Subject:	Re: [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK)
Date:	Thu, 15 May 2014 18:18:43 +0100
From:	Robert Cragie <robert.cragie@gridmerge.com>
Reply-To:	<robert.cragie@gridmerge.com>
Organization:	Gridmerge Ltd.
To:	Alan DeKok <aland@deployingradius.com>
CC:	<aaa-doctors@ietf.org>, Michael Richardson <mcr+ietf@sandelman.ca>, "The IESG" <iesg@ietf.org>, <ace@ietf.org>, Benoit Claise <bclaise@cisco.com>, Ludwig Seitz <ludwig@sics.se>

Hi Carsten,

On Thu, May 15, 2014 at 10:29 AM, Carsten Bormann <cabo@tzi.or= g> wrote:

On 15 May 2014, at 17:02, Corinna Schmitt <schmitt@ifi.uzh.ch> wrote:

> very small

RFC 7228 has some more specific terminology here.

We know that EAP/PANA can be made to work for network authentication in sin= gle-domain networks built out of class-2 devices.
(This is the SE2.0 scenario.)

ACE is trying to do application layer authorization within networks that in= clude class-1 devices.
A single-domain solution is most likely not sufficient from a problem state= ment point of view.
(And the multiple domains may be more complicated than the essentially just= federated eduroam-style multi-domain network.)

So I think the jury is still out on the complexity issue.

=C2=A0

Multi-domain issue can be resolved, = I think. A good example is Fixed Mobile Convergence which involves more tha= n one operator domains and EAP is used there, in one it is carried in RADIU= S in another in Diameter.

=C2=A0

And it works.

=C2=A0

Regards,

=C2=A0

Behcet=C2=A0

What became pretty clear in our recent ABFAB tutorial call is that this is = not a plug-and-play situation with the existing protocols that make ABFAB w= ork. =C2=A0Some development (and not just assembly) required.

But the more important question really is whether the ABFAB model of player= s and roles fits with what needs to be done in a typical constrained-node n= etwork. =C2=A0For one, NAIs are a great answer, just not necessarily to our= questions.

Gr=C3=BC=C3=9Fe, Carsten

_______________________________________________
Ace mailing list
Ace@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/ace

--089e011832a2d1d95704f989ab76-- From nobody Sat May 17 00:35:56 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83D671A029E; Sat, 17 May 2014 00:19:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BwzVSeGvyy9I; Sat, 17 May 2014 00:19:13 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E7041A0139; Sat, 17 May 2014 00:19:10 -0700 (PDT) X-AuditID: c1b4fb30-f790e6d000001067-b1-53770d655803 Received: from ESESSHC023.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 35.CC.04199.56D07735; Sat, 17 May 2014 09:19:01 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.215]) by ESESSHC023.ericsson.se ([153.88.183.87]) with mapi id 14.03.0174.001; Sat, 17 May 2014 09:19:01 +0200 From: =?iso-8859-1?Q?G=F6ran_Selander?= To: "ace@ietf.org" , The IESG , "aaa-doctors@ietf.org" Thread-Topic: ACE problem description Thread-Index: AQHPcaBGUWhcWiNkckCydaX115UJNA== Date: Sat, 17 May 2014 07:19:00 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.1.140326 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <19EDCF35F6FF8A4FB5F781D62D4D0AF5@ericsson.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrLLMWRmVeSWpSXmKPExsUyM+JvjW4qb3mwwYvz6hYrDn1hs/j+rYfZ YsaficwOzB5LlvxkCmCM4rJJSc3JLEst0rdL4Mr4O3U6Y8F+/oojLxpYGxh383QxcnJICJhI bJtxmwXCFpO4cG89G4gtJHCUUeJXS2AXIxeQvYRR4uivNrAiNgFXiQMP3jGB2CICORILP01j BrGFBRQk3nf/YISIq0pMWX6LGcLWk1h2+RqYzQIUn/BkDtgcXgELiXXnzoLZjECLv59aAzaT WUBc4taT+UwQBwlILNlznhnCFpV4+fgfK4gtCjTz3XGYGiWJFdsvMUL06kncmDqFDcK2ljhz 7hQrhK0tsWzha2aIvYISJ2c+YZnAKDoLybpZSNpnIWmfhaR9FpL2BYysqxhFi1OLk3LTjYz0 Uosyk4uL8/P08lJLNjEC4+fglt8GOxhfPnc8xCjAwajEw6sQVBYsxJpYVlyZe4hRmoNFSZz3 9q7SYCGB9MSS1OzU1ILUovii0pzU4kOMTBycUg2MYgIMGVn/2c/NYrzvsnX5fGmWp3zxfabt upfjND9Pi91XeX/XbO2uz0ePp751P7/O8YSXs1FoosBme+OCA8+l2r/PZj4nV7ksKJhnk01K xM2HX4+3rJBWfbOoZef6/Z/2Fr7dWl16gtWXd+O8E7q6WxZ9ZOn1PCetYhKuGPGr5svilSJX 7u7XVWIpzkg01GIuKk4EADbd0LuAAgAA Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/jCzYeiU_p0rx3xI0tjsitW8nseE X-Mailman-Approved-At: Sat, 17 May 2014 00:35:55 -0700 Subject: [AAA-DOCTORS] ACE problem description X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 May 2014 07:19:15 -0000 Hello all The need for a more detailed problem description for ACE has been voiced on several occasions. As a first step in this direction we have submitted a draft, see below. In section 4 we list a set of candidate assumptions and requirements. The purpose of making this list is not to stipulate "the unique problem description", but to stimulate an aligned discussion on what assumptions and requirements the protocols in the scope of ACE should be based on. This version of the draft is not going into the transport protocol requirements since this is still ongoing discussion. This draft is one of the inputs to the ACE pre-WG meeting in Stockholm, June 2-3. I will give an update of that in a separate mail shortly. G=F6ran On 17/05/14 09:06, "internet-drafts@ietf.org" wrote: > >A new version of I-D, draft-seitz-ace-problem-description-00.txt >has been successfully submitted by Goeran Selander and posted to the >IETF repository. > >Name: draft-seitz-ace-problem-description >Revision: 00 >Title: Problem Description for Authorization in Constrained Environments >Document date: 2014-05-16 >Group: Individual Submission >Pages: 14 >URL: =20 >http://www.ietf.org/internet-drafts/draft-seitz-ace-problem-description-00 >.txt >Status: =20 >https://datatracker.ietf.org/doc/draft-seitz-ace-problem-description/ >Htmlized: =20 >http://tools.ietf.org/html/draft-seitz-ace-problem-description-00 > > >Abstract: > We present a problem description for authentication and authorization > in constrained-node networks, i.e. networks which contain some > devices with severe constraints on power, memory, and processing > resources. > > =20 > =20 > > >Please note that it may take a couple of minutes from the time of >submission >until the htmlized version and diff are available at tools.ietf.org. > >The IETF Secretariat > From nobody Sat May 17 16:32:13 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24D5B1A0188 for ; Sat, 17 May 2014 16:32:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.151 X-Spam-Level: X-Spam-Status: No, score=-1.151 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b4NEbOwO_jbJ for ; Sat, 17 May 2014 16:32:10 -0700 (PDT) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 6BCDA1A017D for ; Sat, 17 May 2014 16:32:10 -0700 (PDT) Received: by power.freeradius.org (Postfix, from userid 1000) id 0FD5B22403F1; Sun, 18 May 2014 01:32:07 +0200 (CEST) From: aland@freeradius.org To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: <20140517233207.0FD5B22403F1@power.freeradius.org> Date: Sun, 18 May 2014 01:32:07 +0200 (CEST) Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/Yqngqb-U6579zzfU_toTde_M80g Subject: [AAA-DOCTORS] Automatic tech report for Sun May 18 01:32:06 CEST 2014 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 May 2014 23:32:12 -0000 This is an automatically generated email. It lists the IETF internet-drafts which are WG items and which reference RADIUS. Drafts from the RADEXT and DIME working groups are not included. -- draft-ietf-abfab-aaa-saml-09 Active draft-ietf-abfab-arch-12 In IESG processing - ID Tracker state draft-ietf-netmod-system-mgmt-16 In IESG processing - ID Tracker state draft-ietf-softwire-map-radius-01 Active From nobody Sun May 18 13:53:03 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6185C1A02DC; Sun, 18 May 2014 13:52:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.063 X-Spam-Level: X-Spam-Status: No, score=-2.063 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CN_BODY_35=0.339, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QRXkIGwl5P1B; Sun, 18 May 2014 13:52:52 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35F421A01F6; Sun, 18 May 2014 13:52:52 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BEG80680; Sun, 18 May 2014 20:52:50 +0000 (GMT) Received: from LHREML403-HUB.china.huawei.com (10.201.5.217) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.3.158.1; Sun, 18 May 2014 21:52:42 +0100 Received: from SZXEMA403-HUB.china.huawei.com (10.82.72.35) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.158.1; Sun, 18 May 2014 21:52:44 +0100 Received: from SZXEMA501-MBS.china.huawei.com ([169.254.2.214]) by SZXEMA403-HUB.china.huawei.com ([10.82.72.35]) with mapi id 14.03.0158.001; Mon, 19 May 2014 04:52:39 +0800 From: Likepeng To: Benoit Claise , The IESG Thread-Topic: [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) Thread-Index: AQHPb8GVGaM3bo0ulUeih4UWL9aVV5tG05cA Date: Sun, 18 May 2014 20:52:39 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F252B38965@SZXEMA501-MBS.china.huawei.com> References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> In-Reply-To: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.93.135] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/TBq0jqMRcEtj7spos-YKr161Hg0 Cc: "aaa-doctors@ietf.org" , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 May 2014 20:52:54 -0000 PlRoZSBDaGFydGVyIG1ha2VzIGEgbnVtYmVyIG9mIGFzc2VydGlvbnMgdGhhdCBhcmUgcHJvdmFi bHkgZmFsc2UsIHN1Y2ggYXMgdGhhdCBBQUEgcHJvdG9jb2xzIGFyZSBpbmFwcHJvcHJpYXRlIGZv ciBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuDQoNCkluIGZhY3QsIHRoZSBjaGFydGVyIGRvZXMg bm90IHNheSB0aGF0LiBCdXQgdG8gYXZvaWQgY29uZnVzaW9uLCBsZXQncyByZW1vdmUgQUFBIHBy b3RvY29sIGZyb20gdGhlIGNoYXJ0ZXIuDQoNCkluIHRoZSBjaGFydGVyLCB3ZSBtZW50aW9uZWQg dGhhdCB3ZSB3YW50IHRvIHJldXNlIGV4aXN0aW5nIGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3Jp emF0aW9uIHByb3RvY29scyB3aGVyZSBhcHBsaWNhYmxlIHRvIGJ1aWxkIHRoZSBjb25zdHJhaW5l ZC1lbnZpcm9ubWVudCBzb2x1dGlvbi4NCg0KVGhhbmtzLA0KS2luZCBSZWdhcmRzDQpLZXBlbmcN Cg0KLS0tLS3Tyrz+1K28/i0tLS0tDQq3orz+yMs6IEFjZSBbbWFpbHRvOmFjZS1ib3VuY2VzQGll dGYub3JnXSC0+rHtIEJlbm9pdCBDbGFpc2UNCreiy83KsbzkOiAyMDE0xOo11MIxNcjVIDY6MTIN CsrVvP7IyzogVGhlIElFU0cNCrOty806IGFhYS1kb2N0b3JzQGlldGYub3JnOyBhY2VAaWV0Zi5v cmcNCtb3zOI6IFtBY2VdIEJlbm9pdCBDbGFpc2UncyBCbG9jayBvbiBjaGFydGVyLWlldGYtYWNl LTAwLTAxOiAod2l0aCBCTE9DSykNCg0KQmVub2l0IENsYWlzZSBoYXMgZW50ZXJlZCB0aGUgZm9s bG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3INCmNoYXJ0ZXItaWV0Zi1hY2UtMDAtMDE6IEJsb2Nr DQoNCldoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3Qg YW5kIHJlcGx5IHRvIGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBD QyBsaW5lcy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcyBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBo b3dldmVyLg0KDQpUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9u cywgY2FuIGJlIGZvdW5kIGhlcmU6DQpodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2No YXJ0ZXItaWV0Zi1hY2UvDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkJMT0NLOg0KLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0K DQpSZWFjdGlvbiBmcm9tIHRoZSBBQUEtZG9jdG9ycy4NCg0KMS4NCiBJIGhhdmVuJ3QgYmVlbiBm b2xsb3dpbmcgaXQgaW4gZGV0YWlsLCBidXQgaXQgZG9lcyBzZWVtIHJhdGhlciB2YWd1ZS4NCg0K Li4uDQpUaGlzIHdvcmtpbmcgZ3JvdXAgdGhlcmVmb3JlIGFpbXMgdG8gcHJvZHVjZSBhIHN0YW5k YXJkaXplZCBzb2x1dGlvbiBmb3IgYXV0aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRpb24gdG8g ZW5hYmxlIGF1dGhvcml6ZWQgYWNjZXNzIHRvIHJlc291cmNlcyBpbiBjb25zdHJhaW5lZCBlbnZp cm9ubWVudHMuDQouLi4NCg0KICBXaGF0IGFyZSAicmVzb3VyY2VzPyAgSXQgc2VlbXMgdGhleSBh cmUgYXBwbGljYXRpb25zLCBidXQgdGhlIGNoYXJ0ZXIgZG9lc24ndCBtYWtlIHRoYXQgY2xlYXIu ICBBbHNvLCBpZiB0aGUgImNvbnN0cmFpbmVkIGVudmlyb25tZW50cyIgYXJlIHVzaW5nIERUTFMs IHRoZXkgZG9uJ3Qgc2VlbSB0aGF0IGNvbnN0cmFpbmVkIHRvIG1lLg0KDQogIEl0IGxvb2tzIHRv IGJlIGEgc2xpZ2h0IHZhcmlhdGlvbiBvbiBleGlzdGluZyB0ZWNobm9sb2dpZXMuICBlLmcuIHdl IHdhbnQgWCwgWSBhbmQgWiwgYnV0IGluIHNpdHVhdGlvbiBCIGluc3RlYWQgb2YgQS4gIFNvLi4u IHdlJ3JlIGdvaW5nIHRvIGRlc2lnbiBzb21ldGhpbmcgY29tcGxldGVseSBuZXcuDQoNCiAgT24g dGhlIG90aGVyIGhhbmQsIEknbSBoYXBweSB0byBzZWUgcGVvcGxlIHBheWluZyBhdHRlbnRpb24g dG8gYXV0aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRpb24uICBUb28gbWFueSBwcm90b2NvbHMg YXJlIGRlc2lnbmVkIHRvIHNvbHZlIGEgcHJvYmxlbSBmaXJzdCwgYW5kIHNlY29uZCB0byBhZGQg c2VjdXJpdHkuDQoNCjIuIA0KVGhlIENoYXJ0ZXIgbWFrZXMgYSBudW1iZXIgb2YgYXNzZXJ0aW9u cyB0aGF0IGFyZSBwcm92YWJseSBmYWxzZSwgc3VjaCBhcyB0aGF0IEFBQSBwcm90b2NvbHMgYXJl IGluYXBwcm9wcmlhdGUgZm9yIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy4gQUFBIHByb3RvY29s cyB3ZXJlIGRlcGxveWVkIGluIHRoZSAxOTkwcyB0byBzdXBwb3J0IGV4dHJlbWVseSBsaW1pdGVk IE5BUyBkZXZpY2VzIGFuZCBJbnRlcm5ldCBob3N0cyB3aXRoIHRpbnkgZnJhY3Rpb25zIG9mIHRo ZSBwb3dlciBvZiB0b2RheSdzIHN5c3RlbXMuICBBbnkgZGV2aWNlIHRoYXQgY2FuIHJ1biBJUCBj YW4gYXV0aGVudGljYXRlIGFnYWluc3QgYSBBQUEgc2VydmVyLg0KDQpMZXQgbWUgaW5jbHVkZSB0 aGUgQUFBLWRvY3RvcnMgaW4gdGhlIGRpc2N1c3Npb24NCg0KDQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQWNlIG1haWxpbmcgbGlzdA0KQWNlQGlldGYu b3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZQ0K From nobody Sun May 18 13:53:04 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7992D1A02E7; Sun, 18 May 2014 13:52:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.152 X-Spam-Level: X-Spam-Status: No, score=-2.152 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ikgDUIvSpLEb; Sun, 18 May 2014 13:52:57 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 966141A02E3; Sun, 18 May 2014 13:52:56 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BEG80686; Sun, 18 May 2014 20:52:55 +0000 (GMT) Received: from LHREML404-HUB.china.huawei.com (10.201.5.218) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.3.158.1; Sun, 18 May 2014 21:52:52 +0100 Received: from SZXEMA404-HUB.china.huawei.com (10.82.72.36) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.158.1; Sun, 18 May 2014 21:52:54 +0100 Received: from SZXEMA501-MBS.china.huawei.com ([169.254.2.214]) by SZXEMA404-HUB.china.huawei.com ([10.82.72.36]) with mapi id 14.03.0158.001; Mon, 19 May 2014 04:52:48 +0800 From: Likepeng To: Kathleen Moriarty Thread-Topic: [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) Thread-Index: AQHPb8GVGaM3bo0ulUeih4UWL9aVV5tCH/FQgAIofACAAnXnoA== Date: Sun, 18 May 2014 20:52:47 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.93.135] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/zBnwsuy1DEBp6mAM3JiR1YxyFeg Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 May 2014 20:53:00 -0000 SGkgS2F0aGxlZW4gYW5kIGFsbCwNCg0KPklzIGl0IHdvcnRoIGhhdmluZyB0aGF0IHJlZmVyZW5j ZSBvciBkbyBmb2xrcyBsaWtlIHRoZSBkZWZpbml0aW9ucyBhcyBwcm92aWRlZCBiZWxvdyB3aXRo b3V0IHRoYXQgYWRkaXRpb25hbCByZWZlcmVuY2U/DQoNCkFzIGZhciBhcyBJIHVuZGVyc3RhbmQg UGF1bCdzIGNvbW1lbnRzLCBpZiB3ZSBhZGRlZCBSRVNUZnVsIHJlbGF0ZWQgY2xhcmlmaWNhdGlv biwgcGVvcGxlIGNhbiB1bmRlcnN0YW5kIHRoZSBjb250ZXh0IG9mIHJlc291cmNlcy4gV2UgY2Fu IGNlcnRhaW5seSBhZGQgYSByZWZlcmVuY2UgaWYgaXQgaXMgcHJlZmVycmVkLg0KDQo+V291bGQg aXQgYmUgaGVscGZ1bCB0byBzZWUgd2hhdCB0aGUgcmV2aXNpb24gbG9va3MgbGlrZSBhbmQgdG8g c2VlIGlmIHdlIGFyZSBnZXR0aW5nIGNsb3Nlcj8NCg0KSSBwcm92aWRlZCBhIG5ldyByZXZpc2lv biBiZWxvdy4gSG9wZSB3ZSBhcmUgZ2V0dGluZyBjbG9zZXIuDQoNClRoYW5rcywNCktpbmQgUmVn YXJkcw0KS2VwZW5nDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpDaGFydGVyIGNoYXJ0ZXItaWV0Zi1hY2Ut MDAtMDINCkF1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIGZvciBDb25zdHJhaW5lZA0K RW52aXJvbm1lbnQgKEFDRSkNCg0KVGhlIElFVEYgaGFzIHJlY2VudGx5IGRldmVsb3BlZCBwcm90 b2NvbHMgZm9yIHVzZSBpbiBjb25zdHJhaW5lZA0KZW52aXJvbm1lbnRzLCB3aGVyZSBuZXR3b3Jr IG5vZGVzIGFyZSBsaW1pdGVkIGluIENQVSwgbWVtb3J5IGFuZCBwb3dlci4gDQpSRVNUIGFyY2hp dGVjdHVyZSBpcyB3aWRlbHkgdXNlZCBmb3Igc3VjaCBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMu DQpJdCBoYXMgYmVlbiBvYnNlcnZlZCB0aGF0IEludGVybmV0IHByb3RvY29scyBjYW4gYmUgYXBw bGllZCB0byB0aGVzZQ0KY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLCBvZnRlbiBvbmx5IHJlcXVp cmluZyBtaW5vciB0d2Vha2luZyBhbmQNCnByb2ZpbGluZy4gSW4gb3RoZXIgY2FzZXMsIG5ldyBw cm90b2NvbHMgaGF2ZSBiZWVuIGRlZmluZWQgdG8gYWRkcmVzcw0KdGhlIHNwZWNpZmljIHJlcXVp cmVtZW50cyBvZiBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuIEFuIGV4YW1wbGUgb2YNCnN1Y2gg YSBwcm90b2NvbCBpcyB0aGUgQ29uc3RyYWluZWQgQXBwbGljYXRpb24gUHJvdG9jb2wgKENvQVAp Lg0KDQpBcyBpbiBvdGhlciBlbnZpcm9ubWVudHMsIGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3Jp emF0aW9uIHF1ZXN0aW9ucw0KYWxzbyBhcmlzZSBpbiBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMu IEZvciBleGFtcGxlLCBhIGRvb3IgbG9jayBoYXMgdG8NCmF1dGhvcml6ZSB0aGUgcGVyc29uIHNl ZWtpbmcgYWNjZXNzIHVzaW5nIGEgImRpZ2l0YWwga2V5Ii4gV2hlcmUgaXMgdGhlDQphdXRob3Jp emF0aW9uIHBvbGljeSBzdG9yZWQ/IEhvdyBkb2VzIHRoZSBkaWdpdGFsIGtleSBjb21tdW5pY2F0 ZSB3aXRoDQp0aGUgbG9jaz8gRG9lcyB0aGUgbG9jayBpbnRlcmFjdCB3aXRoIGFuIGF1dGhvcml6 YXRpb24gc2VydmVyIHRvIG9idGFpbg0KYXV0aG9yaXphdGlvbiBpbmZvcm1hdGlvbj8gSG93IGNh biBhY2Nlc3MgYmUgdGVtcG9yYXJpbHkgZ3JhbnRlZCB0bw0Kb3RoZXIgcGVyc29ucz8gSG93IGNh biBhY2Nlc3MgYmUgcmV2b2tlZD8gVGhlc2UgdHlwZXMgb2YgcXVlc3Rpb25zIGhhdmUNCmJlZW4g YW5zd2VyZWQgYnkgZXhpc3RpbmcgcHJvdG9jb2xzIGZvciB1c2UgY2FzZXMgb3V0c2lkZSBjb25z dHJhaW5lZA0KZW52aXJvbm1lbnRzLCBob3dldmVyIGluIGNvbnN0cmFpbmVkIGVudmlyb25tZW50 cywgYWRkaXRpb25hbCBhbmQNCmRpZmZlcmVudCByZXF1aXJlbWVudHMgcG9zZSBjaGFsbGVuZ2Vz IGZvciB0aGUgdXNlIG9mIHZhcmlvdXMgc2VjdXJpdHkNCnByb3RvY29scy4gSW4gcGFydGljdWxh ciwgdGhlIG5lZWQgYXJpc2VzIGZvciBhIGR5bmFtaWMgYW5kIGZpbmUgZ3JhaW5lZA0KYWNjZXNz IGNvbnRyb2wgbWVjaGFuaXNtLCB3aGVyZSBjbGllbnRzIGFuZC9vciByZXNvdXJjZSBzZXJ2ZXJz IGFyZQ0KY29uc3RyYWluZWQuDQoNClRoZSBJRVRGIGhhcyBhIGxvbmcgaGlzdG9yeSBpbiBkZXZl bG9waW5nIHRocmVlLXBhcnR5IGF1dGhlbnRpY2F0aW9uIGFuZA0KYXV0aG9yaXphdGlvbiBwcm90 b2NvbHMgZm9yIGRpc3RyaWJ1dGVkIGVudmlyb25tZW50cy4gRXhhbXBsZXMgaW5jbHVkZQ0KS2Vy YmVyb3MsIHRoZSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJlIChQS0kpLCBhbmQgdGhlIFdlYg0K QXV0aG9yaXphdGlvbiBQcm90b2NvbCAoT0F1dGgpLiBBbGwgdGhlc2UgcHJvdG9jb2xzIGVuam95 IHdpZGVzcHJlYWQNCmRlcGxveW1lbnQgb24gdGhlIEludGVybmV0LiBBbHRob3VnaCB0aGV5IGFs bCBhaW0gdG8gc29sdmUgYSBzaW1pbGFyDQpnb2FsLCBhdCBhbiBhYnN0cmFjdCBsZXZlbCwgdGhl eSBvZmZlciBxdWl0ZSBkaWZmZXJlbnQgZnVuY3Rpb25zIGFuZA0KdXRpbGl6ZSBkaWZmZXJlbnQg bWVzc2FnZSBleGNoYW5nZXMuIFRoZXNlIGRpZmZlcmVuY2VzIHJlc3VsdCBmcm9tIHRoZQ0KbWFp biBkZXBsb3ltZW50IHVzZSBjYXNlcyB0aGV5IHdlcmUgZGVzaWduZWQgZm9yIHJlc3BlY3RpdmVs eS4NCg0KUmVxdWlyZW1lbnRzIGRlcml2ZWQgZnJvbSB1c2UgY2FzZXMgaW5kaWNhdGUgdGhlIHN1 aXRhYmlsaXR5IG9mIGV4aXN0aW5nDQp3b3JrIGFzIGEgc29sdXRpb24gZm9yIGNvbnN0cmFpbmVk IGVudmlyb25tZW50cy4gVGhlc2UgcHJvdG9jb2xzLA0KaG93ZXZlciwgd2VyZSBub3Qgb3B0aW1p emVkIGZvciBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuIEFkZGl0aW9uYWwNCnJlcXVpcmVtZW50 cyB0aGF0IG5lZWQgdG8gYmUgdGFrZW4gaW50byBhY2NvdW50IGFyZSB0aGUgbGFjayBvZiBhDQpz dWl0YWJsZSB1c2VyLWludGVyZmFjZSBhbmQgdGhlIGluYWJpbGl0eSBvZiBlbWJlZGRlZCBkZXZp Y2VzIHRvIGNvbnRhY3QNCmFuIGF1dGhvcml6YXRpb24gc2VydmVyIGluIHJlYWwtdGltZSB3aXRo IGV2ZXJ5IHJlc291cmNlIGFjY2VzcyByZXF1ZXN0DQpkdWUgdG8gaW50ZXJtaXR0ZW50IGNvbm5l Y3Rpdml0eSwgZXRjLg0KDQpUaGlzIHdvcmtpbmcgZ3JvdXAgdGhlcmVmb3JlIGFpbXMgdG8gcHJv ZHVjZSBhIHN0YW5kYXJkaXplZCBzb2x1dGlvbiBmb3INCmF1dGhlbnRpY2F0aW9uIGFuZCBhdXRo b3JpemF0aW9uIHRvIGVuYWJsZSBhdXRob3JpemVkIGFjY2VzcyAoR0VULCBQVVQsIFBPU1QsIA0K REVMRVRFKSB0byByZXNvdXJjZXMgaWRlbnRpZmllZCBieSBhIFVSSSBhbmQgaG9zdGVkIG9uIGEg cmVzb3VyY2UNCnNlcnZlciBpbiBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuIEFzIGEgc3RhcnRp bmcgcG9pbnQsIHRoZSB3b3JraW5nDQpncm91cCB3aWxsIGFzc3VtZSB0aGF0IGFjY2VzcyB0byBy ZXNvdXJjZXMgYXQgYSByZXNvdXJjZSBzZXJ2ZXIgYnkgYQ0KY2xpZW50IGRldmljZSB0YWtlcyBw bGFjZSB1c2luZyBDb0FQIGFuZCBpcyBwcm90ZWN0ZWQgYnkgRFRMUy4gQm90aA0KcmVzb3VyY2Ug c2VydmVyIGFuZCBjbGllbnQgbWF5IGJlIGNvbnN0cmFpbmVkLiBUaGlzIGFjY2VzcyB3aWxsIGJl DQptZWRpYXRlZCBieSBhbiBhdXRob3JpemF0aW9uIHNlcnZlciwgd2hpY2ggaXMgbm90IGNvbnNp ZGVyZWQgdG8gYmUNCmNvbnN0cmFpbmVkLg0KDQpFeGlzdGluZyBhdXRoZW50aWNhdGlvbiBhbmQg YXV0aG9yaXphdGlvbiBwcm90b2NvbHMgd2lsbCBiZSB1c2VkIHdoZXJlDQphcHBsaWNhYmxlIHRv IGJ1aWxkIHRoZSBjb25zdHJhaW5lZC1lbnZpcm9ubWVudCBzb2x1dGlvbi4gVGhpcyByZXF1aXJl cw0KcmVsZXZhbnQgc3BlY2lmaWNhdGlvbnMgdG8gYmUgcmV2aWV3ZWQgZm9yIHN1aXRhYmlsaXR5 LCBzZWxlY3RpbmcgYQ0Kc3Vic2V0IG9mIHRoZW0gYW5kIHJlc3RyaWN0aW5nIHRoZSBvcHRpb25z IHdpdGhpbiBlYWNoIG9mIHRoZQ0Kc3BlY2lmaWNhdGlvbnMuIFNvbWUgZnVuY3Rpb25hbGl0eSwg aG93ZXZlciwgbWF5IG5vdCBiZSBhdmFpbGFibGUgaW4NCmV4aXN0aW5nIHByb3RvY29scywgaW4g d2hpY2ggY2FzZSB0aGUgc29sdXRpb24gbWF5IGFsc28gaW52b2x2ZSBuZXcNCnByb3RvY29sIHdv cmsuIExldmVyYWdpbmcgZXhpc3Rpbmcgd29yayBtZWFucyB0aGUgd29ya2luZyBncm91cCBiZW5l Zml0cw0KZnJvbSBhdmFpbGFibGUgc2VjdXJpdHkgYW5hbHlzaXMsIGltcGxlbWVudGF0aW9uLCBh bmQgZGVwbG95bWVudA0KZXhwZXJpZW5jZS4gTW9yZW92ZXIsIGEgc3RhbmRhcmRpemVkIHNvbHV0 aW9uIGZvciBmZWRlcmF0ZWQNCmF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIHdpbGwg aGVscCB0byBzdGltdWxhdGUgdGhlIGRlcGxveW1lbnQNCm9mIGNvbnN0cmFpbmVkIGRldmljZXMg dGhhdCBwcm92aWRlIGluY3JlYXNlZCBzZWN1cml0eS4NCg0KT25jZSBwcm9ncmVzcyBpbiBpZGVu dGlmeWluZyBzdWl0YWJsZSBjYW5kaWRhdGUgc29sdXRpb25zIGhhcyBiZWVuIG1hZGUsDQp0aGUg d29ya2luZyBncm91cCB3aWxsIHZlcmlmeSB3aGV0aGVyIHRoZSBzYW1lIG1lY2hhbmlzbXMgYXJl IGFsc28NCmFwcGxpY2FibGUgYmV5b25kIHRoZSB1c2Ugb2YgQ29BUCBhbmQgRFRMUywgd2hpY2gg YXJlIHRoZSB0d28gbWFpbg0KcHJvdG9jb2xzIHRoZSBncm91cCB3aWxsIGZvY3VzIG9uIGZvciBh Y2Nlc3MgdG8gcmVzb3VyY2VzLiBJbg0KcGFydGljdWxhciwgdGhlIGFiaWxpdHkgdG8gdXNlIHRo ZSBkZXZlbG9wZWQgc29sdXRpb24gb3ZlciBIVFRQIGFuZCBUTFMNCndpbGwgYmUgaW52ZXN0aWdh dGVkLiBUaGUgd29ya2luZyBncm91cCB3aWxsIG5vdCB3b3JrIG9uIG90aGVyIGFwcGxpY2F0aW9u IA0KcHJvdG9jb2xzIHdpdGggdGhlaXIgcmVsYXRlZCB0cmFuc3BvcnQgcHJvdG9jb2xzLCBhbmQg b3RoZXIgcHJvdG9jb2xzIA0KYXQgb3RoZXIgbGF5ZXJzIGluIHRoZSBzdGFjaywgdW50aWwgdGhl IHdvcmsgb24gQ29BUCBhbmQgSFRUUA0Kd2l0aCBEVExTIGFuZCBUTFMgaXMgY29tcGxldGVkLiBG dXJ0aGVybW9yZSwgdG8gZ3VhcmFudGVlIHNtb290aCB0cmFuc2l0aW9uLCB0aGUNCmludGVncmF0 aW9uIHdpdGggZXhpc3RpbmcgZGVwbG95bWVudHMgd2lsbCBiZSBzdHVkaWVkLCBwYXJ0aWN1bGFy bHkNCmNvbmNlcm5pbmcgdGhlIHVzZSBvZiBwcm90b2NvbCB0cmFuc2xhdGlvbiBwcm94aWVzLg0K DQpUaGlzIHdvcmsgZG9lcyBub3QgbWFrZSB0aGUgYXNzdW1wdGlvbiB0aGF0IHRoZSBwYXJ0eSBv ZmZlcmluZw0KYXBwbGljYXRpb24gbGF5ZXIgc2VydmljZXMgaXMgYWx3YXlzIHRoZSBzYW1lIHBh cnR5IG9mZmVyaW5nIG5ldHdvcmsNCmFjY2VzcyBzZXJ2aWNlcy4NCg0KVGhlIHdvcmtpbmcgZ3Jv dXAgaGFzIHRoZSBmb2xsb3dpbmcgdGFza3M6DQoNCjEpIFByb2R1Y2UgdXNlIGNhc2VzIGFuZCBy ZXF1aXJlbWVudHMNCg0KMikgSWRlbnRpZnkgYXV0aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRp b24gbWVjaGFuaXNtcyBzdWl0YWJsZSBmb3INCnJlc291cmNlIGFjY2VzcyBpbiBjb25zdHJhaW5l ZCBlbnZpcm9ubWVudHMuDQoNCk1pbGVzdG9uZXM6DQoNCkp1bCAyMDE0IFN1Ym1pdCAiVXNlIGNh c2VzIGFuZCBSZXF1aXJlbWVudHMiIGFzIGEgV0cgaXRlbS4NCkRlYyAyMDE0IFN1Ym1pdCAiQXV0 aGVudGljYXRpb24gYW5kIEF1dGhvcml6YXRpb24gU29sdXRpb24iIGFzIGEgV0cgaXRlbS4NCkp1 bCAyMDE1IFN1Ym1pdCAiVXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVudHMiIGRvY3VtZW50IHRvIHRo ZSBJRVNHIGZvcg0KcHVibGljYXRpb24gYXMgYW4gSW5mb3JtYXRpb25hbCBSRkMuDQpKdWwgMjAx NiBTdWJtaXQgIkF1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIFNvbHV0aW9uIg0Kc3Bl Y2lmaWNhdGlvbiB0byB0aGUgSUVTRyBmb3IgcHVibGljYXRpb24gYXMgYSBQcm9wb3NlZCBTdGFu ZGFyZC4NCg0KUHJvcG9zZWQgTWlsZXN0b25lcyANCk5vIG1pbGVzdG9uZXMgZm9yIGNoYXJ0ZXIg Zm91bmQuDQoNCi0tLS0t6YKu5Lu25Y6f5Lu2LS0tLS0NCuWPkeS7tuS6ujogS2F0aGxlZW4gTW9y aWFydHkgW21haWx0bzprYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbV0gDQrlj5HpgIHm l7bpl7Q6IDIwMTTlubQ15pyIMTfml6UgMjE6NTENCuaUtuS7tuS6ujogTGlrZXBlbmcNCuaKhOmA gTogQmVub2l0IENsYWlzZTsgVGhlIElFU0c7IGFhYS1kb2N0b3JzQGlldGYub3JnOyBhY2VAaWV0 Zi5vcmcNCuS4u+mimDogUmU6IFtBY2VdIEJlbm9pdCBDbGFpc2UncyBCbG9jayBvbiBjaGFydGVy LWlldGYtYWNlLTAwLTAxOiAod2l0aCBCTE9DSykNCg0KTGlrZXBlbmcsDQoNClNvcnJ5IGZvciB0 aGUgdG9wLXBvc3QuDQoNClRoYW5rIHlvdSBmb3IgdGhlIGRlZmluaXRpb25zIGFuZCBiZXR0ZXIg ZGVzY3JpcHRpb25zIGZvciAncmVzb3VyY2UnLg0KSSB0aGluayBQYXVsIGdvdCBpdCByaWdodCBp biBoaXMgY29tbWVudCwgdGhlIHRlcm0gcmVzb3VyY2UgaXMgd2VsbC1rbm93biBmb3IgUkVTVC1o ZWFkcyBhcyBoZSBjYWxsZWQgdGhlbS4gIElzIGl0IHdvcnRoIGhhdmluZyB0aGF0IHJlZmVyZW5j ZSBvciBkbyBmb2xrcyBsaWtlIHRoZSBkZWZpbml0aW9ucyBhcyBwcm92aWRlZCBiZWxvdyB3aXRo b3V0IHRoYXQgYWRkaXRpb25hbCByZWZlcmVuY2U/DQoNClNvbWUgb2YgdGhlIGZlZWRiYWNrIG9u IHRoZSBjaGFydGVyIGlzIHRoYXQgaXQgd291bGQgYmUgaGVscGZ1bCB0byBoYXZlIGl0IGJlIGNs ZWFyZXIgYW5kIG1vcmUgY29uY2lzZS4gIFRoZSBkaXNjdXNzaW9uIGhhcyB2ZXJ5DQpwcm9kdWN0 aXZlLCB3aXRoIG1hbnkgYW5nbGVzL3F1ZXN0aW9ucyBiZWluZyBleHBsb3JlZC4gICAgV291bGQg aXQgYmUNCmhlbHBmdWwgdG8gc2VlIHdoYXQgdGhlIHJldmlzaW9uIGxvb2tzIGxpa2UgYW5kIHRv IHNlZSBpZiB3ZSBhcmUgZ2V0dGluZyBjbG9zZXI/DQoNClRoYW5rcyENCg== From nobody Mon May 19 00:52:12 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7690E1A030F; Mon, 19 May 2014 00:52:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.302 X-Spam-Level: X-Spam-Status: No, score=-0.302 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HELO_EQ_SE=0.35, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ldwzJNjuS8kY; Mon, 19 May 2014 00:52:04 -0700 (PDT) Received: from fsmsg2.sics.se (fsmsg2.sics.se [IPv6:2001:6b0:3a:1:250:56ff:fea9:52ad]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88C051A015A; Mon, 19 May 2014 00:52:03 -0700 (PDT) Received: from pps.filterd (fsmsg2 [127.0.0.1]) by fsmsg2.sics.se (8.14.5/8.14.5) with SMTP id s4J7d8XS030384; Mon, 19 May 2014 09:51:57 +0200 Received: from letter.sics.se (letter.sics.se [193.10.64.6]) by fsmsg2.sics.se with ESMTP id 1kppjuvbns-1; Mon, 19 May 2014 09:51:57 +0200 Received: from [192.168.0.108] (unknown [85.235.11.178]) (Authenticated sender: ludwig@sics.se) by letter.sics.se (Postfix) with ESMTPSA id 68FBE40116; Mon, 19 May 2014 09:51:57 +0200 (CEST) Message-ID: <5379B81D.8090000@sics.se> Date: Mon, 19 May 2014 09:51:57 +0200 From: Ludwig Seitz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Bernard Aboba , Alan DeKok References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com>, <53747A43.7070404@sics.se>, <5374BC0B.2060505@deployingradius.com> In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms090405080601030000080302" X-Proofpoint-Spam-Reason: safe X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.11.96, 1.0.14, 0.0.0000 definitions=2014-05-18_03:2014-05-17,2014-05-18,1970-01-01 signatures=0 Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/MiIn1_RCyKmEnq9uCwE6Tz_w6zc Cc: "aaa-doctors@ietf.org" , "iesg@ietf.org" , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 May 2014 07:52:07 -0000 This is a cryptographically signed message in MIME format. --------------ms090405080601030000080302 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable On 05/16/2014 09:31 PM, Bernard Aboba wrote: > > Adaptation to *what*? That's the part I'm missing. > > > > Speaking from the RADIUS side, a well-done client is ~5K LoC. A > > simple server is more, but not a lot more. They can each do 1000's o= f > > packets per second on commodity hardware with a naive implementation= , at > > low latencies. > > [BA] I have run global networks with RADIUS servers based on hardware a= > fraction of the power of today's mobile handsets, authenticating device= s > so constrained that no modern operating system would run on them (e.g. > 100 Mhz PCs running Windows 3.1 with 4 MB RAM). The devices don't even= > need to support cryptographic computation - RADIUS was designed to > support cleartext authentication (e.g. PAP). > I'd recommend that you have a look at the work of the LWIG WG (RFC 7228). You will find that when we talk about "constrained devices"=20 we mean something like 10 KB RAM and 100 KB persistent memory. When it comes to network traffic, we struggle to keep message sizes=20 under 50 bytes to avoid fragmentation at the link layer. Do you really think that RADIUS would work for such devices without=20 further adaptation? Regards, Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms090405080601030000080302 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMVDCC BhgwggUAoAMCAQICAwiRTjANBgkqhkiG9w0BAQsFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNV BAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRl IFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlh dGUgQ2xpZW50IENBMB4XDTE0MDEwNzA3MjgzNVoXDTE1MDEwNzEyNTgyMlowODEXMBUGA1UE AwwObHVkd2lnQHNpY3Muc2UxHTAbBgkqhkiG9w0BCQEWDmx1ZHdpZ0BzaWNzLnNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLm1tc30QxHa9wtdVjC3NgxjLJicnccm0HD+ 1X16kPMKGvwps8F1oDhYn7jXIe46p1AuJMzLK0GIioE4JwxCFGdvpz7cg2xyTyrdBVUzSqez Dfqt4FOJq6hrdrIMS8MHEzl7Jk02gv9cTn/pHQvDpkiThRpbSLU5mlMqtEQ8gDQY5YyBX0Mv 5qculV08I2JU8HEeTt1oeqhvBImgQfOVYMDatHlWHUVVrmYd6iIo+cuiUGd5kiA0XuaLYX0E oCoao/z5Wg9U0sQlx0hl4r96Q+NdoZZ1prfts3qtyBzJ2hu135aikigzJ6sueWHv/jbISUek tOMm0xkx1GOqqWtEAwIDAQABo4IC1DCCAtAwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBRZmjjBh8N3klra+mVQgC00 pl68ZTAfBgNVHSMEGDAWgBRTcu2SnODaywFcfH6WNU7y1LhRgjAZBgNVHREEEjAQgQ5sdWR3 aWdAc2ljcy5zZTCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMwggEqMC4GCCsG AQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEFBQcC AjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBj ZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0 aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBv bmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5 aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLnN0 YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzAB hi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYIKwYB BQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xpZW50 LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcN AQELBQADggEBAHqEYmtWr83S+iLXE97KBnHJZiMr6PMuLKxmh0o6UJJwKgf+KTP2czxRnPSI +whuqfQZdmz6g3A2K8AooMU0RXrzncnX1c4826APdnXkRxnGQxtZXI1wuhPn4z7iDKZ6ij9u K5Pfn10JL/ERDig2qJQbqvhtIAx0RY7y7r+hLMvgXVq9mf3WRJYmGQeFW+N9t5Z1eEwG4m9R KAZm0fnfeDn/Ai4kmxTckBH7dZwW2lTtwQqQ4su+PGCJ0e9ndBLpvTqaYGSAl+L7PO7vxPhS /cS67Xa6BtnYJLTr3MaGXaN+CEUFSfwQHa9DKcAqh3kldErI3kCvnot0CigBl4aILOEwggY0 MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNzEw MjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3Rh cnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmlu ZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGll bnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEppC4Tq5a+ ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9b+0UjM0d Lep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54qzHDYeqiU fsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX9U8Eg5Dp IpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/4ebfeZuC YKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwHwYDVR0j BBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsGAQUFBzAB hhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8vd3d3LnN0 YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nm c2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIBFiJodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3 LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4ICAQAKgwh9 eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8pyTUnFsukD FUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMmCeUTyMyi kfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIzuQ8Cnykh ExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVmz/Rzkc/b 970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT5G7xPbCD z+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lApsbAonrqA SfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076khXO7cNb BIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8J7GCUBth HSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRXun0NbeY+ UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jGCA90wggPZAgEBMIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAwiRTjAJBgUrDgMCGgUAoIICHTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNDA1MTkwNzUxNTdaMCMGCSqGSIb3DQEJBDEW BBTVypqsxBk+y5douoCWGa9MgLqV+jBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGlBgkrBgEEAYI3EAQxgZcwgZQwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDCJFOMIGnBgsqhkiG9w0BCRACCzGBl6CBlDCB jDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3Vy ZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNz IDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMIkU4wDQYJKoZIhvcNAQEBBQAE ggEAZbLsMlAiHuLeQ3kgWQ3h914E1RHP/gWLC9S91s3Z7DVax4YqGviwYPf4HnyRjLJy2bAr Byk7YaQuxClZJHm6AxhetLQg5x0oVCxZMf5wFhumWdLVYie+X35B30eK39hUKTSgDNGjKD5P mkWe+q/+mhOhn8+rBNA9fhrRO3iJ6bMKvtdat0VGOC+KzTQS7Oqnk4LNL7pw2uAdLpY1Kuz2 DdxQJsMQz93n1RS2omNch+vPgP0OSK+6Jrk9BLtSTCQGXbfS8NIkFe0IF8+wF794oOT8coh4 d5W1eNIwY2dWAA/Ge2Z5hxKWgjPJNSURPtX3FL94V7bT0HJCynh4JGnDwgAAAAAAAA== --------------ms090405080601030000080302-- From nobody Mon May 19 11:41:17 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E20AE1A0096; Sat, 17 May 2014 06:51:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RKGeg1lvLfV6; Sat, 17 May 2014 06:51:06 -0700 (PDT) Received: from mail-lb0-x22a.google.com (mail-lb0-x22a.google.com [IPv6:2a00:1450:4010:c04::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4F8B1A008A; Sat, 17 May 2014 06:51:05 -0700 (PDT) Received: by mail-lb0-f170.google.com with SMTP id w7so2777846lbi.15 for ; Sat, 17 May 2014 06:50:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=sCAvcMYLSgoQ6oqIr0/+rYyMyVXPwkHLXV/NT/OFWqw=; b=uFWUo/dKzGXTdXtzfS4cfTFzeqRno6DFDQGwa2/I1BXyJ9b0C/If/MI14UL6MxsTZj 3ktrn05c/IYe2vL4T5KsOjE2/sDQFuE+dkQCBPQaXDGUwABHnXfy3Ie0hxXBF9w/c3bq xnL9GMd3kJuoT7os59YK4QBOfCczT0kzUkMZCIxXt05dSLr8G9Ik+t/N1o1qMC9jLx6P TxS/d5UztQwr7Q6IfYAwZajNNPDjarB6Oo1Guqlnt/vJ8/J0acJWzP6JqA1dbVaOj/0C +aQzzqIIdrBWgMEcMDRahSHC6/O+kywpa/0Uj9F4aIyxpfVQccxD3qN1X24PnHkOfwi+ 3ZcA== MIME-Version: 1.0 X-Received: by 10.152.116.6 with SMTP id js6mr9111127lab.3.1400334656777; Sat, 17 May 2014 06:50:56 -0700 (PDT) Received: by 10.112.26.147 with HTTP; Sat, 17 May 2014 06:50:56 -0700 (PDT) In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> Date: Sat, 17 May 2014 09:50:56 -0400 Message-ID: From: Kathleen Moriarty To: Likepeng Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/6jbYu2TVcfKP3dUEas31nGLOsWs X-Mailman-Approved-At: Mon, 19 May 2014 11:41:12 -0700 Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 May 2014 13:51:13 -0000 Likepeng, Sorry for the top-post. Thank you for the definitions and better descriptions for 'resource'. I think Paul got it right in his comment, the term resource is well-known for REST-heads as he called them. Is it worth having that reference or do folks like the definitions as provided below without that additional reference? Some of the feedback on the charter is that it would be helpful to have it be clearer and more concise. The discussion has very productive, with many angles/questions being explored. Would it be helpful to see what the revision looks like and to see if we are getting closer? Thanks! On Thu, May 15, 2014 at 5:13 PM, Likepeng wrote: >>What are "resources? It seems they are applications, but the charter doe= sn't make that clear. > > I think I have explained in another thread. Resources are not application= s, and the resource concept is taken from HTTP protocol. > > About the "resource", we can take the definition from RFC2616: > > resource > A network data object or service that can be identified by a URI, > as defined in section 3.2. Resources may be available in multiple > representations (e.g. multiple languages, data formats, size, and > resolutions) or vary in other ways. > > For example, resources can be temperature sensors on a data collection no= de, or a list of alarms on a home security controller. [RFC6690] > > Maybe we can add two explanations: one is that resources can be identifie= d by a URI, two is that resources are hosted on the resource server. > > "Access to a resource" means Get, Put, Post and Delete to a resource. > >>... >>This working group therefore aims to produce a standardized solution for = authentication and authorization to enable authorized access to resources i= n constrained environments. >>... > > This sentence has been revised to: > > NEW > This working group therefore aims to produce a standardized solution for = authentication and authorization to enable authorized access (Get, Put, Pos= t, Delete) to resources identified by a URI and hosted on a resource server= in constrained environments. > END > > Hope it clarifies. > > Thanks, > Kind Regards > Kepeng > > -----=E9=82=AE=E4=BB=B6=E5=8E=9F=E4=BB=B6----- > =E5=8F=91=E4=BB=B6=E4=BA=BA: Ace [mailto:ace-bounces@ietf.org] =E4=BB=A3= =E8=A1=A8 Benoit Claise > =E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4: 2014=E5=B9=B45=E6=9C=8815=E6=97=A5 = 6:12 > =E6=94=B6=E4=BB=B6=E4=BA=BA: The IESG > =E6=8A=84=E9=80=81: aaa-doctors@ietf.org; ace@ietf.org > =E4=B8=BB=E9=A2=98: [Ace] Benoit Claise's Block on charter-ietf-ace-00-01= : (with BLOCK) > > Benoit Claise has entered the following ballot position for > charter-ietf-ace-00-01: Block > > When responding, please keep the subject line intact and reply to all ema= il addresses included in the To and CC lines. (Feel free to cut this introd= uctory paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > http://datatracker.ietf.org/doc/charter-ietf-ace/ > > > > ---------------------------------------------------------------------- > BLOCK: > ---------------------------------------------------------------------- > > Reaction from the AAA-doctors. > > 1. > I haven't been following it in detail, but it does seem rather vague. > > ... > This working group therefore aims to produce a standardized solution for = authentication and authorization to enable authorized access to resources i= n constrained environments. > ... > > What are "resources? It seems they are applications, but the charter d= oesn't make that clear. Also, if the "constrained environments" are using = DTLS, they don't seem that constrained to me. > > It looks to be a slight variation on existing technologies. e.g. we wa= nt X, Y and Z, but in situation B instead of A. So... we're going to desig= n something completely new. > > On the other hand, I'm happy to see people paying attention to authenti= cation and authorization. Too many protocols are designed to solve a probl= em first, and second to add security. > > 2. > The Charter makes a number of assertions that are provably false, such as= that AAA protocols are inappropriate for constrained environments. AAA pro= tocols were deployed in the 1990s to support extremely limited NAS devices = and Internet hosts with tiny fractions of the power of today's systems. An= y device that can run IP can authenticate against a AAA server. > > Let me include the AAA-doctors in the discussion > > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace --=20 Best regards, Kathleen From nobody Mon May 19 11:41:19 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91E281A0281; Sun, 18 May 2014 20:02:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17qavok0o38E; Sun, 18 May 2014 20:02:16 -0700 (PDT) Received: from mail-qc0-x230.google.com (mail-qc0-x230.google.com [IPv6:2607:f8b0:400d:c01::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B072D1A0265; Sun, 18 May 2014 20:02:15 -0700 (PDT) Received: by mail-qc0-f176.google.com with SMTP id r5so8093546qcx.35 for ; Sun, 18 May 2014 20:02:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ajcdbpyw4QVcFPziissh2Yi+1zWIOKiwxtP4NkRzvyE=; b=minySdtrXgdySIK2TveiUQlpKbvCASc8Iw31+3h3atkeHHQYxiO+f+a9CsjmyYjaV9 IFRyLHZnukEh9wDLZib56eCsOkk/JXHIjCwyLUw2d+P4ZScgQBv/VNUFg2DxcnZ8PU8S mW8AcnA+vQ0iKFN0Uaqle4nzMcheRVTaUzKk+lq1LCnPvz4oR2/2wkUXJMSjBMPA/ScO RaQ2i8N85QL/h5QL/P/hVxVEaUx4c70iqSfOxy/UD++tD/9b4nZglOJfVuaOWsblMKCA VRLXYwGwLOe7R5+NONQ+ek0gWtpXJOTOsDjx89RAGZ2Q/Du+xVYdBZqP+jiqXvyo86BF 36vg== X-Received: by 10.140.107.198 with SMTP id h64mr43277438qgf.30.1400468535338; Sun, 18 May 2014 20:02:15 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id h78sm10043075qgd.10.2014.05.18.20.02.13 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 18 May 2014 20:02:13 -0700 (PDT) X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Kathleen Moriarty X-Mailer: iPhone Mail (11D167) In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> Date: Sun, 18 May 2014 23:02:14 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <5DD0213F-5174-4BBD-845D-D965408B332F@gmail.com> References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> To: Likepeng Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/hhe2NfgBNHVk_7zthDdubIaMWxY X-Mailman-Approved-At: Mon, 19 May 2014 11:41:12 -0700 Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Benoit Claise's Block on charter-ietf-ace-00-01: (with BLOCK) X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 May 2014 03:02:20 -0000 Hi Likepeng, I'm fine with or without it, it just depends if people find it helpful. The= term was obvious to me because of other projects using REST and my familiar= ity. It's up to the group if it is helpful or not. Thanks, Kathleen=20 Sent from my iPhone > On May 18, 2014, at 4:52 PM, Likepeng wrote: >=20 > Hi Kathleen and all, >=20 >> Is it worth having that reference or do folks like the definitions as pro= vided below without that additional reference? >=20 > As far as I understand Paul's comments, if we added RESTful related clarif= ication, people can understand the context of resources. We can certainly ad= d a reference if it is preferred. >=20 >> Would it be helpful to see what the revision looks like and to see if we a= re getting closer? >=20 > I provided a new revision below. Hope we are getting closer. >=20 > Thanks, > Kind Regards > Kepeng >=20 > --------------------------------------------------------------------------= ----------------------------------------------------------------------------= --------------------------------- >=20 > Charter charter-ietf-ace-00-02 > Authentication and Authorization for Constrained > Environment (ACE) >=20 > The IETF has recently developed protocols for use in constrained > environments, where network nodes are limited in CPU, memory and power.=20= > REST architecture is widely used for such constrained environments. > It has been observed that Internet protocols can be applied to these > constrained environments, often only requiring minor tweaking and > profiling. In other cases, new protocols have been defined to address > the specific requirements of constrained environments. An example of > such a protocol is the Constrained Application Protocol (CoAP). >=20 > As in other environments, authentication and authorization questions > also arise in constrained environments. For example, a door lock has to > authorize the person seeking access using a "digital key". Where is the > authorization policy stored? How does the digital key communicate with > the lock? Does the lock interact with an authorization server to obtain > authorization information? How can access be temporarily granted to > other persons? How can access be revoked? These types of questions have > been answered by existing protocols for use cases outside constrained > environments, however in constrained environments, additional and > different requirements pose challenges for the use of various security > protocols. In particular, the need arises for a dynamic and fine grained > access control mechanism, where clients and/or resource servers are > constrained. >=20 > The IETF has a long history in developing three-party authentication and > authorization protocols for distributed environments. Examples include > Kerberos, the Public Key Infrastructure (PKI), and the Web > Authorization Protocol (OAuth). All these protocols enjoy widespread > deployment on the Internet. Although they all aim to solve a similar > goal, at an abstract level, they offer quite different functions and > utilize different message exchanges. These differences result from the > main deployment use cases they were designed for respectively. >=20 > Requirements derived from use cases indicate the suitability of existing > work as a solution for constrained environments. These protocols, > however, were not optimized for constrained environments. Additional > requirements that need to be taken into account are the lack of a > suitable user-interface and the inability of embedded devices to contact > an authorization server in real-time with every resource access request > due to intermittent connectivity, etc. >=20 > This working group therefore aims to produce a standardized solution for > authentication and authorization to enable authorized access (GET, PUT, PO= ST,=20 > DELETE) to resources identified by a URI and hosted on a resource > server in constrained environments. As a starting point, the working > group will assume that access to resources at a resource server by a > client device takes place using CoAP and is protected by DTLS. Both > resource server and client may be constrained. This access will be > mediated by an authorization server, which is not considered to be > constrained. >=20 > Existing authentication and authorization protocols will be used where > applicable to build the constrained-environment solution. This requires > relevant specifications to be reviewed for suitability, selecting a > subset of them and restricting the options within each of the > specifications. Some functionality, however, may not be available in > existing protocols, in which case the solution may also involve new > protocol work. Leveraging existing work means the working group benefits > from available security analysis, implementation, and deployment > experience. Moreover, a standardized solution for federated > authentication and authorization will help to stimulate the deployment > of constrained devices that provide increased security. >=20 > Once progress in identifying suitable candidate solutions has been made, > the working group will verify whether the same mechanisms are also > applicable beyond the use of CoAP and DTLS, which are the two main > protocols the group will focus on for access to resources. In > particular, the ability to use the developed solution over HTTP and TLS > will be investigated. The working group will not work on other application= =20 > protocols with their related transport protocols, and other protocols=20 > at other layers in the stack, until the work on CoAP and HTTP > with DTLS and TLS is completed. Furthermore, to guarantee smooth transitio= n, the > integration with existing deployments will be studied, particularly > concerning the use of protocol translation proxies. >=20 > This work does not make the assumption that the party offering > application layer services is always the same party offering network > access services. >=20 > The working group has the following tasks: >=20 > 1) Produce use cases and requirements >=20 > 2) Identify authentication and authorization mechanisms suitable for > resource access in constrained environments. >=20 > Milestones: >=20 > Jul 2014 Submit "Use cases and Requirements" as a WG item. > Dec 2014 Submit "Authentication and Authorization Solution" as a WG item. > Jul 2015 Submit "Use cases and Requirements" document to the IESG for > publication as an Informational RFC. > Jul 2016 Submit "Authentication and Authorization Solution" > specification to the IESG for publication as a Proposed Standard. >=20 > Proposed Milestones=20 > No milestones for charter found. >=20 > -----=E9=82=AE=E4=BB=B6=E5=8E=9F=E4=BB=B6----- > =E5=8F=91=E4=BB=B6=E4=BA=BA: Kathleen Moriarty [mailto:kathleen.moriarty.i= etf@gmail.com]=20 > =E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4: 2014=E5=B9=B45=E6=9C=8817=E6=97=A5 2= 1:51 > =E6=94=B6=E4=BB=B6=E4=BA=BA: Likepeng > =E6=8A=84=E9=80=81: Benoit Claise; The IESG; aaa-doctors@ietf.org; ace@iet= f.org > =E4=B8=BB=E9=A2=98: Re: [Ace] Benoit Claise's Block on charter-ietf-ace-00= -01: (with BLOCK) >=20 > Likepeng, >=20 > Sorry for the top-post. >=20 > Thank you for the definitions and better descriptions for 'resource'. > I think Paul got it right in his comment, the term resource is well-known f= or REST-heads as he called them. Is it worth having that reference or do fo= lks like the definitions as provided below without that additional reference= ? >=20 > Some of the feedback on the charter is that it would be helpful to have it= be clearer and more concise. The discussion has very > productive, with many angles/questions being explored. Would it be > helpful to see what the revision looks like and to see if we are getting c= loser? >=20 > Thanks! From nobody Fri May 23 13:18:24 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A75551A0041; Fri, 23 May 2014 13:18:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -13.56 X-Spam-Level: X-Spam-Status: No, score=-13.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_03_06=1.592, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jiNSh2u1Z57t; Fri, 23 May 2014 13:18:18 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85F791A0031; Fri, 23 May 2014 13:18:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4105; q=dns/txt; s=iport; t=1400876297; x=1402085897; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=ldrc+BAD0jxa3TmnofxCr7Rtqn9ogFwb2qHNlKaa68Q=; b=LU61c+Fjs9RWD+UlCLac50hDVIXgVULsLTtzEjdiz8OeO7uIWkAxjTs6 9gXOCY/cR/EMWLoQlpczxOKTan5DUZACCcGaMMcnnoRqj1jIzh2EdZCRu DFNOTCSlLcdqkPIVknrcxYE64IKDfFsMSlDuS+oxaxVk1TWTNmfDTKtFr A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AtsJANCrf1OtJA2K/2dsb2JhbABbJ4JgUsUDAYEIFnSCJQEBAQQ4QA0ELBYPCQMCAQIBOwoGAQwGAgEBiCkDEQ3YJRMEi0N5gh2EQASKIY9RhmuMPIF4gWAdMA X-IronPort-AV: E=Sophos;i="4.98,895,1392163200"; d="scan'208";a="327446479" Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-7.cisco.com with ESMTP; 23 May 2014 20:18:16 +0000 Received: from [10.21.115.81] (sjc-vpn2-849.cisco.com [10.21.115.81]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id s4NKICjP032432; Fri, 23 May 2014 20:18:13 GMT Message-ID: <537F7D5D.8080100@cisco.com> Date: Fri, 23 May 2014 09:54:53 -0700 From: Benoit Claise User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: "aaa-doctors@ietf.org" , "MIB Doctors (E-mail)" , YANG Doctors , "ops-dir@ietf.org" , "pm-dir@ietf.org" , IETF DNS Directorate References: <20140522225006.13486.44271.idtracker@ietfa.amsl.com> In-Reply-To: <20140522225006.13486.44271.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <20140522225006.13486.44271.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/Bjfk9WxyVB-m6UKCrGblJpO7oDU Subject: [AAA-DOCTORS] Fwd: [IESG-AGENDA-DIST] Summarized Agenda for the 2014-05-29 IESG Teleconference X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 May 2014 20:18:20 -0000 Dear all, Please find below the agenda of the May 29th IESG telechat. Please send your questions, comments and concerns before May 28th COB. Thanks and Regards, Benoit. -------- Original Message -------- INTERNET ENGINEERING STEERING GROUP (IESG) Summarized Agenda for the 2014-05-29 IESG Teleconference This agenda was generated at 2014-05-22 15:44:11 PDT Up-to-date web version of this agenda can be found at: https://datatracker.ietf.org/iesg/agenda/ 2. Protocol Actions 2.1 WG Submissions 2.1.1 New Items o draft-ietf-bfd-mib-20 - IETF stream BFD Management Information Base (Proposed Standard) Token: Adrian Farrel IANA Review: IANA OK - Actions Needed Consensus: Yes o draft-ietf-bfd-tc-mib-08 - IETF stream Definitions of Textual Conventions (TCs) for Bidirectional Forwarding Detection (BFD) Management (Proposed Standard) Token: Adrian Farrel IANA Review: Version Changed - Review Needed Consensus: Yes o draft-ietf-sidr-policy-qualifiers-01 - IETF stream Policy Qualifiers in RPKI Certificates (Proposed Standard) Token: Alia Atlas IANA Review: IANA OK - No Actions Needed Consensus: Yes o draft-ietf-idr-last-as-reservation-07 - IETF stream Reservation of Last Autonomous System (AS) Numbers (Best Current Practice) Token: Alia Atlas IANA Review: Version Changed - Review Needed Consensus: Yes o draft-kivinen-ipsecme-ikev2-rfc5996bis-03 - IETF stream Internet Key Exchange Protocol Version 2 (IKEv2) (Internet Standard) Token: Kathleen Moriarty IANA Review: IANA OK - Actions Needed Consensus: Yes 2.1.2 Returning Items o draft-ietf-netmod-system-mgmt-16 - IETF stream A YANG Data Model for System Management (Proposed Standard) Token: Benoit Claise IANA Review: Version Changed - Review Needed Consensus: Yes 2.2 Individual Submissions 2.2.1 New Items NONE 2.2.2 Returning Items NONE 2.3 Status Changes 2.3.1 New Items NONE 2.3.2 Returning Items NONE 3. Document Actions 3.1 WG Submissions 3.1.1 New Items o draft-ietf-pwe3-p2mp-pw-requirements-09 - IETF stream Requirements and Framework for Point-to-Multipoint Pseudowires over MPLS Packet Switched Networks (Informational) Note: Andrew Malis (andrew.g.malis@verizon.com) is the document shepherd. Token: Adrian Farrel IANA Review: IANA OK - No Actions Needed Consensus: Yes o draft-ietf-mmusic-latching-05 - IETF stream Latching: Hosted NAT Traversal (HNT) for Media in Real-Time Communication (Informational) Token: Alissa Cooper IANA Review: IANA OK - No Actions Needed Consensus: Unknown Last call expires: 2014-05-28 3.1.2 Returning Items NONE 3.2 Individual Submissions Via AD 3.2.1 New Items o draft-pal-eidr-urn-02 - IETF stream Entertainment Identifier Registry (EIDR) URN Namespace Definition (Informational) Token: Barry Leiba IANA Review: IANA OK - Actions Needed Consensus: Yes 3.2.2 Returning Items NONE 3.3 Status Changes 3.3.1 New Items NONE 3.3.2 Returning Items NONE 3.4 IRTF and Independent Submission Stream Documents 3.4.1 New Items NONE 3.4.2 Returning Items NONE 3.4.3 For Action o conflict-review-mahalingam-dutt-dcops-vxlan-00 IETF conflict review for draft-mahalingam-dutt-dcops-vxlan draft-mahalingam-dutt-dcops-vxlan-09 VXLAN: A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks (ISE: Informational) Token: Jari Arkko 4. Working Group Actions 4.1 WG Creation 4.1.1 Proposed for IETF Review o TCP Increased Security (tcpinc) 4.1.2 Proposed for Approval NONE 4.2 WG Rechartering 4.2.1 Under Evaluation for IETF Review o Benchmarking Methodology (bmwg) 4.2.2 Proposed for Approval o Bidirectional Forwarding Detection (bfd) From nobody Sat May 24 16:32:45 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F15B1A0137 for ; Sat, 24 May 2014 16:32:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.149 X-Spam-Level: X-Spam-Status: No, score=0.149 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J4G5s_jI23GL for ; Sat, 24 May 2014 16:32:41 -0700 (PDT) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 9D8C61A0129 for ; Sat, 24 May 2014 16:32:41 -0700 (PDT) Received: by power.freeradius.org (Postfix, from userid 1000) id 169D022403AC; Sun, 25 May 2014 01:32:08 +0200 (CEST) From: aland@freeradius.org To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: <20140524233208.169D022403AC@power.freeradius.org> Date: Sun, 25 May 2014 01:32:08 +0200 (CEST) Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/6r0Qe0ZK-cFwJp-143xJ2sC2hS0 Subject: [AAA-DOCTORS] Automatic tech report for Sun May 25 01:32:07 CEST 2014 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 May 2014 23:32:43 -0000 This is an automatically generated email. It lists the IETF internet-drafts which are WG items and which reference RADIUS. Drafts from the RADEXT and DIME working groups are not included. -- draft-ietf-abfab-aaa-saml-09 Active draft-ietf-abfab-arch-12 In IESG processing - ID Tracker state draft-ietf-netmod-system-mgmt-16 In IESG processing - ID Tracker state draft-ietf-softwire-map-radius-01 Active From nobody Mon May 26 01:17:50 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BE681A004C; Mon, 26 May 2014 01:17:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.852 X-Spam-Level: X-Spam-Status: No, score=-4.852 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jcbMYM2O_3wE; Mon, 26 May 2014 01:17:20 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F3591A0045; Mon, 26 May 2014 01:17:19 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BHF32991; Mon, 26 May 2014 08:17:15 +0000 (GMT) Received: from LHREML406-HUB.china.huawei.com (10.201.5.243) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 26 May 2014 09:16:37 +0100 Received: from SZXEMA402-HUB.china.huawei.com (10.82.72.34) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 26 May 2014 09:16:59 +0100 Received: from SZXEMA501-MBX.china.huawei.com ([169.254.1.67]) by SZXEMA402-HUB.china.huawei.com ([10.82.72.34]) with mapi id 14.03.0158.001; Mon, 26 May 2014 16:16:47 +0800 From: Likepeng To: Likepeng , Kathleen Moriarty , "adrian@olddog.co.uk" Thread-Topic: Revised charter proposal: charter-ietf-ace-00-02 Thread-Index: AQHPeLrW9teE9ryEO0GmvALEdUzf8A== Date: Mon, 26 May 2014 08:16:47 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F258140E59@SZXEMA501-MBX.china.huawei.com> References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.202.9.26] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/WFDfs0hHN8efO6EsdmMN1YPgDW0 Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: [AAA-DOCTORS] Revised charter proposal: charter-ietf-ace-00-02 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 May 2014 08:17:23 -0000 X-List-Received-Date: Mon, 26 May 2014 08:17:23 -0000 SGVsbG8gYWxsLA0KDQpCYXNlZCBvbiByZWNlbnQgZGlzY3Vzc2lvbnMsIEkgbWFkZSBhIHJldmlz ZWQgY2hhcnRlciBwcm9wb3NhbCwgYXMgaW5jbHVkZWQgaW4gdGhpcyBlbWFpbCwgbm90IG9uIHRo ZSB3ZWJwYWdlIHlldC4gDQoNClBsZWFzZSB0YWtlIGEgbG9vayBhbmQgbGV0IHVzIGtub3cgaWYg eW91IGhhdmUgYW55IGZ1cnRoZXIgY29tbWVudHMuDQoNCkBBZHJpYW4gYW5kIEBCZW5vaXQsIHBs ZWFzZSBjaGVjayBpZiB0aGUgcHJvcG9zZWQgdGV4dHMgY2FuIHJlc29sdmUgeW91ciBjb21tZW50 cy4NCg0KVGhhbmtzLA0KS2luZCBSZWdhcmRzDQpLZXBlbmcNCg0KLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KQ29tcGFyZWQgd2l0aCBjaGFydGVyLWlldGYtYWNl LTAwLTAxIG9uIHRoZSB3ZWJwYWdlLCB0aGUgY2hhbmdlcyBhcmU6DQoNCigxKQlBZGQgb25lIGNs YXJpZmljYXRpb24gc2VudGVuY2UgYWJvdXQgUkVTVCBhcmNoaXRlY3R1cmU6DQpPTEQNClRoZSBJ RVRGIGhhcyByZWNlbnRseSBkZXZlbG9wZWQgcHJvdG9jb2xzIGZvciB1c2UgaW4gY29uc3RyYWlu ZWQNCmVudmlyb25tZW50cywgd2hlcmUgbmV0d29yayBub2RlcyBhcmUgbGltaXRlZCBpbiBDUFUs IG1lbW9yeSBhbmQgcG93ZXIuIA0KUkVTVCBhcmNoaXRlY3R1cmUgaXMgd2lkZWx5IHVzZWQgZm9y IHN1Y2ggY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLg0KDQpORVcNClRoZSBJRVRGIGhhcyByZWNl bnRseSBkZXZlbG9wZWQgcHJvdG9jb2xzIGZvciB1c2UgaW4gY29uc3RyYWluZWQNCmVudmlyb25t ZW50cywgd2hlcmUgbmV0d29yayBub2RlcyBhcmUgbGltaXRlZCBpbiBDUFUsIG1lbW9yeSBhbmQg cG93ZXIuDQpSRVNUIGFyY2hpdGVjdHVyZSBpcyB3aWRlbHkgdXNlZCBmb3Igc3VjaCBjb25zdHJh aW5lZCBlbnZpcm9ubWVudHMuDQpFTkQNCg0KKDIpCVJlbW92ZSDigJxBQUEgcHJvdG9jb2zigJ0g ZnJvbSB0aGUgY2hhcnRlcjoNCk9MRA0KVGhlIElFVEYgaGFzIGEgbG9uZyBoaXN0b3J5IGluIGRl dmVsb3BpbmcgdGhyZWUtcGFydHkgYXV0aGVudGljYXRpb24gYW5kDQphdXRob3JpemF0aW9uIHBy b3RvY29scyBmb3IgZGlzdHJpYnV0ZWQgZW52aXJvbm1lbnRzLiBFeGFtcGxlcyBpbmNsdWRlDQpL ZXJiZXJvcywgdGhlIFB1YmxpYyBLZXkgSW5mcmFzdHJ1Y3R1cmUgKFBLSSksIHRoZSBBdXRoZW50 aWNhdGlvbiwNCkF1dGhvcml6YXRpb24gYW5kIEFjY291bnRpbmcgKEFBQSkgaW5mcmFzdHJ1Y3R1 cmUsIGFuZCB0aGUgV2ViDQpBdXRob3JpemF0aW9uIFByb3RvY29sIChPQXV0aCkuDQoNCk5FVw0K VGhlIElFVEYgaGFzIGEgbG9uZyBoaXN0b3J5IGluIGRldmVsb3BpbmcgdGhyZWUtcGFydHkgYXV0 aGVudGljYXRpb24gYW5kDQphdXRob3JpemF0aW9uIHByb3RvY29scyBmb3IgZGlzdHJpYnV0ZWQg ZW52aXJvbm1lbnRzLiBFeGFtcGxlcyBpbmNsdWRlDQpLZXJiZXJvcywgdGhlIFB1YmxpYyBLZXkg SW5mcmFzdHJ1Y3R1cmUgKFBLSSksIGFuZCB0aGUgV2ViIEF1dGhvcml6YXRpb24gUHJvdG9jb2wg KE9BdXRoKS4NCkVORA0KDQooMykgQ2xhcmlmeSB0aGUgc2NvcGU6DQpPTEQ6DQpOb3RlIHRoYXQg dGhlIGluaXRpYWwgZm9jdXMgaXMgb24gQ29BUCBhbmQgSFRUUCB3aXRoIERUTFMgYW5kIFRMUy4N Ck90aGVyIHNlY3VyaXR5IHByb3RvY29scyBtYXkgYmUgY29uc2lkZXJlZCBhcyBsb25nIGFzIHRo ZSBwcmltYXJ5IGZvY3VzIGlzIG1haW50YWluZWQuICANCk90aGVyIGFwcGxpY2F0aW9uIHByb3Rv Y29scyBhbmQgcHJvdG9jb2xzIGF0IG90aGVyIGxheWVycyBpbiB0aGUgc3RhY2sgYXJlIG91dCBv ZiBzY29wZS4NCg0KTkVXDQpOb3RlIHRoYXQgdGhlIGluaXRpYWwgZm9jdXMgaXMgb24gQ29BUCBh bmQgSFRUUCB3aXRoIERUTFMgYW5kIFRMUy4NCk90aGVyIHNlY3VyaXR5IHByb3RvY29scyBtYXkg YmUgY29uc2lkZXJlZCBhcyBsb25nIGFzIHRoZSBwcmltYXJ5IGZvY3VzIGlzIG1haW50YWluZWQu ICANClRoZSBncm91cCBpcyBzY29wZWQgdG8gd29yayBvbmx5IG9uIHRoZSB3ZWIgcHJvdG9jb2xz IGFuZCBkYXRhIGNhcnJpZWQgd2l0aGluIHRoZW0uDQpFTkQNCg0KKDQpCVVwZGF0ZSBtaWxlc3Rv bmVzIGZvciB0aGUgdXNlIGNhc2UgJiByZXF1aXJlbWVudHMgZG9jdW1lbnQ6DQpPTEQ6DQpKdWwg MjAxNSBTdWJtaXQg4oCcVXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVudHPigJ0gZG9jdW1lbnQgdG8g SUVTRyBmb3IgcHVibGljYXRpb24gYXMgaW5mb3JtYXRpb25hbCBSRkMuDQoNCk5FVw0KRGVjIDIw MTQgT3B0aW9uYWxseSwgc3VibWl0ICJVc2UgY2FzZXMgYW5kIFJlcXVpcmVtZW50cyIgZG9jdW1l bnQgdG8gdGhlIElFU0cgZm9yIHB1YmxpY2F0aW9uIGFzIGFuIEluZm9ybWF0aW9uYWwgUkZDLg0K RU5EDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCkNoYXJ0ZXIgY2hhcnRlci1pZXRmLWFjZS0wMC0wMg0KQXV0aGVudGljYXRpb24g YW5kIEF1dGhvcml6YXRpb24gZm9yIENvbnN0cmFpbmVkDQpFbnZpcm9ubWVudCAoQUNFKQ0KDQpU aGUgSUVURiBoYXMgcmVjZW50bHkgZGV2ZWxvcGVkIHByb3RvY29scyBmb3IgdXNlIGluIGNvbnN0 cmFpbmVkDQplbnZpcm9ubWVudHMsIHdoZXJlIG5ldHdvcmsgbm9kZXMgYXJlIGxpbWl0ZWQgaW4g Q1BVLCBtZW1vcnkgYW5kIHBvd2VyLiANClJFU1QgYXJjaGl0ZWN0dXJlIGlzIHdpZGVseSB1c2Vk IGZvciBzdWNoIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy4NCkl0IGhhcyBiZWVuIG9ic2VydmVk IHRoYXQgSW50ZXJuZXQgcHJvdG9jb2xzIGNhbiBiZSBhcHBsaWVkIHRvIHRoZXNlDQpjb25zdHJh aW5lZCBlbnZpcm9ubWVudHMsIG9mdGVuIG9ubHkgcmVxdWlyaW5nIG1pbm9yIHR3ZWFraW5nIGFu ZA0KcHJvZmlsaW5nLiBJbiBvdGhlciBjYXNlcywgbmV3IHByb3RvY29scyBoYXZlIGJlZW4gZGVm aW5lZCB0byBhZGRyZXNzDQp0aGUgc3BlY2lmaWMgcmVxdWlyZW1lbnRzIG9mIGNvbnN0cmFpbmVk IGVudmlyb25tZW50cy4gQW4gZXhhbXBsZSBvZg0Kc3VjaCBhIHByb3RvY29sIGlzIHRoZSBDb25z dHJhaW5lZCBBcHBsaWNhdGlvbiBQcm90b2NvbCAoQ29BUCkuDQoNCkFzIGluIG90aGVyIGVudmly b25tZW50cywgYXV0aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRpb24gcXVlc3Rpb25zDQphbHNv IGFyaXNlIGluIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy4gRm9yIGV4YW1wbGUsIGEgZG9vciBs b2NrIGhhcyB0bw0KYXV0aG9yaXplIHRoZSBwZXJzb24gc2Vla2luZyBhY2Nlc3MgdXNpbmcgYSAi ZGlnaXRhbCBrZXkiLiBXaGVyZSBpcyB0aGUNCmF1dGhvcml6YXRpb24gcG9saWN5IHN0b3JlZD8g SG93IGRvZXMgdGhlIGRpZ2l0YWwga2V5IGNvbW11bmljYXRlIHdpdGgNCnRoZSBsb2NrPyBEb2Vz IHRoZSBsb2NrIGludGVyYWN0IHdpdGggYW4gYXV0aG9yaXphdGlvbiBzZXJ2ZXIgdG8gb2J0YWlu DQphdXRob3JpemF0aW9uIGluZm9ybWF0aW9uPyBIb3cgY2FuIGFjY2VzcyBiZSB0ZW1wb3Jhcmls eSBncmFudGVkIHRvDQpvdGhlciBwZXJzb25zPyBIb3cgY2FuIGFjY2VzcyBiZSByZXZva2VkPyBU aGVzZSB0eXBlcyBvZiBxdWVzdGlvbnMgaGF2ZQ0KYmVlbiBhbnN3ZXJlZCBieSBleGlzdGluZyBw cm90b2NvbHMgZm9yIHVzZSBjYXNlcyBvdXRzaWRlIGNvbnN0cmFpbmVkDQplbnZpcm9ubWVudHMs IGhvd2V2ZXIgaW4gY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLCBhZGRpdGlvbmFsIGFuZA0KZGlm ZmVyZW50IHJlcXVpcmVtZW50cyBwb3NlIGNoYWxsZW5nZXMgZm9yIHRoZSB1c2Ugb2YgdmFyaW91 cyBzZWN1cml0eQ0KcHJvdG9jb2xzLiBJbiBwYXJ0aWN1bGFyLCB0aGUgbmVlZCBhcmlzZXMgZm9y IGEgZHluYW1pYyBhbmQgZmluZSBncmFpbmVkDQphY2Nlc3MgY29udHJvbCBtZWNoYW5pc20sIHdo ZXJlIGNsaWVudHMgYW5kL29yIHJlc291cmNlIHNlcnZlcnMgYXJlDQpjb25zdHJhaW5lZC4NCg0K VGhlIElFVEYgaGFzIGEgbG9uZyBoaXN0b3J5IGluIGRldmVsb3BpbmcgdGhyZWUtcGFydHkgYXV0 aGVudGljYXRpb24gYW5kDQphdXRob3JpemF0aW9uIHByb3RvY29scyBmb3IgZGlzdHJpYnV0ZWQg ZW52aXJvbm1lbnRzLiBFeGFtcGxlcyBpbmNsdWRlDQpLZXJiZXJvcywgdGhlIFB1YmxpYyBLZXkg SW5mcmFzdHJ1Y3R1cmUgKFBLSSksIGFuZCB0aGUgV2ViDQpBdXRob3JpemF0aW9uIFByb3RvY29s IChPQXV0aCkuIEFsbCB0aGVzZSBwcm90b2NvbHMgZW5qb3kgd2lkZXNwcmVhZA0KZGVwbG95bWVu dCBvbiB0aGUgSW50ZXJuZXQuIEFsdGhvdWdoIHRoZXkgYWxsIGFpbSB0byBzb2x2ZSBhIHNpbWls YXINCmdvYWwsIGF0IGFuIGFic3RyYWN0IGxldmVsLCB0aGV5IG9mZmVyIHF1aXRlIGRpZmZlcmVu dCBmdW5jdGlvbnMgYW5kDQp1dGlsaXplIGRpZmZlcmVudCBtZXNzYWdlIGV4Y2hhbmdlcy4gVGhl c2UgZGlmZmVyZW5jZXMgcmVzdWx0IGZyb20gdGhlDQptYWluIGRlcGxveW1lbnQgdXNlIGNhc2Vz IHRoZXkgd2VyZSBkZXNpZ25lZCBmb3IgcmVzcGVjdGl2ZWx5Lg0KDQpSZXF1aXJlbWVudHMgZGVy aXZlZCBmcm9tIHVzZSBjYXNlcyBpbmRpY2F0ZSB0aGUgc3VpdGFiaWxpdHkgb2YgZXhpc3RpbmcN CndvcmsgYXMgYSBzb2x1dGlvbiBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLiBUaGVzZSBw cm90b2NvbHMsDQpob3dldmVyLCB3ZXJlIG5vdCBvcHRpbWl6ZWQgZm9yIGNvbnN0cmFpbmVkIGVu dmlyb25tZW50cy4gQWRkaXRpb25hbA0KcmVxdWlyZW1lbnRzIHRoYXQgbmVlZCB0byBiZSB0YWtl biBpbnRvIGFjY291bnQgYXJlIHRoZSBsYWNrIG9mIGENCnN1aXRhYmxlIHVzZXItaW50ZXJmYWNl IGFuZCB0aGUgaW5hYmlsaXR5IG9mIGVtYmVkZGVkIGRldmljZXMgdG8gY29udGFjdA0KYW4gYXV0 aG9yaXphdGlvbiBzZXJ2ZXIgaW4gcmVhbC10aW1lIHdpdGggZXZlcnkgcmVzb3VyY2UgYWNjZXNz IHJlcXVlc3QNCmR1ZSB0byBpbnRlcm1pdHRlbnQgY29ubmVjdGl2aXR5LCBldGMuDQoNClRoaXMg d29ya2luZyBncm91cCB0aGVyZWZvcmUgYWltcyB0byBwcm9kdWNlIGEgc3RhbmRhcmRpemVkIHNv bHV0aW9uIGZvcg0KYXV0aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRpb24gdG8gZW5hYmxlIGF1 dGhvcml6ZWQgYWNjZXNzIChHRVQsIFBVVCwgUE9TVCwgDQpERUxFVEUpIHRvIHJlc291cmNlcyBp ZGVudGlmaWVkIGJ5IGEgVVJJIGFuZCBob3N0ZWQgb24gYSByZXNvdXJjZQ0Kc2VydmVyIGluIGNv bnN0cmFpbmVkIGVudmlyb25tZW50cy4gQXMgYSBzdGFydGluZyBwb2ludCwgdGhlIHdvcmtpbmcN Cmdyb3VwIHdpbGwgYXNzdW1lIHRoYXQgYWNjZXNzIHRvIHJlc291cmNlcyBhdCBhIHJlc291cmNl IHNlcnZlciBieSBhDQpjbGllbnQgZGV2aWNlIHRha2VzIHBsYWNlIHVzaW5nIENvQVAgYW5kIGlz IHByb3RlY3RlZCBieSBEVExTLiBCb3RoDQpyZXNvdXJjZSBzZXJ2ZXIgYW5kIGNsaWVudCBtYXkg YmUgY29uc3RyYWluZWQuIFRoaXMgYWNjZXNzIHdpbGwgYmUNCm1lZGlhdGVkIGJ5IGFuIGF1dGhv cml6YXRpb24gc2VydmVyLCB3aGljaCBpcyBub3QgY29uc2lkZXJlZCB0byBiZQ0KY29uc3RyYWlu ZWQuDQoNCkV4aXN0aW5nIGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIHByb3RvY29s cyB3aWxsIGJlIHVzZWQgd2hlcmUNCmFwcGxpY2FibGUgdG8gYnVpbGQgdGhlIGNvbnN0cmFpbmVk LWVudmlyb25tZW50IHNvbHV0aW9uLiBUaGlzIHJlcXVpcmVzDQpyZWxldmFudCBzcGVjaWZpY2F0 aW9ucyB0byBiZSByZXZpZXdlZCBmb3Igc3VpdGFiaWxpdHksIHNlbGVjdGluZyBhDQpzdWJzZXQg b2YgdGhlbSBhbmQgcmVzdHJpY3RpbmcgdGhlIG9wdGlvbnMgd2l0aGluIGVhY2ggb2YgdGhlDQpz cGVjaWZpY2F0aW9ucy4gU29tZSBmdW5jdGlvbmFsaXR5LCBob3dldmVyLCBtYXkgbm90IGJlIGF2 YWlsYWJsZSBpbg0KZXhpc3RpbmcgcHJvdG9jb2xzLCBpbiB3aGljaCBjYXNlIHRoZSBzb2x1dGlv biBtYXkgYWxzbyBpbnZvbHZlIG5ldw0KcHJvdG9jb2wgd29yay4gTGV2ZXJhZ2luZyBleGlzdGlu ZyB3b3JrIG1lYW5zIHRoZSB3b3JraW5nIGdyb3VwIGJlbmVmaXRzDQpmcm9tIGF2YWlsYWJsZSBz ZWN1cml0eSBhbmFseXNpcywgaW1wbGVtZW50YXRpb24sIGFuZCBkZXBsb3ltZW50DQpleHBlcmll bmNlLiBNb3Jlb3ZlciwgYSBzdGFuZGFyZGl6ZWQgc29sdXRpb24gZm9yIGZlZGVyYXRlZA0KYXV0 aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRpb24gd2lsbCBoZWxwIHRvIHN0aW11bGF0ZSB0aGUg ZGVwbG95bWVudA0Kb2YgY29uc3RyYWluZWQgZGV2aWNlcyB0aGF0IHByb3ZpZGUgaW5jcmVhc2Vk IHNlY3VyaXR5Lg0KDQpPbmNlIHByb2dyZXNzIGluIGlkZW50aWZ5aW5nIHN1aXRhYmxlIGNhbmRp ZGF0ZSBzb2x1dGlvbnMgaGFzIGJlZW4gbWFkZSwNCnRoZSB3b3JraW5nIGdyb3VwIHdpbGwgdmVy aWZ5IHdoZXRoZXIgdGhlIHNhbWUgbWVjaGFuaXNtcyBhcmUgYWxzbw0KYXBwbGljYWJsZSBiZXlv bmQgdGhlIHVzZSBvZiBDb0FQIGFuZCBEVExTLCB3aGljaCBhcmUgdGhlIHR3byBtYWluDQpwcm90 b2NvbHMgdGhlIGdyb3VwIHdpbGwgZm9jdXMgb24gZm9yIGFjY2VzcyB0byByZXNvdXJjZXMuIElu DQpwYXJ0aWN1bGFyLCB0aGUgYWJpbGl0eSB0byB1c2UgdGhlIGRldmVsb3BlZCBzb2x1dGlvbiBv dmVyIEhUVFAgYW5kIFRMUw0Kd2lsbCBiZSBpbnZlc3RpZ2F0ZWQuIE5vdGUgdGhhdCB0aGUgaW5p dGlhbCBmb2N1cyBpcyBvbiBDb0FQIGFuZCBIVFRQIHdpdGggRFRMUyBhbmQgVExTLg0KT3RoZXIg c2VjdXJpdHkgcHJvdG9jb2xzIG1heSBiZSBjb25zaWRlcmVkIGFzIGxvbmcgYXMgdGhlIHByaW1h cnkgZm9jdXMgaXMgbWFpbnRhaW5lZC4gIA0KVGhlIGdyb3VwIGlzIHNjb3BlZCB0byB3b3JrIG9u bHkgb24gdGhlIHdlYiBwcm90b2NvbHMgYW5kIGRhdGEgY2FycmllZCB3aXRoaW4gdGhlbS4NCkZ1 cnRoZXJtb3JlLCB0byBndWFyYW50ZWUgc21vb3RoIHRyYW5zaXRpb24sIHRoZQ0KaW50ZWdyYXRp b24gd2l0aCBleGlzdGluZyBkZXBsb3ltZW50cyB3aWxsIGJlIHN0dWRpZWQsIHBhcnRpY3VsYXJs eQ0KY29uY2VybmluZyB0aGUgdXNlIG9mIHByb3RvY29sIHRyYW5zbGF0aW9uIHByb3hpZXMuDQoN ClRoaXMgd29yayBkb2VzIG5vdCBtYWtlIHRoZSBhc3N1bXB0aW9uIHRoYXQgdGhlIHBhcnR5IG9m ZmVyaW5nDQphcHBsaWNhdGlvbiBsYXllciBzZXJ2aWNlcyBpcyBhbHdheXMgdGhlIHNhbWUgcGFy dHkgb2ZmZXJpbmcgbmV0d29yaw0KYWNjZXNzIHNlcnZpY2VzLg0KDQpUaGUgd29ya2luZyBncm91 cCBoYXMgdGhlIGZvbGxvd2luZyB0YXNrczoNCg0KMSkgUHJvZHVjZSB1c2UgY2FzZXMgYW5kIHJl cXVpcmVtZW50cw0KDQoyKSBJZGVudGlmeSBhdXRoZW50aWNhdGlvbiBhbmQgYXV0aG9yaXphdGlv biBtZWNoYW5pc21zIHN1aXRhYmxlIGZvcg0KcmVzb3VyY2UgYWNjZXNzIGluIGNvbnN0cmFpbmVk IGVudmlyb25tZW50cy4NCg0KTWlsZXN0b25lczoNCg0KSnVsIDIwMTQgU3VibWl0ICJVc2UgY2Fz ZXMgYW5kIFJlcXVpcmVtZW50cyIgYXMgYSBXRyBpdGVtLg0KRGVjIDIwMTQgU3VibWl0ICJBdXRo ZW50aWNhdGlvbiBhbmQgQXV0aG9yaXphdGlvbiBTb2x1dGlvbiIgYXMgYSBXRyBpdGVtLg0KRGVj IDIwMTQgT3B0aW9uYWxseSwgc3VibWl0ICJVc2UgY2FzZXMgYW5kIFJlcXVpcmVtZW50cyIgZG9j dW1lbnQgDQp0byB0aGUgSUVTRyBmb3IgcHVibGljYXRpb24gYXMgYW4gSW5mb3JtYXRpb25hbCBS RkMuDQpKdWwgMjAxNiBTdWJtaXQgIkF1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIFNv bHV0aW9uIg0Kc3BlY2lmaWNhdGlvbiB0byB0aGUgSUVTRyBmb3IgcHVibGljYXRpb24gYXMgYSBQ cm9wb3NlZCBTdGFuZGFyZC4NCg0KUHJvcG9zZWQgTWlsZXN0b25lcyANCk5vIG1pbGVzdG9uZXMg Zm9yIGNoYXJ0ZXIgZm91bmQuDQo= From nobody Mon May 26 11:04:35 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3DCE1A01D6; Mon, 26 May 2014 09:57:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i-_PE7BgaU0Z; Mon, 26 May 2014 09:57:25 -0700 (PDT) Received: from mail-ie0-x22f.google.com (mail-ie0-x22f.google.com [IPv6:2607:f8b0:4001:c03::22f]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1ED111A01C0; Mon, 26 May 2014 09:57:25 -0700 (PDT) Received: by mail-ie0-f175.google.com with SMTP id y20so7821749ier.20 for ; Mon, 26 May 2014 09:57:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=MBVpUE81IknigEC6vmPb1NXlJq5khr8Dut7pdBZpeAE=; b=Cbc3j6cEzFUuYg1JCRbGLv4sQpdUg6urcAXpE8O/CtG3DXmxxNMAXDtqHEkQEBtNq0 huaPJRyotscGlkZh3NW4JCwZuRip6Bj0YbapPkO/pq3i6Q5w8mlLc9hsMMO9IbieJ9gr BsygTbGOEdg3trdmVSxf3fpc8cb7GR75kJg7JPzsWX1rxp3rkEVxqxeJx6zI/J4Bqk7r sbmjYxHmIZ/7HM+EjkRGWp6EqeHeDKA4kYOHuSDhUJ4NWXrAUww9GjR20Jc0w47AhI4l FAmown/MGrPmHNzGNk3MtZzgssjB2ihBuTNR7naZ4QpRyeO+px+Bkp6pYUHRpZKuEPVs myyw== X-Received: by 10.51.15.161 with SMTP id fp1mr27181586igd.25.1401123442056; Mon, 26 May 2014 09:57:22 -0700 (PDT) Received: from [192.168.1.101] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id p12sm1047598igx.18.2014.05.26.09.57.19 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 26 May 2014 09:57:21 -0700 (PDT) Message-ID: <5383726F.30100@gmail.com> Date: Mon, 26 May 2014 12:57:19 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Likepeng , Kathleen Moriarty , "adrian@olddog.co.uk" References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F258140E59@SZXEMA501-MBX.china.huawei.com> In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F258140E59@SZXEMA501-MBX.china.huawei.com> Content-Type: multipart/alternative; boundary="------------090903000103020104040201" Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/gKXQIBw5fgaTgKdLbFb2uAEGVRM X-Mailman-Approved-At: Mon, 26 May 2014 11:04:30 -0700 Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Revised charter proposal: charter-ietf-ace-00-02 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 May 2014 16:57:30 -0000 This is a multi-part message in MIME format. --------------090903000103020104040201 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi Kepeng: I just read your suggested changes. As to #1, it seems that that the old text and the new text are the same. With #2, I am not sure what the effect of simply removing the AAA reference on chartering objections could be (after all, the third para simply mentions some context [IETF apparently having a rich tradition [for whatever that is worth] with developing three-party protocols). I would suggest three changes to the 00-01 draft charter, which I believe would help in removing block positions (essentially limiting scope of current charter, removing impression of already drawn conclusions prior to start of work): #RS-1: remove any suggestion that existing solutions are already known to be suitable (this is still to be seen and part of the work of this group). This removes the current tension between para 4 and para 6, where para 4 says "indicate the suitability of existing work", whereas para 6 suggests "this requires relevant specifications to be reviewed for suitability". This is why I raised as concern in my original draft review of April 10, 2014, 5:58pm EDT (http://www.ietf.org/mail-archive/web/ace/current/msg00517.html) that one should engage into this effort with open mind, without presorting solution directions in the charter. OLD: Requirements derived from use cases indicate the suitability of existing work as a solution for constrained environments NEW: Requirements derived from use cases may indicate that existingwork is useful as basis for as a solution for constrained environments #RS-2: I would suggest scrapping the entire para 7, since much too ambitious (one can easily recharter to take on more work or refocus at a later stage). I made the same comment on the original draft charter (April 10, 2014, 5:59pm EDT). OLD: Once progress in identifying suitable candidate solutions has been made, the working group will verify whether the same mechanisms are also applicable beyond the use of CoAP and DTLS, which are the two main protocols the group will focus on for access to resources. In particular, the ability to use the developed solution over HTTP and TLS will be investigated. Note that the work is limited to CoAP and HTTP with DTLS and TLS. Other application protocols with their related transport protocols, and other protocols at other layers in the stack, are out of scope. Furthermore, to guarantee smooth transition, the integration with existing deployments will be studied, particularly concerning the use of protocol translation proxies. NEW: The working group will focus on CoAP and DTLS for access to resources. Any other work will require rechartering. #RS-3: I would suggest taking more time for the use cases and requirements than currently suggested. Given the lengthy discussion on draft charter and ACE WG coming into operation potentially just prior to the July 2014 IETF meeting, I would suggest being more reflective on use cases and aiming for WG item here after November 2014 meeting (Dec 2014) and IESG phase Apr 2015. Not much harm will be done here, since solution and use cases can be co-developed in parallel and, moreover, one can always strive for beating the schedule (overdelivering, so to speak). OLD: Jul 2014 Submit "Use cases and Requirements" as a WG item. Dec 2014 Submit Optionally submit "Use cases and Requirements" document to the IESG for publication as an Informational RFC. NEW: Dec 2014 Submit "Use cases and Requirements" as a WG item. Apr 2015 Submit Optionally submit "Use cases and Requirements" document to the IESG for publication as an Informational RFC. Best regards, Rene On 5/26/2014 4:16 AM, Likepeng wrote: > Hello all, > > Based on recent discussions, I made a revised charter proposal, as included in this email, not on the webpage yet. > > Please take a look and let us know if you have any further comments. > > @Adrian and @Benoit, please check if the proposed texts can resolve your comments. > > Thanks, > Kind Regards > Kepeng > > ------------------------------------------------------------------------------------------------------------------------------------------------------------- > Compared with charter-ietf-ace-00-01 on the webpage, the changes are: > > (1) Add one clarification sentence about REST architecture: > OLD > The IETF has recently developed protocols for use in constrained > environments, where network nodes are limited in CPU, memory and power. > REST architecture is widely used for such constrained environments. > > NEW > The IETF has recently developed protocols for use in constrained > environments, where network nodes are limited in CPU, memory and power. > REST architecture is widely used for such constrained environments. > END > > (2) Remove “AAA protocol” from the charter: > OLD > The IETF has a long history in developing three-party authentication and > authorization protocols for distributed environments. Examples include > Kerberos, the Public Key Infrastructure (PKI), the Authentication, > Authorization and Accounting (AAA) infrastructure, and the Web > Authorization Protocol (OAuth). > > NEW > The IETF has a long history in developing three-party authentication and > authorization protocols for distributed environments. Examples include > Kerberos, the Public Key Infrastructure (PKI), and the Web Authorization Protocol (OAuth). > END > > (3) Clarify the scope: > OLD: > Note that the initial focus is on CoAP and HTTP with DTLS and TLS. > Other security protocols may be considered as long as the primary focus is maintained. > Other application protocols and protocols at other layers in the stack are out of scope. > > NEW > Note that the initial focus is on CoAP and HTTP with DTLS and TLS. > Other security protocols may be considered as long as the primary focus is maintained. > The group is scoped to work only on the web protocols and data carried within them. > END > > (4) Update milestones for the use case & requirements document: > OLD: > Jul 2015 Submit “Use cases and Requirements” document to IESG for publication as informational RFC. > > NEW > Dec 2014 Optionally, submit "Use cases and Requirements" document to the IESG for publication as an Informational RFC. > END > > ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > Charter charter-ietf-ace-00-02 > Authentication and Authorization for Constrained > Environment (ACE) > > The IETF has recently developed protocols for use in constrained > environments, where network nodes are limited in CPU, memory and power. > REST architecture is widely used for such constrained environments. > It has been observed that Internet protocols can be applied to these > constrained environments, often only requiring minor tweaking and > profiling. In other cases, new protocols have been defined to address > the specific requirements of constrained environments. An example of > such a protocol is the Constrained Application Protocol (CoAP). > > As in other environments, authentication and authorization questions > also arise in constrained environments. For example, a door lock has to > authorize the person seeking access using a "digital key". Where is the > authorization policy stored? How does the digital key communicate with > the lock? Does the lock interact with an authorization server to obtain > authorization information? How can access be temporarily granted to > other persons? How can access be revoked? These types of questions have > been answered by existing protocols for use cases outside constrained > environments, however in constrained environments, additional and > different requirements pose challenges for the use of various security > protocols. In particular, the need arises for a dynamic and fine grained > access control mechanism, where clients and/or resource servers are > constrained. > > The IETF has a long history in developing three-party authentication and > authorization protocols for distributed environments. Examples include > Kerberos, the Public Key Infrastructure (PKI), and the Web > Authorization Protocol (OAuth). All these protocols enjoy widespread > deployment on the Internet. Although they all aim to solve a similar > goal, at an abstract level, they offer quite different functions and > utilize different message exchanges. These differences result from the > main deployment use cases they were designed for respectively. > > Requirements derived from use cases indicate the suitability of existing > work as a solution for constrained environments. These protocols, > however, were not optimized for constrained environments. Additional > requirements that need to be taken into account are the lack of a > suitable user-interface and the inability of embedded devices to contact > an authorization server in real-time with every resource access request > due to intermittent connectivity, etc. > > This working group therefore aims to produce a standardized solution for > authentication and authorization to enable authorized access (GET, PUT, POST, > DELETE) to resources identified by a URI and hosted on a resource > server in constrained environments. As a starting point, the working > group will assume that access to resources at a resource server by a > client device takes place using CoAP and is protected by DTLS. Both > resource server and client may be constrained. This access will be > mediated by an authorization server, which is not considered to be > constrained. > > Existing authentication and authorization protocols will be used where > applicable to build the constrained-environment solution. This requires > relevant specifications to be reviewed for suitability, selecting a > subset of them and restricting the options within each of the > specifications. Some functionality, however, may not be available in > existing protocols, in which case the solution may also involve new > protocol work. Leveraging existing work means the working group benefits > from available security analysis, implementation, and deployment > experience. Moreover, a standardized solution for federated > authentication and authorization will help to stimulate the deployment > of constrained devices that provide increased security. > > Once progress in identifying suitable candidate solutions has been made, > the working group will verify whether the same mechanisms are also > applicable beyond the use of CoAP and DTLS, which are the two main > protocols the group will focus on for access to resources. In > particular, the ability to use the developed solution over HTTP and TLS > will be investigated. Note that the initial focus is on CoAP and HTTP with DTLS and TLS. > Other security protocols may be considered as long as the primary focus is maintained. > The group is scoped to work only on the web protocols and data carried within them. > Furthermore, to guarantee smooth transition, the > integration with existing deployments will be studied, particularly > concerning the use of protocol translation proxies. > > This work does not make the assumption that the party offering > application layer services is always the same party offering network > access services. > > The working group has the following tasks: > > 1) Produce use cases and requirements > > 2) Identify authentication and authorization mechanisms suitable for > resource access in constrained environments. > > Milestones: > > Jul 2014 Submit "Use cases and Requirements" as a WG item. > Dec 2014 Submit "Authentication and Authorization Solution" as a WG item. > Dec 2014 Optionally, submit "Use cases and Requirements" document > to the IESG for publication as an Informational RFC. > Jul 2016 Submit "Authentication and Authorization Solution" > specification to the IESG for publication as a Proposed Standard. > > Proposed Milestones > No milestones for charter found. > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --------------090903000103020104040201 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit

Hi Kepeng:

I just read your suggested changes. As to #1, it seems that that the old text and the new text are the same. With #2, I am not sure what the effect of simply removing the AAA reference on chartering objections could be (after all, the third para simply mentions some context [IETF apparently having a rich tradition [for whatever that is worth] with developing three-party protocols).

I would suggest three changes to the 00-01 draft charter, which I believe would help in removing block positions (essentially limiting scope of current charter, removing impression of already drawn conclusions prior to start of work):

#RS-1: remove any suggestion that existing solutions are already known to be suitable (this is still to be seen and part of the work of this group). This removes the current tension between para 4 and para 6, where para 4 says "indicate the suitability of existing work", whereas para 6 suggests "this requires relevant specifications to be reviewed for suitability". This is why I raised as concern in my original draft review of April 10, 2014, 5:58pm EDT (http://www.ietf.org/mail-archive/web/ace/current/msg00517.html) that one should engage into this effort with open mind, without presorting solution directions in the charter.

OLD:

Requirements derived from use cases indicate the suitability of existing

work as a solution for constrained environments

NEW:

Requirements derived from use cases may indicate that existing work is useful as basis for as a solution for constrained environments

#RS-2: I would suggest scrapping the entire para 7, since much too ambitious (one can easily recharter to take on more work or refocus at a later stage). I made the same comment on the original draft charter (April 10, 2014, 5:59pm EDT).

OLD:

Once progress in identifying suitable candidate solutions has been made,

the working group will verify whether the same mechanisms are also

applicable beyond the use of CoAP and DTLS, which are the two main

protocols the group will focus on for access to resources. In

particular, the ability to use the developed solution over HTTP and TLS

will be investigated. Note that the work is limited to CoAP and HTTP

with DTLS and TLS. Other application protocols with their related

transport protocols, and other protocols at other layers in the stack,

are out of scope. Furthermore, to guarantee smooth transition, the

integration with existing deployments will be studied, particularly

concerning the use of protocol translation proxies.

NEW:

The working group will focus on CoAP and DTLS for access to resources. Any other work will require rechartering.

#RS-3: I would suggest taking more time for the use cases and requirements than currently suggested. Given the lengthy discussion on draft charter and ACE WG coming into operation potentially just prior to the July 2014 IETF meeting, I would suggest being more reflective on use cases and aiming for WG item here after November 2014 meeting (Dec 2014) and IESG phase Apr 2015. Not much harm will be done here, since solution and use cases can be co-developed in parallel and, moreover, one can always strive for beating the schedule (overdelivering, so to speak).

OLD:

Jul 2014 Submit "Use cases and Requirements" as a WG item.

Dec 2014 Submit Optionally submit "Use cases and Requirements" document to the IESG for

publication as an Informational RFC.

NEW:

Dec 2014 Submit "Use cases and Requirements" as a WG item.

Apr 2015 Submit Optionally submit "Use cases and Requirements" document to the IESG for

publication as an Informational RFC.

Best regards, Rene

On 5/26/2014 4:16 AM, Likepeng wrote:

Hello all,

Based on recent discussions, I made a revised charter proposal, as included in this email, not on the webpage yet.

Please take a look and let us know if you have any further comments.

@Adrian and @Benoit, please check if the proposed texts can resolve your comments.

Thanks,
Kind Regards
Kepeng

-------------------------------------------------------------------------------------------------------------------------------------------------------------
Compared with charter-ietf-ace-00-01 on the webpage, the changes are:

(1) Add one clarification sentence about REST architecture:
OLD
The IETF has recently developed protocols for use in constrained
environments, where network nodes are limited in CPU, memory and power.
REST architecture is widely used for such constrained environments.

NEW
The IETF has recently developed protocols for use in constrained
environments, where network nodes are limited in CPU, memory and power.
REST architecture is widely used for such constrained environments.
END

(2) Remove “AAA protocol” from the charter:
OLD
The IETF has a long history in developing three-party authentication and
authorization protocols for distributed environments. Examples include
Kerberos, the Public Key Infrastructure (PKI), the Authentication,
Authorization and Accounting (AAA) infrastructure, and the Web
Authorization Protocol (OAuth).

NEW
The IETF has a long history in developing three-party authentication and
authorization protocols for distributed environments. Examples include
Kerberos, the Public Key Infrastructure (PKI), and the Web Authorization Protocol (OAuth).
END

(3) Clarify the scope:
OLD:
Note that the initial focus is on CoAP and HTTP with DTLS and TLS.
Other security protocols may be considered as long as the primary focus is maintained.
Other application protocols and protocols at other layers in the stack are out of scope.

NEW
Note that the initial focus is on CoAP and HTTP with DTLS and TLS.
Other security protocols may be considered as long as the primary focus is maintained.
The group is scoped to work only on the web protocols and data carried within them.
END

(4) Update milestones for the use case & requirements document:
OLD:
Jul 2015 Submit “Use cases and Requirements” document to IESG for publication as informational RFC.

NEW
Dec 2014 Optionally, submit "Use cases and Requirements" document to the IESG for publication as an Informational RFC.
END

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Charter charter-ietf-ace-00-02
Authentication and Authorization for Constrained
Environment (ACE)

The IETF has recently developed protocols for use in constrained
environments, where network nodes are limited in CPU, memory and power.
REST architecture is widely used for such constrained environments.
It has been observed that Internet protocols can be applied to these
constrained environments, often only requiring minor tweaking and
profiling. In other cases, new protocols have been defined to address
the specific requirements of constrained environments. An example of
such a protocol is the Constrained Application Protocol (CoAP).

As in other environments, authentication and authorization questions
also arise in constrained environments. For example, a door lock has to
authorize the person seeking access using a "digital key". Where is the
authorization policy stored? How does the digital key communicate with
the lock? Does the lock interact with an authorization server to obtain
authorization information? How can access be temporarily granted to
other persons? How can access be revoked? These types of questions have
been answered by existing protocols for use cases outside constrained
environments, however in constrained environments, additional and
different requirements pose challenges for the use of various security
protocols. In particular, the need arises for a dynamic and fine grained
access control mechanism, where clients and/or resource servers are
constrained.

The IETF has a long history in developing three-party authentication and
authorization protocols for distributed environments. Examples include
Kerberos, the Public Key Infrastructure (PKI), and the Web
Authorization Protocol (OAuth). All these protocols enjoy widespread
deployment on the Internet. Although they all aim to solve a similar
goal, at an abstract level, they offer quite different functions and
utilize different message exchanges. These differences result from the
main deployment use cases they were designed for respectively.

Requirements derived from use cases indicate the suitability of existing
work as a solution for constrained environments. These protocols,
however, were not optimized for constrained environments. Additional
requirements that need to be taken into account are the lack of a
suitable user-interface and the inability of embedded devices to contact
an authorization server in real-time with every resource access request
due to intermittent connectivity, etc.

This working group therefore aims to produce a standardized solution for
authentication and authorization to enable authorized access (GET, PUT, POST,
DELETE) to resources identified by a URI and hosted on a resource
server in constrained environments. As a starting point, the working
group will assume that access to resources at a resource server by a
client device takes place using CoAP and is protected by DTLS. Both
resource server and client may be constrained. This access will be
mediated by an authorization server, which is not considered to be
constrained.

Existing authentication and authorization protocols will be used where
applicable to build the constrained-environment solution. This requires
relevant specifications to be reviewed for suitability, selecting a
subset of them and restricting the options within each of the
specifications. Some functionality, however, may not be available in
existing protocols, in which case the solution may also involve new
protocol work. Leveraging existing work means the working group benefits
from available security analysis, implementation, and deployment
experience. Moreover, a standardized solution for federated
authentication and authorization will help to stimulate the deployment
of constrained devices that provide increased security.

Once progress in identifying suitable candidate solutions has been made,
the working group will verify whether the same mechanisms are also
applicable beyond the use of CoAP and DTLS, which are the two main
protocols the group will focus on for access to resources. In
particular, the ability to use the developed solution over HTTP and TLS
will be investigated. Note that the initial focus is on CoAP and HTTP with DTLS and TLS.
Other security protocols may be considered as long as the primary focus is maintained.
The group is scoped to work only on the web protocols and data carried within them.
Furthermore, to guarantee smooth transition, the
integration with existing deployments will be studied, particularly
concerning the use of protocol translation proxies.

This work does not make the assumption that the party offering
application layer services is always the same party offering network
access services.

The working group has the following tasks:

1) Produce use cases and requirements

2) Identify authentication and authorization mechanisms suitable for
resource access in constrained environments.

Milestones:

Jul 2014 Submit "Use cases and Requirements" as a WG item.
Dec 2014 Submit "Authentication and Authorization Solution" as a WG item.
Dec 2014 Optionally, submit "Use cases and Requirements" document
to the IESG for publication as an Informational RFC.
Jul 2016 Submit "Authentication and Authorization Solution"
specification to the IESG for publication as a Proposed Standard.

Proposed Milestones
No milestones for charter found.
_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363

--------------090903000103020104040201-- From nobody Mon May 26 13:17:17 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B9C51A026E; Mon, 26 May 2014 13:17:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.851 X-Spam-Level: X-Spam-Status: No, score=-4.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j3RXDKxvy-pK; Mon, 26 May 2014 13:17:09 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31D991A0248; Mon, 26 May 2014 13:17:08 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BEO43061; Mon, 26 May 2014 20:17:04 +0000 (GMT) Received: from LHREML404-HUB.china.huawei.com (10.201.5.218) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 26 May 2014 21:16:37 +0100 Received: from SZXEMA403-HUB.china.huawei.com (10.82.72.35) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 26 May 2014 21:16:56 +0100 Received: from SZXEMA501-MBX.china.huawei.com ([169.254.1.67]) by SZXEMA403-HUB.china.huawei.com ([10.82.72.35]) with mapi id 14.03.0158.001; Tue, 27 May 2014 04:16:52 +0800 From: Likepeng To: Rene Struik , Kathleen Moriarty , "adrian@olddog.co.uk" Thread-Topic: [Ace] Revised charter proposal: charter-ietf-ace-00-02 Thread-Index: AQHPeLrW9teE9ryEO0GmvALEdUzf8JtSj4mAgAC5qnA= Date: Mon, 26 May 2014 20:16:51 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F2581440F7@SZXEMA501-MBX.china.huawei.com> References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F258140E59@SZXEMA501-MBX.china.huawei.com> <5383726F.30100@gmail.com> In-Reply-To: <5383726F.30100@gmail.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.202.8.69] Content-Type: multipart/alternative; boundary="_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581440F7SZXEMA501MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/dZi4WaRzfnWRSdM7yqgyeqlOtBk Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Revised charter proposal: charter-ietf-ace-00-02 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 May 2014 20:17:15 -0000 --_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581440F7SZXEMA501MBXchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUmVuZSwNCj5BcyB0byAjMSwgaXQgc2VlbXMgdGhhdCB0aGF0IHRoZSBvbGQgdGV4dCBhbmQg dGhlIG5ldyB0ZXh0IGFyZSB0aGUgc2FtZS4NClNvcnJ5LCBpdCBzaG91bGQgYmUgbGlrZSB0aGlz Og0KDQpPTEQNCg0KVGhlIElFVEYgaGFzIHJlY2VudGx5IGRldmVsb3BlZCBwcm90b2NvbHMgZm9y IHVzZSBpbiBjb25zdHJhaW5lZA0KDQplbnZpcm9ubWVudHMsIHdoZXJlIG5ldHdvcmsgbm9kZXMg YXJlIGxpbWl0ZWQgaW4gQ1BVLCBtZW1vcnkgYW5kIHBvd2VyLg0KDQoNCg0KTkVXDQoNClRoZSBJ RVRGIGhhcyByZWNlbnRseSBkZXZlbG9wZWQgcHJvdG9jb2xzIGZvciB1c2UgaW4gY29uc3RyYWlu ZWQNCg0KZW52aXJvbm1lbnRzLCB3aGVyZSBuZXR3b3JrIG5vZGVzIGFyZSBsaW1pdGVkIGluIENQ VSwgbWVtb3J5IGFuZCBwb3dlci4NCg0KUkVTVCBhcmNoaXRlY3R1cmUgaXMgd2lkZWx5IHVzZWQg Zm9yIHN1Y2ggY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLg0KDQpFTkQNCg0KDQoNCj4jUlMtMjog IEkgd291bGQgc3VnZ2VzdCBzY3JhcHBpbmcgdGhlIGVudGlyZSBwYXJhIDcsIHNpbmNlIG11Y2gg dG9vIGFtYml0aW91cyAob25lIGNhbiBlYXNpbHkgcmVjaGFydGVyIHRvIHRha2Ugb24gbW9yZSB3 b3JrIG9yIHJlZm9jdXMgYXQgYSBsYXRlciBzdGFnZSkuIEkgbWFkZSB0aGUgc2FtZSBjb21tZW50 IG9uIHRoZSBvcmlnaW5hbCBkcmFmdCBjaGFydGVyIChBcHJpbCAxMCwgMjAxNCwgNTo1OXBtIEVE VCkuDQoNCj5ORVc6DQoNCj5UaGUgd29ya2luZyBncm91cCB3aWxsIGZvY3VzIG9uIENvQVAgYW5k IERUTFMgZm9yIGFjY2VzcyB0byByZXNvdXJjZXMuIEFueSBvdGhlciB3b3JrIHdpbGwgcmVxdWly ZSByZS1jaGFydGVyaW5nLg0KDQoNClRoaXMgd2FzIHdoYXQgd2Ugc3RhcnRlZCBmcm9tIHRoZSBi ZWdpbm5pbmcuIEluIExvbmRvbiBCb0YsIHRoZXJlIHdhcyBubyBjb25zZW5zdXMgYWJvdXQgdGhp cyBzY29wZS4gU29tZSBwZW9wbGUgd2FudCB0byBzdXBwb3J0IEhUVFAgLyBUTFMsIGFsc28gcmVj ZW50IGRpc2N1c3Npb25zIGluZGljYXRlIHRoZSBuZWVkcyBmb3IgZGF0YSBvYmplY3Qgc2VjdXJp dHkuDQoNCkZvciB5b3VyIGNoYW5nZSBwcm9wb3NhbCAjMSBhbmQgIzMsIGxldOKAmXMgc2VlIG90 aGVy4oCZcyBvcGluaW9uLg0KDQpUaGFua3MsDQpLaW5kIFJlZ2FyZHMNCktlcGVuZw0K5Y+R5Lu2 5Lq6OiBSZW5lIFN0cnVpayBbbWFpbHRvOnJzdHJ1aWsuZXh0QGdtYWlsLmNvbV0NCuWPkemAgeaX tumXtDogMjAxNOW5tDXmnIgyN+aXpSAwOjU3DQrmlLbku7bkuro6IExpa2VwZW5nOyBLYXRobGVl biBNb3JpYXJ0eTsgYWRyaWFuQG9sZGRvZy5jby51aw0K5oqE6YCBOiBCZW5vaXQgQ2xhaXNlOyBh YWEtZG9jdG9yc0BpZXRmLm9yZzsgVGhlIElFU0c7IGFjZUBpZXRmLm9yZw0K5Li76aKYOiBSZTog W0FjZV0gUmV2aXNlZCBjaGFydGVyIHByb3Bvc2FsOiBjaGFydGVyLWlldGYtYWNlLTAwLTAyDQoN CkhpIEtlcGVuZzoNCg0KSSBqdXN0IHJlYWQgeW91ciBzdWdnZXN0ZWQgY2hhbmdlcy4gQXMgdG8g IzEsIGl0IHNlZW1zIHRoYXQgdGhhdCB0aGUgb2xkIHRleHQgYW5kIHRoZSBuZXcgdGV4dCBhcmUg dGhlIHNhbWUuIFdpdGggIzIsIEkgYW0gbm90IHN1cmUgd2hhdCB0aGUgZWZmZWN0IG9mIHNpbXBs eSByZW1vdmluZyB0aGUgQUFBIHJlZmVyZW5jZSBvbiBjaGFydGVyaW5nIG9iamVjdGlvbnMgY291 bGQgYmUgKGFmdGVyIGFsbCwgdGhlIHRoaXJkIHBhcmEgc2ltcGx5IG1lbnRpb25zIHNvbWUgY29u dGV4dCBbSUVURiBhcHBhcmVudGx5IGhhdmluZyBhIHJpY2ggdHJhZGl0aW9uIFtmb3Igd2hhdGV2 ZXIgdGhhdCBpcyB3b3J0aF0gd2l0aCBkZXZlbG9waW5nIHRocmVlLXBhcnR5IHByb3RvY29scyku DQoNCkkgd291bGQgc3VnZ2VzdCB0aHJlZSBjaGFuZ2VzIHRvIHRoZSAwMC0wMSBkcmFmdCBjaGFy dGVyLCB3aGljaCBJIGJlbGlldmUgd291bGQgaGVscCBpbiByZW1vdmluZyBibG9jayBwb3NpdGlv bnMgKGVzc2VudGlhbGx5IGxpbWl0aW5nIHNjb3BlIG9mIGN1cnJlbnQgY2hhcnRlciwgcmVtb3Zp bmcgaW1wcmVzc2lvbiBvZiBhbHJlYWR5IGRyYXduIGNvbmNsdXNpb25zIHByaW9yIHRvIHN0YXJ0 IG9mIHdvcmspOg0KDQojUlMtMTogcmVtb3ZlIGFueSBzdWdnZXN0aW9uIHRoYXQgZXhpc3Rpbmcg c29sdXRpb25zIGFyZSBhbHJlYWR5IGtub3duIHRvIGJlIHN1aXRhYmxlICh0aGlzIGlzIHN0aWxs IHRvIGJlIHNlZW4gYW5kIHBhcnQgb2YgdGhlIHdvcmsgb2YgdGhpcyBncm91cCkuIFRoaXMgcmVt b3ZlcyB0aGUgY3VycmVudCB0ZW5zaW9uIGJldHdlZW4gcGFyYSA0IGFuZCBwYXJhIDYsIHdoZXJl IHBhcmEgNCBzYXlzICJpbmRpY2F0ZSB0aGUgc3VpdGFiaWxpdHkgb2YgZXhpc3Rpbmcgd29yayIs IHdoZXJlYXMgcGFyYSA2IHN1Z2dlc3RzICJ0aGlzIHJlcXVpcmVzIHJlbGV2YW50IHNwZWNpZmlj YXRpb25zIHRvIGJlIHJldmlld2VkIGZvciBzdWl0YWJpbGl0eSIuIFRoaXMgaXMgd2h5IEkgcmFp c2VkIGFzIGNvbmNlcm4gaW4gbXkgb3JpZ2luYWwgZHJhZnQgcmV2aWV3IG9mIEFwcmlsIDEwLCAy MDE0LCA1OjU4cG0gRURUIChodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYWNl L2N1cnJlbnQvbXNnMDA1MTcuaHRtbCkgdGhhdCBvbmUgc2hvdWxkIGVuZ2FnZSBpbnRvIHRoaXMg ZWZmb3J0IHdpdGggb3BlbiBtaW5kLCB3aXRob3V0IHByZXNvcnRpbmcgc29sdXRpb24gZGlyZWN0 aW9ucyBpbiB0aGUgY2hhcnRlci4NCg0KT0xEOg0KUmVxdWlyZW1lbnRzIGRlcml2ZWQgZnJvbSB1 c2UgY2FzZXMgaW5kaWNhdGUgdGhlIHN1aXRhYmlsaXR5IG9mIGV4aXN0aW5nDQoNCndvcmsgYXMg YSBzb2x1dGlvbiBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzDQoNCk5FVzoNClJlcXVpcmVt ZW50cyBkZXJpdmVkIGZyb20gdXNlIGNhc2VzIG1heSBpbmRpY2F0ZSB0aGF0IGV4aXN0aW5nIHdv cmsgaXMgdXNlZnVsIGFzIGJhc2lzIGZvciBhcyBhIHNvbHV0aW9uIGZvciBjb25zdHJhaW5lZCBl bnZpcm9ubWVudHMNCg0KI1JTLTI6ICBJIHdvdWxkIHN1Z2dlc3Qgc2NyYXBwaW5nIHRoZSBlbnRp cmUgcGFyYSA3LCBzaW5jZSBtdWNoIHRvbyBhbWJpdGlvdXMgKG9uZSBjYW4gZWFzaWx5IHJlY2hh cnRlciB0byB0YWtlIG9uIG1vcmUgd29yayBvciByZWZvY3VzIGF0IGEgbGF0ZXIgc3RhZ2UpLiBJ IG1hZGUgdGhlIHNhbWUgY29tbWVudCBvbiB0aGUgb3JpZ2luYWwgZHJhZnQgY2hhcnRlciAoQXBy aWwgMTAsIDIwMTQsIDU6NTlwbSBFRFQpLg0KDQpPTEQ6DQpPbmNlIHByb2dyZXNzIGluIGlkZW50 aWZ5aW5nIHN1aXRhYmxlIGNhbmRpZGF0ZSBzb2x1dGlvbnMgaGFzIGJlZW4gbWFkZSwNCnRoZSB3 b3JraW5nIGdyb3VwIHdpbGwgdmVyaWZ5IHdoZXRoZXIgdGhlIHNhbWUgbWVjaGFuaXNtcyBhcmUg YWxzbw0KYXBwbGljYWJsZSBiZXlvbmQgdGhlIHVzZSBvZiBDb0FQIGFuZCBEVExTLCB3aGljaCBh cmUgdGhlIHR3byBtYWluDQpwcm90b2NvbHMgdGhlIGdyb3VwIHdpbGwgZm9jdXMgb24gZm9yIGFj Y2VzcyB0byByZXNvdXJjZXMuIEluDQpwYXJ0aWN1bGFyLCB0aGUgYWJpbGl0eSB0byB1c2UgdGhl IGRldmVsb3BlZCBzb2x1dGlvbiBvdmVyIEhUVFAgYW5kIFRMUw0Kd2lsbCBiZSBpbnZlc3RpZ2F0 ZWQuIE5vdGUgdGhhdCB0aGUgd29yayBpcyBsaW1pdGVkIHRvIENvQVAgYW5kIEhUVFANCndpdGgg RFRMUyBhbmQgVExTLiBPdGhlciBhcHBsaWNhdGlvbiBwcm90b2NvbHMgd2l0aCB0aGVpciByZWxh dGVkDQp0cmFuc3BvcnQgcHJvdG9jb2xzLCBhbmQgb3RoZXIgcHJvdG9jb2xzIGF0IG90aGVyIGxh eWVycyBpbiB0aGUgc3RhY2ssDQphcmUgb3V0IG9mIHNjb3BlLiBGdXJ0aGVybW9yZSwgdG8gZ3Vh cmFudGVlIHNtb290aCB0cmFuc2l0aW9uLCB0aGUNCmludGVncmF0aW9uIHdpdGggZXhpc3Rpbmcg ZGVwbG95bWVudHMgd2lsbCBiZSBzdHVkaWVkLCBwYXJ0aWN1bGFybHkNCmNvbmNlcm5pbmcgdGhl IHVzZSBvZiBwcm90b2NvbCB0cmFuc2xhdGlvbiBwcm94aWVzLg0KDQoNCk5FVzoNClRoZSB3b3Jr aW5nIGdyb3VwIHdpbGwgZm9jdXMgb24gQ29BUCBhbmQgRFRMUyBmb3IgYWNjZXNzIHRvIHJlc291 cmNlcy4gQW55IG90aGVyIHdvcmsgd2lsbCByZXF1aXJlIHJlY2hhcnRlcmluZy4NCg0KDQoNCiNS Uy0zOiBJIHdvdWxkIHN1Z2dlc3QgdGFraW5nIG1vcmUgdGltZSBmb3IgdGhlIHVzZSBjYXNlcyBh bmQgcmVxdWlyZW1lbnRzIHRoYW4gY3VycmVudGx5IHN1Z2dlc3RlZC4gR2l2ZW4gdGhlIGxlbmd0 aHkgZGlzY3Vzc2lvbiBvbiBkcmFmdCBjaGFydGVyIGFuZCBBQ0UgV0cgY29taW5nIGludG8gb3Bl cmF0aW9uIHBvdGVudGlhbGx5IGp1c3QgcHJpb3IgdG8gdGhlIEp1bHkgMjAxNCBJRVRGIG1lZXRp bmcsIEkgd291bGQgc3VnZ2VzdCBiZWluZyBtb3JlIHJlZmxlY3RpdmUgb24gdXNlIGNhc2VzIGFu ZCBhaW1pbmcgZm9yIFdHIGl0ZW0gaGVyZSBhZnRlciBOb3ZlbWJlciAyMDE0IG1lZXRpbmcgKERl YyAyMDE0KSBhbmQgSUVTRyBwaGFzZSBBcHIgMjAxNS4gTm90IG11Y2ggaGFybSB3aWxsIGJlIGRv bmUgaGVyZSwgc2luY2Ugc29sdXRpb24gYW5kIHVzZSBjYXNlcyBjYW4gYmUgY28tZGV2ZWxvcGVk IGluIHBhcmFsbGVsIGFuZCwgbW9yZW92ZXIsIG9uZSBjYW4gYWx3YXlzIHN0cml2ZSBmb3IgYmVh dGluZyB0aGUgc2NoZWR1bGUgKG92ZXJkZWxpdmVyaW5nLCBzbyB0byBzcGVhaykuDQoNCg0KT0xE Og0KDQpKdWwgMjAxNCBTdWJtaXQgIlVzZSBjYXNlcyBhbmQgUmVxdWlyZW1lbnRzIsKdIGFzIGEg V0cgaXRlbS4NCkRlYyAyMDE0IFN1Ym1pdCBPcHRpb25hbGx5IHN1Ym1pdCAiVXNlIGNhc2VzIGFu ZCBSZXF1aXJlbWVudHMiIGRvY3VtZW50IHRvIHRoZSBJRVNHIGZvcg0KcHVibGljYXRpb24gYXMg YW4gSW5mb3JtYXRpb25hbCBSRkMuDQoNCg0KDQpORVc6DQoNCkRlYyAyMDE0IFN1Ym1pdCAiVXNl IGNhc2VzIGFuZCBSZXF1aXJlbWVudHMiwp0gYXMgYSBXRyBpdGVtLg0KQXByIDIwMTUgU3VibWl0 IE9wdGlvbmFsbHkgc3VibWl0ICJVc2UgY2FzZXMgYW5kIFJlcXVpcmVtZW50cyIgZG9jdW1lbnQg dG8gdGhlIElFU0cgZm9yDQpwdWJsaWNhdGlvbiBhcyBhbiBJbmZvcm1hdGlvbmFsIFJGQy4NCg0K DQoNCkJlc3QgcmVnYXJkcywgUmVuZQ0KDQpPbiA1LzI2LzIwMTQgNDoxNiBBTSwgTGlrZXBlbmcg d3JvdGU6DQoNCkhlbGxvIGFsbCwNCg0KDQoNCkJhc2VkIG9uIHJlY2VudCBkaXNjdXNzaW9ucywg SSBtYWRlIGEgcmV2aXNlZCBjaGFydGVyIHByb3Bvc2FsLCBhcyBpbmNsdWRlZCBpbiB0aGlzIGVt YWlsLCBub3Qgb24gdGhlIHdlYnBhZ2UgeWV0Lg0KDQoNCg0KUGxlYXNlIHRha2UgYSBsb29rIGFu ZCBsZXQgdXMga25vdyBpZiB5b3UgaGF2ZSBhbnkgZnVydGhlciBjb21tZW50cy4NCg0KDQoNCkBB ZHJpYW4gYW5kIEBCZW5vaXQsIHBsZWFzZSBjaGVjayBpZiB0aGUgcHJvcG9zZWQgdGV4dHMgY2Fu IHJlc29sdmUgeW91ciBjb21tZW50cy4NCg0KDQoNClRoYW5rcywNCg0KS2luZCBSZWdhcmRzDQoN CktlcGVuZw0KDQoNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KDQpDb21wYXJlZCB3aXRoIGNoYXJ0ZXItaWV0Zi1hY2UtMDAtMDEgb24gdGhlIHdlYnBhZ2Us IHRoZSBjaGFuZ2VzIGFyZToNCg0KDQoNCigxKSAgICAgIEFkZCBvbmUgY2xhcmlmaWNhdGlvbiBz ZW50ZW5jZSBhYm91dCBSRVNUIGFyY2hpdGVjdHVyZToNCg0KT0xEDQoNClRoZSBJRVRGIGhhcyBy ZWNlbnRseSBkZXZlbG9wZWQgcHJvdG9jb2xzIGZvciB1c2UgaW4gY29uc3RyYWluZWQNCg0KZW52 aXJvbm1lbnRzLCB3aGVyZSBuZXR3b3JrIG5vZGVzIGFyZSBsaW1pdGVkIGluIENQVSwgbWVtb3J5 IGFuZCBwb3dlci4NCg0KUkVTVCBhcmNoaXRlY3R1cmUgaXMgd2lkZWx5IHVzZWQgZm9yIHN1Y2gg Y29uc3RyYWluZWQgZW52aXJvbm1lbnRzLg0KDQoNCg0KTkVXDQoNClRoZSBJRVRGIGhhcyByZWNl bnRseSBkZXZlbG9wZWQgcHJvdG9jb2xzIGZvciB1c2UgaW4gY29uc3RyYWluZWQNCg0KZW52aXJv bm1lbnRzLCB3aGVyZSBuZXR3b3JrIG5vZGVzIGFyZSBsaW1pdGVkIGluIENQVSwgbWVtb3J5IGFu ZCBwb3dlci4NCg0KUkVTVCBhcmNoaXRlY3R1cmUgaXMgd2lkZWx5IHVzZWQgZm9yIHN1Y2ggY29u c3RyYWluZWQgZW52aXJvbm1lbnRzLg0KDQpFTkQNCg0KDQoNCigyKSAgICAgIFJlbW92ZSDigJxB QUEgcHJvdG9jb2zigJ0gZnJvbSB0aGUgY2hhcnRlcjoNCg0KT0xEDQoNClRoZSBJRVRGIGhhcyBh IGxvbmcgaGlzdG9yeSBpbiBkZXZlbG9waW5nIHRocmVlLXBhcnR5IGF1dGhlbnRpY2F0aW9uIGFu ZA0KDQphdXRob3JpemF0aW9uIHByb3RvY29scyBmb3IgZGlzdHJpYnV0ZWQgZW52aXJvbm1lbnRz LiBFeGFtcGxlcyBpbmNsdWRlDQoNCktlcmJlcm9zLCB0aGUgUHVibGljIEtleSBJbmZyYXN0cnVj dHVyZSAoUEtJKSwgdGhlIEF1dGhlbnRpY2F0aW9uLA0KDQpBdXRob3JpemF0aW9uIGFuZCBBY2Nv dW50aW5nIChBQUEpIGluZnJhc3RydWN0dXJlLCBhbmQgdGhlIFdlYg0KDQpBdXRob3JpemF0aW9u IFByb3RvY29sIChPQXV0aCkuDQoNCg0KDQpORVcNCg0KVGhlIElFVEYgaGFzIGEgbG9uZyBoaXN0 b3J5IGluIGRldmVsb3BpbmcgdGhyZWUtcGFydHkgYXV0aGVudGljYXRpb24gYW5kDQoNCmF1dGhv cml6YXRpb24gcHJvdG9jb2xzIGZvciBkaXN0cmlidXRlZCBlbnZpcm9ubWVudHMuIEV4YW1wbGVz IGluY2x1ZGUNCg0KS2VyYmVyb3MsIHRoZSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJlIChQS0kp LCBhbmQgdGhlIFdlYiBBdXRob3JpemF0aW9uIFByb3RvY29sIChPQXV0aCkuDQoNCkVORA0KDQoN Cg0KKDMpIENsYXJpZnkgdGhlIHNjb3BlOg0KDQpPTEQ6DQoNCk5vdGUgdGhhdCB0aGUgaW5pdGlh bCBmb2N1cyBpcyBvbiBDb0FQIGFuZCBIVFRQIHdpdGggRFRMUyBhbmQgVExTLg0KDQpPdGhlciBz ZWN1cml0eSBwcm90b2NvbHMgbWF5IGJlIGNvbnNpZGVyZWQgYXMgbG9uZyBhcyB0aGUgcHJpbWFy eSBmb2N1cyBpcyBtYWludGFpbmVkLg0KDQpPdGhlciBhcHBsaWNhdGlvbiBwcm90b2NvbHMgYW5k IHByb3RvY29scyBhdCBvdGhlciBsYXllcnMgaW4gdGhlIHN0YWNrIGFyZSBvdXQgb2Ygc2NvcGUu DQoNCg0KDQpORVcNCg0KTm90ZSB0aGF0IHRoZSBpbml0aWFsIGZvY3VzIGlzIG9uIENvQVAgYW5k IEhUVFAgd2l0aCBEVExTIGFuZCBUTFMuDQoNCk90aGVyIHNlY3VyaXR5IHByb3RvY29scyBtYXkg YmUgY29uc2lkZXJlZCBhcyBsb25nIGFzIHRoZSBwcmltYXJ5IGZvY3VzIGlzIG1haW50YWluZWQu DQoNClRoZSBncm91cCBpcyBzY29wZWQgdG8gd29yayBvbmx5IG9uIHRoZSB3ZWIgcHJvdG9jb2xz IGFuZCBkYXRhIGNhcnJpZWQgd2l0aGluIHRoZW0uDQoNCkVORA0KDQoNCg0KKDQpICAgICAgVXBk YXRlIG1pbGVzdG9uZXMgZm9yIHRoZSB1c2UgY2FzZSAmIHJlcXVpcmVtZW50cyBkb2N1bWVudDoN Cg0KT0xEOg0KDQpKdWwgMjAxNSBTdWJtaXQg4oCcVXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVudHPi gJ0gZG9jdW1lbnQgdG8gSUVTRyBmb3IgcHVibGljYXRpb24gYXMgaW5mb3JtYXRpb25hbCBSRkMu DQoNCg0KDQpORVcNCg0KRGVjIDIwMTQgT3B0aW9uYWxseSwgc3VibWl0ICJVc2UgY2FzZXMgYW5k IFJlcXVpcmVtZW50cyIgZG9jdW1lbnQgdG8gdGhlIElFU0cgZm9yIHB1YmxpY2F0aW9uIGFzIGFu IEluZm9ybWF0aW9uYWwgUkZDLg0KDQpFTkQNCg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KQ2hhcnRlciBjaGFydGVyLWll dGYtYWNlLTAwLTAyDQoNCkF1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIGZvciBDb25z dHJhaW5lZA0KDQpFbnZpcm9ubWVudCAoQUNFKQ0KDQoNCg0KVGhlIElFVEYgaGFzIHJlY2VudGx5 IGRldmVsb3BlZCBwcm90b2NvbHMgZm9yIHVzZSBpbiBjb25zdHJhaW5lZA0KDQplbnZpcm9ubWVu dHMsIHdoZXJlIG5ldHdvcmsgbm9kZXMgYXJlIGxpbWl0ZWQgaW4gQ1BVLCBtZW1vcnkgYW5kIHBv d2VyLg0KDQpSRVNUIGFyY2hpdGVjdHVyZSBpcyB3aWRlbHkgdXNlZCBmb3Igc3VjaCBjb25zdHJh aW5lZCBlbnZpcm9ubWVudHMuDQoNCkl0IGhhcyBiZWVuIG9ic2VydmVkIHRoYXQgSW50ZXJuZXQg cHJvdG9jb2xzIGNhbiBiZSBhcHBsaWVkIHRvIHRoZXNlDQoNCmNvbnN0cmFpbmVkIGVudmlyb25t ZW50cywgb2Z0ZW4gb25seSByZXF1aXJpbmcgbWlub3IgdHdlYWtpbmcgYW5kDQoNCnByb2ZpbGlu Zy4gSW4gb3RoZXIgY2FzZXMsIG5ldyBwcm90b2NvbHMgaGF2ZSBiZWVuIGRlZmluZWQgdG8gYWRk cmVzcw0KDQp0aGUgc3BlY2lmaWMgcmVxdWlyZW1lbnRzIG9mIGNvbnN0cmFpbmVkIGVudmlyb25t ZW50cy4gQW4gZXhhbXBsZSBvZg0KDQpzdWNoIGEgcHJvdG9jb2wgaXMgdGhlIENvbnN0cmFpbmVk IEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKS4NCg0KDQoNCkFzIGluIG90aGVyIGVudmlyb25t ZW50cywgYXV0aGVudGljYXRpb24gYW5kIGF1dGhvcml6YXRpb24gcXVlc3Rpb25zDQoNCmFsc28g YXJpc2UgaW4gY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBsZSwgYSBkb29yIGxv Y2sgaGFzIHRvDQoNCmF1dGhvcml6ZSB0aGUgcGVyc29uIHNlZWtpbmcgYWNjZXNzIHVzaW5nIGEg ImRpZ2l0YWwga2V5Ii4gV2hlcmUgaXMgdGhlDQoNCmF1dGhvcml6YXRpb24gcG9saWN5IHN0b3Jl ZD8gSG93IGRvZXMgdGhlIGRpZ2l0YWwga2V5IGNvbW11bmljYXRlIHdpdGgNCg0KdGhlIGxvY2s/ IERvZXMgdGhlIGxvY2sgaW50ZXJhY3Qgd2l0aCBhbiBhdXRob3JpemF0aW9uIHNlcnZlciB0byBv YnRhaW4NCg0KYXV0aG9yaXphdGlvbiBpbmZvcm1hdGlvbj8gSG93IGNhbiBhY2Nlc3MgYmUgdGVt cG9yYXJpbHkgZ3JhbnRlZCB0bw0KDQpvdGhlciBwZXJzb25zPyBIb3cgY2FuIGFjY2VzcyBiZSBy ZXZva2VkPyBUaGVzZSB0eXBlcyBvZiBxdWVzdGlvbnMgaGF2ZQ0KDQpiZWVuIGFuc3dlcmVkIGJ5 IGV4aXN0aW5nIHByb3RvY29scyBmb3IgdXNlIGNhc2VzIG91dHNpZGUgY29uc3RyYWluZWQNCg0K ZW52aXJvbm1lbnRzLCBob3dldmVyIGluIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cywgYWRkaXRp b25hbCBhbmQNCg0KZGlmZmVyZW50IHJlcXVpcmVtZW50cyBwb3NlIGNoYWxsZW5nZXMgZm9yIHRo ZSB1c2Ugb2YgdmFyaW91cyBzZWN1cml0eQ0KDQpwcm90b2NvbHMuIEluIHBhcnRpY3VsYXIsIHRo ZSBuZWVkIGFyaXNlcyBmb3IgYSBkeW5hbWljIGFuZCBmaW5lIGdyYWluZWQNCg0KYWNjZXNzIGNv bnRyb2wgbWVjaGFuaXNtLCB3aGVyZSBjbGllbnRzIGFuZC9vciByZXNvdXJjZSBzZXJ2ZXJzIGFy ZQ0KDQpjb25zdHJhaW5lZC4NCg0KDQoNClRoZSBJRVRGIGhhcyBhIGxvbmcgaGlzdG9yeSBpbiBk ZXZlbG9waW5nIHRocmVlLXBhcnR5IGF1dGhlbnRpY2F0aW9uIGFuZA0KDQphdXRob3JpemF0aW9u IHByb3RvY29scyBmb3IgZGlzdHJpYnV0ZWQgZW52aXJvbm1lbnRzLiBFeGFtcGxlcyBpbmNsdWRl DQoNCktlcmJlcm9zLCB0aGUgUHVibGljIEtleSBJbmZyYXN0cnVjdHVyZSAoUEtJKSwgYW5kIHRo ZSBXZWINCg0KQXV0aG9yaXphdGlvbiBQcm90b2NvbCAoT0F1dGgpLiBBbGwgdGhlc2UgcHJvdG9j b2xzIGVuam95IHdpZGVzcHJlYWQNCg0KZGVwbG95bWVudCBvbiB0aGUgSW50ZXJuZXQuIEFsdGhv dWdoIHRoZXkgYWxsIGFpbSB0byBzb2x2ZSBhIHNpbWlsYXINCg0KZ29hbCwgYXQgYW4gYWJzdHJh Y3QgbGV2ZWwsIHRoZXkgb2ZmZXIgcXVpdGUgZGlmZmVyZW50IGZ1bmN0aW9ucyBhbmQNCg0KdXRp bGl6ZSBkaWZmZXJlbnQgbWVzc2FnZSBleGNoYW5nZXMuIFRoZXNlIGRpZmZlcmVuY2VzIHJlc3Vs dCBmcm9tIHRoZQ0KDQptYWluIGRlcGxveW1lbnQgdXNlIGNhc2VzIHRoZXkgd2VyZSBkZXNpZ25l ZCBmb3IgcmVzcGVjdGl2ZWx5Lg0KDQoNCg0KUmVxdWlyZW1lbnRzIGRlcml2ZWQgZnJvbSB1c2Ug Y2FzZXMgaW5kaWNhdGUgdGhlIHN1aXRhYmlsaXR5IG9mIGV4aXN0aW5nDQoNCndvcmsgYXMgYSBz b2x1dGlvbiBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLiBUaGVzZSBwcm90b2NvbHMsDQoN Cmhvd2V2ZXIsIHdlcmUgbm90IG9wdGltaXplZCBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1lbnRz LiBBZGRpdGlvbmFsDQoNCnJlcXVpcmVtZW50cyB0aGF0IG5lZWQgdG8gYmUgdGFrZW4gaW50byBh Y2NvdW50IGFyZSB0aGUgbGFjayBvZiBhDQoNCnN1aXRhYmxlIHVzZXItaW50ZXJmYWNlIGFuZCB0 aGUgaW5hYmlsaXR5IG9mIGVtYmVkZGVkIGRldmljZXMgdG8gY29udGFjdA0KDQphbiBhdXRob3Jp emF0aW9uIHNlcnZlciBpbiByZWFsLXRpbWUgd2l0aCBldmVyeSByZXNvdXJjZSBhY2Nlc3MgcmVx dWVzdA0KDQpkdWUgdG8gaW50ZXJtaXR0ZW50IGNvbm5lY3Rpdml0eSwgZXRjLg0KDQoNCg0KVGhp cyB3b3JraW5nIGdyb3VwIHRoZXJlZm9yZSBhaW1zIHRvIHByb2R1Y2UgYSBzdGFuZGFyZGl6ZWQg c29sdXRpb24gZm9yDQoNCmF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIHRvIGVuYWJs ZSBhdXRob3JpemVkIGFjY2VzcyAoR0VULCBQVVQsIFBPU1QsDQoNCkRFTEVURSkgdG8gcmVzb3Vy Y2VzIGlkZW50aWZpZWQgYnkgYSBVUkkgYW5kIGhvc3RlZCBvbiBhIHJlc291cmNlDQoNCnNlcnZl ciBpbiBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuIEFzIGEgc3RhcnRpbmcgcG9pbnQsIHRoZSB3 b3JraW5nDQoNCmdyb3VwIHdpbGwgYXNzdW1lIHRoYXQgYWNjZXNzIHRvIHJlc291cmNlcyBhdCBh IHJlc291cmNlIHNlcnZlciBieSBhDQoNCmNsaWVudCBkZXZpY2UgdGFrZXMgcGxhY2UgdXNpbmcg Q29BUCBhbmQgaXMgcHJvdGVjdGVkIGJ5IERUTFMuIEJvdGgNCg0KcmVzb3VyY2Ugc2VydmVyIGFu ZCBjbGllbnQgbWF5IGJlIGNvbnN0cmFpbmVkLiBUaGlzIGFjY2VzcyB3aWxsIGJlDQoNCm1lZGlh dGVkIGJ5IGFuIGF1dGhvcml6YXRpb24gc2VydmVyLCB3aGljaCBpcyBub3QgY29uc2lkZXJlZCB0 byBiZQ0KDQpjb25zdHJhaW5lZC4NCg0KDQoNCkV4aXN0aW5nIGF1dGhlbnRpY2F0aW9uIGFuZCBh dXRob3JpemF0aW9uIHByb3RvY29scyB3aWxsIGJlIHVzZWQgd2hlcmUNCg0KYXBwbGljYWJsZSB0 byBidWlsZCB0aGUgY29uc3RyYWluZWQtZW52aXJvbm1lbnQgc29sdXRpb24uIFRoaXMgcmVxdWly ZXMNCg0KcmVsZXZhbnQgc3BlY2lmaWNhdGlvbnMgdG8gYmUgcmV2aWV3ZWQgZm9yIHN1aXRhYmls aXR5LCBzZWxlY3RpbmcgYQ0KDQpzdWJzZXQgb2YgdGhlbSBhbmQgcmVzdHJpY3RpbmcgdGhlIG9w dGlvbnMgd2l0aGluIGVhY2ggb2YgdGhlDQoNCnNwZWNpZmljYXRpb25zLiBTb21lIGZ1bmN0aW9u YWxpdHksIGhvd2V2ZXIsIG1heSBub3QgYmUgYXZhaWxhYmxlIGluDQoNCmV4aXN0aW5nIHByb3Rv Y29scywgaW4gd2hpY2ggY2FzZSB0aGUgc29sdXRpb24gbWF5IGFsc28gaW52b2x2ZSBuZXcNCg0K cHJvdG9jb2wgd29yay4gTGV2ZXJhZ2luZyBleGlzdGluZyB3b3JrIG1lYW5zIHRoZSB3b3JraW5n IGdyb3VwIGJlbmVmaXRzDQoNCmZyb20gYXZhaWxhYmxlIHNlY3VyaXR5IGFuYWx5c2lzLCBpbXBs ZW1lbnRhdGlvbiwgYW5kIGRlcGxveW1lbnQNCg0KZXhwZXJpZW5jZS4gTW9yZW92ZXIsIGEgc3Rh bmRhcmRpemVkIHNvbHV0aW9uIGZvciBmZWRlcmF0ZWQNCg0KYXV0aGVudGljYXRpb24gYW5kIGF1 dGhvcml6YXRpb24gd2lsbCBoZWxwIHRvIHN0aW11bGF0ZSB0aGUgZGVwbG95bWVudA0KDQpvZiBj b25zdHJhaW5lZCBkZXZpY2VzIHRoYXQgcHJvdmlkZSBpbmNyZWFzZWQgc2VjdXJpdHkuDQoNCg0K DQpPbmNlIHByb2dyZXNzIGluIGlkZW50aWZ5aW5nIHN1aXRhYmxlIGNhbmRpZGF0ZSBzb2x1dGlv bnMgaGFzIGJlZW4gbWFkZSwNCg0KdGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCB2ZXJpZnkgd2hldGhl ciB0aGUgc2FtZSBtZWNoYW5pc21zIGFyZSBhbHNvDQoNCmFwcGxpY2FibGUgYmV5b25kIHRoZSB1 c2Ugb2YgQ29BUCBhbmQgRFRMUywgd2hpY2ggYXJlIHRoZSB0d28gbWFpbg0KDQpwcm90b2NvbHMg dGhlIGdyb3VwIHdpbGwgZm9jdXMgb24gZm9yIGFjY2VzcyB0byByZXNvdXJjZXMuIEluDQoNCnBh cnRpY3VsYXIsIHRoZSBhYmlsaXR5IHRvIHVzZSB0aGUgZGV2ZWxvcGVkIHNvbHV0aW9uIG92ZXIg SFRUUCBhbmQgVExTDQoNCndpbGwgYmUgaW52ZXN0aWdhdGVkLiBOb3RlIHRoYXQgdGhlIGluaXRp YWwgZm9jdXMgaXMgb24gQ29BUCBhbmQgSFRUUCB3aXRoIERUTFMgYW5kIFRMUy4NCg0KT3RoZXIg c2VjdXJpdHkgcHJvdG9jb2xzIG1heSBiZSBjb25zaWRlcmVkIGFzIGxvbmcgYXMgdGhlIHByaW1h cnkgZm9jdXMgaXMgbWFpbnRhaW5lZC4NCg0KVGhlIGdyb3VwIGlzIHNjb3BlZCB0byB3b3JrIG9u bHkgb24gdGhlIHdlYiBwcm90b2NvbHMgYW5kIGRhdGEgY2FycmllZCB3aXRoaW4gdGhlbS4NCg0K RnVydGhlcm1vcmUsIHRvIGd1YXJhbnRlZSBzbW9vdGggdHJhbnNpdGlvbiwgdGhlDQoNCmludGVn cmF0aW9uIHdpdGggZXhpc3RpbmcgZGVwbG95bWVudHMgd2lsbCBiZSBzdHVkaWVkLCBwYXJ0aWN1 bGFybHkNCg0KY29uY2VybmluZyB0aGUgdXNlIG9mIHByb3RvY29sIHRyYW5zbGF0aW9uIHByb3hp ZXMuDQoNCg0KDQpUaGlzIHdvcmsgZG9lcyBub3QgbWFrZSB0aGUgYXNzdW1wdGlvbiB0aGF0IHRo ZSBwYXJ0eSBvZmZlcmluZw0KDQphcHBsaWNhdGlvbiBsYXllciBzZXJ2aWNlcyBpcyBhbHdheXMg dGhlIHNhbWUgcGFydHkgb2ZmZXJpbmcgbmV0d29yaw0KDQphY2Nlc3Mgc2VydmljZXMuDQoNCg0K DQpUaGUgd29ya2luZyBncm91cCBoYXMgdGhlIGZvbGxvd2luZyB0YXNrczoNCg0KDQoNCjEpIFBy b2R1Y2UgdXNlIGNhc2VzIGFuZCByZXF1aXJlbWVudHMNCg0KDQoNCjIpIElkZW50aWZ5IGF1dGhl bnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIG1lY2hhbmlzbXMgc3VpdGFibGUgZm9yDQoNCnJl c291cmNlIGFjY2VzcyBpbiBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuDQoNCg0KDQpNaWxlc3Rv bmVzOg0KDQoNCg0KSnVsIDIwMTQgU3VibWl0ICJVc2UgY2FzZXMgYW5kIFJlcXVpcmVtZW50cyIg YXMgYSBXRyBpdGVtLg0KDQpEZWMgMjAxNCBTdWJtaXQgIkF1dGhlbnRpY2F0aW9uIGFuZCBBdXRo b3JpemF0aW9uIFNvbHV0aW9uIiBhcyBhIFdHIGl0ZW0uDQoNCkRlYyAyMDE0IE9wdGlvbmFsbHks IHN1Ym1pdCAiVXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVudHMiIGRvY3VtZW50DQoNCnRvIHRoZSBJ RVNHIGZvciBwdWJsaWNhdGlvbiBhcyBhbiBJbmZvcm1hdGlvbmFsIFJGQy4NCg0KSnVsIDIwMTYg U3VibWl0ICJBdXRoZW50aWNhdGlvbiBhbmQgQXV0aG9yaXphdGlvbiBTb2x1dGlvbiINCg0Kc3Bl Y2lmaWNhdGlvbiB0byB0aGUgSUVTRyBmb3IgcHVibGljYXRpb24gYXMgYSBQcm9wb3NlZCBTdGFu ZGFyZC4NCg0KDQoNClByb3Bvc2VkIE1pbGVzdG9uZXMNCg0KTm8gbWlsZXN0b25lcyBmb3IgY2hh cnRlciBmb3VuZC4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCg0KQWNlIG1haWxpbmcgbGlzdA0KDQpBY2VAaWV0Zi5vcmc8bWFpbHRvOkFjZUBpZXRm Lm9yZz4NCg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCg0KDQoN Cg0KLS0NCg0KZW1haWw6IHJzdHJ1aWsuZXh0QGdtYWlsLmNvbTxtYWlsdG86cnN0cnVpay5leHRA Z21haWwuY29tPiB8IFNreXBlOiByc3RydWlrDQoNCmNlbGw6ICsxICg2NDcpIDg2Ny01NjU4IHwg VVM6ICsxICg0MTUpIDY5MC03MzYzDQo= --_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581440F7SZXEMA501MBXchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0K cC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW4tdG9wOjBj bTsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1hcmdpbi1ib3R0b206MTAuMHB0Ow0KCW1hcmdpbi1s ZWZ0OjBjbTsNCglsaW5lLWhlaWdodDoxMTUlOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjpibGFjazt9DQphOmxpbmssIHNw YW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlu a0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CW1zby1zdHlsZS1saW5rOiJIVE1MIOmihOiuvuagvOW8jyBDaGFyIjsNCgltYXJnaW46MGNtOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5 OuWui+S9kzsNCgljb2xvcjpibGFjazt9DQpzcGFuLkhUTUxDaGFyDQoJe21zby1zdHlsZS1uYW1l OiJIVE1MIOmihOiuvuagvOW8jyBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNv LXN0eWxlLWxpbms6IkhUTUwg6aKE6K6+5qC85byPIjsNCglmb250LWZhbWlseToiQ291cmllciBO ZXciOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ Y29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9 IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIx IiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkg Ymdjb2xvcj0id2hpdGUiIGxhbmc9IlpILUNOIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7bGluZS1oZWlnaHQ6MTE1JTtjb2xv cjojMUY0OTdEIj5IaSBSZW5lLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtsaW5lLWhl aWdodDoxMTUlO2NvbG9yOiMxRjQ5N0QiPiZndDtBcyB0byAjMSwgaXQgc2VlbXMgdGhhdCB0aGF0 IHRoZSBvbGQgdGV4dCBhbmQgdGhlIG5ldyB0ZXh0IGFyZSB0aGUgc2FtZS48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7bGluZS1oZWlnaHQ6MTE1JTtjb2xvcjojMUY0OTdEIj5Tb3JyeSwg aXQgc2hvdWxkIGJlIGxpa2UgdGhpczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cHJlPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+T0xEPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlIElFVEYgaGFzIHJlY2VudGx5IGRldmVsb3Bl ZCBwcm90b2NvbHMgZm9yIHVzZSBpbiBjb25zdHJhaW5lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPmVudmlyb25tZW50cywgd2hlcmUgbmV0d29yayBub2RlcyBhcmUgbGltaXRlZCBpbiBD UFUsIG1lbW9yeSBhbmQgcG93ZXIuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPk5FVzxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPlRoZSBJRVRGIGhhcyByZWNlbnRseSBkZXZlbG9wZWQgcHJvdG9jb2xzIGZvciB1c2Ug aW4gY29uc3RyYWluZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5lbnZpcm9ubWVudHMs IHdoZXJlIG5ldHdvcmsgbm9kZXMgYXJlIGxpbWl0ZWQgaW4gQ1BVLCBtZW1vcnkgYW5kIHBvd2Vy LjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlJFU1QgYXJjaGl0ZWN0dXJlIGlzIHdpZGVs eSB1c2VkIGZvciBzdWNoIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy48bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj5FTkQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mZ3Q7I1JTLTI6Jm5ic3A7IEkgd291bGQgc3VnZ2Vz dCBzY3JhcHBpbmcgdGhlIGVudGlyZSBwYXJhIDcsIHNpbmNlIG11Y2ggdG9vIGFtYml0aW91cyAo b25lIGNhbiBlYXNpbHkgcmVjaGFydGVyIHRvIHRha2Ugb24gbW9yZSB3b3JrIG9yIHJlZm9jdXMg YXQgYSBsYXRlciBzdGFnZSkuIEkgbWFkZSB0aGUgc2FtZSBjb21tZW50IG9uIHRoZSBvcmlnaW5h bCBkcmFmdCBjaGFydGVyIChBcHJpbCAxMCwgMjAxNCwgNTo1OXBtIEVEVCkuPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+Jmd0O05FVzo8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4m Z3Q7VGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCBmb2N1cyBvbiBDb0FQIGFuZCBEVExTIGZvciBhY2Nl c3MgdG8gcmVzb3VyY2VzLiBBbnkgb3RoZXIgd29yayB3aWxsIHJlcXVpcmUgcmUtY2hhcnRlcmlu Zy48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtsaW5lLWhlaWdodDoxMTUlO2NvbG9yOiMxRjQ5N0QiPlRoaXMgd2FzIHdo YXQgd2Ugc3RhcnRlZCBmcm9tIHRoZSBiZWdpbm5pbmcuIEluIExvbmRvbiBCb0YsIHRoZXJlIHdh cyBubyBjb25zZW5zdXMgYWJvdXQgdGhpcyBzY29wZS4gU29tZSBwZW9wbGUgd2FudCB0byBzdXBw b3J0IEhUVFAgLyBUTFMsIGFsc28gcmVjZW50IGRpc2N1c3Npb25zDQogaW5kaWNhdGUgdGhlIG5l ZWRzIGZvciBkYXRhIG9iamVjdCBzZWN1cml0eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7bGluZS1oZWlnaHQ6MTE1JTtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7bGluZS1oZWlnaHQ6MTE1JTtjb2xvcjojMUY0OTdEIj5Gb3IgeW91ciBj aGFuZ2UgcHJvcG9zYWwgIzEgYW5kICMzLCBsZXTigJlzIHNlZSBvdGhlcuKAmXMgb3Bpbmlvbi4N CjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtsaW5lLWhlaWdodDoxMTUlO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtsaW5lLWhlaWdodDox MTUlO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 bGluZS1oZWlnaHQ6MTE1JTtjb2xvcjojMUY0OTdEIj5LaW5kIFJlZ2FyZHM8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7bGluZS1oZWlnaHQ6MTE1JTtjb2xvcjojMUY0OTdEIj5LZXBlbmc8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0 b206LjAwMDFwdDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk65a6L5L2TO2NvbG9yOndpbmRvd3RleHQiPuWPkeS7tuS6ujxz cGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OuWui+S9kztjb2xvcjp3aW5kb3d0ZXh0 Ij4gUmVuZSBTdHJ1aWsgW21haWx0bzpyc3RydWlrLmV4dEBnbWFpbC5jb21dDQo8YnI+DQo8L3Nw YW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk65a6L5L2TO2Nv bG9yOndpbmRvd3RleHQiPuWPkemAgeaXtumXtDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwv c3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OuWui+S9kztjb2xvcjp3aW5kb3d0ZXh0Ij4gMjAxNDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTrlrovkvZM7Y29sb3I6d2luZG93dGV4dCI+5bm0 PHNwYW4gbGFuZz0iRU4tVVMiPjU8L3NwYW4+5pyIPHNwYW4gbGFuZz0iRU4tVVMiPjI3PC9zcGFu PuaXpTxzcGFuIGxhbmc9IkVOLVVTIj4NCiAwOjU3PGJyPg0KPC9zcGFuPjxiPuaUtuS7tuS6ujxz cGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IExpa2VwZW5n OyBLYXRobGVlbiBNb3JpYXJ0eTsgYWRyaWFuQG9sZGRvZy5jby51azxicj4NCjwvc3Bhbj48Yj7m ioTpgIE8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBC ZW5vaXQgQ2xhaXNlOyBhYWEtZG9jdG9yc0BpZXRmLm9yZzsgVGhlIElFU0c7IGFjZUBpZXRmLm9y Zzxicj4NCjwvc3Bhbj48Yj7kuLvpopg8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiPiBSZTogW0FjZV0gUmV2aXNlZCBjaGFydGVyIHByb3Bvc2FsOiBjaGFy dGVyLWlldGYtYWNlLTAwLTAyPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIj5IaSBLZXBlbmc6PGJyPg0KPGJyPg0KSSBqdXN0IHJlYWQgeW91ciBzdWdnZXN0 ZWQgY2hhbmdlcy4gQXMgdG8gIzEsIGl0IHNlZW1zIHRoYXQgdGhhdCB0aGUgb2xkIHRleHQgYW5k IHRoZSBuZXcgdGV4dCBhcmUgdGhlIHNhbWUuIFdpdGggIzIsIEkgYW0gbm90IHN1cmUgd2hhdCB0 aGUgZWZmZWN0IG9mIHNpbXBseSByZW1vdmluZyB0aGUgQUFBIHJlZmVyZW5jZSBvbiBjaGFydGVy aW5nIG9iamVjdGlvbnMgY291bGQgYmUgKGFmdGVyIGFsbCwgdGhlIHRoaXJkIHBhcmEgc2ltcGx5 IG1lbnRpb25zDQogc29tZSBjb250ZXh0IFtJRVRGIGFwcGFyZW50bHkgaGF2aW5nIGEgcmljaCB0 cmFkaXRpb24gW2ZvciB3aGF0ZXZlciB0aGF0IGlzIHdvcnRoXSB3aXRoIGRldmVsb3BpbmcgdGhy ZWUtcGFydHkgcHJvdG9jb2xzKS4NCjxicj4NCjxicj4NCkkgd291bGQgc3VnZ2VzdCB0aHJlZSBj aGFuZ2VzIHRvIHRoZSAwMC0wMSBkcmFmdCBjaGFydGVyLCB3aGljaCBJIGJlbGlldmUgd291bGQg aGVscCBpbiByZW1vdmluZyBibG9jayBwb3NpdGlvbnMgKGVzc2VudGlhbGx5IGxpbWl0aW5nIHNj b3BlIG9mIGN1cnJlbnQgY2hhcnRlciwgcmVtb3ZpbmcgaW1wcmVzc2lvbiBvZiBhbHJlYWR5IGRy YXduIGNvbmNsdXNpb25zIHByaW9yIHRvIHN0YXJ0IG9mIHdvcmspOjxicj4NCjxicj4NCiNSUy0x OiByZW1vdmUgYW55IHN1Z2dlc3Rpb24gdGhhdCBleGlzdGluZyBzb2x1dGlvbnMgYXJlIGFscmVh ZHkga25vd24gdG8gYmUgc3VpdGFibGUgKHRoaXMgaXMgc3RpbGwgdG8gYmUgc2VlbiBhbmQgcGFy dCBvZiB0aGUgd29yayBvZiB0aGlzIGdyb3VwKS4gVGhpcyByZW1vdmVzIHRoZSBjdXJyZW50IHRl bnNpb24gYmV0d2VlbiBwYXJhIDQgYW5kIHBhcmEgNiwgd2hlcmUgcGFyYSA0IHNheXMgJnF1b3Q7 aW5kaWNhdGUgdGhlIHN1aXRhYmlsaXR5IG9mIGV4aXN0aW5nDQogd29yayZxdW90Oywgd2hlcmVh cyBwYXJhIDYgc3VnZ2VzdHMgJnF1b3Q7dGhpcyByZXF1aXJlcyByZWxldmFudCBzcGVjaWZpY2F0 aW9ucyB0byBiZSByZXZpZXdlZCBmb3Igc3VpdGFiaWxpdHkmcXVvdDsuIFRoaXMgaXMgd2h5IEkg cmFpc2VkIGFzIGNvbmNlcm4gaW4gbXkgb3JpZ2luYWwgZHJhZnQgcmV2aWV3IG9mIEFwcmlsIDEw LCAyMDE0LCA1OjU4cG0gRURUICg8YSBocmVmPSJodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJj aGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNnMDA1MTcuaHRtbCI+aHR0cDovL3d3dy5pZXRmLm9yZy9t YWlsLWFyY2hpdmUvd2ViL2FjZS9jdXJyZW50L21zZzAwNTE3Lmh0bWw8L2E+KQ0KIHRoYXQgb25l IHNob3VsZCBlbmdhZ2UgaW50byB0aGlzIGVmZm9ydCB3aXRoIG9wZW4gbWluZCwgd2l0aG91dCBw cmVzb3J0aW5nIHNvbHV0aW9uIGRpcmVjdGlvbnMgaW4gdGhlIGNoYXJ0ZXIuPGJyPg0KPGJyPg0K T0xEOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2xpbmUtaGVpZ2h0OjExNSUiPlJlcXVpcmVtZW50cyBkZXJpdmVkIGZyb20gdXNl IGNhc2VzIGluZGljYXRlIHRoZSBzdWl0YWJpbGl0eSBvZiBleGlzdGluZzxicj4NCjxicj4NCjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206LjAwMDFw dDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij53b3JrIGFzIGEgc29sdXRpb24gZm9yIGNvbnN0cmFpbmVkIGVudmlyb25tZW50 czwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OuWui+S9kyI+PGJyPg0KPGJyPg0KTkVX OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tYm90dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6bm9ybWFsIj4N CjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+UmVxdWlyZW1lbnRz IGRlcml2ZWQgZnJvbSB1c2UgY2FzZXMgbWF5IGluZGljYXRlIHRoYXQgZXhpc3Rpbmc8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiPiB3b3JrIGlzIHVzZWZ1bCBhcyBiYXNpcyBmb3IgYXMgYSBzb2x1 dGlvbiBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0 b206LjAwMDFwdDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tYm90dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6bm9ybWFsIj4N CjxzcGFuIGxhbmc9IkVOLVVTIj4jUlMtMjombmJzcDsgSSB3b3VsZCBzdWdnZXN0IHNjcmFwcGlu ZyB0aGUgZW50aXJlIHBhcmEgNywgc2luY2UgbXVjaCB0b28gYW1iaXRpb3VzIChvbmUgY2FuIGVh c2lseSByZWNoYXJ0ZXIgdG8gdGFrZSBvbiBtb3JlIHdvcmsgb3IgcmVmb2N1cyBhdCBhIGxhdGVy IHN0YWdlKS4gSSBtYWRlIHRoZSBzYW1lIGNvbW1lbnQgb24gdGhlIG9yaWdpbmFsIGRyYWZ0IGNo YXJ0ZXIgKEFwcmlsIDEwLCAyMDE0LCA1OjU5cG0gRURUKS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBjbTttYXJnaW4t Ym90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6bm9ybWFsIj4NCjxzcGFuIGxhbmc9IkVOLVVTIj48 YnI+DQpPTEQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206LjAwMDFwdDtsaW5lLWhlaWdodDpu b3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5PbmNl IHByb2dyZXNzIGluIGlkZW50aWZ5aW5nIHN1aXRhYmxlIGNhbmRpZGF0ZSBzb2x1dGlvbnMgaGFz IGJlZW4gbWFkZSw8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBjbTttYXJnaW4t Ym90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6bm9ybWFsIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdCI+dGhlIHdvcmtpbmcgZ3JvdXAgd2lsbCB2ZXJpZnkgd2hl dGhlciB0aGUgc2FtZSBtZWNoYW5pc21zIGFyZSBhbHNvPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWJvdHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+ DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmFwcGxpY2FibGUg YmV5b25kIHRoZSB1c2Ugb2YgQ29BUCBhbmQgRFRMUywgd2hpY2ggYXJlIHRoZSB0d28gbWFpbjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206LjAwMDFw dDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij5wcm90b2NvbHMgdGhlIGdyb3VwIHdpbGwgZm9jdXMgb24gZm9yIGFjY2VzcyB0 byByZXNvdXJjZXMuIEluPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFy Z2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPnBhcnRpY3VsYXIsIHRoZSBhYmlsaXR5IHRvIHVz ZSB0aGUgZGV2ZWxvcGVkIHNvbHV0aW9uIG92ZXIgSFRUUCBhbmQgVExTPC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0 Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPndp bGwgYmUgaW52ZXN0aWdhdGVkLiBOb3RlIHRoYXQgdGhlIHdvcmsgaXMgbGltaXRlZCB0byBDb0FQ IGFuZCBIVFRQPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWJv dHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPndpdGggRFRMUyBhbmQgVExTLiBPdGhlciBhcHBsaWNhdGlv biBwcm90b2NvbHMgd2l0aCB0aGVpciByZWxhdGVkPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWJvdHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPnRyYW5zcG9ydCBwcm90 b2NvbHMsIGFuZCBvdGhlciBwcm90b2NvbHMgYXQgb3RoZXIgbGF5ZXJzIGluIHRoZSBzdGFjayw8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAx cHQ7bGluZS1oZWlnaHQ6bm9ybWFsIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+YXJlIG91dCBvZiBzY29wZS4gRnVydGhlcm1vcmUsIHRvIGd1YXJhbnRlZSBz bW9vdGggdHJhbnNpdGlvbiwgdGhlPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTow Y207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmludGVncmF0aW9uIHdpdGggZXhpc3Rp bmcgZGVwbG95bWVudHMgd2lsbCBiZSBzdHVkaWVkLCBwYXJ0aWN1bGFybHk8L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bGluZS1oZWln aHQ6bm9ybWFsIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ Y29uY2VybmluZyB0aGUgdXNlIG9mIHByb3RvY29sIHRyYW5zbGF0aW9uIHByb3hpZXMuPGJyPg0K PGJyPg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWJvdHRv bTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+PGJyPg0K TkVXOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6bm9ybWFs Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGhlIHdvcmtp bmcgZ3JvdXAgd2lsbCBmb2N1cyBvbiBDb0FQIGFuZCBEVExTIGZvciBhY2Nlc3MgdG8gcmVzb3Vy Y2VzLiBBbnkgb3RoZXIgd29yayB3aWxsIHJlcXVpcmUgcmVjaGFydGVyaW5nLjxicj4NCjxicj4N Cjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206LjAw MDFwdDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij48YnI+DQo8YnI+DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6bm9ybWFsIj4NCjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+I1JTLTM6IEkgd291bGQgc3Vn Z2VzdCB0YWtpbmcgbW9yZSB0aW1lIGZvciB0aGUgdXNlIGNhc2VzIGFuZCByZXF1aXJlbWVudHMg dGhhbiBjdXJyZW50bHkgc3VnZ2VzdGVkLiBHaXZlbiB0aGUgbGVuZ3RoeSBkaXNjdXNzaW9uIG9u IGRyYWZ0IGNoYXJ0ZXIgYW5kIEFDRSBXRyBjb21pbmcgaW50byBvcGVyYXRpb24gcG90ZW50aWFs bHkganVzdCBwcmlvciB0byB0aGUgSnVseQ0KIDIwMTQgSUVURiBtZWV0aW5nLCBJIHdvdWxkIHN1 Z2dlc3QgYmVpbmcgbW9yZSByZWZsZWN0aXZlIG9uIHVzZSBjYXNlcyBhbmQgYWltaW5nIGZvciBX RyBpdGVtIGhlcmUgYWZ0ZXIgTm92ZW1iZXIgMjAxNCBtZWV0aW5nIChEZWMgMjAxNCkgYW5kIElF U0cgcGhhc2UgQXByIDIwMTUuIE5vdCBtdWNoIGhhcm0gd2lsbCBiZSBkb25lIGhlcmUsIHNpbmNl IHNvbHV0aW9uIGFuZCB1c2UgY2FzZXMgY2FuIGJlIGNvLWRldmVsb3BlZCBpbiBwYXJhbGxlbA0K IGFuZCwgbW9yZW92ZXIsIG9uZSBjYW4gYWx3YXlzIHN0cml2ZSBmb3IgYmVhdGluZyB0aGUgc2No ZWR1bGUgKG92ZXJkZWxpdmVyaW5nLCBzbyB0byBzcGVhaykuPGJyPg0KPGJyPg0KPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUt aGVpZ2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPjxicj4NCk9MRDogPGJyPg0KPGJyPg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJv dHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkp1bCAyMDE0IFN1Ym1pdCAm cXVvdDtVc2UgY2FzZXMgYW5kIFJlcXVpcmVtZW50cyZxdW90Ozwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiYjMTU3Ozwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiBhcyBhIFdHIGl0ZW0uPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVp Z2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi PkRlYyAyMDE0IFN1Ym1pdCBPcHRpb25hbGx5IHN1Ym1pdCAmcXVvdDtVc2UgY2FzZXMgYW5kIFJl cXVpcmVtZW50cyZxdW90OyBkb2N1bWVudCB0byB0aGUgSUVTRyBmb3I8L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tYm90dG9tOjBjbTttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bGluZS1oZWlnaHQ6 bm9ybWFsIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+cHVi bGljYXRpb24gYXMgYW4gSW5mb3JtYXRpb25hbCBSRkMuPGJyPg0KPGJyPg0KPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2luLWJvdHRvbTouMDAwMXB0O2xpbmUtaGVp Z2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+PGJyPg0KPGJyPg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNt O21hcmdpbi1ib3R0b206LjAwMDFwdDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OuWui+S9kyI+TkVXOiA8 YnI+DQo8YnI+DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OuWui+S9kyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206LjAwMDFw dDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij5EZWMgMjAxNCBTdWJtaXQgJnF1b3Q7VXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVu dHMmcXVvdDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij4mIzE1Nzs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij4gYXMgYSBXRyBpdGVtLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21h cmdpbi1ib3R0b206LjAwMDFwdDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5BcHIgMjAxNSBTdWJtaXQgT3B0aW9uYWxseSBz dWJtaXQgJnF1b3Q7VXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVudHMmcXVvdDsgZG9jdW1lbnQgdG8g dGhlIElFU0cgZm9yPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTowY207bWFyZ2lu LWJvdHRvbTouMDAwMXB0O2xpbmUtaGVpZ2h0Om5vcm1hbCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPnB1YmxpY2F0aW9uIGFzIGFuIEluZm9ybWF0aW9uYWwg UkZDLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206 LjAwMDFwdDtsaW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OuWui+S9kyI+PGJyPg0KPGJyPg0KPGJyPg0KQmVz dCByZWdhcmRzLCBSZW5lPGJyPg0KPGJyPg0KT24gNS8yNi8yMDE0IDQ6MTYgQU0sIExpa2VwZW5n IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cHJlPjxzcGFuIGxhbmc9 IkVOLVVTIj5IZWxsbyBhbGwsPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFu Zz0iRU4tVVMiPkJhc2VkIG9uIHJlY2VudCBkaXNjdXNzaW9ucywgSSBtYWRlIGEgcmV2aXNlZCBj aGFydGVyIHByb3Bvc2FsLCBhcyBpbmNsdWRlZCBpbiB0aGlzIGVtYWlsLCBub3Qgb24gdGhlIHdl YnBhZ2UgeWV0LiA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1V UyI+UGxlYXNlIHRha2UgYSBsb29rIGFuZCBsZXQgdXMga25vdyBpZiB5b3UgaGF2ZSBhbnkgZnVy dGhlciBjb21tZW50cy48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJF Ti1VUyI+QEFkcmlhbiBhbmQgQEJlbm9pdCwgcGxlYXNlIGNoZWNrIGlmIHRoZSBwcm9wb3NlZCB0 ZXh0cyBjYW4gcmVzb2x2ZSB5b3VyIGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGFua3MsPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5LaW5kIFJlZ2FyZHM8bzpwPjwvbzpwPjwvc3Bhbj48L3By ZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPktlcGVuZzxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVO LVVTIj5Db21wYXJlZCB3aXRoIGNoYXJ0ZXItaWV0Zi1hY2UtMDAtMDEgb24gdGhlIHdlYnBhZ2Us IHRoZSBjaGFuZ2VzIGFyZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+KDEpJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFkZCBvbmUgY2xhcmlm aWNhdGlvbiBzZW50ZW5jZSBhYm91dCBSRVNUIGFyY2hpdGVjdHVyZTo8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPk9MRDxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIElFVEYgaGFzIHJlY2VudGx5IGRldmVs b3BlZCBwcm90b2NvbHMgZm9yIHVzZSBpbiBjb25zdHJhaW5lZDxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+ZW52aXJvbm1lbnRzLCB3aGVyZSBuZXR3b3Jr IG5vZGVzIGFyZSBsaW1pdGVkIGluIENQVSwgbWVtb3J5IGFuZCBwb3dlci4gPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5SRVNUIGFyY2hpdGVjdHVyZSBp cyB3aWRlbHkgdXNlZCBmb3Igc3VjaCBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuPG86cD48L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPk5FVzxvOnA+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIElFVEYgaGFzIHJlY2VudGx5 IGRldmVsb3BlZCBwcm90b2NvbHMgZm9yIHVzZSBpbiBjb25zdHJhaW5lZDxvOnA+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+ZW52aXJvbm1lbnRzLCB3aGVyZSBu ZXR3b3JrIG5vZGVzIGFyZSBsaW1pdGVkIGluIENQVSwgbWVtb3J5IGFuZCBwb3dlci48bzpwPjwv bzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPlJFU1QgYXJjaGl0ZWN0 dXJlIGlzIHdpZGVseSB1c2VkIGZvciBzdWNoIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy48bzpw PjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPkVORDxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj4oMikmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgUmVtb3ZlIOKAnEFBQSBwcm90b2NvbOKAnSBmcm9tIHRoZSBjaGFy dGVyOjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+T0xE PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgSUVU RiBoYXMgYSBsb25nIGhpc3RvcnkgaW4gZGV2ZWxvcGluZyB0aHJlZS1wYXJ0eSBhdXRoZW50aWNh dGlvbiBhbmQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMi PmF1dGhvcml6YXRpb24gcHJvdG9jb2xzIGZvciBkaXN0cmlidXRlZCBlbnZpcm9ubWVudHMuIEV4 YW1wbGVzIGluY2x1ZGU8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiPktlcmJlcm9zLCB0aGUgUHVibGljIEtleSBJbmZyYXN0cnVjdHVyZSAoUEtJKSwgdGhl IEF1dGhlbnRpY2F0aW9uLDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+QXV0aG9yaXphdGlvbiBhbmQgQWNjb3VudGluZyAoQUFBKSBpbmZyYXN0cnVjdHVy ZSwgYW5kIHRoZSBXZWI8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiPkF1dGhvcml6YXRpb24gUHJvdG9jb2wgKE9BdXRoKS48bzpwPjwvbzpwPjwvc3Bhbj48 L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+TkVXPG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgSUVURiBoYXMgYSBsb25nIGhpc3RvcnkgaW4g ZGV2ZWxvcGluZyB0aHJlZS1wYXJ0eSBhdXRoZW50aWNhdGlvbiBhbmQ8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmF1dGhvcml6YXRpb24gcHJvdG9jb2xz IGZvciBkaXN0cmlidXRlZCBlbnZpcm9ubWVudHMuIEV4YW1wbGVzIGluY2x1ZGU8bzpwPjwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPktlcmJlcm9zLCB0aGUgUHVi bGljIEtleSBJbmZyYXN0cnVjdHVyZSAoUEtJKSwgYW5kIHRoZSBXZWIgQXV0aG9yaXphdGlvbiBQ cm90b2NvbCAoT0F1dGgpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+RU5EPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4t VVMiPigzKSBDbGFyaWZ5IHRoZSBzY29wZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+ PHNwYW4gbGFuZz0iRU4tVVMiPk9MRDo8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gbGFuZz0iRU4tVVMiPk5vdGUgdGhhdCB0aGUgaW5pdGlhbCBmb2N1cyBpcyBvbiBDb0FQIGFu ZCBIVFRQIHdpdGggRFRMUyBhbmQgVExTLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48 c3BhbiBsYW5nPSJFTi1VUyI+T3RoZXIgc2VjdXJpdHkgcHJvdG9jb2xzIG1heSBiZSBjb25zaWRl cmVkIGFzIGxvbmcgYXMgdGhlIHByaW1hcnkgZm9jdXMgaXMgbWFpbnRhaW5lZC4mbmJzcDsgPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5PdGhlciBhcHBs aWNhdGlvbiBwcm90b2NvbHMgYW5kIHByb3RvY29scyBhdCBvdGhlciBsYXllcnMgaW4gdGhlIHN0 YWNrIGFyZSBvdXQgb2Ygc2NvcGUuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4g bGFuZz0iRU4tVVMiPk5FVzxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+Tm90ZSB0aGF0IHRoZSBpbml0aWFsIGZvY3VzIGlzIG9uIENvQVAgYW5kIEhUVFAg d2l0aCBEVExTIGFuZCBUTFMuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxh bmc9IkVOLVVTIj5PdGhlciBzZWN1cml0eSBwcm90b2NvbHMgbWF5IGJlIGNvbnNpZGVyZWQgYXMg bG9uZyBhcyB0aGUgcHJpbWFyeSBmb2N1cyBpcyBtYWludGFpbmVkLiZuYnNwOyA8bzpwPjwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSBncm91cCBpcyBzY29w ZWQgdG8gd29yayBvbmx5IG9uIHRoZSB3ZWIgcHJvdG9jb2xzIGFuZCBkYXRhIGNhcnJpZWQgd2l0 aGluIHRoZW0uPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVT Ij5FTkQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+KDQp Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFVwZGF0ZSBtaWxlc3RvbmVzIGZvciB0aGUg dXNlIGNhc2UgJmFtcDsgcmVxdWlyZW1lbnRzIGRvY3VtZW50OjxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+T0xEOjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+SnVsIDIwMTUgU3VibWl0IOKAnFVzZSBjYXNlcyBh bmQgUmVxdWlyZW1lbnRz4oCdIGRvY3VtZW50IHRvIElFU0cgZm9yIHB1YmxpY2F0aW9uIGFzIGlu Zm9ybWF0aW9uYWwgUkZDLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9 IkVOLVVTIj5ORVc8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4t VVMiPkRlYyAyMDE0IE9wdGlvbmFsbHksIHN1Ym1pdCAmcXVvdDtVc2UgY2FzZXMgYW5kIFJlcXVp cmVtZW50cyZxdW90OyBkb2N1bWVudCB0byB0aGUgSUVTRyBmb3IgcHVibGljYXRpb24gYXMgYW4g SW5mb3JtYXRpb25hbCBSRkMuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxh bmc9IkVOLVVTIj5FTkQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJF Ti1VUyI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+ Q2hhcnRlciBjaGFydGVyLWlldGYtYWNlLTAwLTAyPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5BdXRoZW50aWNhdGlvbiBhbmQgQXV0aG9yaXphdGlvbiBm b3IgQ29uc3RyYWluZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiPkVudmlyb25tZW50IChBQ0UpPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gbGFuZz0iRU4tVVMiPlRoZSBJRVRGIGhhcyByZWNlbnRseSBkZXZlbG9wZWQgcHJvdG9jb2xz IGZvciB1c2UgaW4gY29uc3RyYWluZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gbGFuZz0iRU4tVVMiPmVudmlyb25tZW50cywgd2hlcmUgbmV0d29yayBub2RlcyBhcmUgbGlt aXRlZCBpbiBDUFUsIG1lbW9yeSBhbmQgcG93ZXIuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBsYW5nPSJFTi1VUyI+UkVTVCBhcmNoaXRlY3R1cmUgaXMgd2lkZWx5IHVzZWQg Zm9yIHN1Y2ggY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+SXQgaGFzIGJlZW4gb2JzZXJ2ZWQgdGhhdCBJbnRl cm5ldCBwcm90b2NvbHMgY2FuIGJlIGFwcGxpZWQgdG8gdGhlc2U8bzpwPjwvbzpwPjwvc3Bhbj48 L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmNvbnN0cmFpbmVkIGVudmlyb25tZW50cywg b2Z0ZW4gb25seSByZXF1aXJpbmcgbWlub3IgdHdlYWtpbmcgYW5kPG86cD48L286cD48L3NwYW4+ PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5wcm9maWxpbmcuIEluIG90aGVyIGNhc2Vz LCBuZXcgcHJvdG9jb2xzIGhhdmUgYmVlbiBkZWZpbmVkIHRvIGFkZHJlc3M8bzpwPjwvbzpwPjwv c3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPnRoZSBzcGVjaWZpYyByZXF1aXJl bWVudHMgb2YgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLiBBbiBleGFtcGxlIG9mPG86cD48L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5zdWNoIGEgcHJvdG9jb2wg aXMgdGhlIENvbnN0cmFpbmVkIEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKS48bzpwPjwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+QXMgaW4gb3RoZXIgZW52aXJv bm1lbnRzLCBhdXRoZW50aWNhdGlvbiBhbmQgYXV0aG9yaXphdGlvbiBxdWVzdGlvbnM8bzpwPjwv bzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmFsc28gYXJpc2UgaW4g Y29uc3RyYWluZWQgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBsZSwgYSBkb29yIGxvY2sgaGFzIHRv PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5hdXRob3Jp emUgdGhlIHBlcnNvbiBzZWVraW5nIGFjY2VzcyB1c2luZyBhICZxdW90O2RpZ2l0YWwga2V5JnF1 b3Q7LiBXaGVyZSBpcyB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFu Zz0iRU4tVVMiPmF1dGhvcml6YXRpb24gcG9saWN5IHN0b3JlZD8gSG93IGRvZXMgdGhlIGRpZ2l0 YWwga2V5IGNvbW11bmljYXRlIHdpdGg8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gbGFuZz0iRU4tVVMiPnRoZSBsb2NrPyBEb2VzIHRoZSBsb2NrIGludGVyYWN0IHdpdGggYW4g YXV0aG9yaXphdGlvbiBzZXJ2ZXIgdG8gb2J0YWluPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5hdXRob3JpemF0aW9uIGluZm9ybWF0aW9uPyBIb3cgY2Fu IGFjY2VzcyBiZSB0ZW1wb3JhcmlseSBncmFudGVkIHRvPG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5vdGhlciBwZXJzb25zPyBIb3cgY2FuIGFjY2VzcyBi ZSByZXZva2VkPyBUaGVzZSB0eXBlcyBvZiBxdWVzdGlvbnMgaGF2ZTxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+YmVlbiBhbnN3ZXJlZCBieSBleGlzdGlu ZyBwcm90b2NvbHMgZm9yIHVzZSBjYXNlcyBvdXRzaWRlIGNvbnN0cmFpbmVkPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5lbnZpcm9ubWVudHMsIGhvd2V2 ZXIgaW4gY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLCBhZGRpdGlvbmFsIGFuZDxvOnA+PC9vOnA+ PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+ZGlmZmVyZW50IHJlcXVpcmVt ZW50cyBwb3NlIGNoYWxsZW5nZXMgZm9yIHRoZSB1c2Ugb2YgdmFyaW91cyBzZWN1cml0eTxvOnA+ PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+cHJvdG9jb2xzLiBJ biBwYXJ0aWN1bGFyLCB0aGUgbmVlZCBhcmlzZXMgZm9yIGEgZHluYW1pYyBhbmQgZmluZSBncmFp bmVkPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5hY2Nl c3MgY29udHJvbCBtZWNoYW5pc20sIHdoZXJlIGNsaWVudHMgYW5kL29yIHJlc291cmNlIHNlcnZl cnMgYXJlPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5j b25zdHJhaW5lZC48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1V UyI+VGhlIElFVEYgaGFzIGEgbG9uZyBoaXN0b3J5IGluIGRldmVsb3BpbmcgdGhyZWUtcGFydHkg YXV0aGVudGljYXRpb24gYW5kPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxh bmc9IkVOLVVTIj5hdXRob3JpemF0aW9uIHByb3RvY29scyBmb3IgZGlzdHJpYnV0ZWQgZW52aXJv bm1lbnRzLiBFeGFtcGxlcyBpbmNsdWRlPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxz cGFuIGxhbmc9IkVOLVVTIj5LZXJiZXJvcywgdGhlIFB1YmxpYyBLZXkgSW5mcmFzdHJ1Y3R1cmUg KFBLSSksIGFuZCB0aGUgV2ViPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxh bmc9IkVOLVVTIj5BdXRob3JpemF0aW9uIFByb3RvY29sIChPQXV0aCkuIEFsbCB0aGVzZSBwcm90 b2NvbHMgZW5qb3kgd2lkZXNwcmVhZDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3Bh biBsYW5nPSJFTi1VUyI+ZGVwbG95bWVudCBvbiB0aGUgSW50ZXJuZXQuIEFsdGhvdWdoIHRoZXkg YWxsIGFpbSB0byBzb2x2ZSBhIHNpbWlsYXI8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+ PHNwYW4gbGFuZz0iRU4tVVMiPmdvYWwsIGF0IGFuIGFic3RyYWN0IGxldmVsLCB0aGV5IG9mZmVy IHF1aXRlIGRpZmZlcmVudCBmdW5jdGlvbnMgYW5kPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj51dGlsaXplIGRpZmZlcmVudCBtZXNzYWdlIGV4Y2hhbmdl cy4gVGhlc2UgZGlmZmVyZW5jZXMgcmVzdWx0IGZyb20gdGhlPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5tYWluIGRlcGxveW1lbnQgdXNlIGNhc2VzIHRo ZXkgd2VyZSBkZXNpZ25lZCBmb3IgcmVzcGVjdGl2ZWx5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJl Pg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5SZXF1aXJlbWVudHMgZGVyaXZlZCBmcm9tIHVzZSBj YXNlcyBpbmRpY2F0ZSB0aGUgc3VpdGFiaWxpdHkgb2YgZXhpc3Rpbmc8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPndvcmsgYXMgYSBzb2x1dGlvbiBmb3Ig Y29uc3RyYWluZWQgZW52aXJvbm1lbnRzLiBUaGVzZSBwcm90b2NvbHMsPG86cD48L286cD48L3Nw YW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5ob3dldmVyLCB3ZXJlIG5vdCBvcHRp bWl6ZWQgZm9yIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy4gQWRkaXRpb25hbDxvOnA+PC9vOnA+ PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+cmVxdWlyZW1lbnRzIHRoYXQg bmVlZCB0byBiZSB0YWtlbiBpbnRvIGFjY291bnQgYXJlIHRoZSBsYWNrIG9mIGE8bzpwPjwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPnN1aXRhYmxlIHVzZXItaW50 ZXJmYWNlIGFuZCB0aGUgaW5hYmlsaXR5IG9mIGVtYmVkZGVkIGRldmljZXMgdG8gY29udGFjdDxv OnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+YW4gYXV0aG9y aXphdGlvbiBzZXJ2ZXIgaW4gcmVhbC10aW1lIHdpdGggZXZlcnkgcmVzb3VyY2UgYWNjZXNzIHJl cXVlc3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmR1 ZSB0byBpbnRlcm1pdHRlbnQgY29ubmVjdGl2aXR5LCBldGMuPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3By ZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPlRoaXMgd29ya2luZyBncm91cCB0aGVyZWZvcmUg YWltcyB0byBwcm9kdWNlIGEgc3RhbmRhcmRpemVkIHNvbHV0aW9uIGZvcjxvOnA+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+YXV0aGVudGljYXRpb24gYW5kIGF1 dGhvcml6YXRpb24gdG8gZW5hYmxlIGF1dGhvcml6ZWQgYWNjZXNzIChHRVQsIFBVVCwgUE9TVCwg PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5ERUxFVEUp IHRvIHJlc291cmNlcyBpZGVudGlmaWVkIGJ5IGEgVVJJIGFuZCBob3N0ZWQgb24gYSByZXNvdXJj ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+c2VydmVy IGluIGNvbnN0cmFpbmVkIGVudmlyb25tZW50cy4gQXMgYSBzdGFydGluZyBwb2ludCwgdGhlIHdv cmtpbmc8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmdy b3VwIHdpbGwgYXNzdW1lIHRoYXQgYWNjZXNzIHRvIHJlc291cmNlcyBhdCBhIHJlc291cmNlIHNl cnZlciBieSBhPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVT Ij5jbGllbnQgZGV2aWNlIHRha2VzIHBsYWNlIHVzaW5nIENvQVAgYW5kIGlzIHByb3RlY3RlZCBi eSBEVExTLiBCb3RoPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVO LVVTIj5yZXNvdXJjZSBzZXJ2ZXIgYW5kIGNsaWVudCBtYXkgYmUgY29uc3RyYWluZWQuIFRoaXMg YWNjZXNzIHdpbGwgYmU8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0i RU4tVVMiPm1lZGlhdGVkIGJ5IGFuIGF1dGhvcml6YXRpb24gc2VydmVyLCB3aGljaCBpcyBub3Qg Y29uc2lkZXJlZCB0byBiZTxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+Y29uc3RyYWluZWQuPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4g bGFuZz0iRU4tVVMiPkV4aXN0aW5nIGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIHBy b3RvY29scyB3aWxsIGJlIHVzZWQgd2hlcmU8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+ PHNwYW4gbGFuZz0iRU4tVVMiPmFwcGxpY2FibGUgdG8gYnVpbGQgdGhlIGNvbnN0cmFpbmVkLWVu dmlyb25tZW50IHNvbHV0aW9uLiBUaGlzIHJlcXVpcmVzPG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5yZWxldmFudCBzcGVjaWZpY2F0aW9ucyB0byBiZSBy ZXZpZXdlZCBmb3Igc3VpdGFiaWxpdHksIHNlbGVjdGluZyBhPG86cD48L286cD48L3NwYW4+PC9w cmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5zdWJzZXQgb2YgdGhlbSBhbmQgcmVzdHJpY3Rp bmcgdGhlIG9wdGlvbnMgd2l0aGluIGVhY2ggb2YgdGhlPG86cD48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5zcGVjaWZpY2F0aW9ucy4gU29tZSBmdW5jdGlvbmFs aXR5LCBob3dldmVyLCBtYXkgbm90IGJlIGF2YWlsYWJsZSBpbjxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+ZXhpc3RpbmcgcHJvdG9jb2xzLCBpbiB3aGlj aCBjYXNlIHRoZSBzb2x1dGlvbiBtYXkgYWxzbyBpbnZvbHZlIG5ldzxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+cHJvdG9jb2wgd29yay4gTGV2ZXJhZ2lu ZyBleGlzdGluZyB3b3JrIG1lYW5zIHRoZSB3b3JraW5nIGdyb3VwIGJlbmVmaXRzPG86cD48L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5mcm9tIGF2YWlsYWJsZSBz ZWN1cml0eSBhbmFseXNpcywgaW1wbGVtZW50YXRpb24sIGFuZCBkZXBsb3ltZW50PG86cD48L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5leHBlcmllbmNlLiBNb3Jl b3ZlciwgYSBzdGFuZGFyZGl6ZWQgc29sdXRpb24gZm9yIGZlZGVyYXRlZDxvOnA+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+YXV0aGVudGljYXRpb24gYW5kIGF1 dGhvcml6YXRpb24gd2lsbCBoZWxwIHRvIHN0aW11bGF0ZSB0aGUgZGVwbG95bWVudDxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+b2YgY29uc3RyYWluZWQg ZGV2aWNlcyB0aGF0IHByb3ZpZGUgaW5jcmVhc2VkIHNlY3VyaXR5LjxvOnA+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5PbmNlIHByb2dyZXNzIGluIGlkZW50aWZ5 aW5nIHN1aXRhYmxlIGNhbmRpZGF0ZSBzb2x1dGlvbnMgaGFzIGJlZW4gbWFkZSw8bzpwPjwvbzpw Pjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPnRoZSB3b3JraW5nIGdyb3Vw IHdpbGwgdmVyaWZ5IHdoZXRoZXIgdGhlIHNhbWUgbWVjaGFuaXNtcyBhcmUgYWxzbzxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+YXBwbGljYWJsZSBiZXlv bmQgdGhlIHVzZSBvZiBDb0FQIGFuZCBEVExTLCB3aGljaCBhcmUgdGhlIHR3byBtYWluPG86cD48 L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5wcm90b2NvbHMgdGhl IGdyb3VwIHdpbGwgZm9jdXMgb24gZm9yIGFjY2VzcyB0byByZXNvdXJjZXMuIEluPG86cD48L286 cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5wYXJ0aWN1bGFyLCB0aGUg YWJpbGl0eSB0byB1c2UgdGhlIGRldmVsb3BlZCBzb2x1dGlvbiBvdmVyIEhUVFAgYW5kIFRMUzxv OnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+d2lsbCBiZSBp bnZlc3RpZ2F0ZWQuIE5vdGUgdGhhdCB0aGUgaW5pdGlhbCBmb2N1cyBpcyBvbiBDb0FQIGFuZCBI VFRQIHdpdGggRFRMUyBhbmQgVExTLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3Bh biBsYW5nPSJFTi1VUyI+T3RoZXIgc2VjdXJpdHkgcHJvdG9jb2xzIG1heSBiZSBjb25zaWRlcmVk IGFzIGxvbmcgYXMgdGhlIHByaW1hcnkgZm9jdXMgaXMgbWFpbnRhaW5lZC4mbmJzcDsgPG86cD48 L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgZ3JvdXAgaXMg c2NvcGVkIHRvIHdvcmsgb25seSBvbiB0aGUgd2ViIHByb3RvY29scyBhbmQgZGF0YSBjYXJyaWVk IHdpdGhpbiB0aGVtLjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJF Ti1VUyI+RnVydGhlcm1vcmUsIHRvIGd1YXJhbnRlZSBzbW9vdGggdHJhbnNpdGlvbiwgdGhlPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5pbnRlZ3JhdGlv biB3aXRoIGV4aXN0aW5nIGRlcGxveW1lbnRzIHdpbGwgYmUgc3R1ZGllZCwgcGFydGljdWxhcmx5 PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5jb25jZXJu aW5nIHRoZSB1c2Ugb2YgcHJvdG9jb2wgdHJhbnNsYXRpb24gcHJveGllcy48bzpwPjwvbzpwPjwv c3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+VGhpcyB3b3JrIGRvZXMgbm90IG1h a2UgdGhlIGFzc3VtcHRpb24gdGhhdCB0aGUgcGFydHkgb2ZmZXJpbmc8bzpwPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPmFwcGxpY2F0aW9uIGxheWVyIHNlcnZp Y2VzIGlzIGFsd2F5cyB0aGUgc2FtZSBwYXJ0eSBvZmZlcmluZyBuZXR3b3JrPG86cD48L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5hY2Nlc3Mgc2VydmljZXMuPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSB3b3JraW5n IGdyb3VwIGhhcyB0aGUgZm9sbG93aW5nIHRhc2tzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0K PHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj4xKSBQcm9kdWNlIHVzZSBjYXNlcyBhbmQgcmVxdWlyZW1l bnRzPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4tVVMiPjIpIElk ZW50aWZ5IGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIG1lY2hhbmlzbXMgc3VpdGFi bGUgZm9yPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5y ZXNvdXJjZSBhY2Nlc3MgaW4gY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLjxvOnA+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5NaWxlc3RvbmVzOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5KdWwgMjAxNCBTdWJtaXQgJnF1 b3Q7VXNlIGNhc2VzIGFuZCBSZXF1aXJlbWVudHMmcXVvdDsgYXMgYSBXRyBpdGVtLjxvOnA+PC9v OnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+RGVjIDIwMTQgU3VibWl0 ICZxdW90O0F1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIFNvbHV0aW9uJnF1b3Q7IGFz IGEgV0cgaXRlbS48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4t VVMiPkRlYyAyMDE0IE9wdGlvbmFsbHksIHN1Ym1pdCAmcXVvdDtVc2UgY2FzZXMgYW5kIFJlcXVp cmVtZW50cyZxdW90OyBkb2N1bWVudCA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNw YW4gbGFuZz0iRU4tVVMiPnRvIHRoZSBJRVNHIGZvciBwdWJsaWNhdGlvbiBhcyBhbiBJbmZvcm1h dGlvbmFsIFJGQy48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFuZz0iRU4t VVMiPkp1bCAyMDE2IFN1Ym1pdCAmcXVvdDtBdXRoZW50aWNhdGlvbiBhbmQgQXV0aG9yaXphdGlv biBTb2x1dGlvbiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+c3BlY2lmaWNhdGlvbiB0byB0aGUgSUVTRyBmb3IgcHVibGljYXRpb24gYXMgYSBQ cm9wb3NlZCBTdGFuZGFyZC48bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5n PSJFTi1VUyI+UHJvcG9zZWQgTWlsZXN0b25lcyA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxw cmU+PHNwYW4gbGFuZz0iRU4tVVMiPk5vIG1pbGVzdG9uZXMgZm9yIGNoYXJ0ZXIgZm91bmQuPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxvOnA+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+QWNlIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+ PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+PGEgaHJlZj0ibWFpbHRvOkFj ZUBpZXRmLm9yZyI+QWNlQGlldGYub3JnPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHBy ZT48c3BhbiBsYW5nPSJFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9hY2UiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNl PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MGNtO21hcmdpbi1ib3R0b206LjAwMDFwdDts aW5lLWhlaWdodDpub3JtYWwiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OuWui+S9kyI+PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHByZT48c3BhbiBsYW5nPSJFTi1VUyI+LS0gPG86cD48L286cD48L3NwYW4+ PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5lbWFpbDogPGEgaHJlZj0ibWFpbHRvOnJz dHJ1aWsuZXh0QGdtYWlsLmNvbSI+cnN0cnVpay5leHRAZ21haWwuY29tPC9hPiB8IFNreXBlOiBy c3RydWlrPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj5j ZWxsOiAmIzQzOzEgKDY0NykgODY3LTU2NTggfCBVUzogJiM0MzsxICg0MTUpIDY5MC03MzYzPG86 cD48L286cD48L3NwYW4+PC9wcmU+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581440F7SZXEMA501MBXchi_-- From nobody Fri May 30 00:36:26 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C13A1A6FB4; Thu, 29 May 2014 08:55:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BBqeK4Wf2ruL; Thu, 29 May 2014 08:55:29 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58DA21A6F96; Thu, 29 May 2014 08:55:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s4TFsZMC025616; Thu, 29 May 2014 17:54:35 +0200 (CEST) Received: from [192.168.1.146] (p54BC4594.dip0.t-ipconnect.de [84.188.69.148]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id E112215CE; Thu, 29 May 2014 17:54:34 +0200 (CEST) Message-ID: <5387583A.6040506@tzi.de> Date: Thu, 29 May 2014 17:54:34 +0200 From: Stefanie Gerdes User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Rene Struik , Likepeng , Kathleen Moriarty , "adrian@olddog.co.uk" References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F258140E59@SZXEMA501-MBX.china.huawei.com> <5383726F.30100@gmail.com> In-Reply-To: <5383726F.30100@gmail.com> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/_osNbG39kTs-MJ5jchp1COHCez4 X-Mailman-Approved-At: Fri, 30 May 2014 00:36:24 -0700 Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Revised charter proposal: charter-ietf-ace-00-02 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 May 2014 15:55:31 -0000 Hi everyone, On 05/26/2014 06:57 PM, Rene Struik wrote: > > #RS-1: remove any suggestion that existing solutions are already known > to be suitable (this is still to be seen and part of the work of this > group). This removes the current tension between para 4 and para 6, > where para 4 says "indicate the suitability of existing work", whereas > para 6 suggests "this requires relevant specifications to be reviewed > for suitability". This is why I raised as concern in my original draft > review of April 10, 2014, 5:58pm EDT > (http://www.ietf.org/mail-archive/web/ace/current/msg00517.html) that > one should engage into this effort with open mind, without presorting > solution directions in the charter. > > OLD: > > Requirements derived from use cases indicate the suitability of existing > > work as a solution for constrained environments > > NEW: > > Requirements derived from use cases may indicate that existingwork is > useful as basis for as a solution for constrained environments I think we can benefit from carefully reviewing existing protocols for their applicability to constrained environments. If we come to the conclusion that one of the proposed solutions is fitting, this is a good result. And we might have a clue afterwards which one of them fits best. The expectation is that some requirements of constrained environments can not easily be met by existing solutions and we might need to define profiles or extensions or otherwise bridge the gaps. We should be open for ideas and not try to fit a round piece through a square hole because it might work somehow. The need for an authentication and authorization solution for constrained environments came up in the CoRE working group. The reason for initiating the ACE working group is that the discussions about possible solutions took up so much time in CoRE that other topics of the group were delayed. > #RS-2: I would suggest scrapping the entire para 7, since much too > ambitious (one can easily recharter to take on more work or refocus at a > later stage). I made the same comment on the original draft charter > (April 10, 2014, 5:59pm EDT). > > > OLD: > > Once progress in identifying suitable candidate solutions has been made, > > the working group will verify whether the same mechanisms are also > > applicable beyond the use of CoAP and DTLS, which are the two main > > protocols the group will focus on for access to resources. In > > particular, the ability to use the developed solution over HTTP and TLS > > will be investigated. Note that the work is limited to CoAP and HTTP > > with DTLS and TLS. Other application protocols with their related > > transport protocols, and other protocols at other layers in the stack, > > are out of scope. Furthermore, to guarantee smooth transition, the > > integration with existing deployments will be studied, particularly > > concerning the use of protocol translation proxies. > > > NEW: > > The working group will focus on CoAP and DTLS for access to resources. > Any other work will require rechartering. Concerning #RS-2: As I mentioned before I would be happy to leave speculations about future work after rechartering out of the charter. > > #RS-3: I would suggest taking more time for the use cases and > requirements than currently suggested. Given the lengthy discussion on > draft charter and ACE WG coming into operation potentially just prior to > the July 2014 IETF meeting, I would suggest being more reflective on use > cases and aiming for WG item here after November 2014 meeting (Dec 2014) > and IESG phase Apr 2015. Not much harm will be done here, since solution > and use cases can be co-developed in parallel and, moreover, one can > always strive for beating the schedule (overdelivering, so to speak). > > > OLD: > > Jul 2014 Submit "Use cases and Requirements"� as a WG item. > > Dec 2014 Submit Optionally submit "Use cases and Requirements" document > to the IESG for > > publication as an Informational RFC. > > > NEW: > > Dec 2014 Submit "Use cases and Requirements"� as a WG item. > > Apr 2015 Submit Optionally submit "Use cases and Requirements" document > to the IESG for > > publication as an Informational RFC. #RS-3: The discussion about the Use cases and Requirements draft indicated that it would be beneficial to work on this draft in parallel while working on the solution. This is only possible if we set the milestone accordingly. Best regards, Steffi From nobody Fri May 30 00:36:28 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61CC01A019F; Thu, 29 May 2014 10:49:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J-aa3aMGjxmG; Thu, 29 May 2014 10:49:08 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA00D1A018A; Thu, 29 May 2014 10:49:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s4THmdLl003553; Thu, 29 May 2014 19:48:40 +0200 (CEST) Received: from [192.168.1.146] (p54BC4594.dip0.t-ipconnect.de [84.188.69.148]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id A995C1602; Thu, 29 May 2014 19:48:39 +0200 (CEST) Message-ID: <538772F7.4080708@tzi.de> Date: Thu, 29 May 2014 19:48:39 +0200 From: Stefanie Gerdes User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Rene Struik , Likepeng , Kathleen Moriarty , "adrian@olddog.co.uk" References: <20140514221215.8150.56543.idtracker@ietfa.amsl.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B2A345@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F252B38978@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F258140E59@SZXEMA501-MBX.china.huawei.com> <5383726F.30100@gmail.com> <5387583A.6040506@tzi.de> In-Reply-To: <5387583A.6040506@tzi.de> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/iIRYqxLNs3H7j7Vy0oDjy19R-qg X-Mailman-Approved-At: Fri, 30 May 2014 00:36:24 -0700 Cc: "aaa-doctors@ietf.org" , The IESG , "ace@ietf.org" Subject: Re: [AAA-DOCTORS] [Ace] Revised charter proposal: charter-ietf-ace-00-02 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 May 2014 17:49:09 -0000 Maybe the purpose of my previous note was not clear enough. My intent was to reason why I support Renes proposed changes to the charter. Best regards, Steffi On 05/29/2014 05:54 PM, Stefanie Gerdes wrote: > Hi everyone, > > > On 05/26/2014 06:57 PM, Rene Struik wrote: > >> >> #RS-1: remove any suggestion that existing solutions are already known >> to be suitable (this is still to be seen and part of the work of this >> group). This removes the current tension between para 4 and para 6, >> where para 4 says "indicate the suitability of existing work", whereas >> para 6 suggests "this requires relevant specifications to be reviewed >> for suitability". This is why I raised as concern in my original draft >> review of April 10, 2014, 5:58pm EDT >> (http://www.ietf.org/mail-archive/web/ace/current/msg00517.html) that >> one should engage into this effort with open mind, without presorting >> solution directions in the charter. >> >> OLD: >> >> Requirements derived from use cases indicate the suitability of existing >> >> work as a solution for constrained environments >> >> NEW: >> >> Requirements derived from use cases may indicate that existingwork is >> useful as basis for as a solution for constrained environments > > I think we can benefit from carefully reviewing existing protocols for > their applicability to constrained environments. If we come to the > conclusion that one of the proposed solutions is fitting, this is a good > result. And we might have a clue afterwards which one of them fits best. > The expectation is that some requirements of constrained environments > can not easily be met by existing solutions and we might need to define > profiles or extensions or otherwise bridge the gaps. We should be open > for ideas and not try to fit a round piece through a square hole because > it might work somehow. > > The need for an authentication and authorization solution for > constrained environments came up in the CoRE working group. The reason > for initiating the ACE working group is that the discussions about > possible solutions took up so much time in CoRE that other topics of the > group were delayed. > > >> #RS-2: I would suggest scrapping the entire para 7, since much too >> ambitious (one can easily recharter to take on more work or refocus at a >> later stage). I made the same comment on the original draft charter >> (April 10, 2014, 5:59pm EDT). >> >> >> OLD: >> >> Once progress in identifying suitable candidate solutions has been made, >> >> the working group will verify whether the same mechanisms are also >> >> applicable beyond the use of CoAP and DTLS, which are the two main >> >> protocols the group will focus on for access to resources. In >> >> particular, the ability to use the developed solution over HTTP and TLS >> >> will be investigated. Note that the work is limited to CoAP and HTTP >> >> with DTLS and TLS. Other application protocols with their related >> >> transport protocols, and other protocols at other layers in the stack, >> >> are out of scope. Furthermore, to guarantee smooth transition, the >> >> integration with existing deployments will be studied, particularly >> >> concerning the use of protocol translation proxies. >> >> >> NEW: >> >> The working group will focus on CoAP and DTLS for access to resources. >> Any other work will require rechartering. > > Concerning #RS-2: As I mentioned before I would be happy to leave > speculations about future work after rechartering out of the charter. > >> >> #RS-3: I would suggest taking more time for the use cases and >> requirements than currently suggested. Given the lengthy discussion on >> draft charter and ACE WG coming into operation potentially just prior to >> the July 2014 IETF meeting, I would suggest being more reflective on use >> cases and aiming for WG item here after November 2014 meeting (Dec 2014) >> and IESG phase Apr 2015. Not much harm will be done here, since solution >> and use cases can be co-developed in parallel and, moreover, one can >> always strive for beating the schedule (overdelivering, so to speak). >> >> >> OLD: >> >> Jul 2014 Submit "Use cases and Requirements"� as a WG item. >> >> Dec 2014 Submit Optionally submit "Use cases and Requirements" document >> to the IESG for >> >> publication as an Informational RFC. >> >> >> NEW: >> >> Dec 2014 Submit "Use cases and Requirements"� as a WG item. >> >> Apr 2015 Submit Optionally submit "Use cases and Requirements" document >> to the IESG for >> >> publication as an Informational RFC. > > #RS-3: The discussion about the Use cases and Requirements draft > indicated that it would be beneficial to work on this draft in parallel > while working on the solution. This is only possible if we set the > milestone accordingly. > > Best regards, > Steffi > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > -- Stefanie Gerdes Tel: +49 421 218 63906 TZI Universit�t Bremen E-Mail: gerdes@tzi.de Bibliothekstr. 1, MZH 5150 28359 Bremen, Germany From nobody Sat May 31 16:32:51 2014 Return-Path: X-Original-To: aaa-doctors@ietfa.amsl.com Delivered-To: aaa-doctors@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79EFE1A0132 for ; Sat, 31 May 2014 16:32:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.652 X-Spam-Level: X-Spam-Status: No, score=-0.652 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Gb43cO7IJUV for ; Sat, 31 May 2014 16:32:44 -0700 (PDT) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 7906C1A0139 for ; Sat, 31 May 2014 16:32:44 -0700 (PDT) Received: by power.freeradius.org (Postfix, from userid 1000) id C66FF2240342; Sun, 1 Jun 2014 01:32:07 +0200 (CEST) From: aland@freeradius.org To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: <20140531233207.C66FF2240342@power.freeradius.org> Date: Sun, 1 Jun 2014 01:32:07 +0200 (CEST) Archived-At: http://mailarchive.ietf.org/arch/msg/aaa-doctors/TU1BrLPJJ_pboNlujWlZaIusVsc Subject: [AAA-DOCTORS] Automatic tech report for Sun Jun 1 01:32:07 CEST 2014 X-BeenThere: aaa-doctors@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: AAA Doctors E-mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 31 May 2014 23:32:46 -0000 This is an automatically generated email. It lists the IETF internet-drafts which are WG items and which reference RADIUS. Drafts from the RADEXT and DIME working groups are not included. -- draft-ietf-abfab-aaa-saml-09 Active draft-ietf-abfab-arch-12 In IESG processing - ID Tracker state draft-ietf-netmod-system-mgmt-16 In IESG processing - ID Tracker state draft-ietf-softwire-map-radius-01 Active