secdir review of draft-ietf-imapext-sort-19

2008-03-05 Thread Tobias Gondrom
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any

RE: Last Call: draft-ietf-ltans-ers (Evidence Record Syntax (ERS)) to Proposed Standard - comment from Tim and answer

2007-03-13 Thread Tobias Gondrom
Comment to the draft received from Tim Polk during review: > I thought I might follow up on the first unaddressed comment: > > I notice that the phrase "the Initial Archive Timestamp" frequently > appears in the text with a capitalized 'I' in word "initial". This seems > to indicate that there

RE: [secdir] SecDir review of draft-ietf-sipping-v6-transition-05

2007-07-26 Thread Tobias Gondrom
evaluation. And at the discretion of the AD: #2 and #4 could/should be seen as a DISCUSS. Best regards, Tobias From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tobias Gondrom Sent: Thursday, June 28, 2007 3:33 PM To: [EMAIL PROTECTED]; [EMAIL

RE: [secdir] SecDir review of draft-ietf-sipping-v6-transition-05

2007-07-26 Thread Tobias Gondrom
> -Original Message- > From: Vijay K. Gurbani [mailto:[EMAIL PROTECTED] > Sent: Monday, July 16, 2007 6:15 PM > To: Tobias Gondrom > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; ietf@ietf.org; [EMAIL PROTECTED]; > [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; > [EMA

[secdir] draft-aboba-sg-experiment-02.txt

2007-10-01 Thread Tobias Gondrom
as they differ dramatically in the regard of role and acceptance by the IETF community. If they both look similar this might be misunderstood by people outside or new to the IETF. Greeting, Tobias ______ Tobias Gondrom Head of Open Text Security Team Di

RE: [secdir] draft-aboba-sg-experiment-02.txt

2007-10-02 Thread Tobias Gondrom
hat an experiment is for, so I will be fine to try it. Again as a summary: I think it's a great idea and would hum for progressing the draft and the experiment. - Tobias > -Original Message- > From: Lakshminath Dondeti [mailto:[EMAIL PROTECTED] > Sent: Tuesday, Octobe

[secdir] security review of draft-edwards-urn-smpte-02

2007-10-03 Thread Tobias Gondrom
e North American Continent, it might also be a good idea to pursue via independent expert reviews the question whether there exist potential namespace conflicts with other international organizations in this area (Motion Picture and Television) like e.g. ARIB (Association of Radio Ind

[secdir] Review of draft-ietf-l2vpn-oam-req-frmk-09

2007-11-12 Thread Tobias Gondrom
ditional levels of security, the solutions may be required to deploy encryption and/or authentication of OAM frames inside an OAM domain, however solutions are out of the scope of this draft. 5. Question: as the draft is heavily based on RFC4664 and 4665, I wonder whether they should not better be

RE: Should the RFC Editor publish an RFC in less than 2 months?

2007-12-04 Thread Tobias Gondrom
Comment: For some implementors only peripherally involved with IETF standards and process but looking at the new RFCs as "news" on standards it is well a difference whether its an RFC at the time they look or not. They just wouldn't know about an informal status as "being approved to be released sh

RE: [secdir] Review of draft-ietf-l2vpn-oam-req-frmk-09

2007-12-13 Thread Tobias Gondrom
a “DISCUSS” during the LC to halt the document process until the issues have been resolved). Best regards, Tobias Ps.: Please note: my main email address changed to: [EMAIL PROTECTED] _ From: Tobias Gondrom Sent: Saturday, November 10, 2007 12:02 AM

RE: [secdir] Review of draft-ietf-l2vpn-oam-req-frmk-09

2007-12-13 Thread Tobias Gondrom
raise a "DISCUSS" during the LC to halt the document process until the issues have been resolved). Best regards, Tobias Ps.: Please note: my main email address changed to: [EMAIL PROTECTED] _____ From: Tobias Gondrom Sent: Saturday, Novembe

RE: [secdir] Review of draft-ietf-l2vpn-oam-req-frmk-09

2007-12-17 Thread Tobias Gondrom
frames inside an OAM domain however > solutions are out of the scope of this draft./For additional levels of > security, the solutions may be required to encrypt and/or authenticate OAM > frames inside an OAM domain, however solutions are out of the scope of > this draft. Ok. > >

Re: Recall petition for Mr. Marshall Eubanks

2012-11-05 Thread Tobias Gondrom
Thank you Russ for the clarification and info. I am Nomcom-eligible and you can add me to the signature list, i.e. I support the recall. Best regards, Tobias On 04/11/12 09:15, Bert Wijnen (IETF) wrote: Thanks for extra info. You can add me to the list who sign the request for recall. B

APPSDIR review of draft-housley-rfc2050bis-01

2013-05-16 Thread Tobias Gondrom
wait for direction from your document shepherd or AD before posting a new version of the draft. Document: draft-housley-rfc2050bis-01 Title: The Internet Numbers Registry System Reviewer: Tobias Gondrom Review Date: May-16 Status: Informational Summary: I believe the draft is ready for

Re: IETF Attendance by continent

2010-08-30 Thread Tobias Gondrom
To add my 5 cents as well: In some ways the continued discussion of this topic reflects the fact that we are moving from one equilibrium to an other. I still remember the discussions we saw before we moved to 3:2:1. Although it may soften the argument to start with my personal conclusion, but it

Re: IETF Attendance by continent

2010-09-01 Thread Tobias Gondrom
On 09/01/2010 07:35 AM, Yoav Nir wrote: > On Aug 31, 2010, at 4:56 PM, Iljitsch van Beijnum wrote: > >>> Consider that contributors >>> usually start as newcomers, attend several meetings, then write a draft, >> I don't know about you, but I wrote drafts before my first meeting. > Me too. I actual

Re: Badges and blue sheets

2010-11-11 Thread Tobias Gondrom
Personally I am ok with the badge checking (as form of access control to a non-public resource (meeting, terminal rooms)) but I can understand some of related questions regarding who modifies ietf operation. Regarding freeriders: agree that would be a big deal. But I am not aware of any inciden

Re: Feedback on Day Passes

2010-11-29 Thread Tobias Gondrom
Bob, agree with James request for more detail on the used day passes, if possible. Personally, I believe the risen cost for day passes probably knocked out some of the demand (basic supply-demand curve from economics ;-) ). Probably day passes are more attractive to local participants who want to

Re: Question about Prague

2010-12-31 Thread Tobias Gondrom
Although Prague (Czech Republic) and Munich (Germany) are both in the European Union they are different countries. So when renting a car in Munich you need to make sure (as usual) that you are allowed to take it across the border and that the GPS has the maps of the country you travel to. Btw.

Re: Gen-ART LC Review of draft-ietf-ltans-xmlers-08

2011-01-11 Thread Tobias Gondrom
Dear Ben, thank you very much for your thorough review of xmlers. I corrected nearly all of the items you raised and sent the revised version to my co-authors for approval and publication as version -10. On a note of further language style improvement beyond your comments, the AD advised us at the

Secdir review of draft-doria-genart-experience-04

2011-08-01 Thread Tobias Gondrom
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

Re: RIM patents using a mime body in a message (and ignores IETF IPR rules)

2009-12-01 Thread Tobias Gondrom
Arnt Gulbrandsen wrote: > Simon Josefsson writes: >> Arnt Gulbrandsen writes: >>> Simon Josefsson writes: There is no requirement in the IETF process for organizations to disclose patents as far as I can see. The current approach of only having people participate, and disclose p

Re: Future Handling of Blue Sheets

2012-04-22 Thread Tobias Gondrom
Hi Russ, from a privacy perspective: may I ask for what purpose you propose to publish the blue sheets (with the names of all WG session attendees) with the proceedings? AFAIK, at the moment the blue sheets are basically available on request especially in case of IP questions. What would lead

Re: Future Handling of Blue Sheets

2012-04-22 Thread Tobias Gondrom
On 23/04/12 12:14, Joel jaeggli wrote: On 4/22/12 20:44 , Tobias Gondrom wrote: Hi Russ, from a privacy perspective: may I ask for what purpose you propose to publish the blue sheets (with the names of all WG session attendees) with the proceedings? AFAIK, at the moment the blue sheets are

Re: Future Handling of Blue Sheets

2012-04-22 Thread Tobias Gondrom
ghts about the RFID experiment. Last time we investigated a system for IETF meetings, it was quite expensive. I'll ask again to see if this has changed. Russ On Apr 22, 2012, at 11:44 PM, Tobias Gondrom wrote: Hi Russ, from a privacy perspective: may I ask for what purpose you propose

Re: Future Handling of Blue Sheets

2012-04-22 Thread Tobias Gondrom
On 23/04/12 13:41, Joel jaeggli wrote: On 4/22/12 22:12 , Tobias Gondrom wrote: Hi Russ, thank you for the information. In this case, my preference would be not to publish the blue sheets with the proceedings. Reasoning: The blue sheet data can at some point be used to determine movement

Re: Future Handling of Blue Sheets

2012-04-23 Thread Tobias Gondrom
Brian, On 23/04/12 14:59, Brian E Carpenter wrote: On 2012-04-23 06:12, Tobias Gondrom wrote: Hi Russ, thank you for the information. In this case, my preference would be not to publish the blue sheets with the proceedings. Reasoning: The blue sheet data can at some point be used to

Re: Future Handling of Blue Sheets

2012-05-09 Thread Tobias Gondrom
Dear Russ, please forgive me for adding one more comment on that after you judged on rough consensus. As you said this rough consensus is quite rough (if we may call it "rough consensus"). I would like to point out two things: 1. the statement "(1) Rough consensus: an open and transparent st

Re: Future Handling of Blue Sheets

2012-05-10 Thread Tobias Gondrom
such thing but, again, as far as I know, no one proposed it. john --On Thursday, May 10, 2012 14:23 +0800 Tobias Gondrom wrote: Dear Russ, please forgive me for adding one more comment on that after you judged on rough consensus. As you said this rough consensus is quite rough (if w

Re: Future Handling of Blue Sheets

2012-05-10 Thread Tobias Gondrom
On 10/05/12 16:35, John C Klensin wrote: --On Thursday, May 10, 2012 15:59 +0800 Tobias Gondrom wrote: John, sorry, maybe I did not articulate myself precisely enough. I did not intend to say it would be published in real-time. What I wanted to communicate is that we would collect that

Re: Future Handling of Blue Sheets

2012-05-10 Thread Tobias Gondrom
ing is ok in most IP jurisdictions, but handling the scanned data must use well documented procedures and access controls to keep the same level of non-repudiation of integrity and authenticity later in court. On 10/05/12 17:10, Doug Barton wrote: On 5/10/2012 1:48 AM, Tobias Gondrom wrote: W

Re: Future Handling of Blue Sheets

2012-05-10 Thread Tobias Gondrom
+1 Agree with Yoav. BR, Tobias On 10/05/12 17:35, Yoav Nir wrote: On May 10, 2012, at 12:10 PM, Doug Barton wrote: On 5/10/2012 1:48 AM, Tobias Gondrom wrote: What I dispute is that "make available to those who are interested" necessarily leads to the need to broadcast the data (i.

Re: Gen-ART LC Review of draft-ietf-websec-strict-transport-sec-11

2012-08-10 Thread Tobias Gondrom
On 10/08/12 00:03, Alexey Melnikov wrote: On 02/08/2012 10:46, Ben Campbell wrote: Hi, thanks for the response. Comments inline: On Jul 29, 2012, at 10:29 PM, =JeffH wrote: [...] -- section 7.2: Am I correct to assume that the server must never just serve the content over a non-secure c

Re: Last Call: Modern Global Standards Paradigm

2012-08-11 Thread Tobias Gondrom
no brainer. Even with a brain, the document is obviously good. Please sign it. --Paul Hoffman Agree and support. Please sign it. - Tobias Gondrom

Re: IAOC Request for community feedback

2012-10-23 Thread Tobias Gondrom
I would support the call to use our defined recall procedures, even if it takes a few weeks longer. And not unnecessarily set a precedent. If you feel the rules are not suitable, than we should think about adjusting them. And be careful, it may take "only" a hum to change a procedure, but the di

Re: Community Feedback: IETF Trust Agreement Issues

2013-08-05 Thread Tobias Gondrom
+1 Tobias Gondrom Paul Hoffman wrote: >On Aug 5, 2013, at 4:08 AM, Olaf Kolkman wrote: > >>> Does the community feel these are reasonable reasons to update the >trust agreement? >> >> The answer to that question is: yes. It seems reasonable to open up >the

Re: Bruce Schneier's Proposal to dedicate November meeting to saving the Internet from the NSA

2013-09-15 Thread Tobias Gondrom
On 09/09/13 09:29, Eliot Lear wrote: > We're talking. > > Eliot > > > On 9/9/13 10:20 AM, Ross Finlayson wrote: >> So, has Bruce Schneier actually been invited to speak at the Technical >> Plenary (or elsewhere) during the Vancouver IETF? I recall him giving an >> informative talk at least one p

Re: Bruce Schneier's Proposal to dedicate November meeting to savingthe Internet from the NSA

2013-09-15 Thread Tobias Gondrom
On 06/09/13 14:45, Scott Brim wrote: > I wouldn't focus on government surveillance per se. The IETF should > consider that breaking privacy is much easier than it used to be, > particularly given consolidation of services at all layers, and take > that into account in our engineering best practice

Re: Montevideo statement

2013-10-09 Thread Tobias Gondrom
On 09/10/13 07:44, Andrew Sullivan wrote: > Dear colleagues, > > On Tue, Oct 08, 2013 at 10:55:08PM -0700, SM wrote: >> This is the second time that the IAB has issued a statement > Speaking only (empahtically only) for myself, I quite strongly > disagree. The IAB has issued no statement in this c

Re: Montevideo statement

2013-10-09 Thread Tobias Gondrom
On 09/10/13 14:14, Ted Lemon wrote: > On Oct 9, 2013, at 6:45 AM, Tobias Gondrom wrote: >> But I support SM's proposal that it would be good >> to do a few days comment period for such important statements in the >> future - if timing is not critical. There is no harm