Re: [Curdle] FW: I-D Action: draft-ietf-curdle-rc4-die-die-die-03.txt

"Mark D. Baushke" <mdb@juniper.net> Mon, 11 December 2017 07:36 UTC

Return-Path: <mdb@juniper.net>
X-Original-To: curdle@ietfa.amsl.com
Delivered-To: curdle@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4993C127ABE for <curdle@ietfa.amsl.com>; Sun, 10 Dec 2017 23:36:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kN3Z9ulESl6R for <curdle@ietfa.amsl.com>; Sun, 10 Dec 2017 23:36:35 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A18D3127978 for <curdle@ietf.org>; Sun, 10 Dec 2017 23:36:35 -0800 (PST)
Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.21/8.16.0.21) with SMTP id vBB7Y9CE023195; Sun, 10 Dec 2017 23:36:34 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=to : cc : subject : in-reply-to : references : from : date : message-id : sender : mime-version : content-type; s=PPS1017; bh=IRTgFkf9TUJu4WfxVs8Kc/Df90qqnjegGR+Nlt6Xzbw=; b=hNtXWzgWFzDz7sRi8e8TjOJiVV3etgVsIFb1gwv/IBFPYitFT3fPLueo1SG0SALq6LHz YXloW2oDUBZBDHCjc4DQKjhJXtU/yS3PcPnFGJ2u3qgwtbxt1LmmU4Vs3U4wKC/77w1R uCG3DDp/s9LNfTRvxEk8u6la0REdJMHkskrflZXtzCcd82pr9/RerGIKPkDLGwgmu02Z /fw9sprs73Eau9uzMbndTQR1TW+5PZ9KwnT5RWs8Vr/7a+DksG6i5PefQlLum5onPjQ1 aTSllNpTH/XFoUZBP6tOi0MJzLXcp0+HkJFDwsAjyr3WuSZnn7EcTV0nFx1Vaqfrsa67 hw==
Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0176.outbound.protection.outlook.com [216.32.181.176]) by mx0b-00273201.pphosted.com with ESMTP id 2esmd3r4r4-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Sun, 10 Dec 2017 23:36:33 -0800
Received: from CO2PR05CA0106.namprd05.prod.outlook.com (10.165.92.32) by SN1PR0501MB2080.namprd05.prod.outlook.com (10.163.227.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.323.4; Mon, 11 Dec 2017 07:36:31 +0000
Received: from BY2NAM05FT004.eop-nam05.prod.protection.outlook.com (2a01:111:f400:7e52::206) by CO2PR05CA0106.outlook.office365.com (2603:10b6:104:1::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.323.4 via Frontend Transport; Mon, 11 Dec 2017 07:36:31 +0000
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.12 as permitted sender)
Received: from p-emfe01a-sac.jnpr.net (66.129.239.12) by BY2NAM05FT004.mail.protection.outlook.com (10.152.100.141) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256) id 15.20.302.6 via Frontend Transport; Mon, 11 Dec 2017 07:36:30 +0000
Received: from p-mailhub01.juniper.net (10.47.226.20) by p-emfe01a-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Sun, 10 Dec 2017 23:36:24 -0800
Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [172.17.28.114]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id vBB7aNBQ028796; Sun, 10 Dec 2017 23:36:23 -0800 (envelope-from mdb@juniper.net)
Received: from eng-mail01.juniper.net (localhost [127.0.0.1]) by eng-mail01.juniper.net (Postfix) with ESMTP id 909AC1141B; Sun, 10 Dec 2017 23:36:22 -0800 (PST)
To: "Salz, Rich" <rsalz@akamai.com>
CC: "curdle@ietf.org" <curdle@ietf.org>
In-Reply-To: <15C5FA9C-DCC9-4C39-B102-47B4618259E4@akamai.com>
References: <151285096101.24658.6833692177897273472@ietfa.amsl.com> <15C5FA9C-DCC9-4C39-B102-47B4618259E4@akamai.com>
Comments: In-reply-to: "Salz, Rich" <rsalz@akamai.com> message dated "Sun, 10 Dec 2017 20:42:51 +0000."
From: "Mark D. Baushke" <mdb@juniper.net>
Date: Sun, 10 Dec 2017 23:36:22 -0800
Message-ID: <93673.1512977782@eng-mail01.juniper.net>
Sender: mdb@juniper.net
MIME-Version: 1.0
Content-Type: text/plain
X-EOPAttributedMessage: 0
X-MS-Office365-Filtering-HT: Tenant
X-Forefront-Antispam-Report: CIP:66.129.239.12; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(376002)(39860400002)(346002)(2980300002)(189003)(199004)(5660300001)(53936002)(105596002)(478600001)(69596002)(6392003)(7846003)(4326008)(97876018)(106466001)(6266002)(6246003)(8936002)(81166006)(81156014)(8676002)(558084003)(86362001)(2810700001)(7126002)(356003)(305945005)(48376002)(316002)(2906002)(47776003)(230783001)(53416004)(97736004)(117636001)(16586007)(229853002)(68736007)(77096006)(55016002)(7696005)(51416003)(76506005)(50466002)(6916009)(2950100002)(76176011)(4743002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR0501MB2080; H:p-emfe01a-sac.jnpr.net; FPR:; SPF:SoftFail; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; BY2NAM05FT004; 1:663Nmtp+9dxrLTdqgMpf92DRxiZOlUBqNtiZg/SNFcdjlKpEaFAd4ifPcNXd//HvtEkoMI1dIL1+eFq1Bure7VFKruyYaxR00dRy3V3W7IUhQBNXOK0cAOtfCLo1zw74
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: db30bbe8-a40d-4b5f-ea81-08d54069e57d
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(5600026)(4604075)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603307); SRVR:SN1PR0501MB2080;
X-Microsoft-Exchange-Diagnostics: 1; SN1PR0501MB2080; 3:5c3PLCp+oee+xyX4I8VMZA2LuNremJCeI8q9efqzTUU/nzGBppmiu1ttGTTfg9p8uVu4tk7qhhEsOHJ2N3mtBjBzIyZ34CjdG9ziw47HH9tQlkkhDspxzc1YpE3ACjWXCUlLX/5XLxvi3XXr9DvBUTeItMAdpygnfBYLNZeDHfcvE/v0DiFhc4EvOifCw3NWuUzICnv/LoG8pZRHHDLbBOrCMYD4mxtxnUezwU4LDKctDiGswRQBjuo5+pj4XDQoffd+GLoHXNkG9+xQwR62uX8wZpAwQJ46z9TMRoKnKfpDm446dkKqOeTHvIT9fELVmA141pUuB8ulF5wJl9/PsWfoLlIkm8D3g1X5nYyfyvU=; 25:A8Ye2fyqPCDinX7HJic94BVNvaz1eXLrsxU55F+3eSvoPYduqvbqN9AopYO+xxL7xDaVlu20Q+4ZxLlrj3kgDiTFXeuL3WaHKD0LV9kuzmcxZ4zEfnPF1Ej1E8uzauTBjcy4W0Sh/TIMfJ+N45FWQ2W2HU+FesPUkaA3sWHIZZh66jIV35tm7pF+KEwhNBZaKc/i9epuv20GH7zX/NpvqKPKYWL73ISVJm7yTQEc9iVDIFFvn4emL5rpH/N3jw+fgfkIjGHi7F7yzZ1htSX0B6IgFQGtxC42SQc/mTY8o3u69Oyiba7tF2Khuk3dFh81zkF1hK9coX6wC+zSVFdBiA==
X-MS-TrafficTypeDiagnostic: SN1PR0501MB2080:
X-Microsoft-Exchange-Diagnostics: 1; SN1PR0501MB2080; 31:b1VEJoreXjE1jnnTZY0yCVrt4iTnkPl+PdfieCzm9jaDObFy5krY3FAYM4biM4oHWfpQ5aHUfwpaNwMGx69kebSyatTy4YJXQj4/BRYrhXuea/83LTRkmYc1gaekXj00yMkidaILODKtpQVHFaqvtLLja8/nqaKH2BO9WgOgaEwgDKVmhpGhqizHm7HLf80ixqnnqVs9CDK6Z/MzB/Zv6Em7eJ1HNKge9N/iS/olQhk=; 20:un0+taXalnePk7/C4NDfKAjLyZoTbABJILV8zHOIwMizmQ2b36ftcn1AOXQhwOS3VNzY2V+yqO9jJHT8oKqNaX3DY6sNaOBvR55uaIalYXN+9fnQF3+vdP7tJV1aemXHznLZQLayrwDUuV6E9YX1iGHNBK/8CVDU8ERIMIeRf0EFODDtNXnQc6f30BfqOnBt0Hcx0HGBDvnFxg7htoGZkLrbqqK/cjFQfGoJuIhqu6OKsdUSLMdFoacUZIhtAV4i2OQeXp5qPac2BDyUFlEZIOHt8wn9M/h04gu/1sQ6Vi6zUOKZMMiDhFQO83zfy6p3B/AyllToiHQDPhR/X8llbkEGXd4v9q2bgLGxnubBB4J/HhAGf2igbQrqyVjQyyQVy/qC6pNt8agHb1NJz1+BzNaiUp5VWa2eihZ5FHA21/TbvgNyfbzQ5QlDRlStG7E9eqPoWriz5R3BvCHtbEcbED++9s8bI9VvkgKndb5E/Cqec8BWoA2Kcf57rak0v076
X-Microsoft-Antispam-PRVS: <SN1PR0501MB20802A416C2F19E82F352083BF370@SN1PR0501MB2080.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(2401047)(8121501046)(5005006)(93006095)(93003095)(3002001)(10201501046)(3231022)(6055026)(6041248)(20161123562025)(20161123564025)(20161123560025)(20161123555025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:SN1PR0501MB2080; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:SN1PR0501MB2080;
X-Microsoft-Exchange-Diagnostics: 1; SN1PR0501MB2080; 4:phnV8xjQwG1vmlqe8k8V3J8nG4fOxJBydPl7KXdwVQtz8SU1j6FYgn4xHmJwcuU+9k/c+POeffir7UMX/TM3JYfXaRYgdOORZ2fZo/mu1r1wyrEiMTip3dL+Fl2Ib0gFWRcPULyx1ipZRqs6Ri1o/IWLWbAnQxLoBff30lcusr620uXylwOb4f0iRTNoeMc+2IYqpEMQu9LJ528dlL4AuocRpUG8f99Iq2LD5REZKsWvHnCwp5IWPH/1YAhj5dzu9hpO/8w+lUfYPfMGa71+dw==
X-Forefront-PRVS: 0518EEFB48
X-Microsoft-Exchange-Diagnostics: 1; SN1PR0501MB2080; 23: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
X-Microsoft-Exchange-Diagnostics: 1; SN1PR0501MB2080; 6:UjVwcXzuzAndvdBVlNGrXRKAn+O9JdcXgACtMVAm6vAjoU3cZ3tiL/+UUdzH2q1sw1vXnkdXsF3svIOLqMvQviwMuIcntcljANkpu2avEwYA6J4VVdddplbe9avuAlvjlmimvWm+zIJQkID/6P3PKXE2b1pmLxgU7ZPOlRxiufpvSjpfWkPUHohmyRwaYkgzTSs2zfqK0zJmgmR67tE0ZFwiH+oX2Omk/ktdgh7zTWUMQK+VJeopEPadTjcHKKvvhgkadWLxwa81DpSD49EXYlOwUZ0KVQkRelvwsbCCKawkCuSElCj9UQjqHWpJNpnoTO7qM9xXFfbgC45cFfR8jRZf8IN0zB0wF/0GmlPZR6k=; 5:9P4cqSDlAlLaxYZk8skdE/UbX+Rr8r3x5SuvWGX59U7wOl0fB2mdfSSZbExjLTnW9xHjYCUUiv+Lt1SLpBkw0CzCsQPt0eV1w254EvNJhbnSy9Ex9wxQBDleXSK+s1ui6sMgzXz4/hIpfIoWWBVc8wTKgJ1RtihudnoaofdY90I=; 24:vwGYS5BJ8QsiW91arRDJyasoSjwrIpx/Vop650aKogGYIhoXAJCQHqWAOVvA6udv80/FJMdDDC15eNIesiqQovzI+Oz1fCxWd4lTnwLOyXk=; 7:H5S0bD6b2XDeYL0iVEGWCYoChifPpIbJTEigtZ9mNNHhqWXVH0VNXgeUyUIAOl2o58DoL9qodM9EkWOMNws1CNV1JJlDnVL7X5jwMzzFFW4zJdfDmY2wM0ePl2qKBbwxiNSAEcsJ7JzYg79zwA49P+Hl5Hxo2ISvJGSHyoEeB88YlAWjHf5RIyINI6LKukbYxT6MPheSFNzBYmU8nMDwxczVD1bw0x2CFo9YLKL3yxnZwni+F9T1GRB0xpEn6TVT
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Dec 2017 07:36:30.1583 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: db30bbe8-a40d-4b5f-ea81-08d54069e57d
X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.12]; Helo=[p-emfe01a-sac.jnpr.net]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR0501MB2080
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-12-11_03:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=1 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=768 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1712110117
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/v40-Y0R20F6DrDBWbRfZnNGQHWE>
Subject: Re: [Curdle] FW: I-D Action: draft-ietf-curdle-rc4-die-die-die-03.txt
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Dec 2017 07:36:37 -0000

For what it is worth, I would like to see SSH use of arcfour in RFC4253
and arcfour128 and arcfour256 in rfc4345 deprecated.

I do not know if this needs to be a separate document or not, but I
think the CURdle WG changes to SSH are in scope.

	-- Mark