IETF Logo Mail Archive

Re: [Add] Participation

"Smith, Kevin, Vodafone Group" <Kevin.Smith@vodafone.com> Wed, 21 August 2019 16:50 UTC

Return-Path: <Kevin.Smith@vodafone.com>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A84E6120C19 for <add@ietfa.amsl.com>; Wed, 21 Aug 2019 09:50:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zVtPzxA8NgGj for <add@ietfa.amsl.com>; Wed, 21 Aug 2019 09:50:02 -0700 (PDT)
Received: from mail1.bemta26.messagelabs.com (mail1.bemta26.messagelabs.com [85.158.142.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AC25120C05 for <add@ietf.org>; Wed, 21 Aug 2019 09:50:02 -0700 (PDT)
Received: from [85.158.142.103] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits)) by server-1.bemta.az-a.eu-central-1.aws.symcld.net id 5B/F4-16636-7367D5D5; Wed, 21 Aug 2019 16:49:59 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrGJsWRWlGSWpSXmKPExsWi75kzV9e8LDb W4OB6WYv/p9exOTB6LFnykymAMYo1My8pvyKBNeP+rgbGgnfsFb/nLGBrYNzG1sXIxSEksJ1R YsWEyawQzmFGidUv5zDBZW7uPAjlXGSU+LH3HFRZP5PEgzvfoZz7jBKnZu1i72Lk5GATsJe4t O4FK4gtIqAo0bjxDiOILQxk/1v7iAkiriYx79MtqBo9iXcvZ7KB2CwCqhI77v8Dq+EViJFY8n I3mM0oICvxpXE1M4jNLCAucevJfLC4hICAxJI955khbFGJl4//sUL0PmSR+LK/CKI3SmLnsw4 2iBoFifkLTkL1ykpcmt/NCGH7Sqy8fokd5BkJgZuMEouOf2KBSGhJdLefYYewsyVeflsE1aAm ceNNB9RiGYn2zztYIexmNomD6y1AbCGBFIm5G7dB9cpJrOp9yAKx4DyzxK7HV4EGcQA5KhL/D lVOYDSYheQ3CFtHYsHuT2wQtrbEsoWvmWeB/SYocXLmE5YFjCyrGC2TijLTM0pyEzNzdA0NDH QNDY11waReYpVuol5qqW5yal5JUSJQVi+xvFivuDI3OSdFLy+1ZBMjMMmkFDIU7mD8MOuN3iF GSQ4mJVHeKamxsUJ8SfkplRmJxRnxRaU5qcWHGGU4OJQkeONLgXKCRanpqRVpmTnAhAeTluDg URLh3V0ClOYtLkjMLc5Mh0idYtTlmPBy7iJmIZa8/LxUKXHeQpAZAiBFGaV5cCNgyfcSo6yUM C8jAwODEE9BalFuZgmq/CtGcQ5GJWHezyCreDLzSuA2vQI6ggnkiMORIEeUJCKkpBqYOv/3FZ 5TXtKhWLHsYtwNBX3TpzOnbhI5mL/s+/pDv3wiTsfunny4w2zWjuOdPM59gqvslwtZWBbsMuu X5c2dOUtFpLCtYmfLt2/qbtart58J0nsasrzn3fLUEwo7xN78cBZ+IKKg8U5SzTTt49TIF58E SnwvbTD58CSjeKvLTlX/qKtf7hbcSjdl89irFS6b410970pivV7Vb3ubsLN/Z7gxxrlfucKb8 njT85COhx8Zzq70UX9z7KK/RoXGnqPqU5iPz3TW01vZHeFZUi8/rWvmUgcbiXtXti2+dvPU5/ ky/d5Bfy81sx8/+GMDj8DVtih/f89H63bdqEpb/SuE5bHAkum3WNXZZjCH+9SLK7EUZyQaajE XFScCANIEid85BAAA
X-Env-Sender: Kevin.Smith@vodafone.com
X-Msg-Ref: server-8.tower-228.messagelabs.com!1566406198!64985!2
X-Originating-IP: [47.73.108.157]
X-SYMC-ESS-Client-Auth: outbound-route-from=pass
X-StarScan-Received:
X-StarScan-Version: 9.43.9; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 23931 invoked from network); 21 Aug 2019 16:49:59 -0000
Received: from vgdpm15vr.vodafone.com (HELO voxe01hw.internal.vodafone.com) (47.73.108.157) by server-8.tower-228.messagelabs.com with AES256-SHA256 encrypted SMTP; 21 Aug 2019 16:49:59 -0000
Received: from VOEXH07W.internal.vodafone.com (47.73.211.205) by edge1.vodafone.com (195.232.244.46) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 21 Aug 2019 18:49:58 +0200
Received: from voxe03hw.internal.vodafone.com (195.232.244.48) by VOEXH07W.internal.vodafone.com (47.73.211.205) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 21 Aug 2019 18:49:58 +0200
Received: from VOEXH11W.internal.vodafone.com (47.73.211.209) by edge1.vodafone.com (195.232.244.48) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 21 Aug 2019 18:49:58 +0200
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (172.17.213.41) by VOEXH11W.internal.vodafone.com (47.73.211.215) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 21 Aug 2019 18:49:58 +0200
Received: from AM6PR05MB5861.eurprd05.prod.outlook.com (20.179.3.87) by AM6PR05MB5255.eurprd05.prod.outlook.com (20.177.196.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Wed, 21 Aug 2019 16:49:57 +0000
Received: from AM6PR05MB5861.eurprd05.prod.outlook.com ([fe80::f096:d9cb:634d:57c8]) by AM6PR05MB5861.eurprd05.prod.outlook.com ([fe80::f096:d9cb:634d:57c8%3]) with mapi id 15.20.2178.020; Wed, 21 Aug 2019 16:49:57 +0000
From: "Smith, Kevin, Vodafone Group" <Kevin.Smith@vodafone.com>
To: "add@ietf.org" <add@ietf.org>
Thread-Topic: Re: [Add] Participation
Thread-Index: AdVYP+NHXrZ4SZ1vRB6kelNmi+FQDA==
Date: Wed, 21 Aug 2019 16:49:57 +0000
Message-ID: <AM6PR05MB586171EB27FA79AB6900C34B91AA0@AM6PR05MB5861.eurprd05.prod.outlook.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_Enabled=True; MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_SiteId=68283f3b-8487-4c86-adb3-a5228f18b893; MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_Owner=Kevin.Smith@vodafone.com; MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_SetDate=2019-08-21T16:49:55.4813793Z; MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_Name=C2 General; MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_Application=Microsoft Azure Information Protection; MSIP_Label_0359f705-2ba0-454b-9cfc-6ce5bcaac040_Extended_MSFT_Method=Automatic; Sensitivity=C2 General
x-originating-ip: [47.73.248.47]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: efb16a06-eef8-44bc-f550-08d726579948
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:AM6PR05MB5255;
x-ms-traffictypediagnostic: AM6PR05MB5255:
x-microsoft-antispam-prvs: <AM6PR05MB5255876FDACD45C8A204622691AA0@AM6PR05MB5255.eurprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0136C1DDA4
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(346002)(136003)(396003)(39860400002)(366004)(189003)(199004)(53754006)(86362001)(99286004)(52536014)(6916009)(229853002)(316002)(33656002)(66066001)(6436002)(55016002)(9686003)(7696005)(4744005)(14454004)(66574012)(71200400001)(71190400001)(478600001)(102836004)(186003)(26005)(6506007)(305945005)(2351001)(74316002)(14444005)(256004)(8676002)(1730700003)(81156014)(81166006)(6116002)(2906002)(3846002)(53936002)(6246003)(4743002)(2501003)(76116006)(66446008)(64756008)(486006)(5660300002)(7736002)(5640700003)(66476007)(66946007)(8936002)(66556008)(476003)(25786009); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR05MB5255; H:AM6PR05MB5861.eurprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: vodafone.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: uvBGnvGYkorIqYvAqmNy4/JZKy/tWblO+uToCs5scOfwmLeoMbxpmti6fiTT7wUcRURWYNE26J77Pb1ISrUH2abqg4ljyLLHpOM5ZidnowRiLoI3IfBRfki+GjM11mgpK+4dfR0yeMNDLOqN8kUV9DjsW2qMPf/465b8HOa4tzmRKfbwHQT21wqbxkeU4L0QWC5XHDISuY29Ojp/gwdQNXoeQpU2xz9MWudzN6SbfykmlJlq8Xy6sGAOImfwkEiqU0Uygrt7iDEUCIiIK2RQWiQr8SWeVYAvmD6b9HCp9VZ96n3+91iAqO8fH3Wp/ic41gUi7ubOgrfbxyoXP1atBN2NGderUu/GkLJShJdD03gw7k742fIYTJa2BR3924Mt9mL6iKfpWk1CeivACqBilLuhn/28YS0+THF/+HsFyQc=
x-ms-exchange-transport-forked: True
arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gCZSbjp3rMsLXjZzrAvVhXUI/ub63+p3RGwhkNrfbkX3R0t4SHvnZs2IKI/fly1b17nU3Sa5xTw76h5jLGMnK40R+QFglGZyyM7XOrNZtU76NZ8+JDFgQk8dcZWQ+qylv+76OFy7SNlEbhrIV6CUqGwcyjCY8J653fFDc4z+S0PTOc/MPjmwjVPm2fqa05XaSKVQ2VExpGg5X3x9BYl5BpLcK36uYKCd1K8UCNHtwfQOUVjF7kvwyIfMyvtN2pyCk4e6fD+jKyZ12q64Jn6YaJVNJanTvGrvyyRn5etunrsi8zTdGG+6O/KEHk/4mQ2IGGOhVg4pMMV9r0hW+KJhyg==
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3NguhEMoKiVJyp3+3CFF9HNpbgSqbgtH3OOSyDjrT4A=; b=mgD33w9J636dyU5deyuEM6HRfyC6FNBiwRS9nQ/lGMmVEwbX//9dPfhIrzdBKTZX3HdoOmBpjQTpg4ZfZzpt1wGrEcmHpMwYp8DtUFQ+xpyhkx3y3kB9TDVOi++Y9LlgpOk5bUwCnok0oMtpfLPkbuleA0+1pofwWV6Bq1cf57yvqDECMligIZrqHS/lr9eXGVMp0wxQUtpA9T0G8gExTOI/3OwyVFyHlUqnQ5xtz94gdjcasNYymNlfNb9bB10QUjvPv6VOPeM7JQHR3160PD4Z8oyaGmIqY6Bkkmy3Jd/Xg32juUPi/7gQKonGw2arbyMEtUqSIxPtu/IzpIGSTA==
arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vodafone.com; dmarc=pass action=none header.from=vodafone.com; dkim=pass header.d=vodafone.com; arc=none
x-ms-exchange-crosstenant-network-message-id: efb16a06-eef8-44bc-f550-08d726579948
x-ms-exchange-crosstenant-originalarrivaltime: 21 Aug 2019 16:49:57.0920 (UTC)
x-ms-exchange-crosstenant-fromentityheader: Hosted
x-ms-exchange-crosstenant-id: 68283f3b-8487-4c86-adb3-a5228f18b893
x-ms-exchange-crosstenant-mailboxtype: HOSTED
x-ms-exchange-crosstenant-userprincipalname: 16eP18jVwGPiimKxtozp6Emt8b1Hz/fN1nJu9FH077qOCYuqgcRv7ICeAn+kwJPGqYrA1AhoL4kdcR7z3zquY8Uj4YrqYuXf1nEGrxEdwes=
x-ms-exchange-transport-crosstenantheadersstamped: AM6PR05MB5255
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: vodafone.com
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/d0yWZBlkPfEcDg6Y2SeYgAuG8JI>
Subject: Re: [Add] Participation
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Aug 2019 16:50:05 -0000

Hello all,

I've confirmed with Vodafone UK's network and home broadband teams that they do not perform HTTPS interception/Man in the Middle.

The imgur issue is the result of DNS 53-based filtering. The error appears that the Vodafone root certificate (used to secure the user's configuration channel to the home router) was also used when the request was redirected to the secure 'warning page'  at the network proxy, apparently causing the browser to prompt 'add certificate to exception list'. The imgur issue was from January, the fix has been rolled out and I'm told that this certificate error should not happen anymore.

The NordVPN issue appears to be a user with content controls enabled at the router, which as I understand it may block certain VPNs based on DNS 53. I suspect they would simply disable the content controls to solve this.

So to confirm: no HTTPS interception/Man in the Middle in Vodafone UK.

All best,
Kevin

Mr Kevin Smith
Vodafone Group R&D



C2 General

v2.46.0 | Report a Bug | By Email | System Status