[NSIS] security threats for nsis

Tschofenig Hannes <hannes.tschofenig@siemens.com> Tue, 30 March 2004 23:52 UTC

Received: from optimus.ietf.org (optimus.ietf.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA06924 for <nsis-archive@odin.ietf.org>; Tue, 30 Mar 2004 18:52:23 -0500 (EST)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1B8Rix-0006Yx-Uh for nsis-archive@odin.ietf.org; Tue, 30 Mar 2004 17:28:48 -0500
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i1DB2MNJ004861 for nsis-archive@odin.ietf.org; Fri, 13 Feb 2004 06:02:22 -0500
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Arb3x-0001Bk-JS; Fri, 13 Feb 2004 06:00:49 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1Arb2N-0000T5-6y for nsis@optimus.ietf.org; Fri, 13 Feb 2004 05:59:11 -0500
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA04036 for <nsis@ietf.org>; Fri, 13 Feb 2004 05:59:03 -0500 (EST)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 1Arb2D-0004Q8-00 for nsis@ietf.org; Fri, 13 Feb 2004 05:59:01 -0500
Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1Arb16-0004Kh-00 for nsis@ietf.org; Fri, 13 Feb 2004 05:57:53 -0500
Received: from goliath.siemens.de ([192.35.17.28]) by ietf-mx with esmtp (Exim 4.12) id 1Arb0q-0004GS-00 for nsis@ietf.org; Fri, 13 Feb 2004 05:57:36 -0500
Received: from mail1.siemens.de (mail1.siemens.de [139.23.33.14]) by goliath.siemens.de (8.11.7/8.11.7) with ESMTP id i1DAvah07495 for <nsis@ietf.org>; Fri, 13 Feb 2004 11:57:37 +0100 (MET)
Received: from mchp9daa.mch.sbs.de (mchp9daa.mch.sbs.de [139.25.137.99]) by mail1.siemens.de (8.11.7/8.11.7) with ESMTP id i1DAvZV01153 for <nsis@ietf.org>; Fri, 13 Feb 2004 11:57:35 +0100 (MET)
Received: by mchp9daa.mch.sbs.de with Internet Mail Service (5.5.2657.72) id <Z35DBJS9>; Fri, 13 Feb 2004 11:57:00 +0100
Message-ID: <2A8DB02E3018D411901B009027FD3A3F04685D2E@mchp905a.mch.sbs.de>
From: Tschofenig Hannes <hannes.tschofenig@siemens.com>
To: nsis@ietf.org
Date: Fri, 13 Feb 2004 11:57:18 +0100
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2657.72)
Content-Type: text/plain; charset="iso-8859-1"
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org
X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=no version=2.60
Subject: [NSIS] security threats for nsis
Sender: nsis-admin@ietf.org
Errors-To: nsis-admin@ietf.org
X-BeenThere: nsis@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/nsis>, <mailto:nsis-request@ietf.org?subject=unsubscribe>
List-Id: Next Steps in Signaling <nsis.ietf.org>
List-Post: <mailto:nsis@ietf.org>
List-Help: <mailto:nsis-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/nsis>, <mailto:nsis-request@ietf.org?subject=subscribe>

hi all, 

we (dirk and myself) have compiled a new version of the threats draft. you
can find a pre-04 version at: 
http://www.tschofenig.priv.at/drafts/draft-ietf-nsis-threats-04pre.txt

i have also created a html 03/04-diff version of the draft which can be
found at:
http://www.tschofenig.priv.at/drafts/draft-ietf-nsis-threats-04-from-3.diff.html
due to some formating problems (too long lines) in version 03 you see a
large number of modifications although they really aren't. 

we would like to thank richard graveman for his detailed review and michael
richardson for his recently posted comments. we have incorporated some of
them while others are left for further discussion. 

if you have some comments please let us know (before monday).

ciao
hannes

_______________________________________________
nsis mailing list
nsis@ietf.org
https://www1.ietf.org/mailman/listinfo/nsis