<HTML dir=ltr><HEAD><TITLE>[LACNIC/Seguridad] Security Assessment of TCP at the IETF</TITLE>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<BODY>
<DIV id=idOWAReplyText61009 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Estimados Amigos,</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Podrian comentar como vienen en cada pais afrontando el tema de los delitos informaticos, hacks a bancos, ingreso a base de datos de entidades publicas, etc. (el cual podria incluir procedimientos operativos y temas de regulaciones normativas entre otros)</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Gracias,</FONT></DIV>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Max,</FONT></DIV></DIV>
<DIV id=idSignature80848 dir=ltr><BR>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>De:</B> seguridad-bounces@lacnic.net en nombre de Fernando Gont<BR><B>Enviado el:</B> sáb 27/06/2009 15:35<BR><B>Para:</B> seguridad@lacnic.net<BR><B>Asunto:</B> [LACNIC/Seguridad] Security Assessment of TCP at the IETF<BR></FONT><BR></DIV>
<DIV>
<P><FONT size=2>Estimados,<BR><BR>El tcpm wg de la IETF esta decidiendo en este momento que hacer con el<BR>documento draft-gont-tcp-security, que es una version para la IETF del<BR>documento sobre seguridad en TCP que el UK CPNI publico a principios de<BR>este año.<BR><BR>Estaría interesanet que quienes puedan/deseen emitan su opinion en la<BR>lista de correo relevante. A continuación les envio (en ingles) una<BR>explicación un poco mas detallada, junto con los enlaces correspondientes:<BR><BR>In February this year the UK CPNI published the document "Security<BR>Assessment of the Transmission Control Protocol (TCP)" (available at:<BR><A href="http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf">http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf</A>)<BR><BR>Earlier this year we published an IETF Internet-Draft version of this<BR>document (available at:<BR><A href="http://www.gont.com.ar/drafts/tcp-security/draft-gont-tcp-security-00.txt">http://www.gont.com.ar/drafts/tcp-security/draft-gont-tcp-security-00.txt</A>)<BR>in the hope of having the IETF further work on the TCP security paper UK<BR>CPNI had published.<BR><BR>My personal take (possibly biased, since I am the document author)<BR>is that this document has been the result of a lot of work (including<BR>the work of the many peple that reviewed the CPNI version of the<BR>document), and that the IETF should take this chance to work and publish<BR>something on the subject.<BR><BR>The chairs of the TCPM Working Group of the IETF are currently polling<BR>the WG for input about this document. It would be great if you could<BR>voice your opinion about whether the TCPM should take this document on,<BR>and also whether you would be willing to review this document. (Bellow<BR>you'll find a copy of the TCPM chairs' poll)<BR><BR>Please send your comments to tcpm@ietf.org (and please CC me).<BR><BR>Thanks!<BR><BR>Kind regards,<BR>Fernando<BR><BR><BR><BR><BR>--------- Original Message --------<BR>Subject: [tcpm] poll for adopting draft-gont-tcp-security<BR>Date: Wed, 24 Jun 2009 14:25:04 -0500<BR>From: Eddy, Wesley M. (GRC-MS00)[Verizon] <wesley.m.eddy@nasa.gov><BR>To: tcpm Extensions WG <tcpm@ietf.org><BR><BR>TCPMers, there was a thread a while ago about working on<BR>draft-gont-tcp-security in this working group that didn't<BR>conclusively give us a feeling one way or other:<BR><A href="http://www.ietf.org/mail-archive/web/tcpm/current/msg04489.html">http://www.ietf.org/mail-archive/web/tcpm/current/msg04489.html</A><BR><BR>Basically, my understanding is that there are at least a<BR>handful of people in the WG that think it should be done<BR>here as a WG item (more likely for Informational rather<BR>than BCP), and there are also some expressed opinions on<BR>why it shouldn't.<BR><BR>Given the raw size of the document, if the WG intends to<BR>take this document on, then we need some people to clearly<BR>commit to putting cycles into review and contributions to<BR>the document. Since it is quite large, and to my knowledge,<BR>there hasn't been a specific technical review of the content<BR>on this list, but just discussions about if the idea in<BR>general is a good or bad thing, we still need to know if<BR>people are willing to invest their time and energy in this.<BR><BR>Please let us know if there is traction for this in the<BR>near term, and/or we can also discuss it in Stockholm.<BR><BR>----------------------------<BR>Wes Eddy<BR>Network & Systems Architect<BR>Verizon FNS / NASA GRC<BR>Office: (216) 433-6682<BR>----------------------------<BR><BR>_______________________________________________<BR>tcpm mailing list<BR>tcpm@ietf.org<BR><A href="https://www.ietf.org/mailman/listinfo/tcpm">https://www.ietf.org/mailman/listinfo/tcpm</A><BR><BR><BR>--<BR>Fernando Gont<BR>e-mail: fernando@gont.com.ar || fgont@acm.org<BR>PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1<BR><BR><BR><BR><BR><BR>_______________________________________________<BR>Seguridad mailing list<BR>Seguridad@lacnic.net<BR><A href="https://mail.lacnic.net/mailman/listinfo/seguridad">https://mail.lacnic.net/mailman/listinfo/seguridad</A><BR><BR></FONT></P></DIV></BODY></HTML>