-11: (with = DISCUSS and COMMENT)
>
>    =  >
>     > A simple mention = of the lack of IPv6 in section 3 of the description would
>     > be
>  =    > more than enough for me.
>
>     Yes, but why do you consider that = relevant for this document?
>
>  =    Cheers
>
>    =  Magnus
>
>
>
>
_______________________________________________
Taps mailing list
Taps@ietf.org
https://www.ietf.org/mailman/listinfo/taps

= --Apple-Mail=_B0242775-78B5-46FC-805E-0253D181A132-- From nobody Wed Apr 22 10:07:04 2020 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 254703A1080; Wed, 22 Apr 2020 10:06:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WjV3A6E2C_An; Wed, 22 Apr 2020 10:06:57 -0700 (PDT) Received: from nwk-aaemail-lapp02.apple.com (nwk-aaemail-lapp02.apple.com [17.151.62.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FBD93A1078; Wed, 22 Apr 2020 10:06:57 -0700 (PDT) Received: from pps.filterd (nwk-aaemail-lapp02.apple.com [127.0.0.1]) by nwk-aaemail-lapp02.apple.com (8.16.0.42/8.16.0.42) with SMTP id 03MH3B0A006480; Wed, 22 Apr 2020 10:06:57 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=iLoa211vpIydczjjTYsXa2cqzjwwIJeoMj1zDvvDYDU=; b=L/GSox6uUHZk8VJOFx6wmg1MRu43YKk97qwkMys+nbTSX2hk7IGihbQ5CflOmVkjdb0C h3ZJGGdUxsU93cgd1IZ0mpaeHCTLU+uv8HqUnhlKtWu5gpvRrq1C6VSzeB952REnogen /eftQgOpg6VyvMwS4HvTyI5RwolZmq9bv5xIDpw4JEn4IlHzyB/TZ2sk6qB4xQBtQEtr u0bTZ90X/nGl5l6TVGWwZoBEThAPF/F+oIBPSiJsiDPD/LCx3Ur4U6tH7ZWNCCd8Yo0H MTQcTv+dv1GrH7Rk99L4XDehFUaSz2BfLGRvU8tz43p42oL5CzYy05kaDdRXQ4dt/WVg KA== Received: from rn-mailsvcp-mta-lapp03.rno.apple.com (rn-mailsvcp-mta-lapp03.rno.apple.com [10.225.203.151]) by nwk-aaemail-lapp02.apple.com with ESMTP id 30hhyh26hj-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 22 Apr 2020 10:06:57 -0700 Received: from rn-mailsvcp-mmp-lapp03.rno.apple.com (rn-mailsvcp-mmp-lapp03.rno.apple.com [17.179.253.16]) by rn-mailsvcp-mta-lapp03.rno.apple.com (Oracle Communications Messaging Server 8.1.0.5.20200312 64bit (built Mar 12 2020)) with ESMTPS id <0Q97004478VI0980@rn-mailsvcp-mta-lapp03.rno.apple.com>; Wed, 22 Apr 2020 10:06:54 -0700 (PDT) Received: from process_milters-daemon.rn-mailsvcp-mmp-lapp03.rno.apple.com by rn-mailsvcp-mmp-lapp03.rno.apple.com (Oracle Communications Messaging Server 8.1.0.5.20200312 64bit (built Mar 12 2020)) id <0Q9700L008PIX500@rn-mailsvcp-mmp-lapp03.rno.apple.com>; Wed, 22 Apr 2020 10:06:54 -0700 (PDT) X-Va-A: X-Va-T-CD: d95fcd35aa404efb0fffbb8d55224633 X-Va-E-CD: 6b4d5a61bbb8fd376cfbb1aa7d04077d X-Va-R-CD: c6dd971ec176bf7e1f436e0bcf5f43eb X-Va-CD: 0 X-Va-ID: 8941235d-e905-4f5e-a169-876120fd6ca8 X-V-A: X-V-T-CD: d95fcd35aa404efb0fffbb8d55224633 X-V-E-CD: 6b4d5a61bbb8fd376cfbb1aa7d04077d X-V-R-CD: c6dd971ec176bf7e1f436e0bcf5f43eb X-V-CD: 0 X-V-ID: 951dc5f9-5a95-477f-98a1-f8741ae94280 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-04-22_06:2020-04-22, 2020-04-22 signatures=0 Received: from [17.232.192.67] (unknown [17.232.192.67]) by rn-mailsvcp-mmp-lapp03.rno.apple.com (Oracle Communications Messaging Server 8.1.0.5.20200312 64bit (built Mar 12 2020)) with ESMTPSA id <0Q97005SZ8VHC300@rn-mailsvcp-mmp-lapp03.rno.apple.com>; Wed, 22 Apr 2020 10:06:54 -0700 (PDT) From: Tommy Pauly Message-id: Content-type: multipart/alternative; boundary="Apple-Mail=_865B6BD0-1F0C-4DF5-B416-32EE22D84BC0" MIME-version: 1.0 (Mac OS X Mail 13.4 \(3608.80.7.2.3\)) Date: Wed, 22 Apr 2020 10:06:52 -0700 In-reply-to: <158591580027.17912.14591985076306660054@ietfa.amsl.com> Cc: int-dir@ietf.org, last-call@ietf.org, draft-ietf-taps-transport-security.all@ietf.org, taps@ietf.org To: Brian Haberman References: <158591580027.17912.14591985076306660054@ietfa.amsl.com> X-Mailer: Apple Mail (2.3608.80.7.2.3) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-04-22_06:2020-04-22, 2020-04-22 signatures=0 Archived-At: Subject: Re: [Int-dir] [Taps] Intdir telechat review of draft-ietf-taps-transport-security-11 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2020 17:06:59 -0000 --Apple-Mail=_865B6BD0-1F0C-4DF5-B416-32EE22D84BC0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Brian, Thanks for the review! You can find an updated version of the document = here: = https://ietf-tapswg.github.io/draft-ietf-taps-transport-security/draft-iet= f-taps-transport-security.html = The authors discussed, and believe that SSH, L2TP, and GRE do not expose = significant new surfaces for transports and applications compared to the = existing protocols surveyed. We did, however, add specific text and = references to those protocols in the introduction as explanation. Thanks, Tommy > On Apr 3, 2020, at 5:10 AM, Brian Haberman via Datatracker = wrote: >=20 > Reviewer: Brian Haberman > Review result: Ready with Issues >=20 > This document is a survey of network security protocols and their = interaction > with transport and application protocols. It is clearly written and = easy to > read. I have a minor comment on the contents of this draft. >=20 > It is not abundantly clear what the criteria was for selecting the = subset of > security protocols included in this draft. Some notable omissions = include SSH, > L2TP, and GRE. These seem like interesting omissions given their = popularity in > a number of deployment scenarios. Not a showstopper in my opinion, but > interesting to note. >=20 >=20 > _______________________________________________ > Taps mailing list > Taps@ietf.org > https://www.ietf.org/mailman/listinfo/taps --Apple-Mail=_865B6BD0-1F0C-4DF5-B416-32EE22D84BC0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = Brian,

Thanks for = the review! You can find an updated version of the document = here:

https://ietf-tapswg.github.io/draft-ietf-taps-transport-securit= y/draft-ietf-taps-transport-security.html

The authors discussed, and believe that = SSH, L2TP, and GRE do not expose significant new surfaces for transports = and applications compared to the existing protocols surveyed. We did, = however, add specific text and references to those protocols in the = introduction as explanation.

Thanks,
Tommy

On Apr 3, 2020, at 5:10 AM, Brian Haberman = via Datatracker <noreply@ietf.org> wrote:

Reviewer: Brian Haberman
Review result: Ready = with Issues

This document is a survey of = network security protocols and their interaction
with = transport and application protocols. It is clearly written and easy = to
read. I have a minor comment on the contents of this = draft.

It is not abundantly clear what the = criteria was for selecting the subset of
security = protocols included in this draft. Some notable omissions include SSH,
L2TP, and GRE. These seem like interesting omissions given = their popularity in
a number of deployment scenarios. Not = a showstopper in my opinion, but
interesting to note.


_______________________________________________
Taps mailing list
Taps@ietf.org
https://www.ietf.org/mailman/listinfo/taps

= --Apple-Mail=_865B6BD0-1F0C-4DF5-B416-32EE22D84BC0--