Re: [mile] I-D Action: draft-ietf-mile-iodef-guidance-11.txt

Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> Thu, 07 September 2017 17:55 UTC

Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BED96126DD9; Thu, 7 Sep 2017 10:55:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wKjeblmPAv2c; Thu, 7 Sep 2017 10:55:51 -0700 (PDT)
Received: from mail-pf0-x234.google.com (mail-pf0-x234.google.com [IPv6:2607:f8b0:400e:c00::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DAB31204DA; Thu, 7 Sep 2017 10:55:51 -0700 (PDT)
Received: by mail-pf0-x234.google.com with SMTP id e199so624208pfh.3; Thu, 07 Sep 2017 10:55:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=UOdyPnXnPQh8CAADcN0wnAjA4QwJUO8kBp9eJUA2Ra4=; b=Wtqi355ZeiAwt96VcqIgFdYS1hNkWNVN6mtxRMjVb3qHZiuSlP9vTqRca/75Vda6H8 BuVWgxJKVLfwoO1GK9jOhWD/PNOVIGWEQmJou5Vmis0I9MV5V+rjpIFJWUVJeMSKCJ1T MXBwkirHQvBedLxvbnZx/JJNMAiuqoJkCQ4yumULC838fdFE0P+c+/5Q+hCP3PBEuBbt 4On1SIdw2zVJTExPVmCkT0u+LlWrpz1vPj3hjvkZi+UXiBa2JfVBefFmSTSy3JG+knhL P+UQYdsWVIByAJprovw9vY9MEn1ACtrRFD/36wppmvS5QUlsK7+MCkNoWfnxk48YDv2e q3aw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=UOdyPnXnPQh8CAADcN0wnAjA4QwJUO8kBp9eJUA2Ra4=; b=dDioZIBVIDq/kWhRhUDCSGb61RSn22Ws2eI5C9mRQlXqZVpSSbwatsxuVB29HEqPZd S2dZL2n/2yM7bGXWmopododQiV1xjRqGe3AXyw94vX3bv2VtnflHdnJyU0/9BJyLLy17 fpPYopMF7T/GyKdU3aWX7AS9R7FRlYTlK2fKqxsTPw0EwqRpXIfgc9rGghjdzPV3GRpO 2C+zAkLPz0lrugzf8BGEBH7r6JnBwxjciAvaPHJ8pVPQXlG3QEn/B5uYiHnenq5i2+SQ jev1m2mV2MEvJe5e5AL3QwKwBNB2fTR94SpZx0NEV2ch8lpwDmklQysmPUYk8XQhPPVY GZKw==
X-Gm-Message-State: AHPjjUgJZoYz4NhyN/2hMK7Y4oh2foJoM0LwQdt8I9NAY2PEcvTRS/uv 3tB3vxBITO40Wy7TMR+BpMoP/jmvuw==
X-Google-Smtp-Source: ADKCNb5Nk9NQxKEzrH9HojeLcESOd/GlXpFmg+7dh8CC2XkbikI5Q95b0J8c3cCZ2kKvbFdIc06qVsRbGGWgKm9/sBg=
X-Received: by 10.84.132.73 with SMTP id 67mr141792ple.233.1504806950592; Thu, 07 Sep 2017 10:55:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.100.144.1 with HTTP; Thu, 7 Sep 2017 10:55:10 -0700 (PDT)
In-Reply-To: <51d747dcf46749c496f4ed94401f39c9@XCH-ALN-010.cisco.com>
References: <150480529516.8033.6404431491813730506@ietfa.amsl.com> <51d747dcf46749c496f4ed94401f39c9@XCH-ALN-010.cisco.com>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Thu, 07 Sep 2017 13:55:10 -0400
Message-ID: <CAHbuEH7gAF1xE9vAd5OrSKH8Rq=bg9KWjXLHxTisQnX8arf50g@mail.gmail.com>
To: "Panos Kampanakis (pkampana)" <pkampana@cisco.com>
Cc: "internet-drafts@ietf.org" <internet-drafts@ietf.org>, "mile@ietf.org" <mile@ietf.org>, "draft-ietf-mile-iodef-guidance@ietf.org" <draft-ietf-mile-iodef-guidance@ietf.org>, The IESG <iesg@ietf.org>, "mile-chairs@ietf.org" <mile-chairs@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/YS0aAzekw_h2y77OskL_9gTkKr0>
Subject: Re: [mile] I-D Action: draft-ietf-mile-iodef-guidance-11.txt
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Sep 2017 17:55:53 -0000

Thank you, Panos.

I'll take a look through the document.  Some on the IESG felt this
should be a BCP and it didn't have that feel to me, but when I read it
again, I'll consider this and get back to you.  If others on the IESG
have shifted their opinion, please do let me know.

Best regards,
Kathleen

On Thu, Sep 7, 2017 at 1:39 PM, Panos Kampanakis (pkampana)
<pkampana@cisco.com> wrote:
> This submission addresses all reviews from the IESG Last call.
>
> Thank you to all the reviewers.
>
> We updated normative language to have an Informational draft tones.
> We fixed figures and the minimal class figures.
> We fixed multiple nits, clarifications and text issues found by reviewers.
> We also addressed the id-nits nits that made sense except for the ones that complain about long lines.
>
> The draft should be ready now.
>
> Please let us know if there are more nits that need addressing.
>
> Regards,
> Panos
>
>
> -----Original Message-----
> From: mile [mailto:mile-bounces@ietf.org] On Behalf Of internet-drafts@ietf.org
> Sent: Thursday, September 07, 2017 1:28 PM
> To: i-d-announce@ietf.org
> Cc: mile@ietf.org
> Subject: [mile] I-D Action: draft-ietf-mile-iodef-guidance-11.txt
>
>
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Managed Incident Lightweight Exchange WG of the IETF.
>
>         Title           : Incident Object Description Exchange Format Usage Guidance
>         Authors         : Panos Kampanakis
>                           Mio Suzuki
>         Filename        : draft-ietf-mile-iodef-guidance-11.txt
>         Pages           : 32
>         Date            : 2017-09-07
>
> Abstract:
>    The Incident Object Description Exchange Format (IODEF) v2 (RFC7970)
>    defines a data representation that provides a framework for sharing
>    information about computer security incidents commonly exchanged by
>    Computer Security Incident Response Teams (CSIRTs) .  Since the IODEF
>    model includes a wealth of available options that can be used to
>    describe a security incident or issue, it can be challenging for
>    security practitioners to develop tools that leverage IODEF for
>    incident sharing.  This document provides guidelines for IODEF
>    implementers.  It addresses how common security indicators can be
>    represented in IODEF and use-cases of how IODEF is being used.  This
>    document aims to make IODEF's adoption by vendors easier and
>    encourage faster and wider adoption of the model by CSIRTs around the
>    world.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-mile-iodef-guidance/
>
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-mile-iodef-guidance-11
> https://datatracker.ietf.org/doc/html/draft-ietf-mile-iodef-guidance-11
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-mile-iodef-guidance-11
>
>
> Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org.
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> mile mailing list
> mile@ietf.org
> https://www.ietf.org/mailman/listinfo/mile
>



-- 

Best regards,
Kathleen