From kotikalapudi.sriram@nist.gov Sun Mar 17 08:39:03 2024 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 409E1C14F5F5; Sun, 17 Mar 2024 08:39:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.108 X-Spam-Level: X-Spam-Status: No, score=-8.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.999, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nist.gov Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E8EDcWBzV5e2; Sun, 17 Mar 2024 08:38:59 -0700 (PDT) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2077.outbound.protection.outlook.com [40.107.89.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D98A7C14F5EB; Sun, 17 Mar 2024 08:38:58 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QqOMrnHyemaCRX1nmat90huQAXyucSXtTaATQmjH0JNfWtF30LhuTak8gZtCx9bqn8e3yHZ70vqWgqEZDbub+vtMVppqa2pdDSpZwvPDT5FdZnDr5w+IoVEDgrE5WoHx5z3KIjzHx7Xf/dGxN5lNeNbzQmgMcZMQlMFayuPMo4WxGHlUqzX2MHaAIstVV74Jb+9iOpUn5bKfbEo36g2IfPzHiTdtTSj44l75ltZm+lmb1J2HG1eku24zj13cf+eNqZQGgSdpIrpERmx/R3zejIqpKBeP/Fna4nRuN3qOqZjs6zUNmCFQqjzekyBXffwmfxmYWJVEtCGzUKd3fDEEeQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=rwMGroYWlKQRDLzzrDaIatZ+ReuXN6+pqw8mVLA2eic=; b=mULuR/JZLSA3e0RK93XyUCcWE0eVc6ZRR9xASk7nXkcsCOVohyzFg+VZ4pIx0fec6A69swQFCT6vjJDe8BL6Kv5Ue5cYmunQbl2gbRSvbCwdYBo+T9wpzIDqMudeHaN4CUHGTtt/g9h8XufpB5OnQ19IE1mXCwItc7L+YOE7HdTUFU4lVpL559dPzFxTWI/cqmpyNDbP16xc7s9guEeRx6R3iGq6hWFhUVq8hGfRl8LvL4xrUCREGtVueN++sz6GtrU+r6J1qAU6kvDrssjrHW8Mkn6HgylmpFAVE1bgQ+v4T7PeIhNmHbLVaVCNX3eT4NmB1VS0jfwef+SZjrSZBg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rwMGroYWlKQRDLzzrDaIatZ+ReuXN6+pqw8mVLA2eic=; b=BA+mS4mBqohDZcIJj5jlPQRXNVUQ7iWq6OlSzo0so+h10lW7LkPNDDJu/KoiM4yBvFIdc336pDTXO2Gmh7IwyWHU5h9ksL7gMpOQ6koqog4Va05v1jupVIYr+Gv6zNiy7bUT/zsUvUsS7sOV3Eg6SsLhK93Q824f9YSmR0B4RtYbzvGq/XsXLQ76zZHom23zI3ZS6Y3WdZvngFLL0uX6CvyZWQcIuxFt05YW1vY8pUwUgjOzjX54/GdPtbP9To2DwGsUL2nESnYsVgXKLvGZeSFVOZfTd1JieFoQjzCRqZZfw/AHHRRdOrlNNm3rngq0Bzjv6Pjpa+ajKkPTStoMtQ== Received: from SA1PR09MB8142.namprd09.prod.outlook.com (2603:10b6:806:171::8) by SA1PR09MB8800.namprd09.prod.outlook.com (2603:10b6:806:172::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.26; Sun, 17 Mar 2024 15:38:54 +0000 Received: from SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::c99a:be4f:8505:4ac7]) by SA1PR09MB8142.namprd09.prod.outlook.com ([fe80::c99a:be4f:8505:4ac7%4]) with mapi id 15.20.7386.021; Sun, 17 Mar 2024 15:38:53 +0000 From: "Sriram, Kotikalapudi (Fed)" To: "sidrops@ietf.org" CC: "sidrops-chairs@ietf.org" Thread-Topic: New Version Notification for draft-sriram-sidrops-spl-verification-00.txt Thread-Index: AQHaeH6vmHgmOBuqakG5E4p8x4Z0crE8DLjA Date: Sun, 17 Mar 2024 15:38:53 +0000 Message-ID: References: <171068884034.30156.2037237149778011860@ietfa.amsl.com> In-Reply-To: <171068884034.30156.2037237149778011860@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nist.gov; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SA1PR09MB8142:EE_|SA1PR09MB8800:EE_ x-ms-office365-filtering-correlation-id: 41460596-149c-4d28-0a5b-08dc46985a0b x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR09MB8142.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(1800799015)(366007)(38070700009); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?B8oKaTaGNNh5XdYWuTPmC14T06dCLe8gELkNHS619umSY5JzAHgtZ4jP5mE6?= =?us-ascii?Q?BCD+akQM2thw/mbUDoh+s9r61lVis3cYe/n88kgXu/ZWf4+X9xr6OdusNwGt?= =?us-ascii?Q?fKZu9OCxMS+fJh85cc7LhRCfzHtRVUNFdcadZ2HOrt3FW0h6jkn7hmQdbM5g?= =?us-ascii?Q?JLAuxE2CtpxUM89AO3pVUHpiCbTQzibJTqPnpSXip+V0OZqzYYSymGKEDhgx?= =?us-ascii?Q?Awqon0OG9x9ee4q8Ce2dG2gRu/jKW+Ob1Yw7oB8ZzyHJihcF4dADWbNrCa2R?= =?us-ascii?Q?KJwdu5L/U3FQogsXPLdDyjgUYyZEAfOfEqwV/j7NpO7P+SW4QTsEUnZuD6UL?= =?us-ascii?Q?GBHc+cYFucX9sz9Zn7xHlWilRq4Iqg10ZrCjKN522wcuOlu9/fDcyudGBSvn?= =?us-ascii?Q?3UJKmGT6UVIo4B/6Lgwy2kNqv4mMQX1bjyCEqcNdA4p60QfQ/bdwHdKfh0rU?= =?us-ascii?Q?AM2VdAQ1j2qV8GNn/SlvzPVkdonx4nCCeCDCt6Qu+8eHz09j6DdQ2XAuPEVF?= =?us-ascii?Q?7jp2jKwV3fEaMJPuZl4wmQ2PZml/L1LdZapZVTf1b6rqs/gHw22Qf7y5xRyI?= =?us-ascii?Q?dScsBQ6sRtv7u3Xle3q8yN3V366Dj/pw+YdhTlMJ5qgmp76xtUXyz7HFrH84?= =?us-ascii?Q?oqckzFs56NUeYXsgNCOxkWHWrefSa+TSEvBwoknzhfxufaDzr73cTiFQtFNo?= =?us-ascii?Q?A7h3A32EkEiwCIJsrd/sw+WuWoPTiEelt4wlGW4f+Ia5V+AFmaU3cYW/QMmf?= =?us-ascii?Q?P3y6QfO5Mgpa+9tL5ZcCc2XI9JnEkgK+KJpBkxx5zBnM7Gj8wLWhe9CEYhJA?= =?us-ascii?Q?HaloM/Bfw4j26g2fWw4xluaSjMlnirVj72ZdtlnAwVaMjb2HxccWHXrPKYEJ?= =?us-ascii?Q?eU2JxKGMxytFnPnLBL8JblO+mFUli2wlSZjSne6SAbIXIt+CXq9BUYqM1C1K?= =?us-ascii?Q?0vTgHk+vOrJjaf+EjNsezZmrPFret0WLvmcJYY+Rc2JlBnHRvl+dHZfqs0v4?= =?us-ascii?Q?ExFj0Ht1ypX97NywhhNp8iHFMDi6w2o0IGk2PWBd64hIwYM9d5TbrTb1iyZk?= =?us-ascii?Q?PbIil5aVn8IVNNlFB6ZUP2ZbHp8TfvYELuLJ9bd/W3Rj1wg3f7/NjAillgMv?= =?us-ascii?Q?lIdPhwy8H4E1OOrlILSYEf1C42uI5MCVM8rhxAIf8PkIMWRQ/YaqAvsc1xqP?= =?us-ascii?Q?sj4IlNOj3AcQv5HQwAgNJpaixS2VSVP93qrSN+IK0kR6ERRbJk8fwib3MrhM?= =?us-ascii?Q?EJ7X6hcdz/MCfcYlmMCVS9D66vvqoHqU3XVfkdFvH2ib0KebHU+0zzu37x3d?= =?us-ascii?Q?GZLPTni3d2aq/BY9MNwrQGdGWJeMSYq7/Qqm9bqSJ0LjYwnqTmVD+2ushc8U?= =?us-ascii?Q?prPN6j2I5peMSoE9u2ShZErBWP8fKVb+TQ0Y48Vz9D71d4n7o/6v0tU+pBnm?= =?us-ascii?Q?k22hWjPq6/iSoT/wBn8UF6Zf+8ummB8qA78bmz0VX0K0ZD8olJG4M4NRFRUN?= =?us-ascii?Q?L/tLJlDrwLk37VwzB0K2VNGS7WDvPeF3h0TvkJ1qzlcyMYfcsmkjl19Ii5Zh?= =?us-ascii?Q?Ywp/URbbDkpP+1shxV4=3D?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SA1PR09MB8142.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 41460596-149c-4d28-0a5b-08dc46985a0b X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Mar 2024 15:38:53.9333 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR09MB8800 Archived-At: Subject: Re: [Sidrops] New Version Notification for draft-sriram-sidrops-spl-verification-00.txt X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.39 Precedence: list List-Id: A list for the SIDR Operations WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Mar 2024 15:39:03 -0000 A new draft on "Signed Prefix List (SPL) Based Route Origin Verification an= d Operational Considerations" was just uploaded. Please see abstract and links below. Comments welcome. Sriram -----Original Message----- From: internet-drafts@ietf.org =20 Sent: Sunday, March 17, 2024 11:21 AM To: Montgomery, Douglas C. (Fed) ; Job Snijders ; Sriram, Kotikalapudi (Fed) Subject: New Version Notification for draft-sriram-sidrops-spl-verification= -00.txt A new version of Internet-Draft draft-sriram-sidrops-spl-verification-00.tx= t has been successfully submitted by Kotikalapudi Sriram and posted to the IE= TF repository. Name: draft-sriram-sidrops-spl-verification Revision: 00 Title: Signed Prefix List (SPL) Based Route Origin Verification and Oper= ational Considerations Date: 2024-03-17 Group: Individual Submission Pages: 10 URL: https://www.ietf.org/archive/id/draft-sriram-sidrops-spl-verifica= tion-00.txt=20 Status: https://datatracker.ietf.org/doc/draft-sriram-sidrops-spl-verific= ation/=20 HTML: https://www.ietf.org/archive/id/draft-sriram-sidrops-spl-verifica= tion-00.html=20 HTMLized: https://datatracker.ietf.org/doc/html/draft-sriram-sidrops-spl-ve= rification=20 Abstract: The Signed Prefix List (SPL) is an RPKI object that attests to the complete list of prefixes which an Autonomous System (AS) may originate in the Border Gateway Protocol (BGP). This document specifies an SPL-based Route Origin Verification (SPL-ROV) methodology and combines it with the ROA-based ROV (ROA-ROV) to facilitate an integrated mitigation strategy for prefix hijacks and AS forgery. The document also explains the various BGP security threats that SPL can help address and provides operational considerations associated with SPL-ROV deployment. The IETF Secretariat