IETF Logo Mail Archive

Re: [OPSEC] WGLC: draft-ietf-opsec-indicators-of-compromise

Andrew S2 <andrew.s2@ncsc.gov.uk> Fri, 02 September 2022 12:44 UTC

Return-Path: <andrew.s2@ncsc.gov.uk>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA20CC1522C1; Fri, 2 Sep 2022 05:44:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.913
X-Spam-Level:
X-Spam-Status: No, score=-2.913 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.571, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.233, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ncsc.gov.uk
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GcWFenKZa8Eh; Fri, 2 Sep 2022 05:43:59 -0700 (PDT)
Received: from GBR01-CWL-obe.outbound.protection.outlook.com (mail-cwlgbr01on2117.outbound.protection.outlook.com [40.107.11.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 602B1C14CF13; Fri, 2 Sep 2022 05:43:58 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XhJagPp0yD+n6WKIOZ881f7jJ9WwYX/8+lyjpLGKmHntbkm9/whavwAJe24HiA33vYc+FItoewTM7i+twRyJ2Ebrq6PsGzRmQ5rJ9AkWSiCIwhD3unr6gkutwc/IY6DoxveMaet2HgHw7dIo3z4PpJKKgQsfvhPUt1JZ4ZXR2YRLLb1zEpzy4A4D/s034PChlt3kAo6YsKcbxapmKwsEoZRV7O0vipWjZ5WuZkQvgvjI1VO4RIz/3g0t5IaOoA1BKT+SlhWieqa32WeyofE8M/gsayOYdAR6hi7Mbok7cgLz32jj3vJF/6anHTYOsyHmkYtxuhSn8bjuf2wuNno9NA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=m0nXFZtTv90y+A9umSQ6GJ14OKMtGsS1/SgYZ8ioUCM=; b=fL08X/vCcph3yTzsUMA9dj+Nuqs9TUYsNUCWk4WeW8nLCRNsMEnirEerBJ/1xPzzIbPGYvwkOBjVmmWe+spdwxLXqc9yS1rozb/wnHspqKu6UcsMZ9wR2ck9aK8n1KgS39YyYkId7K7hWvcIkSIkfplbyKpNvV/1ZVYYygjM8j3aopJD61t4UJd70JQwC1tY8e04vw1qqFBam+YjImXFpR83K+WcETkMLrlkKfY+u+JOJBm4SrqQrS7FgAGmRH7AOHUMKatlJz6/qTeXoMJlQY0lDkY8oLUGZ7Y8pIZfa9e2jcC0wUq3nKFYrUwAljyGH/Bi7UtSf79hwCilV/qKGA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ncsc.gov.uk; dmarc=pass action=none header.from=ncsc.gov.uk; dkim=pass header.d=ncsc.gov.uk; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncsc.gov.uk; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=m0nXFZtTv90y+A9umSQ6GJ14OKMtGsS1/SgYZ8ioUCM=; b=yzTYzk4HCjQXOpgh6HwW81pkh7KUb2m1g4GvZfpvM7nUM3RLA+RUjxFlFNPdltt+InVkI3w2MIhQuw1kJRYodjnqhRlGLwQixkhzqOLYOCl9MDkhIJTuvQB7H3x8qwkygHmy1bHHAbFgTDp0TPuRCW0F4JxYqY9NsxCXcMKG9L/0THKhYL1FzMrZ+bDBUZBzw7aV3fwtTsHQe3Ev+PXHlz3ZCpTXE5IIWl682dIvQ8jFHyNAumKIMDlYeG5ET7hG6RHrh7/AmZ+l0hn2dcJXzN4ZBAE9yBvzGenEcWpTekbAT1K12EEzr2Xi+VzK2vSqyidpH/DF69e/mT9gOdWC5w==
Received: from LO0P123MB4843.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:1df::13) by CWLP123MB6347.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:1d3::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5588.10; Fri, 2 Sep 2022 12:43:54 +0000
Received: from LO0P123MB4843.GBRP123.PROD.OUTLOOK.COM ([fe80::5d82:fb9e:b026:ae95]) by LO0P123MB4843.GBRP123.PROD.OUTLOOK.COM ([fe80::5d82:fb9e:b026:ae95%6]) with mapi id 15.20.5588.015; Fri, 2 Sep 2022 12:43:54 +0000
From: Andrew S2 <andrew.s2@ncsc.gov.uk>
To: Jen Linkova <furry13@gmail.com>, opsec WG <opsec@ietf.org>
CC: OpSec Chairs <opsec-chairs@ietf.org>, "draft-ietf-opsec-indicators-of-compromise.authors@ietf.org" <draft-ietf-opsec-indicators-of-compromise.authors@ietf.org>
Thread-Topic: WGLC: draft-ietf-opsec-indicators-of-compromise
Thread-Index: AQHYohExF3SRCjM0tkubLElGgjDr4K3MKscAgAAhFhA=
Date: Fri, 02 Sep 2022 12:43:53 +0000
Message-ID: <LO0P123MB48439B5FFFB0753602D4AEE2E37A9@LO0P123MB4843.GBRP123.PROD.OUTLOOK.COM>
References: <CAFU7BATX2bDZkhm3cZJz5nkrOshouASDcy1c+b4QdwJW2EnJYA@mail.gmail.com> <CAFU7BARzrY-yoQ22ZUNierB3hCG1M=Sjg9hw3Oz1spC+A9TS5w@mail.gmail.com>
In-Reply-To: <CAFU7BARzrY-yoQ22ZUNierB3hCG1M=Sjg9hw3Oz1spC+A9TS5w@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ncsc.gov.uk;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 163dca0a-3d2b-4bc0-9f93-08da8ce0cb78
x-ms-traffictypediagnostic: CWLP123MB6347:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:LO0P123MB4843.GBRP123.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230016)(4636009)(396003)(39860400002)(376002)(366004)(346002)(136003)(33656002)(966005)(83380400001)(186003)(8676002)(64756008)(66446008)(4326008)(2906002)(71200400001)(122000001)(38100700002)(8936002)(41300700001)(38070700005)(86362001)(110136005)(478600001)(5660300002)(26005)(55016003)(9686003)(66476007)(52536014)(6506007)(7696005)(66556008)(82960400001)(53546011)(76116006)(66946007)(316002)(54906003); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: ncsc.gov.uk
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LO0P123MB4843.GBRP123.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 163dca0a-3d2b-4bc0-9f93-08da8ce0cb78
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Sep 2022 12:43:54.0120 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 14aa5744-ece1-474e-a2d7-34f46dda64a1
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Cf3cgyVVRJMeQ1IPu4aS/Kw7c5lZ7mb6U29nze9HkYeEfYo9w6ByR7Rrm3VkeHDTZ4ZPTCLufktD9utuOrlJ7w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP123MB6347
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/8LCbCxR_Y_wMoIVhLVCAoyPdHBM>
Subject: Re: [OPSEC] WGLC: draft-ietf-opsec-indicators-of-compromise
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Sep 2022 12:44:02 -0000

Thanks Jen. We do have plans to address Chris's comments (and thanks to Chris for the feedback). We're working on a new version which we hope to have ready soon.

Thanks,
Andrew

-----Original Message-----
From: Jen Linkova <furry13@gmail.com> 
Sent: 02 September 2022 11:34
To: opsec WG <opsec@ietf.org>
Cc: OpSec Chairs <opsec-chairs@ietf.org>; draft-ietf-opsec-indicators-of-compromise.authors@ietf.org
Subject: Re: WGLC: draft-ietf-opsec-indicators-of-compromise

The WG Last Call has finished. The chairs believe the group in favour of advancing the document.
The authors - do you have plans to address Chris's comments? Shall we expect the new revision?

On Thu, Jul 28, 2022 at 1:32 AM Jen Linkova <furry13@gmail.com> wrote:
>
> This email starts a WG Last Call for 
> draft-ietf-opsec-indicators-of-compromise
> https://datatracker.ietf.org/doc/draft-ietf-opsec-indicators-of-compromise/
> 
> The WGLC finishes on Sunday, Aug 14th, 25:59 UTC.
>
> The chairs are looking for people who would review the document and 
> respond to the list stating their support (or concerns regarding) 
> advancing the draft.
>
> Thank you!
> --
> SY, Jen Linkova aka Furry



--
SY, Jen Linkova aka Furry
This information is exempt under the Freedom of Information Act 2000 (FOIA) and may be exempt under other UK information legislation. Refer any FOIA queries to ncscinfoleg@ncsc.gov.uk. All material is UK Crown Copyright (c)

v2.23.0 | Report a Bug | By Email