Re: [sacm] Working Group Last Call for draft-ietf-sacm-vuln-scenario

"Haynes, Dan" <dhaynes@mitre.org> Fri, 09 September 2016 14:19 UTC

Return-Path: <dhaynes@mitre.org>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1256D12B14F for <sacm@ietfa.amsl.com>; Fri, 9 Sep 2016 07:19:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.707
X-Spam-Level:
X-Spam-Status: No, score=-5.707 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.508] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x9kznduARy_Z for <sacm@ietfa.amsl.com>; Fri, 9 Sep 2016 07:19:27 -0700 (PDT)
Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 9CC1312B0D8 for <sacm@ietf.org>; Fri, 9 Sep 2016 07:19:27 -0700 (PDT)
Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 395286C433C; Fri, 9 Sep 2016 10:19:27 -0400 (EDT)
Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 28A546C431F; Fri, 9 Sep 2016 10:19:27 -0400 (EDT)
Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Fri, 9 Sep 2016 10:19:26 -0400
Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Fri, 9 Sep 2016 10:19:26 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vGcbD5/kYLVVsQwrvnS5aOx8TvFcN6J9biLvO9PsjvM=; b=Q6XFtzvR1laJId1Ll1IV6f+fdqpeK/qm0gsFGT8O1qYIwaDZnhlQqiB+UOhljqdIJGX5/7U/eGBxowyBg6ZmyiSczYwQ1y/mprnRJXkFNDIX3wfsBQq3B7k5iNcTCnoiHfAXdbilaWGA6Goz/U1ko19P0rKEGj2cOBo4OTbNGqc=
Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.609.9; Fri, 9 Sep 2016 14:19:20 +0000
Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0609.017; Fri, 9 Sep 2016 14:19:20 +0000
From: "Haynes, Dan" <dhaynes@mitre.org>
To: Adam Montville <adam.w.montville@gmail.com>, "<sacm@ietf.org>" <sacm@ietf.org>
Thread-Topic: [sacm] Working Group Last Call for draft-ietf-sacm-vuln-scenario
Thread-Index: AQHR6NtcqVWjeMEakk27LKdp+cRBNqBYsXYAgAlik4A=
Date: Fri, 09 Sep 2016 14:19:20 +0000
Message-ID: <BY2PR09MB107854CADB4D8ADBB6A26873A5FA0@BY2PR09MB1078.namprd09.prod.outlook.com>
References: <B7DD871D-ED83-4399-B7C9-AAC016969C7D@gmail.com> <B57E8E91-8DDB-4E81-AFB5-2F893187CEEC@gmail.com>
In-Reply-To: <B57E8E91-8DDB-4E81-AFB5-2F893187CEEC@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org;
x-originating-ip: [192.160.51.87]
x-ms-office365-filtering-correlation-id: b3e72b66-b2a5-488e-9ed3-08d3d8bc4a83
x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 6:Ci97HjaRa78taZzQiEHtIUGCXROBJKTWboBysNCJFnhkx7uTsz8wVpkTgbpfXG++07vNMVXnIKIbXVLBz6qD+rPJbP+dxjl/9GklTVPD/pDgtfhFSmiDFAo3JKs5hWA/kbOnIOossXWdQWdivgcWfBcXGrnjD1o9mMJxdVi/dA98jcwofY2iOW/1ZyMhmTkRAEiAZtx6MaLy1hWnue+HeSqXYvCaE5hcgSYjWTyX1zJMgjrxcsHp7rxUey0COZzYsYKAoOmUt0g541EvBqilysQ0gsr/RP3DaFl0ztc/UyBDQBJ2RpubGmIX7N2LFm0T; 5:rleyOY4K01sT5gFtHKl+ZnezLfc+akI/W/yJG40aAHyGdbzhXJ2Q2W4eJR2TWdYgWNrr4bOOJ72pmlTO7rS8ul3FfcIDvEo+svJvGE//Ac752u6yZWLWLvdTQZnXwKWIyfRO6HwLMmnUdljXXFAaaw==; 24:Or8R9GySzd7Ri75fJann5xRmjCmG5/9sZuHYt5YuPjHGth8DfY2irewKmh1Alb1IeZITsEXKn3lB7INhrzCXd7lyaF/3sGOdGT+nw5aAhuQ=; 7:ZLOBDwSQz5vH4X1msXZZaQD+nu8FIM3YX6XVCd016FQxM/b5vzfQqaemxInbpXk82UBV75AoGzy79G11n5psL22CR7C38TbleIv5/g7qLWg+5clFYiPjU+/JdhSdH2mwP5N2xdhw6I9JMU+Hy7YnTrzf6Ge4s+uAzK7Kj/NNm04nzG5x/AvYcBPjBuXYH6zXsm1vm69C8Cygw22qI2esw+BnA+uR2vAfg4gkueMaCc7xbkzmyYisTQ7CYzWuoEzD
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078;
x-microsoft-antispam-prvs: <BY2PR09MB107870C9E27830E6C8A8AEABA5FA0@BY2PR09MB1078.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(120809045254105)(100405760836317)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078;
x-forefront-prvs: 00603B7EEF
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(199003)(189002)(24454002)(71364002)(377454003)(19580405001)(33656002)(16236675004)(74316002)(230783001)(76176999)(106356001)(106116001)(19625215002)(7846002)(101416001)(66066001)(3660700001)(6116002)(102836003)(586003)(105586002)(3846002)(8936002)(790700001)(54356999)(122556002)(86362001)(76576001)(10400500002)(68736007)(81166006)(19580395003)(81156014)(8676002)(189998001)(7906003)(5002640100001)(19300405004)(99286002)(50986999)(9686002)(19617315012)(2950100001)(92566002)(107886002)(2900100001)(97736004)(5001770100001)(11100500001)(19609705001)(77096005)(7736002)(7696004)(2906002)(3280700002)(15975445007)(87936001)(5660300001)(491001); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107854CADB4D8ADBB6A26873A5FA0BY2PR09MB1078namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Sep 2016 14:19:20.2290 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078
X-OriginatorOrg: mitre.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/OcThhiy8aTA8z2meequgVMzRg2E>
Subject: Re: [sacm] Working Group Last Call for draft-ietf-sacm-vuln-scenario
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Sep 2016 14:19:30 -0000

Just an update, I made this small change and a couple other minor changes based on Joe’s feedback.  You can find the latest draft at the following link.

https://datatracker.ietf.org/doc/draft-ietf-sacm-vuln-scenario/

Thanks,

Danny

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Adam Montville
Sent: Wednesday, August 24, 2016 3:56 PM
To: <sacm@ietf.org> <sacm@ietf.org>
Subject: Re: [sacm] Working Group Last Call for draft-ietf-sacm-vuln-scenario

There seems to be good consensus on putting our vulnerability draft through to the IESG.  Henk had some terminology-related comments that were augmented by Jarrett.  The suggestion [1] was to change "Endpoint Vulnerability Assessment Capability" to "Endpoint Vulnerability Assessment Capabilities" (make it plural).  Given that we have consensus as it stands, I don't feel that we should require the draft to be updated, but the change is small, and simple, so we could do so easily.  Danny, would you be willing to make that small change before we submit the draft to IESG?

Kind regards,

Adam

[1] https://mailarchive.ietf.org/arch/msg/sacm/lPHC95Ug2lQWTYC1HG5s2iMOYic

On Jul 28, 2016, at 9:20 AM, Adam Montville <adam.w.montville@gmail.com<mailto:adam.w.montville@gmail.com>> wrote:

This message starts a Working Group Last Call for the Internet-Draft ‘SACM Vulnerability Assessment Scenario’ — https://datatracker.ietf.org/doc/draft-ietf-sacm-vuln-scenario/.  Please send your comments, questions, and edit proposals to the WG mail list until August 5, 2016.  If you believe the document is ready to be submitted to the IESG for consideration as an Informational RFC, please send a short message stating so.

Kind regards,

Adam