Re: [mile] Review and Support for ROLIE CSIRT draft

"Panos Kampanakis (pkampana)" <pkampana@cisco.com> Mon, 24 July 2017 04:33 UTC

Return-Path: <pkampana@cisco.com>
X-Original-To: mile@ietfa.amsl.com
Delivered-To: mile@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29642126E64 for <mile@ietfa.amsl.com>; Sun, 23 Jul 2017 21:33:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.522
X-Spam-Level:
X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGh7jcHcbIbE for <mile@ietfa.amsl.com>; Sun, 23 Jul 2017 21:33:49 -0700 (PDT)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2984F1200ED for <mile@ietf.org>; Sun, 23 Jul 2017 21:33:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9486; q=dns/txt; s=iport; t=1500870829; x=1502080429; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=jC6XXxUKb0GrAkwnfueLOJdsALPkl3Gvk5HGr6ai7Tw=; b=EGGCSff0vtI9kI+Tf5+7nwR9S34AGc7ywCC7LdXjMTQcQkMVjIV2o1c7 n/HlpPcHnFz5Eys1KGyxUFy2xkunMrIAvdFKb3QffriaSYPKw7E0hUbOT Fo8O+OG4EEvxBCyNymUsGhB428PhXgbb6aQemnJhYOirve0xQhzK8MtKL Y=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CdAADKd3VZ/5RdJa1dGQEBAQEBAQEBAQEBBwEBAQEBgm9rZIEUB44FkWaQWYUsghIshRsCGoNkPxgBAgEBAQEBAQFrKIUYAQEBAQMjClwCAQgRBAEBKAMCAgIwFAkIAgQBEgiJQ2QQrxuCJieLCQEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgyiDTYFhgySER1qCXYJhBZ9OAodMjEeCFYVQiluJSowZAR84P0t1FYdfdod2gTKBDgEBAQ
X-IronPort-AV: E=Sophos;i="5.40,404,1496102400"; d="scan'208,217";a="271801859"
Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Jul 2017 04:33:48 +0000
Received: from XCH-RCD-013.cisco.com (xch-rcd-013.cisco.com [173.37.102.23]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id v6O4Xl9D022316 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <mile@ietf.org>; Mon, 24 Jul 2017 04:33:47 GMT
Received: from xch-aln-010.cisco.com (173.36.7.20) by XCH-RCD-013.cisco.com (173.37.102.23) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 23 Jul 2017 23:33:47 -0500
Received: from xch-aln-010.cisco.com ([173.36.7.20]) by XCH-ALN-010.cisco.com ([173.36.7.20]) with mapi id 15.00.1210.000; Sun, 23 Jul 2017 23:33:47 -0500
From: "Panos Kampanakis (pkampana)" <pkampana@cisco.com>
To: "Nancy Cam-Winget (ncamwing)" <ncamwing@cisco.com>, "mile@ietf.org" <mile@ietf.org>
Thread-Topic: Review and Support for ROLIE CSIRT draft
Thread-Index: AQHS/zlj5elfQNUROEy0LWrOXTt1LKJia3XA
Date: Mon, 24 Jul 2017 04:33:47 +0000
Message-ID: <54a1af5571d84c6cbe1d16d0ba892661@XCH-ALN-010.cisco.com>
References: <0C6BAED5-2F36-4460-B794-066E08BC4DF4@cisco.com>
In-Reply-To: <0C6BAED5-2F36-4460-B794-066E08BC4DF4@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.82.232.111]
Content-Type: multipart/alternative; boundary="_000_54a1af5571d84c6cbe1d16d0ba892661XCHALN010ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/mile/lotfvk0vxoVcLmwEy1zq2D00gfQ>
Subject: Re: [mile] Review and Support for ROLIE CSIRT draft
X-BeenThere: mile@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" <mile.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mile>, <mailto:mile-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mile/>
List-Post: <mailto:mile@ietf.org>
List-Help: <mailto:mile-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mile>, <mailto:mile-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Jul 2017 04:33:51 -0000

Reading this draft, I have two concerns:
- How much of this draft is necessary for someone to be able to use IODEF with ROLIE? I am wondering if these are mostly best practices that ay ROLIE implementer could address by just using the ROLIE document.
- Given the charter of the MILE WG, I think this document is out of scope. Even IODEF with JSON is out of scope based on the WG charter, even though most of us see the value of JSON with IODEF. Given the participation it has been seeing for the last couple of years, I am not sure this WG can successfully drive two more drafts to completion with adequate participation and interest.

Thank you,
Panos


From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Monday, July 17, 2017 4:15 PM
To: mile@ietf.org
Subject: [mile] Review and Support for ROLIE CSIRT draft

Hi,

We had an update on the https://tools.ietf.org/html/draft-banghart-mile-rolie-csirt-01
Draft at today’s f2f MILE session.  It was followed by the question of whether MILE should adopt it as a WG item.

Given that it has had limited review, a couple in the room volunteered but we (the chairs) would like to a get at least one or two more reviewers.  If you are interested in reviewing, please respond in kind.

We will be asking the “should MILE adopt https://tools.ietf.org/html/draft-banghart-mile-rolie-csirt-01 as a working group draft” in a couple of weeks once we’ve had some review feedback.

Thanks, Nancy