Meetings:
30th IETF, 31st IETF, 32nd IETF, 33rd IETF, 34th IETF, 35th IETF, 36th IETF, 38th IETF, 39th IETF,
40th IETF, 41st IETF, 43rd IETF, 44th IETF, 45th IETF and 46th IETF

46th IETF, Washington, DC - November 1999

Guidelines and Recommendations for Incident Processing (GRIP)

1. Agenda

09:00-09:15 Agenda bashing
09:15-09:20 draft-ietf-grip-isp-expectations-01.txt status
09:20-10:15 draft-ietf-grip-ssh-add-00.txt discussion
10:15-11:15 draft-ietf-grip-user-02.txt discussion
11:15-11:30 next steps

No changes proposed.

This working group met once during the November 1999 IETF meeting. The agenda covered each of the three documents currently under development by the group. The goal of the group is to complete all documents by the end of the year. We don't expect to need a meeting in Adelaide.

2. draft-ietf-grip-isp-expectations-01.txt

The editor was unable to complete a new draft after the Oslo meeting. He has said he'll have a new one out in the next three weeks.

3. draft-ietf-grip-ssh-add-00.txt

Tristan posted a draft to IDs but was unable to attend the meeting and receive critique. Klaus-Peter Kossakowski had some comments on the document that he will send to the list. The group was encouraged to review the draft and send comments to the list as well. We hope to have a final draft by the end of the year.

4. draft-ietf-grip-user-02.txt

Tony has completed the changes identified at the Oslo meeting but he was not able to make the ID cut-off date. He reviewed the changes he had made and said he'd have the new draft out as soon as drafts are being accepted again.

There was no additional comments regarding the document although it was noted that the review in Oslo didn't get all the way through the document. So, once the new draft is posted, the group needs to carefully review it in its entirity.

Tony mentioned making the following changes to the security policy section:

• Inbound security incidents, for each instance at what cost or charge to the consumer
• Notification of vulnerabilities that may affect YOU not the rest of the world
• Timeliness of reporting on behalf of the ISP to you and its customer base
• How is info sent to ISP, security concerns (encryption, SSH, etc...)
• Provision of reference customers - those experiencing favorable security instances is voluntary

Co-editing of document will be handled by Manos Megagiannis.

5. Next steps

Nothing else in addition to the topics already covered. Overall goal is, to be done by the end of the year.

Please send questions, comments, and/or suggestions regarding the GRIP working group to the open mailing list grip-wg@uu.net.

All issues regarding these web pages should be directed to klaus-peter@kossakowski.de.

These pages are hosted on http://www.kossakowski.de and are provided on an "AS IS" basis without any explicite or implicite responsibility, liability, etc. (For a more fully understanding please refer to the legal statements within the Impressum, which is only available in German.)