From nobody Wed Nov 1 18:16:15 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A245313F816 for ; Wed, 1 Nov 2017 18:16:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.7 X-Spam-Level: X-Spam-Status: No, score=-4.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=netorgft1331857.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KRiTLVC0ucuQ for ; Wed, 1 Nov 2017 18:16:12 -0700 (PDT) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0067.outbound.protection.outlook.com [104.47.41.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B03513ACE5 for ; Wed, 1 Nov 2017 18:16:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT1331857.onmicrosoft.com; s=selector1-arrcus-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=J3tAdG5qmkyJm+DZvqVp/sf4q+bEpjMROAtbo4DSR5o=; b=XpGrUXVw7FtIsXy/P4V0jM6nT02fZ7VQxS8rlncjB7HhzcPT+14Lux9zTs/aSQ6acoMGc5/eRzZN5RtWabIyngaVFueWVuRTzF1nmsfP5mQpMtx5W/DlaCpAC/8yUDlCiS6TFmtM/bZzQpJrYUskYybJH3VQR5XEIDE3+2ChIow= Received: from CY4PR18MB1127.namprd18.prod.outlook.com (10.173.184.14) by CY4PR18MB1128.namprd18.prod.outlook.com (10.173.184.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.197.13; Thu, 2 Nov 2017 01:16:10 +0000 Received: from CY4PR18MB1127.namprd18.prod.outlook.com ([10.173.184.14]) by CY4PR18MB1127.namprd18.prod.outlook.com ([10.173.184.14]) with mapi id 15.20.0197.013; Thu, 2 Nov 2017 01:16:10 +0000 From: Keyur Patel To: "sidrops@ietf.org" Thread-Topic: WG Adoption call for draft-tbruijnzeels-sidrops-signed-tal-01 Thread-Index: AQHTQevxynUYU6QeE0K1SszVHIYVgKL/9yQA Date: Thu, 2 Nov 2017 01:16:10 +0000 Message-ID: <20CDCE5B-B991-4D21-BEFC-2F0ADDD0DECF@arrcus.com> References: <92CECB00-7846-406B-A296-3CB12D0ED627@arrcus.com> In-Reply-To: <92CECB00-7846-406B-A296-3CB12D0ED627@arrcus.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=keyur@arrcus.com; x-originating-ip: [75.8.210.205] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR18MB1128; 6:xC+L3yGRKV7jBKOpvbTFwB2NM9AC/vjdn7W0h7Tys06s4KEUjlQ4shctR68HEdQOOaxGg0F1XsvBLrxikuIIlWkuJbry8DQ9RhvH/otvIj1kqMkDxWtcg2eqtUvXkB/N6GwFybotfU1biand//KtKPDNlifl2+EXsnlmL0hactdR/p1XgyD1/34Ishbe2hIa/HXhFKVc7vpM2r/eLe5UekZWLP+Ssc9EKEH4q8ZJVKzwvMeflnZ18GdqkhLPP9fjmD9D4BJmflKC2nxaC1beUrQDwkYe5O7R3z2SN3h8KBYlbeLg/b7GHlEt/MWHIj1o/DMc7XwZu/3/5WQdQ4c0pzd1xGELmRWYSVPWFjuNCbk=; 5:YivtfWBzwG1NaZBvWdIzUcWQzu9E+z5HlW2NUp9tP+RQqLF21Cwz2reF0bN75jq0edCiJrZj+O88vQziaij4zBacWHa6igceN5auCJ+5fTnLyCuBO5X3AAUomcM8p6+1LmglOE81G7PQ0cGXpqiMHex7WJNPFEY80+aTIIqJ66g=; 24:iKI3OqcfY5E+t9zrBWFhJAQTqdeR7+D+7Y3OrR3oL+/DOyCLUqplQOL5FPhHXnCCDwMMLVXN3SQeu5fhGHYY816KylLpWwdW2cAPabcBYss=; 7:9NTAnm1yn+MNNtI6FZvMls21mcoSL1+sM6+mOLoUCAH7lQHJslMIWmoNmHgR+7ap8rNk/41e7LaQXhFGkmAcnInu+SHX3HP2aZPv1tvmWwLrKQZFMaZi8X6zuGSgrjL3JQ4IymMiddOD4yW6keeifTgxaeT0VjSqCWm61FZm1KPDqKhYpV5dXfv4eRk0LwUnCgPwDLyokxW8CL9FeyEEe8BWhDn2orY7b4pmzrZvuoVxWi8z0EJCSCYcfwS2IRNL x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 4e7f6920-2597-4af3-a92f-08d5218f4d8a x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4603075)(2017052603199); SRVR:CY4PR18MB1128; x-ms-traffictypediagnostic: CY4PR18MB1128: x-exchange-antispam-report-test: UriScan:(100405760836317)(21748063052155); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(3231020)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6041248)(20161123555025)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123562025)(20161123560025)(2016111802025)(6072148)(6043046)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY4PR18MB1128; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY4PR18MB1128; x-forefront-prvs: 047999FF16 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(376002)(346002)(39830400002)(199003)(189002)(189998001)(6436002)(230783001)(54896002)(53936002)(3846002)(36756003)(102836003)(229853002)(6116002)(86362001)(5660300001)(77096006)(6916009)(6486002)(6512007)(2950100002)(68736007)(82746002)(83716003)(2906002)(5640700003)(316002)(97736004)(1730700003)(99286004)(66066001)(8936002)(8676002)(2900100001)(81166006)(81156014)(6306002)(53546010)(105586002)(7736002)(14454004)(101416001)(25786009)(3660700001)(33656002)(2351001)(106356001)(2501003)(6246003)(6506006)(3280700002)(478600001)(50986999)(76176999)(54356999); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR18MB1128; H:CY4PR18MB1127.namprd18.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arrcus.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_20CDCE5BB9914D21BEFC2F0ADDD0DECFarrcuscom_" MIME-Version: 1.0 X-OriginatorOrg: arrcus.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4e7f6920-2597-4af3-a92f-08d5218f4d8a X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2017 01:16:10.6672 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 697b3529-5c2b-40cf-a019-193eb78f6820 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR18MB1128 Archived-At: Subject: Re: [Sidrops] WG Adoption call for draft-tbruijnzeels-sidrops-signed-tal-01 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Nov 2017 01:16:14 -0000 --_000_20CDCE5BB9914D21BEFC2F0ADDD0DECFarrcuscom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIFNJRFJPUFMgV0cgaGFzIHJlYWNoZWQgYSBjb25zZW5zdXMgdG8gYWRvcHRpb24gb2YgZHJh ZnQtdGJydWlqbnplZWxzLXNpZHJvcHMtc2lnbmVkLXRhbC0wMS4gVGhlIGF1dGhvcnMgYXJlIHJl cXVlc3RlZCB0byBzdWJtaXQgdGhlIC0wMCB3ZyBkcmFmdCB3aGVuIHRoZSBzdWJtaXNzaW9uIHBy b2Nlc3MgcGVybWl0cy4NCg0KUmVnYXJkcywNCkNocmlzICYgS2V5dXINCg0KDQpGcm9tOiBLZXl1 ciBQYXRlbCA8a2V5dXJAYXJyY3VzLmNvbT4NCkRhdGU6IFR1ZXNkYXksIE9jdG9iZXIgMTAsIDIw MTcgYXQgMTA6MTkgQU0NClRvOiAic2lkcm9wc0BpZXRmLm9yZyIgPHNpZHJvcHNAaWV0Zi5vcmc+ DQpTdWJqZWN0OiBXRyBBZG9wdGlvbiBjYWxsIGZvciBkcmFmdC10YnJ1aWpuemVlbHMtc2lkcm9w cy1zaWduZWQtdGFsLTAxDQoNCkhpIEZvbGtzLA0KDQpUaGUgYXV0aG9ycyBoYXZlIHJlcXVlc3Rl ZCBTSURST1BTIHdvcmtpbmcgZ3JvdXAgYWRvcHRpb24gY2FsbCBvZiBkcmFmdC10YnJ1aWpuemVl bHMtc2lkcm9wcy1zaWduZWQtdGFsLTAxLCDigJxSUEtJIHNpZ25lZCBvYmplY3QgZm9yIFRBTOKA nS4gUGxlYXNlIHNlbmQgeW91ciBjb21tZW50cyB0byB0aGUgbGlzdC4NCg0KVGhpcyBhZG9wdGlv biBjYWxsIHdpbGwgY29uY2x1ZGUgb24gT2N0IDI1IDIwMTcuDQoNClJlZ2FyZHMsDQpDaHJpcyAm IEtleXVyDQoNCg== --_000_20CDCE5BB9914D21BEFC2F0ADDD0DECFarrcuscom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYWxpYnJpIExp Z2h0IjsNCglwYW5vc2UtMToyIDE1IDMgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyog U3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29O b3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjEyLjBwdDsNCglmb250LWZhbWlseTpDYWxpYnJpO30NCmgxDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5Ow0KCW1zby1zdHlsZS1saW5rOiJIZWFkaW5nIDEgQ2hhciI7DQoJbWFyZ2luLXRvcDoxMi4w cHQ7DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVm dDowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCXBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7 DQoJZm9udC1zaXplOjE2LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSBMaWdodCI7DQoJY29s b3I6IzJFNzRCNTsNCglmb250LXdlaWdodDpub3JtYWw7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVy bGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCnNwYW4uSGVhZGluZzFDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJI ZWFkaW5nIDEgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6 IkhlYWRpbmcgMSI7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkgTGlnaHQiOw0KCWNvbG9yOiMyRTc0 QjU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9u dC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29s b3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1yZXBseTsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K c3Bhbi5tc29JbnMNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5h bWU6IiI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFu Zz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhlIFNJRFJPUFMgV0cgaGFzIHJlYWNoZWQgYSBjb25zZW5zdXMgdG8gYWRvcHRp b24gb2YgZHJhZnQtdGJydWlqbnplZWxzLXNpZHJvcHMtc2lnbmVkLXRhbC0wMS4gVGhlIGF1dGhv cnMgYXJlIHJlcXVlc3RlZCB0byBzdWJtaXQgdGhlIC0wMCB3ZyBkcmFmdCB3aGVuIHRoZSBzdWJt aXNzaW9uIHByb2Nlc3MgcGVybWl0cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkNocmlzICZhbXA7IEtleXVyPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNC NUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj5LZXl1ciBQYXRlbCAmbHQ7a2V5dXJAYXJyY3VzLmNvbSZndDs8 YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwgT2N0b2JlciAxMCwgMjAxNyBhdCAxMDoxOSBBTTxi cj4NCjxiPlRvOiA8L2I+JnF1b3Q7c2lkcm9wc0BpZXRmLm9yZyZxdW90OyAmbHQ7c2lkcm9wc0Bp ZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+V0cgQWRvcHRpb24gY2FsbCBmb3IgZHJh ZnQtdGJydWlqbnplZWxzLXNpZHJvcHMtc2lnbmVkLXRhbC0wMTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPkhpIEZvbGtzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhlIGF1dGhvcnMgaGF2ZSByZXF1ZXN0ZWQgU0lEUk9QUyB3b3JraW5nIGdyb3Vw IGFkb3B0aW9uIGNhbGwgb2YgZHJhZnQtdGJydWlqbnplZWxzLXNpZHJvcHMtc2lnbmVkLXRhbC0w MSwg4oCcUlBLSSBzaWduZWQgb2JqZWN0IGZvciBUQUzigJ0uIFBsZWFzZSBzZW5kIHlvdXIgY29t bWVudHMgdG8gdGhlIGxpc3QuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5UaGlzIGFkb3B0aW9uIGNhbGwgd2lsbCBjb25jbHVkZSBvbiBPY3QgMjUgMjAxNy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlJlZ2FyZHMsPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPkNocmlzICZhbXA7IEtleXVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_20CDCE5BB9914D21BEFC2F0ADDD0DECFarrcuscom_-- From nobody Wed Nov 1 18:27:16 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 515E213F816 for ; Wed, 1 Nov 2017 18:27:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.7 X-Spam-Level: X-Spam-Status: No, score=-4.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=netorgft1331857.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bQp6wD49RqdN for ; Wed, 1 Nov 2017 18:27:13 -0700 (PDT) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0078.outbound.protection.outlook.com [104.47.34.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 861661386A1 for ; Wed, 1 Nov 2017 18:27:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT1331857.onmicrosoft.com; s=selector1-arrcus-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Z6j4wJpvLZsk5T8aC4BMsmeanwStuB0wLhmwEDSL5hc=; b=hhdr4UCneOt6h7i+kvpHblzk6D3DIgZbS1Sj7aDmsVPb7IPKtj/oxZkVgIps1zqcB3a/Z+yFP4DSydu+Lxx1d/Q2DKDH6zI1UGkouTitfrG0uAWJEvKpdnXtF3wvifinaeBrdGme/4gJlDy+0HWvihvaa8RNt0ygS9xBZm769DI= Received: from CY4PR18MB1127.namprd18.prod.outlook.com (10.173.184.14) by CY4PR18MB1128.namprd18.prod.outlook.com (10.173.184.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.197.13; Thu, 2 Nov 2017 01:27:12 +0000 Received: from CY4PR18MB1127.namprd18.prod.outlook.com ([10.173.184.14]) by CY4PR18MB1127.namprd18.prod.outlook.com ([10.173.184.14]) with mapi id 15.20.0197.013; Thu, 2 Nov 2017 01:27:12 +0000 From: Keyur Patel To: "sidrops@ietf.org" Thread-Topic: WG Adoption call for draft-madi-sidrops-rp-00 Thread-Index: AQHTU3m1SjV6cdXnz0GMBGdOqZXfVw== Date: Thu, 2 Nov 2017 01:27:12 +0000 Message-ID: <695CFF72-80EE-442B-9646-06434744B4CE@arrcus.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=keyur@arrcus.com; x-originating-ip: [75.8.210.205] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR18MB1128; 6:dR41hmLIme7p/xNgTER7hT9zE5yO+yP5xWiqa96IUAtWOhAv59c1OLnbT4clkiXewKuq8cZaMNmWaHe2eQQuVpnECcXWTJyewDMvzDM1sBIcp6N2HCxdGoGkY9wiksoLy55MjPpKypuclydgjiQLOfPQXQQG9JeLLymV0FnuZ1hKTUUB516b5CHc22Gw0efH3sP6dFeSYk67Wz66prC8grpLv0sFRjfuBcYXm8W5Q3nnolotq2smpZI7EXdCxtLd57sW5KKZvIcNnUiMKTskF4I39wpb8hks1YHLdvAQL0qDJU82QyF2Txq/v5SSUSw8XxxTiDPL7R8f6aDCVcXyz6ag0JwbVneZtJJyNmcQsMg=; 5:M5T8l72jyvegPoC5ZmrF3g2vhCkfsq+BXBvNEUzZHE2ld3lEE9pWqemwFdQLuT6AhOGoVHPJmEnuzcfQO4v8dSYdUa51q3WXS7E+qi03rLH/He58hbXCHC+ROZRBtekxfe8H/r4k9EhGVy9HIEyYWbsj+C6j3DfBjhx8giCwPlw=; 24:Lda6c21vobzXUF3UxdKbieZAZvvR4q/TgWaA+2/N3e+3aAMvrGIjr/p8VMzwZj2WuuEYVe3saTBY1Ek8g9AMN+LXhRBglMDHC47QSnWptQY=; 7:R4iYtgGSN5B+am25ptt4XAG9dGMo3kbSDoWFKEU4RIc7XWb4DASzj/smk7irh1Mi4pC9A8U6mfdioNCp3OxjpLnzBlE6k+EqRf82am1nsD+7Q8LDsSjFVU+he3pYC/yGLz/0OrpRDL/yovQTz6+lROhjoKyHcfM7mdEyluDkN1SibDpWJUec7Q29tUtjJJG18HHV3NCPZrBCCT/wy1VHZ/taQlIm/2jVv9eCaUP7brDzXCfBYqPjsmodhN+pn91J x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: e0402feb-aa52-4ad4-dbcf-08d52190d7cc x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4603075)(2017052603199); SRVR:CY4PR18MB1128; x-ms-traffictypediagnostic: CY4PR18MB1128: x-exchange-antispam-report-test: UriScan:(100405760836317)(21748063052155); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(3231020)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6041248)(20161123555025)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123562025)(20161123560025)(2016111802025)(6072148)(6043046)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY4PR18MB1128; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY4PR18MB1128; x-forefront-prvs: 047999FF16 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(346002)(39830400002)(376002)(189002)(199003)(25786009)(2351001)(3660700001)(33656002)(105586002)(7736002)(14454004)(53546010)(101416001)(50986999)(3280700002)(478600001)(54356999)(6246003)(6506006)(106356001)(2501003)(68736007)(2906002)(82746002)(83716003)(6486002)(6916009)(77096006)(6512007)(316002)(97736004)(5640700003)(230783001)(54896002)(6436002)(189998001)(53936002)(86362001)(5660300001)(3846002)(6116002)(36756003)(102836003)(229853002)(8936002)(66066001)(6306002)(81166006)(81156014)(8676002)(2900100001)(1730700003)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR18MB1128; H:CY4PR18MB1127.namprd18.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arrcus.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_695CFF7280EE442B964606434744B4CEarrcuscom_" MIME-Version: 1.0 X-OriginatorOrg: arrcus.com X-MS-Exchange-CrossTenant-Network-Message-Id: e0402feb-aa52-4ad4-dbcf-08d52190d7cc X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2017 01:27:12.1389 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 697b3529-5c2b-40cf-a019-193eb78f6820 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR18MB1128 Archived-At: Subject: Re: [Sidrops] WG Adoption call for draft-madi-sidrops-rp-00 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Nov 2017 01:27:15 -0000 --_000_695CFF7280EE442B964606434744B4CEarrcuscom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIFNJRFJPUFMgV0cgaGFzIHJlYWNoZWQgYSBjb25zZW5zdXMgdG8gYWRvcHRpb24gb2YgZHJh ZnQtbWFkaS1zaWRyb3BzLXJwLTAwLiBUaGUgYXV0aG9ycyBhcmUgcmVxdWVzdGVkIHRvIHN1Ym1p dCB0aGUgLTAwIHdnIGRyYWZ0IHdoZW4gdGhlIHN1Ym1pc3Npb24gcHJvY2VzcyBwZXJtaXRzLg0K DQpSZWdhcmRzLA0KQ2hyaXMgJiBLZXl1cg0KDQoNCkZyb206IEtleXVyIFBhdGVsIDxrZXl1ckBh cnJjdXMuY29tPg0KRGF0ZTogVHVlc2RheSwgT2N0b2JlciAxMCwgMjAxNyBhdCAxMDowMCBBTQ0K VG86ICJzaWRyb3BzQGlldGYub3JnIiA8c2lkcm9wc0BpZXRmLm9yZz4NClN1YmplY3Q6IFdHIEFk b3B0aW9uIGNhbGwgZm9yIGRyYWZ0LW1hZGktc2lkcm9wcy1ycC1hZG9wdGlvbg0KDQpIaSBGb2xr cywNCg0KVGhlIGF1dGhvcnMgaGF2ZSByZXF1ZXN0ZWQgU0lEUk9QUyB3b3JraW5nIGdyb3VwIGFk b3B0aW9uIGNhbGwgb2YgZHJhZnQtbWFkaS1zaWRyb3BzLXJwLWFkb3B0aW9uLCDigJxSZXF1aXJl bWVudHMgZm9yIFJlc291cmNlIFB1YmxpYyBLZXkgSW5mcmFzdHJ1Y3R1cmUgKFJQS0kpIFJlbHlp bmcgUGFydGllc+KAnS4gUGxlYXNlIHNlbmQgeW91ciBjb21tZW50cyB0byB0aGUgbGlzdC4NCg0K VGhpcyBhZG9wdGlvbiBjYWxsIHdpbGwgY29uY2x1ZGUgb24gT2N0IDI1IDIwMTcuDQoNClJlZ2Fy ZHMsDQpDaHJpcyAmIEtleXVyDQo= --_000_695CFF7280EE442B964606434744B4CEarrcuscom_ Content-Type: text/html; charset="utf-8" Content-ID: <0E4D5E9308D3064F930F0449B280F1B7@namprd18.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYWxpYnJpIExp Z2h0IjsNCglwYW5vc2UtMToyIDE1IDMgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyog U3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29O b3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjEyLjBwdDsNCglmb250LWZhbWlseTpDYWxpYnJpO30NCmgxDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5Ow0KCW1zby1zdHlsZS1saW5rOiJIZWFkaW5nIDEgQ2hhciI7DQoJbWFyZ2luLXRvcDoxMi4w cHQ7DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVm dDowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCXBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7 DQoJZm9udC1zaXplOjE2LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSBMaWdodCI7DQoJY29s b3I6IzJFNzRCNTsNCglmb250LXdlaWdodDpub3JtYWw7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVy bGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dl ZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29y YXRpb246dW5kZXJsaW5lO30NCnNwYW4uSGVhZGluZzFDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJI ZWFkaW5nIDEgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6 IkhlYWRpbmcgMSI7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkgTGlnaHQiOw0KCWNvbG9yOiMyRTc0 QjU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9u dC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29s b3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1yZXBseTsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0K c3Bhbi5tc29JbnMNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5h bWU6IiI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFu Zz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhlIFNJRFJPUFMgV0cgaGFzIHJlYWNoZWQgYSBjb25zZW5zdXMgdG8gYWRvcHRp b24gb2YgZHJhZnQtbWFkaS1zaWRyb3BzLXJwLTAwLiBUaGUgYXV0aG9ycyBhcmUgcmVxdWVzdGVk IHRvIHN1Ym1pdCB0aGUgLTAwIHdnIGRyYWZ0IHdoZW4gdGhlIHN1Ym1pc3Npb24gcHJvY2VzcyBw ZXJtaXRzLiZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Q2hyaXMgJmFtcDsgS2V5dXI8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRE RiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RnJvbTogPC9zcGFuPjwvYj48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPktleXVyIFBhdGVsICZsdDtrZXl1ckBhcnJjdXMuY29tJmd0Ozxicj4N CjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBPY3RvYmVyIDEwLCAyMDE3IGF0IDEwOjAwIEFNPGJyPg0K PGI+VG86IDwvYj4mcXVvdDtzaWRyb3BzQGlldGYub3JnJnF1b3Q7ICZsdDtzaWRyb3BzQGlldGYu b3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5XRyBBZG9wdGlvbiBjYWxsIGZvciBkcmFmdC1t YWRpLXNpZHJvcHMtcnAtYWRvcHRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5I aSBGb2xrcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZSBh dXRob3JzIGhhdmUgcmVxdWVzdGVkIFNJRFJPUFMgd29ya2luZyBncm91cCBhZG9wdGlvbiBjYWxs IG9mIGRyYWZ0LW1hZGktc2lkcm9wcy1ycC1hZG9wdGlvbiwg4oCcUmVxdWlyZW1lbnRzIGZvciBS ZXNvdXJjZSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJlIChSUEtJKSBSZWx5aW5nIFBhcnRpZXPi gJ0uIFBsZWFzZSBzZW5kIHlvdXIgY29tbWVudHMgdG8NCiB0aGUgbGlzdC48L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoaXMgYWRvcHRpb24gY2FsbCB3aWxsIGNv bmNsdWRlIG9uIE9jdCAyNSAyMDE3Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Q2hyaXMgJmFtcDsgS2V5dXI8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_695CFF7280EE442B964606434744B4CEarrcuscom_-- From nobody Sun Nov 5 19:08:01 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20B4813FAD8 for ; Sun, 5 Nov 2017 19:07:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oHCatgAVRNGe for ; Sun, 5 Nov 2017 19:07:57 -0800 (PST) Received: from out20-109.mail.aliyun.com (out20-109.mail.aliyun.com [115.124.20.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DC0F13FADE for ; Sun, 5 Nov 2017 19:07:55 -0800 (PST) X-Alimail-AntiSpam: AC=CONTINUE; BC=0.3468958|-1; FP=0|0|0|0|0|-1|-1|-1; HT=e02c03278; MF=madi@rpstir.net; NM=1; PH=DS; RN=1; RT=1; SR=0; TI=SMTPD_---.9KtZ.F._1509937669; Received: from 192.168.90.40(mailfrom:madi@rpstir.net ip:1.119.141.130) by smtp.aliyun-inc.com(10.147.44.129); Mon, 06 Nov 2017 11:07:50 +0800 From: Di Ma Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: Date: Mon, 6 Nov 2017 11:07:50 +0800 To: SIDR Operations WG X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [Sidrops] RPSTIR in Dorker X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Nov 2017 03:07:59 -0000 Hi, folks, By virtue of suggestions from George Michaelson, Carlos Martinez and Jay = Borkenhagen, we RPSTIR team are now providing RPSTIR in Dorker. There are two ways to get RPSTIR images. One is to compile Docker Images = by Dockerfile and the other is to pull Docker Images from Dockerhub.=20 For more detail, please refer to the handbook in = doc/docker/Install_and_Run_Rpstir_in_Docker.txt RPSTIR is a sort of RPKI Relying Party implementation which is available = at https://github.com/bgpsecurity/ I am looking forwards to your feedbacks. Thanks. Di Ma RPSTIR https://bgpsecurity.net= From nobody Mon Nov 6 11:20:44 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F17713FAEB for ; Mon, 6 Nov 2017 11:20:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.75 X-Spam-Level: X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cgTOKHqkWYkH for ; Mon, 6 Nov 2017 11:20:40 -0800 (PST) Received: from mail-qt0-x232.google.com (mail-qt0-x232.google.com [IPv6:2607:f8b0:400d:c0d::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 700C113FAD9 for ; Mon, 6 Nov 2017 11:20:39 -0800 (PST) Received: by mail-qt0-x232.google.com with SMTP id z50so12363450qtj.4 for ; Mon, 06 Nov 2017 11:20:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=gplCjML7wL6bLAcPFL6EUZ4HBz3dWW+HcP7egOtbGWA=; b=jMQpt7S+2UgLwPk/69oFNEf7R4CCWpSM9yjvvczp45ygKjIVJETiIEj+kwSVdm0Z4K pyqj29xj3YdOXON1yW9ByFKJN8Bxpv8GlRM20eRePOPj08Wzf/9jbszjZA9hCOlRe1Y+ 5gpzGdugy87pCJ1fbtGmN7XBFPm7SxIYlEwFfkxon1Ojz/agwl98wqXIbPI5hHcNmZkW M+DyfUhjwHj5OE74Vjy2LHtDcnSOwfVqxt8B7OvbPtTjM4A0xcBUKp+fxeB0WlV970DX oBMuylQAgeQzVK+7V+Wpgz1jtG1ZokA++6f4j8ySVX8xwUF/JsUAre1sePdaeGBsrXjG yr2g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=gplCjML7wL6bLAcPFL6EUZ4HBz3dWW+HcP7egOtbGWA=; b=hmgQUgvIwpGtcHBpGw6kTQfOhmLibK8MQM5Z20Hu2VzbMuF7gFTRztmx3a59x+55Z4 8pO7D2F93JJPXLNgnNWZKH1wCYWJjhlzq7yaHgsQRXcWwoB602gUZax3qPLztKFis8lL HTVqIugizPEJl0RSeZ8koD15ktyP8UyaTPejb3ucsr8esHa/GuLUx9UV+Od6uqbhQd59 1SzLkn3hoIVOQsjoQAop96Tzlfd154NItk6FRp4S0yr3HN44OyZbDnQvYR8XQ8t8wtiB WK+I84+9dciwGy+Vm+F7fo21ZIisA7TuZJBVAF5+l+PVtFevPwsiAlTsDXSAFIT/FGOh C+cQ== X-Gm-Message-State: AMCzsaWNrqma65GTsKGQUT7LwtHFw7YWwNvwpNgwHpsnqQyhOksyNpcG 6fK+MvIY0tfqGLsfbUZWfnsTdUHz X-Google-Smtp-Source: ABhQp+SMMyIvAkIIY5DwYhx4GJq46lggPpGTWWDM+w5CVWQ255Ki6w5E6BymHpKX8u7I4RJceA/8CQ== X-Received: by 10.200.25.78 with SMTP id g14mr24178498qtk.225.1509996037862; Mon, 06 Nov 2017 11:20:37 -0800 (PST) Received: from [200.7.87.58] ([2001:13c7:7001:7000:e83a:d6cc:1f4f:29c5]) by smtp.gmail.com with ESMTPSA id f30sm9269639qta.73.2017.11.06.11.20.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 06 Nov 2017 11:20:36 -0800 (PST) From: "Carlos M. Martinez" To: "Di Ma" Cc: "SIDR Operations WG" Date: Mon, 06 Nov 2017 16:20:33 -0300 Message-ID: <645D1F3C-6319-4055-8737-A6CAF7124AB9@gmail.com> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.7r5425) Archived-At: Subject: Re: [Sidrops] RPSTIR in Dorker X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Nov 2017 19:20:42 -0000 Thanks! I’ll be trying it! On 6 Nov 2017, at 0:07, Di Ma wrote: > Hi, folks, > > By virtue of suggestions from George Michaelson, Carlos Martinez and > Jay Borkenhagen, we RPSTIR team are now providing RPSTIR in Dorker. > > There are two ways to get RPSTIR images. One is to compile Docker > Images by Dockerfile and the other is to pull Docker Images from > Dockerhub. > > For more detail, please refer to the handbook in > doc/docker/Install_and_Run_Rpstir_in_Docker.txt > > RPSTIR is a sort of RPKI Relying Party implementation which is > available at https://github.com/bgpsecurity/ > > I am looking forwards to your feedbacks. > > Thanks. > > Di Ma > RPSTIR > https://bgpsecurity.net > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops From nobody Mon Nov 6 15:37:25 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 199E313FB59 for ; Mon, 6 Nov 2017 15:37:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=algebras-org.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Opwk1Rg7Oc4H for ; Mon, 6 Nov 2017 15:37:21 -0800 (PST) Received: from mail-ua0-x22a.google.com (mail-ua0-x22a.google.com [IPv6:2607:f8b0:400c:c08::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3EDE13F698 for ; Mon, 6 Nov 2017 15:37:21 -0800 (PST) Received: by mail-ua0-x22a.google.com with SMTP id v27so7647554uav.7 for ; Mon, 06 Nov 2017 15:37:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=algebras-org.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=iMx2fGyBlkQ/vENYwTS84NZZte5lN048md32HtGzN5k=; b=vPBDXs8vOpc7c7QAt+YnnjSB12hT3lLifxGW4k4b9NE8poVz08xRCpqAg6N4iMDcks wIxOyQVseSUpsAkFDLpM1+K4CLyZ7eYnWdbjUqv/wcNtEVPGFxvSTlN7kukNzC851hgg zVU6WW/eW0Gxyndy4AD1PJDbMEpr76aiMmVebEbi9GoZes5c7LHRZvJwHIyTB6AT//3u ACApSBvqiNtxYUgt+8LaevYl4iFJow4+eOvYHLusJ5KudANefapf/PqtES2eyPwND3QA ZHhfo3h1Ak4Pt2xPQU8YjXlog7XxOdg9u+A4WUk+kmR5qM4UQnfMppxjFUjvleIcvNww rOhw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=iMx2fGyBlkQ/vENYwTS84NZZte5lN048md32HtGzN5k=; b=I9SW2vSi6yPL4MZFxvUwC3Qmd9FmHoXvNY8iCKZk9mOk60KPIPpEBbbINBJNhW+BLI 8bnBJjm3dsYb31i7sTC1NodByK4IIT3K0BY8bq0bx/igqa2wT7zgURfSONZsAA45w4x4 qXchnTBETQlSzp4NyU2SLZX/xu+lV5x94+lU+WpFfsHH8d/EsiAsm5Fk3IjO9X5YwzSz R+yrEoTvOQxfx2dKjPt38yZp6LRP9ggbZqteYMxAFTYeFPDF6dqdilVc9RIiHJxs0H6X Vt8e5iWEueeQy5wEHOiHqvjK0obtbCUEwcItPfvca8aWIUZqa5uNo7pWsaZgAAMtXgfC 1NiQ== X-Gm-Message-State: AMCzsaUya0hlgmn0q6IEGdzOT4VPX5Q18TyWUwsHPe6sQsxcwsBg0ZkM V/JJ88Eq4VzA0D1zHHIC4GriI8OSI0z0bY3Rftk8cPRj X-Google-Smtp-Source: ABhQp+QmVEgej6zXYKUxHoU6TJAvvCDUna3ompCdpHl2kgEZxC3ph++xeBIXLg7EXm6bTcY0uO76uIE9cUPqmXCO6do= X-Received: by 10.176.86.203 with SMTP id c11mr13285791uab.106.1510011440689; Mon, 06 Nov 2017 15:37:20 -0800 (PST) MIME-Version: 1.0 Received: by 10.103.91.93 with HTTP; Mon, 6 Nov 2017 15:37:20 -0800 (PST) X-Originating-IP: [2001:dc0:2001:210:311d:ff2c:17fb:af31] In-Reply-To: <645D1F3C-6319-4055-8737-A6CAF7124AB9@gmail.com> References: <645D1F3C-6319-4055-8737-A6CAF7124AB9@gmail.com> From: George Michaelson Date: Tue, 7 Nov 2017 09:37:20 +1000 Message-ID: To: Di Ma Cc: SIDR Operations WG Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Sidrops] RPSTIR in Dorker X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Nov 2017 23:37:24 -0000 thank you for doing this Di. On Tue, Nov 7, 2017 at 5:20 AM, Carlos M. Martinez wrote: > Thanks! I=E2=80=99ll be trying it! > > > On 6 Nov 2017, at 0:07, Di Ma wrote: > >> Hi, folks, >> >> By virtue of suggestions from George Michaelson, Carlos Martinez and Jay >> Borkenhagen, we RPSTIR team are now providing RPSTIR in Dorker. >> >> There are two ways to get RPSTIR images. One is to compile Docker Images >> by Dockerfile and the other is to pull Docker Images from Dockerhub. >> >> For more detail, please refer to the handbook in >> doc/docker/Install_and_Run_Rpstir_in_Docker.txt >> >> RPSTIR is a sort of RPKI Relying Party implementation which is available >> at https://github.com/bgpsecurity/ >> >> I am looking forwards to your feedbacks. >> >> Thanks. >> >> Di Ma >> RPSTIR >> https://bgpsecurity.net >> _______________________________________________ >> Sidrops mailing list >> Sidrops@ietf.org >> https://www.ietf.org/mailman/listinfo/sidrops > > > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops From nobody Sat Nov 11 00:20:29 2017 Return-Path: X-Original-To: sidrops@ietf.org Delivered-To: sidrops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A0C7A13FC19; Tue, 7 Nov 2017 06:14:19 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: =?utf-8?q?Mirja_K=C3=BChlewind?= To: "The IESG" Cc: draft-ietf-sidrops-bgpsec-rollover@ietf.org, Chris Morrow , sidrops-chairs@ietf.org, morrowc@ops-netman.net, sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.65.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151006405964.18653.226226090663575282.idtracker@ietfa.amsl.com> Date: Tue, 07 Nov 2017 06:14:19 -0800 Archived-At: X-Mailman-Approved-At: Sat, 11 Nov 2017 00:20:29 -0800 Subject: [Sidrops] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draf?= =?utf-8?q?t-ietf-sidrops-bgpsec-rollover-03=3A_=28with_COMMENT=29?= X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Nov 2017 14:14:20 -0000 Mirja Kühlewind has entered the following ballot position for draft-ietf-sidrops-bgpsec-rollover-03: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- This document really reads like it should be an informational document, or maybe a BCP. Further, the shepherd write-up says "Internet Standard final status" but I see Proposed Standard in the datatracker...? I would recommend to go for BCP if the wg can agree to that. Also, should ietf-sidr-rtr-keying maybe be a normative reference, or is this just one example? The use of this reference in section 3.1 isn’t clear to me with this respect: „The key rollover process is dependent on the key provisioning mechanisms adopted by an AS [I-D.ietf-sidr-rtr-keying].“ From nobody Sat Nov 11 00:33:11 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC7771270AE; Sat, 11 Nov 2017 00:33:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.1 X-Spam-Level: X-Spam-Status: No, score=-1.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XRFUl1Rq45Ws; Sat, 11 Nov 2017 00:33:09 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9E2D120726; Sat, 11 Nov 2017 00:33:05 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id DE02F3FC1F; Sat, 11 Nov 2017 08:33:04 +0000 (UTC) Received: from morrowc-glaptop2.ops-netman.net (unknown [119.73.240.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 3E788174BF38B; Sat, 11 Nov 2017 08:33:01 +0000 (UTC) Date: Sat, 11 Nov 2017 19:32:57 +1100 Message-ID: From: Chris Morrow To: sidrops@ietf.org,sidrops-chairs@ietf.org,sidrops-ads@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.2 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [Sidrops] WGLC: draft-ietf-sidrops-lta-use-cases - END 12/2/2017 (dec 2) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Nov 2017 08:33:10 -0000 Howdy WG folks, While you are traveling, unraveling, raffling, etc... Please consider this the start of a 3wk WGLC (since it's travel week) which will end: December 2, 2017 The subject draft's abstract: "There are a number of critical circumstances where a localized routing domain needs to augment or modify its view of the Global RPKI. This document attempts to outline a few of them." and link to reading materials: please and thank you, chris co-chair-keyboardist. From nobody Sun Nov 12 00:37:13 2017 Return-Path: X-Original-To: sidrops@ietf.org Delivered-To: sidrops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B3B061241F3; Sun, 12 Nov 2017 00:37:06 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.65.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151047582669.30848.12590074304808452654@ietfa.amsl.com> Date: Sun, 12 Nov 2017 00:37:06 -0800 Archived-At: Subject: [Sidrops] I-D Action: draft-ietf-sidrops-rp-00.txt X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Nov 2017 08:37:07 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the SIDR Operations WG of the IETF. Title : Requirements for Resource Public Key Infrastructure (RPKI) Relying Parties Authors : Di Ma Stephen Kent Filename : draft-ietf-sidrops-rp-00.txt Pages : 11 Date : 2017-11-12 Abstract: This document provides a single reference point for requirements for Relying Party (RP) software for use in the Resource Public Key Infrastructure (RPKI). It cites requirements that appear in several RPKI RFCs, making it easier for implementers to become aware of these requirements that are segmented with orthogonal functionalities. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sidrops-rp/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sidrops-rp-00 https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-rp-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 12 18:38:15 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF6DC1271DF; Sun, 12 Nov 2017 18:38:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.101 X-Spam-Level: X-Spam-Status: No, score=-1.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f8QgOcYv7Ot9; Sun, 12 Nov 2017 18:38:12 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CB7A127B52; Sun, 12 Nov 2017 18:36:57 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 3133F3FDAA; Mon, 13 Nov 2017 02:36:56 +0000 (UTC) Received: from morrowc-glaptop2.ops-netman.net (dhcp-88df.meeting.ietf.org [31.133.136.223]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 1C1191794624B; Mon, 13 Nov 2017 02:36:52 +0000 (UTC) Date: Mon, 13 Nov 2017 13:36:47 +1100 Message-ID: From: Chris Morrow To: sidrops@ietf.org,sidrops-chairs@ietf.org,sidrops-ads@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.2 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [Sidrops] WGLC - draft-ietf-sidrops-rpki-tree-validation - ENDS 12/4/2017 (dec 4) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 02:38:14 -0000 Howdy SidrOps folks, Please consider this the WGLC for: draft-ietf-sidrops-rpki-tree-validation Abstract included: "This document describes the approach to validate the content of the RPKI certificate tree, as it is implemented in the RIPE NCC RPKI Validator. This approach is independent of a particular object retrieval mechanism. This allows it to be used with repositories available over the rsync protocol, the RPKI Repository Delta Protocol, and repositories that use a mix of both." I believe this is IETF week, plus a travel week, so the WGLC is 3wks long instead of the normal 2wks. Please read/review/comment on the document so the authors can adjust as necessary. -chris co-chair-person From nobody Mon Nov 13 00:08:29 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B7041294C8; Mon, 13 Nov 2017 00:08:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.501 X-Spam-Level: X-Spam-Status: No, score=-5.501 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hcJOt306CRjS; Mon, 13 Nov 2017 00:08:26 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DD60129479; Mon, 13 Nov 2017 00:08:26 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1eE9n5-0001Zj-CF; Mon, 13 Nov 2017 08:08:23 +0000 Date: Mon, 13 Nov 2017 16:08:21 +0800 Message-ID: From: Randy Bush To: Chris Morrow Cc: sidrops@ietf.org, sidrops-chairs@ietf.org, sidrops-ads@ietf.org In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.2 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Sidrops] WGLC - draft-ietf-sidrops-rpki-tree-validation - ENDS 12/4/2017 (dec 4) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 08:08:27 -0000 have read. it documents an implementaion; so i have not formally verified that the document and the implementation are in exact correspondence. but i support publicaiton. randy From nobody Mon Nov 13 00:46:18 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63C2D126B6E; Mon, 13 Nov 2017 00:46:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tGIG2bznLYjz; Mon, 13 Nov 2017 00:46:15 -0800 (PST) Received: from adrilankha.hactrn.net (adrilankha.hactrn.net [147.28.0.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC1A912940F; Mon, 13 Nov 2017 00:46:14 -0800 (PST) Received: from minas-ithil.hactrn.net (dhcp-8825.meeting.ietf.org [31.133.136.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "nargothrond.hactrn.net", Issuer "Grunchweather Associates" (verified OK)) by adrilankha.hactrn.net (Postfix) with ESMTPS id 7AB0739837; Mon, 13 Nov 2017 08:46:14 +0000 (UTC) Received: from minas-ithil.hactrn.net (localhost [IPv6:::1]) by minas-ithil.hactrn.net (Postfix) with ESMTP id 6D417D08AB4; Mon, 13 Nov 2017 16:46:03 +0800 (+08) Date: Mon, 13 Nov 2017 16:46:03 +0800 From: Rob Austein To: sidrops@ietf.org, sidrops-chairs@ietf.org, sidrops-ads@ietf.org In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.3 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Message-Id: <20171113084603.6D417D08AB4@minas-ithil.hactrn.net> Archived-At: Subject: Re: [Sidrops] WGLC - draft-ietf-sidrops-rpki-tree-validation - ENDS 12/4/2017 (dec 4) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 08:46:16 -0000 I found an earlier version of this draft useful while rewriting my RP code to support RRDP. My own implementation ended up differing from RIPE's in many ways, but having an outline of how they did it as a reference helped me think about options that might not have occurred to me otherwise, and provided a useful checklist. Support publication. From nobody Mon Nov 13 01:17:38 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4C6C1294E6; Mon, 13 Nov 2017 01:17:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M2xjNDZyvPLF; Mon, 13 Nov 2017 01:17:34 -0800 (PST) Received: from out20-49.mail.aliyun.com (out20-49.mail.aliyun.com [115.124.20.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E27A2120713; Mon, 13 Nov 2017 01:17:33 -0800 (PST) X-Alimail-AntiSpam: AC=CONTINUE; BC=0.3123413|-1; FP=0|0|0|0|0|-1|-1|-1; HT=e02c03295; MF=madi@rpstir.net; NM=1; PH=DS; RN=4; RT=4; SR=0; TI=SMTPD_---.9Olw9Dz_1510564646; Received: from 10.10.12.107(mailfrom:madi@rpstir.net ip:103.26.221.241) by smtp.aliyun-inc.com(10.147.38.183); Mon, 13 Nov 2017 17:17:29 +0800 Content-Type: text/plain; charset=gb2312 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Di Ma In-Reply-To: Date: Mon, 13 Nov 2017 17:17:26 +0800 Cc: sidrops@ietf.org, sidrops-chairs@ietf.org, sidrops-ads@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <4C633713-FC03-4C99-B8A6-C40F17D401E0@rpstir.net> References: To: Chris Morrow X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [Sidrops] WGLC - draft-ietf-sidrops-rpki-tree-validation - ENDS 12/4/2017 (dec 4) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Nov 2017 09:17:37 -0000 I have read this document many times~ I think experiences from RIPE RPKI validator, as one of the RP = implementation pioneers, is worth sharing with the routing community. I support publication of this document. Di > =D4=DA 2017=C4=EA11=D4=C213=C8=D5=A3=AC10:36=A3=ACChris Morrow = =D0=B4=B5=C0=A3=BA >=20 > Howdy SidrOps folks, >=20 > Please consider this the WGLC for: > draft-ietf-sidrops-rpki-tree-validation >=20 > Abstract included: >=20 > "This document describes the approach to validate the content of the > RPKI certificate tree, as it is implemented in the RIPE NCC RPKI > Validator. This approach is independent of a particular object > retrieval mechanism. This allows it to be used with repositories > available over the rsync protocol, the RPKI Repository Delta > Protocol, and repositories that use a mix of both." >=20 > I believe this is IETF week, plus a travel week, so the WGLC is 3wks > long instead of the normal 2wks. Please read/review/comment on the > document so the authors can adjust as necessary. >=20 > -chris > co-chair-person >=20 > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops From nobody Mon Nov 13 21:06:21 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AC5C1288B8 for ; Mon, 13 Nov 2017 21:06:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IB6A5JQTX1-V for ; Mon, 13 Nov 2017 21:06:17 -0800 (PST) Received: from mail-ua0-x22f.google.com (mail-ua0-x22f.google.com [IPv6:2607:f8b0:400c:c08::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4049F1286C7 for ; Mon, 13 Nov 2017 21:06:17 -0800 (PST) Received: by mail-ua0-x22f.google.com with SMTP id j14so13016819uag.11 for ; Mon, 13 Nov 2017 21:06:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Xgb+VMnWVMwgrofraOb6YyApQ0m4zugiu/R66pRUVfE=; b=qwbLRoC23Zua2jxVaysH0FdJrmRwACZUitxhtM6hP3qwxTvVVrci1yNmtsTdkLrAsk Zu85I+7QH0x6hKkjAAPW2IHzfTKoQPoem1+tPmmMBrtKgg2G8mYgRZtKDi2snKueq/9V DWo4zyh/PJbV+Z/Sm5hb5ho/HfM99TNvXSKAig0Wsx8kaeLlccsfNuXsov9bSyEMdnhC 4sA2QYUwk7hng/c3pIcakoHakfg5dsgWLUw0cJpaK7hgRUyRowAyPLNW8ySrnwpdaskd dIAT6U7ZPnrs7AAQiiSBFv9vtIACvjWoLQjBEuSovLm+qgwLSiXq7Gp0vrSkpYcgxgHX rnVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Xgb+VMnWVMwgrofraOb6YyApQ0m4zugiu/R66pRUVfE=; b=afmEAHd23zuwQ9eMHlnLeppOZCkjOIW4cOUEKOwE+XgR0mCFnLdk+I/lCpInjh++mg mDorD2eEcC+isYzDhSrNXCIi+yA+LY8+Fey8JxN7NIXZvaAXxThiYhVXIkGdazz6BA9h RVCY2Abs1I3HsxRe/sgPOG0e5IypeHOpnYC/YCNNjhAGMZvekaoS+uKblDnYA3eyjwrR ZKwTorG3ukjzcxmBuVJM6FZRh2pTluK//e/LdYsFMyK4Z2NqN0wLcirmwjDAZB5JrfnQ ne4FdspTMtSUXyjSTuVh4Wv+2QPRah30yrppkjhDxo0H/zH+RtoFofC1vIKp3FFHiJSC gjnQ== X-Gm-Message-State: AJaThX4eIquKnRVk6HWj+B7oZAooHjqqbRdgYiYSbaWhghBik6HKqZUE kA46w2krwFB37gsO7mkMYT6vdsUczxLHaXp0Dzw0rw== X-Google-Smtp-Source: AGs4zMaHwowxuOPsfkz7x3U8Ha57TG93Q2cnQEwqwHb3T91JctkyFx6A0muwJPvfze4dPXfXHWU0F3KvfEPFIWErwxc= X-Received: by 10.176.83.132 with SMTP id k4mr8484425uaa.144.1510635975996; Mon, 13 Nov 2017 21:06:15 -0800 (PST) MIME-Version: 1.0 Received: by 10.159.59.206 with HTTP; Mon, 13 Nov 2017 21:06:15 -0800 (PST) In-Reply-To: <20CDCE5B-B991-4D21-BEFC-2F0ADDD0DECF@arrcus.com> References: <92CECB00-7846-406B-A296-3CB12D0ED627@arrcus.com> <20CDCE5B-B991-4D21-BEFC-2F0ADDD0DECF@arrcus.com> From: Christopher Morrow Date: Tue, 14 Nov 2017 16:06:15 +1100 Message-ID: To: Keyur Patel Cc: "sidrops@ietf.org" Content-Type: multipart/alternative; boundary="f403045e3db0bbfa27055dea581e" Archived-At: Subject: Re: [Sidrops] WG Adoption call for draft-tbruijnzeels-sidrops-signed-tal-01 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Nov 2017 05:06:19 -0000 --f403045e3db0bbfa27055dea581e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Tim says he's going to send along a rename/update in the next day or so. On Thu, Nov 2, 2017 at 12:16 PM, Keyur Patel wrote: > The SIDROPS WG has reached a consensus to adoption of > draft-tbruijnzeels-sidrops-signed-tal-01. The authors are requested to > submit the -00 wg draft when the submission process permits. > > > > Regards, > > Chris & Keyur > > > > > > *From: *Keyur Patel > *Date: *Tuesday, October 10, 2017 at 10:19 AM > *To: *"sidrops@ietf.org" > *Subject: *WG Adoption call for draft-tbruijnzeels-sidrops-signed-tal-01 > > > > Hi Folks, > > > > The authors have requested SIDROPS working group adoption call of > draft-tbruijnzeels-sidrops-signed-tal-01, =E2=80=9CRPKI signed object for= TAL=E2=80=9D. > Please send your comments to the list. > > > > This adoption call will conclude on Oct 25 2017. > > > > Regards, > > Chris & Keyur > > > > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops > > --f403045e3db0bbfa27055dea581e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Tim says he's going to send along a rename/update in t= he next day or so.


On Thu, Nov 2, 2017 at 12:16 PM, Keyur Patel <keyur@a= rrcus.com> wrote:

The SIDROPS WG has = reached a consensus to adoption of draft-tbruijnzeels-sidrops-signed-t= al-01. The authors are requested to submit the -00 wg draft when the submis= sion process permits.

=C2=A0

Regards,<= /u>

Chris & Keyur

=C2=A0

=C2=A0

From: Keyur Patel <keyur@arrcus.com>
Date: Tuesday, October 10, 2017 at 10:19 AM
To: "sidr= ops@ietf.org" <sidrops@ietf.org>
Subject: WG Adoption call for draft-tbruijnzeels-sidrops-signed= -tal-01

=C2=A0

Hi Folks,=

=C2=A0

The authors have re= quested SIDROPS working group adoption call of draft-tbruijnzeels-sidrops-<= wbr>signed-tal-01, =E2=80=9CRPKI signed object for TAL=E2=80=9D. Please sen= d your comments to the list.

=C2=A0

This adoption call = will conclude on Oct 25 2017.

=C2=A0

Regards,<= /u>

Chris & Keyur

=C2=A0


_______________________________________________
Sidrops mailing list
Sidrops@ietf.org
https://www.ietf.org/mailman/listinfo/sidrops<= br>

--f403045e3db0bbfa27055dea581e-- From nobody Mon Nov 13 23:20:25 2017 Return-Path: X-Original-To: sidrops@ietf.org Delivered-To: sidrops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A0ED12945F; Mon, 13 Nov 2017 23:20:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.65.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151064401825.5985.7789265592065530099@ietfa.amsl.com> Date: Mon, 13 Nov 2017 23:20:18 -0800 Archived-At: Subject: [Sidrops] I-D Action: draft-ietf-sidrops-signed-tal-00.txt X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Nov 2017 07:20:18 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the SIDR Operations WG of the IETF. Title : RPKI signed object for TAL Authors : Tim Bruijnzeels Carlos Martinez Filename : draft-ietf-sidrops-signed-tal-00.txt Pages : 10 Date : 2017-11-13 Abstract: Trust Anchor Locators (TALs) [RFC7730] are used by Relying Parties in the RPKI to locate and validate Trust Anchor certificates used in RPKI validation. This document defines an RPKI signed object [RFC6488] for a Trust Anchor Locator (TAL) that can be published by Trust Anchor to communicate a new TAL to already deployed Relying Parties. The two primary use cases for this are that 1) a Trust Anchor may wish to change the locations where its TA certificate may be found, and 2) a Trust Anchor may wish to perform a planned migration to a new key. Note that unplanned key rolls are considered out of scope for this document. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sidrops-signed-tal/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-sidrops-signed-tal-00 https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-signed-tal-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Nov 14 18:12:09 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2780129494 for ; Tue, 14 Nov 2017 18:12:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1bWYiT7_bumg for ; Tue, 14 Nov 2017 18:12:06 -0800 (PST) Received: from walnut.tislabs.com (walnut.tislabs.com [192.94.214.200]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5102012948F for ; Tue, 14 Nov 2017 18:12:06 -0800 (PST) Received: from nova.tislabs.com (unknown [10.66.1.77]) by walnut.tislabs.com (Postfix) with ESMTP id ADD1028B0041 for ; Tue, 14 Nov 2017 21:12:05 -0500 (EST) Received: from [127.0.0.1] (localhost.localdomain [127.0.0.1]) by nova.tislabs.com (Postfix) with ESMTP id 7F11C1F8036; Tue, 14 Nov 2017 21:12:05 -0500 (EST) From: Sandra Murphy Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Date: Tue, 14 Nov 2017 21:12:04 -0500 Message-Id: <6E9576A9-F51A-4A6D-8F8E-FA80E68CF354@tislabs.com> Cc: Sandra Murphy To: sidrops@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [Sidrops] request for sidrops attention to sidr rtr-keying draft X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 02:12:08 -0000 One of the few remaining work items in the sidr wg is = draft-ietf-sidr-rtr-keying-14,=20 Router Keying for BGPsec: BGPsec-speaking routers are provisioned with private keys in order to sign BGPsec announcements. The corresponding public keys are published in the global Resource Public Key Infrastructure, enabling verification of BGPsec messages. This document describes two methods of generating the public-private key-pairs: router-driven and operator-driven. The draft recently went through wglc. One set of comments has been = addressed already. Another set of comments can be found at = https://mailarchive.ietf.org/arch/msg/sidr/T-PB3WHCqUgBJPFdFS57x7fpfag. It would be great to get the sidrops folk to comment on this draft. The draft can be found at = https://tools.ietf.org/html/draft-ietf-sidr-rtr-keying-14. =E2=80=94Sandy= From nobody Tue Nov 14 22:13:39 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D5D31294B3 for ; Tue, 14 Nov 2017 22:13:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.301 X-Spam-Level: X-Spam-Status: No, score=-2.301 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id on30RDVWEshz for ; Tue, 14 Nov 2017 22:13:36 -0800 (PST) Received: from outpost1.zedat.fu-berlin.de (outpost1.zedat.fu-berlin.de [130.133.4.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 930A11243F6 for ; Tue, 14 Nov 2017 22:13:36 -0800 (PST) Received: from inpost2.zedat.fu-berlin.de ([130.133.4.69]) by outpost.zedat.fu-berlin.de (Exim 4.85) for sidrops@ietf.org with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from ) id <1eEqx5-002oSB-00>; Wed, 15 Nov 2017 07:13:35 +0100 Received: from dhcp-8452.meeting.ietf.org ([31.133.132.82] helo=mw-x1.meeting.ietf.org) by inpost2.zedat.fu-berlin.de (Exim 4.85) for sidrops@ietf.org with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from ) id <1eEqx4-001Db2-5n>; Wed, 15 Nov 2017 07:13:34 +0100 Date: Wed, 15 Nov 2017 14:13:30 +0800 (Malaiische Halbinsel Normalzeit) From: Matthias Waehlisch To: sidrops@ietf.org Message-ID: User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) X-X-Sender: waehl@mail.zedat.fu-berlin.de MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Originating-IP: 31.133.132.82 Archived-At: Subject: [Sidrops] AMS-IX Lightning talk @ RIPE 75 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 06:13:38 -0000 For the numbers see slides 12 and 13: https://ripe75.ripe.net/presentations/66-m6-introspective.pdf -- Matthias Waehlisch . Freie Universitaet Berlin, Computer Science .. http://www.cs.fu-berlin.de/~waehl From nobody Tue Nov 14 22:18:16 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B279B129410 for ; Tue, 14 Nov 2017 22:18:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T4s_gqXSrsIY for ; Tue, 14 Nov 2017 22:18:13 -0800 (PST) Received: from outpost1.zedat.fu-berlin.de (outpost1.zedat.fu-berlin.de [130.133.4.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 555351293EB for ; Tue, 14 Nov 2017 22:18:13 -0800 (PST) Received: from inpost2.zedat.fu-berlin.de ([130.133.4.69]) by outpost.zedat.fu-berlin.de (Exim 4.85) for sidrops@ietf.org with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from ) id <1eEr1X-002pgZ-U1>; Wed, 15 Nov 2017 07:18:11 +0100 Received: from dhcp-8452.meeting.ietf.org ([31.133.132.82] helo=mw-x1.meeting.ietf.org) by inpost2.zedat.fu-berlin.de (Exim 4.85) for sidrops@ietf.org with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from ) id <1eEr1W-001E9d-VN>; Wed, 15 Nov 2017 07:18:11 +0100 Date: Wed, 15 Nov 2017 14:18:08 +0800 (Malaiische Halbinsel Normalzeit) From: Matthias Waehlisch To: sidrops@ietf.org In-Reply-To: Message-ID: References: User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) X-X-Sender: waehl@mail.zedat.fu-berlin.de MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Originating-IP: 31.133.132.82 Archived-At: Subject: Re: [Sidrops] AMS-IX Lightning talk @ RIPE 75 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 06:18:15 -0000 and for more live data: https://ams-ix.net/technical/statistics/route-server-stats On Wed, 15 Nov 2017, Matthias Waehlisch wrote: > > For the numbers see slides 12 and 13: > > https://ripe75.ripe.net/presentations/66-m6-introspective.pdf > > > > -- Matthias Waehlisch . Freie Universitaet Berlin, Computer Science .. http://www.cs.fu-berlin.de/~waehl From nobody Tue Nov 14 22:21:57 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B6711243F6 for ; Tue, 14 Nov 2017 22:21:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nyty8Coxg2qT for ; Tue, 14 Nov 2017 22:21:54 -0800 (PST) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0127.outbound.protection.outlook.com [23.103.201.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 408DA1201FA for ; Tue, 14 Nov 2017 22:21:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=evDzA9c8SFQt+3z5JZWqUVSMthOuLzCMjMScegc2WIU=; b=d1EcAPTiCliEx30fZYyA0iMB6iPj4fL3rRXydyUnNeA8jwW5sHyEmGICRSFZZYzSEEy368NRjt54n/9MXZ8RhdSsDzouHBcHXsO0rd0I6eAinyHo5n3l1nfCRWGOmj19ozIbrDfX3syTgKnrtriRamoFjWJjtJuPrYSxF5lbtBE= Received: from SN4PR0901MB2176.namprd09.prod.outlook.com (10.167.151.140) by SN4PR0901MB2176.namprd09.prod.outlook.com (10.167.151.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.197.13; Wed, 15 Nov 2017 06:21:52 +0000 Received: from SN4PR0901MB2176.namprd09.prod.outlook.com ([fe80::ac98:ab82:caf4:687f]) by SN4PR0901MB2176.namprd09.prod.outlook.com ([fe80::ac98:ab82:caf4:687f%13]) with mapi id 15.20.0197.020; Wed, 15 Nov 2017 06:21:52 +0000 From: "Montgomery, Douglas (Fed)" To: Matthias Waehlisch , "sidrops@ietf.org" Thread-Topic: [Sidrops] AMS-IX Lightning talk @ RIPE 75 Thread-Index: AQHTXdjo7+fo0a6PXk2oe281nOkvzqMUpIcA Date: Wed, 15 Nov 2017 06:21:52 +0000 Message-ID: <55189FDD-08F7-483F-9C15-64B82B9FF700@nist.gov> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.8.0.171111 authentication-results: spf=none (sender IP is ) smtp.mailfrom=dougm@nist.gov; x-originating-ip: [2001:67c:370:128:7dd8:de62:c7ff:87cb] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN4PR0901MB2176; 6:NM3f7FfuYgUqYr3O1/OUfDCjTCzlqIHEmx0NmmRBMRBc9KGx/gsBQz9RjHqmxfj9cfW4xJMGft2fFIvKIC/u4ZOFLR/1jyMyvTpJfLOzqbCqzsZDH3JclBjsJafIaJuoU7KUrTkYzBdzQFpU5/dvK8KB2n2xSDMhM8RMZyrUZk7qZilNdpgMpnikrlB9o+yrpe5sjH7NyLhtOVp0DLvhkhoubWEdJP2jl4dhMGRpCb1rjMQDSEmgSPP0GJzNwrW9CaH09BVXDbnsbj5QonBqs6lfGXX3+cCshmcpglUHBOwx+AwjiBWu3Grz4vVObfvV7z2Q3D/WXEm1xAwSnbpdxY+8AqWC0Xc2GuxtKVam7W8=; 5:nJPtHVugTxdwFtZCchp2yj8Ia1+pgweWHCIZJMCreMQS1jX4XE/jS65eeyIgrC0Lh4YTofeMM9DAwtt+eEbFR8fQsWcFmTMdlrwu+Mkb8H2dD8HPPNjmEE82dYlpsftHJVVmjrrah+xCCbdnkNDeQ17lhWRksSw8bD0Oum4VH6U=; 24:l35H86DFnI8I3JzbIn9rS8ipcK+i4EIABSO4lKb4GSTdlBgSe1+yxqfKXBCx0r2XHgraWJBy9Sah2wkvQbGBWyS3QxZNH6KUfBP1QUMmQVQ=; 7:LJ8KjP8PRNNPjvi4mFTryMHU2jdpj+oZxt+Eu0Eb6/YeiLre8RwhSo5KrLc+RsUT/Iqs91i5bgQUYS9shXWiMKimk7c0m2SAeUFsqGX+mtpBA97u4dagg39XdbM+vKX6spogdVSxpkflMBdL/NL7ZydzgFBCH4PsmlFL00QST153h4QU6tBmqPmnKtaV6aBxsUyYfLjV2eNNczF7jnUxLI/o4mfjAON4ETh2v8OIeQYqE1lU4t9BeRmduln2bUmq x-ms-exchange-antispam-srfa-diagnostics: SSOS;SSOR; x-forefront-antispam-report: SFV:SKI; SCL:-1; SFV:NSPM; SFS:(10019020)(6009001)(376002)(346002)(39860400002)(24454002)(189002)(199003)(33656002)(8936002)(316002)(2906002)(6506006)(6486002)(83506002)(3660700001)(478600001)(82746002)(3280700002)(7736002)(6246003)(53936002)(97736004)(106356001)(81156014)(101416001)(50986999)(14454004)(110136005)(105586002)(25786009)(76176999)(54356999)(81166006)(5250100002)(58126008)(305945005)(6436002)(2950100002)(6116002)(189998001)(86362001)(229853002)(2900100001)(8676002)(36756003)(6512007)(99286004)(5660300001)(102836003)(83716003)(68736007)(2501003); DIR:OUT; SFP:1102; SCL:1; SRVR:SN4PR0901MB2176; H:SN4PR0901MB2176.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; x-ms-office365-filtering-correlation-id: d4078e04-5b99-4292-78ad-08d52bf12946 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(48565401081)(2017052603258); SRVR:SN4PR0901MB2176; x-ms-traffictypediagnostic: SN4PR0901MB2176: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(3231022)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6055026)(6041248)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123555025)(20161123564025)(20161123562025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:SN4PR0901MB2176; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:SN4PR0901MB2176; x-forefront-prvs: 0492FD61DD received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: d4078e04-5b99-4292-78ad-08d52bf12946 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2017 06:21:52.0983 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN4PR0901MB2176 Archived-At: Subject: Re: [Sidrops] AMS-IX Lightning talk @ RIPE 75 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 06:21:56 -0000 U2xpZGUgMTEgaXMgaW50ZXJlc3Rpbmc6DQoNCiJObyB0cmFmZmljIGxvc3MgZGV0ZWN0ZWQsIGFs dGhvdWdoDQphZHZlcnRpc2VkIHByZWZpeGVzICh3aXRoIElSUitSUEtJDQpmaWx0ZXJpbmcpIHdl bnQgZnJvbSB+MTY1SyB0byB+NjhLLiINCg0KVG90YWxseSByZWR1bmRhbnQgYW5ub3VuY2VtZW50 cz8gICBMb3NzIG9mIFRFIHBhdGhzPw0KDQpJbnRlcmVzdGluZyBzdGF0aXN0aWNzIHRvIGNvbXB1 dGUgb24gIkludmFsaWRzIiBpbmNsdWRlIC0gaG93IG1hbnkgaW52YWxpZHMgYXJlIGNvdmVyZWQg Ynkgcm91dGVzIHRvIA0KDQoxLiB0aGUgc2FtZSBvcmlnaW4sIA0KMi4gdGhlIHNhbWUgbmV4dCBo b3AgQVMsIA0KMy4gYW5kIHRoZSBzYW1lIGNvbXBsZXRlIHBhdGguDQoNCmRvdWdtDQotLS0gDQpE b3VnIE1vbnRnb21lcnkgQCBOSVNUIC8gSVRMIC8gQU5URCAgDQoNCg0KDQrvu79PbiAxMS8xNS8x NywgMToxMyBBTSwgIlNpZHJvcHMgb24gYmVoYWxmIG9mIE1hdHRoaWFzIFdhZWhsaXNjaCIgPHNp ZHJvcHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgbS53YWVobGlzY2hAZnUtYmVybGlu LmRlPiB3cm90ZToNCg0KICAgIA0KICAgIEZvciB0aGUgbnVtYmVycyBzZWUgc2xpZGVzIDEyIGFu ZCAxMzoNCiAgICANCg0K From nobody Wed Nov 15 01:40:23 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F030B128DF3 for ; Wed, 15 Nov 2017 01:40:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jmog_DapQD7p for ; Wed, 15 Nov 2017 01:40:20 -0800 (PST) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C47F1270AE for ; Wed, 15 Nov 2017 01:40:20 -0800 (PST) Received: from titi.ripe.net ([193.0.23.11]) by molamola.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eEuB7-0005n0-NC; Wed, 15 Nov 2017 10:40:18 +0100 Received: from sslvpn.ripe.net ([193.0.20.230] helo=vpn-48.ripe.net) by titi.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eEuB7-00056a-DQ; Wed, 15 Nov 2017 10:40:17 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Tim Bruijnzeels In-Reply-To: <55189FDD-08F7-483F-9C15-64B82B9FF700@nist.gov> Date: Wed, 15 Nov 2017 17:40:12 +0800 Cc: Matthias Waehlisch , "sidrops@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <55189FDD-08F7-483F-9C15-64B82B9FF700@nist.gov> To: "Montgomery, Douglas (Fed)" X-Mailer: Apple Mail (2.3273) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ------- X-RIPE-Spam-Report: Spam Total Points: -7.5 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719a0e68cf337c4ed3aa5ca405a35b7348a Archived-At: Subject: Re: [Sidrops] AMS-IX Lightning talk @ RIPE 75 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 09:40:22 -0000 > On 15 Nov 2017, at 14:21, Montgomery, Douglas (Fed) = wrote: >=20 > Slide 11 is interesting: >=20 > "No traffic loss detected, although > advertised prefixes (with IRR+RPKI > filtering) went from ~165K to ~68K." >=20 > Totally redundant announcements? Loss of TE paths? Looking at slide #13, most of those are due to IRR filtering. Only 295 = routes are RPKI invalid. IRR+RPKI filtering means, I believe, that an announcement is filtered = if: =3D it is NOT authorised in IRR; or =3D it is RPKI INVALID Tim >=20 > Interesting statistics to compute on "Invalids" include - how many = invalids are covered by routes to=20 >=20 > 1. the same origin,=20 > 2. the same next hop AS,=20 > 3. and the same complete path. >=20 > dougm > ---=20 > Doug Montgomery @ NIST / ITL / ANTD =20 >=20 >=20 >=20 > =EF=BB=BFOn 11/15/17, 1:13 AM, "Sidrops on behalf of Matthias = Waehlisch" wrote: >=20 >=20 > For the numbers see slides 12 and 13: >=20 >=20 > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops From nobody Wed Nov 15 01:48:20 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E51261296D2 for ; Wed, 15 Nov 2017 01:48:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kDSldLqzP7Qw for ; Wed, 15 Nov 2017 01:48:17 -0800 (PST) Received: from outpost1.zedat.fu-berlin.de (outpost1.zedat.fu-berlin.de [130.133.4.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98F1A1296CD for ; Wed, 15 Nov 2017 01:48:17 -0800 (PST) Received: from inpost2.zedat.fu-berlin.de ([130.133.4.69]) by outpost.zedat.fu-berlin.de (Exim 4.85) with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from ) id <1eEuIo-0008SF-Tq>; Wed, 15 Nov 2017 10:48:14 +0100 Received: from dhcp-8452.meeting.ietf.org ([31.133.132.82] helo=mw-x1.meeting.ietf.org) by inpost2.zedat.fu-berlin.de (Exim 4.85) with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (envelope-from ) id <1eEuIo-001ZUb-4k>; Wed, 15 Nov 2017 10:48:14 +0100 Date: Wed, 15 Nov 2017 17:48:10 +0800 (Malaiische Halbinsel Normalzeit) From: Matthias Waehlisch To: Tim Bruijnzeels cc: "Montgomery, Douglas (Fed)" , "sidrops@ietf.org" In-Reply-To: Message-ID: References: <55189FDD-08F7-483F-9C15-64B82B9FF700@nist.gov> User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) X-X-Sender: waehl@mail.zedat.fu-berlin.de MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Originating-IP: 31.133.132.82 Archived-At: Subject: Re: [Sidrops] AMS-IX Lightning talk @ RIPE 75 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 09:48:19 -0000 On Wed, 15 Nov 2017, Tim Bruijnzeels wrote: > > Slide 11 is interesting: > > > > "No traffic loss detected, although > > advertised prefixes (with IRR+RPKI > > filtering) went from ~165K to ~68K." > > > > Totally redundant announcements? Loss of TE paths? > > Looking at slide #13, most of those are due to IRR filtering. Only 295 > routes are RPKI invalid. > yup. > IRR+RPKI filtering means, I believe, that an announcement is filtered if: > = it is NOT authorised in IRR; or > = it is RPKI INVALID > Yes: * Filter prefixes not present in an AS's announced AS/AS-SET * Filter prefixes with ROA status: INVALID Cheers matthias -- Matthias Waehlisch . Freie Universitaet Berlin, Computer Science .. http://www.cs.fu-berlin.de/~waehl From nobody Wed Nov 15 05:49:54 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E52A1292F5 for ; Wed, 15 Nov 2017 05:49:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1OQ6lQmEDUM2 for ; Wed, 15 Nov 2017 05:49:50 -0800 (PST) Received: from deliverix-glo-01.ams-ix.net (smtp.ams-ix.net [IPv6:2001:67c:1a8:a101::72]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FBB0126579 for ; Wed, 15 Nov 2017 05:49:50 -0800 (PST) Received: from [91.200.19.171] (unknown [91.200.19.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: alam394) by deliverix-glo-01.ams-ix.net (Postfix) with ESMTPSA id 8C7E1203F8; Wed, 15 Nov 2017 14:49:48 +0100 (CET) From: Aris Lambrianidis Message-Id: <93B1FA75-705D-4AB1-81DC-8813261F8FF3@ams-ix.net> Content-Type: multipart/signed; boundary="Apple-Mail=_FA742283-546A-4E7B-A0A2-A7F89C20BF7A"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 11.1 \(3445.4.7\)) Date: Wed, 15 Nov 2017 14:49:46 +0100 In-Reply-To: <55189FDD-08F7-483F-9C15-64B82B9FF700@nist.gov> Cc: Matthias Waehlisch , "sidrops@ietf.org" To: "Montgomery, Douglas (Fed)" References: <55189FDD-08F7-483F-9C15-64B82B9FF700@nist.gov> X-Mailer: Apple Mail (2.3445.4.7) Archived-At: Subject: Re: [Sidrops] AMS-IX Lightning talk @ RIPE 75 X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Nov 2017 13:49:53 -0000 --Apple-Mail=_FA742283-546A-4E7B-A0A2-A7F89C20BF7A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Douglas, We did have concerns with regards to traffic loss before moving to a = more strict filtering route server configuration, so we were quite surprised ourselves by the non-linear relation between = prefixes and traffic. What I can say though is that route servers were created (at least in = our case) as a safety net/catch all/last resort type of peering. Historically our recommendation was (and still is) to = peer directly for traffic you care about. My guess is that this recommendation is honored; direct peerings = probably cover most of the traffic exchanged over our platform. OTOH, new customers, especially smaller ones, definitely see great value = in being able to peer immediately with a route server and do traffic through it without setting up any other = sessions altogether. But these definitely would not be reflected in aggregated traffic statistics. Kind regards, Aris AMS-IX > On 15 Nov 2017, at 07:21, Montgomery, Douglas (Fed) = wrote: >=20 > Slide 11 is interesting: >=20 > "No traffic loss detected, although > advertised prefixes (with IRR+RPKI > filtering) went from ~165K to ~68K." >=20 > Totally redundant announcements? Loss of TE paths? >=20 > Interesting statistics to compute on "Invalids" include - how many = invalids are covered by routes to >=20 > 1. the same origin, > 2. the same next hop AS, > 3. and the same complete path. >=20 > dougm > --- > Doug Montgomery @ NIST / ITL / ANTD >=20 >=20 >=20 > =EF=BB=BFOn 11/15/17, 1:13 AM, "Sidrops on behalf of Matthias = Waehlisch" wrote: >=20 >=20 > For the numbers see slides 12 and 13: >=20 >=20 > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops --Apple-Mail=_FA742283-546A-4E7B-A0A2-A7F89C20BF7A Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEUp/VqpxRPGaBN5IfD0He/2W1GqwFAloMRfoACgkQD0He/2W1 GqyeCRAAzq0IYLJ9LZqRMDb/vtu386swGb5lRFSUuN2yjPOBV6pkVyC2sNLGGv7j 20lKFgParFL4ZDmtod1ZMSTJ4ZLMXHkvxpvYqOJrB+93+0xg+lUgXAev5vjtjOKr zDct9nrm1OaudYWLGgmF2K7F8AyzopgaccJTLeonSW/a1pam9UoOE+5CmUgR557o fBFEQGxAjgZw/XNFxJjFbblzRTYv4hYiN1R90WDJqo2/bRcceBtaR/NEn1/F1fW1 65L0b6dnlQNdrEXZi9tgVWUcd8VcmcqiE/FmzJ8VWqZYK6QcT6Xi9LYDoVs4dYmd HzwZ0NGSSZT0KPvXo601VlBUbLZvDqBwFr9Aqo93GiPzB+ZkZiZuPB9gog90RoVW Vk4UcLi5YVkqUZD8w310dl33fy/pQpTlmYcueDB9i13AG3AisVwLs0RYaCifxT/A kWnWLUfwqqCEECMkIQjrJWO615mVIUzxOvG/3qkRwjUH5R4AmHX32Ko/Sbo2+IOz PXhO2t5FrJEcY+N5DSoDQ2MrUMNWoP52I61hSyeQNdgdjmPIuAQb+OiDUe+Oa/lf 0yb636BbmyHEtenIPC3mWtl0iCbyxTcKkspPtgbTHG9EoqjjO+9F6B4ked7SnJ++ rC+K9YdoMb7njjBWOLI1mXeRSCA+zvlqBssd2tdbI2dKC46X4pQ= =PwNt -----END PGP SIGNATURE----- --Apple-Mail=_FA742283-546A-4E7B-A0A2-A7F89C20BF7A-- From nobody Thu Nov 16 02:35:23 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68EB9129439 for ; Thu, 16 Nov 2017 02:35:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=apnic.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PSWDlpMSvdtk for ; Thu, 16 Nov 2017 02:35:06 -0800 (PST) Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-pu1apc01on0064.outbound.protection.outlook.com [104.47.126.64]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3EFE128DF3 for ; Thu, 16 Nov 2017 02:35:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apnic.onmicrosoft.com; s=selector1-apnic-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=bNdcH4LMBGvi+uJJWW6EIVTKhmpuRA/o+Wl2s5aIYso=; b=VVaj72BUN5zkXcXgDA4BMbWVZbyxPeaqPaL4+CVlIUO2WSzdNLCAJV0A3hdXFBA0X8hIcF9/ENeVN1r+ykJT9OYnlIAZ/qeGdGYuFOQQauYCAUIY8utJw7Cn3iQwddNFY6ioGfdlfW/U1al7g8bHOz11UGWa68pkr/NJfDxlF/k= Received: from tomh-laptop (2001:67c:1232:144:228:f8ff:fe25:6962) by HK2PR04MB0755.apcprd04.prod.outlook.com (2a01:111:e400:5891::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.239.5; Thu, 16 Nov 2017 10:35:03 +0000 Received: from tomh by tomh-laptop with local (Exim 4.89) (envelope-from ) id 1eFHVJ-0007G7-Kj for sidrops@ietf.org; Thu, 16 Nov 2017 20:34:41 +1000 Date: Thu, 16 Nov 2017 18:34:41 +0800 From: Tom Harrison To: sidrops@ietf.org Message-ID: <20171116103441.GB7247@tomh-laptop> Mail-Followup-To: sidrops@ietf.org References: <151064401825.5985.7789265592065530099@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <151064401825.5985.7789265592065530099@ietfa.amsl.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Originating-IP: [2001:67c:1232:144:228:f8ff:fe25:6962] X-ClientProxiedBy: BN6PR11CA0041.namprd11.prod.outlook.com (2603:10b6:404:4b::27) To HK2PR04MB0755.apcprd04.prod.outlook.com (2a01:111:e400:5891::21) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 2c826b0c-cccb-48d7-a943-08d52cddb271 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603258); SRVR:HK2PR04MB0755; X-Microsoft-Exchange-Diagnostics: 1; HK2PR04MB0755; 3:Z96jGxkRVE5NG3fi8QPkKNE3rO8YuFjNX3UqXk9cUQlCm+gnIyr8Byaxzfjc2+oii7JnRv2eDkJVwg+/NJijP9qCNLAd0rqr7q4ELars+aYzYXiSq6LgOSdolN37Gc/VDcj7MLkeVfUpv9cOHlVZdYOrkUgJI7g5fh8x4WnxWagUss1GvF8IgMVq/c6BvyLXR8FnYtYfNEwytDGumPGLYrC/+LZXK8oWuIT58YKg2/ikGwej98ym7tWl48nEOuvg; 25:Ygp/eRc784+RgPVJQySs3xSb9czYf/KLyQ7VUMCr1vZ6RxkkPcG1+pmnOggnVid+kENZBPWnl7vTpgZctPCJdhRIWYtelLWy8or2tV72a3BiK0V5XPzLtblC8+qD/H/P1Hjh3VJP6mVUyIoeQaZzkq8/RzQLd/8SwDSn4J+4N5HUH/SSa+cRwE3mw1sj0/QWvWEUrl9uj0ErG3JzThLUyqJ4DHmVmmnbfna4q3au7T9+b8V3DVI9c+uv47aUKh+TYdaWHK8Z61bN2aOh0il1DbtB3MRAPfft8U/xy28Jn/2v79DJKBpcJpO6YeHWEWDckuViRYJOireIHWddCXEj4U6J3hHh+8jJtXE/rdvlOME=; 31:31qS+bitqsVTqzQkiD1T3G6va7y1920jY4ZHKZdsRPxE2K2Qb1g5ybhBaAER7dZtEcxtp8p8pEcVYpYIPRji1azeE2xzWO8UGw9EJGLDAjT1bCp2Rb3ywO3IyFnPbe/GwlvL8L1zLyOsabK6q51cGQJmxmllW61vJVXReUraU9G7E9SlzN33+pyQsXLpeh9MN2aAjikMrfQqaIyha/ieti2qI16GP/pGNLddsuKCmv8= X-MS-TrafficTypeDiagnostic: HK2PR04MB0755: X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(93006095)(93001095)(3002001)(10201501046)(3231022)(6041248)(20161123564025)(20161123558100)(20161123560025)(20161123555025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:HK2PR04MB0755; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:HK2PR04MB0755; X-Microsoft-Exchange-Diagnostics: 1; HK2PR04MB0755; 4:I6QCnnUI0fvOw/Z4fx18WP/4EyAmN7Dx3Bnzi2k3gVjzGujSKGMYiSCmdNx/Rio+l76Cfbg9MthLdZOgs8yHsDCqTBizuxWxen4NHTbR1UWXZBD1es8HL3D5X6kzXgS/QjmzvcLz2YKi6rFNnxp+nBLW1yDkEl1eS/Qt84fKsS1AM/oEBUF9vhEgFOlvbG+I4AXRVr263Yq+Wvjo5BTCGzcyaIowv8vsga/VisVYKGt6z/7gO227B6JDn9FEi6/P1C2vQOJIRCAPKJ3XaPTmAw== X-Forefront-PRVS: 0493852DA9 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(6009001)(7916004)(39830400002)(346002)(376002)(24454002)(189002)(377424004)(199003)(33716001)(58126008)(2906002)(16586007)(9686003)(101416001)(8936002)(316002)(47776003)(9786002)(50986999)(54356999)(76176999)(9746002)(122856001)(97736004)(1076002)(86362001)(2361001)(57986006)(83796002)(6116002)(81156014)(68736007)(81166006)(106356001)(105586002)(2351001)(4001150100001)(8676002)(189998001)(229853002)(478600001)(83506002)(305945005)(33656002)(23726003)(7736002)(6246003)(50466002)(2950100002)(6916009)(53936002)(230783001)(5660300001)(46656002)(18370500001); DIR:OUT; SFP:1101; SCL:1; SRVR:HK2PR04MB0755; H:tomh-laptop; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: apnic.net does not designate permitted sender hosts) Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=tomh@apnic.net; X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; HK2PR04MB0755; 23:cBO3koodbsmv1hiaSG4C5yHNrI00HV/bp7hEu9xsp?= =?us-ascii?Q?On+UthWtoc5pfcflzrAFybNQ7nf1a1kqeY5ig7CwFBUdh91g6L8pkxKZxAh5?= =?us-ascii?Q?h5sXWhQe0Qempm4Zt4HTwZlJhPrUASBlmqwfhn/cl4Z/uaVvRADl+3KIxWwP?= =?us-ascii?Q?2k6MqVLMwqW0UOwgX9FsTyrB6sNKCb7s0IBLe33/1/lbrtOcpAjOzKQDPX8o?= =?us-ascii?Q?vSB+Kf32Joz2HHSLUke9JF+CUxuapmx2PuNdZd/7xnfC+hjD/nnEBcPSqLpq?= =?us-ascii?Q?r38/O3YMkMc0971WBdgEFT0wzRGVIEsdmawOsgyRAploQSCTJobfXDYnYWT7?= =?us-ascii?Q?boCtdcSitpMYOGGP085y11krq/E7z+vtr6K+KkY+Gl7uJk7a6QX8Mm7J6hKQ?= =?us-ascii?Q?3pwBuSZL6CxPQAvQXkZrSKvVlofOQfVRFksqbHxGjmqa9M+J36di7R/eIiVN?= =?us-ascii?Q?0S/UcQkx9e4Pqd/CEFHPGcX2HxISL0egwbKZ6ov+qyaWnQACvOOzdx290LD+?= =?us-ascii?Q?Qtpm+KSRi2fpUVLQqzENTvMgVA+/R7wYSO6f09OmMoXPUMkQOrlXGRskO2Bl?= =?us-ascii?Q?jn8WcZ6Myt0DyHG7PNsQe2qbQrP6AdovWdb6qce1gVnigEvsVXmXF0qO3ukn?= =?us-ascii?Q?DFS6BF2RlFzkfPWXKP36C25ef6eGB9JbOAT+OYDKD5ThhNQW3uwR4DUWfJ4l?= =?us-ascii?Q?2C9YLqCn54hPwkw1fdWP7hSO+05zT7RSQOr286/s7cOy5SD729C8ATva6eLM?= =?us-ascii?Q?kY216MCLlve20M+Uxq3sV0JjabiIPBG3WcZw97bG+DsAZyklb2NSrpiGiEJR?= =?us-ascii?Q?CFTxybS9KZusfI5KAHlj8pUuM2GdorXjsIpPCOZ4ran+Ydnijgne8jkBTFfB?= =?us-ascii?Q?JeBIqp7CGw646sCruiFRDNb5lCHNzS9po9tpFvHcm8v7utqd+zKN0nRcnRUn?= =?us-ascii?Q?SyaSlIBAXCCHnFC0csknTOIvW5OKR/Bo/wIWlTLJTHxux/73JPPMFJISMaK/?= =?us-ascii?Q?75VMCd94l51Hy8HKBlg3S8QfYgv35UmBDS90FSk7BJnrfs+ODF6QzfdEHryc?= =?us-ascii?Q?6f+q/z03rJXCdJwoy77gfRkfu8bt5iGNBoAflrFZOTLadKXx3GG0jnDENBzw?= =?us-ascii?Q?S655Tyl8xCaq4iwpRV3sTRxozPjZqh363czXlWflcGjfjTP2NuIARY3ygJRZ?= =?us-ascii?Q?0RgwUM9HNPUS9CKKA4sqrZw1gpETFGQs4wa4i4VDnG89T1LB9in5Q8vcYEFr?= =?us-ascii?Q?16QEBhZXV1Ju3dISlD7HO7BeQfMuLBHv8evY69jDsKoum2c3ImS62y57QT/f?= =?us-ascii?Q?Jm9MMypOxbUpuam1fYop6M=3D?= X-Microsoft-Exchange-Diagnostics: 1; HK2PR04MB0755; 6:6faCS6Cq9ZJnec/1Iyq2mdRyyN6GS2f235qNazubnWx1sflRnUlLjXK/7dK3YtFlT0u//e8v/tgxhp5+qO2KQ5I26kfUl85nFuxr0zPrmfE9Tnnn8X/GU0DuesShLvv0nwr4Yot76G1DfoctU/r0XLGE8v7Ub7vcozebV8XJUVyMhOQ1Hkzq0KtEjx2n/xEWOIIFhyns8y2iAknc5qfp2IX4SLQc9/E/DMSDyzX3RBIRmH2kPcRlzxSy/bEhVOK0A76GHmYSrNdnw8hwBUj530lFXLAHANA8li8YqcmwDiq5ADbZRu9EKhRzgtC359nqlCN8qPJuDhNLVzyrzFF8P+oWxJ2peAwXphcbMEB6nWg=; 5:96qy6Lb6nDbLYvil6d8SaSMmjShJKiAGRJbAXrZdcW3V/gDZTjev0Y60AeeiurIER4MZkXGK4QnTDASyS5gnhv6j733cHu5unsXgqYoIPEpEK7YI2qZwJkKIPtfIaz4WonfELGWRRZ30GATwmPMEgEhTlwm9c+tWX6khdN12Ohg=; 24:xu2L576rtE1/khGkyHjt8f9JTUb4EOaRpQePDFYxLl4DET4uKK/KUyT59CdUDimWggjQ+pI+3KBCgZ7SsilUQcyco7b3oUcZdgzXH2Ikl3E=; 7:EKUWQfVrvWs8W39DQfm7EE9qo/Iz+qsbJ2GmaJSuuFugJOHWQ/8hUnNe4awQ3Z2uWgN2921pd+MEaVigkhQFjWwlZ/uB0W8OLuE4u05MJerMCFiGuvedI/A/bNiw2W5ad7lKRC+qOucsY61/AQz2SNxe6fYXduE8ErB0J9I7seDvd4+QG2ejKmSqzK+mYqUvQoN3m7otZvh5IUIqc5TpGe3R33RPWPllj1khIABVCUA/LORx3IoaGMrEAALH3uK1 SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: apnic.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Nov 2017 10:35:03.1605 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 2c826b0c-cccb-48d7-a943-08d52cddb271 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 127d8d0d-7ccf-473d-ab09-6e44ad752ded X-MS-Exchange-Transport-CrossTenantHeadersStamped: HK2PR04MB0755 Archived-At: Subject: Re: [Sidrops] I-D Action: draft-ietf-sidrops-signed-tal-00.txt X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Nov 2017 10:35:09 -0000 On Mon, Nov 13, 2017 at 11:20:18PM -0800, internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the SIDR Operations WG of the IETF. > > Title : RPKI signed object for TAL > Authors : Tim Bruijnzeels > Carlos Martinez > Filename : draft-ietf-sidrops-signed-tal-00.txt > Pages : 10 > Date : 2017-11-13 We've done a fairly basic proof-of-concept implementation of this as an extension to our RPKI system. The core of it looks good and functions as expected. Some questions and minor suggestions (all IMHO): Having explicit structure in the SignedTalContent definition would make implementation a little easier. It would also remove any possible confusion about whether the public key need be base64-encoded again (the current text appears to require that). Section 3.3 has "[i]f the above procedure indicates that the manifest is invalid". It looks like it should be "...that the Signed TAL is invalid". Section 4 has "[t]his EE certificate MUST have a "notBefore" time that is before the moment that the Signed TAL will be published". Why is this a MUST? I can imagine somebody prepublishing the new TAL, but not wanting RPs to switch over until the notBefore time had been reached, though I guess that would also lead to validation errors for RPs in the interim due to the object not being in-date. Regarding signed TAL EE certificate validity periods generally, I think it would be good to add some text about how the new TAL becomes 'effective' as soon as it is published, and that neither revocation nor expiry of the associated EE certificate has any implications in that respect (even though this is implicit from the document as a whole). Section 6.3 has "[t]he TA SHOULD preserve a Signed TAL for the old key after the staging period as a hint for RPs that missed the key roll". Although (I think) the only sensible way to read this is that the signed TAL to which this is referring is that pointing to the new TA, "for the old key" might make people think the signed TAL should be for the deprecated key instead. Something like "[t]he TA SHOULD preserve the Signed TAL pointing to the new TA after the staging period..." could work. I think 24 hours for the staging period is too short, mainly because people who don't update their validators to support this may not take action on the new validation error (something like "unknown type of object: {name}.tal") within that short a time period. There are also other instances like this where manual action might be required, e.g. where operations staff insist that the validator not have write access to its configuration and that all updates happen manually. A week or a month as a mandatory period would be better. -Tom From nobody Mon Nov 27 17:48:23 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1921B1270AC; Mon, 27 Nov 2017 17:48:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJfXKOSdZS1W; Mon, 27 Nov 2017 17:48:15 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D2221200C1; Mon, 27 Nov 2017 17:48:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2628; q=dns/txt; s=iport; t=1511833695; x=1513043295; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=zFiSUAtO0JhPZg8yhzokcC6L7h0N0EVFBJb+OG3IqKA=; b=eL2+yAt71lp2rhZCeDjAK/PnEK/xYfvT5DXBM0UkUPOofBeMMGqQoOM6 Xr0vOAmEj6otUuKc2GFRM/UZcKL82AxgAY1y4h8qLpvSnjy32zQP0Q+T3 7zU/rmVwqrTIEwujZC3S9SBSRnOm8SVisF+4Hk1vj6sko3wJNhiq4tcqp A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CaAAAkwBxa/51dJa1ZAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGDPGZuJweDeIogjnUegX2WbRCCAQojhRgCGoRaPxgBAQEBAQE?= =?us-ascii?q?BAQFrKIUfAQEBAQIBIxFFBQsCAQgYAgImAgICMBUFCwIEDgWKGggQpnSCJ4p5A?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEBGAWBD4IrggeDZwuCd4RpARIBHxcKJoJOMYI?= =?us-ascii?q?yBYo3mA8Ch3CNGoIWhgyLLIJRiiWJFwIRGQGBOQEfOWFXGG8VYwGBfoMHgU53A?= =?us-ascii?q?YdpgSSBFAEBAQ?= X-IronPort-AV: E=Sophos;i="5.44,466,1505779200"; d="scan'208";a="37146222" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Nov 2017 01:48:14 +0000 Received: from XCH-RTP-001.cisco.com (xch-rtp-001.cisco.com [64.101.220.141]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id vAS1mDBa009245 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 28 Nov 2017 01:48:14 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-001.cisco.com (64.101.220.141) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Mon, 27 Nov 2017 20:48:13 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Mon, 27 Nov 2017 20:48:13 -0500 From: "Brian Weis (bew)" To: =?utf-8?B?TWlyamEgS8O8aGxld2luZA==?= CC: The IESG , "draft-ietf-sidrops-bgpsec-rollover@ietf.org" , Chris Morrow , "sidrops-chairs@ietf.org" , "sidrops@ietf.org" Thread-Topic: =?utf-8?B?TWlyamEgS8O8aGxld2luZCdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm?= =?utf-8?Q?-sidrops-bgpsec-rollover-03:_(with_COMMENT)?= Thread-Index: AQHTV9K7o0QanhUvCE+m96KO3TrmlaMpehIA Date: Tue, 28 Nov 2017 01:48:12 +0000 Message-ID: <39E1426B-3EBD-4254-9763-966FF0E88463@cisco.com> References: <151006405964.18653.226226090663575282.idtracker@ietfa.amsl.com> In-Reply-To: <151006405964.18653.226226090663575282.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.154.208.71] Content-Type: text/plain; charset="utf-8" Content-ID: <6D858BE68C3D704D8336AF211025E2EF@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_dra?= =?utf-8?q?ft-ietf-sidrops-bgpsec-rollover-03=3A_=28with_COMMENT=29?= X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Nov 2017 01:48:17 -0000 SGkgTWlyamEsDQoNClRoYW5rcyBmb3IgeW91ciByZXZpZXcuIFBsZWFzZSBzZWUgcmVwbGllcyBw cmVmYWNlZCB3aXRoIEJFVzoNCg0KPiBPbiBOb3YgNywgMjAxNywgYXQgNjoxNCBBTSwgTWlyamEg S8O8aGxld2luZCA8aWV0ZkBrdWVobGV3aW5kLm5ldD4gd3JvdGU6DQo+IA0KPiBNaXJqYSBLw7xo bGV3aW5kIGhhcyBlbnRlcmVkIHRoZSBmb2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KPiBk cmFmdC1pZXRmLXNpZHJvcHMtYmdwc2VjLXJvbGxvdmVyLTAzOiBObyBPYmplY3Rpb24NCj4gDQo+ IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5k IHJlcGx5IHRvIGFsbA0KPiBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBD QyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcw0KPiBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBo LCBob3dldmVyLikNCj4gDQo+IA0KPiBQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQo+IGZvciBtb3JlIGluZm9y bWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuDQo+IA0KPiAN Cj4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBi ZSBmb3VuZCBoZXJlOg0KPiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1p ZXRmLXNpZHJvcHMtYmdwc2VjLXJvbGxvdmVyLw0KPiANCj4gDQo+IA0KPiAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQo+IENPTU1FTlQ6DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IFRoaXMgZG9jdW1lbnQgcmVhbGx5 IHJlYWRzIGxpa2UgaXQgc2hvdWxkIGJlIGFuIGluZm9ybWF0aW9uYWwgZG9jdW1lbnQsIG9yDQo+ IG1heWJlIGEgQkNQLiBGdXJ0aGVyLCB0aGUgc2hlcGhlcmQgd3JpdGUtdXAgc2F5cyAiSW50ZXJu ZXQgU3RhbmRhcmQgZmluYWwNCj4gc3RhdHVzIiBidXQgSSBzZWUgUHJvcG9zZWQgU3RhbmRhcmQg aW4gdGhlIGRhdGF0cmFja2VyLi4uPyBJIHdvdWxkIHJlY29tbWVuZCB0bw0KPiBnbyBmb3IgQkNQ IGlmIHRoZSB3ZyBjYW4gYWdyZWUgdG8gdGhhdC4NCg0KQkVXOiBUaGUgb3JpZ2luYWwgaW50ZW5k ZWQgc3RhdHVzIHdhcyBQcm9wb3NlZCBTdGFuZGFyZC4gU3BlY2lmeWluZyBhIHN0YXR1cyBvZiBC Q1Agc2VlbXMgDQpyZWFzb25hYmxlIHRvIG1lLiBJIGRvbuKAmXQgaGF2ZSBhbnkgb2JqZWN0aW9u IHRvIHN1Y2ggYSBjaGFuZ2UgaWYgdGhlIFdHIHdpc2hlcyBpdC4gIA0KDQo+IEFsc28sIHNob3Vs ZCBpZXRmLXNpZHItcnRyLWtleWluZyBtYXliZSBiZSBhIG5vcm1hdGl2ZSByZWZlcmVuY2UsIG9y IGlzIHRoaXMNCj4ganVzdCBvbmUgZXhhbXBsZT8gVGhlIHVzZSBvZiB0aGlzIHJlZmVyZW5jZSBp biBzZWN0aW9uIDMuMSBpc27igJl0IGNsZWFyIHRvIG1lDQo+IHdpdGggdGhpcyByZXNwZWN0OiDi gJ5UaGUga2V5IHJvbGxvdmVyIHByb2Nlc3MgaXMgZGVwZW5kZW50IG9uIHRoZSBrZXkNCj4gcHJv dmlzaW9uaW5nIG1lY2hhbmlzbXMgYWRvcHRlZCBieSBhbiBBUyBbSS1ELmlldGYtc2lkci1ydHIt a2V5aW5nXS7igJwNCg0KQkVXOiBVcG9uIHJlZmxlY3Rpb24sIEkgYWdyZWUgdGhpcyByZWZlcmVu Y2Ugc2hvdWxkIGJlIG5vcm1hdGl2ZS4gVGhhbmtzLg0KDQpUaGFua3MsDQpCcmlhbg0KDQotLSAN CkJyaWFuIFdlaXMNClNlY3VyaXR5LCBDU0csIENpc2NvIFN5c3RlbXMNClRlbGVwaG9uZTogKzEg NDA4IDUyNiA0Nzk2DQpFbWFpbDogYmV3QGNpc2NvLmNvbQ0KDQo= From nobody Tue Nov 28 07:10:44 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 901281200B9; Tue, 28 Nov 2017 07:10:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.737 X-Spam-Level: X-Spam-Status: No, score=-1.737 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XIEqA7KCb2Je; Tue, 28 Nov 2017 07:10:41 -0800 (PST) Received: from mail-ot0-x241.google.com (mail-ot0-x241.google.com [IPv6:2607:f8b0:4003:c0f::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66AF2126D3F; Tue, 28 Nov 2017 07:10:38 -0800 (PST) Received: by mail-ot0-x241.google.com with SMTP id d5so136051oti.3; Tue, 28 Nov 2017 07:10:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=fp0x2krSeasDniINPQ3okJaY0GBRWyJ99QrIQzoUjY4=; b=AbuUT62bVti49CxZDBjMOoqLLf4/hglkiXY8GRBind9GRl40l+Sj/6QoXeYuz+P9IP jAOOB7GdpJwrLdi0KfmoFjo1qtdIQbYr/dHWSRKKGYs1SwqujIfifi/7OrLms3KHt3aO a4Sg0XbMDT0G3z9HdDNk9KQSPinWulQgsEDCiF8FiszBMGc1ukqrN6zzej9dxJsozzPE wDtDboOA8BTeDV4XH5B+ierajU5RibbCDqrYonqUV098Ls5h4IYFeb2pOKgRi3Z/az// rfL8vWcdLIQqURhg1YVMUpFotiiY900UW4YalymZ/P/FFzpsRZmNkeD2e5vJwh13YY3O WOnQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=fp0x2krSeasDniINPQ3okJaY0GBRWyJ99QrIQzoUjY4=; b=tPEzx4z0dOkBiT/P32sPj/m5J5A0BNRmJWH5420aHyy+m+hsOjt2hpPhx9zJwfivb4 WYb8WMbmyWFG2t8KBh0Yvucc+tFq7NumSfNiIqQ3BKicRWmfnONZT9qz7+GzakmIBZ3T cQm6newnTtF2DDgv+cPIljCmH6rbdvCnbZ1exSQDhMX4D3/FyK4MLs+YsAEotJum5EgJ mmXTvgNBA0JEH8x1z1YPt9Rj5Zzuhf5kOKQ3AvL6CsaA1TIS+uNqmJ3gPRn8YjE5pDPx MDaeru2Fc010GED5TbaybzNPnBuKmEjohyS2oxUPk4GhJQnbL33v0xq0w6CUUpYO5GU6 ypbg== X-Gm-Message-State: AJaThX5DckBGOR2B5LIanXfVVP6AjRKny8MqXDWTIVmJfyAtP/spflP9 JEdghyKraYskVG4CIcYJZANwFo+INqWk/nvwXYA= X-Google-Smtp-Source: AGs4zMZ0jqyLFqrhsUvgeU0DNnfS04+kaBnIqIIV4flNDdzcHq9S4A+L8rMEZhhiXqv5guNpQK3BG2OpbB7kBRBfqgU= X-Received: by 10.157.56.200 with SMTP id k8mr29157073ote.3.1511881837706; Tue, 28 Nov 2017 07:10:37 -0800 (PST) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 28 Nov 2017 07:10:37 -0800 From: Alvaro Retana In-Reply-To: <39E1426B-3EBD-4254-9763-966FF0E88463@cisco.com> References: <151006405964.18653.226226090663575282.idtracker@ietfa.amsl.com> <39E1426B-3EBD-4254-9763-966FF0E88463@cisco.com> X-Mailer: Airmail (461) MIME-Version: 1.0 Date: Tue, 28 Nov 2017 07:10:37 -0800 Message-ID: To: =?UTF-8?Q?Mirja_K=C3=BChlewind?= , "Brian Weis (bew)" Cc: "sidrops-chairs@ietf.org" , Chris Morrow , "sidrops@ietf.org" , "draft-ietf-sidrops-bgpsec-rollover@ietf.org" , The IESG Content-Type: multipart/alternative; boundary="001a11c01f18e103e3055f0c6bd9" Archived-At: Subject: Re: [Sidrops] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_dra?= =?utf-8?q?ft-ietf-sidrops-bgpsec-rollover-03=3A_=28with_COMMENT=29?= X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Nov 2017 15:10:42 -0000 --001a11c01f18e103e3055f0c6bd9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On November 27, 2017 at 8:48:20 PM, Brian Weis (bew) (bew@cisco.com) wrote: Hi! > This document really reads like it should be an informational document, o= r > maybe a BCP. Further, the shepherd write-up says "Internet Standard final > status" but I see Proposed Standard in the datatracker...? I would recommend to > go for BCP if the wg can agree to that. BEW: The original intended status was Proposed Standard. Specifying a status of BCP seems reasonable to me. I don=E2=80=99t have any objection to such a change if th= e WG wishes it. Given that the document describes a process I would have leaned towards BCP as well=E2=80=A6but BGPSec is not deployed, so that seems a little too much= as it wouldn=E2=80=99t really be documenting the =E2=80=9Cbest current practice= =E2=80=9D. FWIW, I=E2=80=99m fine leaving the status as is in hopes that the process w= ill be used if/when BGPSec is deployed. I wouldn=E2=80=99t object to Informationa= l either. > Also, should ietf-sidr-rtr-keying maybe be a normative reference, or is this > just one example? The use of this reference in section 3.1 isn=E2=80=99t = clear to me > with this respect: =E2=80=9EThe key rollover process is dependent on the = key > provisioning mechanisms adopted by an AS [I-D.ietf-sidr-rtr-keying].=E2= =80=9C BEW: Upon reflection, I agree this reference should be normative. Thanks. This saves me a DISCUSS. ;-) Thanks! Alvaro. --001a11c01f18e103e3055f0c6bd9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =
On November 27, 2017 at 8:48:20 PM, Brian Weis (b= ew) (bew@cisco.com) wrote:

Hi!

> = This document really reads like it should be an informational document, or<= span class=3D"Apple-converted-space">=C2=A0
> maybe a B= CP. Further, the shepherd write-up says "Internet Standard final=C2=A0
> status" b= ut I see Proposed Standard in the datatracker...? I would recommend to=C2=A0
> go for BCP if= the wg can agree to that.=C2=A0

BEW: The original int= ended status was Proposed Standard. Specifying a status of BCP seems=C2=A0
reasonable to me. I = don=E2=80=99t have any objection to such a change if the WG wishes it.=C2=A0=C2=A0

Given that = the document describes a process I would have leaned towards BCP as well=E2= =80=A6but BGPSec is not deployed, so that seems a little too much as it wou= ldn=E2=80=99t really be documenting the =E2=80=9Cbest current practice=E2= =80=9D.

FWIW, I=E2=80=99m fine leaving the status as is in hopes that= the process will be used if/when BGPSec is deployed.=C2=A0 I wouldn=E2=80= =99t object to Informational either.

> = Also, should ietf-sidr-rtr-keying maybe be a normative reference, or is thi= s=C2=A0
> just on= e example? The use of this reference in section 3.1 isn=E2=80=99t clear to = me=C2=A0
> with t= his respect: =E2=80=9EThe key rollover process is dependent on the key=C2=A0
> provisioning = mechanisms adopted by an AS [I-D.ietf-sidr-rtr-keying].=E2=80=9C=C2=A0

BEW: Upon reflection, I agree this reference should be nor= mative. Thanks.=C2=A0

This saves me a DISCUSS. ;-)

Thanks!=

Alvaro.



--001a11c01f18e103e3055f0c6bd9-- From nobody Tue Nov 28 09:08:48 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49A211289B5; Tue, 28 Nov 2017 09:08:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.519 X-Spam-Level: X-Spam-Status: No, score=-14.519 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 33ihHXZ87TND; Tue, 28 Nov 2017 09:08:35 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A82FE128796; Tue, 28 Nov 2017 09:08:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=22548; q=dns/txt; s=iport; t=1511888914; x=1513098514; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=Oa9+IPjzILo9s0xKrxGNqprG2AiWvwLdUwigLdEk+3g=; b=T32lZ/9zPdGKzuAKLCNLZnqNdFr7cggJDuX+nHtF9I9Mhq3y5cqY/Vv6 fVEcE4UA1ldNcRra5yOqHlpM0bGqcSAQ6SU8Q+DN+NXfCFkszSH0iek+m asOjtTuGp6FI43nXkYC0utPHqKfIqYoYTgyFCxbEbnYWQPc2dw6ZBtTmY Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CeAACclx1a/4oNJK1aAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGCSnKBVCcHg3iKII8XgVcmiGiOChCCAQqFOwIahGw/GAEBAQE?= =?us-ascii?q?BAQEBAWsohSABBAEjVgULAgEIDjEDAgICHxEUBgsCBA4FiT5MAw0Ip3GCJ4cyD?= =?us-ascii?q?YMmAQEBAQEBAQEBAQEBAQEBAQEBAQEBHYM8ggmDPikLgneCa4IBARIBNgomgk4?= =?us-ascii?q?xgjIFmSmIYz0CkBKEeZNPglGKYYhgAhEZAYE5AR85YXBvFWQBgX6DB4FOd4gsg?= =?us-ascii?q?SSBFAEBAQ?= X-IronPort-AV: E=Sophos; i="5.44,468,1505779200"; d="scan'208,217"; a="36947734" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 28 Nov 2017 17:08:33 +0000 Received: from XCH-RTP-001.cisco.com (xch-rtp-001.cisco.com [64.101.220.141]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id vASH8XFr008477 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 28 Nov 2017 17:08:33 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-001.cisco.com (64.101.220.141) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 28 Nov 2017 12:08:32 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Tue, 28 Nov 2017 12:08:32 -0500 From: "Brian Weis (bew)" To: Alvaro Retana CC: =?utf-8?B?TWlyamEgS8O8aGxld2luZA==?= , "sidrops-chairs@ietf.org" , Chris Morrow , "sidrops@ietf.org" , "draft-ietf-sidrops-bgpsec-rollover@ietf.org" , The IESG Thread-Topic: =?utf-8?B?TWlyamEgS8O8aGxld2luZCdzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm?= =?utf-8?Q?-sidrops-bgpsec-rollover-03:_(with_COMMENT)?= Thread-Index: AQHTV9K7o0QanhUvCE+m96KO3TrmlaMpehIAgADgMYCAACDzgA== Date: Tue, 28 Nov 2017 17:08:32 +0000 Message-ID: <17B22FFB-0821-4EDD-AD0F-6627204EF64F@cisco.com> References: <151006405964.18653.226226090663575282.idtracker@ietfa.amsl.com> <39E1426B-3EBD-4254-9763-966FF0E88463@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.32.172.166] Content-Type: multipart/alternative; boundary="_000_17B22FFB08214EDDAD0F6627204EF64Fciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_dra?= =?utf-8?q?ft-ietf-sidrops-bgpsec-rollover-03=3A_=28with_COMMENT=29?= X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Nov 2017 17:08:41 -0000 --_000_17B22FFB08214EDDAD0F6627204EF64Fciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWx2YXJvLA0KDQpUaGFua3MgZm9yIHlvdXIgbm90ZS4gQ29tbWVudHMgYXJlIHJlZmVyZW5j ZWQgd2l0aCBCRVc6Lg0KDQpPbiBOb3YgMjgsIDIwMTcsIGF0IDc6MTAgQU0sIEFsdmFybyBSZXRh bmEgPGFyZXRhbmEuaWV0ZkBnbWFpbC5jb208bWFpbHRvOmFyZXRhbmEuaWV0ZkBnbWFpbC5jb20+ PiB3cm90ZToNCg0KT24gTm92ZW1iZXIgMjcsIDIwMTcgYXQgODo0ODoyMCBQTSwgQnJpYW4gV2Vp cyAoYmV3KSAoYmV3QGNpc2NvLmNvbTxtYWlsdG86YmV3QGNpc2NvLmNvbT4pIHdyb3RlOg0KDQpI aSENCg0KPiBUaGlzIGRvY3VtZW50IHJlYWxseSByZWFkcyBsaWtlIGl0IHNob3VsZCBiZSBhbiBp bmZvcm1hdGlvbmFsIGRvY3VtZW50LCBvcg0KPiBtYXliZSBhIEJDUC4gRnVydGhlciwgdGhlIHNo ZXBoZXJkIHdyaXRlLXVwIHNheXMgIkludGVybmV0IFN0YW5kYXJkIGZpbmFsDQo+IHN0YXR1cyIg YnV0IEkgc2VlIFByb3Bvc2VkIFN0YW5kYXJkIGluIHRoZSBkYXRhdHJhY2tlci4uLj8gSSB3b3Vs ZCByZWNvbW1lbmQgdG8NCj4gZ28gZm9yIEJDUCBpZiB0aGUgd2cgY2FuIGFncmVlIHRvIHRoYXQu DQoNCkJFVzogVGhlIG9yaWdpbmFsIGludGVuZGVkIHN0YXR1cyB3YXMgUHJvcG9zZWQgU3RhbmRh cmQuIFNwZWNpZnlpbmcgYSBzdGF0dXMgb2YgQkNQIHNlZW1zDQpyZWFzb25hYmxlIHRvIG1lLiBJ IGRvbuKAmXQgaGF2ZSBhbnkgb2JqZWN0aW9uIHRvIHN1Y2ggYSBjaGFuZ2UgaWYgdGhlIFdHIHdp c2hlcyBpdC4NCg0KR2l2ZW4gdGhhdCB0aGUgZG9jdW1lbnQgZGVzY3JpYmVzIGEgcHJvY2VzcyBJ IHdvdWxkIGhhdmUgbGVhbmVkIHRvd2FyZHMgQkNQIGFzIHdlbGzigKZidXQgQkdQU2VjIGlzIG5v dCBkZXBsb3llZCwgc28gdGhhdCBzZWVtcyBhIGxpdHRsZSB0b28gbXVjaCBhcyBpdCB3b3VsZG7i gJl0IHJlYWxseSBiZSBkb2N1bWVudGluZyB0aGUg4oCcYmVzdCBjdXJyZW50IHByYWN0aWNl4oCd Lg0KDQpGV0lXLCBJ4oCZbSBmaW5lIGxlYXZpbmcgdGhlIHN0YXR1cyBhcyBpcyBpbiBob3BlcyB0 aGF0IHRoZSBwcm9jZXNzIHdpbGwgYmUgdXNlZCBpZi93aGVuIEJHUFNlYyBpcyBkZXBsb3llZC4g IEkgd291bGRu4oCZdCBvYmplY3QgdG8gSW5mb3JtYXRpb25hbCBlaXRoZXIuDQoNCkJFVzogSSB0 aGluayBpdOKAmXMgc3RpbGwgZmFpciB0byBwbGFuIGZvciBCR1BzZWMgdG8gYmUgZGVwbG95ZWQs IGFuZCBzbyBzdGFuZGFyZHMgdHJhY2sgd291bGQgYmUgYSByZWFzb25hYmxlIHN0YXR1cy4NCg0K PiBBbHNvLCBzaG91bGQgaWV0Zi1zaWRyLXJ0ci1rZXlpbmcgbWF5YmUgYmUgYSBub3JtYXRpdmUg cmVmZXJlbmNlLCBvciBpcyB0aGlzDQo+IGp1c3Qgb25lIGV4YW1wbGU/IFRoZSB1c2Ugb2YgdGhp cyByZWZlcmVuY2UgaW4gc2VjdGlvbiAzLjEgaXNu4oCZdCBjbGVhciB0byBtZQ0KPiB3aXRoIHRo aXMgcmVzcGVjdDog4oCeVGhlIGtleSByb2xsb3ZlciBwcm9jZXNzIGlzIGRlcGVuZGVudCBvbiB0 aGUga2V5DQo+IHByb3Zpc2lvbmluZyBtZWNoYW5pc21zIGFkb3B0ZWQgYnkgYW4gQVMgW0ktRC5p ZXRmLXNpZHItcnRyLWtleWluZ10u4oCcDQoNCkJFVzogVXBvbiByZWZsZWN0aW9uLCBJIGFncmVl IHRoaXMgcmVmZXJlbmNlIHNob3VsZCBiZSBub3JtYXRpdmUuIFRoYW5rcy4NCg0KVGhpcyBzYXZl cyBtZSBhIERJU0NVU1MuIDstKQ0KDQpCRVc6IFRoYW5rcyEgRm9yIHRoZSByZWNvcmQsIGJhc2Vk IG9uIEFsZXhleeKAmXMgY29tbWVudCBJIHJldmlld2VkIHRoZSByZXN0IG9mIHRoZSBpbmZvcm1h dGl2ZSByZWZlcmVuY2VzLCBhbmQgSSBiZWxpZXZlIFtJLUQuaWV0Zi1zaWRyLXJ0ci1rZXlpbmdd IGlzIHRoZSBvbmx5IG9uZSB0aGF0IHNob3VsZCBiZSBwcm9tb3RlZCB0byBub3JtYXRpdmUuDQoN ClRoYW5rcywNCkJyaWFuDQoNClRoYW5rcyENCg0KQWx2YXJvLg0KDQotLQ0KQnJpYW4gV2Vpcw0K U2VjdXJpdHksIENTRywgQ2lzY28gU3lzdGVtcw0KVGVsZXBob25lOiArMSA0MDggNTI2IDQ3OTYN CkVtYWlsOiBiZXdAY2lzY28uY29tPG1haWx0bzpiZXdAY2lzY28uY29tPg0KDQo= --_000_17B22FFB08214EDDAD0F6627204EF64Fciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgQWx2YXJvLA0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzIGZvciB5b3Vy IG5vdGUuIENvbW1lbnRzIGFyZSByZWZlcmVuY2VkIHdpdGggQkVXOi48YnIgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRl IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gTm92IDI4LCAyMDE3LCBhdCA3OjEwIEFNLCBB bHZhcm8gUmV0YW5hICZsdDs8YSBocmVmPSJtYWlsdG86YXJldGFuYS5pZXRmQGdtYWlsLmNvbSIg Y2xhc3M9IiI+YXJldGFuYS5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJy IGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJp YWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+DQpPbiBOb3ZlbWJlciAyNywg MjAxNyBhdCA4OjQ4OjIwIFBNLCBCcmlhbiBXZWlzIChiZXcpICg8YSBocmVmPSJtYWlsdG86YmV3 QGNpc2NvLmNvbSIgY2xhc3M9IiI+YmV3QGNpc2NvLmNvbTwvYT4pIHdyb3RlOjwvZGl2Pg0KPGRp diBpZD0iYmxvb3BfY3VzdG9tZm9udCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFy aWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBtYXJnaW46IDBweDsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2IGlkPSJibG9vcF9jdXN0b21mb250IiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250 LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2lu Zzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IG1hcmdpbjogMHB4OyIgY2xhc3M9IiI+DQpIaSE8 L2Rpdj4NCjxkaXYgaWQ9ImJsb29wX2N1c3RvbWZvbnQiIHN0eWxlPSJmb250LWZhbWlseTogSGVs dmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgbWFyZ2luOiAwcHg7IiBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJp YWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNz PSJjbGVhbl9icSIgc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNp emU6IDEzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsiPg0KPHNwYW4gY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogJ2hlbHZldGljYSBOZXVlJywgaGVsdmV0 aWNhOyBmb250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgYmFja2dyb3VuZC1jb2xv cjogcmdiKDI1NSwgMjU1LCAyNTUpOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBv cnRhbnQ7IiBjbGFzcz0iIj4mZ3Q7DQogVGhpcyBkb2N1bWVudCByZWFsbHkgcmVhZHMgbGlrZSBp dCBzaG91bGQgYmUgYW4gaW5mb3JtYXRpb25hbCBkb2N1bWVudCwgb3I8c3BhbiBjbGFzcz0iQXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxiciBzdHlsZT0iZm9udC1m YW1pbHk6ICdoZWx2ZXRpY2EgTmV1ZScsIGhlbHZldGljYTsgZm9udC1zaXplOiAxNHB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogJ2hl bHZldGljYSBOZXVlJywgaGVsdmV0aWNhOyBmb250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj4mZ3Q7DQogbWF5YmUgYSBCQ1Au IEZ1cnRoZXIsIHRoZSBzaGVwaGVyZCB3cml0ZS11cCBzYXlzICZxdW90O0ludGVybmV0IFN0YW5k YXJkIGZpbmFsPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu Pjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiAnaGVsdmV0aWNhIE5ldWUnLCBoZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6ICdoZWx2ZXRpY2EgTmV1ZScsIGhlbHZldGljYTsgZm9udC1z aXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUs IDI1NSwgMjU1KTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+Jmd0Ow0KIHN0YXR1cyZxdW90OyBidXQgSSBzZWUgUHJvcG9zZWQgU3RhbmRhcmQgaW4g dGhlIGRhdGF0cmFja2VyLi4uPyBJIHdvdWxkIHJlY29tbWVuZCB0bzxzcGFuIGNsYXNzPSJBcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PGJyIHN0eWxlPSJmb250LWZh bWlseTogJ2hlbHZldGljYSBOZXVlJywgaGVsdmV0aWNhOyBmb250LXNpemU6IDE0cHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiAnaGVs dmV0aWNhIE5ldWUnLCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzog MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZndDsNCiBnbyBmb3IgQkNQIGlm IHRoZSB3ZyBjYW4gYWdyZWUgdG8gdGhhdC48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6ICdoZWx2ZXRp Y2EgTmV1ZScsIGhlbHZldGljYTsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0 LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7 IiBjbGFzcz0iIj4NCjxiciBzdHlsZT0iZm9udC1mYW1pbHk6ICdoZWx2ZXRpY2EgTmV1ZScsIGhl bHZldGljYTsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogJ2hlbHZldGljYSBOZXVlJywgaGVsdmV0aWNhOyBm b250LXNpemU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdi KDI1NSwgMjU1LCAyNTUpOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7 IiBjbGFzcz0iIj5CRVc6DQogVGhlIG9yaWdpbmFsIGludGVuZGVkIHN0YXR1cyB3YXMgUHJvcG9z ZWQgU3RhbmRhcmQuIFNwZWNpZnlpbmcgYSBzdGF0dXMgb2YgQkNQIHNlZW1zPHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48YnIgc3R5bGU9ImZv bnQtZmFtaWx5OiAnaGVsdmV0aWNhIE5ldWUnLCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 ICdoZWx2ZXRpY2EgTmV1ZScsIGhlbHZldGljYTsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgZmxvYXQ6IG5v bmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+cmVhc29uYWJsZQ0KIHRv IG1lLiBJIGRvbuKAmXQgaGF2ZSBhbnkgb2JqZWN0aW9uIHRvIHN1Y2ggYSBjaGFuZ2UgaWYgdGhl IFdHIHdpc2hlcyBpdC48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwv c3Bhbj48L2Rpdj4NCjwvc3Bhbj48L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIHN0eWxlPSJmb250 LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxl dHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5n OiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KR2l2ZW4g dGhhdCB0aGUgZG9jdW1lbnQgZGVzY3JpYmVzIGEgcHJvY2VzcyBJIHdvdWxkIGhhdmUgbGVhbmVk IHRvd2FyZHMgQkNQIGFzIHdlbGzigKZidXQgQkdQU2VjIGlzIG5vdCBkZXBsb3llZCwgc28gdGhh dCBzZWVtcyBhIGxpdHRsZSB0b28gbXVjaCBhcyBpdCB3b3VsZG7igJl0IHJlYWxseSBiZSBkb2N1 bWVudGluZyB0aGUg4oCcYmVzdCBjdXJyZW50IHByYWN0aWNl4oCdLjwvcD4NCjxwIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhLCBBcmlhbDsgZm9udC1zaXplOiAxM3B4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KRldJ VywgSeKAmW0gZmluZSBsZWF2aW5nIHRoZSBzdGF0dXMgYXMgaXMgaW4gaG9wZXMgdGhhdCB0aGUg cHJvY2VzcyB3aWxsIGJlIHVzZWQgaWYvd2hlbiBCR1BTZWMgaXMgZGVwbG95ZWQuJm5ic3A7IEkg d291bGRu4oCZdCBvYmplY3QgdG8gSW5mb3JtYXRpb25hbCBlaXRoZXIuPC9wPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8ZGl2PkJFVzogSSB0aGluayBpdOKAmXMgc3RpbGwgZmFpciB0byBwbGFu IGZvciBCR1BzZWMgdG8gYmUgZGVwbG95ZWQsIGFuZCBzbyBzdGFuZGFyZHMgdHJhY2sgd291bGQg YmUgYSByZWFzb25hYmxlIHN0YXR1cy48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2EsIEFyaWFsOyBmb250LXNpemU6IDEzcHg7IGZvbnQtc3R5bGU6IG5v cm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0 dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9ImNsZWFuX2JxIiBzdHlsZT0i Zm9udC1mYW1pbHk6IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyI+DQo8c3BhbiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiAnaGVsdmV0aWNhIE5ldWUnLCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRw eDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdl aWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdvcmQtc3BhY2luZzogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1 NSk7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZn dDsNCiBBbHNvLCBzaG91bGQgaWV0Zi1zaWRyLXJ0ci1rZXlpbmcgbWF5YmUgYmUgYSBub3JtYXRp dmUgcmVmZXJlbmNlLCBvciBpcyB0aGlzPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiAnaGVsdmV0aWNh IE5ldWUnLCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6ICdoZWx2ZXRpY2EgTmV1ZScsIGhl bHZldGljYTsgZm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IGJhY2tncm91bmQt Y29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyIgY2xhc3M9IiI+Jmd0Ow0KIGp1c3Qgb25lIGV4YW1wbGU/IFRoZSB1c2Ugb2Yg dGhpcyByZWZlcmVuY2UgaW4gc2VjdGlvbiAzLjEgaXNu4oCZdCBjbGVhciB0byBtZTxzcGFuIGNs YXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PGJyIHN0eWxl PSJmb250LWZhbWlseTogJ2hlbHZldGljYSBOZXVlJywgaGVsdmV0aWNhOyBmb250LXNpemU6IDE0 cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3b3JkLXNwYWNpbmc6IDBweDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiAnaGVsdmV0aWNhIE5ldWUnLCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1z dHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9y bWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQt c3BhY2luZzogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IGZsb2F0 OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPiZndDsNCiB3aXRo IHRoaXMgcmVzcGVjdDog4oCeVGhlIGtleSByb2xsb3ZlciBwcm9jZXNzIGlzIGRlcGVuZGVudCBv biB0aGUga2V5PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu Pjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiAnaGVsdmV0aWNhIE5ldWUnLCBoZWx2ZXRp Y2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fw czogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6ICdoZWx2ZXRpY2EgTmV1ZScsIGhlbHZldGljYTsgZm9udC1z aXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUs IDI1NSwgMjU1KTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xh c3M9IiI+Jmd0Ow0KIHByb3Zpc2lvbmluZyBtZWNoYW5pc21zIGFkb3B0ZWQgYnkgYW4gQVMgW0kt RC5pZXRmLXNpZHItcnRyLWtleWluZ10u4oCcPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiAnaGVsdmV0 aWNhIE5ldWUnLCBoZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImZvbnQtZmFtaWx5OiAnaGVsdmV0aWNhIE5ldWUnLCBo ZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9y bWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06 IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6ICdoZWx2ZXRpY2EgTmV1ZScsIGhlbHZldGljYTsg Zm9udC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJn YigyNTUsIDI1NSwgMjU1KTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50 OyIgY2xhc3M9IiI+QkVXOg0KIFVwb24gcmVmbGVjdGlvbiwgSSBhZ3JlZSB0aGlzIHJlZmVyZW5j ZSBzaG91bGQgYmUgbm9ybWF0aXZlLiBUaGFua3MuPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L2Rpdj4NCjwvc3Bhbj48L2Jsb2NrcXVvdGU+ DQo8L2Rpdj4NCjxwIGNsYXNzPSIiPlRoaXMgc2F2ZXMgbWUgYSBESVNDVVNTLiA7LSk8L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KQkVXOiBUaGFua3MhIEZvciB0aGUgcmVjb3Jk LCBiYXNlZCBvbiZuYnNwO0FsZXhleeKAmXMgY29tbWVudCBJIHJldmlld2VkIHRoZSByZXN0IG9m IHRoZSBpbmZvcm1hdGl2ZSByZWZlcmVuY2VzLCBhbmQgSSBiZWxpZXZlIFtJLUQuaWV0Zi1zaWRy LXJ0ci1rZXlpbmddIGlzIHRoZSBvbmx5IG9uZSB0aGF0IHNob3VsZCBiZSBwcm9tb3RlZCB0byBu b3JtYXRpdmUuJm5ic3A7PC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5U aGFua3MsPC9kaXY+DQo8ZGl2PkJyaWFuPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYSwgQXJpYWw7IGZvbnQtc2l6ZTogMTNweDsgZm9udC1zdHlsZTogbm9ybWFsOyBm b250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3Bh Y2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj4NCjxwIGNsYXNzPSIiPlRo YW5rcyE8L3A+DQo8cCBjbGFzcz0iIj5BbHZhcm8uPC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4tLSZuYnNwOzxi ciBjbGFzcz0iIj4NCkJyaWFuIFdlaXM8YnIgY2xhc3M9IiI+DQpTZWN1cml0eSwgQ1NHLCBDaXNj byBTeXN0ZW1zPGJyIGNsYXNzPSIiPg0KVGVsZXBob25lOiAmIzQzOzEgNDA4IDUyNiA0Nzk2PGJy IGNsYXNzPSIiPg0KRW1haWw6IDxhIGhyZWY9Im1haWx0bzpiZXdAY2lzY28uY29tIiBjbGFzcz0i Ij5iZXdAY2lzY28uY29tPC9hPiA8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_17B22FFB08214EDDAD0F6627204EF64Fciscocom_-- From nobody Tue Nov 28 17:04:32 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEDF2128CFF; Tue, 28 Nov 2017 17:04:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.521 X-Spam-Level: X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LeXgELcQBqRY; Tue, 28 Nov 2017 17:04:29 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19471120724; Tue, 28 Nov 2017 17:04:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4660; q=dns/txt; s=iport; t=1511917469; x=1513127069; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=/um2tJpdUYSVDAfycu6cGH/uYwRlNUGuF6qLuKgVWGg=; b=RB4D9I7CgdL2EGUzvJhXUHZPnaTHxnfWbCUB9OjvCUWVv8EjlVlzlZGU YNKiLS4pTQ84ZqyrokD85Pct6SPlW7T6+mVdpJ8GW6gihNJ+GyBZWOUZl IH1JlR1oYZs3lngmMOuTsLCuvwzEsbJCgHqNXU9wCk+ZQc1GNLWWFByIH I=; X-IronPort-AV: E=Sophos;i="5.44,470,1505779200"; d="scan'208";a="329171134" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Nov 2017 01:04:03 +0000 Received: from XCH-RTP-005.cisco.com (xch-rtp-005.cisco.com [64.101.220.145]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id vAT143iT020287 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 29 Nov 2017 01:04:03 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-005.cisco.com (64.101.220.145) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 28 Nov 2017 20:04:02 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Tue, 28 Nov 2017 20:04:02 -0500 From: "Brian Weis (bew)" To: Eric Rescorla CC: The IESG , "draft-ietf-sidrops-bgpsec-rollover@ietf.org" , Chris Morrow , "sidrops-chairs@ietf.org" , "sidrops@ietf.org" Thread-Topic: Eric Rescorla's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) Thread-Index: AQHTaKaCadOR99Eeb0GsGuu+1n0OQ6Mq3moA Date: Wed, 29 Nov 2017 01:04:02 +0000 Message-ID: References: <151191424528.8057.5213964097673735635.idtracker@ietfa.amsl.com> In-Reply-To: <151191424528.8057.5213964097673735635.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.32.172.166] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] Eric Rescorla's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Nov 2017 01:04:31 -0000 SGkgRUtSLA0KDQpUaGFua3MgZm9yIHlvdXIgcmV2aWV3LiBDb21tZW50cyBiZWxvdyBhcmUgcHJl ZmFjZWQgd2l0aCBCRVcuDQoNCj4gT24gTm92IDI4LCAyMDE3LCBhdCA0OjEwIFBNLCBFcmljIFJl c2NvcmxhIDxla3JAcnRmbS5jb20+IHdyb3RlOg0KPiANCj4gRXJpYyBSZXNjb3JsYSBoYXMgZW50 ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCj4gZHJhZnQtaWV0Zi1zaWRy b3BzLWJncHNlYy1yb2xsb3Zlci0wMzogTm8gT2JqZWN0aW9uDQo+IA0KPiBXaGVuIHJlc3BvbmRp bmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBseSB0byBhbGwN Cj4gZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVs IGZyZWUgdG8gY3V0IHRoaXMNCj4gaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4pDQo+ IA0KPiANCj4gUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVt ZW50L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KPiBmb3IgbW9yZSBpbmZvcm1hdGlvbiBhYm91dCBJ RVNHIERJU0NVU1MgYW5kIENPTU1FTlQgcG9zaXRpb25zLg0KPiANCj4gDQo+IFRoZSBkb2N1bWVu dCwgYWxvbmcgd2l0aCBvdGhlciBiYWxsb3QgcG9zaXRpb25zLCBjYW4gYmUgZm91bmQgaGVyZToN Cj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zaWRyb3BzLWJn cHNlYy1yb2xsb3Zlci8NCj4gDQo+IA0KPiANCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBDT01NRU5UOg0K PiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQo+IA0KPiAgIEJHUHNlYyByb3V0ZXIgY2VydGlmaWNhdGUgd2l0aCBh IG5ldyBwdWJsaWMga2V5IGFuZCB0aGUgdGltZSBhIEJHUHNlYw0KPiAgIHJvdXRlciBiZWdpbnMg dG8gdXNlIGl0cyBuZXcgcHJpdmF0ZSBrZXkpLiAgVGhpcyBjYW4gYmUgZHVlIHRvIGEgbmVlZA0K PiAgIGZvciBhIEJHUHNlYyByb3V0ZXIgdG8gZGlzdHJpYnV0ZSBCR1BzZWMgdXBkYXRlcyBzaWdu ZWQgd2l0aCBhIG5ldw0KPiBOaXQgInRoZSBwZXJpb2QgYmV0d2VlbiB0aGUgdGltZSB3aGVuIGFu IEFTIGRpc3RyaWJ1dGVzIOKApi4iDQoNCkJFVzogVGhpcyBpcyB0aGUgbmV3IHRleHQsIHdoaWNo IEkgYmVsaWV2ZSBtYXRjaGVzIHRoZSBjb21tZW50LiANCg0K4oCcSXQgaXMgYWxzbyBpbXBvcnRh bnQgZm9yIGFuIEFTIHRvIG1pbmltaXplIHRoZSBCR1BzZWMgcm91dGVyIGtleSByb2xsb3ZlciAN CmludGVydmFsIChpLmUuLCB0aGUgcGVyaW9kIGJldHdlZW4gdGhlIHRpbWUgd2hlbiBhbiBBUyBk aXN0cmlidXRlcyBhIEJHUHNlYyANCnJvdXRlciBjZXJ0aWZpY2F0ZSB3aXRoIGEgbmV3IHB1Ymxp YyBrZXkgYW5kIHRoZSB0aW1lIGEgQkdQc2VjIHJvdXRlciBiZWdpbnMNCnRvIHVzZSBpdHMgbmV3 IHByaXZhdGUga2V5KS4iDQoNCj4gDQo+ICAgUHJvdGVjdGlvbiBhZ2FpbnN0IHdpdGhkcmF3YWwg c3VwcHJlc3Npb24gYW5kIHJlcGxheSBhdHRhY2tzOiAgQW4gQVMNCj4gICAgICAgICBtYXkgZGV0 ZXJtaW5lIHdpdGhkcmF3biBCR1BzZWMgdXBkYXRlcyBhcmUgYmVpbmcgcHJvcGFnYXRlZA0KPiAg ICAgICAgIGluc3RlYWQgb2YgdGhlIG1vc3QgcmVjZW50bHkgcHJvcGFnYXRlZCBCR1BzZWMgdXBk YXRlcy4NCj4gTml0OiBtYXkgZGV0ZXJtaW5lIHRoYXQuDQoNCkJFVzogZml4ZWQuDQoNCj4gDQo+ ICAgY2VydGlmaWNhdGUgdXNlZCBmb3Igc2lnbmluZyB1cGRhdGVzIGluIHRyYW5zaXQgaXMgZXhw ZWN0ZWQgdG8gbGl2ZQ0KPiAgIGxvbmdlciB0aGFuIHRoZSBvbmUgdXNlZCBmb3Igc2lnbmluZyBv cmlnaW5hdGlvbiB1cGRhdGVzLg0KPiBXaHkgaXMgaXQgdW5pbXBvcnRhbnQgdG8gd29ycnkgYWJv dXQgcmVwbGF5cyBvbiB0cmFuc2l0IHVwZGF0ZXM/IEFzIEkgcmVhZCB0aGUNCj4gcmVmZXJlbmNl cyBpdCdzIGp1c3QgdGhhdCBjaGFuZ2luZyB0aGUgdHJhbnNpdCBrZXkgaXMgZXhwZW5zaXZlLCBy aWdodD8gQnV0IEknbQ0KPiBub3Qgc3VyZSB3aHkgdGhhdCBtZWFucyB5b3UgZG9uJ3QgaGF2ZSB0 byBkbyBpdC4NCg0KQkVXOiBSZXBsYXkgYXR0YWNrIHByb3RlY3Rpb24gcHJvdmlkZXMgYW4gb3Jp Z2luIEFTIGEgd2F5IG9mIGVuc3VyaW5nIGl0cyBsYXRlc3QgDQp1cGRhdGVzIGFyZSBiZWluZyBw cm9wYWdhdGVkIHRocm91Z2ggdGhlIG5ldHdvcmsuIEEgdHJhbnNpdCBBUyBpcyBub3QgbGlrZWx5 IHRvIA0Ka25vdyBvciBjYXJlIHdoZXRoZXIgd2hldGhlciB0aGUgcG9saWN5IG9mIHRoZSBvcmln aW4gQVMgaGFzIGNoYW5nZWQsIGhvd2V2ZXIuIA0KU28gd2hlbiBhbiBvcmlnaW4gQVMgY2hhbmdl cyBpdOKAmXMgc2lnbmluZyBrZXkgYXMgYSByZXBsYXkgYXR0YWNrIHByb3RlY3Rpb24sIGl0IA0K ZG9lc27igJl0IGhhdmUgYW55IG1vdGl2YXRpb24gdG8gY2hhbmdlIGl0cyB0cmFuc2l0ICBzaWdu aW5nIGtleSBhcyB3ZWxsLCBhbmQgdGhpcyBpcyANCndoYXQgdGhlIHBhcmFncmFwaCBpcyBpbnRl bmRpbmcgdG8gc2F5Lg0KDQpPbmUgcmVhc29uIHRvIHJlY29tbWVuZCBub3QgY2hhbmdpbmcgdGhl IHRyYW5zaXQga2V5IG9uIHRoZSBzYW1lIHNjaGVkdWxlIA0KYXMgdGhlIG9yaWdpbiBrZXkgKGUu Zy4sIGZvciByZXBsYXkgYXR0YWNrIHByb3RlY3Rpb24pIGlzIHRvIGxpbWl0IGRhbWFnZSBpZiB0 aGVyZSBpcyANCmEgZ2xpdGNoIGluIHRoZSByb2xsb3ZlciBwcm9jZXNzLiBJZiBhIG5ldyBvcmln aW4ga2V5IGRvZXNu4oCZdCBnZXQgaW5zdGFsbGVkIGluIHRpbWUsIA0KdGhlbiBvbmx5IHRoZSBv cmlnaW4gQVMgd2lsbCBiZSBhZmZlY3RlZC4gQnV0IHNpbmNlIGxhcmdlIG51bWJlcnMgb2YgdXBk YXRlcyBoYXZlIA0KYmVlbiBzaWduZWQgd2l0aCB0aGF0IHRyYW5zaXQga2V5LCBhIGZhaWx1cmUg aW4gZGlzdHJpYnV0aW5nIGEgbmV3IHRyYW5zaXQga2V5IGNvdWxkIA0KcmVzdWx0IGluIGxhcmdl IG51bWJlcnMgb2YgdXBkYXRlcyBvcmlnaW5hdGVkIGJ5IG1hbnkgb3JpZ2lucyB3aWxsIGhhdmUg YmVlbiANCmludmFsaWRhdGVkLCB3aGljaCBjb3VsZCByZXN1bHQgaW4gc3Vic3RhbnRpYWwgZGFt YWdlIHRvIHRoZSBJbnRlcm5ldC4NCg0KUHJvYmFibHkgc29tZSB0ZXh0IHNob3VsZCBiZSBhZGRl ZCB0byB0aGUgcGFyYWdyYXBoIHRvIGV4cGxhaW4gdGhpcy4NCg0KVGhhbmtzLA0KQnJpYW4NCg0K LS0gDQpCcmlhbiBXZWlzDQpTZWN1cml0eSwgQ1NHLCBDaXNjbyBTeXN0ZW1zDQpUZWxlcGhvbmU6 ICsxIDQwOCA1MjYgNDc5Ng0KRW1haWw6IGJld0BjaXNjby5jb20NCg0K From nobody Tue Nov 28 17:36:41 2017 Return-Path: X-Original-To: sidrops@ietf.org Delivered-To: sidrops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4677E128CFF; Tue, 28 Nov 2017 16:10:45 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Eric Rescorla To: "The IESG" Cc: draft-ietf-sidrops-bgpsec-rollover@ietf.org, Chris Morrow , sidrops-chairs@ietf.org, morrowc@ops-netman.net, sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.66.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151191424528.8057.5213964097673735635.idtracker@ietfa.amsl.com> Date: Tue, 28 Nov 2017 16:10:45 -0800 Archived-At: X-Mailman-Approved-At: Tue, 28 Nov 2017 17:36:39 -0800 Subject: [Sidrops] Eric Rescorla's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Nov 2017 00:10:45 -0000 Eric Rescorla has entered the following ballot position for draft-ietf-sidrops-bgpsec-rollover-03: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- BGPsec router certificate with a new public key and the time a BGPsec router begins to use its new private key). This can be due to a need for a BGPsec router to distribute BGPsec updates signed with a new Nit "the period between the time when an AS distributes ...." Protection against withdrawal suppression and replay attacks: An AS may determine withdrawn BGPsec updates are being propagated instead of the most recently propagated BGPsec updates. Nit: may determine that. certificate used for signing updates in transit is expected to live longer than the one used for signing origination updates. Why is it unimportant to worry about replays on transit updates? As I read the references it's just that changing the transit key is expensive, right? But I'm not sure why that means you don't have to do it. From nobody Tue Nov 28 17:36:45 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C83AA129329 for ; Tue, 28 Nov 2017 17:06:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id US1xLanuneuX for ; Tue, 28 Nov 2017 17:06:28 -0800 (PST) Received: from mail-yb0-x230.google.com (mail-yb0-x230.google.com [IPv6:2607:f8b0:4002:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E817E1292D3 for ; Tue, 28 Nov 2017 17:06:25 -0800 (PST) Received: by mail-yb0-x230.google.com with SMTP id k4so760427ybc.1 for ; Tue, 28 Nov 2017 17:06:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=8C3KiJeXMEFiz6pgc22tSE9syJvGjiM+4Ldai2Y/jbk=; b=fLKym3LUR5MDsh9aQfT8n28vKLzrCD4oTKszOGSiRUX7g/n5Li+KBSS2ZiOFyfgdHW Ir6dwanw3XfRi0maNgmBL2ktMYAHxEFvsxgMyRO0dyhzF1k+E3C0+hl4JWYWGy6aQXzN 4nZ5B7MWfHQ/ScuUV6A0pv4RX0QRUIDH/cHAopdTiQqXA5NygbZQ8Rl/jVXGI8+760Yr cMbjo9KBEuo0pPQPokL9JzmD13LuKkp/PMzax5Vhh1x5dBM+bwXt3vnTGVl0KBVuZUPZ g3ESCw5THxe2rXIb0fsbpXkHmXcbHSgjOagTlaj0OlgGQAk1t3XrVI5arOIctcJL6YvV 6s8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=8C3KiJeXMEFiz6pgc22tSE9syJvGjiM+4Ldai2Y/jbk=; b=QuMwnH+NuWJJtRmjdYsfQAv0+4mfmGty1337kem1umdOpD1AJV0zmKU6xQcKh74FTD CRq7oOULlYhdnfQcqNA/GSND2GW0XnisYtj17OfvaPpURzoH+iBpHZZ+Mq9iQf48erwd SFLxAZNPoibB99TVmACX/RZ75OMUy0ijl4Gle114MeFdmTl0EDFyyLRsbQtQu+278q+S h8GE4DhpJSb+Mj7MD2fTppR+SiMdx9//0dCLVbbE3SOEvBQv51acoHtpd9AufNSGW154 rrUK+kHN+pHC7pydxijLlBhokFuXyzGg2PvTfHE4+tlthrHqa2ez946hNom43lz6v70Q NPoQ== X-Gm-Message-State: AJaThX4YrnIykZviaoWLPxoC6I5Eemzsf29BHWYX1mvl9C88a0GGzkqz EIsmNRYqy0VDAHOUi9GpovXcHRhoFvn8pH/RM9myKw== X-Google-Smtp-Source: AGs4zMYyJpjXZ9Vqtni/wHUheYfyUtxFi4G8Ovgx3nrf0A93ZQRehSECxbAUuAiEWMtGRjMvE7q5a39AJavbBe0XrfE= X-Received: by 10.37.107.82 with SMTP id o18mr734633ybm.293.1511917585102; Tue, 28 Nov 2017 17:06:25 -0800 (PST) MIME-Version: 1.0 Received: by 10.129.123.132 with HTTP; Tue, 28 Nov 2017 17:05:44 -0800 (PST) In-Reply-To: References: <151191424528.8057.5213964097673735635.idtracker@ietfa.amsl.com> From: Eric Rescorla Date: Tue, 28 Nov 2017 17:05:44 -0800 Message-ID: To: "Brian Weis (bew)" Cc: The IESG , "draft-ietf-sidrops-bgpsec-rollover@ietf.org" , Chris Morrow , "sidrops-chairs@ietf.org" , "sidrops@ietf.org" Content-Type: multipart/alternative; boundary="089e08267d30970fdf055f14bee7" Archived-At: X-Mailman-Approved-At: Tue, 28 Nov 2017 17:36:39 -0800 Subject: Re: [Sidrops] Eric Rescorla's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Nov 2017 01:06:31 -0000 --089e08267d30970fdf055f14bee7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Nov 28, 2017 at 5:04 PM, Brian Weis (bew) wrote: > Hi EKR, > > Thanks for your review. Comments below are prefaced with BEW. > > > On Nov 28, 2017, at 4:10 PM, Eric Rescorla wrote: > > > > Eric Rescorla has entered the following ballot position for > > draft-ietf-sidrops-bgpsec-rollover-03: No Objection > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria. > html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > BGPsec router certificate with a new public key and the time a BGPsec > > router begins to use its new private key). This can be due to a need > > for a BGPsec router to distribute BGPsec updates signed with a new > > Nit "the period between the time when an AS distributes =E2=80=A6." > > BEW: This is the new text, which I believe matches the comment. > > =E2=80=9CIt is also important for an AS to minimize the BGPsec router key= rollover > interval (i.e., the period between the time when an AS distributes a BGPs= ec > router certificate with a new public key and the time a BGPsec router > begins > to use its new private key)." > > > > > Protection against withdrawal suppression and replay attacks: An AS > > may determine withdrawn BGPsec updates are being propagated > > instead of the most recently propagated BGPsec updates. > > Nit: may determine that. > > BEW: fixed. > > > > > certificate used for signing updates in transit is expected to live > > longer than the one used for signing origination updates. > > Why is it unimportant to worry about replays on transit updates? As I > read the > > references it's just that changing the transit key is expensive, right? > But I'm > > not sure why that means you don't have to do it. > > BEW: Replay attack protection provides an origin AS a way of ensuring its > latest > updates are being propagated through the network. A transit AS is not > likely to > know or care whether whether the policy of the origin AS has changed, > however. > So when an origin AS changes it=E2=80=99s signing key as a replay attack > protection, it > doesn=E2=80=99t have any motivation to change its transit signing key as= well, > and this is > what the paragraph is intending to say. > > One reason to recommend not changing the transit key on the same schedule > as the origin key (e.g., for replay attack protection) is to limit damage > if there is > a glitch in the rollover process. If a new origin key doesn=E2=80=99t get > installed in time, > then only the origin AS will be affected. But since large numbers of > updates have > been signed with that transit key, a failure in distributing a new transi= t > key could > result in large numbers of updates originated by many origins will have > been > invalidated, which could result in substantial damage to the Internet. > > Probably some text should be added to the paragraph to explain this. > Yes, that seems like it would be a good idea. -Ekr > > Thanks, > Brian > > -- > Brian Weis > Security, CSG, Cisco Systems > Telephone: +1 408 526 4796 > Email: bew@cisco.com > > --089e08267d30970fdf055f14bee7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Tue, Nov 28, 2017 at 5:04 PM, Brian Weis (bew) <= ;bew@cisco.com> wrote:
Hi EKR,

Thanks for your review. Comments below are prefaced with BEW.

> On Nov 28, 2017, at 4:10 PM, Eric Rescorla <ekr@rtfm.com> wrote:
>
> Eric Rescorla has entered the following ballot position for
> draft-ietf-sidrops-bgpsec-rollover-03: No Objection
>
> When responding, please keep the subject line intact and reply to all<= br> > email addresses included in the To and CC lines. (Feel free to cut thi= s
> introductory paragraph, however.)
>
>
> Please refer to https://www.ietf.org/i= esg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here: > https://datatracker.ietf.or= g/doc/draft-ietf-sidrops-bgpsec-rollover/
>
>
>
> ------------------------------------------------------------= ----------
> COMMENT:
> ------------------------------------------------------------= ----------
>
>=C2=A0 =C2=A0BGPsec router certificate with a new public key and the ti= me a BGPsec
>=C2=A0 =C2=A0router begins to use its new private key).=C2=A0 This can = be due to a need
>=C2=A0 =C2=A0for a BGPsec router to distribute BGPsec updates signed wi= th a new
> Nit "the period between the time when an AS distributes = =E2=80=A6."

BEW: This is the new text, which I believe matches the comment.

=E2=80=9CIt is also important for an AS to minimize the BGPsec router key r= ollover
interval (i.e., the period between the time when an AS distributes a BGPsec=
router certificate with a new public key and the time a BG= Psec router begins
to use its new private key)."

>
>=C2=A0 =C2=A0Protection against withdrawal supp= ression and replay attacks:=C2=A0 An AS
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0may determine withdrawn BGPsec update= s are being propagated
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0instead of the most recently propagat= ed BGPsec updates.
> Nit: may determine that.

BEW: fixed.

>
>=C2=A0 =C2=A0certificate used for signing updates in transit is expecte= d to live
>=C2=A0 =C2=A0longer than the one used for signing origination updates.<= br> > Why is it unimportant to worry about replays on transit updates? As I = read the
> references it's just that changing the transit key is expensive, r= ight? But I'm
> not sure why that means you don't have to do it.

BEW: Replay attack protection provides an origin AS a way of ensurin= g its latest
updates are being propagated through the network. A transit AS is not likel= y to
know or care whether whether the policy of the origin AS has changed, howev= er.
So when an origin AS changes it=E2=80=99s signing key as a replay attack pr= otection, it
doesn=E2=80=99t have any motivation to change its transit=C2=A0 signing key= as well, and this is
what the paragraph is intending to say.

One reason to recommend not changing the transit key on the same schedule as the origin key (e.g., for replay attack protection) is to limit damage i= f there is
a glitch in the rollover process. If a new origin key doesn=E2=80=99t get i= nstalled in time,
then only the origin AS will be affected. But since large numbers of update= s have
been signed with that transit key, a failure in distributing a new transit = key could
result in large numbers of updates originated by many origins will have bee= n
invalidated, which could result in substantial damage to the Internet.

Probably some text should be added to the paragraph to explain this.

Yes, that seems like it would be a good idea.=

-Ekr
=C2=A0

Thanks,
Brian

--
Brian Weis
Security, CSG, Cisco Systems
Telephone: += 1 408 526 4796
Email: bew@cisco.com


--089e08267d30970fdf055f14bee7-- From nobody Wed Nov 29 17:28:34 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09134127978; Wed, 29 Nov 2017 17:28:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.1 X-Spam-Level: X-Spam-Status: No, score=-1.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SXvPRckWiyO7; Wed, 29 Nov 2017 17:28:30 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F1A0127136; Wed, 29 Nov 2017 17:28:30 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 7FA493FF19; Thu, 30 Nov 2017 01:28:28 +0000 (UTC) Received: from morrowc-glaptop2.ops-netman.net (pool-108-56-140-241.washdc.fios.verizon.net [108.56.140.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 6110D558F7E3; Thu, 30 Nov 2017 01:28:27 +0000 (UTC) Authentication-Results: mail.ops-netman.net; dkim=none reason="no signature"; dkim-adsp=fail (unprotected policy); dkim-atps=neutral Date: Wed, 29 Nov 2017 20:28:26 -0500 Message-ID: From: Chris Morrow To: Ben Campbell Cc: "The IESG" , draft-ietf-sidrops-bgpsec-rollover@ietf.org, Chris Morrow , sidrops-chairs@ietf.org, sidrops@ietf.org In-Reply-To: <151199837926.4902.900040686839421737.idtracker@ietfa.amsl.com> References: <151199837926.4902.900040686839421737.idtracker@ietfa.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.2 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Sidrops] Ben Campbell's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 01:28:32 -0000 Hey ben! thanks for reading :) and reviewing... a bit more below. On Wed, 29 Nov 2017 18:32:59 -0500, Ben Campbell wrote: > > Ben Campbell has entered the following ballot position for > draft-ietf-sidrops-bgpsec-rollover-03: No Objection > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > Did the working group consider making this a BCP? It describes operational > practices, not protocol. > I don't believe the WG considered BCP, no... This is an ops-group so we don't normally do 'protocol' changes. I agree that this sounds more like a 'bcp' ... We can ask the authors their thoughts though I can't imagine there's much difference for them between PS and BCP, right? Author-folken? > -1: The draft contains a number of instances of "must" and "should" in lower > case. If those are correct, please consider using the boilerplate from 8174. From nobody Wed Nov 29 17:29:00 2017 Return-Path: X-Original-To: sidrops@ietf.org Delivered-To: sidrops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 432701201FA; Wed, 29 Nov 2017 15:32:59 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Ben Campbell To: "The IESG" Cc: draft-ietf-sidrops-bgpsec-rollover@ietf.org, Chris Morrow , sidrops-chairs@ietf.org, morrowc@ops-netman.net, sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.66.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151199837926.4902.900040686839421737.idtracker@ietfa.amsl.com> Date: Wed, 29 Nov 2017 15:32:59 -0800 Archived-At: X-Mailman-Approved-At: Wed, 29 Nov 2017 17:28:58 -0800 Subject: [Sidrops] Ben Campbell's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Nov 2017 23:32:59 -0000 Ben Campbell has entered the following ballot position for draft-ietf-sidrops-bgpsec-rollover-03: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Did the working group consider making this a BCP? It describes operational practices, not protocol. -1: The draft contains a number of instances of "must" and "should" in lower case. If those are correct, please consider using the boilerplate from 8174. From nobody Wed Nov 29 17:29:04 2017 Return-Path: X-Original-To: sidrops@ietf.org Delivered-To: sidrops@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 363961286B1; Wed, 29 Nov 2017 16:50:13 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Adam Roach To: "The IESG" Cc: draft-ietf-sidrops-bgpsec-rollover@ietf.org, Chris Morrow , sidrops-chairs@ietf.org, morrowc@ops-netman.net, sidrops@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.66.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151200301321.4833.11974774881702428124.idtracker@ietfa.amsl.com> Date: Wed, 29 Nov 2017 16:50:13 -0800 Archived-At: X-Mailman-Approved-At: Wed, 29 Nov 2017 17:28:58 -0800 Subject: [Sidrops] Adam Roach's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 00:50:13 -0000 Adam Roach has entered the following ballot position for draft-ietf-sidrops-bgpsec-rollover-03: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for a well-written document with clearly spelled-out rationale and explanations. I agree with others that this document looks like a BCP rather than a standards track document; in particular, the following language is pretty compelling: This document does not contain a protocol update to either the RPKI or BGPsec. It describes a process for managing BGPsec router certificates within the RPKI. I also found a nit in Section 2: "In particular, if the AS suspects that a stale BGPsec updates is being distributed..." Either remove "a" or change "updates" to "update". From nobody Thu Nov 30 05:02:20 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7CA21200F3 for ; Thu, 30 Nov 2017 05:02:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1p8aKCtk7krd for ; Thu, 30 Nov 2017 05:02:17 -0800 (PST) Received: from mahimahi.ripe.net (mahimahi.ripe.net [IPv6:2001:67c:2e8:11::c100:1372]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D5B81293D6 for ; Thu, 30 Nov 2017 05:02:14 -0800 (PST) Received: from titi.ripe.net ([193.0.23.11]) by mahimahi.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eKOTk-0004CL-2Z for sidrops@ietf.org; Thu, 30 Nov 2017 14:02:13 +0100 Received: from sslvpn.ripe.net ([193.0.20.230] helo=vpn-244.ripe.net) by titi.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eKOTj-0003B1-Tr; Thu, 30 Nov 2017 14:02:11 +0100 From: Tim Bruijnzeels Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Thu, 30 Nov 2017 14:02:11 +0100 Message-Id: <56EB3EEC-A49A-41FE-84FD-42DEF814D333@ripe.net> To: sidrops@ietf.org X-Mailer: Apple Mail (2.3273) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ------- X-RIPE-Spam-Report: Spam Total Points: -7.5 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a071923dea218e47e047c9d2bbc8dcd3c6dc9 Archived-At: Subject: [Sidrops] Document on HTTPS on TALs (update to RFC7730) - seeking adoption X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 13:02:18 -0000 Dear working group, As discussed at IETF99, and in informal talks with some of you, we would = like to update the TAL format (RFC7730) to allow HTTPS. I worked with George Michaelson on an update. Because RFC7730 contains = quite a few references to =E2=80=98rsync=E2=80=99 we felt that a new = document updating 7730 would be more readable and appropriate then = document updating many small bits of text. The -00 version of this = document is here: = https://tools.ietf.org/id/draft-tbruijnzeels-sidrops-https-tal-00.txt We would like to ask the co-chairs to make a call to the working group = for adoption. In short this update will allow the use of HTTPS instead of, or in = addition to, rsync on TALs. Other than that it contains a section on TLS = verification similar to the one that is included in the delta protocol = (RFC8182) - essentially saying that TLS verification is done on a best = effort basis - and warnings should be uttered in case of issues - but = because the TA certificate can still be validated cryptographically it = MUST still be downloaded. Note that it is a matter of local policy = whether an RP chooses to use different locations if they are present, = but we may want to add some text here recommending the use of HTTPS URIs = that have no TLS verification issues over ones that do - at this point I = am not sure that this is needed, or would need to be normative text, but = I think it would be good to have some discussion on this. For the record, I am not sure what is customary in these cases of = relatively small updates to existing standards. But, I tried to approach = the other authors of RFC7730 (George is already one of them) and ask = them whether they want to remain authors on this new document. Geoff = Huston indicated that he does not need to be on the list, but has no = objections to us doing this work. I have not seen responses from Sam = Weiler or Stephen Kent - it is also possible that they missed my = message. In any case we have no objections if they do wish to stay on as = authors, but for now they are not on the list of the document linked = above. Kind regards, Tim=20 From nobody Thu Nov 30 05:31:42 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15945129461 for ; Thu, 30 Nov 2017 05:31:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HrvbCTgup2wb for ; Thu, 30 Nov 2017 05:31:38 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2F4A12945A for ; Thu, 30 Nov 2017 05:31:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3598; q=dns/txt; s=iport; t=1512048697; x=1513258297; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=g3A7wEdLeMpEJxmOkwoikaFuiIZqZhbycC7KN3DxbYM=; b=ZLF3X3C6NhcTNLNZtHtEaeaziHeYSioUyVW8kAYMRxXsvF4K/2StEnXJ DITk6kR8IF4AWrgO7R7kljFdljqtiVt0Ojf0f4dssct/geYl4IgqLzA13 euu0q8FHgN2Zyg/bKNfdRUaX27ZH3Vt5R2XRBAzwJK0eDQ2EwfmjFXm9b 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DHAwDiBiBa/4wNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYM8Zm4nB4N4mRGBV5ccEIIBChgLhElPAhqFB0EWAQEBAQEBAQE?= =?us-ascii?q?BayiFIAIBAwEBIRE6GwIBCBoCJgICAiULFRACBAESiiIQplGCJ4pkAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBGAWBD4IyggmBVoFpKQuCd4FJgx84F4J+MYISIAWiWAK?= =?us-ascii?q?Hco0cghaGD4stijmCQYkdAhEZAYE5ASYDL4FRbxU6KgGBfoJegXd3AYc6LIEFg?= =?us-ascii?q?RQBAQE?= X-IronPort-AV: E=Sophos;i="5.45,341,1508803200"; d="scan'208";a="329836033" Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Nov 2017 13:31:36 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id vAUDVaOS005266 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 30 Nov 2017 13:31:36 GMT Received: from xch-rtp-011.cisco.com (64.101.220.151) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 30 Nov 2017 08:31:35 -0500 Received: from xch-rtp-011.cisco.com ([64.101.220.151]) by XCH-RTP-011.cisco.com ([64.101.220.151]) with mapi id 15.00.1320.000; Thu, 30 Nov 2017 08:31:35 -0500 From: "Roque Gagliano (rogaglia)" To: Tim Bruijnzeels , "sidrops@ietf.org" Thread-Topic: [Sidrops] Document on HTTPS on TALs (update to RFC7730) - seeking adoption Thread-Index: AQHTadt+Ip97gZ2vkUaTty9WIyRhXKMtPy4A Date: Thu, 30 Nov 2017 13:31:35 +0000 Message-ID: <2545F8AE-022A-4824-9F55-A589144BFAA9@cisco.com> References: <56EB3EEC-A49A-41FE-84FD-42DEF814D333@ripe.net> In-Reply-To: <56EB3EEC-A49A-41FE-84FD-42DEF814D333@ripe.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.27.0.171010 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.228.88.138] Content-Type: text/plain; charset="utf-8" Content-ID: <319F07205BD25C46A30E924A618055B3@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] Document on HTTPS on TALs (update to RFC7730) - seeking adoption X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 13:31:41 -0000 SGkgVGltLA0KDQpOb3Qgc3VyZSBJIHVuZGVyc3RhbmQgd2h5IHlvdSBhcmUg4oCcdXBkYXRlc+KA nSBSRkMgNzczMCBhbmQgbm90IOKAnG9ic29sZXRlc+KAnSBSRkM3NzMwLiBDb3VsZCB5b3UgcGxl YXNlIGVsYWJvcmF0ZSBvbiB0aGlzIGRlY2lzaW9uPw0KDQpSZWdhcmRzLA0KUm9xdWUNCg0KDQpP biAzMC8xMS8xNyAxNDowMiwgIlNpZHJvcHMgb24gYmVoYWxmIG9mIFRpbSBCcnVpam56ZWVscyIg PHNpZHJvcHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgdGltQHJpcGUubmV0PiB3cm90 ZToNCg0KICAgIERlYXIgd29ya2luZyBncm91cCwNCiAgICANCiAgICBBcyBkaXNjdXNzZWQgYXQg SUVURjk5LCBhbmQgaW4gaW5mb3JtYWwgdGFsa3Mgd2l0aCBzb21lIG9mIHlvdSwgd2Ugd291bGQg bGlrZSB0byB1cGRhdGUgdGhlIFRBTCBmb3JtYXQgKFJGQzc3MzApIHRvIGFsbG93IEhUVFBTLg0K ICAgIA0KICAgIEkgd29ya2VkIHdpdGggR2VvcmdlIE1pY2hhZWxzb24gb24gYW4gdXBkYXRlLiBC ZWNhdXNlIFJGQzc3MzAgY29udGFpbnMgcXVpdGUgYSBmZXcgcmVmZXJlbmNlcyB0byDigJhyc3lu Y+KAmSB3ZSBmZWx0IHRoYXQgYSBuZXcgZG9jdW1lbnQgdXBkYXRpbmcgNzczMCB3b3VsZCBiZSBt b3JlIHJlYWRhYmxlIGFuZCBhcHByb3ByaWF0ZSB0aGVuIGRvY3VtZW50IHVwZGF0aW5nIG1hbnkg c21hbGwgYml0cyBvZiB0ZXh0LiBUaGUgLTAwIHZlcnNpb24gb2YgdGhpcyBkb2N1bWVudCBpcyBo ZXJlOiBodHRwczovL3Rvb2xzLmlldGYub3JnL2lkL2RyYWZ0LXRicnVpam56ZWVscy1zaWRyb3Bz LWh0dHBzLXRhbC0wMC50eHQNCiAgICANCiAgICBXZSB3b3VsZCBsaWtlIHRvIGFzayB0aGUgY28t Y2hhaXJzIHRvIG1ha2UgYSBjYWxsIHRvIHRoZSB3b3JraW5nIGdyb3VwIGZvciBhZG9wdGlvbi4N CiAgICANCiAgICBJbiBzaG9ydCB0aGlzIHVwZGF0ZSB3aWxsIGFsbG93IHRoZSB1c2Ugb2YgSFRU UFMgaW5zdGVhZCBvZiwgb3IgaW4gYWRkaXRpb24gdG8sIHJzeW5jIG9uIFRBTHMuIE90aGVyIHRo YW4gdGhhdCBpdCBjb250YWlucyBhIHNlY3Rpb24gb24gVExTIHZlcmlmaWNhdGlvbiBzaW1pbGFy IHRvIHRoZSBvbmUgdGhhdCBpcyBpbmNsdWRlZCBpbiB0aGUgZGVsdGEgcHJvdG9jb2wgKFJGQzgx ODIpIC0gZXNzZW50aWFsbHkgc2F5aW5nIHRoYXQgVExTIHZlcmlmaWNhdGlvbiBpcyBkb25lIG9u IGEgYmVzdCBlZmZvcnQgYmFzaXMgLSBhbmQgd2FybmluZ3Mgc2hvdWxkIGJlIHV0dGVyZWQgaW4g Y2FzZSBvZiBpc3N1ZXMgLSBidXQgYmVjYXVzZSB0aGUgVEEgY2VydGlmaWNhdGUgY2FuIHN0aWxs IGJlIHZhbGlkYXRlZCBjcnlwdG9ncmFwaGljYWxseSBpdCBNVVNUIHN0aWxsIGJlIGRvd25sb2Fk ZWQuIE5vdGUgdGhhdCBpdCBpcyBhIG1hdHRlciBvZiBsb2NhbCBwb2xpY3kgd2hldGhlciBhbiBS UCBjaG9vc2VzIHRvIHVzZSBkaWZmZXJlbnQgbG9jYXRpb25zIGlmIHRoZXkgYXJlIHByZXNlbnQs IGJ1dCB3ZSBtYXkgd2FudCB0byBhZGQgc29tZSB0ZXh0IGhlcmUgcmVjb21tZW5kaW5nIHRoZSB1 c2Ugb2YgSFRUUFMgVVJJcyB0aGF0IGhhdmUgbm8gVExTIHZlcmlmaWNhdGlvbiBpc3N1ZXMgb3Zl ciBvbmVzIHRoYXQgZG8gLSBhdCB0aGlzIHBvaW50IEkgYW0gbm90IHN1cmUgdGhhdCB0aGlzIGlz IG5lZWRlZCwgb3Igd291bGQgbmVlZCB0byBiZSBub3JtYXRpdmUgdGV4dCwgYnV0IEkgdGhpbmsg aXQgd291bGQgYmUgZ29vZCB0byBoYXZlIHNvbWUgZGlzY3Vzc2lvbiBvbiB0aGlzLg0KICAgIA0K ICAgIEZvciB0aGUgcmVjb3JkLCBJIGFtIG5vdCBzdXJlIHdoYXQgaXMgY3VzdG9tYXJ5IGluIHRo ZXNlIGNhc2VzIG9mIHJlbGF0aXZlbHkgc21hbGwgdXBkYXRlcyB0byBleGlzdGluZyBzdGFuZGFy ZHMuIEJ1dCwgSSB0cmllZCB0byBhcHByb2FjaCB0aGUgb3RoZXIgYXV0aG9ycyBvZiBSRkM3NzMw IChHZW9yZ2UgaXMgYWxyZWFkeSBvbmUgb2YgdGhlbSkgYW5kIGFzayB0aGVtIHdoZXRoZXIgdGhl eSB3YW50IHRvIHJlbWFpbiBhdXRob3JzIG9uIHRoaXMgbmV3IGRvY3VtZW50LiBHZW9mZiBIdXN0 b24gaW5kaWNhdGVkIHRoYXQgaGUgZG9lcyBub3QgbmVlZCB0byBiZSBvbiB0aGUgbGlzdCwgYnV0 IGhhcyBubyBvYmplY3Rpb25zIHRvIHVzIGRvaW5nIHRoaXMgd29yay4gSSBoYXZlIG5vdCBzZWVu IHJlc3BvbnNlcyBmcm9tIFNhbSBXZWlsZXIgb3IgU3RlcGhlbiBLZW50IC0gaXQgaXMgYWxzbyBw b3NzaWJsZSB0aGF0IHRoZXkgbWlzc2VkIG15IG1lc3NhZ2UuIEluIGFueSBjYXNlIHdlIGhhdmUg bm8gb2JqZWN0aW9ucyBpZiB0aGV5IGRvIHdpc2ggdG8gc3RheSBvbiBhcyBhdXRob3JzLCBidXQg Zm9yIG5vdyB0aGV5IGFyZSBub3Qgb24gdGhlIGxpc3Qgb2YgdGhlIGRvY3VtZW50IGxpbmtlZCBh Ym92ZS4NCiAgICANCiAgICBLaW5kIHJlZ2FyZHMsDQogICAgDQogICAgVGltIA0KICAgIA0KICAg IA0KICAgIA0KICAgIA0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQogICAgU2lkcm9wcyBtYWlsaW5nIGxpc3QNCiAgICBTaWRyb3BzQGlldGYub3Jn DQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zaWRyb3BzDQogICAg DQoNCg== From nobody Thu Nov 30 05:39:45 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C083D129477 for ; Thu, 30 Nov 2017 05:39:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5KlQov3lAHvw for ; Thu, 30 Nov 2017 05:39:42 -0800 (PST) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CAB5F1293F4 for ; Thu, 30 Nov 2017 05:39:41 -0800 (PST) Received: from nene.ripe.net ([193.0.23.10]) by molamola.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eKP3y-0004o8-QN; Thu, 30 Nov 2017 14:39:39 +0100 Received: from sslvpn.ripe.net ([193.0.20.230] helo=vpn-244.ripe.net) by nene.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eKP3y-0008MQ-Ml; Thu, 30 Nov 2017 14:39:38 +0100 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Tim Bruijnzeels In-Reply-To: <2545F8AE-022A-4824-9F55-A589144BFAA9@cisco.com> Date: Thu, 30 Nov 2017 14:39:38 +0100 Cc: "sidrops@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <46E0012D-27D6-4D9E-B6EB-16074DF18A9F@ripe.net> References: <56EB3EEC-A49A-41FE-84FD-42DEF814D333@ripe.net> <2545F8AE-022A-4824-9F55-A589144BFAA9@cisco.com> To: "Roque Gagliano (rogaglia)" X-Mailer: Apple Mail (2.3273) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ------- X-RIPE-Spam-Report: Spam Total Points: -7.5 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a071982f2358f848e6f35e3390d86cf861491 Archived-At: Subject: Re: [Sidrops] Document on HTTPS on TALs (update to RFC7730) - seeking adoption X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 13:39:44 -0000 > On 30 Nov 2017, at 14:31, Roque Gagliano (rogaglia) = wrote: >=20 > Hi Tim, >=20 > Not sure I understand why you are =E2=80=9Cupdates=E2=80=9D RFC 7730 = and not =E2=80=9Cobsoletes=E2=80=9D RFC7730. Could you please elaborate = on this decision? I believe you=E2=80=99re right and it should indeed say =E2=80=98obsoletes= =E2=80=99 - as in replaces - rather than updates (parts) of it. That = said, most of the text is a straight copy of the text in 7730. Tim >=20 > Regards, > Roque >=20 >=20 > On 30/11/17 14:02, "Sidrops on behalf of Tim Bruijnzeels" = wrote: >=20 > Dear working group, >=20 > As discussed at IETF99, and in informal talks with some of you, we = would like to update the TAL format (RFC7730) to allow HTTPS. >=20 > I worked with George Michaelson on an update. Because RFC7730 = contains quite a few references to =E2=80=98rsync=E2=80=99 we felt that = a new document updating 7730 would be more readable and appropriate then = document updating many small bits of text. The -00 version of this = document is here: = https://tools.ietf.org/id/draft-tbruijnzeels-sidrops-https-tal-00.txt >=20 > We would like to ask the co-chairs to make a call to the working = group for adoption. >=20 > In short this update will allow the use of HTTPS instead of, or in = addition to, rsync on TALs. Other than that it contains a section on TLS = verification similar to the one that is included in the delta protocol = (RFC8182) - essentially saying that TLS verification is done on a best = effort basis - and warnings should be uttered in case of issues - but = because the TA certificate can still be validated cryptographically it = MUST still be downloaded. Note that it is a matter of local policy = whether an RP chooses to use different locations if they are present, = but we may want to add some text here recommending the use of HTTPS URIs = that have no TLS verification issues over ones that do - at this point I = am not sure that this is needed, or would need to be normative text, but = I think it would be good to have some discussion on this. >=20 > For the record, I am not sure what is customary in these cases of = relatively small updates to existing standards. But, I tried to approach = the other authors of RFC7730 (George is already one of them) and ask = them whether they want to remain authors on this new document. Geoff = Huston indicated that he does not need to be on the list, but has no = objections to us doing this work. I have not seen responses from Sam = Weiler or Stephen Kent - it is also possible that they missed my = message. In any case we have no objections if they do wish to stay on as = authors, but for now they are not on the list of the document linked = above. >=20 > Kind regards, >=20 > Tim=20 >=20 >=20 >=20 >=20 > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops >=20 >=20 > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops From nobody Thu Nov 30 09:41:47 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD763126BF3; Thu, 30 Nov 2017 09:41:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.52 X-Spam-Level: X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4O8ePoLc_gpX; Thu, 30 Nov 2017 09:41:37 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 104AD126D85; Thu, 30 Nov 2017 09:41:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1368; q=dns/txt; s=iport; t=1512063697; x=1513273297; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Ojuc4KHC2z77yk7aH5cdzj0UwU1W726D9o5waLbOJ9M=; b=NU7IU6EKh7yauuIwOwRaR3SwYpAY+AGTNLX270w+aERjJFH9UkDLYUU9 ujZLOxsaupFL5tPwXfjm1rXP3+iL59OJQEwUFflWjW5FeUoOo86b9qLx8 C+owYDI4xA1NsSuSdJvv+AvJUq4W2iC9HrA7kfc/CJiPKhE00kl2PPFNV 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DDAABCQiBa/5JdJa1ZAxkBAQEBAQEBA?= =?us-ascii?q?QEBAQEHAQEBAQGDPIFUJweDeIogjnOBfZZ2EIIBCoU7AhqFBz8YAQEBAQEBAQE?= =?us-ascii?q?BayiFIAEEASMRRQULAgEIGgImAgICMBUQAgQOBYoaCKYIgieKZgEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAR2BD4IyggmDPymDAoRtARIBHxcKJoJOMYIyBaJbApUPgha?= =?us-ascii?q?GD4sulhgCERkBgTkBHzlhcG8VZAGBfoJSHBmBTniHS4EkgRQBAQE?= X-IronPort-AV: E=Sophos;i="5.45,341,1508803200"; d="scan'208";a="326957056" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Nov 2017 17:41:36 +0000 Received: from XCH-RTP-005.cisco.com (xch-rtp-005.cisco.com [64.101.220.145]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id vAUHfZSw030106 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 30 Nov 2017 17:41:35 GMT Received: from xch-rtp-001.cisco.com (64.101.220.141) by XCH-RTP-005.cisco.com (64.101.220.145) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 30 Nov 2017 12:41:34 -0500 Received: from xch-rtp-001.cisco.com ([64.101.220.141]) by XCH-RTP-001.cisco.com ([64.101.220.141]) with mapi id 15.00.1320.000; Thu, 30 Nov 2017 12:41:34 -0500 From: "Brian Weis (bew)" To: Chris Morrow CC: Ben Campbell , The IESG , "draft-ietf-sidrops-bgpsec-rollover@ietf.org" , "sidrops-chairs@ietf.org" , "sidrops@ietf.org" Thread-Topic: Ben Campbell's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) Thread-Index: AQHTaWpmAUJkjBCwrECjd6/vmRKNLqMsdgYAgAEP5YA= Date: Thu, 30 Nov 2017 17:41:34 +0000 Message-ID: <01E649C2-BA63-45F6-87BD-FE448BDC270B@cisco.com> References: <151199837926.4902.900040686839421737.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.19.191.163] Content-Type: text/plain; charset="utf-8" Content-ID: <09B6CD4B0BE7564D934FF9D752F48456@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] Ben Campbell's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 17:41:39 -0000 SGkgQ2hyaXMsDQoNCj4gT24gTm92IDI5LCAyMDE3LCBhdCA1OjI4IFBNLCBDaHJpcyBNb3Jyb3cg PG1vcnJvd2NAb3BzLW5ldG1hbi5uZXQ+IHdyb3RlOg0KDQpbc25pcF0NCg0KPj4gLS0tLS0tDQo+ PiANCj4+IERpZCB0aGUgd29ya2luZyBncm91cCBjb25zaWRlciBtYWtpbmcgdGhpcyBhIEJDUD8g SXQgZGVzY3JpYmVzIG9wZXJhdGlvbmFsDQo+PiBwcmFjdGljZXMsIG5vdCBwcm90b2NvbC4NCj4+ IA0KPiANCj4gSSBkb24ndCBiZWxpZXZlIHRoZSBXRyBjb25zaWRlcmVkIEJDUCwgbm8uLi4gVGhp cyBpcyBhbiBvcHMtZ3JvdXAgc28NCj4gd2UgZG9uJ3Qgbm9ybWFsbHkgZG8gJ3Byb3RvY29sJyBj aGFuZ2VzLiBJIGFncmVlIHRoYXQgdGhpcyBzb3VuZHMgbW9yZQ0KPiBsaWtlIGEgJ2JjcCcgLi4u IFdlIGNhbiBhc2sgdGhlIGF1dGhvcnMgdGhlaXIgdGhvdWdodHMgdGhvdWdoIEkgY2FuJ3QNCj4g aW1hZ2luZSB0aGVyZSdzIG11Y2ggZGlmZmVyZW5jZSBmb3IgdGhlbSBiZXR3ZWVuIFBTIGFuZCBC Q1AsIHJpZ2h0Pw0KPiANCj4gQXV0aG9yLWZvbGtlbj8NCg0KSSBkb27igJl0IGhhdmUgYW55IG9i amVjdGlvbiB0byBtYWtpbmcgdGhpcyBhIEJDUC4gUmVtZW1iZXIsIHRoaXMgd29yayBzdGFydGVk IGluIFNJRFINCiAoaW4gdGhlIFJURyBhcmVhKSwgd2hlcmUgUFMgcHJvYmFibHkgc2VlbWVkIHRv IG1ha2UgbW9yZSBzZW5zZSBhdCB0aGUgdGltZS4NCg0KVGhhbmtzLA0KQnJpYW4NCg0KPj4gLTE6 IFRoZSBkcmFmdCBjb250YWlucyBhIG51bWJlciBvZiBpbnN0YW5jZXMgb2YgIm11c3QiIGFuZCAi c2hvdWxkIiBpbiBsb3dlcg0KPj4gY2FzZS4gSWYgdGhvc2UgYXJlIGNvcnJlY3QsIHBsZWFzZSBj b25zaWRlciB1c2luZyB0aGUgYm9pbGVycGxhdGUgZnJvbSA4MTc0Lg0KDQotLSANCkJyaWFuIFdl aXMNClNlY3VyaXR5LCBDU0csIENpc2NvIFN5c3RlbXMNClRlbGVwaG9uZTogKzEgNDA4IDUyNiA0 Nzk2DQpFbWFpbDogYmV3QGNpc2NvLmNvbQ0KDQo= From nobody Thu Nov 30 10:52:27 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC14A129447 for ; Thu, 30 Nov 2017 10:52:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZXlV6M8e20JB for ; Thu, 30 Nov 2017 10:52:22 -0800 (PST) Received: from mail-wr0-x22f.google.com (mail-wr0-x22f.google.com [IPv6:2a00:1450:400c:c0c::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54D84128E19 for ; Thu, 30 Nov 2017 10:52:22 -0800 (PST) Received: by mail-wr0-x22f.google.com with SMTP id h1so7623255wre.12 for ; Thu, 30 Nov 2017 10:52:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=BozogL5Rx132wZsecnlKxjtFa/YDdtiSFdtEv0kFTjs=; b=XJFMzXAHK+BmhKBmvYxEquJ3eeLMHbprqkiRnpeRXyRsFaGWBo7S8eJy/yB0YF8/WR nJl1YuDrpHMZd9p/pwF+6XXLKWEOamoae/9600gFR7PEO8HSxBSzwQjvzqq4FBA2gP+8 k6pqVjz0P039BJdiKzAO2qodozBILChsiOpSbAXOdffjVKN4OoiDSUaEmN2H28fJ5SXC qjAvysHdymaq2ytiSauagSrK8PaCu8wRamRLrDg1pg2XOQNzUJ+jW1lOElPa4qfAhLk1 gRfSHLW+RABBa94/SYC8RXhB3H9Xz1BQV2e/wZ6IUgl+o7Y+bwNeSM0e1alumIOr5W2i vwYg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=BozogL5Rx132wZsecnlKxjtFa/YDdtiSFdtEv0kFTjs=; b=bCqvyP9EMVGQpz3uesKYDE29ACvMCAznrwr8S4c/R3o/XwI/B/WFJwXXEcDwfdG/cC u5ukmMd2N02tGG3pq1FdBQE4Y7BIjNCXvJnnuOxBWFD7T3qVmiBsTdB6QUnGJ9dy8uu6 5BkjXk8EzZVEVeRs3bQC01Z5r1zL+r7fiB0xUNVoW6ErLkPdAg5vNIiF7YW4s3c81WG5 GFuZ2TgHWiHDhahchVQJOL7Ucsp1shLL/9GlsVEJ4YCh7hzyp4uyNTnYFA8D3pV/EG0N CQZON5T12UjeXAUKBaZx4tpYT9O7EBGzt1Q+YzIFeNX96KPRLNdAs0f/gzH8aqSqktxj E9HA== X-Gm-Message-State: AJaThX4V91XM5SrvUlYXdV07VE70QNFvYjQiTLRnd0J2BLzX+ciXe6Ol bRStsHU6/APvRAVs1MXvjqPbq2ivp9WeqeSdelOvTA== X-Google-Smtp-Source: AGs4zMblAyEu9F4nQk9UV54O7QmegjEWgHpWcJWpS2H1A4sqT0aQWk+zZb0lF3o9jViDmnDL+Zcn0txpw+wlXr737vk= X-Received: by 10.223.135.243 with SMTP id c48mr2649260wrc.140.1512067940355; Thu, 30 Nov 2017 10:52:20 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.160.149 with HTTP; Thu, 30 Nov 2017 10:51:39 -0800 (PST) In-Reply-To: References: <151199837926.4902.900040686839421737.idtracker@ietfa.amsl.com> From: Warren Kumari Date: Thu, 30 Nov 2017 13:51:39 -0500 Message-ID: To: Chris Morrow Cc: Ben Campbell , sidrops-chairs@ietf.org, sidrops@ietf.org, draft-ietf-sidrops-bgpsec-rollover@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Sidrops] Ben Campbell's No Objection on draft-ietf-sidrops-bgpsec-rollover-03: (with COMMENT) X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2017 18:52:25 -0000 [ - IESG, for clutter ] Hi all, This document is approved, but, as can be seen from the IESG evaluation on this document ( https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ballot/ ) , there was a view that this is more of a BCP document - I agree with this, but could be convinced otherwise. The IESG has agreed to let me poll the WG / chairs / authors to get the WG's view, and make a decision from there. The chairs and authors seem fine with BCP, but I wanted to give the WG a chance to provide input. So, the current plan is to reclassify this as BCP; if you strongly feel that PS (the current state) is more correct, please let me know by this Wednesday (December 6th). Just for completeness, neither of the above needs process wonkery (it was eval'ed as PS, BCP is at the same level, etc). Also, this is the only question on the table (no re-litigating other issues). Thanks, W On Wed, Nov 29, 2017 at 8:28 PM, Chris Morrow wrote: > > Hey ben! > thanks for reading :) and reviewing... a bit more below. > > On Wed, 29 Nov 2017 18:32:59 -0500, > Ben Campbell wrote: >> >> Ben Campbell has entered the following ballot position for >> draft-ietf-sidrops-bgpsec-rollover-03: No Objection >> >> When responding, please keep the subject line intact and reply to all >> email addresses included in the To and CC lines. (Feel free to cut this >> introductory paragraph, however.) >> >> >> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html >> for more information about IESG DISCUSS and COMMENT positions. >> >> >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-sidrops-bgpsec-rollover/ >> >> >> >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >> >> Did the working group consider making this a BCP? It describes operational >> practices, not protocol. >> > > I don't believe the WG considered BCP, no... This is an ops-group so > we don't normally do 'protocol' changes. I agree that this sounds more > like a 'bcp' ... We can ask the authors their thoughts though I can't > imagine there's much difference for them between PS and BCP, right? > > Author-folken? > >> -1: The draft contains a number of instances of "must" and "should" in lower >> case. If those are correct, please consider using the boilerplate from 8174. > > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf