Re: [secdir] Secdir review of draft-ietf-sidr-origin-validation-signaling-09

"John G. Scudder" <jgs@juniper.net> Sun, 27 November 2016 19:14 UTC

Return-Path: <jgs@juniper.net>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68925129500; Sun, 27 Nov 2016 11:14:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t1WXekdfdBjW; Sun, 27 Nov 2016 11:14:12 -0800 (PST)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0112.outbound.protection.outlook.com [104.47.37.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C3321294F3; Sun, 27 Nov 2016 11:14:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9gBbwft2iF3pwIG/4w7yKlwf32LvWdynPRU4d3+sovA=; b=XoZyhqJ8MnzFZpgEdzX6J3eFhlCkT+1zs/OeYgr/kEpH4h49hfBUqeNW5Is38b7vSItODIz69JBahMqPAtc0Z+8A1wC4UnkrVNNdYRuUBhiWNLwtmsa8nTfFosMj6RBFWwiFpOwEBYm9kdenaVnPtUlZeEUnINvvUyIIFrIlLjA=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=jgs@juniper.net;
Received: from [172.29.33.83] (66.129.241.12) by CY1PR05MB2508.namprd05.prod.outlook.com (10.167.10.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.5; Sun, 27 Nov 2016 19:14:10 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <m2twaxmjix.wl-randy@psg.com>
Date: Sun, 27 Nov 2016 14:14:02 -0500
Content-Transfer-Encoding: quoted-printable
Message-ID: <528F862E-BBA4-44C5-9454-25A2AD1E103D@juniper.net>
References: <22581.44823.269032.294446@fireball.acr.fi> <m2twaxmjix.wl-randy@psg.com>
To: Randy Bush <randy@psg.com>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.12]
X-ClientProxiedBy: BLUPR0601CA0018.namprd06.prod.outlook.com (10.163.210.28) To CY1PR05MB2508.namprd05.prod.outlook.com (10.167.10.135)
X-MS-Office365-Filtering-Correlation-Id: 37f845e4-3646-45e2-8ba1-08d416f991ee
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CY1PR05MB2508;
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 3:zNTGaNom8v8aQmxji/kmGRyLogtiTbxVCQYS6058wul9rs+okgqISgRnHrTeL9jyioNAZ9K5RPGd4VR6VzF3BwZ1jtdZ7fDIbILfk4lAawSBu/RJXNMgUUr0TRvsMJ5gv3QOPPnXPFVx5Z548C96bEciiZWPqd/PsOJ7h7efuDgzU1LnIwcBG3LeTKPdb7a2YQGMM+PJlLnIK+WV88fuKiWfLGLvnyHTUH57mvfYutVzCeu9S8FkSM7Nb4butGbiAKrmYeKhJ8eOXEZxYzcwaw==
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 25:yOsU71qKVhkmsdpTTs6t+pceYmqTo1/0CEvZxO+ksaLcWRmQ+KJETQRV7eG3Maouj9v7bQGH91Rzk4+fLNSHAXz943ZtO/BEVcwsyQya9MgTbHghdRtWZ3KSCBii+lp6xbGcQB8njfENyt8QDlMRY6yK/jhq3EMEJocQQ8ZwGmLOH3ttTt8lN77YffC6F5GEjNOPa66znAd0jQrg5O/CnfaBNR5Aohfj+WWWvL7HfdInaH8XCEzhPgpMYweZZjozHlBqhikfVe25/902ETQjmUxe2pDsYKN7nTklc7CoUEVbbYOgJY6tzaS+FaNF/Y7bSn7xU3kEJAuMgtfCZBPIaFUwBdLMIVTNeGzrVmYa7JaIpIuPsiaSUGmpeb4SKuTzDBxuxrPOPY4jKCCHVJS1qz92XoPM/wcKHBOjfrOioKQLRqh3QaKPIZ84koBo4hahP0txZEanip3CKPKmZQzPoOkwgLc22w3xZs4Cmuj+pN+EAgpHx1ojk8WiEiDZHXszJ/98vVkGdwPrIUYtdKbV3Qr6Cg6wAe/BM0/O7mb+Zdb74CqKvH81DE8xpIJgqEoTvBpl142FjMo2ThWhFeh9PdvZWL1V9JB9+3m6iLfWt2NcjqU6QuDlvc/bHSQTnYA6Jzc3uDfnbotxaWvX1oUytDmCF2nhaGgjKXBtxmWkdwfkuBVCfGWzm+tlQxpU1uQ0JP5pzGvCx+zcKsj3x6a0ITIe/rfuWwXlxXlXtEzbA+bXJHNHgr+VxX35IFcWvu+2SwG3DxwTydvWoUYWUTffeA==
X-LD-Processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 31:VyL6IcdCbsfC14HmKj8GONDTUG1N5s1utq6Sf5neCZAXvAdWsNHUI0LEHA/OQcruNat48RZDfEZ2CRa/MY+UlBlS6lCA6uLcyCKhCctBmfnIsxaPOePbhK/Tl0G48Tl9T9VjbOwOXvirg14KgLLrZjoB0f3aqcJXHrX2Q+S7Ny6dMd/Uyv17CcCHHiG6yb74TnwRnzWOe847iXQErGOjCRly8WVwxLcemoD0/XXsbgH7Fw5UV8JTK0TL09uHXpDLc+vD+eyb0CeF/lb77O6INQ==; 20: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
X-Microsoft-Antispam-PRVS: <CY1PR05MB25087D5478B6203974AE5A77AA8B0@CY1PR05MB2508.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6060326)(6045199)(6040361)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(6061324)(6041248)(20161123560025)(20161123555025)(20161123562025)(20161123564025)(6072148); SRVR:CY1PR05MB2508; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2508;
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 4: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
X-Forefront-PRVS: 0139052FDB
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(7916002)(189002)(24454002)(199003)(377454003)(97756001)(42186005)(46406003)(105586002)(2906002)(106356001)(5660300001)(4326007)(101416001)(66066001)(83716003)(189998001)(47776003)(6116002)(86362001)(82746002)(50986999)(76176999)(230783001)(57306001)(33656002)(229853002)(92566002)(38730400001)(50466002)(39410400001)(81166006)(81156014)(97736004)(39380400001)(8746002)(39400400001)(39060400001)(6666003)(7736002)(6916009)(8676002)(7846002)(2950100002)(68736007)(36756003)(50226002)(733004)(110136003)(77096006)(23726003)(39450400002)(3846002)(305945005)(6486002)(104396002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2508; H:[172.29.33.83]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 23: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
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 6:16dq+y55nYyghLAunCiAUJ/R+kXXwp1CnWEoEnhBZvXWgGAn52wgR65RTd9wZknWKEBwd+mWz1vb9lXJ/qvmtGvcTE/B/IFJq2lNQ4JyngB+5uuZphS4BlXqKy5o+ZE4AVXEgmYNZ7Yx08rLrnBRxr9rBYHbUPqtqg56a7O8VV7pmalBVdn0BCyBx2cmSaBqmYrNaNr9buDqEuPalv+q3Nu8kDouqs39swDd64nEgsD+4/wj0KAIG4lKwgYPF8I8jqeDv7nQDLWUYcaCK1EGaMwEvkT6nBZKydKj1H/IWV5320dCqnT2TGDHnwdAwFd+oxqe+Wj1Pn9GlYpvcy6EOa/Gr8LZJ0jEn/SIOmWzJPMVhNsqm11E9QHWx6NA5SigiFdZg6UaagAMfAURKHwRQWyvgKWgsdVm2lbEq7P/AL7O1zTT3g6e+tLzIYW3KtPoIIWmZCazHUBm96+PgutfHYyjghr25ZQ/8a5clKuU4OPh2oW0aw3/1/Lj+leRxUq6; 5:lK2G/m8n+IzEy7kP4VT3OLbWa2OZiSN4p1X+iecK/Wt9NG5Rps1ieMa6tG+Rubmpm1yQ6wf4W2Y/faUpEvb+24QM0C9uqVpDnjIkjAHovWBxiSCFlTfAiO+cdyR6OuqRq3uOs+R4Mp7RDt8vMcw8wHSJgK8l6SSIAwnBv0OOXC8=; 24:pwHRDf1jRIp2CB1rbLd8ocKULOc+FTPqDEbtZVD5cYbIX6mvKpdVkuyUD6WJ+PGlG9a+A9xeNQsCsrMXsP87uoHQijKWxruZsLJJK+/PGYM=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2508; 7:cXI1ezFVOAMTTfqBSmwbVzhiNWrj+Hcp9psK2fpsnvyyOKwxeWnoelp//bgnDQcXUg0EAP9OfNgXL16Azi49XTYcRecj6p1/Ql644Scev32IaKNqAPSn09Na/ftdfNIsvg/z9Akg9912BxSYY6CDr5durKe7Rgir5psM+FNTKXYU/IKLFuksn/d/0EgdxoJ9gG5eN4R7fE+V62uwZGH2To5vl80Mchl1hgCJqdYaT7Dyb0J7Negkih2lg0BsT9TByqolLGjciIeswdnSbqVOxrAKw2bvHnc5EmgoykeuxDGjzlTII4I7UcRTghuyeih6jElvMc1DGEeGbrVkkKMi9hFN7mww4GpYgc9ODsAynD5KYJrd6rfN4vFIM25wQU2XBv7CvmxLf4SLEP/uiGo5Bo+QkxPfktDR1goQRdOhs1p6flqiWXE7/AdKshB81wFrv2FoLDquhdfWgn/sFoQWXg==
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Nov 2016 19:14:10.7551 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2508
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/gfS4pL2HEZlMax7EcFHa21auORU>
Cc: secdir <secdir@ietf.org>, Pradosh Mohapatra <pmohapat@cumulusnetworks.com>, Keyur Patel <keyurpat@yahoo.com>, IESG <iesg@ietf.org>, draft-ietf-sidr-origin-validation-signaling.all@ietf.org
Subject: Re: [secdir] Secdir review of draft-ietf-sidr-origin-validation-signaling-09
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 27 Nov 2016 19:14:14 -0000

On Nov 24, 2016, at 2:20 AM, Randy Bush <randy@psg.com> wrote:
> i do not hold the pen, otherwise i would fix.

I believe I have the current source. If someone sends me text, I'll paste it, or otherwise I'll send out the XML when I get a chance on Monday. If we have to wait for me to write the proposed text, it will not be very soon.

--John