From nobody Fri Dec 4 13:05:53 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A90FC1A8B84; Fri, 4 Dec 2015 13:05:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.309 X-Spam-Level: X-Spam-Status: No, score=-2.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0bFWnDbI7_ZE; Fri, 4 Dec 2015 13:05:49 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.121]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 904BB1A8AEA; Fri, 4 Dec 2015 13:05:48 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX02.ad.nexusgroup.com (10.75.28.43) with Microsoft SMTP Server (TLS) id 15.0.995.29; Fri, 4 Dec 2015 22:05:45 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Fri, 4 Dec 2015 22:05:45 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: Kathleen Moriarty Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKb6mzibdroQ0aWbiONihL/Fp6mw9kAgAHRn4CAAEgoAIASjksA Date: Fri, 4 Dec 2015 21:05:45 +0000 Message-ID: References: <7505C89A-FCA1-4AD6-93F6-BDE3517AF1B4@mit.edu> <80EA3B4B-6FF2-42F4-8379-0C5D9E4ADE7A@gmail.com> In-Reply-To: <80EA3B4B-6FF2-42F4-8379-0C5D9E4ADE7A@gmail.com> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2104) x-originating-ip: [37.247.26.197] Content-Type: multipart/alternative; boundary="_000_C1C044D142DA443DB97243CFF444733Bnexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: "ace@ietf.org" , "" , Justin Richer , "cose@ietf.org" Subject: Re: [Ace] [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Dec 2015 21:05:52 -0000 --_000_C1C044D142DA443DB97243CFF444733Bnexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCldlIGp1c3Qgc3VibWl0dGVkIGFuIHVwZGF0ZWQgdmVyc2lvbiBvZiB0aGUgQ0JPUiBX ZWIgVG9rZW4gKENXVCkgdG8gdGhlIEFDRSBXRyByZXBvc2l0b3J5LiBUaGUgbmV3IHZlcnNpb24g cmVmZXJlbmNlcyB0aGUgSldUIGNsYWltcy4gTmFtZSBpcyBhbHNvIGtlcHQgdG8gQ0JPUiBXZWIg VG9rZW4gdG8gbWFrZSBpdCBjbGVhciBpdOKAmXMgZGVyaXZlZCBmcm9tIEpXVCBhbmQgdXNlcyBi b3RoIGNsYWltIG5hbWVzIGFuZCBmb3JtYXRzLg0KDQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtd2FobHN0cm9lbS1hY2UtY2Jvci13ZWItdG9rZW4tMDANCg0KLyBFcmlrLCBNaWtl IGFuZCBIYW5uZXMNCg0KDQpPbiAyMyBOb3YgMjAxNSwgYXQgMDI6NDMsIEthdGhsZWVuIE1vcmlh cnR5IDxrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTxtYWlsdG86a2F0aGxlZW4ubW9y aWFydHkuaWV0ZkBnbWFpbC5jb20+PiB3cm90ZToNCg0KSGVsbG8sDQoNCkxvb2tpbmcgYWNyb3Nz IHRoZSB0aHJlZSBXR3MsIHRoZXJlIGFyZSBnb29kIGFyZ3VtZW50cyBmb3IgZG9pbmcgdGhlIHdv cmsgaW4gZWFjaCwgYnV0IEFDRSB3b3VsZCBiZSB0aGUgYmVzdCBXRyBmb3IgYSBmZXcgcmVhc29u cy4NCg0KQ09TRSBpcyBzdXBwb3NlZCB0byBiZSBzaG9ydC1saXZlZCwgbGV0J3Mga2VlcCBpdCB0 aGF0IHdheS4NCg0KT0FVVEggaGFzIGEgZnVsbCBwbGF0ZSwgYWx0aG91Z2ggdGhleSB0ZW5kIHRv IGJlIHZlcnkgcHJvZHVjdGl2ZS4NCg0KQUNFIGhhcyBqdXN0IGJlY29tZSBtb3JlIGZvY3VzZWQg YW5kIEkgdGhpbmsgdGhpcyBjb3VsZCBmaXQgd2VsbCBvbmNlIHRoZSBPQVVUSCBzb2x1dGlvbiB3 b3JrIGlzIHVuZGVyd2F5Lg0KDQpUaGVyZSdzIGVub3VnaCBvdmVybGFwIGZvciB0aGlzIHRvIGhh cHBlbiBpbiBhbnkgb2YgdGhlIFdHcy4NCg0KVGhhbmtzIGZvciB0aGUgZGlzY3Vzc2lvbiwgSSB3 YXMgd2FpdGluZyB0byBjaGltZSBpbiB1bnRpbCBpdCB3YXMgaGFzaGVkIG91dCBhIGJpdCB0byBz ZWUgaWYgdGhlcmUgd2FzIGFueSBvdmVyd2hlbG1pbmcgY29uc2Vuc3VzIHdpdGhvdXQgaW5mbHVl bmNpbmcgdGhlIG91dGNvbWUuICBOb3cgdGhhdCBpdCBoYXMgcXVpZXRlZCBkb3duLCBBQ0UgaXMg cHJvYmFibHkgdGhlIGJlc3QgcGxhbi4NCg0KVGhhbmtzLA0KS2F0aGxlZW4NCg0KU2VudCBmcm9t IG15IGlQaG9uZQ0KDQpPbiBOb3YgMjIsIDIwMTUsIGF0IDQ6MjUgUE0sIEVyaWsgV2FobHN0csO2 bSBuZVh1cyA8ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5jb208bWFpbHRvOmVyaWsud2FobHN0 cm9tQG5leHVzZ3JvdXAuY29tPj4gd3JvdGU6DQoNCkhpLA0KDQpZZXMsIHdlIGhhdmUgYSBkcmFm dCBwb3N0ZWQgaW4gdGhlIE9BdXRoIFdHIGZvciBhIENCT1IgV2ViIFRva2VuIChDV1QpLiBodHRw czovL3Rvb2xzLmlldGYub3JnL2lkL2RyYWZ0LXdhaGxzdHJvZW0tb2F1dGgtY2Jvci13ZWItdG9r ZW4tMDAudHh0DQoNCldlIHdhbnQgdG8ga2VlcCBpdCB0aGVyZSBhbmQgcmVmZXJlbmNlIHRoZSBK V1QgY2xhaW1zIChhbHNvIGRlZmluZWQgaW4gT0F1dGggV0cpIGFuZCBsYXRlciBhZGQgYXR0cmli dXRlcyBuZWVkZWQgZm9yIGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIGZvciBJb1Qg dG8gSldUL0NXVCBpbiBBQ0UgV0cuDQoNClRoYW5rcw0KRXJpaw0KDQoNCg0KT24gMjEgTm92IDIw MTUsIGF0IDE4OjM5LCBKdXN0aW4gUmljaGVyIDxqcmljaGVyQE1JVC5FRFU8bWFpbHRvOmpyaWNo ZXJATUlULkVEVT4+IHdyb3RlOg0KDQpSZWFkaW5nIHRocm91Z2ggdGhlIHRocmVhZHMgYW4gb3Bp bmlvbnMsIHRoZXJlIGlzIG5vIGNsZWFyIGNvbnNlbnN1cyBhcyB0byB3aGVyZSB0aGUgd29yayBz aG91bGQgYmUgZG9uZS4gVGhlcmUgaXMgcm91Z2hseSBlcXVhbCBzdXBwb3J0IGZvciBkb2luZyB0 aGlzIGluIGFueSBvZiB0aGUgdGhyZWUgb2ZmZXJlZCB3b3JraW5nIGdyb3Vwcy4NCg0KVGhlcmUg aXMgY2xlYXIgY29uc2Vuc3VzIHRoYXQgaXQgc2hvdWxkIGJlIGRvbmUgYW5kIHRoYXQsIGFzIG11 Y2ggYXMgcG9zc2libGUsIGl0IHNob3VsZCBiZSBhIGRpcmVjdCBtYXAgb2YgdGhlIGV4aXN0aW5n IEpXVCBwYXlsb2FkIG9iamVjdCBhbmQgY29tbW9uIGNsYWltcy4NCg0KSW4gdGhpcyBsaWdodCwg c29tZW9uZSBuZWVkcyB0byBqdXN0IHN0YXJ0IHRoZSB3b3JrIGFzIGFuIGluZGl2aWR1YWwgZHJh ZnQgYW5kIHB1c2ggZm9yd2FyZCwgYW5kIHdoaWNoZXZlciB3b3JraW5nIGdyb3VwIG1vc3Qgd2Fu dHMgdG8gY2FuIHBpY2sgaXQgdXAgYW5kIHB1Ymxpc2ggaXQuIEkgaGF2ZSBubyBxdWFsbXMgb24g YWNjZXB0aW5nIHRoaXMgd29yayB3aXRoaW4gdGhlIENPU0Ugd29ya2luZyBncm91cCBhbmQgSSBi ZWxpZXZlIHRoZXJlIGlzIGVub3VnaCBzdXBwb3J0IHRvIHdhcnJhbnQgdGhhdCBwbGFjZW1lbnQg aWYgYW4gYXV0aG9yIHN1Ym1pdHMgYSBkcmFmdCBoZXJlIChhbmQgdGhpcyByZW1haW5zIG15IHBy ZWZlcmVuY2UgYXMgYW4gaW5kaXZpZHVhbCksIGJ1dCBJIHdpbGwgbm90IG9iamVjdCB0byBhbm90 aGVyIGdyb3VwIHBpY2tpbmcgaXQgdXAuDQoNCkkgYmVsaWV2ZSwgd2l0aCBhbGwgb2YgdGhlIG92 ZXJsYXAgYmV0d2VlbiBncm91cHMsIHRoYXQgd2Ugd2lsbCBoYXZlIG5vIHRyb3VibGUgZ2V0dGlu ZyB0aGUg4oCccmlnaHQgcGVvcGxl4oCdIHRvIGxvb2sgYXQgaXQuIEFkZGl0aW9uYWxseSwgaXQg aXMgY2xlYXIgdGhhdCBpdCB3aWxsIGJlIHZlcnkgYmVuZWZpY2lhbCB0byBoYXZlIGZvcm1hbCBy ZXZpZXdzIGZyb20gYWxsIHRocmVlIGdyb3VwcyBvbmNlIHRoZSBkcmFmdCBoYXMgcmVhY2hlZCBh IG1hdHVyZSBzdGF0dXMuDQoNClRoYW5rZnVsbHksIEVyaWsgaGFzIGFscmVhZHkgZG9uZSB0aGlz IHdpdGggaGlzIOKAnENPU0UgV2ViIFRva2Vu4oCdIGRyYWZ0LiBIZeKAmXMgaW5pdGlhbGx5IHRh cmdldGVkIHRoaXMgYXQgdGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAsIGFuZCB0aGUgd29yayBzdGFy dGVkIGluIEFDRSwgc28gSSBjYWxsIHRvIHRoZSBhdXRob3IgdG8gcGljayBhIGxvY2F0aW9uIGFu ZCBydW4gd2l0aCBpdC4NCg0K4oCUIEp1c3RpbiwgeW91ciBDT1NFIGNoYWlyDQoNCk9uIE5vdiA3 LCAyMDE1LCBhdCAzOjAxIEFNLCBKdXN0aW4gUmljaGVyIDxqcmljaGVyQE1JVC5FRFU8bWFpbHRv OmpyaWNoZXJATUlULkVEVT4+IHdyb3RlOg0KDQpBdCB0aGUgWW9rb2hhbWEgbWVldGluZywgdGhl IGNoYWlycyBhZ3JlZWQgdG8gZG8gYSBjb25zZW5zdXMgY2FsbCByZWdhcmRpbmcgdGhlIGFkb3B0 aW9uIGFuZCBwbGFjZW1lbnQgb2YgbmV3IHdvcmsgdG8gZGVmaW5lIGEgQ09TRSBUb2tlbiwgYW5h bG9nb3VzIHRvIHRoZSBKV1QgZnJvbSBKT1NFLiBJbiB0aGUgcm9vbSwgdGhlcmUgd2FzIGEgZ2Vu ZXJhbCBzZW50aW1lbnQgb2Ygc3VwcG9ydCBmb3IgdGhlIHdvcmsgYmVpbmcgZG9uZSwgd2l0aCB0 aGUgd2lkZSBhZG9wdGlvbiBvZiBKV1QgYW5kIGl0cyBkcml2aW5nIG9mIEpPU0UgYmVpbmcgYSBj b21tb24gdGhlbWUgb2YgcHJlY2VkZW50LiBXaGF0IHdhc27igJl0IGNsZWFyIGlzIHdoZXJlIHRo ZSB3b3JrIHNob3VsZCBiZSBkb25lIGFuZCB0byB3aGF0IGVuZCBpdCBzaG91bGQgZHJpdmUuIFRo ZSBzaXggcG9zaXRpb25zIHdlIGFyZSBhc2tpbmcgdGhlIHdvcmtpbmcgZ3JvdXAgdG8gY29uc2lk ZXIgYW5kIHZvaWNlIHRoZWlyIHN1cHBvcnQgZm9yIGFyZToNCg0KQSkgRGVmaW5lIHRoZSBDT1NF IFRva2VuIHdpdGhpbiB0aGUgQ09TRSB3b3JraW5nIGdyb3VwIGFsb25nIHNpZGUgdGhlIENPU0Ug TWVzc2FnZXMgKGFuZCBwb3RlbnRpYWxseSBDT1NFIEF1eGlsaWFyeSBBbGdvcml0aG1zKSBkcmFm dC4NCkIpIERlZmluZSB0aGUgQ09TRSBUb2tlbiBpbnNpZGUgdGhlIE9BdXRoIHdvcmtpbmcgZ3Jv dXAuDQpDKSBEZWZpbmUgdGhlIENPU0UgVG9rZW4gaW5zaWRlIHRoZSBBQ0Ugd29ya2luZyBncm91 cC4NCkQpIERvbuKAmXQgZGVmaW5lIHRoZSBDT1NFIFRva2VuIGFueXdoZXJlLg0KRSkgWW91IG5l ZWQgbW9yZSBpbmZvcm1hdGlvbiB0byBkZWNpZGUuDQpGKSBZb3UgZG9u4oCZdCBnaXZlIGEgZmx5 aW5nIHJhdCBhYm91dCB0aGUgQ09TRSBUb2tlbi4qDQoNClRoZSBjb25zZW5zdXMgY2FsbCB3aWxs IHJlbWFpbiBvcGVuIGZvciB0d28gd2Vla3MgZnJvbSB0b2RheSwgY2xvc2luZyBvbiBOb3ZlbWJl ciAyMSwgMjAxNTsgYXQgd2hpY2ggdGltZSwgaG9wZWZ1bGx5IHdlIHdpbGwgaGF2ZSBhIGNsZWFy IGFuc3dlciBhbmQgZGlyZWN0aW9uIHRvIHBvaW50IHRoaXMgd29yay4NCg0KVGhhbmsgeW91LA0K 4oCUIEp1c3RpbiAmIEtlcGVuZywgeW91ciBDT1NFIGNoYWlycw0KDQoqIEkgcHJvbWlzZWQgdGhv c2UgaW4gdGhlIHJvb20gYXQgWW9rb2hhbWEgdG8gb2ZmZXIgYSBmbHlpbmcgcmF0IG9wdGlvbiwg Zm9yIHdoaWNoIEkgYW0gZGVlcGx5IHNvcnJ5Lg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3JnPG1h aWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jb3NlDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQpDT1NFIG1haWxpbmcgbGlzdA0KQ09TRUBpZXRmLm9yZzxtYWlsdG86Q09TRUBpZXRmLm9yZz4N Cmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ09TRSBtYWlsaW5nIGxpc3QN CkNPU0VAaWV0Zi5vcmc8bWFpbHRvOkNPU0VAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0K --_000_C1C044D142DA443DB97243CFF444733Bnexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: <48B9DE0308B3B44BBD95A5DD3A6B879B@nexusgroup.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5IaSw8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPldl IGp1c3Qgc3VibWl0dGVkIGFuIHVwZGF0ZWQgdmVyc2lvbiBvZiB0aGUgQ0JPUiBXZWIgVG9rZW4g KENXVCkgdG8gdGhlIEFDRSBXRyByZXBvc2l0b3J5LiBUaGUgbmV3IHZlcnNpb24gcmVmZXJlbmNl cyB0aGUgSldUIGNsYWltcy4gTmFtZSBpcyBhbHNvIGtlcHQgdG8gQ0JPUiBXZWIgVG9rZW4gdG8g bWFrZSBpdCBjbGVhciBpdOKAmXMgZGVyaXZlZCBmcm9tIEpXVCBhbmQgdXNlcyBib3RoIGNsYWlt IG5hbWVzIGFuZCBmb3JtYXRzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LXdhaGxzdHJvZW0tYWNlLWNib3Itd2ViLXRva2VuLTAwIiBjbGFzcz0iIj5odHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtd2FobHN0cm9lbS1hY2UtY2Jvci13ZWItdG9rZW4t MDA8L2E+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4vIEVyaWssIE1pa2UgYW5kIEhhbm5lczwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMjMgTm92IDIwMTUsIGF0IDAyOjQz LCBLYXRobGVlbiBNb3JpYXJ0eSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmthdGhsZWVuLm1vcmlhcnR5 LmlldGZAZ21haWwuY29tIiBjbGFzcz0iIj5rYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNv bTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXds aW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGRpcj0iYXV0byIgY2xhc3M9IiI+DQo8ZGl2IGNs YXNzPSIiPkhlbGxvLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+TG9va2luZyBhY3Jvc3MgdGhlIHRocmVlIFdHcywgdGhlcmUgYXJlIGdv b2QgYXJndW1lbnRzIGZvciBkb2luZyB0aGUgd29yayBpbiBlYWNoLCBidXQgQUNFIHdvdWxkIGJl IHRoZSBiZXN0IFdHIGZvciBhIGZldyByZWFzb25zLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+Q09TRSBpcyBzdXBwb3NlZCB0byBiZSBz aG9ydC1saXZlZCwgbGV0J3Mga2VlcCBpdCB0aGF0IHdheS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk9BVVRIIGhhcyBhIGZ1bGwgcGxh dGUsIGFsdGhvdWdoIHRoZXkgdGVuZCB0byBiZSB2ZXJ5IHByb2R1Y3RpdmUuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BQ0UgaGFzIGp1 c3QgYmVjb21lIG1vcmUgZm9jdXNlZCBhbmQgSSB0aGluayB0aGlzIGNvdWxkIGZpdCB3ZWxsIG9u Y2UgdGhlIE9BVVRIIHNvbHV0aW9uIHdvcmsgaXMgdW5kZXJ3YXkuPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGVyZSdzIGVub3VnaCBv dmVybGFwIGZvciB0aGlzIHRvIGhhcHBlbiBpbiBhbnkgb2YgdGhlIFdHcy48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyBmb3Ig dGhlIGRpc2N1c3Npb24sIEkgd2FzIHdhaXRpbmcgdG8gY2hpbWUgaW4gdW50aWwgaXQgd2FzIGhh c2hlZCBvdXQgYSBiaXQgdG8gc2VlIGlmIHRoZXJlIHdhcyBhbnkgb3ZlcndoZWxtaW5nIGNvbnNl bnN1cyB3aXRob3V0IGluZmx1ZW5jaW5nIHRoZSBvdXRjb21lLiAmbmJzcDtOb3cgdGhhdCBpdCBo YXMgcXVpZXRlZCBkb3duLCBBQ0UgaXMgcHJvYmFibHkgdGhlIGJlc3QgcGxhbi48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyw8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+S2F0aGxlZW4mbmJzcDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQpTZW50IGZyb20gbXkgaVBob25lPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCk9uIE5vdiAyMiwgMjAxNSwgYXQgNDoyNSBQTSwgRXJpayBXYWhsc3Ryw7ZtIG5lWHVz ICZsdDs8YSBocmVmPSJtYWlsdG86ZXJpay53YWhsc3Ryb21AbmV4dXNncm91cC5jb20iIGNsYXNz PSIiPmVyaWsud2FobHN0cm9tQG5leHVzZ3JvdXAuY29tPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiI+SGksDQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5ZZXMsIHdlIGhhdmUgYSBkcmFmdCBwb3N0ZWQgaW4gdGhlIE9B dXRoIFdHIGZvciBhIENCT1IgV2ViIFRva2VuIChDV1QpLiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtd2FobHN0cm9lbS1vYXV0aC1jYm9yLXdlYi10b2tlbi0w MC50eHQiIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtd2FobHN0cm9l bS1vYXV0aC1jYm9yLXdlYi10b2tlbi0wMC50eHQ8L2E+Jm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5XZSB3YW50IHRvIGtlZXAg aXQgdGhlcmUgYW5kIHJlZmVyZW5jZSB0aGUgSldUIGNsYWltcyAoYWxzbyBkZWZpbmVkIGluIE9B dXRoIFdHKSBhbmQgbGF0ZXIgYWRkIGF0dHJpYnV0ZXMgbmVlZGVkIGZvciBhdXRoZW50aWNhdGlv biBhbmQgYXV0aG9yaXphdGlvbiBmb3IgSW9UIHRvIEpXVC9DV1QgaW4gQUNFIFdHLjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtz PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkVyaWs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDIxIE5vdiAyMDE1LCBhdCAxODozOSwg SnVzdGluIFJpY2hlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpyaWNoZXJATUlULkVEVSIgY2xhc3M9 IiI+anJpY2hlckBNSVQuRURVPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxl LWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj5SZWFkaW5nIHRocm91Z2ggdGhl IHRocmVhZHMgYW4gb3BpbmlvbnMsIHRoZXJlIGlzIG5vIGNsZWFyIGNvbnNlbnN1cyBhcyB0byB3 aGVyZSB0aGUgd29yayBzaG91bGQgYmUgZG9uZS4gVGhlcmUgaXMgcm91Z2hseSBlcXVhbCBzdXBw b3J0IGZvciBkb2luZyB0aGlzIGluIGFueSBvZiB0aGUgdGhyZWUgb2ZmZXJlZCB3b3JraW5nIGdy b3Vwcy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGVyZSBpcyBjbGVhciBjb25zZW5z dXMgdGhhdCBpdCBzaG91bGQgYmUgZG9uZSBhbmQgdGhhdCwgYXMgbXVjaCBhcyBwb3NzaWJsZSwg aXQgc2hvdWxkIGJlIGEgZGlyZWN0IG1hcCBvZiB0aGUgZXhpc3RpbmcgSldUIHBheWxvYWQgb2Jq ZWN0IGFuZCBjb21tb24gY2xhaW1zLg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KSW4g dGhpcyBsaWdodCwgc29tZW9uZSBuZWVkcyB0byBqdXN0IHN0YXJ0IHRoZSB3b3JrIGFzIGFuIGlu ZGl2aWR1YWwgZHJhZnQgYW5kIHB1c2ggZm9yd2FyZCwgYW5kIHdoaWNoZXZlciB3b3JraW5nIGdy b3VwIG1vc3Qgd2FudHMgdG8gY2FuIHBpY2sgaXQgdXAgYW5kIHB1Ymxpc2ggaXQuIEkgaGF2ZSBu byBxdWFsbXMgb24gYWNjZXB0aW5nIHRoaXMgd29yayB3aXRoaW4gdGhlIENPU0Ugd29ya2luZyBn cm91cCBhbmQgSSBiZWxpZXZlIHRoZXJlIGlzDQogZW5vdWdoIHN1cHBvcnQgdG8gd2FycmFudCB0 aGF0IHBsYWNlbWVudCBpZiBhbiBhdXRob3Igc3VibWl0cyBhIGRyYWZ0IGhlcmUgKGFuZCB0aGlz IHJlbWFpbnMgbXkgcHJlZmVyZW5jZSBhcyBhbiBpbmRpdmlkdWFsKSwgYnV0IEkgd2lsbCBub3Qg b2JqZWN0IHRvIGFub3RoZXIgZ3JvdXAgcGlja2luZyBpdCB1cC48YnIgY2xhc3M9IiI+DQo8YnIg Y2xhc3M9IiI+DQpJIGJlbGlldmUsIHdpdGggYWxsIG9mIHRoZSBvdmVybGFwIGJldHdlZW4gZ3Jv dXBzLCB0aGF0IHdlIHdpbGwgaGF2ZSBubyB0cm91YmxlIGdldHRpbmcgdGhlIOKAnHJpZ2h0IHBl b3BsZeKAnSB0byBsb29rIGF0IGl0LiBBZGRpdGlvbmFsbHksIGl0IGlzIGNsZWFyIHRoYXQgaXQg d2lsbCBiZSB2ZXJ5IGJlbmVmaWNpYWwgdG8gaGF2ZSBmb3JtYWwgcmV2aWV3cyBmcm9tIGFsbCB0 aHJlZSBncm91cHMgb25jZSB0aGUgZHJhZnQgaGFzIHJlYWNoZWQgYSBtYXR1cmUNCiBzdGF0dXMu IDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoYW5rZnVsbHksIEVyaWsgaGFzIGFscmVh ZHkgZG9uZSB0aGlzIHdpdGggaGlzIOKAnENPU0UgV2ViIFRva2Vu4oCdIGRyYWZ0LiBIZeKAmXMg aW5pdGlhbGx5IHRhcmdldGVkIHRoaXMgYXQgdGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAsIGFuZCB0 aGUgd29yayBzdGFydGVkIGluIEFDRSwgc28gSSBjYWxsIHRvIHRoZSBhdXRob3IgdG8gcGljayBh IGxvY2F0aW9uIGFuZCBydW4gd2l0aCBpdC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQri gJQgSnVzdGluLCB5b3VyIENPU0UgY2hhaXI8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5PbiBOb3YgNywgMjAxNSwgYXQgMzowMSBB TSwgSnVzdGluIFJpY2hlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpyaWNoZXJATUlULkVEVSIgY2xh c3M9IiI+anJpY2hlckBNSVQuRURVPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KQXQgdGhlIFlva29oYW1hIG1lZXRpbmcsIHRoZSBjaGFpcnMgYWdyZWVkIHRvIGRv IGEgY29uc2Vuc3VzIGNhbGwgcmVnYXJkaW5nIHRoZSBhZG9wdGlvbiBhbmQgcGxhY2VtZW50IG9m IG5ldyB3b3JrIHRvIGRlZmluZSBhIENPU0UgVG9rZW4sIGFuYWxvZ291cyB0byB0aGUgSldUIGZy b20gSk9TRS4gSW4gdGhlIHJvb20sIHRoZXJlIHdhcyBhIGdlbmVyYWwgc2VudGltZW50IG9mIHN1 cHBvcnQgZm9yIHRoZSB3b3JrIGJlaW5nIGRvbmUsIHdpdGggdGhlDQogd2lkZSBhZG9wdGlvbiBv ZiBKV1QgYW5kIGl0cyBkcml2aW5nIG9mIEpPU0UgYmVpbmcgYSBjb21tb24gdGhlbWUgb2YgcHJl Y2VkZW50LiBXaGF0IHdhc27igJl0IGNsZWFyIGlzIHdoZXJlIHRoZSB3b3JrIHNob3VsZCBiZSBk b25lIGFuZCB0byB3aGF0IGVuZCBpdCBzaG91bGQgZHJpdmUuIFRoZSBzaXggcG9zaXRpb25zIHdl IGFyZSBhc2tpbmcgdGhlIHdvcmtpbmcgZ3JvdXAgdG8gY29uc2lkZXIgYW5kIHZvaWNlIHRoZWly IHN1cHBvcnQgZm9yIGFyZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpBKSBEZWZpbmUg dGhlIENPU0UgVG9rZW4gd2l0aGluIHRoZSBDT1NFIHdvcmtpbmcgZ3JvdXAgYWxvbmcgc2lkZSB0 aGUgQ09TRSBNZXNzYWdlcyAoYW5kIHBvdGVudGlhbGx5IENPU0UgQXV4aWxpYXJ5IEFsZ29yaXRo bXMpIGRyYWZ0LjxiciBjbGFzcz0iIj4NCkIpIERlZmluZSB0aGUgQ09TRSBUb2tlbiBpbnNpZGUg dGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAuPGJyIGNsYXNzPSIiPg0KQykgRGVmaW5lIHRoZSBDT1NF IFRva2VuIGluc2lkZSB0aGUgQUNFIHdvcmtpbmcgZ3JvdXAuPGJyIGNsYXNzPSIiPg0KRCkgRG9u 4oCZdCBkZWZpbmUgdGhlIENPU0UgVG9rZW4gYW55d2hlcmUuPGJyIGNsYXNzPSIiPg0KRSkgWW91 IG5lZWQgbW9yZSBpbmZvcm1hdGlvbiB0byBkZWNpZGUuPGJyIGNsYXNzPSIiPg0KRikgWW91IGRv buKAmXQgZ2l2ZSBhIGZseWluZyByYXQgYWJvdXQgdGhlIENPU0UgVG9rZW4uKjxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NClRoZSBjb25zZW5zdXMgY2FsbCB3aWxsIHJlbWFpbiBvcGVuIGZv ciB0d28gd2Vla3MgZnJvbSB0b2RheSwgY2xvc2luZyBvbiBOb3ZlbWJlciAyMSwgMjAxNTsgYXQg d2hpY2ggdGltZSwgaG9wZWZ1bGx5IHdlIHdpbGwgaGF2ZSBhIGNsZWFyIGFuc3dlciBhbmQgZGly ZWN0aW9uIHRvIHBvaW50IHRoaXMgd29yay48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpU aGFuayB5b3UsPGJyIGNsYXNzPSIiPg0K4oCUIEp1c3RpbiAmYW1wOyBLZXBlbmcsIHlvdXIgQ09T RSBjaGFpcnM8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQoqIEkgcHJvbWlzZWQgdGhvc2Ug aW4gdGhlIHJvb20gYXQgWW9rb2hhbWEgdG8gb2ZmZXIgYSBmbHlpbmcgcmF0IG9wdGlvbiwgZm9y IHdoaWNoIEkgYW0gZGVlcGx5IHNvcnJ5LjxiciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KQ09TRSBtYWlsaW5n IGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86Q09TRUBpZXRmLm9yZyIgY2xhc3M9 IiI+Q09TRUBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiIGNsYXNzPSIiPmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvYT48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+ DQo8YnIgY2xhc3M9IiI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxiciBjbGFzcz0iIj4NCkNPU0UgbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEg aHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciIGNsYXNzPSIiPkNPU0VAaWV0Zi5vcmc8L2E+PGJy IGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jb3NlIiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nv c2U8L2E+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+X19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188L3NwYW4+PGJyIGNsYXNzPSIi Pg0KPHNwYW4gY2xhc3M9IiI+Q09TRSBtYWlsaW5nIGxpc3Q8L3NwYW4+PGJyIGNsYXNzPSIiPg0K PHNwYW4gY2xhc3M9IiI+PGEgaHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciIGNsYXNzPSIiPkNP U0VAaWV0Zi5vcmc8L2E+PC9zcGFuPjxiciBjbGFzcz0iIj4NCjxzcGFuIGNsYXNzPSIiPjxhIGhy ZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZSIgY2xhc3M9IiI+ aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9hPjwvc3Bhbj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C1C044D142DA443DB97243CFF444733Bnexusgroupcom_-- From nobody Fri Dec 4 19:47:24 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 074BA1B3709 for ; Fri, 4 Dec 2015 19:47:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l4iD0UvGM_UZ for ; Fri, 4 Dec 2015 19:47:19 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0742.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::742]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C7BA1B3708 for ; Fri, 4 Dec 2015 19:47:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/ZLg7Lr1ZnhsYj3w0rI4vGTsR3AQjZsaqlFVbNTb9l8=; b=crIqLkQ9dSM7p3Lwh2hWi6/0Wb6GOD5ZLyKkturjH/ehs28T2bYZ2ocPkqxz/DRgEVGVCAIikW6aimqyZ7QNPOAP5p2+Bj5K4sKUFVcS+MlPTa/15fUmaVeSseBWrTYgzIVrAVWeYBGQyFDp9qO6jb7yk/kPmgSfjVI3+/mKN8s= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.331.20; Sat, 5 Dec 2015 03:46:53 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0331.023; Sat, 5 Dec 2015 03:46:54 +0000 From: Mike Jones To: "ace@ietf.org" Thread-Topic: CBOR Web Token (CWT) spec for the ACE working group Thread-Index: AdEvDD/qhV0xKgF3TQ+OV37TSTGCSw== Date: Sat, 5 Dec 2015 03:46:54 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:2::650] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:WlwTKBryQOFR3NY0VuL0OLZoYVxkHczxG0tq/2fVG6FWsBrDhSTSmMMaDbArl+jHyi43WHEFk7ZuIRxb+P2yVyA2awdh/Wocuc/uKQQugRpsf4bDZeGI5+NWnB8QI/l+3X+WCMMSzDEaW9pQqyRABg==; 24:zSKlIk1vC+iVIddvNY1kWdafTZ3dPekhb40ljOw2eswx33XtR60iBDL5sVrDZ+VOChFEqttz19qOfwyZSBtd9u/J7hsmTKYzoDIFVEAXrd8= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(189930954265078); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046)(61426038)(61427038); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07817FCC2D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(209900001)(199003)(189002)(1220700001)(19617315012)(189998001)(5002640100001)(54356999)(19580395003)(40100003)(16236675004)(106356001)(5005710100001)(10090500001)(229853001)(87936001)(2351001)(33656002)(122556002)(50986999)(2501003)(76576001)(5003600100002)(8990500004)(86612001)(110136002)(5001960100002)(19300405004)(1096002)(5008740100001)(15975445007)(10290500002)(97736004)(86362001)(5004730100002)(77096005)(10400500002)(81156007)(450100001)(102836003)(92566002)(99286002)(107886002)(105586002)(101416001)(74316001)(6116002)(19625215002)(586003)(790700001)(2900100001)(3826002)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB4425F2AC92C71EE5855C25AF50B0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Dec 2015 03:46:54.0980 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [Ace] CBOR Web Token (CWT) spec for the ACE working group X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Dec 2015 03:47:23 -0000 --_000_BY2PR03MB4425F2AC92C71EE5855C25AF50B0BY2PR03MB442namprd_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable After input from many interested people, IETF Security Area Director Kathle= en Moriarty decided that the right place for the CBOR Web Token (CWT) work is the ACE= working group. Today Erik Wa= hlstr=F6m posted a new draft of the CBOR Web Token (CWT) specification that= is intended for ACE. This version of the spec references the JSON Web Token (JWT) claim definitions, rather than repeating them, and in= tentionally only includes equivalents of the claims defined by the JWT spec= . Other CWT claims, including those needed by ACE applications, will be de= fined by other specs and registered in the CWT claims registry. The specification is available at: =B7 http://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token-= 00 An HTML-formatted version is also available at: =B7 http://self-issued.info/docs/draft-wahlstroem-ace-cbor-web-toke= n-00.html -- Mike P.S. This note was also posted at http://self-issued.info/?p=3D1503 and as= @selfissued. --_000_BY2PR03MB4425F2AC92C71EE5855C25AF50B0BY2PR03MB442namprd_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

After input from many interested people, IETF Securi= ty Area Director Kathleen Moriarty decided that the right place for the CBOR Web Token = (CWT) work is the ACE working group.  Today Erik Wahlstr=F6m posted a new draft of the CBOR Web Token (= CWT) specification that is intended for ACE.

 

This version of the spec references the JSON Web Token (JWT) claim definitions, rather than repeating them, and= intentionally only includes equivalents of the claims defined by the JWT s= pec.  Other CWT claims, including those needed by ACE applications, wi= ll be defined by other specs and registered in the CWT claims registry.

 

The specification is available at:

=B7         http://tools.ietf.org/html/= draft-wahlstroem-ace-cbor-web-token-00

 

An HTML-formatted version is also available at:=

=B7         http://self-issued.i= nfo/docs/draft-wahlstroem-ace-cbor-web-token-00.html<= /p>

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;     -- Mike

 

P.S.  This note was also posted at http://self-issued.info/?p=3D1503 and as @selfissued.

--_000_BY2PR03MB4425F2AC92C71EE5855C25AF50B0BY2PR03MB442namprd_-- From nobody Sat Dec 5 09:56:31 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C02501A903A for ; Sat, 5 Dec 2015 09:56:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kJ7zmqHo6B1A for ; Sat, 5 Dec 2015 09:56:29 -0800 (PST) Received: from ipedge2.entrust.com (ipedge2.entrust.com [216.191.252.25]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90AA81A900B for ; Sat, 5 Dec 2015 09:56:27 -0800 (PST) X-IronPort-AV: E=Sophos; i="5.20,386,1444708800"; d="scan'208,217"; a="10116739" Received: from unknown (HELO sottexchcas.corp.ad.entrust.com) ([10.4.51.93]) by ipedge2.entrust.com with ESMTP/TLS/AES256-SHA; 05 Dec 2015 12:56:25 -0500 Received: from SOTTEXCH10.corp.ad.entrust.com ([fe80::389b:f45b:7ea1:79b7]) by sottexchcas1.corp.ad.entrust.com ([::1]) with mapi id 14.03.0266.001; Sat, 5 Dec 2015 12:56:24 -0500 From: Tim Moses To: Mike Jones Thread-Topic: [Ace] CBOR Web Token (CWT) spec for the ACE working group Thread-Index: AQHRL4ZBer2cVI3FnEWkQFr3Rrdo8A== Date: Sat, 5 Dec 2015 17:56:23 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_AF50516947E741A496B03B304F74E94Eentrustcom_" MIME-Version: 1.0 Archived-At: Cc: "ace@ietf.org" Subject: Re: [Ace] CBOR Web Token (CWT) spec for the ACE working group X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Dec 2015 17:56:30 -0000 --_000_AF50516947E741A496B03B304F74E94Eentrustcom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Mike. Can you help with this? Clearly, CWT is a suitable basis for operationalizing authn and authz in th= e ACE context. And we should expect to see enhancements to CWT for the purp= ose. But, what about key management for ACE (whether we are talking about bearer= tokens, symmetric keys or asymmetric keys)? It seems to me that CBOR Enco= ded Message Syntax has a head start in this regard. Is this how people see the division of responsibilities? CWT for operation= and CEMS for management? All the best. Tim. On Dec 4, 2015, at 10:47 PM, Mike Jones > wrote: After input from many interested people, IETF Security Area Director Kathle= en Moriarty decided that the right place for the CBOR Web Token (CWT) work is the ACE= working group. Today Erik Wa= hlstr=F6m posted a new draft of the CBOR Web Token (CWT) specification that= is intended for ACE. This version of the spec references the JSON Web Token (JWT) claim definitions, rather than repeating them, and in= tentionally only includes equivalents of the claims defined by the JWT spec= . Other CWT claims, including those needed by ACE applications, will be de= fined by other specs and registered in the CWT claims registry. The specification is available at: =B7 http://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token-= 00 An HTML-formatted version is also available at: =B7 http://self-issued.info/docs/draft-wahlstroem-ace-cbor-web-toke= n-00.html -- Mike P.S. This note was also posted at http://self-issued.info/?p=3D1503 and as= @selfissued. _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace --_000_AF50516947E741A496B03B304F74E94Eentrustcom_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi Mike. Can you help with this?

Clearly, CWT is a suitable basis for operationalizing authn and authz = in the ACE context. And we should expect to see enhancements to CWT for the= purpose.

But, what about key management for ACE (whether we are talking about b= earer tokens, symmetric keys or asymmetric keys)?  It seems to me that= CBOR Encoded Message Syntax has a head start in this regard.

Is this how people see the division of responsibilities?  CWT for= operation and CEMS for management?

All the best. Tim. 

On Dec 4, 2015, at 10:47 PM, Mike Jones <Michael.Jones@microsoft.com> wrote:

After input from many interested people, IETF Securi= ty Area Director Kathleen Moriarty decided that the right place for the CBOR Web Token = (CWT) work is the ACE working group.  Today Erik Wahlstr=F6m posted a new draft of the CBOR Web Token (= CWT) specification that is intended for ACE.

 

This version of the spec references the JSON Web Token (JWT) claim definitions, rather than repeating them, and= intentionally only includes equivalents of the claims defined by the JWT s= pec.  Other CWT claims, including those needed by ACE applications, wi= ll be defined by other specs and registered in the CWT claims registry.

 

The specification is available at:

=B7         http://tools.ietf.org/h= tml/draft-wahlstroem-ace-cbor-web-token-00

 

An HTML-formatted version is also available at:=

=B7         http://self-issu= ed.info/docs/draft-wahlstroem-ace-cbor-web-token-00.html

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;     -- Mike

 

P.S.  This note was also posted at http://self-issued.info/?p=3D1503 and as @selfissued.

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.iet= f.org/mailman/listinfo/ace
--_000_AF50516947E741A496B03B304F74E94Eentrustcom_-- From nobody Fri Dec 11 23:28:59 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EDFA1A1A9C for ; Fri, 11 Dec 2015 23:28:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.907 X-Spam-Level: * X-Spam-Status: No, score=1.907 tagged_above=-999 required=5 tests=[BAYES_50=0.8, LOCALPART_IN_SUBJECT=1.107, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HDqG5zBNUOdk for ; Fri, 11 Dec 2015 23:28:56 -0800 (PST) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 883EF1A1A9F for ; Fri, 11 Dec 2015 23:28:56 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 9F69938EF3; Fri, 11 Dec 2015 23:28:55 -0800 (PST) From: "Jim Schaad" To: Date: Fri, 11 Dec 2015 23:26:09 -0800 Message-ID: <03ec01d134ae$5fc0cdc0$1f426940$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Content-Language: en-us Thread-Index: AdE0mCtBxfpjx3c1SI6EQXN9wDj5ew== Archived-At: Cc: Ace@ietf.org Subject: [Ace] draft-wahlstroem-oauth-cbor-web-token X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Dec 2015 07:28:57 -0000 Not sure where the correct cc of this is, but I seem to remember it is going to ACE not OAUTH. 1. This is just a to be considered issue, I can easily see that there is sufficient argument not to change the type for StringOrUIR from the string type, however it might be useful to use the text string and the URI type (tag 32) rather than the colon character to differentiate between strings and URIs. 2. I would strongly suggest consideration of the CBOR type of numeric date rather than the string version (Major type 6, minor type 1). This will lead to a much more compact form of date encoding in most if not all cases. After reading farther, it would appear that the text is assuming it is using numeric version so the text is wrong. 3. Is there a reason why you are not using integers for the labels in the map rather than strings? 4. There is no reason to continuously repeat the case-sensitive string, that is implied by saying StringOrURI value. Thus s/case-sensitive string containing a StringOrURI value/a value of type StringOrURI/ 5. You should be consistent in language. Either you should reject the CWT or you should not accept it for processing. Even better would probably be to 1) state things positively and not negatively (testing compliance is easier) and 2) have a clearer statement on what the CWT is for. Thus "The "nbf" claim identifies the time the CWT expires. The current time MUST be after or equal to the "nbf" value for the CWT to be used in decision processing." 6. It would seem to be better to make cti be a binary value as it is a denser range of values to choose from and thus not need as many bits to ensure uniqueness. 7. What is the purpose of the value column in figure 1? 8. The example is incorrect. It should be { "iss": "coap://as.example.com", "aud": "coap://light.example.com", "exp": 1(1444064944), "iat": 1(1443944944) } Nits: Section 1 - s/re-used/used/ From nobody Fri Dec 11 23:56:15 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 853421A1B12 for ; Fri, 11 Dec 2015 23:56:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.309 X-Spam-Level: X-Spam-Status: No, score=-2.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HpvP7uFDiU83 for ; Fri, 11 Dec 2015 23:56:10 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A3771A1AC9 for ; Fri, 11 Dec 2015 23:56:09 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Sat, 12 Dec 2015 08:56:30 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Sat, 12 Dec 2015 08:56:30 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: Jim Schaad Thread-Topic: [Ace] draft-wahlstroem-oauth-cbor-web-token Thread-Index: AdE0mCtBxfpjx3c1SI6EQXN9wDj5ewAEgF6A Date: Sat, 12 Dec 2015 07:56:30 +0000 Message-ID: <90977D5E-93DE-47AF-A8B5-2E4F768225F1@nexusgroup.com> References: <03ec01d134ae$5fc0cdc0$1f426940$@augustcellars.com> In-Reply-To: <03ec01d134ae$5fc0cdc0$1f426940$@augustcellars.com> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2104) x-originating-ip: [213.113.163.201] Content-Type: multipart/alternative; boundary="_000_90977D5E93DE47AFA8B52E4F768225F1nexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: "Ace@ietf.org" , "draft-wahlstroem-oauth-cbor-web-token@tools.ietf.org" Subject: Re: [Ace] draft-wahlstroem-oauth-cbor-web-token X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Dec 2015 07:56:13 -0000 --_000_90977D5E93DE47AFA8B52E4F768225F1nexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSmltLA0KDQpUaGFua3MgZm9yIHlvdSByZXZpZXcuIEl04oCZcyB2ZXJ5IG11Y2ggYXBwcmVj aWF0ZWQuIFRoZXJlIHdoZXJlIGEgZGViYXRlIG9uIHdoZXJlIHRvIHBvc3QgdGhlIENXVCBkb2N1 bWVudCAoQ09TRSwgQUNFIG9yIE9hdXRoKS4gSXQgYWxsIGVuZGVkIHVwIGluIHRoZSBBQ0UgV0cu IFdlIHB1Ymxpc2hlZCBhIHJldmlzZWQgYW5kIHVwZGF0ZWQgQ1dUIGRvY3VtZW50IHRvIEFDRSwg eW91IGNhbiBmaW5kIGl0IGhlcmU6IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC13 YWhsc3Ryb2VtLWFjZS1jYm9yLXdlYi10b2tlbi0wMC4NCg0KU2VlIGNvbW1lbnRzIGJlbG93Lg0K DQoNCk9uIDEyIERlYyAyMDE1LCBhdCAwODoyNiwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxs YXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0KDQpOb3Qgc3Vy ZSB3aGVyZSB0aGUgY29ycmVjdCBjYyBvZiB0aGlzIGlzLCBidXQgSSBzZWVtIHRvIHJlbWVtYmVy IGl0IGlzIGdvaW5nDQp0byBBQ0Ugbm90IE9BVVRILg0KDQoxLiAgVGhpcyBpcyBqdXN0IGEgdG8g YmUgY29uc2lkZXJlZCBpc3N1ZSwgSSBjYW4gZWFzaWx5IHNlZSB0aGF0IHRoZXJlIGlzDQpzdWZm aWNpZW50IGFyZ3VtZW50IG5vdCB0byBjaGFuZ2UgdGhlIHR5cGUgZm9yIFN0cmluZ09yVUlSIGZy b20gdGhlIHN0cmluZw0KdHlwZSwgaG93ZXZlciBpdCBtaWdodCBiZSB1c2VmdWwgdG8gdXNlIHRo ZSB0ZXh0IHN0cmluZyBhbmQgdGhlIFVSSSB0eXBlDQoodGFnIDMyKSByYXRoZXIgdGhhbiB0aGUg Y29sb24gY2hhcmFjdGVyIHRvIGRpZmZlcmVudGlhdGUgYmV0d2VlbiBzdHJpbmdzDQphbmQgVVJJ cy4NCg0KV2FzIGFjdHVhbGx5IG9uIHRoZSBzYW1lIHRyYWNrIHRoZXJlIGFuZCBldmVuIGFkZGVk IGEgIkZJWE1FOiBVc2UgdGFnIDMyIGZvciBVUklzP+KAnSBpbiB0aGUgbmV3IEFDRSB2ZXJzaW9u LiBJ4oCZbSBzdGlsbCBvbiB0aGUgZmVuY2UgdGhlcmUgYnV0IGxlYW5pbmcgdG93YXJkcyB1c2lu ZyBzdHJpbmcgdG8ga2VlcCBpdCBhcyBvcGFxdWUgYXMgcG9zc2libGUgZm9yIHBhcnNlcnMuDQoN Cg0KMi4gIEkgd291bGQgc3Ryb25nbHkgc3VnZ2VzdCBjb25zaWRlcmF0aW9uIG9mIHRoZSBDQk9S IHR5cGUgb2YgbnVtZXJpYyBkYXRlDQpyYXRoZXIgdGhhbiB0aGUgc3RyaW5nIHZlcnNpb24gKE1h am9yIHR5cGUgNiwgbWlub3IgdHlwZSAxKS4gIFRoaXMgd2lsbCBsZWFkDQp0byBhIG11Y2ggbW9y ZSBjb21wYWN0IGZvcm0gb2YgZGF0ZSBlbmNvZGluZyBpbiBtb3N0IGlmIG5vdCBhbGwgY2FzZXMu DQpBZnRlciByZWFkaW5nIGZhcnRoZXIsIGl0IHdvdWxkIGFwcGVhciB0aGF0IHRoZSB0ZXh0IGlz IGFzc3VtaW5nIGl0IGlzIHVzaW5nDQpudW1lcmljIHZlcnNpb24gc28gdGhlIHRleHQgaXMgd3Jv bmcuDQoNClRleHQgaXMgdXBkYXRlZCBpbiBuZXcgdmVyc2lvbiBhbmQgSSB3aWxsIGFkZCB0aGUg Y2hhbmdlIG9mIHRoZSB0eXBlIHRvIG51bWVyaWMgZGF0ZSB0byBhIGlzc3VlIHRyYWNrZXIuDQoN Cg0KMy4gIElzIHRoZXJlIGEgcmVhc29uIHdoeSB5b3UgYXJlIG5vdCB1c2luZyBpbnRlZ2VycyBm b3IgdGhlIGxhYmVscyBpbiB0aGUNCm1hcCByYXRoZXIgdGhhbiBzdHJpbmdzPw0KDQpOby4gU2Vl IG5ldyB0YWJsZSBpbiBuZXcgYWNlIHZlcnNpb24uDQoNCg0KNC4gIFRoZXJlIGlzIG5vIHJlYXNv biB0byBjb250aW51b3VzbHkgcmVwZWF0IHRoZSBjYXNlLXNlbnNpdGl2ZSBzdHJpbmcsDQp0aGF0 IGlzIGltcGxpZWQgYnkgc2F5aW5nIFN0cmluZ09yVVJJIHZhbHVlLiAgVGh1cyBzL2Nhc2Utc2Vu c2l0aXZlIHN0cmluZw0KY29udGFpbmluZyBhIFN0cmluZ09yVVJJIHZhbHVlL2EgdmFsdWUgb2Yg dHlwZSBTdHJpbmdPclVSSS8NCg0KRml4ZWQgaW4gbmV3IHZlcnNpb24uDQoNCg0KNS4gIFlvdSBz aG91bGQgYmUgY29uc2lzdGVudCBpbiBsYW5ndWFnZS4gIEVpdGhlciB5b3Ugc2hvdWxkIHJlamVj dCB0aGUgQ1dUDQpvciB5b3Ugc2hvdWxkIG5vdCBhY2NlcHQgaXQgZm9yIHByb2Nlc3NpbmcuICBF dmVuIGJldHRlciB3b3VsZCBwcm9iYWJseSBiZQ0KdG8gMSkgc3RhdGUgdGhpbmdzIHBvc2l0aXZl bHkgYW5kIG5vdCBuZWdhdGl2ZWx5ICh0ZXN0aW5nIGNvbXBsaWFuY2UgaXMNCmVhc2llcikgYW5k IDIpICBoYXZlIGEgY2xlYXJlciBzdGF0ZW1lbnQgb24gd2hhdCB0aGUgQ1dUIGlzIGZvci4gIFRo dXMgIlRoZQ0KIm5iZiIgY2xhaW0gaWRlbnRpZmllcyB0aGUgdGltZSB0aGUgQ1dUIGV4cGlyZXMu ICBUaGUgY3VycmVudCB0aW1lIE1VU1QgYmUNCmFmdGVyIG9yIGVxdWFsIHRvIHRoZSAibmJmIiB2 YWx1ZSBmb3IgdGhlIENXVCB0byBiZSB1c2VkIGluIGRlY2lzaW9uDQpwcm9jZXNzaW5nLuKAnQ0K DQoNClRoZSBuZXcgdmVyc2lvbiByZWZlcmVuY2UgdGhlIEpXVCBzcGVjIGluIG11Y2ggbW9yZSBk ZXRhaWwgYmFzZWQgb24gaW5wdXQgZnJvbSBlYXJsaWVyIHJldmlld3MuIEdvb2QgaW5wdXQgb24g Z2VuZXJhbCB0ZXh0IGFib3V0IHByb2Nlc3NpbmcuIE5ldyBzZWN0aW9ucyBuZWVkcyB0byBiZSBh ZGRlZCBvbiBob3cgdG8gdGVzdCBjb21wbGlhbmNlIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9yZmM3NTE5I3NlY3Rpb24tNy4NCg0KNi4gIEl0IHdvdWxkIHNlZW0gdG8gYmUgYmV0dGVyIHRv IG1ha2UgY3RpIGJlIGEgYmluYXJ5IHZhbHVlIGFzIGl0IGlzIGENCmRlbnNlciByYW5nZSBvZiB2 YWx1ZXMgdG8gY2hvb3NlIGZyb20gYW5kIHRodXMgbm90IG5lZWQgYXMgbWFueSBiaXRzIHRvDQpl bnN1cmUgdW5pcXVlbmVzcy4NCg0KR29vZCBwb2ludC4gV2lsbCBhZGQgdGhhdCBhcyBpc3N1ZS4N Cg0KDQo3LiAgV2hhdCBpcyB0aGUgcHVycG9zZSBvZiB0aGUgdmFsdWUgY29sdW1uIGluIGZpZ3Vy ZSAxPw0KDQo4LiAgVGhlIGV4YW1wbGUgaXMgaW5jb3JyZWN0LiAgSXQgc2hvdWxkIGJlDQoNCnsN CiAgICAiaXNzIjogImNvYXA6Ly9hcy5leGFtcGxlLmNvbSIsDQogICAgImF1ZCI6ICJjb2FwOi8v bGlnaHQuZXhhbXBsZS5jb20iLA0KICAgICJleHAiOiAxKDE0NDQwNjQ5NDQpLA0KICAgICJpYXQi OiAxKDE0NDM5NDQ5NDQpDQogIH0NCg0KDQpUaGVyZSBhcmUgbmV3IGFuZCBtdWNoIG1vcmUgZGV0 YWlsZWQgZXhhbXBsZXMgaW4gbmV3IGFjZSB3ZyBkb2MuDQoNCg0KDQoNCg0KDQpOaXRzOg0KU2Vj dGlvbiAxIC0gcy9yZS11c2VkL3VzZWQvDQoNCisxDQoNClRoYW5rcyENCg0KLyBFcmlrDQoNCg== --_000_90977D5E93DE47AFA8B52E4F768225F1nexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgSmltLA0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPlRoYW5rcyBmb3IgeW91IHJldmlldy4gSXTi gJlzIHZlcnkgbXVjaCBhcHByZWNpYXRlZC4gVGhlcmUgd2hlcmUgYSBkZWJhdGUgb24gd2hlcmUg dG8gcG9zdCB0aGUgQ1dUIGRvY3VtZW50IChDT1NFLCBBQ0Ugb3IgT2F1dGgpLiBJdCBhbGwgZW5k ZWQgdXAgaW4gdGhlIEFDRSBXRy4gV2UgcHVibGlzaGVkIGEgcmV2aXNlZCBhbmQgdXBkYXRlZCBD V1QgZG9jdW1lbnQgdG8gQUNFLCB5b3UgY2FuIGZpbmQgaXQgaGVyZTombmJzcDs8YSBocmVmPSJo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtd2FobHN0cm9lbS1hY2UtY2Jvci13ZWIt dG9rZW4tMDAiIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC13YWhs c3Ryb2VtLWFjZS1jYm9yLXdlYi10b2tlbi0wMDwvYT4uJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5TZWUgY29tbWVudHMgYmVs b3cuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9 IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDEyIERlYyAyMDE1LCBhdCAwODoyNiwgSmltIFNjaGFhZCAm bHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iIGNsYXNzPSIiPmlldGZA YXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUt aW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPk5vdCBzdXJlIHdoZXJlIHRoZSBj b3JyZWN0IGNjIG9mIHRoaXMgaXMsIGJ1dCBJIHNlZW0gdG8gcmVtZW1iZXIgaXQgaXMgZ29pbmc8 YnIgY2xhc3M9IiI+DQp0byBBQ0Ugbm90IE9BVVRILjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NCjEuICZuYnNwO1RoaXMgaXMganVzdCBhIHRvIGJlIGNvbnNpZGVyZWQgaXNzdWUsIEkgY2Fu IGVhc2lseSBzZWUgdGhhdCB0aGVyZSBpczxiciBjbGFzcz0iIj4NCnN1ZmZpY2llbnQgYXJndW1l bnQgbm90IHRvIGNoYW5nZSB0aGUgdHlwZSBmb3IgU3RyaW5nT3JVSVIgZnJvbSB0aGUgc3RyaW5n PGJyIGNsYXNzPSIiPg0KdHlwZSwgaG93ZXZlciBpdCBtaWdodCBiZSB1c2VmdWwgdG8gdXNlIHRo ZSB0ZXh0IHN0cmluZyBhbmQgdGhlIFVSSSB0eXBlPGJyIGNsYXNzPSIiPg0KKHRhZyAzMikgcmF0 aGVyIHRoYW4gdGhlIGNvbG9uIGNoYXJhY3RlciB0byBkaWZmZXJlbnRpYXRlIGJldHdlZW4gc3Ry aW5nczxiciBjbGFzcz0iIj4NCmFuZCBVUklzLjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+V2FzIGFjdHVhbGx5IG9u IHRoZSBzYW1lIHRyYWNrIHRoZXJlIGFuZCBldmVuIGFkZGVkIGEgJnF1b3Q7RklYTUU6IFVzZSB0 YWcgMzIgZm9yIFVSSXM/4oCdIGluIHRoZSBuZXcgQUNFIHZlcnNpb24uIEnigJltIHN0aWxsIG9u IHRoZSBmZW5jZSB0aGVyZSBidXQgbGVhbmluZyB0b3dhcmRzIHVzaW5nIHN0cmluZyB0byBrZWVw IGl0IGFzIG9wYXF1ZSBhcyBwb3NzaWJsZSBmb3IgcGFyc2Vycy48L2Rpdj4NCjxiciBjbGFzcz0i Ij4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQoyLiAmbmJzcDtJIHdvdWxkIHN0cm9uZ2x5IHN1Z2dlc3QgY29uc2lkZXJhdGlv biBvZiB0aGUgQ0JPUiB0eXBlIG9mIG51bWVyaWMgZGF0ZTxiciBjbGFzcz0iIj4NCnJhdGhlciB0 aGFuIHRoZSBzdHJpbmcgdmVyc2lvbiAoTWFqb3IgdHlwZSA2LCBtaW5vciB0eXBlIDEpLiAmbmJz cDtUaGlzIHdpbGwgbGVhZDxiciBjbGFzcz0iIj4NCnRvIGEgbXVjaCBtb3JlIGNvbXBhY3QgZm9y bSBvZiBkYXRlIGVuY29kaW5nIGluIG1vc3QgaWYgbm90IGFsbCBjYXNlcy48YnIgY2xhc3M9IiI+ DQpBZnRlciByZWFkaW5nIGZhcnRoZXIsIGl0IHdvdWxkIGFwcGVhciB0aGF0IHRoZSB0ZXh0IGlz IGFzc3VtaW5nIGl0IGlzIHVzaW5nPGJyIGNsYXNzPSIiPg0KbnVtZXJpYyB2ZXJzaW9uIHNvIHRo ZSB0ZXh0IGlzIHdyb25nLjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp dj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+VGV4dCBpcyB1cGRhdGVkIGluIG5ldyB2ZXJz aW9uIGFuZCBJIHdpbGwgYWRkIHRoZSBjaGFuZ2Ugb2YgdGhlIHR5cGUgdG8gbnVtZXJpYyBkYXRl IHRvIGEgaXNzdWUgdHJhY2tlci48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQozLiAmbmJz cDtJcyB0aGVyZSBhIHJlYXNvbiB3aHkgeW91IGFyZSBub3QgdXNpbmcgaW50ZWdlcnMgZm9yIHRo ZSBsYWJlbHMgaW4gdGhlPGJyIGNsYXNzPSIiPg0KbWFwIHJhdGhlciB0aGFuIHN0cmluZ3M/PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdj5Oby4gU2VlIG5ldyB0YWJsZSBpbiBuZXcgYWNlIHZlcnNpb24uPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KNC4gJm5ic3A7VGhlcmUgaXMgbm8gcmVhc29uIHRvIGNvbnRp bnVvdXNseSByZXBlYXQgdGhlIGNhc2Utc2Vuc2l0aXZlIHN0cmluZyw8YnIgY2xhc3M9IiI+DQp0 aGF0IGlzIGltcGxpZWQgYnkgc2F5aW5nIFN0cmluZ09yVVJJIHZhbHVlLiAmbmJzcDtUaHVzIHMv Y2FzZS1zZW5zaXRpdmUgc3RyaW5nPGJyIGNsYXNzPSIiPg0KY29udGFpbmluZyBhIFN0cmluZ09y VVJJIHZhbHVlL2EgdmFsdWUgb2YgdHlwZSBTdHJpbmdPclVSSS88YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkZpeGVk IGluIG5ldyB2ZXJzaW9uLjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0i Y2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjUuICZuYnNwO1lv dSBzaG91bGQgYmUgY29uc2lzdGVudCBpbiBsYW5ndWFnZS4gJm5ic3A7RWl0aGVyIHlvdSBzaG91 bGQgcmVqZWN0IHRoZSBDV1Q8YnIgY2xhc3M9IiI+DQpvciB5b3Ugc2hvdWxkIG5vdCBhY2NlcHQg aXQgZm9yIHByb2Nlc3NpbmcuICZuYnNwO0V2ZW4gYmV0dGVyIHdvdWxkIHByb2JhYmx5IGJlPGJy IGNsYXNzPSIiPg0KdG8gMSkgc3RhdGUgdGhpbmdzIHBvc2l0aXZlbHkgYW5kIG5vdCBuZWdhdGl2 ZWx5ICh0ZXN0aW5nIGNvbXBsaWFuY2UgaXM8YnIgY2xhc3M9IiI+DQplYXNpZXIpIGFuZCAyKSAm bmJzcDtoYXZlIGEgY2xlYXJlciBzdGF0ZW1lbnQgb24gd2hhdCB0aGUgQ1dUIGlzIGZvci4gJm5i c3A7VGh1cyAmcXVvdDtUaGU8YnIgY2xhc3M9IiI+DQomcXVvdDtuYmYmcXVvdDsgY2xhaW0gaWRl bnRpZmllcyB0aGUgdGltZSB0aGUgQ1dUIGV4cGlyZXMuICZuYnNwO1RoZSBjdXJyZW50IHRpbWUg TVVTVCBiZTxiciBjbGFzcz0iIj4NCmFmdGVyIG9yIGVxdWFsIHRvIHRoZSAmcXVvdDtuYmYmcXVv dDsgdmFsdWUgZm9yIHRoZSBDV1QgdG8gYmUgdXNlZCBpbiBkZWNpc2lvbjxiciBjbGFzcz0iIj4N CnByb2Nlc3Npbmcu4oCdPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KVGhlIG5ldyB2ZXJzaW9uIHJl ZmVyZW5jZSB0aGUgSldUIHNwZWMgaW4gbXVjaCBtb3JlIGRldGFpbCBiYXNlZCBvbiBpbnB1dCBm cm9tIGVhcmxpZXIgcmV2aWV3cy4gR29vZCBpbnB1dCBvbiBnZW5lcmFsIHRleHQgYWJvdXQgcHJv Y2Vzc2luZy4gTmV3IHNlY3Rpb25zIG5lZWRzIHRvIGJlIGFkZGVkIG9uIGhvdyB0byB0ZXN0IGNv bXBsaWFuY2UmbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzUx OSNzZWN0aW9uLTciIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3NTE5 I3NlY3Rpb24tNzwvYT4uPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjYuICZuYnNwO0l0IHdvdWxkIHNl ZW0gdG8gYmUgYmV0dGVyIHRvIG1ha2UgY3RpIGJlIGEgYmluYXJ5IHZhbHVlIGFzIGl0IGlzIGE8 YnIgY2xhc3M9IiI+DQpkZW5zZXIgcmFuZ2Ugb2YgdmFsdWVzIHRvIGNob29zZSBmcm9tIGFuZCB0 aHVzIG5vdCBuZWVkIGFzIG1hbnkgYml0cyB0bzxiciBjbGFzcz0iIj4NCmVuc3VyZSB1bmlxdWVu ZXNzLjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXY+R29vZCBwb2ludC4gV2lsbCBhZGQgdGhhdCBhcyBpc3N1ZS48L2Rp dj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo3LiAmbmJzcDtXaGF0IGlzIHRoZSBwdXJwb3NlIG9m IHRoZSB2YWx1ZSBjb2x1bW4gaW4gZmlndXJlIDE/PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KOC4gJm5ic3A7VGhlIGV4YW1wbGUgaXMgaW5jb3JyZWN0LiAmbmJzcDtJdCBzaG91bGQgYmU8 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQp7PGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7JnF1b3Q7aXNzJnF1b3Q7OiAmcXVvdDs8YSBocmVmPSJjb2FwOi8vYXMuZXhh bXBsZS5jb20iIGNsYXNzPSIiPmNvYXA6Ly9hcy5leGFtcGxlLmNvbTwvYT4mcXVvdDssPGJyIGNs YXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7YXVkJnF1b3Q7OiAmcXVvdDs8 YSBocmVmPSJjb2FwOi8vbGlnaHQuZXhhbXBsZS5jb20iIGNsYXNzPSIiPmNvYXA6Ly9saWdodC5l eGFtcGxlLmNvbTwvYT4mcXVvdDssPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7JnF1b3Q7ZXhwJnF1b3Q7OiAxKDE0NDQwNjQ5NDQpLDxiciBjbGFzcz0iIj4NCiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZxdW90O2lhdCZxdW90OzogMSgxNDQzOTQ0OTQ0KTxiciBjbGFzcz0i Ij4NCiZuYnNwOyZuYnNwO308YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRoZXJlIGFyZSBu ZXcgYW5kIG11Y2ggbW9yZSBkZXRhaWxlZCBleGFtcGxlcyBpbiBuZXcgYWNlIHdnIGRvYy48L2Rp dj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCk5p dHM6PGJyIGNsYXNzPSIiPg0KU2VjdGlvbiAxIC0gcy9yZS11c2VkL3VzZWQvPGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp dj4mIzQzOzE8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PlRoYW5rcyE8 L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2Pi8gRXJpazwvZGl2Pg0KPGRp dj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_90977D5E93DE47AFA8B52E4F768225F1nexusgroupcom_-- From nobody Sun Dec 13 09:56:52 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34E001B2ACF for ; Sun, 13 Dec 2015 09:56:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ppWf5X69ypDf for ; Sun, 13 Dec 2015 09:56:49 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 024171B2ACE for ; Sun, 13 Dec 2015 09:56:48 -0800 (PST) Received: from [192.168.10.142] ([80.92.115.186]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0Mb7pT-1ZojG12j6p-00KhnB for ; Sun, 13 Dec 2015 18:56:46 +0100 References: To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Forwarded-Message-Id: Message-ID: <566DB165.7060600@gmx.net> Date: Sun, 13 Dec 2015 18:56:53 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hDJsJF5P7UjqlU836OomQP6FMv58ksosv" X-Provags-ID: V03:K0:esWA1aUnSnnkhy2Vn9vu927jVVzkMS6LbkXdraVvwuy6DlqqsoJ MmQKicD7sPyCQy/lxOOptyCopLJq6Gc68WoBh/C0B7yJA+dPiEk4IZaDp3bW3NwH4+QrWiN SZTaODmEaeF9wixbwvpppqGUPuv/LxuoTg6d97DeXLMfHjPsFcioPgR8G1x8zFYz2Ot2IKs efDKit9N7TDi9Z9AJq4CQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:OMduzlEgctk=:FcR/PxG/ZGjWsz8i62/Fx8 KImrZ3FXBFGXmC1AhyRXWShmgeFIk2fi6g9yYr9rbxBYpvKlPoWwnP5+VqBGSaJifOgw0OFaT vHMrdL22WMNpFptdDIrB9jNqf2J27sUrzhRUQoIDI0MvRcVhaH4/YfaEl+w4cp9PbKlL7ye/y u/7GPlZGdd+0v0QuyBmFlIkyZ/HK7ZAY9Gyhg0adXFqcYkEyqoswOssLJFjoMHZbnpE3X00Wh /rZ937TMYoXxN6HSlSyv8kEIrf9ApvVWD7yjA02e7bReXjlvHaU+7T3Zh87le4dN4OzPjO8be 9b0vCDj3Eir6qsgcBBjdOkFeieMUymMOVjIC7frWYE/Dy9crbaSC1sbRLH/lP3JIN7yPEaOAe bqvpt3wFyDPpcOUjvIengAPZl8XFc+QHiFLiB1v4cOv68ks2kkuotjUqDotjbC43NBDQYBEjq UfTIkIO1qhH5usrj+kFrgn+y3Lqi21N5V6Ux85kr7Q5lrutrpVoeeFfVSJ/5MxHZ0azjExjit 5RfQ3/Luri466RYtQjXgUp/4qvz08fVO3KDBE0Y4awzX/o+tpojcVTlEIr5Vp+V+BHpVodLm7 cN7cZ3vXUn59QifrD61HFNYjEzpd+cFFOsVuEZKtpoz5OfdKNLfIGxWowcx18O8i5Ub1Rrmdl KEJRLX9NR23cRnBur7ghQBApNMX0yPynMWEz0/cKH0S8nmtIUmn2bnrbnS58sLUc2C73LDnBT ai9XZsOjnR/vLa+UzSfWCgkWQR9rc82rs7Ah4IGozXeDFPaKd20XxrgjuKY= Archived-At: Subject: [Ace] Webex Details for LWM2M Tutorial -- Tuesday, 15 December 2015, 6am PST X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Dec 2015 17:56:51 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hDJsJF5P7UjqlU836OomQP6FMv58ksosv Content-Type: multipart/mixed; boundary="------------030504040107060205000309" This is a multi-part message in MIME format. --------------030504040107060205000309 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Here are the Webex conference call details: Join WebEx meeting via this link: https://ietf.webex.com/ietf/j.php?MTID=3Dm7eda37d03aa8ea79ed945a58ea08a9e= a Meeting number: 646 306 492 Meeting password: Hxsm7tHR Join by phone: +1-877-668-4493* Call-in toll free number (US/Canada) +1-650-479-3208* Call-in toll number (US/Canada) Access code: 646 306 492 Toll-free calling restrictions http://www.webex.com/pdf/tollfree_restrictions.pdf Ciao Hannes -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Hannes Tschofeni= g Sent: 24 November 2015 02:15 To: Ace@ietf.org Cc: SLemay@zebra.com Subject: [Ace] LWM2M Tutorial -- Tuesday, 15 December 2015, 6am PST Hi all, the Lightweight Machine-to-Machine (LWM2M) specification developed by the Open Mobile Alliance (OMA) was mentioned several times already and so I thought it would be useful to have a short tutorial session. The LWM2M specification has been around for a little while already and is currently being updated to reflect community feedback and insight gained during the interoperability test events. The presentation will be given by Simon Lemay and myself. In a discussion with Kepeng we decided to pick the Tuesday, 15 December 2015, 6am PST http://www.timeanddate.com/worldclock/meetingdetails.html?year=3D2015&mon= th=3D12&day=3D15&hour=3D14&min=3D0&sec=3D0&p1=3D1889&p2=3D33&p3=3D137 In case you are unable to attend, we will enable recording so that you can watch the talk later. The length of the tutorial (+discussion) will be around 1 hour. Ciao Hannes & Kepeng --------------030504040107060205000309 Content-Type: text/calendar; name="WebEx_Meeting.ics" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="WebEx_Meeting.ics" BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 10.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VTIMEZONE TZID:Pacific Time BEGIN:STANDARD DTSTART:20131101T020000 RRULE:FREQ=3DYEARLY;INTERVAL=3D1;BYDAY=3D1SU;BYMONTH=3D11 TZOFFSETFROM:-0700 TZOFFSETTO:-0800 TZNAME:Standard Time END:STANDARD BEGIN:DAYLIGHT DTSTART:20130301T020000 RRULE:FREQ=3DYEARLY;INTERVAL=3D1;BYDAY=3D2SU;BYMONTH=3D3 TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:Daylight Savings Time END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT ATTENDEE;CN=3D"";ROLE=3DREQ-PARTICIPANT;RSVP=3DTRUE:MAILTO:hannes.tschofe= nig@arm.com ORGANIZER;CN=3D"ACE Working Group":MAILTO:ace-chairs@tools.ietf.org DTSTART;TZID=3D"Pacific Time":20151215T060000 DTEND;TZID=3D"Pacific Time":20151215T073000 LOCATION:https://ietf.webex.com/ietf TRANSP:OPAQUE SEQUENCE:1450028929 UID:0584cc92-eeb0-46c7-9b77-fa2c2a0c9a38 DTSTAMP:20151215T140000Z DESCRIPTION:\n\n\nJOIN WEBEX MEETING\nhttps://ietf.webex.com/ietf/j.php?M= TID=3Dm71d2fe6b780aeb9ff14cacbe69e86c44\nMeeting number: 646 306 492\nMee= ting password: Hxsm7tHR\n\n\nJOIN BY PHONE\n1-877-668-4493 Call-in toll f= ree number (US/Canada) \n1-650-479-3208 Call-in toll number (US/Canada)\n= Access code: 646 306 492\n\nToll-free dialing restrictions: \nhttp://www.= webex.com/pdf/tollfree_restrictions.pdf\n\n\n\nCan't join the meeting? Co= ntact support here:\nhttps://ietf.webex.com/ietf/mc\n\n\nIMPORTANT NOTICE= : Please note that this WebEx service allows audio and other information = sent during the session to be recorded, which may be discoverable in a le= gal matter. By joining this session, you automatically consent to such re= cordings. If you do not consent to being recorded, discuss your concerns = with the host or do not join the session.\n X-ALT-DESC;FMTTYPE=3Dtext/html:   Join WebEx meeting =
Mee= ting number: 646 306 492
<= table>Meeting p= assword:Hxsm7tHR  
 
Join by phone 
1-877-668-4493 Call-in toll free number (US/Canada) 
1-650-479-3208&n= bsp;Call-in toll number (US/Canada) 
Access code: 646 306 492 
<= a href=3D"http://www.webex.com/pdf/tollfree_restrictions.pdf">Toll-free calling restrictions  


 
Can't join the meeting? Contact support.  
 
IMPORTANT NOTICE: Please note that this WebE= x service allows audio and other information sent during the session to b= e recorded, which may be discoverable in a legal matter. By joining this = session, you automatically consent to such recordings. If you do not cons= ent to being recorded, discuss your concerns with the host or do not join= the session. SUMMARY:OMA LWM2M Tutorial PRIORITY:5 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT5M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR --------------030504040107060205000309-- --hDJsJF5P7UjqlU836OomQP6FMv58ksosv Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJWbbFmAAoJEGhJURNOOiAtyEYH/ijJ+2J+2Y7y+av1Hrr3RuId PJhlLob2mLdqsHWPm11m4Vrq7MLm5j4upLLdmuirt5aEmMRS0Bo8+IqfBmqpfERM xGyE9ubxQghumDgEjW6Al0GqcBUcbyQlKEzRnOxD0vvd81uY8AJMs04YUU3bB+r7 THN8WNsPaD9jberzaTlSVQmTFoZSY2XAjYXElEt78oevkeyKxG6iCs26L1SQcMHv CpMRNjycRoeJ0Gg61/1SJn9TUadyxA0DvRdfZR/jHXoJH7gMOW9XKsZVe14Jhfib 7g74FOn57anhgiIDwqFsBAp3dEncY/m1lj2TwHWx0ogg9nzn5JUCsrIF7jNjns4= =a9bs -----END PGP SIGNATURE----- --hDJsJF5P7UjqlU836OomQP6FMv58ksosv-- From malisa.vucinic@cs.kuleuven.be Mon Dec 14 10:31:30 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B98E1B2D32 for ; Mon, 14 Dec 2015 10:31:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.543 X-Spam-Level: * X-Spam-Status: No, score=1.543 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FRT_BELOW2=2.154, J_CHICKENPOX_45=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vFTNRcZJcP8k for ; Mon, 14 Dec 2015 10:31:28 -0800 (PST) Received: from hermes4.cs.kuleuven.be (hermes4.cs.kuleuven.be [134.58.40.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E302A1B2CAF for ; Mon, 14 Dec 2015 10:31:26 -0800 (PST) Received: from dr-zook.cs.kuleuven.be. (vdr-zook1.cs.kuleuven.be [IPv6:2a02:2c40:0:a005::12c]) by hermes4.cs.kuleuven.be. with ESMTP id tBEIVO08018910 for ; Mon, 14 Dec 2015 19:31:24 +0100 Received: from localhost (localhost [127.0.0.1]) by dr-zook.cs.kuleuven.be. (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id tBEIVOSi004621 for ; Mon, 14 Dec 2015 19:31:24 +0100 X-Virus-Scanned: Debian amavisd-new at dr-zook.cs.kuleuven.be Received: from dr-zook.cs.kuleuven.be. ([127.0.0.1]) by localhost (dr-zook.cs.kuleuven.be [127.0.0.1]) (amavisd-new, port 10023) with LMTP id 6lAVzvE6PHss for ; Mon, 14 Dec 2015 19:31:17 +0100 (CET) Received: from oryx.cs.kuleuven.be. (oryx.cs.kuleuven.be [IPv6:2a02:2c40:0:a000::122]) by dr-zook.cs.kuleuven.be. (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id tBEIVCBK004319 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 14 Dec 2015 19:31:12 +0100 Received: from dhcp-10-33-230-41.icts.kuleuven.be ([10.33.230.41]) (authenticated bits=0) by oryx.cs.kuleuven.be. (A_Good_MTA/8.14.4/Debian-4.1ubuntu1) with ESMTP id tBEIVBnh013505 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 14 Dec 2015 19:31:12 +0100 From: =?utf-8?Q?Mali=C5=A1a_Vu=C4=8Dini=C4=87?= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: Date: Mon, 14 Dec 2015 19:31:11 +0100 To: ace@ietf.org Mime-Version: 1.0 X-Mailer: Apple Mail (2.2104) X-Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm X-Scanned-By: MIMEDefang 2.73 Archived-At: Subject: [Ace] Energy-efficient review of draft-seitz-ace-authz.txt :) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2015 18:44:26 -0000 Dear authors, ACE list,=20 Here are some comments on the latest version of draft-seitz-ace-authz.txt. = My domain expertise is in what the draft calls =E2=80=98severely energy-con= strained scenario=E2=80=99 and I have worked with Wireless Sensor and Actua= tor Networks with solar-powered 6lowpan devices that are autonomous on <150= lux (illuminance typically found under an office desk). In that context, I= implemented over CoAP a variant of the token-less authorization scheme des= cribed in Section 6.5 of the draft and worked on security (bootstrapping, h= ardware-accelerated crypto, link layer, end-to-end) and network-wise energy= efficiency. My definition of an IoT device is a duty cycled Class 1 or Cla= ss 2 sensor or actuator with average current consumption well bellow 100 mi= croamps, and so with lifetime comparable to the battery life (5-10 years). On the presentation side, I think that the draft does a good job of introdu= cing OAuth 2.0 and PoP tokens to non experts and gives interesting examples= how it can be incorporated with the deployment scenarios. I also like that= object security is considered a foundational building block, for both comm= unication and data+token security. Still, there seem to be many variables o= n the table (CoAP/HTTP, DTLS/TLS/OSCOAP/OSCON, JSON/CBOR) so I suppose that= more specific profiles with normative language and clear guidance for the = implementers will be defined down the road.=20 My main remark relates to the implicit assumption of bidirectional communic= ation with the constrained RS (While =E2=80=98offline=E2=80=99 scenarios ar= e clearly distinguished in the draft, this relates to the reachability of A= S.) Because sensors sleep most of the time to preserve energy, they can oft= en be reachable for traditional requests only at specific instants, for exa= mple once they have woken up and self-initiated an exchange (polling for da= ta after a several-minute-sleep in beacon-enabled 802.15.4, receive window = following uplink transmission with LoRa or any always-on router, 802.15.4E = TSCH or wHart schedule optimized for upwards communication). In practice, t= his means that the communication directed downwards to the RS can be quite = unreliable, prone to high latencies and energy-wise expensive for the RS an= d the rest of the multihop network due to the need to 1) listen on the idle= radio channel to guarantee downwards reachability, even in the absence of = traffic; 2) forward additional traffic. I think it would be important to ma= ke this clear in the draft and stress that although bidirectional communica= tion is indeed feasible, there are often system-wide consequences on energy= consumption and network performance such that application developers shoul= d rely on it only for the necessary application scenarios (e.g. actuation). Another remark relates to the transmission of certificates and raw public k= eys in the constrained part. With limited bandwidth and multihop networks, = this opens up DoS concerns because routers can also be energy-constrained. = I would find useful if the document gave some recommendations on the usage = of fingerprints as discussed in Section 5.1 and on how they can be used wit= h OSCOAP or DTLS to optimize the exchanges and so lower the transmission bu= rden on the network.=20 It is very useful for energy-constrained RS that the AS can take over the c= ipher negotiation task with the different clients. I think this deserves a = bit more discussion in the text because it adds implementation complexity (= where it should be) at AS, while removing the need of RS to do additional e= xchanges in case OSCOAP/OSCON are used. This particularly makes sense becau= se RS will in many cases be flashed with a firmware image containing a sing= le cipher, due to the memory constraints. It could be interesting to extend Appendix A to stress that the energy for = symmetric encryption of one byte of data is typically orders of magnitude l= ower than for transmitting one byte over a low-power radio. Hardware accele= ration is widely available in which case execution times of symmetric-key p= rimitives are literally negligible (microseconds) and the *dominant* latenc= y component comes from the radio communications. Public-key crypto is very = feasible with commercial IoT hardware (milliseconds to seconds) and particu= larly when it is done at the application layer using object security, many = optimizations are possible so we should not scare the developers away from = using it :-). Regards, Mali=C5=A1a Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm From nobody Wed Dec 16 01:03:08 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E33481ACC85 for ; Wed, 16 Dec 2015 01:03:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id shomfPUAMs1p for ; Wed, 16 Dec 2015 01:03:04 -0800 (PST) Received: from mail-lf0-x22d.google.com (mail-lf0-x22d.google.com [IPv6:2a00:1450:4010:c07::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CABFB1ACAD5 for ; Wed, 16 Dec 2015 01:03:03 -0800 (PST) Received: by mail-lf0-x22d.google.com with SMTP id p203so24791153lfa.0 for ; Wed, 16 Dec 2015 01:03:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=PEFWIS7DT+ewqBm/gL8GSxusnYgU0EfGa8oabwSTZUE=; b=lGlEpgHiiQWUII1yP09331C0u1KBClT3p/ThPGNfEZji0g4nd0aoPNk+aTrkmOwSkQ Tn+bIZMLhTlNK2j4g2olpfkqP5FXT2MLDR+l7DDRyGpC8I8K5wmCNXJuAPnrtL2sKFXx OHacWQ1P/YTQ8LO+V7Z/pBnWkWzwbPAxxzRxUtDpOtRFsTg4JCKet0Eb4MqC75BuDyIN x3Hs0cl8hD7H0Q03y5t+AN6HRli5rHuLMx7SxuL3PTsC9QOf04yoIxrsdOxDC0UQ3Cqv joubs7ToL7rMHh3nFZkehN8toV84IrKrfaO3v7p8IgM3+tGSphN/25AgUptjIrtjC5tR EtPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=PEFWIS7DT+ewqBm/gL8GSxusnYgU0EfGa8oabwSTZUE=; b=OW94RjqZEZLIXxMsBWOjiXSZVHWfEDH5GnexpOY9iJC072znCOuh2ftme05F8ZcoaM Chvdm8SbDwR9sUoH6PzhyK29ZXldGoOEwjM4cn5XAxP/khFT/eo/McvrXBUTbiK+cF13 iScwaqry9kBjNPu64bIDsy6n90rR1NBirQJE5MltouSWdkMVS/WpuKvfP/5FabqwQcC3 N/SnqemOPOfr3s74GhZunzVlS3XajwBbYCAGZU/ysAbNR/QK8TzogK248vddS1OwKtzT uowRbXThsddmRK3vL0xM5WwDKvouUrwXYbrZTRQFq0zGOBRINeneZSaO9JSItci9qZEo JGeg== X-Gm-Message-State: ALoCoQkzsQBemrLvdlW4Lldx1oOrWdqnKbdOUswsu4Jb0b1Zeec1dTnfQTnHyHKdEtJZJzCB77aTLZcrCrlYN1mXniUAPTJQJQ== X-Received: by 10.25.37.14 with SMTP id l14mr12332258lfl.19.1450256581993; Wed, 16 Dec 2015 01:03:01 -0800 (PST) Received: from [192.168.0.253] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id d75sm816266lfb.1.2015.12.16.01.03.00 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 16 Dec 2015 01:03:00 -0800 (PST) To: ace@ietf.org, malisa.vucinic@cs.kuleuven.be References: From: Ludwig Seitz Message-ID: <567128C3.9020909@sics.se> Date: Wed, 16 Dec 2015 10:02:59 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms080802020803000505040900" Archived-At: Subject: Re: [Ace] Energy-efficient review of draft-seitz-ace-authz.txt :) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2015 09:03:07 -0000 This is a cryptographically signed message in MIME format. --------------ms080802020803000505040900 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-12-14 19:31, Mali=C5=A1a Vu=C4=8Dini=C4=87 wrote: > Dear authors, ACE list, > > Here are some comments on the latest version of > draft-seitz-ace-authz.txt. ~snip~ > Still, there seem to be many variables on the table > (CoAP/HTTP, DTLS/TLS/OSCOAP/OSCON, JSON/CBOR) so I suppose that more > specific profiles with normative language and clear guidance for the > implementers will be defined down the road. > That was our plan indeed. > My main remark relates to the implicit assumption of bidirectional > communication with the constrained RS (While =E2=80=98offline=E2=80=99 = scenarios are > clearly distinguished in the draft, this relates to the reachability > of AS.) Because sensors sleep most of the time to preserve energy, > they can often be reachable for traditional requests only at specific > instants, for example once they have woken up and self-initiated an > exchange (polling for data after a several-minute-sleep in > beacon-enabled 802.15.4, receive window following uplink transmission > with LoRa or any always-on router, 802.15.4E TSCH or wHart schedule > optimized for upwards communication). In practice, this means that > the communication directed downwards to the RS can be quite > unreliable, prone to high latencies and energy-wise expensive for the > RS and the rest of the multihop network due to the need to 1) listen > on the idle radio channel to guarantee downwards reachability, even > in the absence of traffic; 2) forward additional traffic. I think it > would be important to make this clear in the draft and stress that > although bidirectional communication is indeed feasible, there are > often system-wide consequences on energy consumption and network > performance such that application developers should rely on it only > for the necessary application scenarios (e.g. actuation). > This is a very interesting remark, and I would like to ask for more=20 details here to guide our work. Since in the setup you describe it is desirable that the RS initiates=20 the exchange, I assume this would be implemented as a sort of=20 publish-subscribe solutions or as something similar to CoAP observe. I think our proposal in section 6.5 covers the publish-subscribe case=20 (which is not surprising since it is based on your work). For the observe case, how would the initial observe typically reach the=20 RS? Would the client just have to try until it succeeds or are there any = possibilities to look up the sleep schedule of the RS in some external=20 resource (like an RD for example)? > Another remark relates to the transmission of certificates and raw > public keys in the constrained part. With limited bandwidth and > multihop networks, this opens up DoS concerns because routers can > also be energy-constrained. I would find useful if the document gave > some recommendations on the usage of fingerprints as discussed in > Section 5.1 and on how they can be used with OSCOAP or DTLS to > optimize the exchanges and so lower the transmission burden on the > network. We are planning to specify these parts in more details and will keep=20 this comment in mind. > > It is very useful for energy-constrained RS that the AS can take over > the cipher negotiation task with the different clients. I think this > deserves a bit more discussion in the text because it adds > implementation complexity (where it should be) at AS, while removing > the need of RS to do additional exchanges in case OSCOAP/OSCON are > used. This particularly makes sense because RS will in many cases be > flashed with a firmware image containing a single cipher, due to the > memory constraints. > I think a discussion of the design decisions could fit well in Appendix=20 A. We also plan to provide more specific normative text on how to=20 perform this negotiation in future versions of the draft. > It could be interesting to extend Appendix A to stress that the > energy for symmetric encryption of one byte of data is typically > orders of magnitude lower than for transmitting one byte over a > low-power radio. I think it would be helpful to add your remarks to Appendix A, do you=20 happen to have some paper or technical report we could reference as an=20 example? > Hardware acceleration is widely available in which > case execution times of symmetric-key primitives are literally > negligible (microseconds) and the *dominant* latency component comes > from the radio communications. Public-key crypto is very feasible > with commercial IoT hardware (milliseconds to seconds) and > particularly when it is done at the application layer using object > security, many optimizations are possible so we should not scare the > developers away from using it :-). > We are certainly not trying to scare away people form public-key crypto, = where it is feasible and the draft should absolutely specify this=20 option. However I think it is important that the draft should also=20 provide a symmetric key only option, in case some use case requires this = (e.g. due to lack of hardware accelerators in the specific hardware). Regards, Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=C3=A4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms080802020803000505040900 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTIxNjA5MDI1OVowLwYJKoZI hvcNAQkEMSIEIFgO1tMGY3cmP8SOuDqxG7Ak1QsJKzuuHUZ5n0ssh+r/MGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQAapuB/u93sAIoIoFQx2btUWhmWwy/YqDLAGl110stf 1mWUQ2Rw1zlyFAmntV5GfsAWnTUHp4eE8R4hZhI/Gpbg/396usRTLgXo+ZU0NF3KeO2xYCgC k47kWlfeV0YKmpQJaC8Db/CEWdYthlbzqUu8U9MZ2ZFHjUjCnHldiWeFfzJvYSWaiXBCW3tZ 1gxG4UTvTVQk6vmVy77WVYun+A5MaSdt9XOdczgtJ377a9IQbvTtlhiHB6T+0hXjwZYZHfJS R8unid3n0yFO44zxUugEHJHrjCikUDT1+1DLdDLhDYzxslCWjhSLmJ4YLZ9Twzr5xSSkWhbk bjrwqyFNosqmAAAAAAAA --------------ms080802020803000505040900-- From nobody Thu Dec 17 15:18:08 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF1BB1A9041 for ; Thu, 17 Dec 2015 15:18:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.03 X-Spam-Level: X-Spam-Status: No, score=-1.03 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZsnqdqYIpboW for ; Thu, 17 Dec 2015 15:18:05 -0800 (PST) Received: from hermes4.cs.kuleuven.be (hermes4.cs.kuleuven.be [134.58.40.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E56871A01EC for ; Thu, 17 Dec 2015 15:18:03 -0800 (PST) Received: from hermes4.cs.kuleuven.be. (localhost [127.0.0.1]) by hermes4.cs.kuleuven.be. with ESMTP id tBHNI1c0027604 for ; Fri, 18 Dec 2015 00:18:01 +0100 Received: (from defang@localhost) by hermes4.cs.kuleuven.be. (8.14.4/8.14.4/Submit) id tBHNFphW026987 for ; Fri, 18 Dec 2015 00:15:51 +0100 X-Authentication-Warning: hermes4.cs.kuleuven.be.: defang set sender to using -f Received: from dr-zook.cs.kuleuven.be. (vdr-zook1.cs.kuleuven.be [2a02:2c40:0:a005::12c]) by vmailrelay1.cs.kuleuven.be (envelope-sender ) (MIMEDefang) with ESMTP id tBHNFpg3026981; Fri, 18 Dec 2015 00:15:51 +0100 Received: from localhost (localhost [127.0.0.1]) by dr-zook.cs.kuleuven.be. (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id tBHNCGJQ008799; Fri, 18 Dec 2015 00:15:51 +0100 X-Virus-Scanned: Debian amavisd-new at dr-zook.cs.kuleuven.be Received: from dr-zook.cs.kuleuven.be. ([127.0.0.1]) by localhost (dr-zook.cs.kuleuven.be [127.0.0.1]) (amavisd-new, port 10023) with LMTP id DmMVqYIV2buS; Fri, 18 Dec 2015 00:15:44 +0100 (CET) Received: from oryx.cs.kuleuven.be. (oryx.cs.kuleuven.be [IPv6:2a02:2c40:0:a000::122]) by dr-zook.cs.kuleuven.be. (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id tBHNFfXf008919 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 18 Dec 2015 00:15:41 +0100 Received: from [IPv6:2a02:1811:c0c:a900:89f6:c922:1cdd:de78] ([IPv6:2a02:1811:c0c:a900:89f6:c922:1cdd:de78]) (authenticated bits=0) by oryx.cs.kuleuven.be. (A_Good_MTA/8.14.4/Debian-4.1ubuntu1) with ESMTP id tBHNFe0B038809 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 18 Dec 2015 00:15:40 +0100 Content-Type: multipart/alternative; boundary="Apple-Mail=_572AEF10-986E-448D-B185-E2FDDE272F5C" Mime-Version: 1.0 From: =?utf-8?Q?Mali=C5=A1a_Vu=C4=8Dini=C4=87?= In-Reply-To: <567128C3.9020909@sics.se> Date: Fri, 18 Dec 2015 00:15:39 +0100 Message-Id: References: <567128C3.9020909@sics.se> To: Ludwig Seitz X-Mailer: Apple Mail (2.2104) X-Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm X-Scanned-By: MIMEDefang 2.73 on 127.0.1.1 Archived-At: Cc: ace@ietf.org Subject: Re: [Ace] Energy-efficient review of draft-seitz-ace-authz.txt :) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Dec 2015 23:18:07 -0000 --Apple-Mail=_572AEF10-986E-448D-B185-E2FDDE272F5C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On 16 Dec 2015, at 10:02, Ludwig Seitz wrote: >=20 > For the observe case, how would the initial observe typically reach the R= S? > Would the client just have to try until it succeeds or are there any poss= ibilities to look up the sleep schedule of the RS in some external resource= (like an RD for example)? RS=E2=80=99 level of duty cycling can be dynamic, it depends on local const= raints or simply the deployment phase (registration/reporting). Obviously, = that will affect how reachable to requests RS is at a given moment. I am no= t aware of sleep schedule sort of discovery with RD, did you have some spec= ific scheme in mind? > I think it would be helpful to add your remarks to Appendix A, do you hap= pen to have some paper or technical report we could reference as an example? Here is a recent example with boards that are commercially available since = 2012: http://www.simonduquennoy.net/papers/shafagh15talos.pdf . Relevant are Figures 7 and 8a= (byte-time metric), Tables 5 and 6, taking into account that a transmissio= n of 127 bytes burns ~205uJ with that board. Mali=C5=A1a Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm --Apple-Mail=_572AEF10-986E-448D-B185-E2FDDE272F5C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On 16 Dec= 2015, at 10:02, Ludwig Seitz <ludwig@sics.se> wrote:

For= the observe case, how would the initial observe typically reach the RS?
Would = the client just have to try until it succeeds or are there any possibilitie= s to look up the sleep schedule of the RS in some external resource (like a= n RD for example)?

RS=E2=80=99 = level of duty cycling can be dynamic, it depends on local constraints or si= mply the deployment phase (registration/reporting). Obviously, that will af= fect how reachable to requests RS is at a given moment. I am not aware of s= leep schedule sort of discovery with RD, did you have some specific scheme = in mind?

= I think it would be helpful to add your remarks to Appendix A, do you happe= n to have some paper or technical report we could reference as an example?<= br class=3D"">

Here is a recent examp= le with boards that are commercially available since 2012: http://= www.simonduquennoy.net/papers/shafagh15talos.pdf. Relevant are Figures = 7 and 8a (byte-time metric), Tables 5 and 6, taking into account that a tra= nsmission of 127 bytes burns ~205uJ with that board.

Mali=C5=A1a


Disclaimer: http://www.kuleuven.be/cwis/email_discl= aimer.htm for more information.
= --Apple-Mail=_572AEF10-986E-448D-B185-E2FDDE272F5C-- From nobody Fri Dec 18 04:32:28 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56E621B2BB0 for ; Fri, 18 Dec 2015 04:32:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id byIPN1-7KYNy for ; Fri, 18 Dec 2015 04:32:25 -0800 (PST) Received: from mail-lb0-x232.google.com (mail-lb0-x232.google.com [IPv6:2a00:1450:4010:c04::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A30101B2B8A for ; Fri, 18 Dec 2015 04:32:24 -0800 (PST) Received: by mail-lb0-x232.google.com with SMTP id yq9so43336508lbb.3 for ; Fri, 18 Dec 2015 04:32:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=ADkfMl0ML4OkM2UjxuNoZvjip/7dsOUtZP215sonUAY=; b=FzOHqy/S34ZsT01cmhegkm9E+67W7grAXZ1yIDkFYOjheHfBUnB9BRkdEBfijhtcnN oO0/eVb+W7CHAw56dwRISyizA+5mFuAkcOwEGcNnSDhqiKPBXNQ5bMghAAFwEvUuD8pg wEhJ7eNsVND+RaeDD2p+XKHp5MWpnS6WRqjsV5NToFQRI2qceUbFdYP/YfgyskWFMMXN jmH2Vbrm1zU6Cq5n3fBStNYQnh0J4ofR6nLX22jL07zPv4veM8PqSlat2MACYjTwl35P iyd8AR07xVFsY9YbmzTGmk9j3zfuOvcllcVjUs0qZShC0pMtisE4Da+Xoe9tdZ3cs+6C WCcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=ADkfMl0ML4OkM2UjxuNoZvjip/7dsOUtZP215sonUAY=; b=E3t2g9hDhG4sitQluRQ5TjXyb6EKlUtiyx2TBY36KlLT54y4okCSsXPWdHCTlMGs6C DMXDFRHBb4bFAxraYAlL1vaOgIf4U8gk39/iPU2d6xbRi27+/KahlERaMFaA1d3gcHs5 UNvcCjcGTLEi3fgeBt9H1gd3QehHKBXBre6vB79hdVfvSySEsdka1Igoq8YseUdv5fxh oeRbMT8q5NCwjjHOgdtZOopKcyiy4t36jA5fAlWsN1apq//VYIAqfytA0RvbRb/osDnx SRLYhEU6Z/vW51yA5ZiUX6+HE5UzZUEZ5Q4dj0yuUVaeUTiN1Wthh7NyIB0ZGq9grHTB 02Lg== X-Gm-Message-State: ALoCoQlSTFZxlJ4ybdXwInT7peZ1vSk+bjtGybYzapDgI/miXig/MooEiLUhSjt+7MwPHAO7gMIeomJb8/mQWHZp8nNYLijKSg== X-Received: by 10.112.143.129 with SMTP id se1mr1314943lbb.55.1450441942839; Fri, 18 Dec 2015 04:32:22 -0800 (PST) Received: from linux-5uwl.suse ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id g6sm1557474lfe.23.2015.12.18.04.32.21 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 18 Dec 2015 04:32:21 -0800 (PST) To: ace@ietf.org, hannes.tschofenig@gmx.net References: <56537AAF.3010008@gmx.net> From: Ludwig Seitz Message-ID: <5673FCD5.3020706@sics.se> Date: Fri, 18 Dec 2015 13:32:21 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <56537AAF.3010008@gmx.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms020005090003070507080604" Archived-At: Subject: Re: [Ace] LWM2M Tutorial -- Tuesday, 15 December 2015, 6am PST X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Dec 2015 12:32:27 -0000 This is a cryptographically signed message in MIME format. --------------ms020005090003070507080604 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 11/23/15 21:44, Hannes Tschofenig wrote: > Hi all, > =2E.. > In case you are unable to attend, we will enable recording so that you > can watch the talk later. > Hannes could you post a link to the recoding? /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70 349 9251 http://www.sics.se --------------ms020005090003070507080604 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTIxODEyMzIyMVowLwYJKoZI hvcNAQkEMSIEIJwvrEc3LmZCP6ohkOiVV967oYRyt/Qchdad0ob2Q3+ZMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQCcMg8FpQrcReX3XAPtEi4t5TxDz0kAN05cgsJHOqjQ a0DLz1GRR9K4Ff5StaJ07t72c4kJAzR1Sx6R0IQIZOrQDio205TTgPIcKPUxNYItMMt2bhnh iYMd7si6kPTLkn82BDMhggXF8/d4zswy1a5jCkNXw6Ry1BxKVwEb05lkO5vGge4VwY1nDlEk LUF6icjtL848fOo39vDLRH03jalQ2RLI94ieLWro5VfcLcxh9/fXUjxrhFG+qCtFDuJVtmyQ Q5g3NmL5gnhwt+/wCEmvqmq+i5fBEpGlXn7PbwTFeTmNRpBP8GWbzNpc1LAe4w98hWtucxrz O5I+t0hJL5xOAAAAAAAA --------------ms020005090003070507080604-- From nobody Mon Dec 21 10:34:29 2015 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F17271AC39A; Mon, 21 Dec 2015 10:34:26 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151221183426.14428.78357.idtracker@ietfa.amsl.com> Date: Mon, 21 Dec 2015 10:34:26 -0800 Archived-At: Cc: ace@ietf.org Subject: [Ace] I-D Action: draft-ietf-ace-oauth-authz-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Dec 2015 18:34:27 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments Working Group of the IETF. Title : Authorization for the Internet of Things using OAuth 2.0 Authors : Ludwig Seitz Goeran Selander Erik Wahlstroem Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-oauth-authz-00.txt Pages : 43 Date : 2015-12-21 Abstract: This memo defines how to use OAuth 2.0 as an authorization framework with Internet of Things (IoT) deployments, thus bringing a well-known and widely used security solution to IoT devices. Where possible vanilla OAuth 2.0 is used, but where the limitations of IoT devices require it, profiles and extensions are provided. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Dec 22 01:06:38 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD3371A87C8 for ; Tue, 22 Dec 2015 01:06:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lgiNeLXQjqcy for ; Tue, 22 Dec 2015 01:06:34 -0800 (PST) Received: from mail-lf0-x235.google.com (mail-lf0-x235.google.com [IPv6:2a00:1450:4010:c07::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 490A71A87C6 for ; Tue, 22 Dec 2015 01:06:34 -0800 (PST) Received: by mail-lf0-x235.google.com with SMTP id y184so125166448lfc.1 for ; Tue, 22 Dec 2015 01:06:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=8ZAZKJqnqEHTMnVSbZKCF05hsZ+DOfnc+h8zIwkomq0=; b=CddPY74RtQew3zeK8szJVcFbZ3rNpcW/WPAW1hiU2tfnihbjTs5pB9MASKApKcS12p j9SUvqhmaqZFt752l8V8SRIxTLUqehs0oT40w8Vjm0I/ud2OATYzOm5f5RBjonWRWJsY 6IGXJKTDhghUpgrQ95TRv762LI5vvQG7Pimd7MPMZZfIszDkc4QkSGn65IRaleGRsW4e QZeBULfv4eR89F554KiLijYljgs3dpZSOoO+eSf8134Co5AHyJvxrntBHvcuXjxHTt2e o4YLNslOA3OJPqUZp/KqZbI3BGP5mXlB6iq5CpSqePJlAjnxaqg2BEN3W2/3TrVLJyoI 0wZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=8ZAZKJqnqEHTMnVSbZKCF05hsZ+DOfnc+h8zIwkomq0=; b=Ir0QYOVkaqG5Y3yJbQGg9ywYr1O8x5d+n6hz52EaEiSBru/H2p2jufq2vjhxzJDz4X wp/nF7nZW96K+KiiRW2HV4iZnzreI2mwODjtTSl5wsqLZrHZ+vANoAfu2zlffvK6T2T7 5sgpo7e2VNDhADuqbMCffq4XalirUC3E9U6z4NQYlZhgoSFh+I8f7r/jKlMJpr29LZpd 9bxkWGLjkzJbGbtsUDG8TbUgpECJvJ9YgTm9xF67zrgsFD8WDEQUTQYmeDcIsFrChqb5 gFW7AlaZxXsl9iFHcRZxZx67QWO0X9z1kq7ZnMgbzY+S+QSCFVIszgn2/he0OO2J3hSC EUkQ== X-Gm-Message-State: ALoCoQkOM6j094gbhZD/3KukTOrw66DjNCSLauJ+fr95c8TMex4yxu+ZUB20GMoFzC4y3ImalY/AQLCMrgja7ollLXXnALSwTw== X-Received: by 10.25.169.15 with SMTP id s15mr8388105lfe.20.1450775192310; Tue, 22 Dec 2015 01:06:32 -0800 (PST) Received: from Hyperion.suse ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id d75sm5644051lfb.1.2015.12.22.01.06.31 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 22 Dec 2015 01:06:31 -0800 (PST) References: <20151221183427.14428.58481.idtracker@ietfa.amsl.com> To: ace@ietf.org From: Ludwig Seitz X-Forwarded-Message-Id: <20151221183427.14428.58481.idtracker@ietfa.amsl.com> Message-ID: <56791296.4020106@sics.se> Date: Tue, 22 Dec 2015 10:06:30 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <20151221183427.14428.58481.idtracker@ietfa.amsl.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040709030604020402070302" Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-ietf-ace-oauth-authz-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Dec 2015 09:06:37 -0000 This is a cryptographically signed message in MIME format. --------------ms040709030604020402070302 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hello ACE, this is the WG draft based on draft-seitz-ace-oauth-authz presented in=20 Yokohama. The changes at the moment are editorial according to the=20 reviews we received (thank you reviewers!). Based on the reviews and on our discussions during and after Yokohama,=20 we have also compiled a tentative issue list, which is available with=20 the current source of the draft at: https://github.com/LudwigSeitz/ace-oauth Please feel free to comment on the existing issues or to propose new ones= =2E Regards, Ludwig -------- Forwarded Message -------- Subject: New Version Notification for draft-ietf-ace-oauth-authz-00.txt Date: Mon, 21 Dec 2015 10:34:27 -0800 From: internet-drafts@ietf.org To: Goeran Selander , Erik Wahlstroem=20 , Ludwig Seitz , Goran=20 Selander , Hannes Tschofenig=20 , Samuel Erdtman A new version of I-D, draft-ietf-ace-oauth-authz-00.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-ietf-ace-oauth-authz Revision: 00 Title: Authorization for the Internet of Things using OAuth 2.0 Document date: 2015-12-21 Group: ace Pages: 43 URL:=20 https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-authz-00.txt Status: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-aut= hz/ Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-00= Abstract: This memo defines how to use OAuth 2.0 as an authorization framework with Internet of Things (IoT) deployments, thus bringing a well-known= and widely used security solution to IoT devices. Where possible vanilla OAuth 2.0 is used, but where the limitations of IoT devices require it, profiles and extensions are provided. =20 Please note that it may take a couple of minutes from the time of submiss= ion until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --------------ms040709030604020402070302 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTIyMjA5MDYzMFowLwYJKoZI hvcNAQkEMSIEILR/5/3yR9tyMD6PruotRigma2zf//tzNw9eUOOYHzZgMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQDDnvik6Vvj0Fo/TDyfrYdylcIy2DHV30S1YIAfvYej V9z7697i+kRhQtQqv8W1XogrY4lljDQ5AL0C6dv5aL1RBab0/JVNpZPfm3s+fETcHDkip/rM Gpmd6ly536VLJEYFOG+6nT6KBkwyOKggOjGycQBjMqBr6n92C1Z2F6tOGJU93vc5wNA3aqiR bIAaiakqU6C6HkdOZsNmpVr+A+bjmm2wLN+bkrFGyvosWmWnv9in+eOtTerN3ZvCTcbSpay1 jE1MqFsUBQiZPap5c1N1gWB/J41g0Tn0WYLrp5bSiZctvNjOZIrgrw4ge9bxGlUTS9Armw48 tVPV6vMYI7oDAAAAAAAA --------------ms040709030604020402070302-- From nobody Wed Dec 23 01:58:22 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B5C01ACE33 for ; Wed, 23 Dec 2015 01:58:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.711 X-Spam-Level: X-Spam-Status: No, score=-0.711 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L26XjK5i9jX2 for ; Wed, 23 Dec 2015 01:58:16 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13F6F1ACE3C for ; Wed, 23 Dec 2015 01:58:15 -0800 (PST) Received: from [192.168.10.142] ([80.92.114.181]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0M2nfO-1aTu7f4Bug-00sfjf for ; Wed, 23 Dec 2015 10:58:14 +0100 From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 To: "Ace@ietf.org" Message-ID: <567A7032.3040604@gmx.net> Date: Wed, 23 Dec 2015 10:58:10 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="FJRmGd1kSIBupgltKS9MFQF2sF8iFWCDI" X-Provags-ID: V03:K0:MVBtKMxRKZdOiziafOwNNn2C+FSqmLixWpuYnnKnbBG7d+ZpaV9 kyiZ+yGo6m+rVSnc3ajpXW4Woe+Aoc3u6efU0zMKmOuvy+3XAT4xApGFiM7HXpVCqk7cSen oJReAgZbY2Af3Q2GeQFdpmVAuRsIm9G6zd4Ud1TYNN3XVQH6U+RpDyL86oIxsNXwGAQSwEP o0ZA4z93Oj5dRS3DQQ3KQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:xvm9h4BM344=:YhXEGeQFhxqFNCpBCkM2iw FAt0nyE5zCVyRhVuf5FDcPJlxFMBRIxAPvqKk8P3lDgHi/6qZfNbSf8fdG9iEehFGLgB4Xj7Q 5tWIQlKc9rpbXRfdXYVZSUoBFYUTZgaHKrg5aCNff11FExr/+w9Z6GKVD+rPor9FlYCcjFjel vsA2fyIhAyK4CbzhAS+SfUOuE0YJMrULoxVB7g8g/Rblt13aEgz31zGtGBNIWQ9hQtd0jdPUu MBNLdSEBycbQbn1stfVBzmEeAEWk0rI/cEFn1xTqxdgFC9AI/YPrUSrQBK4x5HrHbPrB5FxuC eqHflBxe2i7Pu2WveuSSwUF8nwfGmq+jUvHgC9ft/NQLnK++Xakirlt/AVvrExE/0r3E/Ufkw 5GeyAb8VB+m/no88qPZc172u6hzXfZVaGareaqSjTKNE+FlKmYtiNJbKrqkK1PKD6twmINTUR HhW+jNQs9BGiiuT0EFnAg9XHgpJPvRinIlp1SQjzfpsPkyMKa3xxCUjM22grMYJzgHIEOxX3u OM9I7MjYuDQdmYdnoSZXCa1O2g3G5BHzP3hx2XYTDl8zuzFXfPr98nRteJfleAOfSaj0gmmnP 0jIFYuXsdPnUAkFfU3Arp+05WJEPFdV5V6IBCgRrdpdUlic/l+5oEUJJ7BGTTYqZlu5yLLjpr onTj5G1Nvq9wPNm45f8y/UezFBai6pMmlBJP+dcDI/maka4N9sa/X9dtkuW66LSmthUvlH1uT hnv1wOqqVv+pmLHmqpTwSE1m2v4bpvD+rdcjPKycXmBDJfCfBYM+9HfVIkc= Archived-At: Subject: [Ace] OMA LWM2M Tutorial : Slides & Recording X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Dec 2015 09:58:21 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --FJRmGd1kSIBupgltKS9MFQF2sF8iFWCDI Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, as promised we are going to send around the link to the slides and the recording. Here are the links: * Slides: http://www.slideshare.net/HannesTschofenig/device-management-with-oma-lig= htweight-m2m * Recording: https://youtu.be/nEWPSDp4e2M Alternatively, you can also go here: http://www.tschofenig.priv.at/wp/?p=3D1119 At the end of the presentation we mentioned that there is another testfest/interoperability event coming up next month. Here is the link: http://openmobilealliance.org/event/oma-testfest-sandiego/ Ciao Hannes & Simon --FJRmGd1kSIBupgltKS9MFQF2sF8iFWCDI Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJWenAzAAoJEGhJURNOOiAtzh0H/A8gpY68ccUPApMq2ffCraAp 9i8XOR/ShPoY1dembGse6ZaitHnOqCoCiASPztUf9d8yjLVMxtXku50vixcQ4SPS dPUmPuY/RIFfYdjJR6gnPvEI8aWYZ/pT317ZPkZq6tKbGvDsWMGvM1+YzjlYjakL qmJBrM9mq9iOveQvofZq83ijwqElbNXw0hLNnlbMR4Mq7JBcyJC+Oo+vrv/LDyg0 KGPrZ3el3XOvybFCFui3v0lHOCMnRsXMC8Z7ZzuSeZG+n6Oh0SeVY30GLIoedGqc 9owH+d6kCVvAp6oRU6WuutWmH7pmdLotG2V8VGP1Jp8zkqLI2wdV/cJj7KMQZc8= =baBT -----END PGP SIGNATURE----- --FJRmGd1kSIBupgltKS9MFQF2sF8iFWCDI-- From nobody Sat Dec 26 08:34:10 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB9071ACD98 for ; Sat, 26 Dec 2015 08:34:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1IwUMyeSIhgf for ; Sat, 26 Dec 2015 08:34:06 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 698DF1ACD92 for ; Sat, 26 Dec 2015 08:34:04 -0800 (PST) X-AuditID: c1b4fb3a-f79df6d0000013b1-d7-567ec17a4dda Received: from ESESSHC004.ericsson.se (Unknown_Domain [153.88.183.30]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id D4.50.05041.A71CE765; Sat, 26 Dec 2015 17:34:02 +0100 (CET) Received: from nomadiclab.lmf.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.32) with Microsoft SMTP Server id 14.3.248.2; Sat, 26 Dec 2015 17:34:02 +0100 Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 1A2675143D; Sat, 26 Dec 2015 18:35:23 +0200 (EET) Received: from [127.0.0.1] (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 745764E9FC; Sat, 26 Dec 2015 18:35:22 +0200 (EET) References: <20151221183426.14428.78357.idtracker@ietfa.amsl.com> From: Mohit Sethi To: Message-ID: <567EC179.8090709@ericsson.com> Date: Sat, 26 Dec 2015 18:34:01 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <20151221183426.14428.78357.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: ClamAV using ClamSMTP X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrLLMWRmVeSWpSXmKPExsUyM2K7nG7Vwbowg4c/DSy+f+thtji2azGb xc0Zp5gsXrXeYba4t6mRxYHVY828NYweS5b8ZPLYev83o0fvsd9sASxRXDYpqTmZZalF+nYJ XBk9uy+wFfSGVpz9/5CpgfGicxcjJ4eEgInE3Ue/mCBsMYkL99azdTFycQgJHGaUWL7zHQuE s41RYtOzP4wQzlpGiWtrj7FCOPMYJbY9PAPkcHAICzhI/PqiBjJKSMBR4v6mhcwgNpuAnkTn ueNgtoiAkMT1jmVgvcwCixkldpyZxQ6S4BXQljh44ivYHSwCqhKfL11lBpkpKhAhsWhHJkSJ oMTJmU9YQGxOASeJ85evMYGUMAvYSzzYWgYSZgaasmzha2aIb9Qkrp7bxAxxjrrE1o4DjBMY RWYhmTQLoXsWku4FjMyrGEWLU4uLc9ONjPRSizKTi4vz8/TyUks2MQIj5eCW31Y7GA8+dzzE KMDBqMTDu4GpLkyINbGsuDL3EKMEB7OSCK/k39owId6UxMqq1KL8+KLSnNTiQ4zSHCxK4rxH DlSHCQmkJ5akZqemFqQWwWSZODilGhhtP6V9y1nefnb21PB9BQ2v0xWmLzPiT90T1lQuL9Nw +PiqGpeJFTOXzjsSqfCtj2VbafeTGcGG9QrGpydIrDw6wUXsimLCC76mzSUCjEweSftm615X m8/psp/9Lse8VWoHmI4aN/XWrNv1s+jG0x+MV3fUHWpcLMLk0O+w3kGtb4vDl70b1tQpsRRn JBpqMRcVJwIApvkdZ5ACAAA= Archived-At: Cc: erik.wahlstrom@nexusgroup.com, Hannes.Tschofenig@arm.com, Ludwig Seitz , samuel.erdtman@nexusgroup.com, goran.selander@ericsson.com Subject: Re: [Ace] I-D Action: draft-ietf-ace-oauth-authz-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Dec 2015 16:34:08 -0000 Hi Here is my review of the OAuth draft. Comments are listed here=20 section-wise. ---------------------------------------------------------------------- 1. Introduction - Managing authorization of users, services and their devices with the=20 help of dedicated authorization servers (AS) - MS: Managing authorization of users, services and devices with .....=20 (it was not clear who "their" refers to? Do the devices belong to the=20 users or the services?) - In its simplest form the authorization task can be described as=20 granting access to a resource hosted on a device, the resource server (RS= ). - MS: In its simplest form the authorization task can be described as=20 granting access to a requesting client, for a resource hosted on a=20 device, the resource server (RS). - We envision that end consumers and enterprises will want to manage=20 their Internet of Things (IoT) devices in the same style and this desire = will increase with the number of exposed services and capabilities=20 provided by applications hosted on the IoT devices. - MS: We envision that end consumers and enterprises will want to manage = access-control and authorization for their Internet of Things (IoT)=20 devices in the same style. - Also, I am not sure if I understand how this desire would increase the = services and capabilities provided by applications hosted on IoT=20 devices. Perhaps this could be elaborated. ?? - constrained in various ways including processing, memory, code,=20 energy, etc., as - MS: constrained in various ways including processing, memory,=20 code-size, energy, etc., as - with different kinds of constrainedness - MS: with different kinds of constraints - for example to support lower the over-the-wire message size and=20 smaller code size - MS: for example to support smaller over-the-wire message size and=20 smaller code size 3.2 CoAP - Where HTTP uses headers and query-strings to convey additional - MS: While HTTP uses headers and query-strings to convey additional 3.3 Object Security - Whereas OSCOAP integrity protects specific CoAP message meta-data like = request/response code - MS: While OSCOAP integrity protects specific CoAP message meta-data=20 like request/response code 4. Protocol Interactions - For the description in this document we assume that the client has=20 been registered to an AS. Registration means that the two share=20 credentials, configuration parameters and that some form of=20 authorization has taken place. These credentials are used to protect=20 the token request by the client and the transport of access tokens and=20 client information from AS to the client. - MS: To me this fairly complex and needs to be described better. I=20 understand that this document may not standardize how the client=20 discovers and registers to an AS, but there still needs to be some=20 description on how this is done in practice. While currently a client=20 can discover an RS (resource-server) using a resource directory or DNS=20 Service discovery, how does it find out which AS is responsible for the=20 given RS. In the web-world this works rather well with re-directs but I=20 am not sure how this would work in the scenarios described in the draft. = I see a related issue on git as well:=20 https://github.com/LudwigSeitz/ace-oauth/issues/22 - The client may include permissions it seeks to obtain, and=20 information about the type of credentials it wants to use (i.e.,=20 symmetric or asymmetric cryptography). - MS: The client MAY include permissions it seeks to obtain, and=20 information about the type of credentials it wants. - I also think that the text should probably say SHALL/SHOULD instead of = MAY. The client should include the permission it seeks. - Communication security between client and RS may be based on=20 pre-provisioned keys/security contexts or dynamically established to the = RS via the PoP token; and to the client via the client information. - MS: Communication security between client and RS may be based on=20 pre-provisioned keys/security contexts or dynamically established. The=20 RS authenticates the client via the PoP token; and the client=20 authenticates the RS via the client information. - which conveys authorization information to the RS that may be used for = subsequent resource requests, and - MS: which conveys authorization information to the RS that may be used = by the client for subsequent resource requests, and 5.1 Communication Security Protocol - The client and the RS might not have any prior knowledge about each=20 other, therefore the AS needs to help them to establish a security=20 context or at least a key. The AS does this by indicating communication = security protocol ("csp") and additional key parameters in the client=20 information. - MS: How does the client know about AS in the first place? Refers to my = previous comment on how can a client discover the AS? - configured more tightly with additional client information parameters, = like x5c, x5t or x5t#S256. - MS: some explanation on how these parameters can be used would be=20 beneficial. Or a reference to where I can find more information. - To use OSCOAP and OSCON requires security context to be established,=20 which can be provisioned with PoP token and client information - MS: To use OSCOAP and OSCON requires security context to be=20 established, which can be provisioned inside the PoP token and client=20 information - token is larger than 255 bytes it should not be sent as a CoAP option - MS: token is larger than 255 bytes it SHALL NOT be sent as a CoAP optio= n 6.1 Client and Resource Server are Offline - A: The client first generates a public-private key pair used for=20 communication security with the RS. - MS: Does the client generate a new key pair for every RS. Can they be=20 re-used across RS? I assume key generation can be expensive for some=20 devices? - a value the that the temperature sensor identifies itself with. - MS: a value that the temperature sensor identifies itself with. - The client sends the POST request to /token at AS. The request=20 contains the public key of the client and the Audience parameter set to=20 "tempSensorInLivingRoom". - MS: There is no public-key in the request payload of Figure 3? Also=20 some explanation of 'client_id' and 'client_secret' would be useful. I=20 checked the appendix and didn't find enough information on what is the=20 role of client_secret? - MS: Perhaps the role of iat attribute in figure 5 could be explained=20 in text. 6.2 Resource Server Offline - The following example shows interactions between a client (AC control u= nit - MS: AC (access-control) control unit can be confusing. Don't use the=20 acronym. Instead use air-conditioning control unit. - The client then sends the PoP token to the /authz-info resource in the = RS. This is a plain CoAP request, i.e. no DTLS/OSCOAP between client=20 and RS, since the token is integrity protected between AS and RS. - MS: Shouldn't the token also be encrypted? If not, any one on the path = can see the symmetric-key and act on behalf of the real client. 6.3 Token Introspection with an Offline client - and thus defers to respond the client with a status code until step E=20 and only acknowledges on the CoAP message layer indicated with a dashed = line). - MS: Which status code is this? Is it an HTTP status code? CoAP=20 response code? Appendix A: - which has an impact of choice of message format and protocol. - MS: which has an impact on the choice of message format and protocol. - protocols contribute to the communication overhead and can in some=20 cases can be optimized. - MS: protocols contribute to the communication overhead and can in some = cases be optimized. Appendix B: - In case of introspection it may be useful with access tokens which are = not self-contained. - MS: In case of introspection, it may be beneficial to utilize access=20 tokens which are not self-contained. - Also worth mentioning that this allows for more dynamic revocation. General comments: - MS: I like the fact that there can be different deployment scenarios=20 that can be supported with this architecture. But I am wondering if this = can actual lead to unknown security vulnerabilities? When should a AS=20 give short-lived access tokens and when should they be long-lived. Can't = a client always pretend that it will be offline and ask for long-lived=20 tokens. How does the AS check whether a client is really=20 resource-constrained or not? How can a user configure in the AS who can=20 get short-lived tokens and who can get long-lived tokens? - MS: How are the cipher suites negotiated. What happens when the=20 constrained-client and constrained-RS don't speak the same elliptic=20 curve parameters? I see there is a related git issue:=20 https://github.com/LudwigSeitz/ace-oauth/issues/21. /--Mohit On 12/21/2015 08:34 PM, internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts dire= ctories. > This draft is a work item of the Authentication and Authorization for= Constrained Environments Working Group of the IETF. > > Title : Authorization for the Internet of Things usi= ng OAuth 2.0 > Authors : Ludwig Seitz > Goeran Selander > Erik Wahlstroem > Samuel Erdtman > Hannes Tschofenig > Filename : draft-ietf-ace-oauth-authz-00.txt > Pages : 43 > Date : 2015-12-21 > > Abstract: > This memo defines how to use OAuth 2.0 as an authorization framewor= k > with Internet of Things (IoT) deployments, thus bringing a well-kno= wn > and widely used security solution to IoT devices. Where possible > vanilla OAuth 2.0 is used, but where the limitations of IoT devices= > require it, profiles and extensions are provided. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-00 > > > Please note that it may take a couple of minutes from the time of submi= ssion > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Wed Dec 30 13:56:47 2015 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A12B81AD37B for ; Wed, 30 Dec 2015 13:56:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.012 X-Spam-Level: X-Spam-Status: No, score=-0.012 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P1VI2yGesDzT for ; Wed, 30 Dec 2015 13:56:45 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08BDE1AD378 for ; Wed, 30 Dec 2015 13:56:45 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 0CCED2009E for ; Wed, 30 Dec 2015 17:03:35 -0500 (EST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 31C27637A0 for ; Wed, 30 Dec 2015 16:56:44 -0500 (EST) To: ace@ietf.org References: From: Michael Richardson X-Enigmail-Draft-Status: N1110 Message-ID: <5684531C.1090608@sandelman.ca> Date: Wed, 30 Dec 2015 16:56:44 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Icedove/38.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Ace] CBOR Web Token (CWT) spec for the ACE working group X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Dec 2015 21:56:46 -0000 On 12/04/15 22:46, Mike Jones wrote: > After input from many interested people, IETF Security Area Director > Kathleen Moriarty decided > that > the right place for the CBOR Web Token (CWT) work is the ACE working > group . Today Erik > Wahlström posted a new draft of the CBOR Web Token (CWT) specification > that is intended for ACE. Thank you. I read the document today. I hadn't read it before. The appendix is appreciated, the lack of repetition will make be go and dig into references, but that's okay. I wonder if the result after "This is then packaged signed and encrypted using COSE" could also be added to the appendix? in figure 7, I don't think it's useful to show the \x expansion of what is essentially a binary value: bac5b11cad8f99f9c72b05cf4b9e26d244dc189f745228255a219a86d6a09eff # "\xBA\xC5\xB1\x1C\xAD\x8F\x99\xF9\xC7+\x05\xCFK\x9E&\xD2D\xDC\x18\x9FtR(%Z!\x9A\x86\xD6\xA0\x9E\xFF" (and it ruins the formatting...) Perhaps this is automatically done by a tool.